Nextcloud Apps Releases

What's Changed 🚓 Security Use IClientService (with SSRF protection) instead of straight Guzzle Client by @SMillerDev in #3672 🚀 Changed make future github release notes a bit more organized by @Grotax in #3688 fix(starred): stop endless item requests in Starred view by @Copilot in #3694 chore(devcontainer): devcontainer enhancements by @Grotax in #3698 📦 Dependency Updates build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689 build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690 build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691 build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696 build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #3699 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3700 build(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 by @dependabot[bot] in #3702 build(deps): Bump the vue group with 2 updates by @dependabot[bot] in #3701 Full Changelog: 28.2.0...28.3.0

What's Changed 🚀 Changed make future github release notes a bit more organized by @Grotax in #3688 Change: Use IClientService instead of straight Guzzle Client by @SMillerDev in #3672 fix(starred): stop endless item requests in Starred view by @Copilot in #3694 📦 Dependency Updates build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689 build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690 build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691 build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696 Full Changelog: 28.2.0...28.3.0-beta.1

What's Changed build(deps): Bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in #3626 build(deps): Bump vue from 3.5.29 to 3.5.30 in the vue group by @dependabot[bot] in #3619 build(deps-dev): Bump @types/node from 25.3.5 to 25.4.0 in the types group by @dependabot[bot] in #3624 build(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 by @dependabot[bot] in #3625 Update npm audit fix workflow by @wofferl in #3632 build(deps): Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #3618 Refactor full text scraper to use guzzle http client by @wofferl in #3630 build(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in the types group by @dependabot[bot] in #3636 build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in #3634 build(deps): Bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in #3633 Rework FeedItemDisplayTest by @wofferl in #3638 Limit full text scraper to download only new or updated articles by @wofferl in #3631 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3637 Release 28.2.0-beta.1 by @Grotax in #3639 build(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 by @dependabot[bot] in #3642 build(deps-dev): Bump jsdom from 28.1.0 to 29.0.0 by @dependabot[bot] in #3643 build(deps): Bump @nextcloud/password-confirmation from 6.0.3 to 6.1.0 by @dependabot[bot] in #3645 build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #3650 build(deps): Bump picomatch by @dependabot[bot] in #3648 build(deps): Bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #3651 build(deps): Bump vue-router from 5.0.3 to 5.0.4 in the vue group by @dependabot[bot] in #3652 build(deps-dev): Bump jsdom from 29.0.0 to 29.0.1 by @dependabot[bot] in #3653 build(deps): Bump brace-expansion by @dependabot[bot] in #3654 Add a feature to download the web version of an article on demand by @wofferl in #3647 fix: show move feed errors in the UI by @Maa-ly in #3649 Rework feed options menu and feed settings by @wofferl in #3655 build(deps-dev): Bump @vue/tsconfig from 0.9.0 to 0.9.1 in the vue group by @dependabot[bot] in #3656 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3657 build(deps): Bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in #3641 HTML Sanitizer options adjusted to fix broken layouts by @wofferl in #3658 [master] Fix npm audit by @nextcloud-command in #3667 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3666 build(deps): Bump vue from 3.5.30 to 3.5.31 in the vue group across 1 directory by @dependabot[bot] in #3660 build(deps-dev): Bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in #3669 build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #3665 Fix Mark as unread on update feed setting by @wofferl in #3668 build(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 by @dependabot[bot] in #3640 Release 28.2.0-beta.2 by @Grotax in #3670 build(deps): Bump crate-ci/typos from 1.44.0 to 1.45.0 by @dependabot[bot] in #3673 build(deps): Bump axios from 1.13.5 to 1.15.0 by @dependabot[bot] in #3674 build(deps): Bump vue from 3.5.31 to 3.5.32 in the vue group by @dependabot[bot] in #3675 build(deps-dev): Bump @types/node from 25.5.0 to 25.5.2 in the types group by @dependabot[bot] in #3676 build(deps): Bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in #3683 build(deps): Bump dompurify from 3.3.3 to 3.4.0 by @dependabot[bot] in #3684 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3680 build(deps-dev): Bump jsdom from 29.0.1 to 29.0.2 by @dependabot[bot] in #3681 Eslint fixes by @wofferl in #3686 build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0-rc.9 by @dependabot[bot] in #3682 fix: update existing items when reloaded from backend by @wofferl in #3677 build(deps): Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #3685 Release 28.2.0 by @Grotax in #3687 New Contributors @Maa-ly made their first contribution in #3649 Full Changelog: 28.1.0...28.2.0

