What's Changed
🚓 Security
Use IClientService (with SSRF protection) instead of straight Guzzle Client by @SMillerDev in #3672
🚀 Changed
make future github release notes a bit more organized by @Grotax in #3688
fix(starred): stop endless item requests in Starred view by @Copilot in #3694
chore(devcontainer): devcontainer enhancements by @Grotax in #3698
📦 Dependency Updates
build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689
build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690
build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691
build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696
build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #3699
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3700
build(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 by @dependabot[bot] in #3702
build(deps): Bump the vue group with 2 updates by @dependabot[bot] in #3701
Full Changelog: 28.2.0...28.3.0
What's Changed
🚀 Changed
make future github release notes a bit more organized by @Grotax in #3688
Change: Use IClientService instead of straight Guzzle Client by @SMillerDev in #3672
fix(starred): stop endless item requests in Starred view by @Copilot in #3694
📦 Dependency Updates
build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689
build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690
build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691
build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696
Full Changelog: 28.2.0...28.3.0-beta.1
What's Changed
build(deps): Bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in #3626
build(deps): Bump vue from 3.5.29 to 3.5.30 in the vue group by @dependabot[bot] in #3619
build(deps-dev): Bump @types/node from 25.3.5 to 25.4.0 in the types group by @dependabot[bot] in #3624
build(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 by @dependabot[bot] in #3625
Update npm audit fix workflow by @wofferl in #3632
build(deps): Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #3618
Refactor full text scraper to use guzzle http client by @wofferl in #3630
build(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in the types group by @dependabot[bot] in #3636
build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in #3634
build(deps): Bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in #3633
Rework FeedItemDisplayTest by @wofferl in #3638
Limit full text scraper to download only new or updated articles by @wofferl in #3631
build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3637
Release 28.2.0-beta.1 by @Grotax in #3639
build(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 by @dependabot[bot] in #3642
build(deps-dev): Bump jsdom from 28.1.0 to 29.0.0 by @dependabot[bot] in #3643
build(deps): Bump @nextcloud/password-confirmation from 6.0.3 to 6.1.0 by @dependabot[bot] in #3645
build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #3650
build(deps): Bump picomatch by @dependabot[bot] in #3648
build(deps): Bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #3651
build(deps): Bump vue-router from 5.0.3 to 5.0.4 in the vue group by @dependabot[bot] in #3652
build(deps-dev): Bump jsdom from 29.0.0 to 29.0.1 by @dependabot[bot] in #3653
build(deps): Bump brace-expansion by @dependabot[bot] in #3654
Add a feature to download the web version of an article on demand by @wofferl in #3647
fix: show move feed errors in the UI by @Maa-ly in #3649
Rework feed options menu and feed settings by @wofferl in #3655
build(deps-dev): Bump @vue/tsconfig from 0.9.0 to 0.9.1 in the vue group by @dependabot[bot] in #3656
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3657
build(deps): Bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in #3641
HTML Sanitizer options adjusted to fix broken layouts by @wofferl in #3658
[master] Fix npm audit by @nextcloud-command in #3667
build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3666
build(deps): Bump vue from 3.5.30 to 3.5.31 in the vue group across 1 directory by @dependabot[bot] in #3660
build(deps-dev): Bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in #3669
build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #3665
Fix Mark as unread on update feed setting by @wofferl in #3668
build(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 by @dependabot[bot] in #3640
Release 28.2.0-beta.2 by @Grotax in #3670
