- BUGFIX: Fix building with latest zlib (glassez) #24200
- BUGFIX: Remove old-format lockfile when starting (glassez) #24218
- BUGFIX: Prevent SSRF via HTTP redirection (AlexandrBlishun) #24270
- BUGFIX: Delete stale lockfile when machine-id mismatch (glassez) #24285
- BUGFIX: Fix handling of 'Accept-Encoding' header (glassez) #24286
- WEBUI: Avoid search downloader for magnet links (TurboTheTurtle) #24211
- WEBUI: Work around browser extension interfering with Add Torrent Dialog (vafada) #24240
- WEBUI: Filter all children of content root (vafada) #24243
- WEBAPI: Don't store API result between calls (beryxz) #24262
- RSS: Fix refresh is indefinitely called when there are no feeds (glassez) #24199
- SEARCH: Avoid proxy interfering with multiprocessing pool (Chocobo1) #24234