v5.0.0

5.0.0 (2026-06-10)

⚠ BREAKING CHANGES

• webssh2.bundle.js and webssh2.css no longer exist; consumers referencing those paths must read the references from client.htm instead. Requires a coordinated webssh2 release.

Features

• adopt content-hashed output filenames for immutable caching (#110) (8025f5f)

Bug Fixes

• deps: move @xterm/addon-search to devDependencies (#115) (#121) (204120a)
• security: CSP readiness for runtime config injection (#125) (4edf679), closes #117
• security: mask credentials in authenticate() debug logging (#120) (2088004), closes #112
• sftp: sanitize download filenames and bound assembler memory (#122) (2e278e5)