v1.21.11

* SECURITY
  * Use go1.21.9 to include Golang security fix
  * Fix possible renderer security problem (#30136) (#30315)
* BUGFIXES
  * Fix close file in the Upload func (#30262) (#30269)
  * Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
  * Fix missing 0 prefix of GPG key id (#30245) (#30247)
  * Include encoding in signature payload (#30174) (#30181)
  * Move from `max( id )` to `max( index )` for latest commit statuses (#30076) (#30155)
  * Load attachments for code comments (#30124) (#30126)
  * Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120)
  * Fix possible data race on tests (#30093) (#30108)
  * Performance optimization for git push (#30104)
  * Fix duplicate migrated milestones (#30102) (#30105)
  * Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
  * Fix incorrect SVGs (#30087)
  * Fix create commit status (#30225) (#30340)
  * Performance optimization for git push (#30104) (#30354)
  * Fix misuse of unsupported global variables (#30402)
  * Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468)
  * Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408)
  * Change the default maxPerPage for gitbucket (#30392) (#30471)
  * Check the token's owner and repository when registering a runner (#30406) (#30412)
  * Avoid losing token when updating mirror settings (#30429) (#30466)
  * Fix commit status cache which missed target_url (#30426) (#30445)
  * Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
  * Fix mirror error when mirror repo is empty (#30432) (#30467)
  * Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447)
  * Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
* DOCS
  * Update actions variables documents (#30394) (#30405)
* MISC
  * Update katex to 0.16.10 (#30089)
  * Upgrade go-sqlite to v1.14.22 (#30462)
-----BEGIN PGP SIGNATURE-----
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=TxlR
-----END PGP SIGNATURE-----