Changes in 8.0.4

Summary

Security - Upgrade libvips to 8.18.2: #12301
Security - Bump Go to 1.25.10: #12306
Bugfix - SpaceEditorWithoutTrashbin roles now correctly allow file editing: #12346

Security - Upgrade libvips to 8.18.2: #12301
Bumped libvips to 8.18.2 in all Docker images to pick up the fix for a stack
buffer overflow.
#12301
Security - Bump Go to 1.25.10: #12306
Fixes CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836,
CVE-2026-42499.
#12306
Bugfix - SpaceEditorWithoutTrashbin roles now correctly allow file editing: #12346
Fixed a bug where the *WithoutTrashbin space editor roles were rendered as
read-only in the Web frontend. The OCS PermissionWrite bit was not set for these
roles because the RoleFromResourcePermissions round-trip required
RestoreRecycleItem, which these roles intentionally omit.
#12346