4.3.3

Added

• Add rollbackable column to node:builds:list to surface which builds are still eligible for rollback (#2903)
• Add site_admin role (#2878, #2895)
• Automatically refresh session tokens that expire during long-running command execution (#2900)

Fixed

• Guard against null labels in Commit::serialize(), preventing env:code-log from crashing on eVCS sites (#2911)
• Write composer audit.block-insecure directly to composer.json so plugin installs no longer fail when a pinned dependency has an open security advisory (#2891)
• Fix documentation typos and clarify command help text (#2901, #2910)