What's Changed
- Fix the Maze preset by allowing
https://api.maze.coinconnect-srcalongside the existinghttps://prompts.maze.co, andhttps://t.maze.coinframe-src, matching Maze's granular CSP guidance. - Preserve
script-src https://snippet.maze.co; no wildcards or unrelated preset permissions are added. Update the exact-output preset snapshot. - Extend the CI matrix to test PHP 8.6 with Laravel 13 (#231).
No API, dependency requirement, or supported-version changes in this patch. Applications with additional CSP headers should ensure those policies also permit the Maze endpoints where intended.
Thanks to @chinmaypurav for the fix in #232.
Full Changelog: 3.31.0...3.31.1