diff --git a/gui/default/assets/lang/lang-be.json b/gui/default/assets/lang/lang-be.json
index a32cdbdbb..a74d477a1 100644
--- a/gui/default/assets/lang/lang-be.json
+++ b/gui/default/assets/lang/lang-be.json
@@ -39,6 +39,7 @@
     "Are you sure you want to restore {%count%} files?": "Вы сапраўды жадаеце аднавіць {{count}} файл(ы)?",
     "Are you sure you want to revert all local changes?": "Вы сапраўды жадаеце адмяніць усе лакальныя змены?",
     "Are you sure you want to upgrade?": "Вы сапраўды жадаеце абнавіць?",
+    "Authentication Required": "Патрабуецца Аутэнтыфікацыя",
     "Authors": "Аўтары",
     "Auto Accept": "Прынімаць Аўтаматычна",
     "Automatic Crash Reporting": "Аўтаматычныя Спрадвыздачы Пра Памылкі",
diff --git a/gui/default/assets/lang/lang-bg.json b/gui/default/assets/lang/lang-bg.json
index f04a369a7..ea4bd1117 100644
--- a/gui/default/assets/lang/lang-bg.json
+++ b/gui/default/assets/lang/lang-bg.json
@@ -386,6 +386,7 @@
     "Staggered File Versioning": "Разпределени версии",
     "Start Browser": "Отваряне в мрежов четец",
     "Statistics": "Статистика",
+    "Stay logged in": "Оставане в системата",
     "Stopped": "Спряна",
     "Stores and syncs only encrypted data. Folders on all connected devices need to be set up with the same password or be of type \"{%receiveEncrypted%}\" too.": "Съхранява и синхронизира само шифровани данни. Папките на всички свързани устройства трябва да бъдат настроени със същата парола или също да са от вида „{{receiveEncrypted}}“.",
     "Subject:": "Относно:",
diff --git a/man/stdiscosrv.1 b/man/stdiscosrv.1
index c422d77ac..53b379d05 100644
--- a/man/stdiscosrv.1
+++ b/man/stdiscosrv.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "STDISCOSRV" "1" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "STDISCOSRV" "1" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 stdiscosrv \- Syncthing Discovery Server
 .SH SYNOPSIS
diff --git a/man/strelaysrv.1 b/man/strelaysrv.1
index 7fb1f6bcf..32d5e5460 100644
--- a/man/strelaysrv.1
+++ b/man/strelaysrv.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "STRELAYSRV" "1" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "STRELAYSRV" "1" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 strelaysrv \- Syncthing Relay Server
 .SH SYNOPSIS
diff --git a/man/syncthing-bep.7 b/man/syncthing-bep.7
index 9753d720d..e1844ae56 100644
--- a/man/syncthing-bep.7
+++ b/man/syncthing-bep.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-BEP" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-BEP" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-bep \- Block Exchange Protocol v1
 .SH INTRODUCTION AND DEFINITIONS
diff --git a/man/syncthing-config.5 b/man/syncthing-config.5
index d6b3c2c1a..583146275 100644
--- a/man/syncthing-config.5
+++ b/man/syncthing-config.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-CONFIG" "5" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-CONFIG" "5" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-config \- Syncthing Configuration
 .SH SYNOPSIS
diff --git a/man/syncthing-device-ids.7 b/man/syncthing-device-ids.7
index 663a6e663..60c68ac23 100644
--- a/man/syncthing-device-ids.7
+++ b/man/syncthing-device-ids.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-DEVICE-IDS" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-DEVICE-IDS" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-device-ids \- Understanding Device IDs
 .sp
diff --git a/man/syncthing-event-api.7 b/man/syncthing-event-api.7
index 2fc1d31e6..5a896bd1d 100644
--- a/man/syncthing-event-api.7
+++ b/man/syncthing-event-api.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-EVENT-API" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-EVENT-API" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-event-api \- Event API
 .SH DESCRIPTION
diff --git a/man/syncthing-faq.7 b/man/syncthing-faq.7
index 6c39093e7..62d2b8e04 100644
--- a/man/syncthing-faq.7
