YunCMS 0.1.46

Trusted endpoint extensions can opt into handling their own CORS preflight with customCors: true. The native Studio, authentication and Items CORS policy remains the default. This fixes foreign-site JSON messaging and SSE for endpoints that already validate their permitted origins (issue #98).

The release also updates Nodemailer to 10.1.4, Zod to 4.6.6 and locks body-parser 2.4.0 for the published security advisories. Actual-function regressions preserve the mail-recipient and oversized-array cases. Package, real MySQL/API, Chromium, exact npm consumer and both OCI platform acceptance are recorded in the attached report. AMD64 was emulated on ARM64. Issue #90 was closed following owner review of v0.1.44; its historical third-party findings remain documented. These samples qualify only the declared provider configuration.

No consumer tenant is automatically changed by this YunCMS publication. See release-acceptance.json for exact source, artifact digests, executed counts and limits.

Metadata correction: the initial report carried a stale OPEN status for #90. It now links the owner closure; source, npm artifacts, OCI bytes and executed results are unchanged.