What's Changed

• Security fixes by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/185
• Security fix by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/186
• security: fix all remaining review findings — HMAC auth, SSRF deny, f… by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/187
• Ml merge by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/188
• security: fix Semgrep temp-dir and current-exe findings (#282, #283, … by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/189
• chore: update extension README, add copyright headers, remove examples by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/190
• 3.9.0 by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/191
• Enhance security features: add detection for various auth tokens and … by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/192
• feat: Add JS route and API endpoint extraction with probing for unaut… by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/193
• fix: inject license context before popup-triggered scanner initializa… by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/194
• 3.9.0 by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/202
• deps: bump regex from 1.12.2 to 1.12.3 by @dependabot[bot] in https://github.com/bountyyfi/lonkero/pull/195
• ci: bump github/codeql-action from 4.32.1 to 4.32.2 by @dependabot[bot] in https://github.com/bountyyfi/lonkero/pull/197
• ci: bump anchore/scan-action from 7.3.1 to 7.3.2 by @dependabot[bot] in https://github.com/bountyyfi/lonkero/pull/199
• feat: Enhance tab navigation handling and improve secrets badge synch… by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/203
• feat: Enhance Next.js vulnerability detection and reporting by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/204
• fix: resolve license key lookup for ML model downloads across all tiers by @bountyyfi in https://github.com/bountyyfi/lonkero/pull/205

Full Changelog: https://github.com/bountyyfi/lonkero/compare/v3.6.5...v3.6.6