What's Changed
- fix: prevent command injection via SSH proxy handling in GIT_SSH_COMMAND by @dkarpele in #1910
- fix: bump klauspost/compress to v1.20.2 for CVE-2026-116591 by @chengfang in #1915
- Release 1.3.3 by @dkarpele in #1921
Full Changelog: v1.3.2...v1.3.3