v0.2.6

What's Changed

• chore: expand benchmarks to include plain text endpoints by @RajaSunrise in #227
• 🛡️ [MEDIUM] Migrate from Pybind11 to CFFI by @RajaSunrise in #229
• 🛡️ [LOW] Fix pure-python fallbacks and linting errors by @RajaSunrise in #230
• Fix CI build step for native extension by @RajaSunrise in #235
• 🛡️ [LOW] Fix CI/CD pipeline errors (Bandit & Ruff) by @RajaSunrise in #236
• perf(core): optimize sync routes with pooled Request/Response objects by @RajaSunrise in #237
• 🛡️ [MEDIUM] Fix Information Exposure (CWE-209) in JSON parser by @RajaSunrise in #238
• ⚡ Bolt: Add fast paths for JSON/Text responses by @RajaSunrise in #239
• 🛡️ [ENHANCEMENT] Add defense-in-depth security headers by @RajaSunrise in #240
• 🧪 [testing] add proxy_headers trusted_proxy_count validation test by @RajaSunrise in #241
• 🧪 Add gzip minimum_size edge case tests by @RajaSunrise in #242
• 🧪 test: add empty list handling test for extract_path_parameters by @RajaSunrise in #244
• ⚡ Optimize proxy headers IP traversal by @RajaSunrise in #252
• ⚡ Update: Lazy load Response.headers object to optimize sync handlers by @RajaSunrise in #251
• 🧪 [test] Improve test coverage for xyra/params.py by @RajaSunrise in #249
• 🧪 test: add comprehensive tests for has_control_chars by @RajaSunrise in #250
• 🧪 Add test coverage for empty token fallback in CSRF _mask_token by @RajaSunrise in #248
• 🧪 Add tests and validation for CorsMiddleware max_age parameter by @RajaSunrise in #247
• ⚡ [PERF] Optimize request parameter extraction by @RajaSunrise in #253
• ⚡ Optimize string quoting membership check in response by @RajaSunrise in #243
• 🧹 refactor: deduplicate body size check in response parsing by @RajaSunrise in #254
• chore: Verify RUFF B004 fix already present by @RajaSunrise in #255
• 🔒 Fix insecure CORS policy reflection by @RajaSunrise in #260
• 🔒 Fix subprocess shell injection via untrusted environment variable by @RajaSunrise in #259
• 🧹 Fix duplicated inline import in xyra.request by @RajaSunrise in #258
• 🔒 Fix Path Traversal Vulnerability in Static Files Serving by @RajaSunrise in #257
• Fix get_query parameter handling in Request class by @RajaSunrise in #256
• ⚡ Optimize generate_swagger to utilize cached OpenAPI spec by @RajaSunrise in #245
• ⬆ Bump pytest-cov from 7.0.0 to 7.1.0 by @dependabot[bot] in #232
• ⬆ Bump mkdocs-material from 9.7.3 to 9.7.6 by @dependabot[bot] in #233
• 🧹 Fix unimplemented query cache fallback in xyra/request.py by @RajaSunrise in #261
• ⚡ optimize path validation in static_handler by @RajaSunrise in #262
• 🛡️ [HIGH] Fix DoS vulnerability in ProxyHeadersMiddleware by @RajaSunrise in #263
• 🧹 Remove unnecessary inline import in Request.form by @RajaSunrise in #264
• 🛡️ [LOW] Avoid silent pass and improve error logging in application.py by @RajaSunrise in #265
• 🧪 Test proxy peeling depth protection fallback by @RajaSunrise in #266
• 🛡️ Sentinel: [HIGH] Fix XSS vulnerability in Swagger UI template by @RajaSunrise in #268
• docs: Update README and website with AI note and benchmarks by @RajaSunrise in #270
• 🛡️ Sentinel: [HIGH] Enforce Strict-Transport-Security (HSTS) by default by @RajaSunrise in #271
• fix: fix CI/CD publish wheel issue for cross-platform builds by @RajaSunrise in #272
• fix: Correct CMakeExtension name in setup.py to match cffi output by @RajaSunrise in #273
• Fix Windows CFFI build LNK1181 error by @RajaSunrise in #274
• Fix CFFI Windows build error on CMake libxyra.lib output by @RajaSunrise in #275
• Fix CFFI Windows build error on CMake libxyra.lib output by @RajaSunrise in #276
• build: fix Windows CFFI compilation with vcpkg dependencies by @RajaSunrise in #279

Full Changelog: v0.2.5...v0.2.6