v0.9.4

## What's Changed
* chore(deps): fix open Dependabot security alerts by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2444
* fix(server): accept only a bare file name for calibration save_cimatrix by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2445
* fix(server): judge IPv6 transition addresses by their embedded IPv4 in the media guard by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2446
* fix(ui): validate chat ids before building chat file paths by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2447
* fix(server): bound decoded GIF frames and audio samples by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2448
* fix(search): share the remote fetch guard with the web search and extraction tools by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2449
* chore(deps): bump candle to e65eb1de and cutile to 0.3.1 by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2450
* fix(quant): restore CUDA builds and inference after the candle bump by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2451
* chore(release): 0.9.4 by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2452
* fix(core): read the CUDA graph instantiate flag through the cudarc 0.19.10 newtype by @EricLBuehler in https://github.com/EricLBuehler/mistral.rs/pull/2454


**Full Changelog**: https://github.com/EricLBuehler/mistral.rs/compare/v0.9.3...v0.9.4