From 4527656a069987b4a1963781c71ffbf35c938305 Mon Sep 17 00:00:00 2001
From: "socket-release-bot[bot]"
 <234652667+socket-release-bot[bot]@users.noreply.github.com>
Date: Fri, 31 Jul 2026 04:22:41 +0000
Subject: [PATCH] chore: bump version to 6.5.2

---
 CHANGELOG.md | 15 +++++++++++++++
 package.json |  2 +-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2f30fbe6..0cd488dc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.5.2](https://github.com/SocketDev/socket-lib/releases/tag/v6.5.2) - 2026-07-31
+
+### Fixed
+
+- **`build`** — restore fleet-used npm/meta leaves to the published build
+- **`audit`** — scan untracked consumers and refuse stub-list writes with roster blind spots
+
+### Internal
+
+- **`deps`** — align the sdk-stable alias with the catalog sdk pin
+- **`deps`** — collapse the acorn.wasm alias onto the installed 0.1.1
+- **`deps`** — follow the acorn.wasm rename at the same 0.0.1 lineage
+- **`deps`** — restore the nock 14.0.16 pin-back the loopback guard enforces
+- **`check`** — gate stubbed leaves against fleet usage and the committed stub list
+
 ## [6.5.1](https://github.com/SocketDev/socket-lib/releases/tag/v6.5.1) - 2026-07-29
 
 ### Added
diff --git a/package.json b/package.json
index 03f0a362..93481715 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "6.5.1",
+  "version": "6.5.2",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
     "Socket.dev",