v0.15.1

Fixes

• remove_ai_metadata is now fail-safe on a truncated / corrupt image. PIL raises OSError decoding a partial file, which crashed the strip on the PNG/WebP re-save path — a direct library caller (e.g. a web worker) would 500 on a partial upload (~0.2% of real uploads are truncated). The strip now probes decodability first and, on failure, copies the input through unchanged rather than raising — it cannot strip what it cannot parse, but it never crashes (mirrors the existing strip_c2pa_boxes fail-safe). The CLI metadata --remove therefore passes an unreadable file through (exit 0); visible, which must decode to remove a mark, still reports a clean error.

Full changelog: v0.15.0...v0.15.1