* SECURITY

  * Limit uploaded avatar image-size to 4096x3072 by default (#4353)
  * Do not allow to reuse TOTP passcode (#3878)
* FEATURE
  * Add cli commands to regen hooks & keys (#3979)
  * Add support for FIDO U2F (#3971)
  * Added user language setting (#3875)
  * LDAP Public SSH Keys synchronization (#1844)
  * Add topic support (#3711)
  * Multiple assignees (#3705)
  * Add protected branch whitelists for merging (#3689)
  * Global code search support (#3664)
  * Add label descriptions (#3662)
  * Add issue search via API (#3612)
  * Add repository setting to enable/disable health checks (#3607)
  * Emoji Autocomplete (#3433)
  * Implements generator cli for secrets (#3531)
* ENHANCEMENT
  * Add more webhooks support and refactor webhook templates directory (#3929)
  * Add new option to allow only OAuth2/OpenID user registration (#3910)
  * Add option to use paged LDAP search when synchronizing users (#3895)
  * Symlink icons (#1416)
  * Improve release page UI (#3693)
  * Add admin dashboard option to run health checks (#3606)
  * Add branch link in branch list (#3576)
  * Reduce sql query times in retrieveFeeds (#3547)
  * Option to enable or disable swagger endpoints (#3502)
  * Add missing licenses (#3497)
  * Reduce repo indexer disk usage (#3452)
  * Enable caching on assets and avatars (#3376)
  * Add repository search ordered by stars/forks. Forks column in admin repo list (#3969)
  * Add Environment Variables to Docker template (#4012)
  * LFS: make HTTP auth period configurable (#4035)
  * Add config path as an optionial flag when changing pass via CLI (#4184)
  * Refactor User Settings sections (#3900)
  * Allow square brackets in external issue patterns (#3408)
  * Add Attachment API (#3478)
  * Add EnableTimetracking option to app settings (#3719)
  * Add config option to enable or disable log executed SQL (#3726)
  * Shows total tracked time in issue and milestone list (#3341)
* TRANSLATION
  * Improve English grammar and consistency (#3614)
* DEPLOYMENT
  * Allow Gitea to run as different USER in Docker (#3961)
  * Provide compressed release binaries (#3991)
  * Sign release binaries (#4188)
-----BEGIN PGP SIGNATURE-----
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=zoqQ
-----END PGP SIGNATURE-----