+ core
    + a formula calling an application Basic function is macro use too [Caolán McNamara]
    + a Java class path entry has to be a plain local file URL [Caolán McNamara]
    + add an advisory setAllowedExtRefPaths [Caolán]
    + add resetAllowedExtRefPaths to reset to the standard mode [Caolán McNamara]
    + allow a media link the user inserts in this session (tdf#172918) [Caolán McNamara]
    + an embedded document is not in a trusted location for link updates [Caolán McNamara]
    + apply the same source checks to a data pilot named by url [Caolán McNamara]
    + avmedia: fix MFPlay audio without player window (tdf#169697) [Jonathan Clark]
    + avoid out-of-bounds access in isRootDir (tdf#173964) [Jan Luethi]
    + basctl: Pass parent iter again in SbTreeListBox::ImpFindEntry (tdf#173273) [Michael Weghorn]
    + basic: check the PCode record length against the stream too [Caolán McNamara]
    + basic: keep p-code offset conversion within the code buffer [Caolán McNamara]
    + basic: keep the full string pool size in SbiImage [Caolán McNamara]
    + basic: SbiImage::MakeStrings takes a sal_uInt16 count [Caolán McNamara]
    + basic: stop reading user-defined type array dims at end of stream [Caolán McNamara]
    + be consistent for shared scripts permissions [Caolán McNamara]
    + branch libreoffice-26-8-2 [Christian Lohmaier]
    + bump product version to 26.8.2.0.0+ [Christian Lohmaier]
    + bump product version to 26.8.2.1.0+ [Christian Lohmaier]
    + bump product version to 26.8.2.2 [Christian Lohmaier]
    + cff: check the PrivDict range like the other dict reads [Caolán McNamara]
    + cff: stop at the charstring end when reading hintmask and cntrmask bytes [Caolán McNamara]
    + check for missing table style info on plain database ranges (tdf#170842) [Andreas Heinisch]
    + check the byte ranges of a pdf signature against the file [Caolán McNamara]
    + check the class of a loaded SbxArray and its elements [Caolán McNamara]
    + check the class of a nested user type found by name in SbiImage::Load [Caolán McNamara]
    + clear the old value before loading an old format SbxVariable [Caolán McNamara]
    + compare trusted locations by their canonical file path [Caolán McNamara]
    + compound File Binary version 4 rejected - PPT/DOC fail to load (tdf#173869) [Julien Nabet]
    + consider javascript an exotic protocol [Caolán McNamara]
    + correct Japanese template name (tdf#167472) [Laurent Balland]
    + crashtesting: hold the same document BasicManager only once [Caolán McNamara]
    + create a new external firebird database when the user names it [Caolán McNamara]
    + curl: upgrade to 8.23.0 [Xisco Fauli]
    + dbaccess: decide the macro execution mode during load [Caolán McNamara]
    + dbaccess: take JavaDriverClassPath only from the driver configuration [Caolán McNamara]
    + dbaccess: take SystemProperties only from the driver configuration [Caolán McNamara]
    + dbaccess: use the same script checks as an office document [Caolán McNamara]
    + dbaccess: use trusted location rule for ado connections [Caolán McNamara]
    + dbaccess: use trusted location rule for db-driver options [Caolán McNamara]
    + don't abort on macOS thread IDs larger than UINT32_MAX (tdf#173917) [anthony.kinyon@hotmail.com]
    + don't create the BasicManager to warn about Basic on HTML export [Caolán McNamara]
    + don't create the document BasicManager on save to check module sizes [Caolán McNamara]
    + don't load the document Basic to parse formula names during ODF import [Caolán McNamara]
    + don't preload a password protected library of a document [Caolán McNamara]
    + drawinglayer: Disable CairoSDPR by default (tdf#168910) [Jonathan Clark]
    + editeng: read the brush graphic through GetGraphicObject [Caolán McNamara]
