0.0.18

Fixed

• A signed incoming webhook whose body is not a JSON object now gets a 422 instead of a 500, and an empty body a 422 instead of a 400; every payload rejection uses the standard detail list — see Error Handling.

Security

• Request bodies over 1 MiB are now refused with 413 before they are read, on every endpoint except file uploads; see https://carvos.carv.com/docs/webhooks/sending/#error-handling.