v0.8.4

Released: 2026-08-08

Changes since v0.8.3 (f426f2e..952fa5a). Dependency maintenance, including a security patch.

Security

• dompurify 3.4.12 -> 3.4.13: fixes a moderate XSS advisory (an IN_PLACE hook removal could leave a detached subtree executable). DOMPurify sanitizes the markdown preview (added in v0.8.1); this keeps that defense current. Flagged by importmap audit.

Dependencies

• aws-sdk-s3 1.228.2 -> 1.229.0
• bootsnap 1.24.6 -> 1.25.0
• docker/login-action v4.5.2 -> v4.6.0 (publish workflow)

Test Coverage

• 749 Ruby tests, 1,468 JavaScript tests (2,217 total).