4.9.4 (2026-06-06) ⚠️ Broken release — container fails to start. Use 4.9.5 instead. Bug Fixes restrict migrate.php to CLI and admin session (85bba48) secure unauthenticated db restore endpoint with a setup token (85bba48) validate oidc state parameter to prevent csrf login attack (85bba48)