28.0.4 RC1

[Altahrim]

• [stable28] fix(cypress): more stable navigation-bar-settings and versions cypress tests #43773
• [stable28] fix(updatenotification): a11y of channel menu and new icons #43785
• [stable28] Add "-i" to sendmail's pipe #43788
• [stable28] fix(files): page h1 heading #43795
• [stable28] fix(dav): fallback realm for HTTP authentication #43796
• [stable28] Bug fix: Select the correct table based on CALENDAR_TYPE_CALENDAR #43800
• [stable28] Fix data type in FilesMetadata::setIntList() #43801
• [stable28] fix: merge conflict dialog added when overwriting files on move-file action #43811
• [stable28] fix(user_status): Fix status update request not being sent #43813
• [stable28] fix: Allow to disable multipart copy on external s3 storage #43816
• [stable28] fix(admin role): fix old and wrong way to determine whether user is admin #43817
• [stable28] fix: Throw instead of yielding nothing when listing local directories #43828
• [stable28] feat(share): save date and time for expiration #43833
• [stable28] only cleanup orphaned shared daily #43835
• [stable28] chore(deps): Bump calendar-availability-vue from 2.1.0 to 2.2.0 #43841
• [stable28] fix: Display "+New" while files page loads instead of "+Add". #43858
• [stable28] fix(core): Convert text to path in f-droid banner SVG #43864
• [stable28] Collaboration, MailPlugin: Protect access to a potentially missing array component by ??. #43900
• [stable28] fix(files): fix html structure on the profile page #43909
• [stable28] chore(deps): Bump nextcloud/vue from 8.7.0 to 8.8.1 #43915
• [stable28] fix: changed text alignment and icon logic  #43916
• [stable28] Do not create a new version for empty files #43929
• [stable28] fix(IUrlGenerator): Add throws documentation for imagePath function #43978
• [stable28] Improve files version listing #43981
• [stable28] fix: Fetch custom app store url without internet connection #43985
• [stable28] fix(files): Adjust sidebar - remove deprecated function calls and add aria label for favorite icon #43994
• [stable28] fix(files): Open new file when created from template #44019
• [stable28] fix(settings): Disable app again if it breaks the files app #44021
• [stable28] feat: Restore unified search filtering in files view  #44024
• [stable28] fix(user_ldap): Ignore unserialize error in group membership migration #44030
• [stable28] Cleanup versions entities in versions:clean command #44037
• [stable28] fix(settings): Split group lists #44047
• [stable28] fix(JSResourceLocator): Consider configured app roots for files #44050
• [stable28] disable the internal s3sdk multi part copy logic #44053
• [stable28] fix(user_ldap): Early failure for empty password login attempt #44056
• [stable28] fix(db): db-convert supports disabled apps but not removed ones #44065
• [stable28] fix: Avoid clear cache with prefix #44080
• [stable28] Use the proper path to check if a file needs to be copied/moved to the actual target storage #44085
• [stable28] Fix CSP for script-src with nonce on edge #44088
• [stable28] fix(settings): users settings cypress #44089
• [stable28] fix(UpdateNotifications): Handle numeric user ids #44095
• [stable28] fix: changed login-page to reflect correct LDAP settings #44111
• [stable28] tests(dav): Add unit test for no calendars/subscription limit #44118
• [stable28] deprecated sysconfig 'enable_file_metadata' #44124
• [stable28] chore(deps): bump @nextcloud/vue from 8.8.1 to 8.10.0 #44135
• [stable28] fix(security): Update CA certificate bundle #44148
• [stable28] fix(settings): Fix always empty disabled users list for subadmins #44150
• [stable28] docs(config.sample.php): Warn that updatedirectory will break updates if set to a value within the installation folder #44168
• [stable28] fix(files): Right click menu offset and list scrolled glitch #44174