build(deps): Bump crate-ci/typos from 1.44.0 to 1.45.0 by @dependabot[bot] in #3673
build(deps): Bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in #3674
build(deps): Bump vue from 3.5.31 to 3.5.32 in the vue group by @dependabot[bot] in #3675
build(deps-dev): Bump @types/node from 25.5.0 to 25.5.2 in the types group by @dependabot[bot] in #3676
build(deps): Bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in #3683
build(deps): Bump dompurify from 3.3.3 to 3.4.0 by @dependabot[bot] in #3684
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3680
build(deps-dev): Bump jsdom from 29.0.1 to 29.0.2 by @dependabot[bot] in #3681
Eslint fixes by @wofferl in #3686
build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0-rc.9 by @dependabot[bot] in #3682
fix: update existing items when reloaded from backend by @wofferl in #3677
build(deps): Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #3685
Release 28.2.0 by @Grotax in #3687
New Contributors
@Maa-ly made their first contribution in #3649
Full Changelog: 28.1.0...28.2.0
What's Changed
build(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 by @dependabot[bot] in #3642
build(deps-dev): Bump jsdom from 28.1.0 to 29.0.0 by @dependabot[bot] in #3643
build(deps): Bump @nextcloud/password-confirmation from 6.0.3 to 6.1.0 by @dependabot[bot] in #3645
build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #3650
build(deps): Bump picomatch by @dependabot[bot] in #3648
build(deps): Bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #3651
build(deps): Bump vue-router from 5.0.3 to 5.0.4 in the vue group by @dependabot[bot] in #3652
build(deps-dev): Bump jsdom from 29.0.0 to 29.0.1 by @dependabot[bot] in #3653
build(deps): Bump brace-expansion by @dependabot[bot] in #3654
Add a feature to download the web version of an article on demand by @wofferl in #3647
fix: show move feed errors in the UI by @Maa-ly in #3649
Rework feed options menu and feed settings by @wofferl in #3655
build(deps-dev): Bump @vue/tsconfig from 0.9.0 to 0.9.1 in the vue group by @dependabot[bot] in #3656
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3657
build(deps): Bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in #3641
HTML Sanitizer options adjusted to fix broken layouts by @wofferl in #3658
[master] Fix npm audit by @nextcloud-command in #3667
build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3666
build(deps): Bump vue from 3.5.30 to 3.5.31 in the vue group across 1 directory by @dependabot[bot] in #3660
build(deps-dev): Bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in #3669
build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #3665
Fix Mark as unread on update feed setting by @wofferl in #3668
build(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 by @dependabot[bot] in #3640
Release 28.2.0-beta.2 by @Grotax in #3670
New Contributors
@Maa-ly made their first contribution in #3649
Full Changelog: 28.2.0-beta.1...28.2.0-beta.2
What's Changed
build(deps): Bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in #3626
build(deps): Bump vue from 3.5.29 to 3.5.30 in the vue group by @dependabot[bot] in #3619
build(deps-dev): Bump @types/node from 25.3.5 to 25.4.0 in the types group by @dependabot[bot] in #3624
build(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 by @dependabot[bot] in #3625
Update npm audit fix workflow by @wofferl in #3632
build(deps): Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #3618
Refactor full text scraper to use guzzle http client by @wofferl in #3630
build(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in the types group by @dependabot[bot] in #3636
build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in #3634
build(deps): Bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in #3633
Rework FeedItemDisplayTest by @wofferl in #3638
Limit full text scraper to download only new or updated articles by @wofferl in #3631
build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3637
Release 28.2.0-beta.1 by @Grotax in #3639
Full Changelog: 28.1.0...28.2.0-beta.1
What's Changed
build(deps-dev): Bump @types/node from 25.3.3 to 25.3.5 in the types group by @dependabot[bot] in #3611
build(deps): Bump undici from 7.22.0 to 7.24.1 by @dependabot[bot] in #3612
[master] Fix npm audit by @nextcloud-command in #3613
