- Disallow event attribute bindings in host bindings, enforcing stricter security and potentially breaking existing code
- Add an `allowedHosts` option to `renderModule` and `renderApplication` for host‑name restriction
- Forward errors that occur before app serialization to the global ErrorHandler