July 31, 2026

Versions included: v12.9.1

Fixes

• Sign-in sessions that end when they say they do — sessions now stay anchored to the expiry set when you first signed in. Previously, if your browser lost its sign-in cookie while the server still recognized you, we issued a brand-new full-length session, so the window kept sliding forward and the original limit was never really enforced.
• Staying signed in day to day feels the same — we shortened the sign-in cookie's life to three days, kept deliberately shorter than the identity provider's inactivity window, so your next visit re-authenticates quietly instead of asking you for credentials again.