- Updated Next.js to 16.4.2, React to 19.3.1, and other packages to fix critical RCE, SSRF, cache‑poisoning, and information‑disclosure vulnerabilities.
- Pinned Docker base image to Node 22.23.4 Alpine (includes latest Node.js security patches) and advised users to rebuild/pull images.
- Raised security floors for many transitive dependencies and added CI checks for fork PRs and Gitleaks scans.