- Fixed memory leak when $error parameter is refcounted in patch/merge functions
- Fixed inverted return value in xdiff_file_bpatch() (returned true on failure)
- Fixed missing error checks in xdiff_string_diff/bdiff/rabdiff()
- Fixed potential double-free and size overflow in append_string()
- Fixed unchecked php_stream_read() return in load_mm_file()
- Fixed size truncation: use size_t consistently, add LONG_MAX bounds checks
- Fixed signed/unsigned mismatches in callback functions
- Added PIE support (composer.json)