[stable28] fix(settings): Disable renaming for tokens marked to be wiped by @backportbot in https://github.com/nextcloud/server/pull/43195
[stable28] fix(Request): Catch exceptions in isTrustedProxy by @backportbot in https://github.com/nextcloud/server/pull/43192
[stable28] dont reuse etag for folders marked explicitly unscanned by @backportbot in https://github.com/nextcloud/server/pull/43244
[stable28] Document throwing behavior of SetupResult upon invalid rich object by @backportbot in https://github.com/nextcloud/server/pull/43196
[stable28] fix(files): make sure we focus the parent actions submenu entry by @backportbot in https://github.com/nextcloud/server/pull/43242
[stable28] fix(a11y): Unified search headings the sequel by @backportbot in https://github.com/nextcloud/server/pull/42777
[stable28] fix(tests): Make PostgreSQL unit tests less flacky by ordering by @backportbot in https://github.com/nextcloud/server/pull/43133
[stable28] fix(files_sharing): Return focus to trigger element on sharing details close by @backportbot in https://github.com/nextcloud/server/pull/43155
[stable28] enh(UnifiedSearch): Keep the searchbar on top of the modal by @backportbot in https://github.com/nextcloud/server/pull/42776
[stable28] fix(files): combine navigation and files list into single Vue app by @backportbot in https://github.com/nextcloud/server/pull/43108
[stable28] Buffer chunked requests by @backportbot in https://github.com/nextcloud/server/pull/43129
[stable28] fix: added a label element to the NcSelect in update settings by @backportbot in https://github.com/nextcloud/server/pull/43158
[stable28] fix(settings): set viewBox on SVG icons by @backportbot in https://github.com/nextcloud/server/pull/43065
[stable28] chore: Bump @nextcloud/vue to v8.5.1 by @backportbot in https://github.com/nextcloud/server/pull/43064
[stable28] handle storage not available when expiring versions by @backportbot in https://github.com/nextcloud/server/pull/43126
[stable28] Move modal outside of the Version component. by @backportbot in https://github.com/nextcloud/server/pull/43167
[stable28] fix(a11y): Fix informative graphics contrast of user status icons by @backportbot in https://github.com/nextcloud/server/pull/43066
[stable28] Remove disputed bz2 check by @backportbot in https://github.com/nextcloud/server/pull/43013
[stable28] fix(files): do not open file by id on load for folders by @backportbot in https://github.com/nextcloud/server/pull/43292
[stable28] fix(tests): Make the cypress apps management test more reliable by @backportbot in https://github.com/nextcloud/server/pull/43295
[stable28] fix(user_status): Fix losing focus to body when closing user status modal by @backportbot in https://github.com/nextcloud/server/pull/43291
[stable28] fix(settings): federation scope menu a11y by @backportbot in https://github.com/nextcloud/server/pull/43112
[stable28] Replace inaccessible disabled option of NcCheckboxRadioSwitch with NcNoteCard by @backportbot in https://github.com/nextcloud/server/pull/43044
[stable28] Correct values and attributes by @backportbot in https://github.com/nextcloud/server/pull/43040
[stable28] Fix: config param 'overwritecondaddr' not working by @backportbot in https://github.com/nextcloud/server/pull/43181
[stable28] fix(apps): Fix type information of app manager by @backportbot in https://github.com/nextcloud/server/pull/43046
[stable28] fix(files): Consistent sorting for folders before files (user configurable) by @backportbot in https://github.com/nextcloud/server/pull/43175
[stable28] fix(files): selected files actions position on scroll/with readme block by @backportbot in https://github.com/nextcloud/server/pull/43222
[stable28] fix(caldav): only call getTimestamp() on actual DateTime data by @backportbot in https://github.com/nextcloud/server/pull/43282
[stable28] dav: fix wrong decoding of pluses in URLs by @backportbot in https://github.com/nextcloud/server/pull/43236
[stable28] Consider admin defaults when creating shares by @backportbot in https://github.com/nextcloud/server/pull/43278
