What's Changed
- [stable27] fix(caldav): don't reuse query builder objects by @backportbot-nextcloud in #42153
- [stable27] Update crl after revoke rides.csr by @mgallien in #42399
- [stable27] fix: Ensure app menu entries and dashboard welcome message have enough contrast by @backportbot-nextcloud in #42404
- [stable27] Don't write back .htaccess file on a RO filesystem by @backportbot-nextcloud in #42385
- [stable27] Update psalm-baseline.xml by @nextcloud-command in #41479
- [stable27] AppAPI: allow to bypass Two-Factor by @backportbot-nextcloud in #42520
- [stable27] fix(LDAP): ensure stored groups are formatted as simple list by @backportbot-nextcloud in #42447
- [stable27] fix(dav): allow multiple organizers if possible by @backportbot-nextcloud in #42375
- [27] restore shared lock ttl to previous value when releasing by @icewind1991 in #42549
- [stable27] only do a multipart s3 copy when above the regular copy limit by @backportbot-nextcloud in #42522
- [stable27] fix(files): service worker by @solracsf in #42608
- [stable27] perf: Use more performant way to obtain and check the email as a login name with token login by @juliushaertl in #42652
- [stable27] fix: Always apply fullscreen styling to sidebar by @juliushaertl in #42655
- [stable27] fix(share): use user timezone to parse share expiration date by @backportbot in #42791
- [stable27] fix: handle exif metadata read errors gracefully by @st3iny in #42774
- [stable27] fix(i18n): Changed grammar by @rakekniven in #41663
- [stable27] fix(appstore): Only send subscription keys to valid appstores by @backportbot in #42831
- fix(files): Fix reference picker not working by @susnux in #42437
- [stable27] fix: reduce memory consumption of scans by @backportbot in #42828
- [stable27] (dashboard): Lower error to info log message by @backportbot in #42825
- [stable27] fix(manifest): Check if app exists instead of accessing null as an array by @nickvergessen in #42865
- [stable27] fix(systemreport): Mark more configs as sensitive by @backportbot in #42873
- [stable27] Update crl after revoke integration_homeassistant.csr by @backportbot in #42875
- [stable27] fix(session): Avoid useless authtoken DB queries for anonymous requests by @backportbot-nextcloud in #42870
- [stable27] Fix some silent share bugs by @backportbot in #42778
- [stable27] fix(CalDAV): set acls for DeletedCalendarObjectsCollection by @ChristophWurst in #42907
- [stable27] fix(Users/Quota setting): Prevent floating point value from getting truncated in locales other than english by @marcelklehr in #42172
- [stable27] Improve path resolution in files_version hooks by @backportbot-nextcloud in #42926
- 27.1.6 RC1 by @blizzz in #42788
- [stable27] fix(auth): Fix logging in with email and app password by @backportbot in #43011
- [stable27] Make OAuth2 authorization code expire by @julien-nc in #43020
- 27.1.6 RC2 by @blizzz in #43023
- [stable27] fix(security): Update code signing revocation list by @nextcloud-command in #43068
- 27.1.6 by @blizzz in #43096
Full Changelog: v27.1.5...v27.1.6