Bump openvibe-shared to 2.5.0 and date the changelog entry (#9)

ddiff --git a/CHANGELOG.md b/CHANGELOG.md
iindex bfe02c4..0082918 100644
---- a/CHANGELOG.md
++++ b/CHANGELOG.md
@@@ -6,6 +6,8 @@ A release is the git tag `vX.Y.Z`; consumers pin the tag's tarball (see README).
  
  ## Unreleased
  
++## 2.5.0 — 2026-10-02
++
  - `seo.feedXml(feed, { format })` takes items as `{ title, link, guid?, description?, content?, author?,
    published, updated? }` and the feed's `language` and `selfUrl`. RSS adds `<language>`, an
    `atom:link rel="self"` and a `lastBuildDate` that is always present. Atom adds
ddiff --git a/package-lock.json b/package-lock.json
iindex 3fd45e0..c478749 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -1,12 +1,12 @@
  {
    "name": "openvibe-shared",
--  "version": "2.4.0",
++  "version": "2.5.0",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
      "": {
        "name": "openvibe-shared",
--      "version": "2.4.0",
++      "version": "2.5.0",
        "license": "MIT",
        "bin": {
          "openvibe-build-assets": "scripts/build-assets.js"
ddiff --git a/package.json b/package.json
iindex 998a32d..bbdb1e6 100644
---- a/package.json
++++ b/package.json
@@@ -1,6 +1,6 @@
  {
    "name": "openvibe-shared",
--  "version": "2.4.0",
++  "version": "2.5.0",
    "description": "Shared navbar, footer, themes, icons, legal pages, SEO, auth and analytics for every OpenVibe site",
    "main": "index.js",
    "bin": {
ddiff --git a/scripts/create-site.js b/scripts/create-site.js
iindex c9578d4..9c9d792 100644
---- a/scripts/create-site.js
++++ b/scripts/create-site.js
@@@ -28,6 +28,13 @@ function main(args) {
          }
      }
      replace(target);
++    // Pin the scaffold to the release that generated it, not to the tag typed in the template: the
++    // template must keep naming a published tag (pin drift checks tracked files before a new tag exists).
++    const version = require(path.join(__dirname, '..', 'package.json')).version;
++    const pkgFile = path.join(target, 'package.json');
++    const pkg = JSON.parse(fs.readFileSync(pkgFile, 'utf8'));
++    pkg.dependencies['openvibe-shared'] = pkg.dependencies['openvibe-shared'].replace(/\/v\d+\.\d+\.\d+$/, `/v${version}`);
++    fs.writeFileSync(pkgFile, JSON.stringify(pkg, null, 2) + '\n');
      console.log(`Created ${target}`);
  }