What's Changed build(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 by @dependabot[bot] in #3642 build(deps-dev): Bump jsdom from 28.1.0 to 29.0.0 by @dependabot[bot] in #3643 build(deps): Bump @nextcloud/password-confirmation from 6.0.3 to 6.1.0 by @dependabot[bot] in #3645 build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #3650 build(deps): Bump picomatch by @dependabot[bot] in #3648 build(deps): Bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #3651 build(deps): Bump vue-router from 5.0.3 to 5.0.4 in the vue group by @dependabot[bot] in #3652 build(deps-dev): Bump jsdom from 29.0.0 to 29.0.1 by @dependabot[bot] in #3653 build(deps): Bump brace-expansion by @dependabot[bot] in #3654 Add a feature to download the web version of an article on demand by @wofferl in #3647 fix: show move feed errors in the UI by @Maa-ly in #3649 Rework feed options menu and feed settings by @wofferl in #3655 build(deps-dev): Bump @vue/tsconfig from 0.9.0 to 0.9.1 in the vue group by @dependabot[bot] in #3656 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3657 build(deps): Bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in #3641 HTML Sanitizer options adjusted to fix broken layouts by @wofferl in #3658 [master] Fix npm audit by @nextcloud-command in #3667 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3666 build(deps): Bump vue from 3.5.30 to 3.5.31 in the vue group across 1 directory by @dependabot[bot] in #3660 build(deps-dev): Bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in #3669 build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #3665 Fix Mark as unread on update feed setting by @wofferl in #3668 build(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 by @dependabot[bot] in #3640 Release 28.2.0-beta.2 by @Grotax in #3670 New Contributors @Maa-ly made their first contribution in #3649 Full Changelog: 28.2.0-beta.1...28.2.0-beta.2

What's Changed build(deps): Bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in #3626 build(deps): Bump vue from 3.5.29 to 3.5.30 in the vue group by @dependabot[bot] in #3619 build(deps-dev): Bump @types/node from 25.3.5 to 25.4.0 in the types group by @dependabot[bot] in #3624 build(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 by @dependabot[bot] in #3625 Update npm audit fix workflow by @wofferl in #3632 build(deps): Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #3618 Refactor full text scraper to use guzzle http client by @wofferl in #3630 build(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in the types group by @dependabot[bot] in #3636 build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in #3634 build(deps): Bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in #3633 Rework FeedItemDisplayTest by @wofferl in #3638 Limit full text scraper to download only new or updated articles by @wofferl in #3631 build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3637 Release 28.2.0-beta.1 by @Grotax in #3639 Full Changelog: 28.1.0...28.2.0-beta.1

What's Changed build(deps-dev): Bump @types/node from 25.3.3 to 25.3.5 in the types group by @dependabot[bot] in #3611 build(deps): Bump undici from 7.22.0 to 7.24.1 by @dependabot[bot] in #3612 [master] Fix npm audit by @nextcloud-command in #3613 Re-implement custom explore source function, admins can configure a custom url where the app will search for feeds.{$langcode}.json by @Grotax in #3609 feat: implement the cron check as a setup check by @claytonlin1110 in #3603 add Docker config for dependabot, update devcontainer by @Grotax in #3614 fix: update code and tests because of php deprecations by @Grotax in #3615 Update PHPUnit to version 10 by @Grotax in #3616 Release 28.1.0 by @Grotax in #3621 New Contributors @claytonlin1110 made their first contribution in #3603 Full Changelog: 28.0.1...28.1.0

What's Changed build(deps): Bump dompurify from 3.3.1 to 3.3.2 by @dependabot[bot] in #3597 [master] Fix npm audit by @nextcloud-command in #3598 build(deps-dev): Bump the types group across 1 directory with 2 updates by @dependabot[bot] in #3589 build(deps): Bump the vue group across 1 directory with 2 updates by @dependabot[bot] in #3592 build(deps): Bump crate-ci/typos from 1.43.5 to 1.44.0 by @dependabot[bot] in #3600 build(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.0 in the vue group by @dependabot[bot] in #3601 build(deps-dev): Bump @types/node from 25.3.2 to 25.3.3 in the types group by @dependabot[bot] in #3602 build(deps): Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #3604 fix: handle OPML files with leading blank lines (Fixes #3587) by @R-Panic in #3596 Use HtmlSanitizer for the Media Description by @Grotax in #3606 Release 28.0.1 by @Grotax in #3607 New Contributors @R-Panic made their first contribution in #3596 Full Changelog: 28.0.0...28.0.1

