Hotfix

A hotfix is a small urgent correction. Urgency does not permit a local rebuild or token-based publication.

Confirm the impact

Reproduce the defect. Identify affected versions and a safe temporary workaround. Decide whether to deprecate a harmful npm version while the fix is prepared.

Make the smallest correction

Create a focused branch from current main. Add a test for the supported behavior. Update user documentation and the changelog when needed.

Run pnpm verify and pnpm release:verify. Open and review a pull request. Do not combine unrelated maintenance.

Release a patch

Use the same certification and trusted publication workflow as a normal release. A change to Lupinum-owned code does not trigger a 24-hour wait.

If the fix needs a dependency published less than 24 hours ago, prefer an older safe version. For a critical fix only, add one exact reviewed exception with a reason and expiry. Remove it after the quarantine period.

Notify users

Publish clear release notes. Update the affected issue or advisory. State the fixed version and any required user action.