5.0.0 (2026-04-25)

Bug Fixes

• reject dot-segment path traversals before routing and auth (af5ff57)

• fix!: add '/' separator to glob pattern compilation for resource path matching (1320e4a)

BREAKING CHANGES

• resource path patterns using '' now match exactly one
  path segment. Any resource definition relying on '' crossing '/' must be
  updated to use '**'.