v0.34.0_8

docs/API.md

@@ -21,7 +21,7 @@ additional requests receive 429. Ambiguous duplicate control headers and
 request bodies are rejected. See
 [CACHE](CACHE.md#http-ban--purge-from-authorized-client-ips) for request examples,
 scoping, confirmation and reverse-proxy requirements, and
-[0.31.0 security review](SECURITY_AUDIT_0.31.0.md) for audit findings. The authenticated
+[security review](SECURITY_AUDIT.md) for audit findings. The authenticated
 `/api/cache/invalidate` endpoint remains unchanged.
 
 ## Browser documentation and anonymous surface