Add `hide_collections`, `discoverable` and `indexable` attributes to credentials API (#26998)

Merge pull request from GHSA-hcqf-fw2r-52g4

* Revert "Fix request URL normalisation for bare domain and 8-bit characters (#26285)"

This reverts commit 8891d8945d837f0da16a3a5aa2dc9783e39b0acd.

* Revert "Do not normalize URL before fetching it (#26219)"

This reverts commit fd284311e79854d6bc2901a9d9363ba9e7e00513.

Fix post edits not being forwarded as expected (#26936)

Added admin api for managing tags (#26872)

Add search tests (#26703)

Fix `account_id`, `max_id` and `min_id` params not working in search (#26847)

Fix performances of profile directory (#26842)

Simplify `Account.by_recent_status` and `Account.by_recent_sign_in` scopes (#26840)

Fix blocked domain appears from account feed (#26823)

Co-authored-by: Jeong Arm <kjwonmail@gmail.com>
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

Fix moderator rights inconsistencies (#26729)

Add `in:library` syntax to search (#26760)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Fix invalid Content-Type header for WebP images (#26773)

Add admin notifications for new Mastodon versions (#26582)

Fix unmatched quotes and prefixes causing search to fail (#26701)

Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled (#26237)

Add avatar image to webfinger responses (#26558)

Fix bad search type heuristic (#26673)

Add PublicStatusesCheck to Elasticsearch index check on admin dashboard (#26650)

Add new public status index (#26344)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Fix timeout on invalid set of exclusionary parameters in `/api/v1/timelines/public` (#26239)