8.6.57 (2026-03-21) Bug Fixes Session update endpoint allows overwriting server-generated session fields (GHSA-jc39-686j-wp6q) (#10264) (26b628c)