pubv is a CLI invoked by release.sh, never imported, so knip reported it as an unused devDependency on every advisory run. Add a knip config with an ignoreDependencies entry; verified removal of the entry reproduces the report.
