v1.2.36

• Adds support for Python 3.14 (GIL-enabled builds only)
• Adds support for the US data region
• Prepares Zen for future support of the Middle East and Australia data regions
• Prepares Zen for the rollout of real-time configuration updates
• Adds support for psycopg2 and psycopg2-binary 2.8.6
• Improves SQL injection, NoSQL injection, and path traversal protection when inputs contain invalid UTF-8
• Improves SQL injection protection for user input with leading or trailing whitespace
• Improves path traversal protection when the path and user input use different casing
• Improves NoSQL injection protection when applications combine their own $ operators with user input
• Improves SSRF protection for malformed punycode hostnames
• Improves compatibility with HTTP clients that provide hostnames as bytes
• Fixes requests for openapi.json being incorrectly detected as part of an attack wave
• Fixes bypassed IPs not being fully excluded from Zen inspection and enforcement
• Fixes per-route IP allowlists, user blocking, and rate limiting not applying immediately after a worker starts
• Fixes statistics occasionally being lost during background synchronization
• Fixes Zen failing to start when multiple Gunicorn workers start at the same time
• Fixes outgoing domain ports being reported incorrectly
• Updates regex and wrapt on Python 3.13 and later to versions with security and stability fixes