Re-implement custom explore source function, admins can configure a custom url where the app will search for feeds.{$langcode}.json by @Grotax in #3609
feat: implement the cron check as a setup check by @claytonlin1110 in #3603
add Docker config for dependabot, update devcontainer by @Grotax in #3614
fix: update code and tests because of php deprecations by @Grotax in #3615
Update PHPUnit to version 10 by @Grotax in #3616
Release 28.1.0 by @Grotax in #3621
New Contributors
@claytonlin1110 made their first contribution in #3603
Full Changelog: 28.0.1...28.1.0
What's Changed
build(deps): Bump dompurify from 3.3.1 to 3.3.2 by @dependabot[bot] in #3597
[master] Fix npm audit by @nextcloud-command in #3598
build(deps-dev): Bump the types group across 1 directory with 2 updates by @dependabot[bot] in #3589
build(deps): Bump the vue group across 1 directory with 2 updates by @dependabot[bot] in #3592
build(deps): Bump crate-ci/typos from 1.43.5 to 1.44.0 by @dependabot[bot] in #3600
build(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.0 in the vue group by @dependabot[bot] in #3601
build(deps-dev): Bump @types/node from 25.3.2 to 25.3.3 in the types group by @dependabot[bot] in #3602
build(deps): Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #3604
fix: handle OPML files with leading blank lines (Fixes #3587) by @R-Panic in #3596
Use HtmlSanitizer for the Media Description by @Grotax in #3606
Release 28.0.1 by @Grotax in #3607
New Contributors
@R-Panic made their first contribution in #3596
Full Changelog: 28.0.0...28.0.1
What's Changed
Implement PHP dependency scoping to prevent library conflicts by @Copilot in #3397
Release 28.0.0-beta.1 by @Grotax in #3427
Add .github/copilot-instructions.md for coding agent onboarding by @Copilot in #3429
improve agent instructions by @Grotax in #3435
build(deps): Bump php-feed-io/feed-io from 6.1.2 to 6.2.0 by @dependabot[bot] in #3430
build(deps): Bump @nextcloud/router from 3.0.1 to 3.1.0 by @dependabot[bot] in #3432
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3431
build(deps-dev): Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #3433
build(deps-dev): Bump glob from 10.4.5 to 10.5.0 by @dependabot[bot] in #3439
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3438
build(deps): Bump @nextcloud/vue from 9.2.0 to 9.3.0 by @dependabot[bot] in #3441
build(deps-dev): Bump the vite group with 3 updates by @dependabot[bot] in #3440
build(deps): Bump actions/checkout from 5 to 6 by @dependabot[bot] in #3443
build(deps): Bump svenstaro/upload-release-action from 2.11.2 to 2.11.3 by @dependabot[bot] in #3444
testing: set global.appVersion needed since @nextcloud/vue 9.3.0 by @wofferl in #3445
build(deps): Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #3446
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3449
build(deps-dev): Bump @types/lodash from 4.17.20 to 4.17.21 in the types group by @dependabot[bot] in #3450
build(deps): Bump vue from 3.5.24 to 3.5.25 in the vue group by @dependabot[bot] in #3448
build(deps): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 by @dependabot[bot] in #3451
build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0-rc.6 by @dependabot[bot] in #3452
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3453
build(deps): Bump @vueuse/core from 14.0.0 to 14.1.0 by @dependabot[bot] in #3455
build(deps): Bump mdast-util-to-hast from 13.2.0 to 13.2.1 by @dependabot[bot] in #3458
build(deps-dev): Bump vite from 7.2.4 to 7.2.6 in the vite group by @dependabot[bot] in #3457
build(deps): Bump actions/checkout from 5.0.1 to 6.0.1 by @dependabot[bot] in #3459
build(deps-dev): Bump doctrine/dbal from 3.10.3 to 3.10.4 by @dependabot[bot] in #3456
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3461
build(deps-dev): Bump vite from 7.2.6 to 7.2.7 in the vite group by @dependabot[bot] in #3463
build(deps): Bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #3460
build(deps-dev): Bump jsdom from 27.2.0 to 27.3.0 by @dependabot[bot] in #3465
build(deps-dev): Bump @types/node from 24.10.1 to 24.10.2 in the types group by @dependabot[bot] in #3464
build(deps): Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in #3467
build(deps): Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 by @dependabot[bot] in #3466
build(deps-dev): Bump @types/node from 24.10.2 to 25.0.0 in the types group by @dependabot[bot] in #3469
