v1.18.4

* SECURITY
  * Provide the ability to set password hash algorithm parameters (#22942) (#22943)
  * Add command to bulk set must-change-password (#22823) (#22928)
* ENHANCEMENTS
  * Use import of OCI structs (#22765) (#22805)
  * Fix color of tertiary button on dark theme (#22739) (#22744)
  * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
* BUGFIXES
  * Notify on container image create (#22806) (#22965)
  * Fix blame view missing lines (#22826) (#22929)
  * Fix incorrect role labels for migrated issues and comments (#22914) (#22923)
  * Fix PR file tree folders no longer collapsing (#22864) (#22872)
  * Escape filename when assemble URL (#22850) (#22871)
  * Fix isAllowed of escapeStreamer (#22814) (#22837)
  * Load issue before accessing index in merge message (#22822) (#22830)
  * Improve trace logging for pulls and processes (#22633) (#22812)
  * Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794)
  * Add default user visibility to cli command "admin user create" (#22750) (#22760)
  * Escape path for the file list (#22741) (#22757)
  * Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721)
  * Add missing close bracket in imagediff (#22710) (#22712)
  * Move code comments to a standalone file and fix the bug when adding a reply to an outdated review appears to not post(#20821) (#22707)
  * Fix line spacing for plaintext previews (#22699) (#22701)
  * Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698)
  * Fix README TOC links (#22577) (#22677)
  * Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658)
  * Improve checkIfPRContentChanged (#22611) (#22644)
  * Prevent duplicate labels when importing more than 99 (#22591) (#22598)
  * Don't return duplicated users who can create org repo (#22560) (#22562)
* BUILD
  * Upgrade golangcilint to v1.51.0 (#22764)
* MISC
  * Use proxy for pull mirror (#22771) (#22772)
  * Use `--index-url` in PyPi description (#22620) (#22636)
-----BEGIN PGP SIGNATURE-----
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=Q+O7
-----END PGP SIGNATURE-----