v0.8.4

Security

• Fixes a terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata (CVE-2026-82584, GHSA-cj7w-j579-gc42).

Bug Fixes:

• strip terminal control sequences from hex install confirmation metadata (CVE-2026-82584)
• restore application env exactly after evaluating project config (#400)
• Control rerunning installers for existing packages (#399)
• unbreak mix igniter.upgrade --git-ci, and positional args after flags (#397)
• stop boolean flags consuming the following positional arg
• don't require a package list for igniter.upgrade --git-ci