- Introduces versioned server keys with rotation and a project‑wide sign‑out endpoint, plus a realtime policy to block guest subscriptions and per‑connection limits for realtime/MQTT.
- Adds OTP email headers bound to origin, Gitea support in Git connect flow, and updates the self‑hosted Console to 1.2.138 with UI and security improvements.
- Includes extensive security, reliability and bug fixes across auth, databases, storage, functions, sites and VCS; migration V25 required when upgrading from 2.6.2.