SECURITY: [user] generate_quota_list() could be leveraged via symlink attack to overwrite an arbitrary system file within the account. NEW: [File Manager] block critical directories from browsing. Behavior may be adjusted via Account > Settings > App Settings. [PostgreSQL] v13/TimescaleDB v2 support. FIXED: [DNS Manager] cloning a domain persists old entries for 1 page refresh. [Horizon] deserialization errors in UI. [License] replacing an expired license may result in a misleading panel status. [phpMyAdmin] self-signed certificate error reporting. [phpPgAdmin] self-signed certificate error reporting. [rspamd] cleanup self-scan/low-memory mode. Prior implementation launched a Redis instance as well as improperly configured sqlite backends. Note sqlite is deprecated in rspamd 2. [user] generate_quota_list()- accept PANEL_BRAND values with spaces. [user] rename_user()- refers to old username in Manage Mailboxes. [web] add_subdomain()- address condition in which a badly formed symlink could result in changing /home recursively to account admin on subdomain creation. [Web Apps] a known parented docroot blocks display of children. CHANGED: [API] extend server_name column length to match cp-proxy. [apnscp.js] wrap apnscp.cmd() in JSON. [Dovecot] Archive folder may now be created on the fly by enabling dovecot_remote_archive in Bootstrapper. [EditDomain] cancel storage amnesty reset if diskquota modified while under amnesty. [Mail] pass null driver reload request to parent driver. [Postfix] cleanup various inheritence parameters in main.cf. [Scopes] dns.ip4-pool + dns.ip6-pool expand CIDR notation. [Server Information] report "available" memory. [Setup Instructions] prefer service value settings over domain name. [Summary] ignore cumulative CPU usage when telemetry is disabled. [UI] add second style link for links that open in-situ to disambiguate from links that open in new tab. [UI] all assets for an app may be overridden individually, including application.yml, by creating the file within config/custom/apps. [web] www.subdomain DNS record creation may be controlled via [dns] => subdomain_implicit_www [Web Apps] add "Flush Cache" option. [Web Apps] ad hoc (manifest-based) web apps honor database configuration if specified for snapshot/export support. [Web Apps] hide app meta from unprovisioned site. REMOVED: [Subdomains] stack preselections.