Bump to v1.2.0

Author: jdalton

CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.2.0] - 2025-10-23
+
+### Added
+
+- Added `dlx-package` module for installing and executing npm packages directly
+  - Content-addressed caching using SHA256 hash (like npm's _npx)
+  - Each package spec gets unique directory: `~/.socket/_dlx/<hash>/`
+  - Auto-force for version ranges (^, ~, >, <) to get latest within range
+  - Exact versions use cache, ranges always fetch latest
+  - Cross-platform support with comprehensive tests (30 tests)
+  - Exported via `./dlx-package` entry point
+
+### Changed
+
+- Unified DLX storage under `~/.socket/_dlx/` directory
+  - Binary downloads (dlx-binary) now use `~/.socket/_dlx/` instead of non-existent `~/.socket/cache/dlx/`
+  - Both npm packages and binaries share same parent directory with content-addressed hashing
+  - Clear separation: packages use package spec hash, binaries use URL hash
+
 ## [1.1.2] - 2025-10-23
 
 ### Fixed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "1.1.2",
+  "version": "1.2.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [