3.31.1

Release notes

For more information and the release video check out the full release page

🔒 Security

• Broken Access Control: Unauthorized Execution of Arbitrary Action Classes Across Resources https://github.com/avo-hq/avo/security/advisories/GHSA-qc5p-3mg5-9fh8

🤖 Maintenance

• 🚨 [security] [ruby] Update yard 0.9.39 → 0.9.42 (minor) @depfu (#4425)
• [ruby] Update all Bundler dependencies (2026-04-16) @depfu (#4415)
• 🚨 [security] [js] Update dompurify 3.3.3 → 3.4.0 (minor) @depfu (#4413)
• chore(deps): bump protocol-buffers-schema from 3.6.0 to 3.6.1 in the npmandyarn group across 1 directory @dependabot (#4421)