v0.25.21

## What's Changed
* fix(server): handle missing ContentType in attachment download by @Y8C68 in https://github.com/bigcapitalhq/bigcapital/pull/1063
* fix(server): use correct base currency in financial reports by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1074
* fix(server): localize i18n column headers in CSV/XLSX/PDF exports by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1075
* fix(server): correct "Liabilties" typo to "Liabilities" in balance sheet by @rebekah-create in https://github.com/bigcapitalhq/bigcapital/pull/1090
* Fix pagination params silently ignored on collection GET endpoints by @c-premus in https://github.com/bigcapitalhq/bigcapital/pull/1089
* chore(sdk): update OpenAPI spec and generated types by @github-actions[bot] in https://github.com/bigcapitalhq/bigcapital/pull/1091
* fix(server): prevent cross-tenant attachment access (IDOR) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1093
* fix(server): prevent cross-tenant access via organization-id header by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1094
* fix(server): use CSPRNG for attachment S3 keys (GHSA-gj48-p5ff-g67f) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1096
* fix(server): prevent SQL injection via sortOrder in DynamicListing (GHSA-hcp2-qqg6-jjpm) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1097
* feat(ee): audit logs domain level by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1076
* chore(sdk): update OpenAPI spec and generated types by @github-actions[bot] in https://github.com/bigcapitalhq/bigcapital/pull/1098
* fix(server): verify Plaid webhook signatures (GHSA-g56w-g54f-whq5) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1095
* feat(ee): add multi-organization workspaces feature by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1078
* feat(ee): add workspaces feature by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1049
* refactor(webapp): rename store files and folders to kebab-case by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1100
* refactor(webapp): standardize withX HOC types with shared MapState generic and props interfaces by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1101
* fix(server): resolve all TypeScript errors without unsafe type casts by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1102
* refactor(webapp): rename query hooks to kebab-case convention by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1018
* feat(sdk): add table accept header to report fetchers and refactor audit log hooks by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1104
* refactor: convert containers default exports to named exports by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1105
* refactor(typescript): add proper types to Preferences container files by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1106
* ci: add Prettier format check GitHub Action by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1107
* chore(sdk): update OpenAPI spec and generated types by @github-actions[bot] in https://github.com/bigcapitalhq/bigcapital/pull/1108
* refactor: remove Project Profitability Summary report by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1110
* fix(webapp): resolve TypeScript errors across components and financial statements by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1109
* refactor(server): replace direct TenancyContext/TransformerInjectable providers with TenancyModule import by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1113
* fix(auth): add ownership check to API key revocation to prevent IDOR (GHSA-xc3g-x39m-684g) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1114
* fix(import): enforce file type validation to prevent unrestricted upload (GHSA-4c3x-fp46-xp4r) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1115
* fix(auth): replace weak uniqid reset token with crypto.randomBytes and fix broken expiry check (GHSA-qx24-x69m-97wr) by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1116
* refactor(webapp): simplify financial statements export progress toast by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1119
* feat(payment-services): add OpenAPI DTOs and derive SDK types from schema by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1122
* refactor(webapp): add proper TypeScript types to infinite-query hooks by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1123
* fix(webapp): dynamically load moment.js locales by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1124
* refactor(server): convert DTO properties to camelCase and add Vendor response DTOs by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1125
* refactor(server): add OpenAPI schema for vendor/import endpoints and derive SDK types by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1126
* fix(server): unify FinancialStatements number format DTOs by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1127
* fix(server): add OpenAPI schema for contacts auto-complete endpoint by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1128
* chore: format all packages by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1129
* fix(server): document numberFormat query param via @ApiQuery by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1130
* refactor: FS query type-safety and response DTO ids by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1131
* fix(webapp): extract flattenInfinityPages utility and harden Account select types by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1132
* fix(server): only pass SMTP auth when credentials are configured by @DogInfantry in https://github.com/bigcapitalhq/bigcapital/pull/1135
* refactor(webapp): tighten query types across banking, cashflow and items by @abouolia in https://github.com/bigcapitalhq/bigcapital/pull/1136

## New Contributors
* @Y8C68 made their first contribution in https://github.com/bigcapitalhq/bigcapital/pull/1063
* @rebekah-create made their first contribution in https://github.com/bigcapitalhq/bigcapital/pull/1090
* @c-premus made their first contribution in https://github.com/bigcapitalhq/bigcapital/pull/1089
* @DogInfantry made their first contribution in https://github.com/bigcapitalhq/bigcapital/pull/1135

**Full Changelog**: https://github.com/bigcapitalhq/bigcapital/compare/v0.25.20...v0.25.21