Fix MigrateOldBookmarks migration crashing on deleted activities

See merge request pleroma/pleroma!1106

WebPush: Use Object.normalize, rewrite tests so they test reality.

See merge request pleroma/pleroma!1105

Add default_scope to /api/v1/update_credentials

See merge request pleroma/pleroma!1100

fix issues with the uploads directory

See merge request pleroma/pleroma!1101

Fix `rights` in TwitterAPI's user entity being present only for Admins/Moderators

See merge request pleroma/pleroma!1102

Admins/Moderators

In !1093 I reused `maybe_with_role` for `rights` object, however I
missed that `maybe_with_role` is called only for admins/moderators.

Fix bookmarks depending on embeded object and move checking if the status is bookmarked to SQL

See merge request pleroma/pleroma!1099

status is bookmarked to SQL

BBCode support (backend)

See merge request pleroma/pleroma!1097

update pleroma frontend

See merge request pleroma/pleroma!1098

Feature/807 bookmark endpoint extension

Closes #807

See merge request pleroma/pleroma!1059

Fix leaking private configuration parameters in Mastodon and Twitter APIs, and add new configuration parameters to Mastodon API

This patch:
- Fixes `rights` in TwitterAPI ignoring `show_role` 
- Fixes exposing default scope of the user to anyone in Mastodon API
- Extends Mastodon API to be able to show and set `no_rich_text`, `default_scope`, `hide_follows`, `hide_followers`, `hide_favorites` (requested by the FE in #674)

Sorry in advance for 500 line one commit diff, I should have split it up to separate MRs

See merge request pleroma/pleroma!1093

update Changelog

See merge request pleroma/pleroma!1096

Add mediaproxy whitelist capability

Closes #837

See merge request pleroma/pleroma!1095

activitypub: transmogrifier: send reject follow if following does not succeed

See merge request pleroma/pleroma!1094

removing old field from db, after bookmarks migration

changelog wording

Fix leaking private configuration parameters in Mastodon and Twitter APIs, and add new configuration parameters to Mastodon API

This patch:
- Fixes `rights` in twitterapi ignoring `show_role`
- Fixes exposing default scope of the user to anyone in Mastodon API
- Extends Mastodon API to be able to show and set `no_rich_text`, `default_scope`, `hide_follows`, `hide_followers`, `hide_favorites` (requested by the FE in #674)

Sorry in advance for 500 line one commit diff, I should have split it up to separate MRs

html: lock down allowed class attributes to only those related to microformats

See merge request pleroma/pleroma!1090