SECURITY RELEASE

This release contains a critical security fix for a path traversal
vulnerability via symbolic links that could allow attackers to access
files outside the project root.

All users should upgrade immediately.

See CHANGELOG.md for details.