+++ b/man/syncthing-faq.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-FAQ" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-FAQ" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-faq \- Frequently Asked Questions
 .INDENT 0.0
diff --git a/man/syncthing-globaldisco.7 b/man/syncthing-globaldisco.7
index 11723c894..bafcf3b89 100644
--- a/man/syncthing-globaldisco.7
+++ b/man/syncthing-globaldisco.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-GLOBALDISCO" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-GLOBALDISCO" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-globaldisco \- Global Discovery Protocol v3
 .SH ANNOUNCEMENTS
diff --git a/man/syncthing-localdisco.7 b/man/syncthing-localdisco.7
index d90002568..47d067f96 100644
--- a/man/syncthing-localdisco.7
+++ b/man/syncthing-localdisco.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-LOCALDISCO" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-LOCALDISCO" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-localdisco \- Local Discovery Protocol v4
 .SH MODE OF OPERATION
diff --git a/man/syncthing-networking.7 b/man/syncthing-networking.7
index c7513a676..3a6911ae3 100644
--- a/man/syncthing-networking.7
+++ b/man/syncthing-networking.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-NETWORKING" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-NETWORKING" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-networking \- Firewall Setup
 .SH ROUTER SETUP
diff --git a/man/syncthing-relay.7 b/man/syncthing-relay.7
index 1b812e23a..6edac6702 100644
--- a/man/syncthing-relay.7
+++ b/man/syncthing-relay.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-RELAY" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-RELAY" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-relay \- Relay Protocol v1
 .SH WHAT IS A RELAY?
diff --git a/man/syncthing-rest-api.7 b/man/syncthing-rest-api.7
index 4f289832f..2311d79a0 100644
--- a/man/syncthing-rest-api.7
+++ b/man/syncthing-rest-api.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-REST-API" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-REST-API" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-rest-api \- REST API
 .sp
diff --git a/man/syncthing-security.7 b/man/syncthing-security.7
index c0657fab6..8bb88fda5 100644
--- a/man/syncthing-security.7
+++ b/man/syncthing-security.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-SECURITY" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-SECURITY" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-security \- Security Principles
 .sp
diff --git a/man/syncthing-stignore.5 b/man/syncthing-stignore.5
index 4268fb624..4fc98b8a4 100644
--- a/man/syncthing-stignore.5
+++ b/man/syncthing-stignore.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-STIGNORE" "5" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-STIGNORE" "5" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-stignore \- Prevent files from being synchronized to other nodes
 .SH SYNOPSIS
@@ -90,10 +90,9 @@ any lower case character.
 \fBBackslash\fP (\fB\e\fP) “escapes” a special character so that it loses its
 special meaning. For example, \fB\e{banana\e}\fP matches \fB{banana}\fP exactly
 and does not denote a set of alternatives as above.
-.UNINDENT
 .sp
 \fBNOTE:\fP
-.INDENT 0.0
+.INDENT 2.0
 .INDENT 3.5
 Escaped characters are not supported on Windows, where \fB\e\fP is the
 path separator. If you still need to match files that have square or
@@ -103,7 +102,6 @@ you can type \fB?banana?\fP to match both \fB[banana]\fP and
 \fB{banana}\fP, and so on.
 .UNINDENT
 .UNINDENT
-.INDENT 0.0
 .IP \(bu 2
 A pattern beginning with \fB/\fP matches in the root of the synced folder only.
 \fB/foo\fP matches \fBfoo\fP but not \fBsubdir/foo\fP\&.
@@ -122,6 +120,51 @@ synchronised root directory.
 A pattern beginning with a \fB!\fP prefix negates the pattern: matching files
 are \fIincluded\fP (that is, \fInot\fP ignored). This can be used to override
 more general patterns that follow.
