release: v1.21.0 (#601)

Author: sonukapoor

CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to CVE Lite CLI will be documented in this file.
 
 ## [Unreleased]
 
+## [1.21.0] - 2026-06-09
+
+### Added
+- Ratcheting mode: `--ratchet` saves current findings as `.cve-lite/baseline.json`; subsequent scans auto-suppress known findings and only report new ones above the baseline
+
+### Docs
+- Dedicated ratcheting mode page at `/docs/ratcheting`
+- MAL- advisory handling and unverifiable private source findings documented in how-remediation-works
+
 ## [1.20.0] - 2026-06-08
 
 ### Added

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "cve-lite-cli",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "description": "Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local lockfiles and OSV",
   "type": "module",
   "bin": {

package.json

@@ -2,7 +2,7 @@ import {themes as prismThemes} from 'prism-react-renderer';
 import type {Config} from '@docusaurus/types';
 import type * as Preset from '@docusaurus/preset-classic';
 
-const latestVersion = 'v1.20.0';
+const latestVersion = 'v1.21.0';
 
 const config: Config = {
   title: 'CVE Lite CLI',