8.6.28 (2026-03-09) Bug Fixes SQL injection via dot-notation field name in PostgreSQL (GHSA-qpr4-jrj4-6f27) (#10160) (83f38fa)