Upstream highlights (17 commits, DocuSeal 3.0.1): - convert images on upload (JPEG for opaque images, PNG for alpha) - security headers - handle dangerous file extensions - isolate editor nodes - gem updates - image autorotation fix WaboSign conflict resolutions: - Kept per-account branded_product_name() calls throughout PDF generation - Took upstream's smarter image format selection (JPEG/PNG based on alpha) - Kept deleted SaaS-only controllers (newsletters, enquiries, console_redirect) - Kept deleted docs/api/ (intentionally removed in WaboSign 1.0.0) - Took upstream convert-upload custom element for template upload button - Removed vendor/bundle (upstream added in 3.0.1; fork excludes /vendor) - Applied encoding-error fix to bin/rebrand-sync Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>