v3.10.1

• Download failures now reject with a DegitError (an Error with code) instead of a plain object.
• Log the name of each environment variable read by search_replace directives.
• Bound search_replace regex execution with a 1s timeout and skip files larger than 10MB.
• Cap HTTP redirects at 5 when downloading archives, require a Location header, and refuse non-HTTPS redirect targets.
• Warn when clone directives nest deeper than 5 levels.
• Fix proxied archive downloads to URLs with a non-default port sending the port inside the hostname field.