# v0.8.4

**Released:** 2026-08-08

Changes since v0.8.3 (`f426f2e`..`952fa5a`). Dependency maintenance, including a security patch.

## Security

- **dompurify 3.4.12 -> 3.4.13**: fixes a moderate XSS advisory (an `IN_PLACE` hook removal could leave a detached subtree executable). DOMPurify sanitizes the markdown preview (added in v0.8.1); this keeps that defense current. Flagged by `importmap audit`.

## Dependencies

- aws-sdk-s3 1.228.2 -> 1.229.0
- bootsnap 1.24.6 -> 1.25.0
- docker/login-action v4.5.2 -> v4.6.0 (publish workflow)

## Test Coverage

- 749 Ruby tests, 1,468 JavaScript tests (2,217 total).