* SECURITY

  * Update github.com/cloudflare/circl (#28789) (#28790)
  * Require token for GET subscription endpoint (#28765) (#28768)
* BUGFIXES
  * Use refname:strip-2 instead of refname:short when syncing tags (#28797) (#28811)
  * Fix links in issue card (#28806) (#28807)
  * Fix nil pointer panic when exec some gitea cli command (#28791) (#28795)
  * Require token for GET subscription endpoint (#28765) (#28778)
  * Fix button size in "attached header right" (#28770) (#28774)
  * Fix `convert.ToTeams` on empty input (#28426) (#28767)
  * Hide code related setting options in repository when code unit is disabled (#28631) (#28749)
  * Fix incorrect URL for "Reference in New Issue" (#28716) (#28723)
  * Fix panic when parsing empty pgsql host (#28708) (#28709)
  * Upgrade xorm to new version which supported update join for all supported databases (#28590) (#28668)
  * Fix alpine package files are not rebuilt (#28638) (#28665)
  * Avoid cycle-redirecting user/login page (#28636) (#28658)
  * Fix empty ref for cron workflow runs (#28640) (#28647)
  * Remove unnecessary syncbranchToDB with tests (#28624) (#28629)
  * Use known issue IID to generate new PR index number when migrating from GitLab (#28616) (#28618)
  * Fix flex container width (#28603) (#28605)
  * Fix the scroll behavior for emoji/mention list (#28597) (#28601)
  * Fix wrong due date rendering in issue list page (#28588) (#28591)
  * Fix `status_check_contexts` matching bug (#28582) (#28589)
  * Fix 500 error of searching commits (#28576) (#28579)
  * Use information from previous blame parts (#28572) (#28577)
  * Update mermaid for 1.21 (#28571)
  * Fix 405 method not allowed CORS / OIDC (#28583) (#28586) (#28587) (#28611)
  * Fix `GetCommitStatuses` (#28787) (#28804)
  * Forbid removing the last admin user (#28337) (#28793)
  * Fix schedule tasks bugs (#28691) (#28780)
  * Fix issue dependencies (#27736) (#28776)
  * Fix system webhooks API bug (#28531) (#28666)
  * Fix when private user following user, private user will not be counted in his own view (#28037) (#28792)
  * Render code block in activity tab (#28816) (#28818)
* ENHANCEMENTS
  * Rework markup link rendering (#26745) (#28803)
  * Modernize merge button (#28140) (#28786)
  * Speed up loading the dashboard on mysql/mariadb (#28546) (#28784)
  * Assign pull request to project during creation (#28227) (#28775)
  * Show description as tooltip instead of title for labels (#28754) (#28766)
  * Make template `DateTime` show proper tooltip (#28677) (#28683)
  * Switch destination directory for apt signing keys (#28639) (#28642)
  * Include heap pprof in diagnosis report to help debugging memory leaks (#28596) (#28599)
* DOCS
  * Suggest to use Type=simple for systemd service (#28717) (#28722)
  * Extend description for ARTIFACT_RETENTION_DAYS (#28626) (#28630)
* MISC
  * Add -F to commit search to treat keywords as strings (#28744) (#28748)
  * Add download attribute to release attachments (#28739) (#28740)
  * Concatenate error in `checkIfPRContentChanged` (#28731) (#28737)
  * Improve 1.21 document for Database Preparation (#28643) (#28644)
-----BEGIN PGP SIGNATURE-----
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=TmSO
-----END PGP SIGNATURE-----