Ash v3.5.39 released!

[NewsBot]

Ash v3.5.39 has been released.

authorize before before_transaction hooks in bulk actions by @zachdaniel

This fixes the CVE: CVE-2025-48042. See the GHSA-jj4j-x5ww-cwh9 advisory for more.

Bug Fixes:

• authorize before before_transaction hooks in bulk actions by @zachdaniel

• special case ci_strings as strings in type casting by @zachdaniel

• make Ash.PlugHelpers.set_actor/2 typespec accept term as an actor (#2307) by Maciej Malecki

Link: Release v3.5.39 · ash-project/ash · GitHub