[stable28] make failure to load app commands non-fatal by @backportbot in https://github.com/nextcloud/server/pull/43294
[stable28] fix(files): drag leave detection on safari by @backportbot in https://github.com/nextcloud/server/pull/43336
[stable28] fix(files): dav owner and mime types by @backportbot in https://github.com/nextcloud/server/pull/43359
[stable28] fix(theming): change color button contrast by @backportbot in https://github.com/nextcloud/server/pull/43347
[stable28] chore: Use the same configuration in update-baseline as in psalm workflow by @come-nc in https://github.com/nextcloud/server/pull/43384
[stable28] fix(settings): focus on federation scope after dialog by @backportbot in https://github.com/nextcloud/server/pull/43388
[stable28] fix: added last two places for aria-labels on setting icons by @backportbot in https://github.com/nextcloud/server/pull/43403
[stable28] Fix color of app menu entries and background color by @backportbot in https://github.com/nextcloud/server/pull/43392
[stable28] fix(security): Update code signing revocation list by @nextcloud-command in https://github.com/nextcloud/server/pull/43372
[stable28] fix(files): add mount root property and adjust delete wording by @backportbot in https://github.com/nextcloud/server/pull/43404
[stable28] fix(files): drop to folder path and user feedback by @backportbot in https://github.com/nextcloud/server/pull/43418
[stable28] Bump NcVue to v8.6.2 by @JuliaKirschenheuter in https://github.com/nextcloud/server/pull/43434
[stable28] continue background scanning different storages if one fails by @backportbot in https://github.com/nextcloud/server/pull/43421
[stable28] fix(migration): Make naming constraint fail softer on updates by @backportbot in https://github.com/nextcloud/server/pull/43445
[stable28] fix(files): move focus to sidebar on open by @backportbot in https://github.com/nextcloud/server/pull/43448
[stable28] fix(sharing): migrate QuickShareSelect to NcActions by @backportbot in https://github.com/nextcloud/server/pull/43449
[stable28] Use AccountPlusIcon in broadcrombs by @backportbot in https://github.com/nextcloud/server/pull/43451
[stable28] chore: Update nextcloud-vue-collection to drop duplicated nextcloud-vue by @backportbot in https://github.com/nextcloud/server/pull/43409
[stable28] do not break personal settings page is viewer is not there by @backportbot in https://github.com/nextcloud/server/pull/43456
[stable28] fix(ContactsStore): Sanitize user ID given to guest avatar route by @backportbot in https://github.com/nextcloud/server/pull/43422
[stable28] fix(files): Update webdav to make XML entities in filenames work by @backportbot in https://github.com/nextcloud/server/pull/43473
[stable28] fix(files): Don't attempt to format a partial cache entry by @backportbot in https://github.com/nextcloud/server/pull/43391
[stable28] Bump calendar-availability-vue to v2.1.0 by @JuliaKirschenheuter in https://github.com/nextcloud/server/pull/43485
[stable28] fix(files): Allow to set node name before creating + bring back new-file highlingting by @backportbot in https://github.com/nextcloud/server/pull/43470
[stable28] fix(security): Update code signing revocation list by @nextcloud-command in https://github.com/nextcloud/server/pull/43505
[stable28] Lower failed movie preview generation logs to level info by @backportbot in https://github.com/nextcloud/server/pull/43511
[stable28] Allow application to pass external links in navigation by @backportbot in https://github.com/nextcloud/server/pull/43520
[stable28] SMB: allow to list root directory when using case-insensitive option by @backportbot in https://github.com/nextcloud/server/pull/43523
[stable28] fix(sharing): Move video verification option to password and hide without Talk by @backportbot in https://github.com/nextcloud/server/pull/43546
[stable28] fix(tests): Adjust mariadb testing matrix by @susnux in https://github.com/nextcloud/server/pull/43483
