cvat-ai/cvat v2.26.0 on GitHub

Setting TMP_FILE_OR_DIR_RETENTION_DAYS, which defines maximum retention period of a file or dir in temporary directory (#8804)
Cron job to remove outdated files and directories from CVAT tmp directory (#8804)
Ability to set Django's secret key using an environment variable (#8566)

Export cache cleaning moved to a separate cron job (#8804)
Improved UX of quality management page: better table layout, file name search, ability to download table as .csv (#8865)
Enhanced MIL tracker. Optimized memory usage. Now it is runnable on many frames, and applicable to drawn rectangles. (#8942)
The UI only displays one version for the whole client component, which is now aligned with the server version (#8948)

Fixed webhook worker not restarting after losing Redis connection (#8921)
Fixed incorrect results being returned from lambda functions when all detected shapes have labels that aren't mapped (#8931)
Optimized importing from cloud storage (#8930)
A job cannot be opened if to remove an image with the latest keyframe of a track (#8952)
A track will be interpolated incorrectly if to delete an image containing the object keyframe (#8951)
Error: Cannot read properties of undefined (reading 'startPoints') when dragging an object (#8966)
Extra shortcuts enabled from brush tools on views where not necessary (#8971)
[Helm] Fixed Nuclio dashboard crashes when running in a cluster that doesn't use Docker (#8825)
[SDK] cvat_sdk.auto_annotation.functions.torchvision_detection and torchvision_instance_segmentation no longer declare meaningless "N/A" labels (#8997)

Protected tracker functions against deserializing untrusted input (GHSA-wq36-mxf8-hv62)