Nextcloud Apps Releases

What's Changed 🚀 Changed Update user documentation by @Grotax in #3732 fix(db): use correlated subqueries for feed unread/starred counts by @tareko in #3827 📦 Dependency Updates build(deps): Bump crate-ci/typos from 1.47.1 to 1.47.2 by @dependabot[bot] in #3795 [master] Fix npm audit by @nextcloud-command in #3801 build(deps-dev): Bump @vue/test-utils from 2.4.10 to 2.4.11 in the vue group by @dependabot[bot] in #3798 build(deps): Bump nextcloud from 33-apache to 34-apache in /docker by @dependabot[bot] in #3797 build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #3804 build(deps): Bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #3803 build(deps-dev): Bump @types/node from 25.9.1 to 25.9.2 in the types group by @dependabot[bot] in #3802 build(deps): Bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in #3807 build(deps): Bump dompurify from 3.4.8 to 3.4.11 by @dependabot[bot] in #3808 build(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in #3809 build(deps-dev): Bump @types/node from 25.9.2 to 25.9.3 in the types group by @dependabot[bot] in #3811 build(deps): Bump vue from 3.5.35 to 3.5.38 in the vue group across 1 directory by @dependabot[bot] in #3810 build(deps-dev): Bump undici from 7.25.0 to 7.28.0 by @dependabot[bot] in #3814 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3817 build(deps): Bump guzzlehttp/psr7 from 2.11.0 to 2.12.1 by @dependabot[bot] in #3818 build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #3819 build(deps-dev): Bump vite from 7.3.5 to 7.3.6 in the vite group by @dependabot[bot] in #3825 build(deps): Bump vue from 3.5.38 to 3.5.39 in the vue group by @dependabot[bot] in #3824 build(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #3821 build(deps): Bump guzzlehttp/psr7 from 2.12.1 to 2.12.3 by @dependabot[bot] in #3823 build(deps-dev): Bump @types/node from 25.9.3 to 26.0.1 in the types group across 1 directory by @dependabot[bot] in #3820 [master] Fix npm audit by @nextcloud-command in #3830 build(deps): Bump crate-ci/typos from 1.47.2 to 1.48.0 by @dependabot[bot] in #3833 build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 by @dependabot[bot] in #3831 build(deps): Bump dorny/paths-filter from 4.0.1 to 4.0.2 by @dependabot[bot] in #3835 build(deps): Bump guzzlehttp/psr7 from 2.12.3 to 2.12.4 by @dependabot[bot] in #3841 build(deps-dev): Bump @types/node from 26.0.1 to 26.1.0 in the types group across 1 directory by @dependabot[bot] in #3834 build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 by @dependabot[bot] in #3839 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3838 New Contributors @TheUnderdev made their first contribution in #3738 @tareko made their first contribution in #3827 Full Changelog: 28.6.0...28.7.0-beta.1

💖 Enjoying News? Consider giving it a star on GitHub to help others discover it! What's Changed 🚀 Changed Enable support vor server version 34 by @Grotax in #3786 📦 Dependency Updates build(deps): Bump vue-router from 5.0.7 to 5.1.0 in the vue group by @dependabot[bot] in #3788 build(deps-dev): Bump the vite group with 3 updates by @dependabot[bot] in #3789 build(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.1 by @dependabot[bot] in #3784 build(deps): Bump crate-ci/typos from 1.47.0 to 1.47.1 by @dependabot[bot] in #3792 build(deps): Bump @nextcloud/vue from 9.8.1 to 9.8.2 by @dependabot[bot] in #3793 build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #3794 Full Changelog: 28.5.1...28.6.0

What's Changed 🚀 Changed Fix the symfony loading issue by @Grotax in #3780 📦 Dependency Updates build(deps): Bump vue from 3.5.34 to 3.5.35 in the vue group by @dependabot[bot] in #3778 build(deps): Bump crate-ci/typos from 1.46.3 to 1.47.0 by @dependabot[bot] in #3779 Full Changelog: 28.5.0...28.5.1

