What's Changed
- fix(security): block self-assigned admin role (GHSA-24vc-w334-95wm) by @adubovikov in #920
- chore: bump version to 11.0.308 by @adubovikov in #919
Security: authenticated users can no longer escalate to admin via PATCH /api/v4/users/:id with user_group.
Full Changelog: 11.0.308...11.0.309