v0.6.0

What's Changed

Features

• feat(web-api): resolve names in the browser through a relay that keeps the bot token on your server by @nkootstra in #211
• feat(relay): accept a bearer token, and refuse cross-site form posts by @nkootstra in #217

Fixes

• fix(web-api): render channel and user group mentions with a single # or @ by @nkootstra in #210
• fix(links): drop javascript: and other unsafe URLs from payload links and buttons by @nkootstra in #214

Full Changelog: v0.5.2...v0.6.0