authorize before before_transaction hooks in bulk actions by @zachdaniel
This fixes the CVE: CVE-2025-48042. See the GHSA-jj4j-x5ww-cwh9 advisory for more.
Bug Fixes:
-
authorize before before_transaction hooks in bulk actions by @zachdaniel
-
special case ci_strings as strings in type casting by @zachdaniel
-
make
Ash.PlugHelpers.set_actor/2typespec accept term as an actor (#2307) by Maciej Malecki