- Fixed several dev‑mode bugs: transition directive HTML escaping, trailing‑slash handling for dynamic endpoints, getCollection empty results, and duplicate ARIA role warnings.
- Added support for Sharp v0.35 (pnpm users no longer need to approve the build script) and upgraded the Rust compiler.
- Hardened forwarded‑header handling by validating X‑Forwarded‑Host against `security.allowedDomains`.