1.1.1

Security fixes for CLI image downloads, attachment recovery, and browser exports.

• Reject private, loopback, link-local, and other non-public image destinations, including redirects. Connect to validated addresses and keep TLS hostname verification and redirect credential stripping.
• Limit image bytes, download count, elapsed work, browser API data, rows, and ZIP input. Downloads connect directly without proxy settings.
• Validate issue numbers and output paths. Refresh generated images and remove obsolete assets for re-exported items.
• Process attachment recovery in batches of 1,000 pending rows, removing successful rows atomically while retaining failures and unprocessed rows.

Python 3.10 and 3.12 CI, Ruff, Pyright, 13 Python regressions, 6 browser regressions, package builds, and an installed-wheel CLI smoke check passed. Private browser-authenticated attachment recovery was not exercised against a real private repository.

Items absent from the raw input remain in an existing export tree. Use a fresh output directory when sharing only current items; see README for exact budgets and recovery limits.