v0.3.7

Released: 2026-07-03

Changes since v0.3.6 (ce64258..d8b6735).

Security

• msgpack 1.8.1 -> 1.8.3 (transitive, via bootsnap): DFVULN-839 — use-after-free in MessagePack::Buffer#clear enabling cross-buffer disclosure.

Dependencies

• thruster 0.1.21 -> 0.1.22 (Go 1.26.4 rebuild; excludes already-compressed image types from compression)

Test Coverage

• 450 Ruby tests, 1,393 JavaScript tests (1,843 total) — unchanged from v0.3.6.