Merge remote-tracking branch 'origin/develop' into audit-mix-audit-report

Conflict resolution notes:

- mix.lock: kept this branch's versions for cowlib, h2, hackney and hpax.
  Those upgrades are the point of the branch; develop is still on hackney
  1.20.1.

- .woodpecker/docker-armv7.yaml: accepted develop's deletion. It only
  existed here to build mdex_native on armv7, and mdex was already
  replaced with earmark again.

- lib/pleroma/reverse_proxy.ex: took develop's version. It independently
  grew request_with_constraints/5 and the invalid-status close, which
  supersede the equivalent fixes on this branch. Re-applied this branch's
  recv_timeout seeding, which develop does not have.

- lib/pleroma/gun/connection_pool/worker.ex and
  lib/pleroma/reverse_proxy/client/tesla.ex: took develop's versions. The
  gun pool rework (#7934) already guards the demonitor and makes
  release_conn/cancel_stream exit-safe, and it splits the Tesla client's
  graceful release from its abort path, so this branch's changes there are
  obsolete.

That leaves the client leak fix as a Hackney-only concern, which
stream_body/1 now handles the same way the gun client does.

changelog.d/account-favourites-order.fix

@@ -0,0 +1 @@
+Fixed `/api/v1/pleroma/accounts/:id/favourites` ordering and pagination to use the favourite date.

changelog.d/disabling-chats.change

@@ -0,0 +1 @@
+Allow disabling Chats feature

changelog.d/docker-baseimage-ssl.fix

@@ -0,0 +1 @@
+Dockerfile: update base images to fix problems with SSL handshakes

changelog.d/elixir-1-19.add

@@ -0,0 +1 @@
+Implemented ConfigDB configuration blacklist and accompanying Mix task

changelog.d/elixir-1-19.fix

@@ -0,0 +1 @@
+Fixed Elixir 1.19 warnings

changelog.d/fix-preferred-frontend.fix

@@ -0,0 +1 @@
+Fix preferred frontend not working due to InstanceStatic plug prematurely returning HTTP 404

changelog.d/gun-pool-rework.fix

@@ -0,0 +1 @@
+Fixed Gun HTTP/1 concurrency, forwarding and authenticated proxy handling, tunnel requests, and streamed connection cleanup. Updated Gun and Cowlib for HTTP client security fixes.

changelog.d/hashtag-timeline.fix

@@ -0,0 +1 @@
+Fix hashtag timeline query for additional tag handling

changelog.d/logger-backends.change

@@ -0,0 +1 @@
+Changed how Logger is configured due to changes in Elixir and added deprecation warnings for the old configuration format

changelog.d/mediaproxy-content-type.fix

@@ -0,0 +1 @@
+Detect image content types for extensionless MediaProxy responses.

changelog.d/oauth-user-preload.change

@@ -0,0 +1 @@
+Avoid a duplicate user query during OAuth authentication.

changelog.d/publisher-worker-atoms.fix

@@ -0,0 +1 @@
+Avoid creating atoms from serialized PublisherWorker parameters.

changelog.d/reverse-proxy-client-leak.fix

@@ -1 +0,0 @@
-Release the reverse proxy HTTP client on every outcome, fixing a memory leak where abandoned Hackney connection processes retained the whole response body

changelog.d/reverse-proxy-hackney-leak.fix

@@ -0,0 +1 @@
+Stop leaking a Hackney connection process for every media proxy response that was streamed to the end

changelog.d/rss.fix

@@ -0,0 +1 @@
+Fix RSS feeds to be W3C compliant and render better in RSS readers

changelog.d/stream-domain-block-following.fix

@@ -0,0 +1 @@
+Keep followed users visible in streams when their domain is blocked.

changelog.d/user-cache-keys.fix

@@ -0,0 +1 @@
+Fix inconsistent User cache keys and invalidate numeric ID aliases.

changelog.d/woodpecker-armv7-fixups.fix

@@ -0,0 +1 @@
+Include arm32v7 in multi-arch Docker images