* SECURITY

  * Upgrade Bluemonday to v1.0.16 (#17372) (#17374)
  * Ensure correct SSH permissions check for private and restricted users (#17370) (#17373)
* BUGFIXES
  * Prevent NPE in CSV diff rendering when column removed (#17018) (#17377)
  * Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281) (#17376)
  * Don't panic if we fail to parse U2FRegistration data (#17304) (#17371)
  * Ensure popup text is aligned left (backport for 1.15) (#17343)
  * Ensure that git daemon export ok is created for mirrors (#17243) (#17306)
  * Disable core.protectNTFS (#17300) (#17302)
  * Use pointer for wrappedConn methods (#17295) (#17296)
  * AutoRegistration is supposed to be working with disabled registration (backport) (#17292)
  * Handle duplicate keys on GPG key ring (#17242) (#17284)
  * Fix SVG side by side comparison link (#17375) (#17391)
-----BEGIN PGP SIGNATURE-----
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=w2Qw
-----END PGP SIGNATURE-----