v1.25.1

Security patch release: prevent pipeline deployment and undeployment from accessing unrelated filesystem paths.

• Reject empty pipeline names, ., .., absolute paths, and path separators before filesystem changes.
• Validate uploaded file keys, allowing nested files while rejecting absolute paths and traversal.
• Check resolved containment, including symlinks, before writing or deleting persisted pipeline sources.
• Return HTTP 422 for unsafe input and preserve existing data when validation fails.

Includes regression coverage for the absolute-name overwrite payload and symlink escapes. Backports the path validation fix to the 1.x release line.

Fix: PR #272.

Full changelog