- Patched multiple CVE‑2026 security issues in crypto, DNS, TLS, permission checks, and Brotli handling.
- Updated root certificates to NSS 3.131.1, upgraded OpenSSL to 3.5.9, and refreshed dependencies (c‑ares 1.34.9, timezone 2026e, Undici 7.30.1).
- Enhanced TLS validation: reject non‑canonical IP addresses, fix IP normalization regression, and block chains with prohibited public keys.