What's Changed
- Remove cachedir by @GrahamCampbell in #367
- Remove require-from-string by @GrahamCampbell in #368
- Remove object-hash by @GrahamCampbell in #369
- Remove unused ws dev-dependency by @GrahamCampbell in #370
- Upgrade to mocha 12.0.0-beta-9.6 by @GrahamCampbell in #371
- Upgrade simon to v22 by @GrahamCampbell in #372
- Harden the AWS SDK v3 auth shim by @GrahamCampbell in #373
- Document AWS credential and request behavior changes by @GrahamCampbell in #374
- Guard removed AWS SDK v2 surfaces and improve error reporting by @GrahamCampbell in #375
- Improve AWS transport resilience by @GrahamCampbell in #376
- Document proxy configuration and transport corrections by @GrahamCampbell in #377
- Harden YAML parser unsafe key assignment by @GrahamCampbell in #378
- Standardize temp file random suffixes by @GrahamCampbell in #379
- Document proxy support in the compose guide by @GrahamCampbell in #380
- Align AWS SDK dependency floors by @GrahamCampbell in #381
- Fix flaky large zip memory smoke test by @GrahamCampbell in #383
- Add YAML external ref policies by @GrahamCampbell in #382
- Fix YAML file ref policy for missing paths by @GrahamCampbell in #386
- Make YAML external refs safe by default by @GrahamCampbell in #385
- Avoid leaking resolved values in variable syntax errors by @GrahamCampbell in #387
- Document security model by @GrahamCampbell in #388
- Validate layer paths by @GrahamCampbell in #389
- Harden plugin npm argv handling by @GrahamCampbell in #390
- Clean up plugin uninstall tests by @GrahamCampbell in #391
- Fix plugin install test fixture by @GrahamCampbell in #393
- Remove shell from Java and Ruby invoke local by @GrahamCampbell in #392
- Harden runtime spawn policy by @GrahamCampbell in #394
- Resolve Proxy-backed JS file variable addresses by @GrahamCampbell in #396
- Harden plugin spec handling by @GrahamCampbell in #395
- Flesh out the upgrading guide a little more by @GrahamCampbell in #397
- Skip invalid plugins entries for help and plugin commands by @GrahamCampbell in #398
- Document scope of Proxy-backed file address resolution by @GrahamCampbell in #399
- Fix plugin name example in the upgrading guide by @GrahamCampbell in #401
- Harden JS file address property access by @GrahamCampbell in #400
- Resolve Proxy-backed addresses in configuration property traversal by @GrahamCampbell in #402
- Set placeholder dev version by @GrahamCampbell in #403
Full Changelog: v4.0.0-beta.1...v4.0.0-beta.2