- Enforce temporary upload URLs to be fetched only via query string, tightening security
- Fix validation rule bypass by correcting loose comparisons in validation logic
- Various bug fixes: retry timed‑out cloud agent polls, escape single quotes in PostgreSQL JSON paths, promote nested queue event data, and avoid quadratic wildcard rule expansion