v20.13.0 🌈

Changes

CVE-2025-27400 - Sanitize skin urls that could be used for Stored XSS @justlife4x4 @colinmollenhour (#4654)
[Backport] Added form key validation to Contacts form @sreichel (#4610)
TinyMCE: potential fix for code scanning alert: Inefficient regular expression @sreichel (#4491)

keep attribute_id as keys in getFilterableAttributes () @empiricompany (#4639)
Fix error in column renderer when value is empty and not null @aamant (#4601)
php8: TypeError: Unsupported operand types: string * int @sreichel (#4526)
Api2: Fixes getProductUrl @Hanmac (#4511)
php8.3: fix deprecated passing null to str_replace() @sreichel (#4525)
Avoid errors when trying to lock config if database is not yet available @colinmollenhour (#4603)
Fix issue with double port in error pages base URL @massa-man (#4518)
Fixed null deprecation in UnserializeArray.php @kiatng (#4394)
php 8.3: fix catch for empty sitemap filename @midlan (#4521)
Added currency code to cache-info for new products block @sreichel (#4514)
Fixed null deprecation in Mage_Eav_Model_Attribute_Data_Text @kiatng (#4500)

Bump version to v20.13.0 @sreichel (#4645)
Chore: Check for DS / PS already set @sreichel (#4484)
Remove obsolete phpstan baseline entry for invalid binary operation. @aamant (#4640)
Drop ZIP-archive support @sreichel (#4485)
Update release-drafter.yml @sreichel (#4638)
PhpUnit: added test, ref #4518 @sreichel (#4524)
Update release-drafter.yml template @sreichel (#4528)
Workflow: updated PhpUnit versions @sreichel (#4619)
CodeQL: updated config @sreichel (#4490)
Cleanup: removed js/jscolor @sreichel (#4458)
add justlife4x4 as a contributor for security @allcontributors[bot] (#4657)
add mbattistini as a contributor for bug @allcontributors[bot] (#4608)
add mark-netalico as a contributor for bug @allcontributors[bot] (#4586)
PhpUnit: updated and added tests @sreichel (#4454)
add real34 as a contributor for bug @allcontributors[bot] (#4572)
add kanevbg as a contributor for bug @allcontributors[bot] (#4577)
add vovayatsyuk as a contributor for bug @allcontributors[bot] (#4578)