v1.42.0

What's Changed

• fix(ci): retry the pinned-npm-release check instead of racing the registry by @jpr5 in #431
• chore(deps): update zizmorcore/zizmor-action action to v0.6.4 by @renovate[bot] in #432
• test(ci): drive the npm-verify retry loop on a virtual clock by @jpr5 in #436
• fix(control): validate injected error status/body and unquote multipart boundaries by @Ayush7614 in #434
• fix(validation): reject non-string inputs and out-of-range dimensions with 400 by @Ayush7614 in #433
• test: state the timeout budget for the two workflow suites that execute externally by @jpr5 in #437
• feat(control-api): journal filters, fixtures dump, and runtime chaos control by @Ayush7614 in #435
• docs: add dedicated web search, rerank, and moderation pages by @Ayush7614 in #442
• feat: honor strict mode in moderation, rerank, and search handlers by @Ayush7614 in #440
• fix: return 400 for wrong-typed provider fields instead of 500 by @Ayush7614 in #439
• fix: journal every wrapper response path (vector, a2a, mcp, agui) by @Ayush7614 in #441
• fix: return 400 for non-object JSON bodies instead of 500 by @Ayush7614 in #438
• chore: release v1.42.0 by @jpr5 in #443

Full Changelog: v1.41.0...v1.42.0