v28.0.13

What's Changed

• [stable28] fix(theming): Return default theme if the user never selected a theme by @backportbot in #49135
• [stable28] fix(files_sharing): note icon color on public pages by @backportbot in #49155
• [stable28] fix(SharingEntryLink): Show default password before create if any by @backportbot in #49148
• chore(deps-dev): Bump @pinia/testing from 0.1.3 to 0.1.7 by @dependabot in #49173
• [stable28] fix: undefined variable $response in DAV storage by @backportbot in #49158
• [stable28] fix(files_external): cast storage id int by @backportbot in #49220
• [stable28] fix: log a warning when we can't build a background job by @backportbot in #49205
• [stable28] Fix remaining readdir() calls in loops with undesirable false evaluation potential by @backportbot in #49227
• [stable28] fix(files): view-in-folder enabled conditions by @backportbot in #49178
• [stable28] Clear pending two factor tokens also from configuration by @backportbot in #49096
• build(deps-dev): bump @types/jest from 29.5.12 to 29.5.14 by @dependabot in #49046
• [stable28] feat: Add X-NC-Disable-Scheduling property to allow skipping scheduling by @backportbot in #49253
• [stable28] chore(github): Update groupware code owners by @backportbot in #49212
• [stable28] chore(deps): Add SabreDav Patch for iTip Broker by @SebastianKrupinski in #49267
• build(deps): bump dompurify from 3.1.6 to 3.1.7 by @dependabot in #49318
• [stable28] fix: override iTip Broker to fix several issues by @backportbot in #49269
• [stable28] fix(files): Allow downloading multiple nodes not from same base by @susnux in #49203
• [stable28] fix(files): improve delete display name when trashbin is disabled by @backportbot in #49367
• [stable28] fix(files): edit locally buttons and description by @backportbot in #49163
• [stable28] feat(settings): add big file upload setup checks by @backportbot in #49381
• [stable28] fix(job): Check if carddata is resource and read it to string by @backportbot in #49388
• [stable28] fix(storage): Try to delete existing target by @backportbot in #49411
• chore(deps-dev): bump @nextcloud/cypress from 1.0.0-beta.9 to 1.0.0-beta.10 by @dependabot in #49446
• chore(deps-dev): bump jsdoc from 4.0.3 to 4.0.4 by @dependabot in #49449
• [stable28] fix: (CalDav) Delete invitation link when deleting Calendars or Events by @backportbot in #49427
• [stable28] fix(BackgroundJobs): Adjust intervals and time sensitivities by @backportbot in #49463
• [stable28] fix(OCMDiscoveryService): Also cache error results during discovery by @backportbot in #49470
• [stable28] fix: invalid usage of IQueryBuilder::createNamedParameter() by @backportbot in #49478
• [stable28] fix(security): Update CA certificate bundle by @nextcloud-command in #49510
• [stable28] DNS: do not query CNAME if A succeeded already by @backportbot in #49279
• [stable28] fix(migration): Decrypt ownCloud secrets v2 by @backportbot in #49535
• [stable28] chore: stricter access to testremote endpoint by @backportbot in #49542
• 28.0.13 RC1 by @skjnldsv in #49526
• [stable28] fix(setupcheck): Disable PhpMaxFileSize setupcheck for now by @backportbot in #49640
• 28.0.13 by @blizzz in #49667

Full Changelog: v28.0.12...v28.0.13