- Updated Go runtime to 1.20.13.
- Disallowed resources named “.” or “..”; rename existing ones before upgrade (breaking change).
- Added login time population for app sessions and blocked account‑reset links for deleted users (security/bugfix improvements).