v4.0.1

What's Changed

• ci: trigger npm publish on v-prefixed tags by @hustcc with @Copilot in #1076
• docs(site): add illustrated Feishu Bitable setup guide by @Keikeikm in #1077
• refactor: 统一查询方言与本地按需校验 by @yvonneyx in #1078
• feat(site): add bilingual blog and AVA 4.0 articles by @yvonneyx in #1079
• docs(site): refine bilingual Mini Data Agent tutorial by @yvonneyx in #1080
• fix(sqlserver): load mssql through its default export by @EricChan2028 in #1087
• fix: prevent credential leaks on remote file redirects by @EuanTop in #1084
• fix: confine DuckDB file access to loaded sources by @yvonneyx in #1089
• fix(cli): protect HTML exports with owner-only permissions by @yvonneyx in #1090
• feat(cli): accept metadata JSON from stdin by @yvonneyx in #1091
• fix: verify SSH host keys before sending credentials by @yvonneyx in #1088
• feat: unify shared data contracts and organize module types by @yvonneyx in #1092
• fix: avoid sensitive context in AVA-authored errors by @yvonneyx in #1097
• feat(skill): add evidence-backed SQL reports by @yvonneyx in #1096

New Contributors

• @EuanTop made their first contribution in #1084

Full Changelog: v4.0.0...v4.0.1