[v1.15.0](https://github.com/syncthing/syncthing/releases/v1.15.0)

This release fixes a vulnerability where Syncthing and the relay server
can crash due to malformed relay protocol messages (CVE-2021-21404); see
https://github.com/syncthing/syncthing/security/advisories/GHSA-x462-89pf-6r5h.

This release updates the CLI to use subcommands and adds the subcommands
`cli` (previously standalone `stcli` utility) and `decrypt` (for offline
verifying and decrypting encrypted folders).

With this release we invite everyone to test the "untrusted (encrypted)
devices" feature. You should not use it yet on important production
data. Thus UI controls are hidden behind a feature flag. For more
information, visit:
https://forum.syncthing.net/t/testing-untrusted-encrypted-devices/16470

Bugfixes:

- [#7198](https://github.com/syncthing/syncthing/issues/7198): Removing a folder and re-adding it again (untrusted) makes it not sync until restart
- [#7385](https://github.com/syncthing/syncthing/issues/7385): infinite filesystem recursion due to missing file id
- [#7419](https://github.com/syncthing/syncthing/issues/7419): panic "Snapshot(): database is closed" on start after wiping database
- [#7429](https://github.com/syncthing/syncthing/issues/7429): "Ignore Patterns" tab disappears after visiting "Folder Defaults"
- [#7434](https://github.com/syncthing/syncthing/issues/7434): Non-DNS-like computer name fails creation of HTTPS certificate
- [#7451](https://github.com/syncthing/syncthing/issues/7451): strelaysrv v1.14.0 failing to load
- [#7466](https://github.com/syncthing/syncthing/issues/7466): Receive-encrypted fails after a while: file with empty block list
- [#7469](https://github.com/syncthing/syncthing/issues/7469): .stignore should be ignored in Receive Encrypted folders
- [#7474](https://github.com/syncthing/syncthing/issues/7474): Device tries to push ignored files to a remote device in a 3-device setup
- [#7481](https://github.com/syncthing/syncthing/issues/7481): Versioning help strings are not displayed in the GUI
- [#7509](https://github.com/syncthing/syncthing/issues/7509): Sharing the first folder to an untrusted device on an established connection sends plain-text

Enhancements:

- [#6566](https://github.com/syncthing/syncthing/issues/6566): Ship stcli in main package
- [#7457](https://github.com/syncthing/syncthing/issues/7457): Remove sub-second precision from the REST API rest/stats/device.
- [#7514](https://github.com/syncthing/syncthing/issues/7514): Increase default strelaysrv network buffer size

Other issues:

- [#4719](https://github.com/syncthing/syncthing/issues/4719): Package stcli as Debian package
- [#7199](https://github.com/syncthing/syncthing/issues/7199): Build script -no-upgrade handling is unintuitive
-----BEGIN PGP SIGNATURE-----
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=nZLX
-----END PGP SIGNATURE-----