On "Datasette 1.0a39 and 0.65.4 security releases"

If you're running Datasette in any environment where untrusted users can query your data, you need to patch immediately—security releases across two version tracks suggest this isn't a minor edge case but a real vulnerability in the core auth or query model. The dual-release strategy also signals the maintainer takes backwards compatibility seriously, which is rare enough to matter when you're deciding whether to trust a tool with sensitive infrastructure. For anyone who deployed Datasette assuming the stable branch was locked down, this is a reality check: even mature tools ship with permission bugs, and you need monitoring in place to catch these notices.