v0.2.5

I was receiving security alerts because of a vulnerability in a transitive dependency, which, I eventually realized, could be removed by disabling an optional feature in the direct dependency. So I've done that.