+.sp
+\fBNOTE:\fP
+.INDENT 2.0
+.INDENT 3.5
+Negated patterns that can match items below the folder root will cause
+Syncthing to traverse otherwise ignored directories. If the
+\fI\%watcher\fP is enabled, those directories will also be
+watched. Directories ignored before the first negated pattern can
+however be safely skipped, since the first matching pattern wins. For
+example:
+.INDENT 0.0
+.INDENT 3.5
+.sp
+.nf
+.ft C
+/foo
+/bar
+!baz
+*
+.ft P
+.fi
+.UNINDENT
+.UNINDENT
+.sp
+The directories \fBfoo\fP and \fBbar\fP will be entirely ignored. However any
+other directories present must be scanned entirely to find any items
+named \fIbaz\fP, despite the fact that they will be ignored due to the
+\fB*\fP\&. As a special case, top\-level rooted patterns (e.g. \fB!/foo\fP) do
+not cause this behaviour:
+.INDENT 0.0
+.INDENT 3.5
+.sp
+.nf
+.ft C
+!/baz
+*
+.ft P
+.fi
+.UNINDENT
+.UNINDENT
+.sp
+In this case, only the directory \fBbaz\fP will be scanned, since
+everything else is ignored by the \fB*\fP pattern.
+.UNINDENT
+.UNINDENT
 .IP \(bu 2
 A pattern beginning with a \fB(?i)\fP prefix enables case\-insensitive pattern
 matching. \fB(?i)test\fP matches \fBtest\fP, \fBTEST\fP and \fBtEsT\fP\&. The
@@ -132,33 +175,19 @@ be synchronized. On Mac OS and Windows, patterns are always case\-insensitive.
 A pattern beginning with a \fB(?d)\fP prefix enables removal of these files if
 they are preventing directory deletion. This prefix should be used by any OS
 generated files which you are happy to be removed.
+.sp
+\fBNOTE:\fP
+.INDENT 2.0
+.INDENT 3.5
+Prefixes can be specified in any order (e.g. \fB(?d)(?i)\fP), but cannot
+be combined in a single pair of parentheses like (?di)\&.
+.UNINDENT
+.UNINDENT
 .IP \(bu 2
 A line beginning with \fB//\fP is a comment and has no effect. The same double
 slashes in any other place are interpreted literally, e.g. trying to do
 \fBfile // comment\fP will make Syncthing look for a file called \fBfile // comment\fP\&.
 .UNINDENT
-.sp
-\fBNOTE:\fP
-.INDENT 0.0
-.INDENT 3.5
-Prefixes can be specified in any order (e.g. “(?d)(?i)”), but cannot be in a
-single pair of parentheses (not “(?di)”).
-.UNINDENT
-.UNINDENT
-.sp
-\fBNOTE:\fP
-.INDENT 0.0
-.INDENT 3.5
-Include patterns (that begin with \fB!\fP) cause Syncthing to traverse
-the entire directory tree regardless of other ignore patterns.
-If the \fI\%watcher\fP is enabled, the entire directory
-tree will be watched as well.
-.sp
-Top\-level include patterns are treated as special cases and will not force Syncthing to
-scan (or watch) the entire directory tree. For example: \fB!/foo\fP is a top\-level include
-pattern, while \fB!/foo/bar\fP is not.
-.UNINDENT
-.UNINDENT
 .SH EXAMPLE
 .sp
 Given a directory layout starting at the synced folder’s root:
diff --git a/man/syncthing-versioning.7 b/man/syncthing-versioning.7
index e8023c521..f3a4eeadd 100644
--- a/man/syncthing-versioning.7
+++ b/man/syncthing-versioning.7
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING-VERSIONING" "7" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING-VERSIONING" "7" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing-versioning \- Keep automatic backups of deleted files by other nodes
 .sp
diff --git a/man/syncthing.1 b/man/syncthing.1
index 62fd5a5f1..27df777e3 100644
--- a/man/syncthing.1
+++ b/man/syncthing.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "SYNCTHING" "1" "Jan 04, 2024" "v1.27.2" "Syncthing"
+.TH "SYNCTHING" "1" "Jan 15, 2024" "v1.27.3" "Syncthing"
 .SH NAME
 syncthing \- Syncthing
 .SH SYNOPSIS