Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857)

Use NodeJS v20 by default (#26830)

Add timezone to datetimes in e-mails (#26822)

Fix “Scoped order is ignored, it's forced to be batch order.” warnings (#26793)

Fix invalid Content-Type header for WebP images (#26773)

Add admin notifications for new Mastodon versions (#26582)

Add `authorized_fetch` server setting in addition to env var (#25798)

Improve Codespaces port forwarding (#26400)

Support webpacker live-reloading on Docker (#26419)

Improve error messages when DeepL quota is exceeded (#26704)

Add new public status index (#26344)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Change admin e-mail notification settins to be their own settings group (#26596)

Add `circular-dependency-plugin` to detect any circular deps issues (#26600)

Add Elasticsearch cluster health check and indexes mismatch check to dashboard (#26448)

Refactor `Api::V1::ProfilesController` into two separate controllers (#26573)

Add ability to delete avatar or header picture via the API (#25124)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Allow setting a custom HTTP method in CacheBuster (#26528)

Co-authored-by: Jorijn Schrijvershof <jorijn@jorijn.com>

Change “privacy and reach” settings so that unchecking boxes always increase privacy and checking them always increase reach (#26508)

Fix ES_PRESET not being applied to Chewy's internal index (#26489)

Add privacy tab in profile settings (#26484)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>