• [stable28] fix(settings): posix_getpwuid can return false which should not be accessed like an array #44182
• [stable28] fix(provisioning_api): Fix AppInfo schema for OpenAPI #44192
• [stable28] fix: No password set for new mail shares #44194
• [stable28] Fixes for getting the filename in the FileInfo class #44201
• [stable28] fix: avoid scanning a non existing directory #44208
• [stable28] fix: Ensure correct stacking context for right click menu #44212
• [stable28] fix(files_sharing): ShareesAPI - Return empty response when user is not allowed to share #44228
• [stable28] fix: fallback from guessing the owner from path in versioning #44248
• [stable28]fix: List specific share permissions as subline #44251
• [stable28] fix xml ocs response for serializable objects #44265
• [stable28] fix(files): Adjust dropservice to work with Blink engine #44273
• [stable28] fix: ensure nested mount points are handled in the correct order #44285
• [stable28] Forbid tagging readonly files #44298
• [stable28] fix(federatedfilesharing): Use correct language file to render notifi… #44313
• [stable28] fix(config): Make sure user keys are strings #44336
• [stable28] fix(share): use share owner to get ownership #44347
• [stable28] fix(dav): ACLs for shared addressbooks #44377
• [stable28] fix(workflowengine): Use correct event names to make search for groups work again #44382
• [stable28] fix(caldav): add EXDATE and EXRULE to confidential object #44386
• [stable28] fix(CI): Correctly test against stable28 again activity#1565
• [stable28] Update nextcloud/ocp dependency activity#1592
• [stable28] Fix npm audit activity#1602
• chore(deps): Bump @nextcloud/dialogs from 4.2.5 to 4.2.6 files_pdfviewer#916
• chore(deps-dev): Bump axios from 1.6.7 to 1.6.8 files_pdfviewer#925
• chore(deps-dev): Bump adm-zip from 0.5.10 to 0.5.12 files_pdfviewer#926
• [stable28] Update nextcloud/ocp dependency firstrunwizard#1122
• [stable28] Fix npm audit firstrunwizard#1134
• [stable28] chore: update workflows from templates logreader#1145
• [stable28] Build(deps): bump vite from 4.5.0 to 4.5.2, audit dependencies logreader#1168
• [stable28] Update nextcloud/ocp dependency nextcloud_announcements#304
• [stable28] Update nextcloud/ocp dependency nextcloud_announcements#308
• Chore(deps): Bump @nextcloud/router from 2.2.0 to 2.2.1 notifications#1799
• [stable28] fix(mail): Use parsed action label in email notification notifications#1843
• [stable28] chore(deps): audit dependencies notifications#1844
• [stable28] Update nextcloud/ocp dependency notifications#1851
• [stable28] Update nextcloud/ocp dependency notifications#1856
• [stable28] fix(api): Ignore "parsed" link and icon urls when deleting notifications#1859
• chore: update workflows from templates password_policy#525
• [stable28] Bump nextcloud/vue from 8.6.2 to 8.8.1 password_policy#555
• [stable28] Bump nextcloud/vue from 8.6.2 to 8.8.1 photos#2369
• Chore(deps-dev): Bump autoprefixer from 10.4.17 to 10.4.18 photos#2372
• [stable28] Update nextcloud/ocp dependency photos#2380
• [stable28] Update nextcloud/ocp dependency photos#2387
• [stable28] Fix npm audit photos#2392
• [stable28] fix: support 28 Files recommendations#709
• chore(CI): Adjust testing matrix for Nextcloud 28 on stable28 related_resources#323
• [stable28] Update nextcloud/ocp dependency related_resources#352
• [stable28] chore: update workflows from templates related_resources#356
• [stable28] Update nextcloud/ocp dependency serverinfo#550
• [stable28] chore: update workflows from templates serverinfo#560
• [stable28] Update nextcloud/ocp dependency serverinfo#574
• fix(deps): update dependency @nextcloud/router to ^2.2.1 (stable28) text#5346
• fix(deps): update yjs (stable28) text#5388
• chore(deps): update dependency cypress-split to ^1.21.0 (stable28) text#5389
