9.6.0-alpha.48 (2026-03-21) Bug Fixes Session update endpoint allows overwriting server-generated session fields (GHSA-jc39-686j-wp6q) (#10263) (ea68fc0)