dirsearch v0.5.0

This release includes all user-facing changes since the last published release, v0.4.3.

Runtime and scanning

Python support now targets Python 3.11-3.14, with release builds prepared on Python 3.14.
Async scanning is available as the default runtime on supported Python versions; the legacy threaded stack remains available with --sync.
A Rust native backend is available for supported GET scans and native wordlist generation through --request-backend native and --wordlist-backend native.
Advanced match/filter controls are available for status, size, word count, line count, regex, and elapsed time.
Wildcard and duplicate-result filtering were improved, including redirect-aware duplicate detection and stealth calibration words.
New scan controls include maximum runtime per target, non-default network interfaces, Nmap XML target import, and --disable-cli.
Async pause/stop handling, SSL error classification, proxy handling, streamed response timing, IPv6 handling, and encoded URL edge cases were fixed or improved.

Category-based wordlists are available with --wordlist-categories, including PHP, Python, Java, .NET, Node, ColdFusion, and infrastructure categories.
Template wordlists now support placeholders such as %SUBJECT%, %CRUD_OP%, %AUTH_OP%, %DATE%, %API_VERSION%, %CATEGORY:name%, and %EXT%.
--wordlist-status, --wordlist-max-size, and selectable wordlist backends (auto, python, native) were added.
Bundled discovery data was expanded with new framework paths, WordPress and WooCommerce entries, API/Ollama/OpenAI endpoints, traversal-oriented entries, and updated blacklists.

Multiple output formats can be written from one run.
Report paths and SQL table names can use variables.
MySQL and PostgreSQL reports were added, and DB drivers are now optional extras: dirsearch[mysql], dirsearch[postgresql], and dirsearch[db].
--verbose can show response elapsed time and content type.
A Python API was added with FuzzerConfig, DirsearchFuzzer, structured results, wordlist helpers, and template wordlist support.
python -m dirsearch entrypoint support and packaged install metadata were fixed.

Resumable sessions now use JSON controller state instead of pickle.
--list-sessions and session resume by ID were added.
Session paths are safer across platforms, including Windows-safe timestamps.
Bundled builds store sessions under the user home directory.
Ctrl+C pause/resume behavior was improved across threaded, async, and PyInstaller Linux builds.

Runtime requirements are pinned for supply-chain hardening.
The old dependency installer path was removed.
Optional DB dependencies are explicit extras instead of mandatory runtime dependencies.
XML parsing was hardened with safe XML handling and tests.
Legacy pickle sessions are no longer loaded directly; unsupported pickle sessions now warn.

PyInstaller release builds now cover Windows x64, Linux x64, Linux ARM64, macOS Intel, and macOS Apple Silicon.
Release artifacts are built in three default-stack variants: async, threaded, and native-rust.
Portable CPython archives are provided with compiled dependencies for users affected by PyInstaller antivirus false positives.
Linux x64 Docker images are published to GitHub Container Registry for each release stack.
Nuitka was removed from the release build matrix for this release.
CI, CodeQL, Semgrep, Docker, PyInstaller, and draft-release workflows were refreshed.

The README was split into focused pages under docs/.
Installation, usage, configuration, sessions, wordlist, Python API, build, and native-backend benchmark docs were added or refreshed.
Prompt-injection safety guidance was added for agent workflows.