Merge pull request from GHSA-hcqf-fw2r-52g4

* Revert "Fix request URL normalisation for bare domain and 8-bit characters (#26285)"

This reverts commit 8891d8945d837f0da16a3a5aa2dc9783e39b0acd.

* Revert "Do not normalize URL before fetching it (#26219)"

This reverts commit fd284311e79854d6bc2901a9d9363ba9e7e00513.

Fix performances of profile directory (#26842)

Simplify `Account.by_recent_status` and `Account.by_recent_sign_in` scopes (#26840)

Fix moderator rights inconsistencies (#26729)

Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled (#26237)

Add avatar image to webfinger responses (#26558)

Update rubocop and rubocop-rspec (#26329)

Fix cached posts including stale stats (#26409)

Do not normalize URL before fetching it (#26219)

Change interaction modal in web UI (#26075)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

Migrate to request specs in `/api/v2/filters` (#25721)

Use correct naming on controller concern specs (#26197)

Wrong count in response when removing favourite/reblog (#24365)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Migrate to request specs in `/api/v1/mutes` (#25622)

Migrate to request specs in `/api/v1/bookmarks` (#25520)

Migrate to request specs in `/api/v1/timelines/public` (#25746)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

Migrate to request specs in `/api/v1/polls` (#25596)

Migrate to request specs in `/api/v1/statuses/:status_id/pin` (#25635)

Migrate to request specs in `/api/v1/timelines/home` (#25743)

Fix embed dropdown menu item for unauthenticated users (#25964)