v4.8.4

## Warning
Do not upgrade to this release if you want to preserve your existing indexed documents but have not yet run the document index migration, which can be done from any version v3.x. [See additional documentation here](https://docs.onyx.app/admins/advanced_configs/opensearch_document_index_migration#opensearch-document-index-migration).

See the assets to download this version and install.

## What's Changed
* chore(hotfix): cherry-pick 4 commits to release v4.8 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/15400
* fix(ci): keep an alert pending after a failed patch, prove a main fix (#15404) to release v4.8 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/15415
* fix(auth): restart sign-in on a stale SSO state instead of showing the error (#15395) to release v4.8 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/15413
* fix(chat): backport file download, upload indicator, code fence, and GPT Image 2.5 fixes to release v4.8 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/15417
* chore(hotfix): cherry-pick 2 commits to release v4.8 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/15438
* chore(deps): backport security dependency fixes, round 2 to release v4.8 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/15494
  * authlib 1.8.0 (#15466), pypdf 6.19.0 (#15467)
  * web: fflate 0.4.9 (#15464); root: baseline-browser-mapping 2.11.0 (#15462), nanoid 3.3.18 (#15478)
  * Craft sandbox template: baseline-browser-mapping 2.11.0, brace-expansion 5.0.12, fast-uri 3.1.8, hono 4.13.7, ip-address 10.7.1, postcss-selector-parser 7.1.3, qs 6.16.0 (#15462, #15476, #15477, #15479, #15480, #15481, #15482)
  * mobile: compression 1.8.2, shell-quote 1.11.0, brace-expansion 1.1.21 / 5.0.12, qs 6.16.0 (#15463, #15465, #15476, #15482)


**Full Changelog**: https://github.com/onyx-dot-app/onyx/compare/v4.8.3...v4.8.4