What's Changed Implement PHP dependency scoping to prevent library conflicts by @Copilot in #3397 Release 28.0.0-beta.1 by @Grotax in #3427 Add .github/copilot-instructions.md for coding agent onboarding by @Copilot in #3429 improve agent instructions by @Grotax in #3435 build(deps): Bump php-feed-io/feed-io from 6.1.2 to 6.2.0 by @dependabot[bot] in #3430 build(deps): Bump @nextcloud/router from 3.0.1 to 3.1.0 by @dependabot[bot] in #3432 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3431 build(deps-dev): Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #3433 build(deps-dev): Bump glob from 10.4.5 to 10.5.0 by @dependabot[bot] in #3439 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3438 build(deps): Bump @nextcloud/vue from 9.2.0 to 9.3.0 by @dependabot[bot] in #3441 build(deps-dev): Bump the vite group with 3 updates by @dependabot[bot] in #3440 build(deps): Bump actions/checkout from 5 to 6 by @dependabot[bot] in #3443 build(deps): Bump svenstaro/upload-release-action from 2.11.2 to 2.11.3 by @dependabot[bot] in #3444 testing: set global.appVersion needed since @nextcloud/vue 9.3.0 by @wofferl in #3445 build(deps): Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #3446 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3449 build(deps-dev): Bump @types/lodash from 4.17.20 to 4.17.21 in the types group by @dependabot[bot] in #3450 build(deps): Bump vue from 3.5.24 to 3.5.25 in the vue group by @dependabot[bot] in #3448 build(deps): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 by @dependabot[bot] in #3451 build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0-rc.6 by @dependabot[bot] in #3452 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3453 build(deps): Bump @vueuse/core from 14.0.0 to 14.1.0 by @dependabot[bot] in #3455 build(deps): Bump mdast-util-to-hast from 13.2.0 to 13.2.1 by @dependabot[bot] in #3458 build(deps-dev): Bump vite from 7.2.4 to 7.2.6 in the vite group by @dependabot[bot] in #3457 build(deps): Bump actions/checkout from 5.0.1 to 6.0.1 by @dependabot[bot] in #3459 build(deps-dev): Bump doctrine/dbal from 3.10.3 to 3.10.4 by @dependabot[bot] in #3456 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3461 build(deps-dev): Bump vite from 7.2.6 to 7.2.7 in the vite group by @dependabot[bot] in #3463 build(deps): Bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #3460 build(deps-dev): Bump jsdom from 27.2.0 to 27.3.0 by @dependabot[bot] in #3465 build(deps-dev): Bump @types/node from 24.10.1 to 24.10.2 in the types group by @dependabot[bot] in #3464 build(deps): Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in #3467 build(deps): Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 by @dependabot[bot] in #3466 build(deps-dev): Bump @types/node from 24.10.2 to 25.0.0 in the types group by @dependabot[bot] in #3469 build(deps): Bump @nextcloud/vue from 9.3.0 to 9.3.1 by @dependabot[bot] in #3470 build(deps): Bump vue-router from 4.6.3 to 4.6.4 in the vue group by @dependabot[bot] in #3471 build(deps-dev): Bump @types/node from 25.0.0 to 25.0.2 in the types group by @dependabot[bot] in #3474 fix: article body may have incorrect encoding from full text scraping by @wofferl in #3472 build(deps-dev): Bump @types/node from 25.0.2 to 25.0.3 in the types group by @dependabot[bot] in #3478 build(deps-dev): Bump the vite group across 1 directory with 3 updates by @dependabot[bot] in #3479 build(deps): Bump @nextcloud/dialogs from 7.1.0 to 7.2.0 by @dependabot[bot] in #3482 build(deps): Bump vue from 3.5.25 to 3.5.26 in the vue group by @dependabot[bot] in #3484 fix: Wrong url to feed page by @wofferl in #3486 fix: Long articles are cut short by @wofferl in #3489 build(deps-dev): Bump jsdom from 27.3.0 to 27.4.0 by @dependabot[bot] in #3491 build(deps-dev): Bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in #3496 Add feature to Group starred Items per Feed by @Juri-w in #3148 Add occ commands and frontend options for importing/exporting articles by @wofferl in #3437 build(deps-dev): Bump vite from 7.3.0 to 7.3.1 in the vite group by @dependabot[bot] in #3497 build(deps): Bump @nextcloud/vue from 9.3.1 to 9.3.2 by @dependabot[bot] in #3498 Migrate IConfig calls to IUserConfig by @wofferl in #3485 feat: save starred navigation item open state by @wofferl in #3499 [master] Fix npm audit by @nextcloud-command in #3501 fix: changing starred routes does not deselect current item by @wofferl in #3502 refactor: Move NcAppNavigationSettings to modern NcAppSettingsDialog by @wofferl in #3500 Release 28.0.0-beta.2 by @Grotax in #3503 build(deps-dev): Bump the types group with 2 updates by @dependabot[bot] in #3505 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3504 build(deps): Bump @nextcloud/vue from 9.3.2 to 9.3.3 by @dependabot[bot] in #3506 build(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in #3508 Small fixes for the starred items feature by @wofferl in #3507 