28.7.0-beta.1

What's Changed

🚀 Changed

• Update user documentation by @Grotax in #3732
• fix(db): use correlated subqueries for feed unread/starred counts by @tareko in #3827

📦 Dependency Updates

• build(deps): Bump crate-ci/typos from 1.47.1 to 1.47.2 by @dependabot[bot] in #3795
• [master] Fix npm audit by @nextcloud-command in #3801
• build(deps-dev): Bump @vue/test-utils from 2.4.10 to 2.4.11 in the vue group by @dependabot[bot] in #3798
• build(deps): Bump nextcloud from 33-apache to 34-apache in /docker by @dependabot[bot] in #3797
• build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #3804
• build(deps): Bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #3803
• build(deps-dev): Bump @types/node from 25.9.1 to 25.9.2 in the types group by @dependabot[bot] in #3802
• build(deps): Bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in #3807
• build(deps): Bump dompurify from 3.4.8 to 3.4.11 by @dependabot[bot] in #3808
• build(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in #3809
• build(deps-dev): Bump @types/node from 25.9.2 to 25.9.3 in the types group by @dependabot[bot] in #3811
• build(deps): Bump vue from 3.5.35 to 3.5.38 in the vue group across 1 directory by @dependabot[bot] in #3810
• build(deps-dev): Bump undici from 7.25.0 to 7.28.0 by @dependabot[bot] in #3814
• build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3817
• build(deps): Bump guzzlehttp/psr7 from 2.11.0 to 2.12.1 by @dependabot[bot] in #3818
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #3819
• build(deps-dev): Bump vite from 7.3.5 to 7.3.6 in the vite group by @dependabot[bot] in #3825
• build(deps): Bump vue from 3.5.38 to 3.5.39 in the vue group by @dependabot[bot] in #3824
• build(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #3821
• build(deps): Bump guzzlehttp/psr7 from 2.12.1 to 2.12.3 by @dependabot[bot] in #3823
• build(deps-dev): Bump @types/node from 25.9.3 to 26.0.1 in the types group across 1 directory by @dependabot[bot] in #3820
• [master] Fix npm audit by @nextcloud-command in #3830
• build(deps): Bump crate-ci/typos from 1.47.2 to 1.48.0 by @dependabot[bot] in #3833
• build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 by @dependabot[bot] in #3831
• build(deps): Bump dorny/paths-filter from 4.0.1 to 4.0.2 by @dependabot[bot] in #3835
• build(deps): Bump guzzlehttp/psr7 from 2.12.3 to 2.12.4 by @dependabot[bot] in #3841
• build(deps-dev): Bump @types/node from 26.0.1 to 26.1.0 in the types group across 1 directory by @dependabot[bot] in #3834
• build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 by @dependabot[bot] in #3839
• build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3838

New Contributors

• @TheUnderdev made their first contribution in #3738
• @tareko made their first contribution in #3827

Full Changelog: 28.6.0...28.7.0-beta.1

28.6.0

💖 Enjoying News? Consider giving it a star on GitHub to help others discover it!

What's Changed

🚀 Changed

• Enable support vor server version 34 by @Grotax in #3786

📦 Dependency Updates

• build(deps): Bump vue-router from 5.0.7 to 5.1.0 in the vue group by @dependabot[bot] in #3788
• build(deps-dev): Bump the vite group with 3 updates by @dependabot[bot] in #3789
• build(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.1 by @dependabot[bot] in #3784
• build(deps): Bump crate-ci/typos from 1.47.0 to 1.47.1 by @dependabot[bot] in #3792
• build(deps): Bump @nextcloud/vue from 9.8.1 to 9.8.2 by @dependabot[bot] in #3793
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #3794

Full Changelog: 28.5.1...28.6.0

28.5.1

What's Changed

🚀 Changed

• Fix the symfony loading issue by @Grotax in #3780

📦 Dependency Updates

• build(deps): Bump vue from 3.5.34 to 3.5.35 in the vue group by @dependabot[bot] in #3778
• build(deps): Bump crate-ci/typos from 1.46.3 to 1.47.0 by @dependabot[bot] in #3779

Full Changelog: 28.5.0...28.5.1

28.5.1-beta.1

What's Changed

🚀 Changed

• Fix the symfony loading issue by @Grotax in #3780

📦 Dependency Updates

• build(deps): Bump vue from 3.5.34 to 3.5.35 in the vue group by @dependabot[bot] in #3778
• build(deps): Bump crate-ci/typos from 1.46.3 to 1.47.0 by @dependabot[bot] in #3779

Full Changelog: 28.5.0...28.5.1-beta.1

28.5.0

Security

• Update recommended: This version fixes a gap in the SSRF protection that occurs when the remote host redirects to a local address.

