v1.4.0

What's Changed

• Fix sync script again by @tzjames in #119
• Address security vulnerabilities (2026-05-27) by @Kevin-Chant in #120
• Address uuid CVE-2026-41907 by @Kevin-Chant in #121
• Address security vulnerabilities (2026-05-28) by @Kevin-Chant in #122
• Update the workflows to run on lock file changes by @tzjames in #123
• Address security vulnerabilities (2026-06-23) by @Kevin-Chant in #124
• Add process-level crash guards for unhandled Mongo errors by @tzjames in #125
• Address security vulnerabilities (2026-07-22) by @Kevin-Chant in #126
• Switch runtime image to a distroless Docker Hardened Image by @Kevin-Chant in #127
• Add yarn/pnpm compat shim so start:with-tracing still works on the DHI image by @tzjames in #128
• Add .dockerignore to exclude node_modules/dist from build context by @tzjames in #129
• Upgrade JS SDK to 1.7.0, proxy-eval 1.2.0 by @bryce-fitzsimons in #130

Full Changelog: v1.3.5...v1.4.0