1.5.2

• fix(security): prevent prototype pollution in INI section/key names
• fix(security): confine relative config names to the config root
• fix: surface reload parse failures to the callback and logs
• doc: document js config format and its code-execution risk