What's Changed 🚀 Changed Fix the symfony loading issue by @Grotax in #3780 📦 Dependency Updates build(deps): Bump vue from 3.5.34 to 3.5.35 in the vue group by @dependabot[bot] in #3778 build(deps): Bump crate-ci/typos from 1.46.3 to 1.47.0 by @dependabot[bot] in #3779 Full Changelog: 28.5.0...28.5.1-beta.1

Security Update recommended: This version fixes a gap in the SSRF protection that occurs when the remote host redirects to a local address. What's Changed 🐛 Fixed Fix on_redirect handling missing in the FetcherConfig by @Grotax in #3773 📦 Dependency Updates [master] Fix npm audit by @nextcloud-command in #3754 build(deps): Bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 by @dependabot[bot] in #3755 build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in #3759 build(deps): Bump crate-ci/typos from 1.46.1 to 1.46.2 by @dependabot[bot] in #3758 build(deps): Bump errata-ai/vale-action from 2.1.1 to 2.1.2 by @dependabot[bot] in #3756 build(deps-dev): Bump @types/node from 25.8.0 to 25.9.0 in the types group by @dependabot[bot] in #3757 build(deps): Bump R0Wi/nextcloud-appstore-push-action from 1.0.4 to 1.0.5 by @dependabot[bot] in #3761 build(deps-dev): Bump @types/node from 25.9.0 to 25.9.1 in the types group by @dependabot[bot] in #3762 build(deps): Bump guzzlehttp/psr7 from 2.9.0 to 2.10.1 by @dependabot[bot] in #3763 build(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 by @dependabot[bot] in #3765 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3764 [master] Fix npm audit by @nextcloud-command in #3767 build(deps): Bump guzzlehttp/psr7 from 2.10.1 to 2.10.2 by @dependabot[bot] in #3770 build(deps): Bump crate-ci/typos from 1.46.2 to 1.46.3 by @dependabot[bot] in #3771 build(deps): Bump symfony/cache from 7.4.9 to 7.4.12 by @dependabot[bot] in #3766 Full Changelog: 28.4.1...28.5.0

No major changes, basically a re-release of 28.4.0 What's Changed 📦 Dependency Updates build(deps): Bump shivammathur/setup-php from 2.37.0 to 2.37.1 by @dependabot[bot] in #3749 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3744 build(deps): Bump vue-router from 5.0.6 to 5.0.7 in the vue group across 1 directory by @dependabot[bot] in #3746 build(deps): Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 by @dependabot[bot] in #3750 build(deps): Bump @nextcloud/vue from 9.7.0 to 9.8.0 by @dependabot[bot] in #3741 build(deps): Bump crate-ci/typos from 1.46.0 to 1.46.1 by @dependabot[bot] in #3739 build(deps-dev): Bump @types/node from 25.6.0 to 25.8.0 in the types group across 1 directory by @dependabot[bot] in #3740 Full Changelog: 28.4.0...28.4.1

