v0.3.5

Released: 2026-06-20

Changes since v0.3.4 (5b91cf4..0b76b74).

Security

• net-imap 0.6.4 -> 0.6.4.1 (transitive): clears three CVEs added to the advisory DB this week — command injection via non-synchronizing literal in the "raw" argument, command injection via the ID command argument, and DoS via incomplete raw-argument validation.

Dependencies

• aws-sdk-s3 1.225.1 -> 1.226.0
• kamal 2.11.0 -> 2.12.0
• selenium-webdriver 4.44.0 -> 4.45.0
• tailwindcss-rails 4.4.0 -> 4.6.0 (tailwindcss:watch now forwards SIGINT/SIGTERM to the spawned tailwindcss process so Procfile-based runners like foreman stop it cleanly)

Infrastructure

• Bumped actions/checkout v6 -> v7 across all three workflows (ci.yml, docker-publish.yml, version-guard.yml).

Test Coverage

• 450 Ruby tests, 1,393 JavaScript tests (1,843 total) — unchanged from v0.3.4.