Syncthing full changelog

Fixes:
fix: handle missing max-sequence file entries by @calmh in #10912
fix(sqlite): avoid early garbage collection of deleted recv-enc files by @calmh in #10916
fix(sqlite): do not generate unbounded prepared statements (ref #10913) by @calmh in #10915
fix(discover): skip unnecessary identical global announce updates; obey retry-after by @calmh in #10918
fix(protocol): convert panics on bad data to protocol errors by @calmh in #10923
fix(model): verify local change before applying metadata shortcut (fixes #10924) by @calmh in #10925
fix(model): ensure parent ownership is copied properly (fixes #8399) by @calmh in #10926
fix(model): properly compare blocks when reconciling receive-only (fixes #10928) by @calmh in #10929
Other:
build(deps): update dependencies by @calmh in #10917
chore(protocol): add protovalidate validation of incoming messages, reasonable limits by @calmh in #10838

Fixes:
fix(model): introducers should not be able to add themselves to folders by @calmh in #10880
fix(gui): add accessible labels to buttons in Edit Device modal (fixes #10873) by @tomasz1986 in #10874
fix(model): properly error out when a temp file can't be created by @calmh in #10883
fix: disable keepalive on most outgoing HTTP connections by @calmh in #10891
fix(monitor): continue log writes when stdout is unavailable on detached Windows consoles (fixes #10882) by @Shablone in #10889
fix(gui): improve header and button color contrast (fixes #10488) by @giri256 in #10815
fix: use global short lived HTTP client with proper HTTP/2 support by @calmh in #10901
fix: remove unnecessary delay in index transmission by @calmh in #10908
fix(watchaggregator): properly convert floating-point time duration (fixes #10899) by @calmh in #10900

Fixes:
fix(syncthing): properly upgrade via REST when Syncthing is running (fixes #10697) by @calmh in #10699
fix(versioner): ensure user read/write/execute on archived dirs (fixes #10532) by @calmh in #10696
fix(discover): only announce wildcard for TCP punching when listening on wildcard address (fixes #10503) by @calmh in #10691
fix(stcrashreceiver): close source loader responses on errors by @mattn in #10704
fix(protocol): handle zero-size requests (fixes #10709) by @calmh in #10710
Other:
build: be explicit about workflow permissions by @calmh in #10690
chore(syncthing): include runtime context in GC crashes by @calmh in #10702
build(deps): x/net for govulncheck by @calmh in #10703
chore: use path/filepath for local file system paths by @mattn in #10705

Fixes:
fix(protocol): verify compressed message length before decompression by @calmh in #10595
fix(systemd): support overrides for syncOwnership by @Valloric in #10602
fix(systemd): add back chown allowed syscalls by @Valloric in #10605
Other:
chore(config, connections): use same reconnection interval for QUIC and TCP (fixes #10507) by @marbens-arch in #10573
build(deps): update dependencies by @calmh in #10588
chore(sqlite): reduce max open connections, keep them open permanently (fixes #10592) by @calmh in #10596

Fixes:
Fix(gui): show restarting modal during upgrade restart (fixes #1248) by @steadytao in #10566
Fix(gui): remove width limit for language select items by @EastSun5566 in #10531
Other:
Hore(gui): add id and name to Stay logged in checkbox for password managers by @epifeny in #10558
Chore(db): add ability to wait for programmatically started database maintenance, query last maintenance time by @pixelspark in #10565
Chore(etc): add comprehensive sandboxing by @Valloric in #10421
Chore: build with Go 1.26; use Go 1.25 features by @calmh in #10570

Fixes:
Fix(beacon): skip point-to-point interfaces on Android
Fix(stdiscosrv): use fmt.Println for version output
Fix(stdiscosrv): log full device ID on startup
Other:
Chore(api): remove charset declaration from JSON content-type
Chore(sqlite): allow periodic database maintenance to be disabled
Chore(gui): include license files for fork-awesome assets
Build: add build attestation step at release

Fixes:
Fix(beacon): don't join multicast groups on non-multicast interfaces
Other:
Chore(model): refactor context handling for folder type
Build: fix docker build by ensuring qemu
Chore(beacon): more verbose debug logging
Build: fix hash failure by limiting globbing
Chore: tweak pull retry logic

Fixes:
Fix(beacon): don't join multicast groups on non-multicast interfaces
Other:
Chore(model): refactor context handling for folder type
Build: fix docker build by ensuring qemu
Chore(beacon): more verbose debug logging
Build: fix hash failure by limiting globbing
Chore: tweak pull retry logic

chore: update quic-go, adapt to lack of write tracking by @calmh in #10456
chore(cli): clean up generated usage strings for config commands (fixes #10462) by @acolomb in #10463

Fixes
Fix(policy): only allow approvals by non-author contributors
Fix(fs): store getExpireAdd mutex in caseCache
Fix(fs): apply case option to fakefs in casefs tests
Fix(fs): only apply case option to fakefs in stress test
Other
Docs(docker): make host network mode the default
Chore(upnp): remove incorrect embedding of nat.Service
Chore: minor lint fixes
Chore(gui): add Azerbaijani (az) and Kurdish (ckb) l10n templates.