udpate changelog and readme

Author: shannamurry

CHANGELOG.md

@@ -1,8 +1,26 @@
 ## 7.1.0 (2026-01-15)
 
+##### Security
+
+* Replace deprecated `request` package with `axios` and `form-data` to address critical vulnerability (CVE-2023-28155)
+* Add path traversal protection with URI encoding in resource methods
+
+##### Bug Fixes
+
+* Fix bulk verification endpoints (US and International) to send JSON body format instead of form-encoded data
+* Fix object iteration to use `Object.keys()` instead of `for...in` to avoid prototype chain issues
+
+##### Testing
+
+* Add comprehensive unit test suite with HTTP mocking using `nock` (94 tests)
+* Add integration test suite for live API validation (24 tests)
+* Unit tests no longer require API keys - mocked responses enable offline development
+* Integration tests run separately with `npm run test:integration`
+
 ##### Maintenance
 
-* Replace deprecated `request` package with `axios` and `form-data`
+* Update README with current testing instructions
+* Clean up unreachable error handling code in HTTP client
 
 #### 7.0.1 (2025-11-12)
 

README.md

@@ -146,16 +146,22 @@ To contribute, please see the [CONTRIBUTING.md](https://github.com/lob/lob-node/
 
 ## Testing
 
-To run the tests with coverage:
+To run unit tests with coverage:
 
 ```
-LOB_API_KEY=YOUR_TEST_API_KEY npm test
+npm test
 ```
 
-To run the tests without coverage:
+To run integration tests (requires API keys):
 
 ```
-LOB_API_KEY=YOUR_TEST_API_KEY npm run test-no-cover
+TEST_API_KEY=your_test_key npm run test:integration
+```
+
+Some integration tests require a live API key:
+
+```
+TEST_API_KEY=your_test_key LIVE_API_KEY=your_live_key npm run test:integration
 ```
 
 =======================