26.0.13 RC1

[Altahrim]

• [stable26] fix: Throw instead of yielding nothing when listing local directories #43829
• [stable26] feat(share): save date and time for expiration #43831
• [stable26] only cleanup orphaned shared daily #43836
• [stable26] Collaboration, MailPlugin: Protect access to a potentially missing array component by ??. #43902
• [stable26] Improve files version listing #44006
• [stable26] Cleanup versions entities in versions:clean command #44035
• [stable26] fix(user_ldap): Early failure for empty password login attempt #44054
• [stable26] fix: Avoid clear cache with prefix #44078
• [stable26] fix(UpdateNotifications): Handle numeric user ids #44100
• [stable26] fix(security): Update CA certificate bundle #44144
• [stable26] tests(dav): Add unit test for no calendars/subscription limit #44156
• [stable26] docs(config.sample.php): Warn that updatedirectory will break updates if set to a value within the installation folder #44166
• [stable26] fix(settings): posix_getpwuid can return false which should not be accessed like an array #44180
• [stable26] Fixes for getting the filename in the FileInfo class #44199
• [stable26] fix: ensure nested mount points are handled in the correct order #44283
• [stable26] Forbid tagging readonly files #44308
• [stable26] fix(config): Make sure user keys are strings #44338
• [stable26] fix(share): use share owner to get ownership #44348
• [stable26] fix(caldav): add EXDATE and EXRULE to confidential object #44384
• [stable26] fix(workflowengine): Use correct event names to make search for groups work again #44387
• [stable26] Fix npm audit activity#1601
• [stable26] Chore(deps): bump vue from 2.7.15 to 2.7.16 bruteforcesettings#564
• [stable26] circles' activity circles#1524
• chore(deps-dev): Bump axios from 1.6.7 to 1.6.8 files_pdfviewer#927
• chore(deps-dev): Bump adm-zip from 0.5.10 to 0.5.12 files_pdfviewer#928
• [stable26] Fix npm audit firstrunwizard#1135
• [stable26] fix(mail): Use parsed action label in email notification notifications#1841
• [stable26] fix(api): Ignore "parsed" link and icon urls when deleting notifications#1861
• Chore(deps-dev): Bump autoprefixer from 10.4.17 to 10.4.18 photos#2371
• [stable26] Fix npm audit photos#2390
• [stable26] Update nextcloud/ocp dependency serverinfo#549
• [stable26] fix(Tables): require at least one cell in the header text#5468

Pending PRs:

• @backportbot
  • [stable26] fix(Users/Quota setting): Prevent floating point value from getting truncated in locales other than english #42935
  • [stable26] Fix: config param 'overwritecondaddr' not working #43183
  • [stable26] dont reuse etag for folders marked explicitly unscanned #43245
  • [stable26] Add "-i" to sendmail's pipe #43790
  • [stable26] fix(sharing): Avoid (dead)locking during orphan deletion #44008
  • [stable26] fix(dav): Add occ command to fix missing caldav sync tokens #44195
• @GretaD
  • [stable26] fix(sharing): Avoid (dead)locking during orphan deletion #43484

[AndyScherzinger]

Must have PRs

• [stable26] fix: ensure nested mount points are handled in the correct order #44283
• [stable26] Forbid tagging readonly files #44308
• [stable26] fix(caldav): add EXDATE and EXRULE to confidential object #44384
• [stable26] fix(workflowengine): Use correct event names to make search for groups work again #44387