Security fixes are applied to the latest commit on main.

Please do not open a public issue for a suspected vulnerability. Use the repository's Security → Report a vulnerability flow to start a private GitHub security advisory.

Include the affected file or behavior, reproduction steps, likely impact, and any suggested fix. Reports will be acknowledged through GitHub before public disclosure is coordinated.

Never include real lead records, credentials, tokens, or other private data in a report.