+ core
    + "$" must be at the beginning of replaceTo string (tdf#171372) [Julien Nabet]
    + bump product version to 26.2.5.1.0+ [Christian Lohmaier]
    + bump product version to 26.2.5.2 [Christian Lohmaier]
    + curl: upgrade to 8.21 (squashed) [Xisco Fauli]
    + dereference after null check (cid#1695398) [Xisco Fauli]
    + don't bother loading exotic protocols for document-supplied data [Caolán McNamara]
    + expat: upgrade to 2.8.2 [Xisco Fauli]
    + explicitly add accelerator for Open Hyperlink (tdf#172588) [Ilmari Lauhakangas]
    + firebird: don't attach a database that is not in the normal backup state [Caolán McNamara]
    + firebird: don't run an attached database's own event triggers [Caolán McNamara]
    + firebird: only write back an embedded database that was opened [Caolán McNamara]
    + fix text search match offsets around surrogate pairs (tdf#172646) [Khaled Hosny]
    + integer-overflow (ofz#513277199) [Caolán McNamara]
    + libtiff: upgrade to 4.7.2 [Xisco Fauli]
    + libxml2: add patch for CVE-2026-6732 [Michael Stahl]
    + limit the gstreamer backend to simple self-contained media [Caolán McNamara]
    + ofz: cff, track the charstring output capacity [Caolán McNamara]
    + ofz: check buffer bounds before reading offsets in CFF seekIndexData [Caolán McNamara]
    + ofz: check for failure here too [Caolán McNamara]
    + ofz: ignore an advance array shorter than the string [Caolán McNamara]
    + ofz: initialCffRead fails during smoketest [Caolán McNamara]
    + ofz: pdf, check record againsts max allowed size [Caolán McNamara]
    + ofz: pdf, clamp stream Length to the bytes actually read [Caolán McNamara]
    + ofz: skip checksum check when fuzzing [Caolán McNamara]
    + ofz: wmf, check record against max allowed size [Caolán McNamara]
    + put calc external data mappings under link update control [Caolán McNamara]
    + put media files under link update control [Caolán McNamara]
    + put slideshow media links under link control [Caolán McNamara]
    + python 3.12: add patches for differents CVEs [Xisco Fauli]
    + reapply "firebird: keep each embedded database's files in one directory" [Xisco Fauli]
    + sc: check the host when fetching an external data range [Caolán McNamara]
    + sc: only build the supported data providers when loading a document [Caolán McNamara]
    + sc: quote the table name in the sql data provider query [Caolán McNamara]
    + sd: implement "block untrusted referer links" feature for exported ppt sounds [Caolán McNamara]
    + show infobar for calc graphics with remote content too [Caolán McNamara]
    + skia: put Skia Hardware acceleration under experimental mode [Xisco Fauli]
    + sqlite: upgrade to 3.53.2 [Xisco Fauli]
    + sqlite: upgrade to 3.53.3 [Xisco Fauli]
    + update credits [Christian Lohmaier]
    + update git submodules [Christian Lohmaier]
    + upgrade to latest librevenge [Caolán McNamara]
    + upgrade to libe-book-0.1.4.tar.xz [Caolán McNamara]
    + upgrade to libmwaw-0.3.23.tar.xz [Caolán McNamara]
    + upgrade to libstaroffice-0.0.8.tar.xz [Caolán McNamara]
    + version 26.2.5.2, tag libreoffice-26.2.5.2 [Christian Lohmaier]
    + xmlsec: upgrade to 1.3.12 [Xisco Fauli]
+ dictionaries
    + version 26.2.5.2, tag libreoffice-26.2.5.2 [Christian Lohmaier]
+ help
    + version 26.2.5.2, tag libreoffice-26.2.5.2 [Christian Lohmaier]
+ translations
    + update translations for 26.2.5 rc2 [Christian Lohmaier]