Bump version to 2.20.4

Fix merge conflict

Fix: recurring workflow to respect latest run time (#11735)

Fixhancement: add error handling and retry when opening index (#11731)

Fix: validate cf integer values within PostgreSQL range (#11666)

Fix: support ordering by storage path name (#11661)

Fix: propagate metadata override created value (#11659)

Security: prevent path traversal in storage paths

Auto translate strings

Feature: Paperless AI (#10319)

Auto translate strings

Performance: improve treenode inefficiencies (#11606)

Chore: upgrade to node v24 (#11747)

Auto translate strings

Chore: upgrade to Angular v21 (#11746)

Chore: Cleanup old caching strategies (#11726)

Chore: carryforward coverage with new split ci (#11739)

Auto translate strings

Chore: remove un-needed template import

Auto translate strings

Feature: Remote OCR (Azure AI) (#10320)

Auto translate strings

Feature: password removal action (#11656)

Fix: recurring workflow to respect latest run time (#11735)

Fixhancement: add error handling and retry when opening index (#11731)

Auto translate strings

Tweakhancement: use anchor element for management list quick filter buttons (#11692)

Auto translate strings

Feature: pre-compress static files on ARM64 (#11721)

Chore: Build the ARM64 image using the native ARM64 runner (#11720)

Chore: Re-work CI into multiple workflows (#11719)

Chore(deps): Bump the actions group with 4 updates (#11695)

Bumps the actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/cache](https://github.com/actions/cache), [actions/download-artifact](https://github.com/actions/download-artifact) and [dessant/lock-threads](https://github.com/dessant/lock-threads).

Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

Updates `actions/download-artifact` from 6 to 7
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

Updates `dessant/lock-threads` from 5 to 6
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dessant/lock-threads/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: dessant/lock-threads
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Documentation: update notes for DB pool size (#11600)

Auto translate strings

Fix: validate cf integer values within PostgreSQL range (#11666)

Fix environment variable reference in workflow

Fix ref injection in translate-strings workflow

Fix: support ordering by storage path name (#11661)

Fix: propagate metadata override created value (#11659)

Merge branch 'main' into dev

Documentation: default bool value consistency

Auto translate strings

Feature: Indonesian translation (#11641)

Fix: prevent ASN collisions for merge operations (#11634)

Chore: mark test_error_skip_rule as flaky

Chore: refactor preview URL variable naming and safeUrl usage

Changelog v2.20.3 - GHA (#11623)

Bump version to 2.20.3

Merge branch 'dev'

New Crowdin translations by GitHub Action (#11596)

Chore: mark another test flaky

Auto translate strings

Security: remove safe html pipe

Chore: harden SafeUrlPipe

Auto translate strings

Fix typo in filter path hint text

Chore: use the MS playwright image for e2e testing in CI (#11607)

Changelog v2.20.2 - GHA (#11594)

Bump version to 2.20.2

Merge branch 'dev'

Fix: allow safe <style> tags in SVG uploads (#11593)

Add more allowed SVG attributes to validator

Fix: Expanded SVG validation whitelist and additional checks (#11590)

Fix: use request.stream instead of request.content (#11591)

New Crowdin translations by GitHub Action (#11520)

Auto translate strings

Resolve CodeQL warning

Auto translate strings

Merge commit from fork

* Add safe regex matching with timeouts and validation

* Remove redundant length check

* Remove timeouterror workaround

Merge commit from fork

* Uses a custom transport to resolve the slim chance of a DNS rebinding affecting the webhook

* Fix WebhookTransport hostname resolution and validation

* Fix test failures

* Lint

* Keep all internal logic inside WebhookTransport

* Fix test failure

* Update handlers.py

* Update handlers.py

---------

Co-authored-by: Trenton H <797416+stumpylog@users.noreply.github.com>

Update validators.py

Auto translate strings

Fixhancement: pass ordering to tag children (#11556)

Documentation: Document missing workflows env variable and complete diagram (#11554)

Fixes the workflow configuration being nested under the consumption documentation (#11588)

Performance: avoid unnecessary filename operations on bulk custom field updates (#11558)

Fix: normalize SVG tag and attribute names, add version (#11586)

Chore: refactor workflows code (#11563)

Auto translate strings

Fix: pass additional arguments to TagSerializer for permissions (#11576)

Chore: fix set_permissions_for_object type (#11564)

Auto translate strings

Chore: update Angular dependencies to 20.3.15 (#11568)

Chore: refactor permission checks to use queryset.exists()

Chore(deps): Bump actions/checkout from 5 to 6 in the actions group (#11515)

Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui (#11513)

Bumps [webpack](https://github.com/webpack/webpack) from 5.102.1 to 5.103.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.102.1...v5.103.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.103.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Chore(deps-dev): Bump @playwright/test from 1.56.1 to 1.57.0 in /src-ui (#11514)

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.56.1 to 1.57.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.56.1...v1.57.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Auto translate strings

Chore: remove use of logs ngFor

Chore(deps-dev): Bump the frontend-eslint-dependencies group (#11512)

Bumps the frontend-eslint-dependencies group in /src-ui with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils).

Updates `@typescript-eslint/eslint-plugin` from 8.47.0 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.47.0 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/parser)

Updates `@typescript-eslint/utils` from 8.47.0 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/utils)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-eslint-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-eslint-dependencies
- dependency-name: "@typescript-eslint/utils"
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-eslint-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Tweakhancement: dim inactive users in users-groups list (#11537)

docker(deps): bump astral-sh/uv (#11533)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.9.14...0.9.15)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.9.15-python3.12-trixie-slim
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Chore: add some output of social login errors (#11527)

chore: Improves dependabot groups, in particular the Django group not catching everything (#11397)

Documentation: Add v2.20.1 changelog (#11510)

* Changelog v2.20.1 - GHA

* Update changelog.md

---------

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>

Bumps version to 2.20.1

New Crowdin translations by GitHub Action (#11442)

Co-authored-by: Crowdin Bot <support+bot@crowdin.com>

docker(deps): Bump astral-sh/uv (#11450)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.9.10-python3.12-trixie-slim to 0.9.14-python3.12-trixie-slim.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.9.10...0.9.14)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.9.11-python3.12-trixie-slim
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix: set search term when using advanced search from global search (#11503)

Fix: change async handling of select custom field updates (#11490)