v4.13.1

What's Changed

• chore(deps): bump tar from 7.4.3 to 7.5.9 by @dependabot[bot] in #953
• chore(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 by @dependabot[bot] in #952
• chore(deps): bump qs to ^6.14.2 by @brendan-kellam in #954
• chore(deps): bump @aws-sdk/credential-providers to ^3.1000.0 by @brendan-kellam in #955
• chore(deps): bump minimatch to ^3.1.3 by @brendan-kellam in #957
• chore(deps): bump rollup to ^4.59.0 by @brendan-kellam in #956
• chore(deps): bump @modelcontextprotocol/sdk from 1.10.2 to 1.26.0 by @dependabot[bot] in #958
• chore(deps): bump nodemailer from 6.10.0 to 7.0.11 by @dependabot[bot] in #959
• chore(deps): bump next from 15.5.9 to 15.5.10 in /packages/web by @dependabot[bot] in #960
• chore(deps): bump @react-email/preview-server to 5.2.8 by @brendan-kellam in #961
• chore(deps): bump glob to ^10.5.0 via scoped resolutions by @brendan-kellam in #962
• revert: remove global minimatch resolution that broke glob@10/11 by @brendan-kellam in #963
• chore(mcp): upgrade zod to v4 to fix tsc OOM during build by @brendan-kellam in #964
• fix(web): validate git ref and file path inputs by @brendan-kellam in #965

Full Changelog: v4.13.0...v4.13.1