28.0.13 RC1

[skjnldsv]

• build(deps-dev): bump @types/jest from 29.5.12 to 29.5.14 #49046
• [stable28] Clear pending two factor tokens also from configuration #49096
• [stable28] fix(theming): Return default theme if the user never selected a theme #49135
• [stable28] fix(SharingEntryLink): Show default password before create if any #49148
• [stable28] fix(files_sharing): note icon color on public pages #49155
• [stable28] fix: undefined variable $response in DAV storage #49158
• [stable28] fix(files): edit locally buttons and description #49163
• chore(deps-dev): Bump @pinia/testing from 0.1.3 to 0.1.7 #49173
• [stable28] fix(files): view-in-folder enabled conditions #49178
• [stable28] fix(files): Allow downloading multiple nodes not from same base #49203
• [stable28] fix: log a warning when we can't build a background job #49205
• [stable28] chore(github): Update groupware code owners #49212
• [stable28] fix(files_external): cast storage id int #49220
• [stable28] Fix remaining readdir() calls in loops with undesirable false evaluation potential #49227
• [stable28] feat: Add X-NC-Disable-Scheduling property to allow skipping scheduling #49253
• [stable28] chore(deps): Add SabreDav Patch for iTip Broker #49267
• [stable28] fix: override iTip Broker to fix several issues #49269
• build(deps): bump dompurify from 3.1.6 to 3.1.7 #49318
• [stable28] fix(files): improve delete display name when trashbin is disabled #49367
• [stable28] feat(settings): add big file upload setup checks #49381
• [stable28] fix(job): Check if carddata is resource and read it to string #49388
• [stable28] fix(storage): Try to delete existing target #49411
• [stable28] fix: (CalDav) Delete invitation link when deleting Calendars or Events #49427
• chore(deps-dev): bump @nextcloud/cypress from 1.0.0-beta.9 to 1.0.0-beta.10 #49446
• chore(deps-dev): bump jsdoc from 4.0.3 to 4.0.4 #49449
• [stable28] fix(BackgroundJobs): Adjust intervals and time sensitivities #49463
• [stable28] fix(OCMDiscoveryService): Also cache error results during discovery #49470
• [stable28] fix: invalid usage of IQueryBuilder::createNamedParameter() #49478
• [stable28] fix(security): Update CA certificate bundle #49510
• [stable28] Add SabreDav Patch for iTip Broker 3rdparty#1985
• Revert "[stable28] fix/remote activity constructor" activity#1842
• [stable28] remove caching for shares circles#1752
• [stable28] fix(notification): Make sure the action URL is an absolute URL circles#1760
• [stable28] fix(CoreQueryBuilder): Use correct member entry for circle as initiator circles#1763
• [stable28] fix(FederatedUserService): Increase cache TTL for singleId to one week circles#1772
• [stable28] bypass user condition on cli circles#1780
• [stable28] fix(SetupCheck): remove debug(?) output logreader#1416
• Chore(deps-dev): Bump @nextcloud/cypress from 1.0.0-beta.9 to 1.0.0-beta.10 photos#2710
• [stable28] fix: use NcCheckboxRadioSwitch in settings recommendations#818
• [stable28] fix: add missing description to command recommendations#822
• [stable28] fix: Proper layout for split view viewer#2570

Pending PRs:

• @backportbot
  • [stable28] DNS: do not query CNAME if A succeeded already #49279
  • [stable28] Bug/48678/restore dav error response #49482
  • [stable28] Check link protocol text#6491
  • [stable28] Fix(plaintext): multiple linebreaks at end text#6561