What's Changed
- security(raw): shared header-scan budget for tagged previews, tile-sized lossy JPEG budget, bound deflate tile padding by @dylanmtaylor in #3695
- security: O(width) box-blur priming, case-insensitive download names, stats walk skips directory links by @dylanmtaylor in #3729
- security(engine): read user-named files through the opened regular file under a byte cap by @dylanmtaylor in #3703
- Release: LightCraft v0.21.0 on main by @FredApps in #4153
- security: mask.exportEffects refuses originals and sidecars, writes atomically by @dylanmtaylor in #4125
- CI: nightly release dry run by @FredApps in #4154
- Use craft-tiff from craft-libs for TIFF/IFD by @dylanmtaylor in #4088
- Fix Flatpak updates and bump to 0.21.1 by @dylanmtaylor in #4151
Full Changelog: v0.21.0...v0.21.1