v0.1.0-alpha.253

What's Changed

• fix(migration): WP1 — close nested and CDATA-content-model XSS bypasses in HtmlSanitizeProcessor (security) by @jonesrussell in #1877
• fix(migration): WP2 — clamp non-monotonic wall clock so a committed run cannot crash on RunReport (timing flake) by @jonesrussell in #1878

Full Changelog: v0.1.0-alpha.252...v0.1.0-alpha.253