• [12.x] Stricten upload to be fetch only from request's query string for temporary upload urls by @crynobone in #61145
• [12.x] Improves in validation rule from getting bypass via loose comparison by @crynobone in #61146
• [12.x] Retry timed-out cloud agent long-polls by @kieranbrown in #61178
• [12.x] Escape single quotes in Postgres JSON path attributes by @crynobone in #61192
• [12.x] Promote nested data to top-level managed queue event by @timacdonald in #61225
• [12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @OutlawPlz in #61232