- Refresh outbound TLS trust to reject compromised eMudhra certificate chains and require an updated CA bundle
- Update SVG sanitizer to 1.1.1 and bump the response cache buster to address security advisories
- No schema or migration changes; upgrade is a drop‑in patch retaining Console 8.7.37