Security
- Fixed a stored XSS in post previews on the home page and in the moderation queue (#1687). Advisory to follow.
- Security updates for dependencies, including gomarkdown, DOMPurify, golang.org/x/crypto and golang.org/x/net (#1682).
- Now built with Go 1.27, because Go 1.25 no longer gets security fixes (#1686).
Improvements
- Editor upgraded to tiptap v3, with a single markdown engine for editing and display. Tables and task lists are now kept when editing (#1644).
- Search engines now get fully rendered pages; previously, pages showing vote counts failed to render for them (#1685).
- Design System page fix (#1654, thanks @dhinesh20022806).