New Stuff

• nvm_resolve_alias: only resolve one line of a multiline alias file
• aliases: skip leading blank lines in alias file

Fixes

• nvm_get_mirror: ensure only a valid URL is allowed
• avoid overridden hash
• install.sh: when NVM_INSTALL_GITHUB_REPO is set, issue a warning (#2868)
• nvm_get_mirror: disallow some non-URL characters
• nvm_get_arch: proper value for alpine linux (#3212)
• nvm_normalize_lts: switch from expr to case

Robustness

• nvm_list_aliases: avoid overwritten sort

Performance

• nvm_check_file_permissions: do not traverse into symlinks

Dockerfile

• Remove apt src disabling, no longer needed (#3199)
• [Fix] add missing leading slash in path (#3195)

Documentation

• [readme] fix level of headings (#3230)
• [readme] add section on bare nvm install (#3221)
• [readme] missing parenthesis (#3215)
• [readme] update M1 to “Apple Silicon” because of M2 and M3; fix typos (#3242)
• [readme] rearrange install args (#3222)
• [readme] reorganize “deeper shell integration” instructions (#1569)
• [security] add prose explaining OpenSSF CII Best Practices badge results
• [security] add threat model

Tests

• temporarily allow cygwin tests to fail
• temporarily allow WSL tests to fail
• ensure windows tests install a node that actually works
• update test mocks (new LTS, iron)
• switch cygwin mirror
• fix filename typo (#3217)