25.7.0 (2026-10-05)

Changed

• Limit proxy request bodies to 16 MiB by default (--max-body-bytes overrides)
• Return HTTP 504 if the proxy upstream does not start responding within
  120 seconds (--upstream-timeout overrides)

Fixed

• Protect secrets in module inspection and proxy diagnostics, and make new
  module configuration files and proxy body logs private on Unix
• Preserve local identity when repairing keyring state
• Prevent configuration loss when saving module settings or installing proxy
  integrations, and reject unsafe module configuration names
• Install and upgrade to the exact module version selected by the CLI
• Preserve all --jq results and report filter errors in source commands
• Reject invalid --jev inputs and responses, and time out stalled requests
• Preserve whitespace in module configuration values and report unreadable
  settings instead of treating them as unset
• Allow help, version, and license output without accessing the system keyring
• Let active proxy responses finish before exiting on Ctrl-C or SIGTERM
• Avoid crashes when displaying current or future snapshot timestamps
• Fix proxy connections using IPv6 addresses or URL-encoded credentials
• Fix external command help routing and support non-UTF-8 arguments
• Escape special characters in module JSONL output
• Fix Windows proxy environment setup commands