## [1.16.0-rc2](https://github.com/go-gitea/gitea/releases/tag/v1.16.0) - 2022-01-29

* SECURITY
  * Disable content sniffing on `PlainTextBytes` (go-gitea#18359) (go-gitea#18365)
  * Only view milestones from current repo (go-gitea#18414) (go-gitea#18417)
* BUGFIXES
  * Fix detection of no commits when the default branch is not master (go-gitea#18422) (go-gitea#18423)
  * Fix broken oauth2 authentication source edit page (go-gitea#18412) (go-gitea#18419)
  * Place inline diff comment dialogs on split diff in 4th and 8th columns (go-gitea#18403) (go-gitea#18404)
  * Fix restore without topic failure (go-gitea#18387) (go-gitea#18400)
  * Fix commit's time (go-gitea#18375) (go-gitea#18392)
  * Fix partial cloning a repo (go-gitea#18373) (go-gitea#18377)
  * Stop trimming preceding and suffixing spaces from editor filenames (go-gitea#18334)
  * Prevent showing webauthn error for every time visiting `/user/settings/security` (go-gitea#18386)
  * Fix mime-type detection for HTTP server (go-gitea#18370) (go-gitea#18371)
* MISC
  * Update github.com/duo-labs/webauthn (go-gitea#18357) (go-gitea#18364)

Signed-off-by: Andrew Thornton <art27@cantab.net>