2.0.3 (August 7, 2026) SECURITY: Update brace-expansion to address GHSA-rgw5-rvv9-x895 (DoS via unbounded intermediate arrays). [ GH-23786 ] Update fast-uri to address GHSA-7p8r-x3mc-p8w7 (Host Confusion via backslash authority introducer). [ GH-23786 ] Update golang.org/x/text to v0.39.0 to address GO-2026-5970 .