v3.1.6
⚠️ Security Warning
This release addresses the following high-severity security advisories:
- GHSA-5jgf-p345-68v8 — host confusion via skipped IDN canonicalization on scheme-relative references
- GHSA-fph4-wmhf-6fwf — server-side request forgery via repeated hostname percent-decoding
- GHSA-f65p-4m7j-42xc — server-side request forgery via malformed IPv6 normalization
- GHSA-jqff-g426-hqxp — host confusion via percent-encoded scheme normalization
Users of the v3.x release line should upgrade to v3.1.6.
Full Changelog: v3.1.5...v3.1.6