build(deps-dev): Bump @types/node from 25.0.8 to 25.0.9 in the types group by @dependabot[bot] in #3509 build(deps): Bump vue from 3.5.26 to 3.5.27 in the vue group by @dependabot[bot] in #3510 build(deps): Bump @nextcloud/vue from 9.3.3 to 9.4.0 by @dependabot[bot] in #3515 feat: use lastViewedFeedId when loading starred as initial route by @wofferl in #3514 build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3520 build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #3519 build(deps): Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #3516 build(deps-dev): Bump @types/node from 25.0.9 to 25.0.10 in the types group by @dependabot[bot] in #3518 workflows: pin all actions to full-length commit SHA by @wofferl in #3523 build(deps): Bump shivammathur/setup-php from 2.33.0 to 2.36.0 by @dependabot[bot] in #3526 build(deps): Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @dependabot[bot] in #3517 build(deps-dev): Bump phpunit/phpunit from 9.6.29 to 9.6.33 by @dependabot[bot] in #3524 Add timeouts for all HTTP client requests in the feed fetcher by @wofferl in #3528 fix: respect the proxy configuration and use the correct user agent for all http fetcher clients by @wofferl in #3533 build(deps-dev): Bump @types/node from 25.0.10 to 25.1.0 in the types group by @dependabot[bot] in #3529 build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.8 by @dependabot[bot] in #3530 [master] Fix npm audit by @nextcloud-command in #3534 build(deps): Bump @nextcloud/vue from 9.4.0 to 9.5.0 by @dependabot[bot] in #3543 build(deps-dev): Bump jsdom from 27.4.0 to 28.0.0 by @dependabot[bot] in #3536 build(deps-dev): Bump @types/node from 25.1.0 to 25.2.0 in the types group by @dependabot[bot] in #3535 build(deps): Bump crate-ci/typos from 1.42.3 to 1.43.1 by @dependabot[bot] in #3539 build(deps): Bump vue-router from 4.6.4 to 5.0.1 in the vue group by @dependabot[bot] in #3532 build(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.1 by @dependabot[bot] in #3546 build(deps-dev): Bump @types/node from 25.2.0 to 25.2.1 in the types group by @dependabot[bot] in #3545 build(deps): Bump crate-ci/typos from 1.43.1 to 1.43.2 by @dependabot[bot] in #3544 build(deps): Bump fast-xml-parser and webdav by @dependabot[bot] in #3548 build(deps): Bump bamarni/composer-bin-plugin from 1.8.3 to 1.9.1 by @dependabot[bot] in #3540 prepare changelog by @Grotax in #3549 Fix dependency scoping with auto-downloaded composer by @Copilot in #3493 feat: add notifications when sharing articles with users by @eureka928 in #3542 Release 28.0.0-beta.3 by @Grotax in #3550 Fix: Correct URL path construction for article sharing by @Grotax in #3551 Use browser-like order of http headers to avoid triggering bot detections by @wofferl in #3552 build(deps): Bump crate-ci/typos from 1.43.2 to 1.43.3 by @dependabot[bot] in #3553 build(deps): Bump vue from 3.5.27 to 3.5.28 in the vue group by @dependabot[bot] in #3554 build(deps-dev): Bump @types/node from 25.2.1 to 25.2.2 in the types group by @dependabot[bot] in #3555 build(deps): Bump crate-ci/typos from 1.43.3 to 1.43.4 by @dependabot[bot] in #3557 build(deps): Bump @vueuse/core from 14.2.0 to 14.2.1 by @dependabot[bot] in #3558 build(deps): Bump axios from 1.12.2 to 1.13.5 by @dependabot[bot] in #3559 build(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 by @dependabot[bot] in #3563 build(deps-dev): Bump @types/node from 25.2.2 to 25.2.3 in the types group by @dependabot[bot] in #3562 build(deps-dev): Bump jsdom from 28.0.0 to 28.1.0 by @dependabot[bot] in #3567 build(deps-dev): Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #3564 build(deps): Bump crate-ci/typos from 1.43.4 to 1.43.5 by @dependabot[bot] in #3569 Replace deprecated withConsecutive method in PHP tests - All tests passing by @Copilot in #3434 Add GitHub Actions workflow for security analysis by @SMillerDev in #3560 Check for null before logging download status by @bmschwa in #3561 workflows: use mariadb service instead of outdated getong/mariadb-action by @wofferl in #3570 Add user settings to control loading external content by @wofferl in #3566 Release 28.0.0-rc.1 by @Grotax in #3572 Release 28.0.0-rc.2 by @Grotax in #3573 build(deps): Bump fast-xml-parser from 5.3.4 to 5.3.6 by @dependabot[bot] in #3574 Fix wrong image referenced in notifaction code by @Grotax in #3575 Automatically select item when using single item route by @wofferl in #3577 [master] Fix npm audit by @nextcloud-command in #3585 chore(i18n): Improved grammar by @rakekniven in #3590 build(deps-dev): Bump doctrine/dbal from 3.10.4 to 3.10.5 by @dependabot[bot] in #3591 Fix incomplete scoped PHP dependencies when packages share the same namespace by @Copilot in #3580 Release 28.0.0 by @Grotax in #3594 New Contributors @Juri-w made their first contribution in #3148 @eureka928 made their first contribution in #3542 @bmschwa made their first contribution in #3561 Full Changelog: 27.2.0...28.0.0