• [stable28] Fix npm audit text#5391
• fix(deps): update dependency @nextcloud/dialogs to ^5.1.2 (stable28) text#5414
• chore(deps): update dependency vite to ^5.1.4 (stable28) text#5415
• [stable28] update home button selector in file picker breadcrumbs text#5416
• [stable28] fix(ActionInsertLink): Sync NcActionInput value property text#5425
• [stable28] chore(ci): Update workflows from main branch text#5428
• chore(deps): update vueuse to ^10.9.0 (stable28) text#5433
• Update dependency @nextcloud/vue to ^8.8.1 (stable28) text#5434
• [stable28] Update nextcloud/ocp dependency text#5455
• [stable28] fix(Tables): require at least one cell in the header text#5465
• [stable28] fix(backend): Accept pushs with only step1 messages by read-only clients text#5471
• [stable28] fix(session): Fix setting a guest name text#5475
• [stable28] fix: Avoid race condition that may initialize a document twice on the clients text#5478
• [stable28] fix(attachments): Don't use currentSession for fetching attachments text#5486
• [stable28] fix(LinkPicker): Don't open link picker inside code blocks text#5492
• [stable28] Bring back test failing due to server issue text#5494
• chore(deps): update dependency vite to ^5.1.6 (stable28) text#5503
• fix(deps): update dependency lib0 to ^0.2.92 (stable28) text#5504
• fix(deps): update dependency @nextcloud/dialogs to ^5.2.0 (stable28) text#5506
• fix(deps): update dependency @nextcloud/vue to ^8.11.0 (stable28) text#5507
• fix(deps): update dependency mermaid to ^10.9.0 (stable28) text#5508
• [stable28] Update nextcloud/ocp dependency text#5511
• [stable28] Fix npm audit text#5513
• [stable28] fix(MarkdownContentEditor): Respect onLoaded callback passed via API text#5526
• [stable28] chore: update workflows from templates updater#534
• [stable28] Bump nextcloud/vue from 8.6.2 to 8.8.1 viewer#2182
• [stable28] fix: cypress viewer#2188
• [stable28] fix(cypress): introduce cypress-split viewer#2189
• chore(deps): update dependency cypress to ^13.6.6 (stable28) viewer#2203
• chore(deps): update dependency ts-node to ^10.9.2 (stable28) viewer#2204
• chore(deps): update dependency typescript to ^5.4.2 (stable28) viewer#2205
• chore(deps): update dependency wait-on to ^7.2.0 (stable28) viewer#2206
• chore(deps): update dockerode (stable28) viewer#2207
• fix(deps): update dependency @fontsource/roboto to ^5.0.12 (stable28) viewer#2208
• fix(deps): update dependency filerobot-image-editor to ^4.7.0 (stable28) viewer#2209
• fix(deps): update dependency webdav to ^5.4.0 (stable28) viewer#2210
• fix(deps): update nextcloud (stable28) viewer#2214
• [stable28] fix(cypress): sharing download test viewer#2223
• [stable28] Fix npm audit viewer#2243

Pending PRs:

• @backportbot
  • [stable28] sidebar: allow turning off tags view by default #42782
  • [stable28] feature(files): Hide breadcrumbs when an upload is ongoing on narrow screen #40942 #43834
  • [stable28] fix(sharing): Avoid (dead)locking during orphan deletion #44010
  • [stable28] fix(dav): Add occ command to fix missing caldav sync tokens #44197
  • [stable28] Added rate limit bypass for app_api requests #44296
  • [stable28] add some recrusive detection/prevention #44320
  • [stable28] fix: don't return null for SharedStorage::getWrapperStorage with share recursion #44323
  • [stable28] fix(settings): apps list layout #44327
  • [stable28] fix(LDAP): escape DN on check-user #44352

[AndyScherzinger]

Must have PRs

• [stable28] Forbid tagging readonly files #44298
• [stable28] fix: ensure nested mount points are handled in the correct order #44285
• [stable28] fix(dav): ACLs for shared addressbooks #44377
• [stable28] fix(caldav): add EXDATE and EXRULE to confidential object #44386
• [stable28] fix(workflowengine): Use correct event names to make search for groups work again #44382