v0.22.0

What's Changed

• Prevent malformed metadata from overflowing the stack by @willibrandon in #232
• Contain NuGet package extraction paths by @willibrandon in #233
• Harden Webcil section validation by @willibrandon in #234
• Harden IL operand bounds by @willibrandon in #235
• Resolve MethodSpec tokens in IL output by @willibrandon in #237
• Harden embedded source editor launch by @willibrandon in #238
• Harden single-file bundle manifest parsing by @willibrandon in #239
• Bound embedded debug data decompression by @willibrandon in #240
• Bound compressed ELF section materialization by @willibrandon in #241
• Prevent aborted WebSocket handshakes from exhausting demo sessions by @willibrandon in #242
• Harden demo WebSocket origin and session admission by @willibrandon in #243
• Escape untrusted terminal output by @willibrandon in #244
• Bound DWARF v5 line table parsing by @willibrandon in #245
• Bound WebAssembly vector decoding by @willibrandon in #246
• Harden ELF version record parsing by @willibrandon in #247
• Contain deps.json paths within NuGet packages by @willibrandon in #248
• Harden native image bounds validation by @willibrandon in #249
• Bound NativeFormat metadata traversal by @willibrandon in #252
• Harden ReadyToRun native-format bounds by @willibrandon in #253
• Harden mstat deduplicated method counts by @willibrandon in #254
• Harden MCP and diagnostics boundaries by @willibrandon in #255

Full Changelog: v0.21.0...v0.22.0