What's Changed
- Update seroval by @jorinvo in #436
- Add no-api-keys flag to disable API Keys by @jorinvo in #435
- Add no-ingest flag by @jorinvo in #437
- Harden PDF generation against SSRF, HTML injection, and JWT leakage by @jorinvo in #438
- Sanitize footerLink scheme and add rel="noopener noreferrer" by @jorinvo in #439
- Harden NATS authentication: require token and check ingest permission by @jorinvo in #440
- Fix SQL injection via block comments bypassing statement splitting by @jorinvo in #441
- Fix path traversal in writeAppFile and getExpectedFilePath by @jorinvo in #442
- Normalize variable names to lowercase for case-insensitive matching by @jorinvo in #443
Full Changelog: v0.26.2...v0.26.3