What's new:

• Security fix: Sanitize the path parameter in History item widget to be plain text
• Security fix: Use microseconds in Receive mode directory creation to avoid potential DoS
• Security fix: Several hardening improvements for session and username management in Chat mode, to prevent impersonation and other issues
• Major feature: Obtain bridges from Moat / BridgeDB (over a domain-fronted Meek client)
• Major feature: Snowflake bridge support
• New feature: Tor connection settings, as well as general settings, are now Tabs rather than dialogs
• New feature: User can customize the Content-Security-Policy header in Website mode
• New feature: Built-in bridges are automatically updated from Tor's API when the user has chosen to use them
• Switch to using our stem fork called cepa, which is now published on PyPi so we can build it in releases
• Various bug fixes