Liveblog 1.12.1

Security

• fix: bind liveblog entry CRUD to the authorised post by @GaryJones in #895 (CWE-639 IDOR)
• fix: bind the post_state write route to the URL post by @GaryJones in #896 (CWE-639 IDOR)
• fix: stop the author autocomplete matching on email by @GaryJones in #897 (CWE-203 information exposure)
• fix: strip nested restricted shortcodes idempotently by @GaryJones in #898 (CWE-94 via CWE-185)
• fix: coerce REST entry content to a string by @GaryJones in #899 (CWE-20)

Maintenance

• npm(deps): bump qs and express by @dependabot in #893
• npm(deps): bump js-cookie from 3.0.5 to 3.0.7 by @dependabot in #892
• Actions(deps): bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the actions group by @dependabot in #891
• npm(deps-dev): bump axios from 1.15.0 to 1.16.1 by @dependabot in #890
• npm(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 by @dependabot in #888
• npm(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot in #887
• npm(deps-dev): bump ip-address from 10.1.0 to 10.2.0 by @dependabot in #885
• npm(deps): bump @lexical/list from 0.43.0 to 0.44.0 by @dependabot in #884
• npm(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in #883
• npm(deps): bump @lexical/rich-text from 0.43.0 to 0.44.0 by @dependabot in #882
• npm(deps): bump @lexical/link from 0.43.0 to 0.44.0 by @dependabot in #881
• npm(deps): bump lexical from 0.43.0 to 0.44.0 by @dependabot in #880
• npm(deps): bump @lexical/react from 0.43.0 to 0.44.0 by @dependabot in #879
• npm(deps): bump @lexical/html from 0.43.0 to 0.44.0 by @dependabot in #878
• npm(deps-dev): bump postcss from 8.5.6 to 8.5.12 by @dependabot in #877