Breaking Changes
None
Security
- Release attachments and LFS locks must now belong to the intended repo
- Org project operations permission check added
- Watches cleaned when repository is made private; permission checked on release emails
- Stopwatch read/list operations require additional validation
- OpenID setting check fixed
- Auto-merge cancellation bug fixed
- Attachment deletion per...