* SECURITY

  * Escape provider name in oauth2 provider redirect (#12648) (#12650)
  * Escape Email on password reset page (#12610) (#12612)
  * When reading expired sessions - expire them (#12686) (#12690)
* ENHANCEMENTS
  * StaticRootPath configurable at compile time (#12371) (#12652)
* BUGFIXES
  * Fix to show an issue that is related to a deleted issue (#12651) (#12692)
  * Expire time acknowledged for cache (#12605) (#12611)
  * Fix diff path unquoting (#12554) (#12575)
  * Improve HTML escaping helper (#12562)
  * models: break out of loop (#12386) (#12561)
  * Default empty merger list to those with write permissions (#12535) (#12560)
  * Skip SSPI authentication attempts for /api/internal (#12556) (#12559)
  * Prevent NPE on commenting on lines with invalidated comments (#12549) (#12550)
  * Remove hardcoded ES indexername (#12521) (#12526)
  * Fix bug preventing transfer to private organization (#12497) (#12501)
  * Keys should not verify revoked email addresses (#12486) (#12495)
  * Do not add prefix on http/https submodule links (#12477) (#12479)
  * Fix ignored login on compare (#12476) (#12478)
  * Fix incorrect error logging in Stats indexer and OAuth2 (#12387) (#12422)
  * Upgrade google/go-github to v32.1.0 (#12361) (#12390)
  * Render emoji's of Commit message on feed-page (#12373)
  * Fix handling of diff on unrelated branches when Git 2.28 used (#12370)
-----BEGIN PGP SIGNATURE-----
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=fzte
-----END PGP SIGNATURE-----