Fixes
- Jemalloc VmPTE growth. Tuned jemalloc configuration to prevent unbounded virtual address space growth when using custom arenas (create/destroy pattern). Added
retain:false,abort_conf:true, and setmuzzy_decay_ms:0, eliminating multi-GB page table overhead. - gRPC authorization bypass CVE. Updated
google.golang.org/grpcfrom v1.78.0 to v1.79.3 to fix an authorization bypass via missing leading slash in:path(GO-2026-4762). - npm dependency security update. Updated
picomatchto fix a high-severity ReDoS and method injection vulnerability.