9.6.0-alpha.4 (2026-03-09) Bug Fixes Stored XSS via file upload of HTML-renderable file types (GHSA-v5hf-f4c3-m5rv) (#10162) (03287cf)