# v0.3.5

**Released:** 2026-06-20

Changes since v0.3.4 (`5b91cf4`..`0b76b74`).

## Security

- **net-imap 0.6.4 -> 0.6.4.1** (transitive): clears three CVEs added to the advisory DB this week — command injection via non-synchronizing literal in the `"raw"` argument, command injection via the `ID` command argument, and DoS via incomplete raw-argument validation.

## Dependencies

- aws-sdk-s3 1.225.1 -> 1.226.0
- kamal 2.11.0 -> 2.12.0
- selenium-webdriver 4.44.0 -> 4.45.0
- tailwindcss-rails 4.4.0 -> 4.6.0 (`tailwindcss:watch` now forwards SIGINT/SIGTERM to the spawned tailwindcss process so Procfile-based runners like foreman stop it cleanly)

## Infrastructure

- Bumped `actions/checkout` v6 -> v7 across all three workflows (`ci.yml`, `docker-publish.yml`, `version-guard.yml`).

## Test Coverage

- 450 Ruby tests, 1,393 JavaScript tests (1,843 total) — unchanged from v0.3.4.