SECURITY
    Prevent git operations for inactive users (#13527) (#13537)
    Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13525)
BUGFIXES
    API should only return Json (#13511) (#13564)
    Fix before and since query arguments at API (#13559) (#13560)
    Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13492)
    Fix link detection in repository description with tailing ‘_’ (#13407) (#13408)
    Remove obsolete change of email on profile page (#13341) (#13348)
    Fix permission check on get Reactions API endpoints (#13344) (#13346)
    Add migrated pulls to pull request task queue (#13331) (#13335)
    API deny wrong pull creation options (#13308) (#13327)
    Fix initial commit page & binary munching problem (#13249) (#13259)
    Fix diff parsing (#13157) (#13136) (#13139)
    Return error 404 not 500 from API if team does not exist (#13118) (#13119)
    Prohibit automatic downgrades (#13108) (#13111)
    Fix GitLab Migration Option AuthToken (#13101)
    GitLab Label Color Normalizer (#12793) (#13100)
    Log the underlying panic in runMigrateTask (#13096) (#13098)
    Fix attachments list in edit comment (#13036) (#13097)
    Fix deadlock when deleting team user (#13093)
    Fix error create comment on outdated file (#13041) (#13042)
    Fix repository create/delete event webhooks (#13008) (#13027)
    Fix internal server error on README in submodule (#13006) (#13016)

		https://github.com/go-gitea/gitea/pull/13521