Security updates are applied to the main branch.

Please do not open a public issue for security reports.

Send vulnerability reports to in@ever-guild.net with:

• Affected URL, dependency, workflow, or source file.
• Steps to reproduce or a proof of concept.
• Expected impact.
• Any suggested fix, if available.

We will review reports and respond as soon as possible. If the issue is valid, we will coordinate a fix before disclosing details publicly.