- Patch resolves multiple security vulnerabilities (GHSA) such as plugin provenance bypass, unsigned plugin installs, path traversal, and chart extraction directory collapse.
- Fixes bugs in chart handling (dot‑name path bug) and plugin loading (version path traversal, ignored load errors, missing provenance handling).
- Provides updated binaries for all platforms and upgrade instructions; upcoming releases scheduled for April and May 2026.