v0.4.0
Security hardening and rename-diff fixes. See CHANGELOG for details.
- Upgrade simple-git past known RCE advisories
- Validate refs/paths from the webview; nonce-based CSP; text-only error rendering
- Fix rename parsing (-z output), renamed files diff old vs new path
- Binary-safe cross-repo discard; commit history capped at 1000