What's Changed

🐛 Fixed

• Fix on_redirect handling missing in the FetcherConfig by @Grotax in #3773

📦 Dependency Updates

• [master] Fix npm audit by @nextcloud-command in #3754
• build(deps): Bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 by @dependabot[bot] in #3755
• build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in #3759
• build(deps): Bump crate-ci/typos from 1.46.1 to 1.46.2 by @dependabot[bot] in #3758
• build(deps): Bump errata-ai/vale-action from 2.1.1 to 2.1.2 by @dependabot[bot] in #3756
• build(deps-dev): Bump @types/node from 25.8.0 to 25.9.0 in the types group by @dependabot[bot] in #3757
• build(deps): Bump R0Wi/nextcloud-appstore-push-action from 1.0.4 to 1.0.5 by @dependabot[bot] in #3761
• build(deps-dev): Bump @types/node from 25.9.0 to 25.9.1 in the types group by @dependabot[bot] in #3762
• build(deps): Bump guzzlehttp/psr7 from 2.9.0 to 2.10.1 by @dependabot[bot] in #3763
• build(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 by @dependabot[bot] in #3765
• build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3764
• [master] Fix npm audit by @nextcloud-command in #3767
• build(deps): Bump guzzlehttp/psr7 from 2.10.1 to 2.10.2 by @dependabot[bot] in #3770
• build(deps): Bump crate-ci/typos from 1.46.2 to 1.46.3 by @dependabot[bot] in #3771
• build(deps): Bump symfony/cache from 7.4.9 to 7.4.12 by @dependabot[bot] in #3766

Full Changelog: 28.4.1...28.5.0

28.4.1

No major changes, basically a re-release of 28.4.0

What's Changed

📦 Dependency Updates

• build(deps): Bump shivammathur/setup-php from 2.37.0 to 2.37.1 by @dependabot[bot] in #3749
• build(deps-dev): Bump the vite group across 1 directory with 2 updates by @dependabot[bot] in #3744
• build(deps): Bump vue-router from 5.0.6 to 5.0.7 in the vue group across 1 directory by @dependabot[bot] in #3746
• build(deps): Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 by @dependabot[bot] in #3750
• build(deps): Bump @nextcloud/vue from 9.7.0 to 9.8.0 by @dependabot[bot] in #3741
• build(deps): Bump crate-ci/typos from 1.46.0 to 1.46.1 by @dependabot[bot] in #3739
• build(deps-dev): Bump @types/node from 25.6.0 to 25.8.0 in the types group across 1 directory by @dependabot[bot] in #3740

Full Changelog: 28.4.0...28.4.1

28.4.0

What's Changed

🚀 Changed

• fix: Update setup-nextcloud action references to use 'main' branch by @Grotax in #3705
• Update devcontainer to make it actually useful by @Grotax in #3707
• Refactor favicon discovery to use favicon-io with scoped PSR-18 adapter by @Grotax in #3710
• feat: Add keyword-based feed filtering (deny-list) by @erykjj in #3711
• fix: use nextcloud style input fields for the new filter dialog and add some tests by @wofferl in #3730
• Add accessible multi-feed selection with header actions and throttled batch move/delete in feed settings by @Copilot in #3728
• feat(MoveFeed): show status during move feed action by @wofferl in #3737