build(deps): Bump @nextcloud/vue from 9.3.0 to 9.3.1 by @dependabot[bot] in #3470
build(deps): Bump vue-router from 4.6.3 to 4.6.4 in the vue group by @dependabot[bot] in #3471
build(deps-dev): Bump @types/node from 25.0.0 to 25.0.2 in the types group by @dependabot[bot] in #3474
fix: article body may have incorrect encoding from full text scraping by @wofferl in #3472
build(deps-dev): Bump @types/node from 25.0.2 to 25.0.3 in the types group by @dependabot[bot] in #3478
build(deps-dev): Bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #3479
build(deps): Bump @nextcloud/dialogs from 7.1.0 to 7.2.0 by @dependabot[bot] in #3482
build(deps): Bump vue from 3.5.25 to 3.5.26 in the vue group by @dependabot[bot] in #3484
fix: Wrong url to feed page by @wofferl in #3486
fix: Long articles are cut short by @wofferl in #3489
build(deps-dev): Bump jsdom from 27.3.0 to 27.4.0 by @dependabot[bot] in #3491
build(deps-dev): Bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in #3496
Add feature to Group starred Items per Feed by @Juri-w in #3148
Add occ commands and frontend options for importing/exporting articles by @wofferl in #3437
build(deps-dev): Bump vite from 7.3.0 to 7.3.1 in the vite group by @dependabot[bot] in #3497
build(deps): Bump @nextcloud/vue from 9.3.1 to 9.3.2 by @dependabot[bot] in #3498
Migrate IConfig calls to IUserConfig by @wofferl in #3485
feat: save starred navigation item open state by @wofferl in #3499
[master] Fix npm audit by @nextcloud-command in #3501
fix: changing starred routes does not deselect current item by @wofferl in #3502
refactor: Move NcAppNavigationSettings to modern NcAppSettingsDialog by @wofferl in #3500
Release 28.0.0-beta.2 by @Grotax in #3503
build(deps-dev): Bump the types group with 2 updates by @dependabot[bot] in #3505
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3504
build(deps): Bump @nextcloud/vue from 9.3.2 to 9.3.3 by @dependabot[bot] in #3506
build(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in #3508
Small fixes for the starred items feature by @wofferl in #3507
build(deps-dev): Bump @types/node from 25.0.8 to 25.0.9 in the types group by @dependabot[bot] in #3509
build(deps): Bump vue from 3.5.26 to 3.5.27 in the vue group by @dependabot[bot] in #3510
build(deps): Bump @nextcloud/vue from 9.3.3 to 9.4.0 by @dependabot[bot] in #3515
feat: use lastViewedFeedId when loading starred as initial route by @wofferl in #3514
build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3520
build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #3519
build(deps): Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #3516
build(deps-dev): Bump @types/node from 25.0.9 to 25.0.10 in the types group by @dependabot[bot] in #3518
workflows: pin all actions to full-length commit SHA by @wofferl in #3523
build(deps): Bump shivammathur/setup-php from 2.33.0 to 2.36.0 by @dependabot[bot] in #3526
build(deps): Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @dependabot[bot] in #3517
build(deps-dev): Bump phpunit/phpunit from 9.6.29 to 9.6.33 by @dependabot[bot] in #3524
Add timeouts for all HTTP client requests in the feed fetcher by @wofferl in #3528
fix: respect the proxy configuration and use the correct user agent for all http fetcher clients by @wofferl in #3533
build(deps-dev): Bump @types/node from 25.0.10 to 25.1.0 in the types group by @dependabot[bot] in #3529
build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.8 by @dependabot[bot] in #3530
[master] Fix npm audit by @nextcloud-command in #3534
build(deps): Bump @nextcloud/vue from 9.4.0 to 9.5.0 by @dependabot[bot] in #3543
build(deps-dev): Bump jsdom from 27.4.0 to 28.0.0 by @dependabot[bot] in #3536
build(deps-dev): Bump @types/node from 25.1.0 to 25.2.0 in the types group by @dependabot[bot] in #3535
build(deps): Bump crate-ci/typos from 1.42.3 to 1.43.1 by @dependabot[bot] in #3539
build(deps): Bump vue-router from 4.6.4 to 5.0.1 in the vue group by @dependabot[bot] in #3532
build(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.1 by @dependabot[bot] in #3546
build(deps-dev): Bump @types/node from 25.2.0 to 25.2.1 in the types group by @dependabot[bot] in #3545
build(deps): Bump crate-ci/typos from 1.43.1 to 1.43.2 by @dependabot[bot] in #3544
build(deps): Bump fast-xml-parser and webdav by @dependabot[bot] in #3548
