chore(main): release 4.6.1

[release-please-token-provider]

🦒 A new release is coming up!

4.6.1 (2026-05-20)

Bug Fixes

• add sandbox and CSP to playground preview iframe (#3489) (3bd07b9), closes #3488
• deps: bump form-data from 4.0.0 to 4.0.4 #3458 (8bb6e94)
• deps: bump tar-fs from 2.1.2 to 2.1.3 (#3450) (1cdb54a)
• deps: bump web test runner tools (#3464) (383520c)
• prevent path traversal in playground manifest URL validation (#3487) (d0f7f32)

---

This PR was generated with Release Please. See documentation.

[microsoft-github-policy-service]

Thank you for creating a Pull Request @@release-please-token-provider[bot].

This is a checklist for the PR reviewer(s) to complete before approving and merging this PR:

• I have verified a documentation PR has been linked and is approved (or not applicable)
• I have ran this PR locally and have tested the fix/feature
• I have verified that stories have been added to storybook (or not applicable)
• I have tested existing stories in storybook to verify no regression has occured
• I have tested the solution in at least two browsers (Edge + 1 non-Chromium based browser)