v2.26.0

Compare with v2.25.2

Security Fixes

• Prevent clean_html bypass via comments and CDATA (1a934ad).
• Sandbox attachment responses and force download of active content (16d5dbf).
• Generate SECRET_KEY with a secure random source in the docker entrypoints (7d99d41).

Thanks to @redhotchilihacker1 for responsibly disclosing these issues and
bringing them to our attention.

Features

• Add an editor mode with live preview side by side, show the attachments sidebar in split mode on wide screens, and leave split mode on narrow screens (11b2f90, 4e5b1ef, 9cbcb85).
• Add Git Garbage Collection to housekeeping (27e3023).