Security follow-up release for Dependabot and code-scanning remediation after v1.2.0.
Next planned release. Merge PRs to main as they become ready, and cut a release only when the milestone contents are complete.