v0.3.39

What's Changed

• docs: assess micropython-wasm as a build123d sandbox by @pzfreo in #171
• Use canonical Apache-2.0 LICENSE so license is detected by @pzfreo in #177
• Add per-version Python classifiers (3.10-3.12) by @pzfreo in #178
• Keep server.json registry version in sync with the package (#181) by @pzfreo in #190
• fix(resolve): route selector through execute() sandbox (closes #186) by @pzfreo in #191
• fix(security): keep dunder block active under --allow-all-imports (closes #187) by @pzfreo in #192
• fix(server): route state-dependent MCP tools through WorkerSession (closes #179) by @pzfreo in #193
• test(worker): production-boundary coverage guard for session-stateful tools by @pzfreo in #194
• fix(security): route remaining file writers through safe_output_path by @pzfreo in #195
• fix(security): constrain local file reads via safe_input_path by @pzfreo in #196
• chore(lint): adopt ruff format + objective lint gate (Phase 1, #185) by @pzfreo in #197
• fix(render): isolate VTK in subprocess on macOS to prevent window server freeze by @pzfreo in #200
• Revert #200 — VTK subprocess isolation broke macOS render CI by @pzfreo in #201
• feat(security): resource limits for file inputs and raster width (#189) by @pzfreo in #199
• fix(render): fix CI failures from macOS VTK subprocess approach by @pzfreo in #202
• chore: add v0.3.39 CHANGELOG entry by @pzfreo in #204
• chore: note macOS VTK render fix in v0.3.39 CHANGELOG by @pzfreo in #205

Full Changelog: v0.3.38...v0.3.39