v5.4.0 - Human copy pass, security fix, real enterprise contact
Website & Docs
- Rewrote the marketing site copy (
demo/index.html) to read like a founder explaining the product, not AI-generated marketing copy: hero, verification barrier, business value, why-now, business model, pricing, enterprise value, enterprise form, final CTA. - Removed every em dash and leftover buzzword ("paradigm", "mission-critical") from the site copy, and softened an unverifiable "1 business day" enterprise response-time claim.
- README: shrunk the logo from 480px to 120px, added a "Cutting a Release" section documenting the real
scripts/update_version.sh/build_release.sh/verify_release.shflow.
Security
- Bumped
google.golang.org/grpcv1.83.1 -> v1.83.2, closing GHSA-2v4p-qf9q-27wj (CVE-2026-84445, xDS server DoS). Transitive dependency only; this repo does not run an xDS gRPC server.
Fixed
- Enterprise contact fallback now points to a real, monitored address instead of a placeholder inbox.
Full Changelog: v5.3.8...v5.4.0