9.7.0-alpha.10 (2026-03-27) Bug Fixes GraphQL API endpoint ignores CORS origin restriction (GHSA-q3p6-g7c4-829c) (#10334) (4dd0d3d)