build(deps): Bump bamarni/composer-bin-plugin from 1.8.3 to 1.9.1 by @dependabot[bot] in #3540
prepare changelog by @Grotax in #3549
Fix dependency scoping with auto-downloaded composer by @Copilot in #3493
feat: add notifications when sharing articles with users by @eureka928 in #3542
Release 28.0.0-beta.3 by @Grotax in #3550
Fix: Correct URL path construction for article sharing by @Grotax in #3551
Use browser-like order of http headers to avoid triggering bot detections by @wofferl in #3552
build(deps): Bump crate-ci/typos from 1.43.2 to 1.43.3 by @dependabot[bot] in #3553
build(deps): Bump vue from 3.5.27 to 3.5.28 in the vue group by @dependabot[bot] in #3554
build(deps-dev): Bump @types/node from 25.2.1 to 25.2.2 in the types group by @dependabot[bot] in #3555
build(deps): Bump crate-ci/typos from 1.43.3 to 1.43.4 by @dependabot[bot] in #3557
build(deps): Bump @vueuse/core from 14.2.0 to 14.2.1 by @dependabot[bot] in #3558
build(deps): Bump axios from 1.12.2 to 1.13.5 by @dependabot[bot] in #3559
build(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 by @dependabot[bot] in #3563
build(deps-dev): Bump @types/node from 25.2.2 to 25.2.3 in the types group by @dependabot[bot] in #3562
build(deps-dev): Bump jsdom from 28.0.0 to 28.1.0 by @dependabot[bot] in #3567
build(deps-dev): Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #3564
build(deps): Bump crate-ci/typos from 1.43.4 to 1.43.5 by @dependabot[bot] in #3569
Replace deprecated withConsecutive method in PHP tests - All tests passing by @Copilot in #3434
Add GitHub Actions workflow for security analysis by @SMillerDev in #3560
Check for null before logging download status by @bmschwa in #3561
workflows: use mariadb service instead of outdated getong/mariadb-action by @wofferl in #3570
Add user settings to control loading external content by @wofferl in #3566
Release 28.0.0-rc.1 by @Grotax in #3572
Release 28.0.0-rc.2 by @Grotax in #3573
build(deps): Bump fast-xml-parser from 5.3.4 to 5.3.6 by @dependabot[bot] in #3574
Fix wrong image referenced in notifaction code by @Grotax in #3575
Automatically select item when using single item route by @wofferl in #3577
[master] Fix npm audit by @nextcloud-command in #3585
chore(i18n): Improved grammar by @rakekniven in #3590
build(deps-dev): Bump doctrine/dbal from 3.10.4 to 3.10.5 by @dependabot[bot] in #3591
Fix incomplete scoped PHP dependencies when packages share the same namespace by @Copilot in #3580
Release 28.0.0 by @Grotax in #3594
New Contributors
@Juri-w made their first contribution in #3148
@eureka928 made their first contribution in #3542
@bmschwa made their first contribution in #3561
Full Changelog: 27.2.0...28.0.0
What's Changed
Fix: Correct URL path construction for article sharing by @Grotax in #3551
Use browser-like order of http headers to avoid triggering bot detections by @wofferl in #3552
build(deps): Bump crate-ci/typos from 1.43.2 to 1.43.3 by @dependabot[bot] in #3553
build(deps): Bump vue from 3.5.27 to 3.5.28 in the vue group by @dependabot[bot] in #3554
build(deps-dev): Bump @types/node from 25.2.1 to 25.2.2 in the types group by @dependabot[bot] in #3555
build(deps): Bump crate-ci/typos from 1.43.3 to 1.43.4 by @dependabot[bot] in #3557
build(deps): Bump @vueuse/core from 14.2.0 to 14.2.1 by @dependabot[bot] in #3558
build(deps): Bump axios from 1.12.2 to 1.13.5 by @dependabot[bot] in #3559
build(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 by @dependabot[bot] in #3563
build(deps-dev): Bump @types/node from 25.2.2 to 25.2.3 in the types group by @dependabot[bot] in #3562
build(deps-dev): Bump jsdom from 28.0.0 to 28.1.0 by @dependabot[bot] in #3567
build(deps-dev): Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #3564
build(deps): Bump crate-ci/typos from 1.43.4 to 1.43.5 by @dependabot[bot] in #3569
Replace deprecated withConsecutive method in PHP tests - All tests passing by @Copilot in #3434
Add GitHub Actions workflow for security analysis by @SMillerDev in #3560
Check for null before logging download status by @bmschwa in #3561
workflows: use mariadb service instead of outdated getong/mariadb-action by @wofferl in #3570
Add user settings to control loading external content by @wofferl in #3566
Release 28.0.0-rc.1 by @Grotax in #3572
New Contributors
@bmschwa made their first contribution in #3561
Full Changelog: 28.0.0-beta.3...28.0.0-rc.1