v1.11.3

<!-- Release notes generated using configuration in .github/release.yml at v1.11.3 -->

## What's Changed
### 🐛 Bug Fixes
* fix(files): honor AWS fallbacks in Write File by @erichare in https://github.com/langflow-ai/langflow/pull/14446
* fix(api): retry flow updates on sqlite locks by @erichare in https://github.com/langflow-ai/langflow/pull/14447
* fix(frontend): close protocol gaps in markdown sanitize schema (GHSA-7rw4-v4gc-r864 audit) by @erichare in https://github.com/langflow-ai/langflow/pull/14424
* fix(security): block SQL connection target query overrides by @erichare in https://github.com/langflow-ai/langflow/pull/14431
* fix: keep explicitly cleared model selection empty instead of filling cross-provider options[0] by @erichare in https://github.com/langflow-ai/langflow/pull/14465
* fix(security): contain bundle FileInput paths by @erichare in https://github.com/langflow-ai/langflow/pull/14438
* fix(security): skip symlinks in GitExtractor by @erichare in https://github.com/langflow-ai/langflow/pull/14427
* fix(security): reject ambiguous URL authorities by @erichare in https://github.com/langflow-ai/langflow/pull/14430
* fix(security): protect OpenAI model discovery requests by @erichare in https://github.com/langflow-ai/langflow/pull/14435
* fix(security): enforce admin-only component builds by @erichare in https://github.com/langflow-ai/langflow/pull/14436
* fix(security): join repeated X-Forwarded-For lines before taking the last hop by @erichare in https://github.com/langflow-ai/langflow/pull/14425
* fix(security): make S3 file cleanup storage-aware by @erichare in https://github.com/langflow-ai/langflow/pull/14428
* fix(security): contain ChatInput file references by @erichare in https://github.com/langflow-ai/langflow/pull/14434
* fix(mcp): disable HTTP client redirects after one-shot SSRF check by @SashaMIT in https://github.com/langflow-ai/langflow/pull/14474
* fix(lfx): stop reporting tool-mode nodes as breaking by @erichare in https://github.com/langflow-ai/langflow/pull/14481
* fix(lfx): compare template keys directionally in the upgrade checker by @erichare in https://github.com/langflow-ai/langflow/pull/14482
* fix(components): bound Web Search payload size by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/14489
* fix: mend scans should now scan all codebase deps by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/14488
* fix(frontend): add manifest icon files missing from public/ by @erichare in https://github.com/langflow-ai/langflow/pull/14506
* fix(models): normalize Azure AI Foundry project endpoints to the OpenAI-compatible form by @erichare in https://github.com/langflow-ai/langflow/pull/14508
* fix(models): discover live Azure AI Foundry deployments for the model picker by @erichare in https://github.com/langflow-ai/langflow/pull/14509
### Others
* chore: bump release versions to 1.11.3 by @erichare in https://github.com/langflow-ai/langflow/pull/14468
* chore: dep upgrades by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/14490
* chore: address dependency review findings by @erichare in https://github.com/langflow-ai/langflow/pull/14491

## New Contributors
* @SashaMIT made their first contribution in https://github.com/langflow-ai/langflow/pull/14474

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.11.2...v1.11.3