fix new processing media / emoji not being added to dereferencer maps (#3269)

[chore/performance] Further reduce nil uncached queries (#3267)

* [chore/performance] Further reduce nil uncached queries

* more checks

[chore] Don't try to select zero uncached filters (#3266)

[chore/performance] Avoid unnecessary "uncached" queries (#3265)

* [chore/performance] Avoid unnecessary "uncached" queries

* go fmt

[chore]: Bump github.com/minio/minio-go/v7 from 7.0.75 to 7.0.76 (#3262)

Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.75 to 7.0.76.
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](https://github.com/minio/minio-go/compare/v7.0.75...v7.0.76)

---
updated-dependencies:
- dependency-name: github.com/minio/minio-go/v7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

[performance] use single-threaded image transforms (#3252)

* use single-threaded image resizing in native code so we have more control over goroutines

* implement parallel-free versions of image transform functions also

* remove debug code

[chore] Close copied request body in SignDelivery (#3254)

[chore] Upgrade ncruces/go-sqlite3 to v0.18.1 (#3253)

Contains a fix for locking behaviour on the BSDs.

[security] Implement `allowFiles` fs for better isolation of ffmpeg / ffprobe (#3251)

* [chore] Implement readOneFile fs

* further isolation

* remove fmt call

* tweaks

[chore] Only call `imaging.Resize when necessary`, use even tinier blurhashes (#3247)

* [chore] Use `imaging.Fit`, use even tinier blurhashes

* avoid calling resize if not necessary

* update blurhashes + thumb

[chore] Update robots.txt with more AI scrapers (#3248)

[bugfix/frontend] Fix `TypeError: gtsError is undefined` (#3245)

[chore/frontend] Present themes as dropdown instead of radio (#3244)

[bugfix] Fix incorrect json-ld `@context` serialization (#3243)

move WASM compilation stage much later in server init to reduce memory usage during db migrations (#3242)

[chore] Bump all otel deps (#3241)

[chore]: Bump github.com/prometheus/client_golang from 1.20.0 to 1.20.2 (#3239)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.0 to 1.20.2.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.0...v1.20.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

[chore] Remove unused "env" module (#3235)

[chore] Tiny tweak to ApprovedByURI (#3234)

[bugfix] Let prometheus client do its own compression handling (#3232)