chore(main): release 2.13.0

[github-actions]

🤖 I have created a release beep boop

2.13.0 (2026-08-30)

Features

• CheckboxGroup/RadioGroup: support icon in items (#464) (a2d9083)

Bug Fixes

• Countdown: never render NaN or a negative dash length in the ring (#480) (6f0e71e), closes #454
• docs: serve the two discovery endpoints the site advertises (#492) (820f0ef)
• Form,Range: omit method on nested forms, emit a number for one thumb (#509) (7203420)
• InputMenu,InputTags: cap a tag against the field, not at 180px (#470) (1db360a), closes #342
• Link: stop forwarding isAction to the router link (#505) (794c25f)
• Modal,Slideover: render the actions slot when nothing else opens the header (#512) (8c4ef59), closes #87
• module: annotate the runtime plugins so declaration emit succeeds (#510) (05f1e81)
• Range: forward aria attributes to the thumb (#466) (4e42a22)
• theme: colour every focus outline from the design system's focus token (#474) (a72b0cc), closes #191

Docs

• composables,utils: document every published export, and keep it that way (#499) (4e544ac)
• fix broken links and outdated content (#488) (bfaf4df)
• FormField: document the four remaining slots (#496) (4560d54), closes #462
• governance: add CONTRIBUTING.md and the two issue forms (#501) (219e6d7)
• security: add SECURITY.md now that a private channel exists (#503) (cea9be1)

Tests

• ci: gate coverage at the measured baseline (#500) (f288620)
• console-gate: fix two specs the gate caught, and correct what they were (#507) (bf731d8)
• console-gate: the dialog warnings are the harness, not the components (#508) (f4d0852)
• console: fail a test that renders while warning (#506) (0397ea5)
• Form: assert the labelled group linkage, and pin the snapshot rule to a reproduction (#498) (a2d632c)
• harness: mount hand-written wrappers into the document too, and unmount them (#516) (594e199), closes #513
• smoke: boot the built package in a browser (#483) (462fa4e), closes #329 #485

Chore

• deps: update non-major dependencies and tiptap to ^3.30.2 (#482) (5a06163)
• sync: close the ledger's decision vocabulary and guard its shape (#515) (147a8fc)
• sync: reconcile the #509 ledger entries with their merged PR (#511) (72fd8ac)
• sync: reconcile the 9bdb89b0 entry with #502 (#504) (273c418)
• sync: reconcile the 9ef3ee39 entry with #492 (#493) (57f2acc)
• sync: reconcile the a1776153 and dd4bc8e8 entries with #482 (#484) (cbc4ca3)
• sync: reconcile the b751eaef entry with #494 (#495) (287843a)
• sync: reconcile the bb55709f entry with #490 (#491) (b4ba6f1)
• sync: reconcile the c6a756c5 entry with #488 (#489) (04b3776)
• sync: reconcile the last four entries with #464 and #466 (#467) (30b4c1f)
• sync: record the checkbox border-default swap as a no-op (#502) (0e2cb6e)
• sync: record the clientBundle.scan icons doc as a no-op (#490) (95d7304)
• sync: record the tickserv showcase entry as a no-op (#494) (2e45e25)

CI

• release: reject unconfigured commit types and require ports to name upstream (#471) (a673850), closes #437
• release: require a frozen lockfile and an explicit provenance flag (#468) (132d952), closes #91 #98

---

This PR was generated with Release Please. See documentation.