What's Changed 🚀 Changed fix: Update setup-nextcloud action references to use 'main' branch by @Grotax in #3705 Update devcontainer to make it actually useful by @Grotax in #3707 Refactor favicon discovery to use favicon-io with scoped PSR-18 adapter by @Grotax in #3710 feat: Add keyword-based feed filtering (deny-list) by @erykjj in #3711 fix: use nextcloud style input fields for the new filter dialog and add some tests by @wofferl in #3730 Add accessible multi-feed selection with header actions and throttled batch move/delete in feed settings by @Copilot in #3728 feat(MoveFeed): show status during move feed action by @wofferl in #3737 🐛 Fixed fix: NcCheckBoxRadioSwitch requires value as string by @wofferl in #3733 📦 Dependency Updates build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.8 in the vue group by @dependabot[bot] in #3706 build(deps): Bump dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 by @dependabot[bot] in #3714 build(deps): Bump crate-ci/typos from 1.45.1 to 1.45.2 by @dependabot[bot] in #3715 build(deps-dev): Bump jsdom from 29.0.2 to 29.1.0 by @dependabot[bot] in #3716 build(deps-dev): Bump @vue/test-utils from 2.4.8 to 2.4.9 in the vue group by @dependabot[bot] in #3717 build(deps): Bump @nextcloud/vue from 9.6.0 to 9.7.0 by @dependabot[bot] in #3718 build(deps): Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in #3724 build(deps-dev): Bump jsdom from 29.1.0 to 29.1.1 by @dependabot[bot] in #3723 build(deps): Bump crate-ci/typos from 1.45.2 to 1.46.0 by @dependabot[bot] in #3722 build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 in the vue group across 1 directory by @dependabot[bot] in #3721 build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #3726 build(deps): Bump fast-uri from 3.0.6 to 3.1.2 by @dependabot[bot] in #3727 build(deps): Bump vue from 3.5.33 to 3.5.34 in the vue group across 1 directory by @dependabot[bot] in #3734 build(deps-dev): Bump vite from 7.3.2 to 7.3.3 in the vite group by @dependabot[bot] in #3735 build(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 by @dependabot[bot] in #3736 New Contributors @erykjj made their first contribution in #3711 Full Changelog: 28.3.0...28.4.0

What's Changed 🚀 Changed fix: Update setup-nextcloud action references to use 'main' branch by @Grotax in #3705 Update devcontainer to make it actually useful by @Grotax in #3707 Refactor favicon discovery to use favicon-io with scoped PSR-18 adapter by @Grotax in #3710 feat: Add keyword-based feed filtering (deny-list) by @erykjj in #3711 fix: use nextcloud style input fields for the new filter dialog and add some tests by @wofferl in #3730 Add accessible multi-feed selection with header actions and throttled batch move/delete in feed settings by @Copilot in #3728 📦 Dependency Updates build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.8 in the vue group by @dependabot[bot] in #3706 build(deps): Bump dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 by @dependabot[bot] in #3714 build(deps): Bump crate-ci/typos from 1.45.1 to 1.45.2 by @dependabot[bot] in #3715 build(deps-dev): Bump jsdom from 29.0.2 to 29.1.0 by @dependabot[bot] in #3716 build(deps-dev): Bump @vue/test-utils from 2.4.8 to 2.4.9 in the vue group by @dependabot[bot] in #3717 build(deps): Bump @nextcloud/vue from 9.6.0 to 9.7.0 by @dependabot[bot] in #3718 build(deps): Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in #3724 build(deps-dev): Bump jsdom from 29.1.0 to 29.1.1 by @dependabot[bot] in #3723 build(deps): Bump crate-ci/typos from 1.45.2 to 1.46.0 by @dependabot[bot] in #3722 build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 in the vue group across 1 directory by @dependabot[bot] in #3721 build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #3726 build(deps): Bump fast-uri from 3.0.6 to 3.1.2 by @dependabot[bot] in #3727 New Contributors @erykjj made their first contribution in #3711 Full Changelog: 28.3.0...28.4.0-beta.1

What's Changed 🚓 Security Use IClientService (with SSRF protection) instead of straight Guzzle Client by @SMillerDev in #3672 🚀 Changed make future github release notes a bit more organized by @Grotax in #3688 fix(starred): stop endless item requests in Starred view by @Copilot in #3694 chore(devcontainer): devcontainer enhancements by @Grotax in #3698 📦 Dependency Updates build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689 build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690 build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691 build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696 build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #3699 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3700 build(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 by @dependabot[bot] in #3702 build(deps): Bump the vue group with 2 updates by @dependabot[bot] in #3701 Full Changelog: 28.2.0...28.3.0

What's Changed 🚀 Changed make future github release notes a bit more organized by @Grotax in #3688 Change: Use IClientService instead of straight Guzzle Client by @SMillerDev in #3672 fix(starred): stop endless item requests in Starred view by @Copilot in #3694 📦 Dependency Updates build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689 build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690 build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691 build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696 Full Changelog: 28.2.0...28.3.0-beta.1