v1.5.0-rc2

What's Changed

• [WEB-10027] fix: reject legacy file-asset POST and strip query from asset id by @pablohashescobar in #10216
• [WEB-10025] fix: require active workspace members as project lead/assignee by @pablohashescobar in #10214
• [WEB-10024] fix: restrict project entity search to active project members by @pablohashescobar in #10213
• [WEB-10009] fix: check page access on every live collaboration socket by @pablohashescobar in #10207
• [WEB-10010] fix: block restricted guests from links and subscribers of others' issues by @pablohashescobar in #10205
• [WEB-10023] fix: make legacy FileAsset POST fields read-only by @pablohashescobar in #10212
• [WEB-9436] chore: migrations lockfile and label for migration PRs by @dheeru0198 in #10189
• fix: keep the preferences timezone select inside the settings modal by @anmolsinghbhatia in #10257
• [GIT-408] fix: keep workspace switcher actions visible while scrolling by @Rahulcheryala in #10258
• fix(aio): create supervisor log directories on boot by @RealBhupesh in #9818
• docs: document DATABASE_URL, PORT, and REDIS_URL in CONTRIBUTING.md by @pranav-afk in #9411
• [WEB-10020] fix: bind project cover uploads to URL workspace and admins by @pablohashescobar in #10256
• fix(api): count issues, not state groups, in public module counts by @Darshanpawar7 in #10259
• fix: block restricted guests from assets of issues hidden from them by @sriramveeraghanta in #10261
• chore: resolve open Dependabot alerts by @sriramveeraghanta in #10262
• docs: verify and refresh repo documentation against the code by @sriramveeraghanta in #10263
• fix: deployment script and test tooling bugs found in docs audit by @sriramveeraghanta in #10264
• [WEB-10019] fix: make DynamicBaseSerializer honor fields= allowlists by @pablohashescobar in #10211
• [GIT-409] fix(editor): skip upload status sync on a destroyed editor by @b-saikrishnakanth in #10267

New Contributors

• @pranav-afk made their first contribution in #9411
• @Darshanpawar7 made their first contribution in #10259

Full Changelog: v1.5.0-rc1...v1.5.0-rc2