- Fixed multiple CVEs (2026-100105, 2026-103506, 2026-88858, 2026-88967).
- Added Git Sync hidden‑path ignore and provisioning enhancements (default save from preview, preserve repo root on incremental sync).
- Fixed plugin registration timeout reporting and PR dashboard preview path issues.