v0.24.12

What's Changed

• Harden install.sh checksum verification and completion handling by @ryanfowler in #730
• Add SECURITY.md for vulnerability reporting by @ryanfowler in #731
• Bump http from 1.4.1 to 1.4.2 by @dependabot[bot] in #733
• Bump prost from 0.14.3 to 0.14.4 by @dependabot[bot] in #732
• Infer POST for body flags when --method is omitted by @ryanfowler in #734
• Clarify forced HTTP version behavior in docs by @ryanfowler in #735
• Reject non-GET WebSocket methods by @ryanfowler in #736
• Document the output model and clarify binary warnings by @ryanfowler in #737
• Clarify HTTP 4xx/5xx exit behavior in docs and help text by @ryanfowler in #738
• Limit compressed SSE auto-retries to safe methods by @ryanfowler in #739
• Warn when -J falls back from Content-Disposition by @ryanfowler in #740
• Respect PAGER, LESS, and NO_PAGER for response paging by @ryanfowler in #741
• Clarify Windows config file search order by @ryanfowler in #742
• Correct silent mode docs to say only errors are shown by @ryanfowler in #743
• Streamline AGENTS.md test guidance by @ryanfowler in #744
• Fix WebSocket spacing and Ctrl-C shutdown behavior by @ryanfowler in #745
• Color descriptor-backed gRPC JSON output by @ryanfowler in #746

Full Changelog: v0.24.11...v0.24.12