[stable28] fix(files_sharing): SharingEntryLink lost styles by @backportbot in https://github.com/nextcloud/server/pull/43559
[stable28] chore(deps): bump @nextcloud/upload to 1.0.5 by @backportbot in https://github.com/nextcloud/server/pull/43583
[stable28] Fix for previews not being generated sometimes by @SystemKeeper in https://github.com/nextcloud/server/pull/43037
[stable28] chore: Remove old theming migration steps as they are only needed once by @backportbot in https://github.com/nextcloud/server/pull/43585
[stable28] fix: Add bruteforce protection to email endpoint by @nickvergessen in https://github.com/nextcloud/server/pull/43596
[stable28] fix(papercut): rerendered submenu actions for time sensitive actions by @Pytal in https://github.com/nextcloud/server/pull/43590
[stable28] enh(files_reminders): Allow clearing reminders by @Pytal in https://github.com/nextcloud/server/pull/43591
28.0.3 RC1 by @skjnldsv in https://github.com/nextcloud/server/pull/43578
[stable28] fix(settings): Disable SSL cert check for JavaScript modules SetupCheck by @backportbot in https://github.com/nextcloud/server/pull/43587
[stable28] fix(userstatus): add back 0 timestamp for status without message by @backportbot in https://github.com/nextcloud/server/pull/43530
[stable28] chore(dep): bump NcVue -> 8.7.0 by @backportbot in https://github.com/nextcloud/server/pull/43695
[stable28] fix: Add bruteforce protection to federation endpoint by @backportbot in https://github.com/nextcloud/server/pull/43713
[stable28] fix(files): Dont't warn re: full on either zero or unlimited quota by @backportbot in https://github.com/nextcloud/server/pull/43672
[stable28] perf: skip request without read permission by @backportbot in https://github.com/nextcloud/server/pull/43722
[stable28] Stop the auto-logout loop after redirecting to the logout page by @backportbot in https://github.com/nextcloud/server/pull/43706
[stable28] enh: breadcrumbs icons are now more visually descriptive by @backportbot in https://github.com/nextcloud/server/pull/43622
[stable28] fix(styles): Add default styles for disabled elements by @backportbot in https://github.com/nextcloud/server/pull/43710
[stable28] feat: added l10n translation prop to calendar component by @backportbot in https://github.com/nextcloud/server/pull/43743
[stable28] fix(settings): Fix required groups validation for subadmins by @backportbot in https://github.com/nextcloud/server/pull/43719
[stable28] Fix Slow logout on Chrome-like browsers by @backportbot in https://github.com/nextcloud/server/pull/43525
[stable28] chore(cypress): add 3 more runners by @backportbot in https://github.com/nextcloud/server/pull/43755
[stable28] fix kerberos test successfull authentication detection by @backportbot in https://github.com/nextcloud/server/pull/43304
[stable28] Move away from deprecated utf8_encode() on PHP 8.2+ by @backportbot in https://github.com/nextcloud/server/pull/43669
[stable28] Fix undefined share object during expirationDate update by @backportbot in https://github.com/nextcloud/server/pull/43685
[stable28] fix(security): Describe occ security:bruteforce:attempts accurately by @backportbot in https://github.com/nextcloud/server/pull/43726
[stable28] Check share status when touching versions by @backportbot in https://github.com/nextcloud/server/pull/43741
[stable28] fix(dav): fix getNodeForPath cache by @miaulalala in https://github.com/nextcloud/server/pull/43708
[stable28] chore: Update @nextcloud/dialogs to 5.1.2 by @backportbot in https://github.com/nextcloud/server/pull/43766
[stable28] fix(dav): Rate limit calendar/subscription creation by @backportbot in https://github.com/nextcloud/server/pull/43751
28.0.3rc2 by @skjnldsv in https://github.com/nextcloud/server/pull/43718
[stable28] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/server/pull/43822
[stable28] Init ViewOnlyPlugin after auth by @backportbot in https://github.com/nextcloud/server/pull/43869
28.0.3 by @skjnldsv in https://github.com/nextcloud/server/pull/43888

Full Changelog: https://github.com/nextcloud/server/compare/v28.0.2...v28.0.3