What's Changed
- Remove unused ws dev-dependency by @GrahamCampbell in #370
- Upgrade to mocha 12.0.0-beta-9.6 by @GrahamCampbell in #371
- Upgrade simon to v22 by @GrahamCampbell in #372
- Harden the AWS SDK v3 auth shim by @GrahamCampbell in #373
- Harden YAML parser unsafe key assignment by @GrahamCampbell in #378
- Standardize temp file random suffixes by @GrahamCampbell in #379
- Fix flaky large zip memory smoke test by @GrahamCampbell in #383
- Add YAML external ref policies by @GrahamCampbell in #382
- Fix YAML file ref policy for missing paths by @GrahamCampbell in #386
- Avoid leaking resolved values in variable syntax errors by @GrahamCampbell in #387
- Document security model by @GrahamCampbell in #388
- Harden plugin npm argv handling by @GrahamCampbell in #390
- Clean up plugin uninstall tests by @GrahamCampbell in #391
- Remove shell from Java and Ruby invoke local by @GrahamCampbell in #392
- Resolve Proxy-backed JS file variable addresses by @GrahamCampbell in #396
- Document scope of Proxy-backed file address resolution by @GrahamCampbell in #399
- Harden JS file address property access by @GrahamCampbell in #400
Full Changelog: v3.75.1...v3.76.0