Security fixes are provided for the latest published Kotone release.

Please do not disclose a security vulnerability in a public issue. Use GitHub's private vulnerability reporting flow:

https://github.com/l1veIn/kotone/security/advisories/new

Include the affected version, reproduction steps, expected impact, and any suggested mitigation. Reports involving global hotkeys, window focus, text injection, model downloads, archive extraction, or updater/signing behavior are especially useful.