* SECURITY

  * Limit uploaded avatar image-size to 4096x3072 by default (#4353)
  * Do not allow to reuse TOTP passcode (#3878)
* FEATURE
  * Add cli commands to regen hooks & keys (#3979)
  * Add support for FIDO U2F (#3971)
  * Added user language setting (#3875)
  * LDAP Public SSH Keys synchronization (#1844)
  * Add topic support (#3711)
  * Multiple assignees (#3705)
  * Add protected branch whitelists for merging (#3689)
  * Global code search support (#3664)
  * Add label descriptions (#3662)
  * Add issue search via API (#3612)
  * Add repository setting to enable/disable health checks (#3607)
  * Emoji Autocomplete (#3433)
  * Implements generator cli for secrets (#3531)
* ENHANCEMENT
  * Add more webhooks support and refactor webhook templates directory (#3929)
  * Add new option to allow only OAuth2/OpenID user registration (#3910)
  * Add option to use paged LDAP search when synchronizing users (#3895)
  * Symlink icons (#1416)
  * Improve release page UI (#3693)
  * Add admin dashboard option to run health checks (#3606)
  * Add branch link in branch list (#3576)
  * Reduce sql query times in retrieveFeeds (#3547)
  * Option to enable or disable swagger endpoints (#3502)
  * Add missing licenses (#3497)
  * Reduce repo indexer disk usage (#3452)
  * Enable caching on assets and avatars (#3376)
  * Add repository search ordered by stars/forks. Forks column in admin repo list (#3969)
  * Add Environment Variables to Docker template (#4012)
  * LFS: make HTTP auth period configurable (#4035)
  * Add config path as an optionial flag when changing pass via CLI (#4184)
  * Refactor User Settings sections (#3900)
  * Allow square brackets in external issue patterns (#3408)
  * Add Attachment API (#3478)
  * Add EnableTimetracking option to app settings (#3719)
  * Add config option to enable or disable log executed SQL (#3726)
  * Shows total tracked time in issue and milestone list (#3341)
* TRANSLATION
  * Improve English grammar and consistency (#3614)
* DEPLOYMENT
  * Allow Gitea to run as different USER in Docker (#3961)
  * Provide compressed release binaries (#3991)
  * Sign release binaries (#4188)
-----BEGIN PGP SIGNATURE-----
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=wWeH
-----END PGP SIGNATURE-----