You'll notice
A plugin hook module path of exactly two dots is now rejected, closing a traversal edge case.
Module path validation for plugin hooks now also rejects a path that is exactly .., in addition to the existing startsWith('..') and resolve-mismatch checks, closing an edge case in the path-traversal guard.