4.0.0-beta.1 (2026-09-19)
⚠ BREAKING CHANGES
-
the HTTP API now listens on 127.0.0.1 by default. Set
apiServerHost to 0.0.0.0 to reach it from another host, ideally with
apiServerTlsCertPath/apiServerTlsKeyPath or a TLS reverse proxy. -
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI 175728472+Copilot@users.noreply.github.com
- test: cover the HTTPS success path; align docs with direct TLS
Copilot review asked for positive-path TLS coverage and for the README to
stop implying a reverse proxy is the only HTTPS option. The test mocks
node:https rather than checking in a PEM key that secret scanners would flag.