🐛 Fixed

• fix: NcCheckBoxRadioSwitch requires value as string by @wofferl in #3733

📦 Dependency Updates

• build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.8 in the vue group by @dependabot[bot] in #3706
• build(deps): Bump dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 by @dependabot[bot] in #3714
• build(deps): Bump crate-ci/typos from 1.45.1 to 1.45.2 by @dependabot[bot] in #3715
• build(deps-dev): Bump jsdom from 29.0.2 to 29.1.0 by @dependabot[bot] in #3716
• build(deps-dev): Bump @vue/test-utils from 2.4.8 to 2.4.9 in the vue group by @dependabot[bot] in #3717
• build(deps): Bump @nextcloud/vue from 9.6.0 to 9.7.0 by @dependabot[bot] in #3718
• build(deps): Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in #3724
• build(deps-dev): Bump jsdom from 29.1.0 to 29.1.1 by @dependabot[bot] in #3723
• build(deps): Bump crate-ci/typos from 1.45.2 to 1.46.0 by @dependabot[bot] in #3722
• build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 in the vue group across 1 directory by @dependabot[bot] in #3721
• build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #3726
• build(deps): Bump fast-uri from 3.0.6 to 3.1.2 by @dependabot[bot] in #3727
• build(deps): Bump vue from 3.5.33 to 3.5.34 in the vue group across 1 directory by @dependabot[bot] in #3734
• build(deps-dev): Bump vite from 7.3.2 to 7.3.3 in the vite group by @dependabot[bot] in #3735
• build(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 by @dependabot[bot] in #3736

New Contributors

• @erykjj made their first contribution in #3711

Full Changelog: 28.3.0...28.4.0

28.4.0-beta.1

What's Changed

🚀 Changed

• fix: Update setup-nextcloud action references to use 'main' branch by @Grotax in #3705
• Update devcontainer to make it actually useful by @Grotax in #3707
• Refactor favicon discovery to use favicon-io with scoped PSR-18 adapter by @Grotax in #3710
• feat: Add keyword-based feed filtering (deny-list) by @erykjj in #3711
• fix: use nextcloud style input fields for the new filter dialog and add some tests by @wofferl in #3730
• Add accessible multi-feed selection with header actions and throttled batch move/delete in feed settings by @Copilot in #3728

📦 Dependency Updates

• build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.8 in the vue group by @dependabot[bot] in #3706
• build(deps): Bump dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 by @dependabot[bot] in #3714
• build(deps): Bump crate-ci/typos from 1.45.1 to 1.45.2 by @dependabot[bot] in #3715
• build(deps-dev): Bump jsdom from 29.0.2 to 29.1.0 by @dependabot[bot] in #3716
• build(deps-dev): Bump @vue/test-utils from 2.4.8 to 2.4.9 in the vue group by @dependabot[bot] in #3717
• build(deps): Bump @nextcloud/vue from 9.6.0 to 9.7.0 by @dependabot[bot] in #3718
• build(deps): Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in #3724
• build(deps-dev): Bump jsdom from 29.1.0 to 29.1.1 by @dependabot[bot] in #3723
• build(deps): Bump crate-ci/typos from 1.45.2 to 1.46.0 by @dependabot[bot] in #3722
• build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 in the vue group across 1 directory by @dependabot[bot] in #3721
• build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #3726
• build(deps): Bump fast-uri from 3.0.6 to 3.1.2 by @dependabot[bot] in #3727

New Contributors

• @erykjj made their first contribution in #3711

Full Changelog: 28.3.0...28.4.0-beta.1

28.3.0

What's Changed

🚓 Security

• Use IClientService (with SSRF protection) instead of straight Guzzle Client by @SMillerDev in #3672

🚀 Changed

• make future github release notes a bit more organized by @Grotax in #3688
• fix(starred): stop endless item requests in Starred view by @Copilot in #3694
• chore(devcontainer): devcontainer enhancements by @Grotax in #3698

📦 Dependency Updates

• build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689
• build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690
• build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691
• build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696
• build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #3699
• build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in #3700
• build(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 by @dependabot[bot] in #3702
• build(deps): Bump the vue group with 2 updates by @dependabot[bot] in #3701

Full Changelog: 28.2.0...28.3.0

28.3.0-beta.1

What's Changed

🚀 Changed

• make future github release notes a bit more organized by @Grotax in #3688
• Change: Use IClientService instead of straight Guzzle Client by @SMillerDev in #3672
• fix(starred): stop endless item requests in Starred view by @Copilot in #3694

📦 Dependency Updates

• build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in #3689
• build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #3690
• build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in #3691
• build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in #3696

Full Changelog: 28.2.0...28.3.0-beta.1