    + emf+: limit the bezier points to what the record holds [Caolán McNamara]
    + emfio: let createNonzeroConform resolve a closed winding fill [Caolán McNamara]
    + EPUB export: take popup images only from a media directory the export names [Caolán McNamara]
    + escher export of a linked graphic works from the data it already has [Caolán McNamara]
    + expat: upgrade to 2.8.5 [Xisco Fauli]
    + expat: upgrade to 2.9.0 [Xisco Fauli]
    + extend the instance metadata check [Caolán McNamara]
    + f'up fix for C2487 on containerHasBasicMacros build failure with mergelib [Christian Lohmaier]
    + factor the data pilot url source check into a shared helper [Caolán McNamara]
    + firebird: quote the database path written to databases.conf [Caolán McNamara]
    + firebird: size the setBytes grow check by sqllen [Caolán McNamara]
    + firebird: upgrade to 3.0.14 [Xisco Fauli]
    + fix build with (system-)md4c 0.5.x [Rene Engelhard]
    + fix CppunitTest_tools_test on Windows: exclude test_hostfilter [Mike Kaganski]
    + fix for Impress crash when scrolling through slides (tdf#173885) [Sergey Anisimov]
    + fix macOS build baseline - you need macOS 14 / Xcode 16 to build [Christian Lohmaier]
    + fix openldap with Xcode 16: declaration directly after case not accepted [Christian Lohmaier]
    + fix some issues in sc/notebookbar_compact (tdf#173646) [Julien Nabet]
    + fix Windows build of sfx2: C2487 on containerHasBasicMacros [Mike Kaganski]
    + fix: pdfium build --with-system-abseil [Thorsten Behrens]
    + fontconfig: include xlocale.h for locale_t on old macOS [Dan Williams]
    + freetype: upgrade to 2.15.0 [Xisco Fauli]
    + GetScalingOfSelectedText: avoid endless loop (tdf#162752) [Justin Luth]
    + grey out a dynamic menu entry with a macro: url when macros are disabled [Caolán McNamara]
    + gstreamer: only autoplug demuxers for common self-contained media formats [Caolán McNamara]
    + handle customized bindings of a document like its other content [Caolán McNamara]
    + hsqldb: check an existing lock file rather than taking it over [Caolán McNamara]
    + hsqldb: keep the files of an embedded database in a private directory [Caolán McNamara]
    + hsqldb: no text table files for an embedded database [Caolán McNamara]
    + hsqldb: read textdb.allow_full_path only as a Java system property [Caolán McNamara]
    + hsqldb: treat an unset hsqldb.method_class_names like an empty one [Caolán McNamara]
    + hunspell: upgrade to 1.7.4 [Xisco Fauli]
    + hunspell: upgrade to 1.7.5 [Xisco Fauli]
    + hwp: take the picture link target from inside the follow block [Caolán McNamara]
    + hwpfilter: end the fixed-size string fields with a zero after reading them [Caolán McNamara]
    + if no glyph for hyphen characters use minus character (tdf#171555) [Patrick Luby]
    + isMacroCallCommand: count documentbaseurl like the other load arguments [Caolán McNamara]
    + isMacroCallCommand: count MacroExecutionMode and UpdateDocMode arguments too [Caolán McNamara]
    + keep each string of a Basic image string pool inside the pool [Caolán McNamara]
    + language-subtag-registry: upgrade to 2026-09-17 [Xisco Fauli]
    + libpng: upgrade to 1.6.59 [Xisco Fauli]
    + lingucomponent: fix special hyphenation regression (tdf#174015, tdf#170177) [László Németh]
    + load the Basic project of a VBA mode Calc document after import [Caolán McNamara]
    + lxml: upgrade to 6.1.3 [Xisco Fauli]
    + mariadb-connector-c: upgrade to 3.4.11 [Xisco Fauli]
    + MasterScriptProvider::getScript: match the location to the context exactly [Caolán McNamara]
    + md import: take a linked image's size from the link update [Caolán McNamara]
    + md4c: upgrade to 0.6.0 [Xisco Fauli]
    + move isScriptURLAllowed onto SfxObjectShell [Caolán McNamara]
