What's Changed
- Foundational improvements to v4 by @JonPurvis in #539
- Feature | v4 - Add opt in to base url overrides by @JonPurvis in #542
- Fixed CVE-2026-33942 - Insecure deserialisation in AccessTokenAuthenticator (object injection / RCE)
- Fixed CVE-2026-33182 - Absolute URL in endpoint overrides base URL (SSRF / credential leakage)
- Fixed CVE-2026-33183 - Fixture name path traversal (out-of-bounds file read/write)
Full Changelog: v3.15.0...v4.0.0