main
security: enforce RESET_PASSWORD_CODE_LIVES on reset tokens (#8328)
email: replace gomail with go-mail (#8164)