# v0.3.7

**Released:** 2026-07-03

Changes since v0.3.6 (`ce64258`..`d8b6735`).

## Security

- **msgpack 1.8.1 -> 1.8.3** (transitive, via bootsnap): DFVULN-839 — use-after-free in `MessagePack::Buffer#clear` enabling cross-buffer disclosure.

## Dependencies

- thruster 0.1.21 -> 0.1.22 (Go 1.26.4 rebuild; excludes already-compressed image types from compression)

## Test Coverage

- 450 Ruby tests, 1,393 JavaScript tests (1,843 total) — unchanged from v0.3.6.