What's Changed Release 28.0.0-rc.2 by @Grotax in #3573 Full Changelog: 28.0.0-rc.1...28.0.0-rc.2

What's Changed Fix: Correct URL path construction for article sharing by @Grotax in #3551 Use browser-like order of http headers to avoid triggering bot detections by @wofferl in #3552 build(deps): Bump crate-ci/typos from 1.43.2 to 1.43.3 by @dependabot[bot] in #3553 build(deps): Bump vue from 3.5.27 to 3.5.28 in the vue group by @dependabot[bot] in #3554 build(deps-dev): Bump @types/node from 25.2.1 to 25.2.2 in the types group by @dependabot[bot] in #3555 build(deps): Bump crate-ci/typos from 1.43.3 to 1.43.4 by @dependabot[bot] in #3557 build(deps): Bump @vueuse/core from 14.2.0 to 14.2.1 by @dependabot[bot] in #3558 build(deps): Bump axios from 1.12.2 to 1.13.5 by @dependabot[bot] in #3559 build(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 by @dependabot[bot] in #3563 build(deps-dev): Bump @types/node from 25.2.2 to 25.2.3 in the types group by @dependabot[bot] in #3562 build(deps-dev): Bump jsdom from 28.0.0 to 28.1.0 by @dependabot[bot] in #3567 build(deps-dev): Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #3564 build(deps): Bump crate-ci/typos from 1.43.4 to 1.43.5 by @dependabot[bot] in #3569 Replace deprecated withConsecutive method in PHP tests - All tests passing by @Copilot in #3434 Add GitHub Actions workflow for security analysis by @SMillerDev in #3560 Check for null before logging download status by @bmschwa in #3561 workflows: use mariadb service instead of outdated getong/mariadb-action by @wofferl in #3570 Add user settings to control loading external content by @wofferl in #3566 Release 28.0.0-rc.1 by @Grotax in #3572 New Contributors @bmschwa made their first contribution in #3561 Full Changelog: 28.0.0-beta.3...28.0.0-rc.1