Release 3.1.1 - #65

Merged

AdityaHirapara merged 11 commits into

Sep 21, 2026

Commits on Aug 7, 2026

fix: pass BrowserStackLocal arguments as discrete argv elements (CWE-88)
07souravkunda
committed
40f1011
test: fix pre-existing unit-test failures (green the suite)

07souravkunda
and
claude
committed
8e24a1b

Commits on Aug 12, 2026

revert: drop the option-key format check
07souravkunda
committed
a18e503

Commits on Aug 26, 2026

ci: harden release workflows (SHA-pin actions, least-privilege token, TLS timestamper)

07souravkunda
and
claude
committed
8b8a6ed
test: regression for chmod shell-metacharacter injection (CWE-78)
07souravkunda
committed
200c4e7

Commits on Sep 21, 2026

bump: version
07souravkunda
committed
9340503
ci: add 7-day Dependabot cooldown to satisfy semgrep p/default

07souravkunda
and
claude
committed
1bee695