New release on the blog: Wheels 4.0.5 — a hardening release, now installable anywhere. <https://blog.wheels.dev/posts/wheels-4-0-5-released | Read the Announcement> 4.0.4 was a big one (100+ commits) and 4.0.5 makes it installable everywhere — same day, so this one post covers both: • Security — open-redirect hardening,

/wheels/info

no longer leaking

csrfCookieEncryptionSecretKey

or datasource creds, fail-closed dev-UI + reload gates, a new

trustProxyHeaders

setting. • Performance — lock-free `model()`/`controller()` warm path, memoized route lookups, schema-column cache, O(1) dispatch gate. •

wheels deploy

grew up — ~20 Kamal-port fixes: fresh-host boot, all-or-nothing fleet lock, secret redaction, audit trail. • Cross-engine — Adobe CF reload 500s on case-sensitive filesystems fixed, BoxLang null hardening, Oracle/SQL Server identity retrieval. • Install it anywhere — `brew`/`scoop`/`apt`/`dnf`, now including arm64 Linux, install-tested daily. If you grabbed 4.0.4: just upgrade to 4.0.5. Everything in 4.0.4 is in it.