0.3.28 (2026-06-01) 🐛 Bug Fixes controls: scope ISSUE-411 trustedUrls to the curl/wget fetch target (3541e75), closes #214 controls: trustedUrls bare-hostname matching and partial semver false positives (a7975cd)