- Patched multiple security issues (CVE‑2026‑105481, 105482, 106069, 106073, 106074, 111497) including agent data guard, DNS null‑byte validation, TLS IP handling, permission checks, and crypto random cache resets.
- Updated crypto subsystem: refreshed root certificates to NSS 3.131.1, hardened X.509 conversion/formatting, and exposed Brotli decoder error format.
- Upgraded core dependencies: c‑ares 1.34.9, timezone data 2026e, OpenSSL 3.5.9, SQLite 3.53.4, Undici 6.29.1, and applied a Brotli cherry‑pick fix.