v0.8.5

What's Changed

Features

• Security: Detect leaked GitHub App installation tokens (ghs_) -- covers both the current opaque format and the new stateless JWT format rolling out in May 2026 (#1283)

Refactor

• Edition 2024: Remove redundant ref patterns and into_owned residuals across the workspace (#1289)

Tests

• Replace assert!(matches!()) with assert_matches! (stabilized in Rust 1.96); remove two placeholder assert!(true) tests in facade.rs (#1287)

Docs

• Security: Update authority_url description to reflect CWE-1336 for prompt-injection patterns (#1290)

Chores

• Toolchain: Bump Rust to 1.96.0 (#1286)
• CI: Use ubuntu-24.04-arm runners everywhere (#1277)
• Deps: Bump aptu-coder-core to 0.15.0 (#1278)
• Deps: Update octocrab to 0.51 (#1280)
• Deps: Update non-major dependencies (#1285)
• Deps: Update GitHub Actions (#1279, #1284)

Full changelog: v0.8.4...v0.8.5