v0.3.21
Security hardening patch release.
Includes fixes for:
- PAGER allowlist bypass via path-based executable overrides
- remaining unsafe terminal output paths in issue and webhook rendering
- uncapped concurrent webhook listener connections
Assets in this manual release were built locally.