• Fix possible prototype-polluting assignments in local data providers (#11227) (WiXSL)
• Fix duplicate IDs in <FieldToggle> when multiple column pickers are present (#11238) (Yashrajsingh2001)
• Fix incomplete string escaping in escapePath (#11226) (WiXSL)
• Fix <FormDataConsumer> to avoid ReDoS in source detection (#11224) (WiXSL)
• Fix <RichTextField> tag-stripping feature is polynomial and does not strip unfinished tags (#11225) (WiXSL)
• Fix <ArrayInput> shows validation error on mount when mode="onChange" (#11195) (WiXSL)
• Bump follow-redirects from 1.15.11 to 1.16.0 (#11240) (dependabot[bot])
• Bump axios from 1.13.6 to 1.15.0 (#11237) (dependabot[bot])
• Bump vite from 7.3.1 to 7.3.2 (#11234) (dependabot[bot])
• Bump defu from 6.1.4 to 6.1.6 (#11230) (dependabot[bot])
• Bump lodash from 4.17.23 to 4.18.1 (#11229) (dependabot[bot])
• Bump lodash-es from 4.17.23 to 4.18.1 (#11228) (dependabot[bot])
• [chore] Restrict test workflow token permissions (#11223) (WiXSL)