- Updated Node Docker base image to 22.23.4 (Debian bookworm) fixing a Brotli decoder out‑of‑bounds write (CVE‑2026‑111497) and bumped @rocket.chat/meteor version.
- Applied security hotfixes and fixed permission checks for app slash commands and team member management.
- Bumped core and REST typings dependencies to version 8.5.5.