v1.4.1-rc1

What's Changed

• fix: strip control characters from sanitized filenames by @karthiksuki in #9151
• [SECUR-242] fix(api): scope bulk-asset associate by uploader, not project_id (regression from #9288) by @mguptahub in #9495
• [GIT-243]fix: InstanceConfiguration not created for some keys by @sangeethailango in #9303
• chore: retire departed code owners (apps/live, ox configs) by @mguptahub in #9504
• [INFRA-461] chore: bump nginx to 1.31-alpine in web and admin Dockerfiles by @akshat5302 in #9490
• chore: upgrade Django 4.2 → 5.2 by @sriramveeraghanta in #9325
• fix: resolve open CodeQL security alerts by @sriramveeraghanta in #9505
• fix: resolve React Doctor errors and restore its PR baseline by @sriramveeraghanta in #9488
• [WEB-8477] fix: created_at/updated_at filters return no work items by @mguptahub in #9513
• fix: cast avatar_asset to CharField to resolve mixed type errors in URL concatenation by @Program2113 in #9512
• [WEB-8477] fix(api): filter "Updated At" by updated_at column, not created_at by @mguptahub in #9514
• [WEB-8512] feat: add workspace member reactivation command by @pablohashescobar in #9520
• docs: add Zenith Hosting deploy option by @odpay in #9529
• fix(web): trailing slash on workspace notification list API by @misterkuka in #9521
• fix(api): prevent crash from null member_ids on workspace modules endpoint (was mislabeled as feat) by @codingwolf-at in #9541
• [WEB-8510] fix(web): fix clipped/overlapping LayoutDropDown button in Create View modal by @codingwolf-at in #9542

New Contributors

• @Program2113 made their first contribution in #9512
• @odpay made their first contribution in #9529
• @misterkuka made their first contribution in #9521

Full Changelog: v1.4.0-rc1...v1.4.1-rc1