@casl/ability: v5.4.5

5.4.5 (2026-10-31)

Security Fixes

• adds enforced subject type validation (#1332) (dced9db)
• port proto pollution fix to ability-5.x (#1334) (f529957)

Compatibility note:
Setting __caslSubjectType__ manually now throws an error during authorization. Use the subject() helper to assign subject types. This property name always was an implementation detail and planned to be replaced with a Symbol() in the next major version