chore(main): release 4.2.0 (#1676)

Author: googlemaps-bot

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "4.1.1"
+    ".": "4.2.0"
 }

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [4.2.0](https://github.com/googlemaps/android-maps-utils/compare/v4.1.1...v4.2.0) (2026-04-22)
+
+
+### Features
+
+* KML URL Sanitizer API ([#1678](https://github.com/googlemaps/android-maps-utils/issues/1678)) ([43855e9](https://github.com/googlemaps/android-maps-utils/commit/43855e9128157959a00fe8797d19b8340b18534e))
+
+
+### Bug Fixes
+
+* disable XML external entities in KML parser ([#1673](https://github.com/googlemaps/android-maps-utils/issues/1673)) ([4516be3](https://github.com/googlemaps/android-maps-utils/commit/4516be350af570b466adf71cf2521ec4ac1a3f58))
+* KMZ zip bomb mitigation by adding entry and size limits ([#1677](https://github.com/googlemaps/android-maps-utils/issues/1677)) ([bae3455](https://github.com/googlemaps/android-maps-utils/commit/bae3455ebe5b1fde99a6bbe37348f5bfef62a429))
+* prevent NPE in LatLngBounds.contains by adding null checks for positions ([#1675](https://github.com/googlemaps/android-maps-utils/issues/1675)) ([6b5a2d3](https://github.com/googlemaps/android-maps-utils/commit/6b5a2d32ebb8b4b43db5fa0152e2ca4f7cea73e0))
+* restrict KML image downloads to http/https schemes ([#1674](https://github.com/googlemaps/android-maps-utils/issues/1674)) ([898ae8f](https://github.com/googlemaps/android-maps-utils/commit/898ae8f2c754988e55ced509c6cd2b8bd09414ec))
+
 ## [4.1.1](https://github.com/googlemaps/android-maps-utils/compare/v4.1.0...v4.1.1) (2026-03-11)
 
 

build.gradle.kts

@@ -45,6 +45,6 @@ tasks.register<Exec>("installAndLaunch") {
 allprojects {
     group = "com.google.maps.android"
     // {x-release-please-start-version}
-    version = "4.1.1"
+    version = "4.2.0"
     // {x-release-please-end}
 }