v0.3.3

0.3.3 (2026-09-10)

Bug Fixes

• bound secret-key extension matching work (#111) (36e37b5)
• enforce component restrictions for IP URL allow-list entries (#116) (8bd0fab)
• honor strict errors in prompt injection detection (#114) (41f0195)
• mask repeated encoded PII in structured content (#112) (accdd48)
• Match safety identifier endpoints by hostname (#100) (6d837ec)
• preserve conversation evaluation provider configuration (#113) (f20be29)
• Restore type checks and enforce them in CI (#99) (039500e)
• retain masked input in PII example history (#110) (9efd83d)
• use GITHUB_TOKEN for release automation (#115) (c3e4af5)

Chores

• automate releases with release-please (#95) (fbae44a)
• Configure CodeQL scanning (#94) (a0389d9)
• configure Dependabot and allow authorized delivery (#102) (b04de65)
• restrict GitHub Actions permissions (#96) (f51b6cd)
• Run required checks for merge queue groups (#98) (dae01c7)
• update agent assets (7437f47)

Documentation

• add contributor guide (#97) (ec88ba7)
• add package-specific security reporting guidance (#101) (42b99ca)
• update readme, docs, and code comments (741faf9)