This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
ReleasePort's take
Light signalNextcloud News 28.4.0 adds feed filtering, multi-selection, and batch management. NcCheckBoxRadioSwitch component API change requires value as stringβupdate integrations before upgrade.
Why it matters: NcCheckBoxRadioSwitch requires value as string; update integrations before deploying. Feed filtering and batch management features enhance content organization.
Summary
AI summaryUpdates π¦ Dependency Updates, π Changed, and deps across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | Medium |
NcCheckBoxRadioSwitch component requires value property as string NcCheckBoxRadioSwitch component requires value property as string Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Feature | Medium |
Adds keyword-based feed filtering with deny-list capability Adds keyword-based feed filtering with deny-list capability Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Feature | Medium |
Adds accessible multi-feed selection with batch move/delete actions Adds accessible multi-feed selection with batch move/delete actions Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Feature | Medium |
Shows status indicator during move feed operation Shows status indicator during move feed operation Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Dependency | Medium |
Updates @vue/test-utils from 2.4.6 to 2.4.10 Updates @vue/test-utils from 2.4.6 to 2.4.10 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates jsdom from 29.0.2 to 29.1.1 Updates jsdom from 29.0.2 to 29.1.1 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates crate-ci/typos from 1.45.1 to 1.46.0 Updates crate-ci/typos from 1.45.1 to 1.46.0 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 Updates dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates @nextcloud/vue from 9.6.0 to 9.7.0 Updates @nextcloud/vue from 9.6.0 to 9.7.0 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates axios from 1.15.0 to 1.16.0 Updates axios from 1.15.0 to 1.16.0 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates fast-xml-builder from 1.1.5 to 1.2.0 Updates fast-xml-builder from 1.1.5 to 1.2.0 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates fast-uri from 3.0.6 to 3.1.2 Updates fast-uri from 3.0.6 to 3.1.2 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates vue from 3.5.33 to 3.5.34 Updates vue from 3.5.33 to 3.5.34 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates vite from 7.3.2 to 7.3.3 Updates vite from 7.3.2 to 7.3.3 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Dependency | Medium |
Updates @nextcloud/stylelint-config from 3.2.1 to 3.2.2 Updates @nextcloud/stylelint-config from 3.2.1 to 3.2.2 Source: llm_adapter@2026-05-21 Confidence: low |
β |
| Bugfix | Medium |
Fixes filter dialog to use Nextcloud style input fields Fixes filter dialog to use Nextcloud style input fields Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Refactor | Medium |
Updates setup-nextcloud action references to use main branch Updates setup-nextcloud action references to use main branch Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Refactor | Medium |
Improves devcontainer configuration for better developer experience Improves devcontainer configuration for better developer experience Source: llm_adapter@2026-05-21 Confidence: high |
β |
| Refactor | Medium |
Refactors favicon discovery to use favicon-io PSR-18 adapter Refactors favicon discovery to use favicon-io PSR-18 adapter Source: llm_adapter@2026-05-21 Confidence: high |
β |
Full changelog
What's Changed
π Changed
- fix: Update setup-nextcloud action references to use 'main' branch by @Grotax in https://github.com/nextcloud/news/pull/3705
- Update devcontainer to make it actually useful by @Grotax in https://github.com/nextcloud/news/pull/3707
- Refactor favicon discovery to use favicon-io with scoped PSR-18 adapter by @Grotax in https://github.com/nextcloud/news/pull/3710
- feat: Add keyword-based feed filtering (deny-list) by @erykjj in https://github.com/nextcloud/news/pull/3711
- fix: use nextcloud style input fields for the new filter dialog and add some tests by @wofferl in https://github.com/nextcloud/news/pull/3730
- Add accessible multi-feed selection with header actions and throttled batch move/delete in feed settings by @Copilot in https://github.com/nextcloud/news/pull/3728
- feat(MoveFeed): show status during move feed action by @wofferl in https://github.com/nextcloud/news/pull/3737
π Fixed
- fix: NcCheckBoxRadioSwitch requires value as string by @wofferl in https://github.com/nextcloud/news/pull/3733
π¦ Dependency Updates
- build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.8 in the vue group by @dependabot[bot] in https://github.com/nextcloud/news/pull/3706
- build(deps): Bump dangoslen/changelog-enforcer from 3.6.1 to 3.7.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3714
- build(deps): Bump crate-ci/typos from 1.45.1 to 1.45.2 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3715
- build(deps-dev): Bump jsdom from 29.0.2 to 29.1.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3716
- build(deps-dev): Bump @vue/test-utils from 2.4.8 to 2.4.9 in the vue group by @dependabot[bot] in https://github.com/nextcloud/news/pull/3717
- build(deps): Bump @nextcloud/vue from 9.6.0 to 9.7.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3718
- build(deps): Bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3724
- build(deps-dev): Bump jsdom from 29.1.0 to 29.1.1 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3723
- build(deps): Bump crate-ci/typos from 1.45.2 to 1.46.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3722
- build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 in the vue group across 1 directory by @dependabot[bot] in https://github.com/nextcloud/news/pull/3721
- build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3726
- build(deps): Bump fast-uri from 3.0.6 to 3.1.2 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3727
- build(deps): Bump vue from 3.5.33 to 3.5.34 in the vue group across 1 directory by @dependabot[bot] in https://github.com/nextcloud/news/pull/3734
- build(deps-dev): Bump vite from 7.3.2 to 7.3.3 in the vite group by @dependabot[bot] in https://github.com/nextcloud/news/pull/3735
- build(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3736
New Contributors
- @erykjj made their first contribution in https://github.com/nextcloud/news/pull/3711
Full Changelog: https://github.com/nextcloud/news/compare/28.3.0...28.4.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]