Ehundu 0.11.1

Updates symfony/yaml to 8.1.9, which fixes CVE-2026-109413. The unbounded recursion of the inline YAML reader lets a single document bring the process down. The ehundu.phar of 0.11.0 carried 8.0.15 inside: Ehundu's composer.json calculated its composer.lock as if PHP were 8.4.0, and 8.1 asks for 8.4.1 or higher. Now the platform is 8.4.1 and the .phar carries 8.1.9.

Nothing changes in the engine or the format: built from scratch with 0.11.0 and with this one, the twenty-three test sites (PDFs included) give the same files, one by one. The minimum is still PHP 8.4. Whoever installs Ehundu with Composer and PHP 8.4.1 or higher was already receiving 8.1.x; if your project has a composer.lock with 8.0, composer update symfony/yaml.

This version on GitHub (opens in a new tab), with the ehundu.phar.