What's Changed

• [stable28] fix(files_external): broken credentials dialog by @backportbot in https://github.com/nextcloud/server/pull/47952
• [stable28] fix(files): Adjust Cache::searchQuery() parameter name to match interface by @backportbot in https://github.com/nextcloud/server/pull/47956
• [stable28] fix(files_external): Check key exists before accessing it by @backportbot in https://github.com/nextcloud/server/pull/47974
• [stable28] fix(Tags): Return boolean for userHasTags() by @backportbot in https://github.com/nextcloud/server/pull/48023
• [stable28] fix(Comment): Initialize childrenCount as integer by @backportbot in https://github.com/nextcloud/server/pull/48022
• [stable28] Update psalm-baseline.xml by @nextcloud-command in https://github.com/nextcloud/server/pull/47988
• [stable28] fix(Storage\Local): Do not call getSourcePath() on SplFileInfo by @backportbot in https://github.com/nextcloud/server/pull/48019
• [stable28] fix: Only write once to template instead of create/copy by @backportbot in https://github.com/nextcloud/server/pull/47861
• [stable28] fix: Fix inaccessible content on public pages due to overlapping footer by @backportbot in https://github.com/nextcloud/server/pull/47811
• [stable28] fix(LDAP): check index before accessing it by @backportbot in https://github.com/nextcloud/server/pull/47917
• [stable28] fix(BaseResponse): Cast XML element values to string by @backportbot in https://github.com/nextcloud/server/pull/48032
• [stable28] fix: Do not try to set HTTP response code on already closed connection by @backportbot in https://github.com/nextcloud/server/pull/47979
• [stable28] fix(appstore): Ensure returned apps from AppStore are valid by @backportbot in https://github.com/nextcloud/server/pull/47935
• [stable28] fix(files): Reset context menu position on close by @backportbot in https://github.com/nextcloud/server/pull/47876
• [stable28] fix: Display 'Leave share' instead of 'Delete' by @backportbot in https://github.com/nextcloud/server/pull/47893
• [stable28] fix(dav): set string type for sanitizeMtime by @backportbot in https://github.com/nextcloud/server/pull/48051
• [stable28] fix(config): Throw PreconditionException always when it didn't match by @backportbot in https://github.com/nextcloud/server/pull/47942
• [stable28] fix(preview): gracefully handle file not being opened in ProviderV2 by @backportbot in https://github.com/nextcloud/server/pull/47866
• [stable28] fix(appstore): return if appstore is manually disabled by @backportbot in https://github.com/nextcloud/server/pull/47870
• [stable28] feat: Reset route if neither the Viewer of the Sidebar is open by @backportbot in https://github.com/nextcloud/server/pull/48002
• [stable28] fix(dav): cast parameters to string by @backportbot in https://github.com/nextcloud/server/pull/48066
• [stable28] fix(Entity): Fix magic setter call for custom strong typed setters by @backportbot in https://github.com/nextcloud/server/pull/48089
• [stable28] 🥅 — Catch MaxInstancesExceededException on calendar events by @backportbot in https://github.com/nextcloud/server/pull/48085
• [stable28] Ensure that the hash method does not return null by @backportbot in https://github.com/nextcloud/server/pull/48103
• [stable28] chore(1i8n): Fixed grammar and improved wording by @backportbot in https://github.com/nextcloud/server/pull/48082
• [stable28] fix(FileList): Show correct avatar for federated share owner by @Fenn-CS in https://github.com/nextcloud/server/pull/47441
• [stable28] fix: Prevent crash when refreshing metadata for files without an owner by @backportbot in https://github.com/nextcloud/server/pull/48091
• [stable28] fix(appstoreFetcher): get list from a custom store and remove unnecessary warning by @backportbot in https://github.com/nextcloud/server/pull/48166
• [stable28] fix(config): Add missing handling for envCache in getKeys() by @backportbot in https://github.com/nextcloud/server/pull/48099
• [stable28] Update psalm-baseline.xml by @nextcloud-command in https://github.com/nextcloud/server/pull/48058
• [stable28] chore: add .git-blame-ignore-revs by @backportbot in https://github.com/nextcloud/server/pull/48292
• [stable28] fix: skip the integrity check for nextcloud-init-sync.lock by @backportbot in https://github.com/nextcloud/server/pull/48300
• [stable28] fix(psalm): Enable findUnusedBaselineEntry by @provokateurin in https://github.com/nextcloud/server/pull/48281
• [stable28] fix: Don't crash if disabled user is missing in the database by @backportbot in https://github.com/nextcloud/server/pull/48283
• [stable28] Add bidirectional text support - Backend by @backportbot in https://github.com/nextcloud/server/pull/48310
• [stable28] fix(security): Update CA certificate bundle by @nextcloud-command in https://github.com/nextcloud/server/pull/48339
• [stable28] fix(files): Fix having to resolve conflicts twice when dropping files by @backportbot in https://github.com/nextcloud/server/pull/48352
• [stable28] refactor(AccountIcon): Remove needless console.log by @backportbot in https://github.com/nextcloud/server/pull/48318
• [stable28] fix: Show storage full warning when storage is actually full by @backportbot in https://github.com/nextcloud/server/pull/48367
• [stable28] fix(files_external): Catch correct exception by @backportbot in https://github.com/nextcloud/server/pull/48363
• [stable28] chore(deps): Bump aws/aws-sdk-php from 3.240.8 to 3.322.4 by @kesselb in https://github.com/nextcloud/server/pull/48348
• [stable28] feat(share): ensure unique share tokens with dynamic length adjustment by @backportbot in https://github.com/nextcloud/server/pull/48379
• [stable28] fix: Use placeholder for external storage password by @backportbot in https://github.com/nextcloud/server/pull/48386
• [stable28] fix(files_sharing): Parse OCM share permissions from OCM and not OCS prop by @backportbot in https://github.com/nextcloud/server/pull/48399
• [stable28] Skip future shipped apps from updatenotification check by @backportbot in https://github.com/nextcloud/server/pull/48392
• chore(deps): bump @nextcloud/calendar-availability-vue from 2.2.2 to 2.2.4 by @dependabot in https://github.com/nextcloud/server/pull/47813
• chore(deps-dev): Bump cypress from 13.13.2 to 13.13.3 by @dependabot in https://github.com/nextcloud/server/pull/48427
• [stable28] fix: gracefully parse non-standard trusted certificates by @st3iny in https://github.com/nextcloud/server/pull/48443
• [stable28] fix: correctly count disabled users for subadmins by @backportbot in https://github.com/nextcloud/server/pull/48448
• [stable28] fix(Auth): ignore missing token when trying to set password-unconfirmable by @blizzz in https://github.com/nextcloud/server/pull/48445
• [stable28] fix(caldav): Do not load IMipPlugin before user auth and session is c… by @SebastianKrupinski in https://github.com/nextcloud/server/pull/47791
• [stable28] fix(config): Suppress config.php fopen error at install time by @backportbot in https://github.com/nextcloud/server/pull/48501
• [stable28] fix(weather_status): Fix search address errors when offline by @backportbot in https://github.com/nextcloud/server/pull/48074
• [stable28] fix(dav): imip service test expects integers for last occurence by @backportbot in https://github.com/nextcloud/server/pull/48054
• [stable28] fix(caldav): add missing handlers by @miaulalala in https://github.com/nextcloud/server/pull/48510
• 28.0.11 RC1 by @Altahrim in https://github.com/nextcloud/server/pull/48498

Full Changelog: https://github.com/nextcloud/server/compare/v28.0.10...v28.0.11rc1