v3.1.39

• SSRF taint detection: user input flowing into a request URL is now caught on the check path and audit, host-position-aware so fixed-host/relative/POST-body cases don't false-positive (1 corpus hit, real, zero FPs)
• Minified/generated bundles are skipped for taint analysis (removes a mangled-variable FP class)
• Cross-file taint now catches command injection via imported helpers; audit secret scan skips test fixtures