What's Changed
- [stable28] chore(deps): Bump deepdiver/zipstreamer by @susnux in #45896
- [stable28] fix(files): Properly handle denied ownership transfers by @backportbot in #45905
- [stable28] fix(files_versions): renaming file version when its not a string by @susnux in #46092
- [stable28] fix(security): Update code signing revocation list by @nextcloud-command in #46155
- [stable28] fix(caldav): When message is a reply compare the message sender not the recipient by @backportbot in #46145
- [stable28] fix(openapi): Regenerate OpenAPI after server changes by @nickvergessen in #46164
- [stable28] fix: avoid duplicate tag inserts by checking if the mapping exists already in db by @backportbot in #45994
- [stable28] Update favorites navigation list on folder renames by @backportbot in #46138
- [stable28] fix(files_sharing): Also set the expiration date timezone during validation by @backportbot in #46141
- [stable28] fix: getMountsForFileId may return an unordered list by @backportbot in #46214
- [stable28] feat(files): increase max copy-move concurrency to 5 by @backportbot in #46129
- [stable28] Don't trigger action when renaming by @backportbot in #46019
- [stable28] Rename openFileInfo to fileInfo by @backportbot in #45987
- build(deps-dev): Bump karma-coverage from 2.2.0 to 2.2.1 by @dependabot in #46241
- build(deps-dev): Bump @types/dockerode from 3.3.28 to 3.3.29 by @dependabot in #46243
- build(deps-dev): Bump cypress from 13.7.2 to 13.7.3 by @dependabot in #46245
- [stable28] fix(setupchecks): skip check when disk_free_space is disabled by @backportbot in #46223
- [stable28] fix(security): Update CA certificate bundle by @nextcloud-command in #46265
- [stable28] chore: upgrade
@nextcloud/files
and@nextcloud/sharing
by @skjnldsv in #46236 - [stable28] fix(ExternalSharing): Handle template shares from external sources by @backportbot in #46280
- [stable28] fix(DAV): offset not applied by @blizzz in #46221
- [stable28] fix(settings): Use axios directly for health check to preven URL sanitizing by @backportbot in #45770
- [stable28] build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 by @dependabot in #46239
- chore(deps-dev): bump jsdoc from 4.0.2 to 4.0.3 by @dependabot in #46336
- chore(deps-dev): bump ts-jest from 29.1.2 to 29.1.5 by @dependabot in #46338
- chore(deps-dev): bump mime from 4.0.1 to 4.0.4 by @dependabot in #46337
- chore(deps): bump dompurify from 3.1.4 to 3.1.6 by @dependabot in #46335
- [stable28] chore(mp3info): apply upstream patch for invalid array access by @backportbot in #46341
- [stable28] fix(FilesView): Update files view upon share creation/delete by @backportbot in #46118
- [stable28] fix(s3): Don't wait indefinitely for S3 to return by @backportbot in #46366
- [stable28] fix(SharingDetailsView): Prevent illegal unselection of read permissions by @backportbot in #46364
- [stable28] fix(SetupCheck): jsm test shall not give up with first no-response by @blizzz in #46302
- [stable28] fix(IntegrityCheck): Ensure the check is run if no results are available by @backportbot in #46297
- [stable28] fix(cron): Log long running jobs by @backportbot in #46191
- [stable28] sidebar: allow turning off tags view by default by @solracsf in #46316
- build(deps): Bump @nextcloud/calendar-availability-vue from 2.2.0 to 2.2.2 by @dependabot in #46238
- [stable28] fix(carddav): limit vcard size by @backportbot in #46313
- [stable28] fix(caldav): encode calendar URIs with umlauts for activities by @backportbot in #46011
- [stable28] delete background jobs by id when cleaning up by @backportbot in #45920
- [stable28] fix: don't use custom certificate bundle if no customer certificates are configured by @backportbot in #46067
- [stable28] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root by @backportbot in #45955
- [stable28] fix(files_trashbin): Make files view registering an init script by @susnux in #46417
- [stable28] fix(workflows): Fix file systemtag cache by @backportbot in #46411
- [stable28] Fix npm audit by @nextcloud-command in #45891
- [stable28] perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP by @backportbot in #46394
- [stable28] test: run tests in child process by @kesselb in #46430
- [stable28] fix(caldav): limit vevent size by @backportbot in #46421
- [stable28] fix(theming): Don't reset the cachebuster value when we reset theming by @backportbot in #46433
- [stable28] fix(Session): avoid race conditions on clustered setups by @backportbot in #46436
- [stable28] fix: Update Nextcloud libraries by @backportbot in #46422
- [stable28] fix: Do not log an error when connecting to SFTP without a logged in user by @backportbot in #46060
- [stable28] feat: don't count failed CSRF as failed login attempt by @backportbot in #46442
- [stable28] fix: allows admin to edit global credentials by @backportbot in #46090
- [stable28] fix: don't return null for SharedStorage::getWrapperStorage with share recursion by @backportbot in #44323
- [stable28] fix(theming): Conitionally disable blur filter for performance by @backportbot in #46431
- 28.0.8 RC1 by @Altahrim in #46390
Full Changelog: v28.0.7...v28.0.8rc1