- Fix for two Fastify security advisories (GHSA‑w2qp‑rph6‑63g4 and GHSA‑3m5p‑2c4r‑xxw2).
- Backported bug fixes: corrected reply.mediaType handling, ensured preClose hook runs once per instance, fixed canonical route URL for hidden‑prefix slash routes, and allowed backport in PR titles.
- Minor CI and test updates.