- Updated Node Docker base image to 22.23.4 (Debian bookworm) fixing CVE‑2026‑111497 Brotli decoder out‑of‑bounds write.
- Bumped @rocket.chat/meteor version and core/rest typings to 8.6.4.
- Fixed permission checks for app slash commands and team member management.