    + mysqlc: turn off LOAD DATA LOCAL [Caolán McNamara]
    + note a document event from HTML import like the other HTML events [Caolán McNamara]
    + nss: upgrade to 3.130 [Xisco Fauli]
    + nss: upgrade to 3.131.1 [Xisco Fauli]
    + nss: upgrade to 3.132 [Xisco Fauli]
    + odbc: quote connection string values that contain a separator [Caolán McNamara]
    + only create a form control from a form component service [Caolán McNamara]
    + only take an http or https url from a web query file (tdf#106359) [Caolán McNamara]
    + only use the form import object when it is a form component [Caolán McNamara]
    + openssl: upgrade to 3.5.9 [Xisco Fauli]
    + out-of-memory (ofz#528260798) [Xisco Fauli]
    + pdfium: replace extractpatterns.patch with the upstreamed version [Miklos Vajna]
    + pdfium: replace the fix-windows-build patch with the upstreamed version [Miklos Vajna]
    + pdfium: replace the system-icu patch with the upstreamed version [Miklos Vajna]
    + pdfium: update to 7795 [Miklos Vajna]
    + pdfium: update to 7897 [Miklos Vajna]
    + pdfium: update to 7988 [Miklos Vajna]
    + pdfium: update to 8073 [Miklos Vajna]
    + poppler: upgrade to 26.10 [Xisco Fauli]
    + postgresql: limit url keywords outside trusted locations [Caolán McNamara]
    + prevent crash from AutoCorrect copying fieldmark char (tdf#154463) [Andreas Heinisch]
    + put calc pivot table database sources under link control [Caolán McNamara]
    + put refreshing database range imports under the link update control [Caolán McNamara]
    + python3: upgrade to 3.13.16 [Xisco Fauli]
    + python3: upgrade to 3.13.17 [Xisco Fauli]
    + quickjs: upgrade to 0.17.0 [Xisco Fauli]
    + read an IPv4-mapped IPv6 address as its IPv4 address in the metadata check [Caolán McNamara]
    + read the external sheet of an old xls only when link updates are allowed [Caolán McNamara]
    + ReadLine and ReadUniStringLine: stop at the limit in the loop [Caolán McNamara]
    + reduce spacing between ColorIconView items (tdf#173578) [Michael Weghorn]
    + remove checkbox indeterminate state when becoming active (tdf#173819) [Neil Roberts]
    + remove strings from l10n in html export (tdf#144175) [Julien Nabet]
    + reuse INetURLObject::IsExoticProtocol for other binding command schemes [Caolán McNamara]
    + revert "reapply "sc: Fix backward reference when copying a sheet"" (tdf#173608) [Xisco Fauli]
    + revert "sc: fix relative sheet refs of a sheet copied before its source" (tdf#173608) [Xisco Fauli]
    + save the document Basic and dialog libraries without the BasicManager [Caolán McNamara]
    + sc: Add test (tdf#173608) [Xisco Fauli]
    + sc: fix relative sheet refs of a sheet copied before its source (tdf#173608) [Tomaž Vajngerl]
    + sc: prevent crash when table style deselected (tdf#173510) [Justin Luth]
    + scripting: refuse a script URL with a vnd.sun.star.tdoc location [Caolán McNamara]
    + sd: don't erase end() for a listener that was never added [Caolán McNamara]
    + senddoc: pass the mail client its arguments directly [Caolán McNamara]
    + senddoc: percent-encode the quote and the comma in uri-encode [Caolán McNamara]
    + senddoc: percent-encode the subject and body for the mozilla mailers [Caolán McNamara]
    + set WM_CLASS with Qt6 on X11 (tdf#173803) [Vladislav Tarakanov]
    + sfx2: fix crash in SfxCommonTemplateDialog_Impl::FamilySelect [Xisco Fauli]
    + sfx2: loadMacro should test IsMacroDisabled too [Caolán McNamara]
    + sfx2: start an embedded object created empty with macros disallowed [Caolán McNamara]
    + sfx2: start ImportFrom from the same link update state as Load [Caolán McNamara]
    + sqlite: upgrade to 3.54.0 [Xisco Fauli]
    + sqlite: upgrade to 3.54.1 [Xisco Fauli]
