Changelog (v5.4.55...v5.4.56)
- security #GHSA-hqp2-7rr8-hf26 Ignore undeclared property paths when denormalizing (@nicolas-grekas)
- security #GHSA-pxj9-jh84-vhm5 Lowercase the scheme of data URIs before opening them (@nicolas-grekas)
- security #cve-2026-118515 Don't build UploadedFile and other file objects from denormalized data (@nicolas-grekas)
[SECURITY] Security release