b92d3569fd
Two responsibly-disclosed security fixes: - GHSA-88gh-2526-gfrr (@JafarAkhondali) - GHSA-72w5-pf8h-xfp4 (@47Cid) Plus version bump, CHANGELOG, regression tests for both. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>