main
all: decouple API types from go-gogs-client SDK (#8171)
email: replace gomail with go-mail (#8164)
security: require token auth for org metadata and team list (#8336)
security: reject path traversal in owner and repository names (#8334)
all: rename packages ending with "util" to end with "x" (#8182)
database: bound collaboration access mode by `min(actor, admin)` (#8227)
repository: validate remote address on mirror address update (#8225)