v4.0.0-beta.2

What's Changed

• Remove cachedir by @GrahamCampbell in #367
• Remove require-from-string by @GrahamCampbell in #368
• Remove object-hash by @GrahamCampbell in #369
• Remove unused ws dev-dependency by @GrahamCampbell in #370
• Upgrade to mocha 12.0.0-beta-9.6 by @GrahamCampbell in #371
• Upgrade simon to v22 by @GrahamCampbell in #372
• Harden the AWS SDK v3 auth shim by @GrahamCampbell in #373
• Document AWS credential and request behavior changes by @GrahamCampbell in #374
• Guard removed AWS SDK v2 surfaces and improve error reporting by @GrahamCampbell in #375
• Improve AWS transport resilience by @GrahamCampbell in #376
• Document proxy configuration and transport corrections by @GrahamCampbell in #377
• Harden YAML parser unsafe key assignment by @GrahamCampbell in #378
• Standardize temp file random suffixes by @GrahamCampbell in #379
• Document proxy support in the compose guide by @GrahamCampbell in #380
• Align AWS SDK dependency floors by @GrahamCampbell in #381
• Fix flaky large zip memory smoke test by @GrahamCampbell in #383
• Add YAML external ref policies by @GrahamCampbell in #382
• Fix YAML file ref policy for missing paths by @GrahamCampbell in #386
• Make YAML external refs safe by default by @GrahamCampbell in #385
• Avoid leaking resolved values in variable syntax errors by @GrahamCampbell in #387
• Document security model by @GrahamCampbell in #388
• Validate layer paths by @GrahamCampbell in #389
• Harden plugin npm argv handling by @GrahamCampbell in #390
• Clean up plugin uninstall tests by @GrahamCampbell in #391
• Fix plugin install test fixture by @GrahamCampbell in #393
• Remove shell from Java and Ruby invoke local by @GrahamCampbell in #392
• Harden runtime spawn policy by @GrahamCampbell in #394
• Resolve Proxy-backed JS file variable addresses by @GrahamCampbell in #396
• Harden plugin spec handling by @GrahamCampbell in #395
• Flesh out the upgrading guide a little more by @GrahamCampbell in #397
• Skip invalid plugins entries for help and plugin commands by @GrahamCampbell in #398
• Document scope of Proxy-backed file address resolution by @GrahamCampbell in #399
• Fix plugin name example in the upgrading guide by @GrahamCampbell in #401
• Harden JS file address property access by @GrahamCampbell in #400
• Resolve Proxy-backed addresses in configuration property traversal by @GrahamCampbell in #402
• Set placeholder dev version by @GrahamCampbell in #403

Full Changelog: v4.0.0-beta.1...v4.0.0-beta.2