    + start the JVM with an empty hsqldb.method_class_names [Caolán McNamara]
    + start with RawBitmap pixels blanked [Caolán McNamara]
    + svg export: check text hyperlink URLs the same way as shape ones [Caolán McNamara]
    + svgio: an SVG with no location of its own opens no external images [Caolán McNamara]
    + svx: Ensure minimum height for ColorWindow (tdf#173695) [Michael Weghorn]
    + svx: Increase min height for ColorWindow icon view to 250 (tdf#173695) [Michael Weghorn]
    + svx: Pass index of activated item in ColorIconView handler (tdf#173623) [Zesen Liu]
    + svx: prevent a third crash when table style deselected (tdf#173510) [Justin Luth]
    + svx: prevent another crash when table style deselected (tdf#173510) [Justin Luth]
    + svx: prevent crash when table style deselected (tdf#173510) [Justin Luth]
    + svx: Set fixed height for ColorWindow's icon view (tdf#173695) [Michael Weghorn]
    + svx: update preview when table style is de-selected (tdf#173510) [Justin Luth]
    + sw/unoobj2: Don’t dereference a potentially null pointer (tdf#173585) [Neil Roberts]
    + sw: allow AutoFormat styles to remove table style (tdf#173510) [Justin Luth]
    + sw: do not default to a table style when converting to table (tdf#173510) [Justin Luth]
    + sw: do not default to a table style when inserting one (tdf#173510) [Justin Luth]
    + sw: Fix unwanted underflow after line containing only spaces (tdf#173348) [Jonathan Clark]
    + sw: prevent another crash when table style deselected (tdf#173510) [Justin Luth]
    + sw: prevent crash when table style deselected (tdf#173510) [Justin Luth]
    + sw: restore the link update setting after saving with an active OLE object [Caolán McNamara]
    + sw: start ConvertFrom from the same link update state as SwDocShell::Load [Caolán McNamara]
    + sw: update preview when convert table style is de-selected (tdf#173510) [Justin Luth]
    + swrelpagesize ui: update only on relation changes (tdf#169219, tdf#173759) [Justin Luth]
    + test getUserAllowsLinkUpdate before every SwapIn in SwGrfNode::ReRead [Caolán McNamara]
    + units are expressed in different units in Navigator in Properties (tdf#173541) [Julien Nabet]
    + units are expressed in different units in Navigator... (part 2) (tdf#173541) [Julien Nabet]
    + unochart: Use m_pTableCursor.get() instead of &*m_pTableCursor [Neil Roberts]
    + UnTrustedScript: compare the script URL scheme ignoring case [Caolán McNamara]
    + update credits [Christian Lohmaier]
    + update git submodules [Christian Lohmaier]
    + update sensitivity of letter spacing label when change alignment (tdf#173818) [Neil Roberts]
    + use [NSMenu popUpContextMenu:] instead of NSPopUpButtonCell (tdf#150754) [Dan Williams]
    + use Py_InitializeFromConfig (tdf#168461, tdf#169387) [Neil Roberts]
    + vcl weld: Evaluate/Apply GtkIconView::item-padding (tdf#173578) [Michael Weghorn]
    + vcl: Make ColorFieldControl RTL-aware (tdf#173418) [Michael Weghorn]
    + vcl: only follow protocols that can name a picture file in loadFromURL [Caolán McNamara]
    + vcl: Reset text color after drawing highlighted IconView item (tdf#170653) [Michael Weghorn]
    + version 26.8.2.2, tag libreoffice-26.8.2.2 [Christian Lohmaier]
    + xmlsecurity: add import of `SigningCertificateV2` element [Michael Stahl]
    + xmlsecurity: improve validation performance [Michael Stahl]
    + xmlsecurity: read XAdES SigningCertificate element [Michael Stahl]
+ dictionaries
    + version 26.8.2.2, tag libreoffice-26.8.2.2 [Christian Lohmaier]
+ help
    + version 26.8.2.2, tag libreoffice-26.8.2.2 [Christian Lohmaier]
+ translations
    + update translations for 26-8 [Christian Lohmaier]
    + update translations for 26.8 [Christian Lohmaier]
    + update translations for 26.8.2 rc1 [Christian Lohmaier]