Release 8.2.0-alpha-001

Author: 64J0

RELEASE_NOTES.md

@@ -1,6 +1,21 @@
 Release Notes
 =============
 
+## 8.2.0-alpha-001 - 2025-11-10
+
+#### Breaking changes
+
+- [Some security fixes for Giraffe](https://github.com/giraffe-fsharp/Giraffe/pull/691) - Credits @Thorium
+    - New handlers added to improve security aspects, like `safeRedirectTo`, `safeRedirectToExt`, `validateCsrfTokenExt` and more. Those deal with:
+        - URL validation in `redirectTo` to prevent cross-site scripting (XSS)
+        - Cross-Site Request Forgery (CSRF) token validation helpers
+    - XML serializer's `Deserialize<'T>(xml: string)` method now uses a configuration to prevent XXE attacks.
+    - `redirectTo` handler now marked as Obsolete.
+
+#### Other updates
+
+- [Could we avoid allocation of UTF8 byte array?](https://github.com/giraffe-fsharp/Giraffe/pull/692) - Credits @Thorium
+
 ## 8.1.0-alpha-001 - 2025-10-25
 
 #### Breaking changes

src/Giraffe/Giraffe.fsproj

@@ -2,7 +2,7 @@
   <PropertyGroup>
     <!-- General -->
     <AssemblyName>Giraffe</AssemblyName>
-    <Version>8.1.0-alpha-001</Version>
+    <Version>8.2.0-alpha-001</Version>
     <Description>A native functional ASP.NET Core web framework for F# developers.</Description>
     <Copyright>Copyright 2020 Dustin Moris Gorski</Copyright>
     <Authors>Dustin Moris Gorski and contributors</Authors>