chore: prepare 4.12.0 release

[edward-ly]

Added

• Option to mark apps as enterprise-only on new app registration. feat: add is_enterprise_only attribute to apps #1840
• Optional query parameter include_enterprise for app list retrieval endpoints. feat: add is_enterprise_only attribute to apps #1840
• Option to mark apps as deprecated from the account settings. feat: add ability to mark apps as deprecated #1762
• Allow all licenses compatible with AGPL-3.0-or-later to be specified in info.xml. feat(licenses): Adding Creative Commons Zero to the list of approved … #1747 Add further compatible app licenses #1754
• Allow openmetrics and admin delegation settings to be specified in info.xml. fix(infoxsd): Upstream changes from server repository #1695

Changed

• Multiple dependency updates. chore(deps): update dependency jasmine-core to v5.13.0 #1536 chore(deps): update dependency typescript to 5.9 #1538 chore(deps): update dependency highlight.js to v11.11.1 #1543 chore(deps): update dependency @types/markdown-it to v14 #1557 fix(deps): update dependency django-allauth to v65 [security] #1682 chore(deps): update dependency django to v4.2.30 [security] #1698 chore(deps): update dependency markdown to v3.8.1 [security] #1716 fix(deps): update dependency requests to >=2.33.0, <2.34.0 [security] #1731
  chore(deps): update dependency pytest to v9 [security] #1739 fix(deps): update dependency lxml to v6 [security] #1745 chore(deps): npm audit fix #1750 chore(deps): npm audit fix --force #1751 chore(deps): poetry update #1752 build(deps-dev): Bump fast-uri from 3.1.1 to 3.1.2 #1755 refactor(certs): migrate deprecated OpenSSL load_crl and verify functions #1760 chore(deps): update dependency @types/jasmine to v5.1.15 #1766 chore(deps): update dependency ts-loader to v9.5.7 #1767 fix(deps): update dependency requests to >=2.34.2, <2.35.0 #1769 build(deps): Bump qs and body-parser #1776 chore(deps): update dependency webpack to v5.107.1 #1779 chore(deps): update dependency @types/jasmine to v6 #1781
  chore(deps): update dependency markdown-it to v14.2.0 #1782 build(deps): Bump tmp from 0.2.5 to 0.2.7 #1786 build(deps): Bump cryptography from 48.0.0 to 48.0.1 #1798 chore(deps): update dependency bleach to v6.4.0 [security] #1800 chore(deps): update dependency responses to v0.26.2 #1817 chore(deps): update dependency coverage to v7.15.0 #1819 chore(deps): update dependency django-allauth to v65.18.0 #1820 chore(deps): update dependency markdown-it to v14.3.0 #1821 chore(deps): update dependency pyopenssl to v26.3.0 #1822 chore(deps): update dependency pytest to v9.1.1 #1823 chore(deps): update dependency selenium to v4.46.0 #1824 chore(deps): update dependency ts-loader to v9.6.2 #1825 chore(deps): update dependency webpack to v5.108.4 #1826
  chore(deps): update dependency jasmine-core to v6 #1829 chore(deps): update dependency webpack-cli to v7 #1831 fix(deps): update dependency redis to v8 #1834 build(deps): Bump ws, engine.io and socket.io-adapter #1836 fix(deps): downgrade copy-webpack-plugin to ^11.0.0 #1845 build(deps-dev): Bump fast-uri from 3.1.2 to 3.1.4 #1847 build(deps): Bump socket.io-parser from 4.2.6 to 4.2.7 #1856 build(deps-dev): Bump fast-uri from 3.1.4 to 3.1.5 #1857
• Clarified text in various areas. chore(l10n): update string text #1850
• users_picker app is now bundled into Nextcloud server. fix: add users_picker app to bundled list #1713
• Multiple documentation updates. docs: add maintenance status warning to production pages #1743 Add further compatible app licenses #1754 docs(developer): add file size limit to app screenshots #1773 docs: update notices on production pages #1787
• Update app template. chore: update app template #1741 chore: update app template #1842

Fixed

• Add IP filtering to app release URLs. fix(release): add IP filtering to app release URLs #1838
• Trust the reverse proxy's X-Forwarded-For header for login rate limiting,
  so failed-login limits apply per visitor instead of collapsing into a single site-wide bucket. fix(settings): trust reverse proxy for client IP in rate limiting #1813
• Fix broken fa translation entries breaking compilemessages and CI. fix(l10n): clear corrupted fa translation entries breaking compilemessages #1812
• Reject app IDs longer than 32 characters during upload instead of letting Nextcloud server crash on install. fix(parser): reject app IDs longer than 32 characters in info.xml #1811
• Do not update password if notification email fails to send. fix(user): password change silently lost when notification email fails to send #1808
• Allow GitHub-only accounts to edit profile without a password. fix(user): allow GitHub-only accounts to edit profile without a password #1807
• Rate-limit email notifications. fix: rate-limit /account/ email change and reject empty emails #1771
• Update default value of subscribe_to_news in database. fix(user): update default value of subscribe_to_news in database #1761
• Multiple accessibility fixes. fix(accessibility): fix multiple accessibility issues #1720 fix(semantic): improve HTML semantics across templates #1721