0.9.0

Added

• TypeRef.listOf, setOf, optionalOf, mapOf and parameterized build a
  parameterized type reference from the references of its arguments, so generic
  code can create a Codec<List<O>> or Codec<Envelope<O>> from a caller's
  TypeRef<O>. A built reference equals the same type captured by an anonymous
  subclass. parameterized takes the class as Class<? super T>, so the
  compiler rejects a class that is not the declared type's; a class with no type
  parameters, a wrong argument count and primitive arguments are rejected at
  construction. The argument list against the declared type's own arguments is
  the caller's to get right

Changed

• codec-spring-boot-starter now brings codec-versioned along with
  codec-core, codec-transforms and codec-autoconfigure: the module has
  no dependencies of its own, and versioned storage is part of the toolkit the
  starter promises

Fixed

• codec-kafka no longer resolves the lz4-java 1.10.1 and zstd-jni 1.5.6 that
  kafka-clients declares: the parent now manages both at the versions codec
  ships (1.11.2 and 1.5.7), which closes GHSA-xx22-p4ch-683r (CVE-2026-59949, a
  JVM crash in lz4-java's native XXHash on invalid array ranges) on that path