main
template: escape untrusted names in locale strings piped through Safe (#8176)
refactor(db): move some methods off `user.go` (#7199)
refactor: drop the use of CSRF token entirely (#8300)
security: sanitize milestone names in new issue form (#8325)
repository: validate remote address on mirror address update (#8225)
conf: add new config option for default branch name (#7291)
Refactoring: rename and simplify pkg/tool functions
Break branch-selection dropdown into a template
templates: fix typo of BranchCount (#6370)
security: upgrade notebookjs and route ipynb HTML through DOMPurify (#8330)
fix(repo): be tolerant to implicit submodules (#7352)
#1692 APIs: Users Followers