starlingmonkey: v0.4.0

0.4.0 (2026-10-26)

Features

• Allow resetting of engine at runtime (#337) (e0d58d0)
• crypto: Add support for Ed25519 (#330) (0539a47)
• implement Response.clone() (#312) (5c671dd)

Bug Fixes

• console: console.assert() logs on failure, not on success (#318) (f5a7adc)
• Correct URL finalizer for when the URL is undefined (#336) (fe2c92e)
• crypto: Copy HMAC bytes into a new std::vector, to avoid a use-after-free (#342) (d3d8125)
• crypto: Fix bug in canOnlySignOrVerify logic. Current version checks for sign|verify, but not exclusively those flags (#332) (d7ba2ea)
• crypto: throw DataError, not TypeError, for JWK missing kty (f7d56e1)
• crypto: Throw DataError, not TypeError, for JWK missing kty (#328) (f7d56e1)
• crypto: Treat undefined JWK members as absent, not "undefined" (#333) (7dc6aa9)
• fetch: body.blob() sets Blob.type from Content-Type header (#313) (04721e3)
• Fix CryptoKeyUsages::isSuperSetOf (#347) (ab43f2c)
• form-data: preserve leading BOM in multipart text parts (#317) (17c0e12)
• handle any sequence in AbortSignal (#310) (f74fb25)
• Make boundary parameter of multi-part form data requests safe for use in Content-Type headers (#335) (a46051a)
• url: validate name in URLSearchParams.append() (#320) (fb47e0e)