- Added per‑client rate limiting to the unauthenticated `sendForgotPasswordEmail` method, aligning it with the REST `users.forgotPassword` endpoint.
- Applied a security hotfix and fixed escaping of special characters in visitor names displayed in the Omnichannel queue preview.
- Updated @rocket.chat/meteor and numerous internal dependencies.