0.8.0

Security

• Harden validate defaults for remote $ref resolution #270

Backward incompatibilities

• By default, validate uses a local-only empty registry to avoid implicit remote $ref retrieval. To resolve external references, pass an explicit registry. Set allow_remote_references=True only if you explicitly accept jsonschema's default remote retrieval behavior.