| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-04-21 | 868 Bytes | |
| v2.9.1 source code.tar.gz | 2026-04-21 | 39.5 MB | |
| v2.9.1 source code.zip | 2026-04-21 | 40.4 MB | |
| Totals: 3 Items | 80.0 MB | 0 | |
CI-only patch release. No source or API changes.
Fixed
-
Go toolchain bumped to 1.25.9 in the
go.moddirective sogovulncheckin CI clears stdlib fixes:GO-2026-4865(html/template XSS) and the crypto/tls + net/http advisories that shipped in 1.25.9. (#40) -
CodeQL matrix narrowed to the languages this repo actually ships (
actions,go,javascript-typescript,python,java-kotlin). The default code-scanning setup was auto-detecting csharp / ruby / rust / c-cpp from generated fragments and producing low-quality-analysis warnings on every PR. Paired with acodeql-config.ymlthat pulls thesecurity-extendedquery pack and skipsnode_modules,dist, generated protobuf sources, and example code. (#41)
Consumers
Downstream cordum users pinned at v2.9.0 can bump to v2.9.1 at their convenience — no API surface changes.