[bugfix] Carry-over `ApprovedByURI` to avoid marking already-approved remote statuses as pending approval (#3231)

* [bugfix] Carry-over pendingApproval + approvedByURI to avoid pending already-approved remote statuses

* don't carry over pending_approval, not necessary

* comment

[chore/bugfix] Fix missing insertion of preapproved interaction requests (#3228)

Bump elliptic from 6.5.4 to 6.5.7 in /web/source (#3212)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.4 to 6.5.7.
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.4...v6.5.7)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump micromatch from 4.0.5 to 4.0.8 in /web/source (#3227)

[feature] Interaction requests client api + settings panel (#3215)

* [feature] Interaction requests client api + settings panel

* test accept / reject

* fmt

* don't pin rejected interaction

* use single db model for interaction accept, reject, and request

* swaggor

* env sharting

* append errors

* remove ErrNoEntries checks

* change intReqID to reqID

* rename "pend" to "request"

* markIntsPending -> mark interactionsPending

* use log instead of returning error when rejecting interaction

* empty migration

* jolly renaming

* make interactionURI unique again

* swag grr

* remove unnecessary locks

* invalidate as last step

[performance] ffmpeg ffprobe wrapper improvements (#3225)

* use a single instance of wazero runtime and compiled modules

* remove test output :facepalm:

* undo process-{media,emoji} changes

* update test runner to include wazero compilation cache

* sign drone.yml

---------

Co-authored-by: tobi <tobi.smethurst@protonmail.com>

[feature] Use `local_only` field, deprecate `federated` field (#3222)

* [feature] Use `local_only` field, deprecate `federated` field

* use `deprecated` comment for form.Federated

* nolint

[bugfix/frontend] Small safari + gnome web fixes (#3219)

* [bugfix/frontend] Small safari + gnome web fixes

* wee

* update comment

[bugfix/frontend] Fix error on submitting domain perm with enter key (#3218)

[performance] use native Go code to probe JPEGs (#3206)

* use native Go code to probe JPEGs

* add note about copying from github.com/disintegration/imaging

* add more code comments

[chore] update default http client timeout to 30s (#3214)

[chore]: Bump github.com/miekg/dns from 1.1.61 to 1.1.62 (#3209)

[chore]: Bump github.com/minio/minio-go/v7 from 7.0.74 to 7.0.75 (#3208)

[chore]: Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 (#3210)

[bugfix] permit unspecified orientation data (#3205)

update go-sqlite3 to v0.18.0 (#3204)

update go-ffmpreg to v0.2.5 (pulls in latest tetratelabs/wazero) (#3203)

update go-fastcopy to v1.1.3 (#3200)

update go-structr to v0.8.8 (#3199)

[security] harden account update logic (#3198)

* on account update, ensure that public key has not changed

* change expected error message

* also support the case of changing account keys when expired (not waiting for handshake)

* tweak account update hardening logic, add tests for updating account with pubkey expired

* add check for whether incoming data was via federator, accepting keys if so

* use freshest window for federated account updates + comment about it