Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#12360 by rtribotte)
• [plugins] Validate plugin module name (#12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#12296 by kevinpollet)

Documentation:

• Update SECURITY.md to streamline information (#12310 by emilevauge)
• Update SECURITY.md (#12304 by cwayne18)