3.95.3-beta.0 (2026-07-27) Bug Fixes security: close 5 Trivy alerts — postcss/tar bumps + drop npm from the runtime image (#878) (08be2b8)