This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryBroad release touches 23.0.5 – 2026-05-28, deps, deps-dev, and call.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds fuzzy conversation search capability. Adds fuzzy conversation search capability. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Feature | Medium |
Improves UI indication of anonymous polls. Improves UI indication of anonymous polls. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Dependency | Low |
Updates dependency @nextcloud/vue from 9.7.0 to 9.8.0. Updates dependency @nextcloud/vue from 9.7.0 to 9.8.0. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Fixes rendering of other users' video during screenshare. Fixes rendering of other users' video during screenshare. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Fixes reaction notification name for federated users. Fixes reaction notification name for federated users. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Allows admin access to settings in limited Talk configuration. Allows admin access to settings in limited Talk configuration. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Refreshes conversation list on disinvite events. Refreshes conversation list on disinvite events. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Fixes email guest name caching in chat. Fixes email guest name caching in chat. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Respects participant permissions for hardware access in calls. Respects participant permissions for hardware access in calls. Source: llm_adapter@2026-05-28 Confidence: high |
— |
| Bugfix | Medium |
Authenticates internal SIP Bridge requests properly. Authenticates internal SIP Bridge requests properly. Source: llm_adapter@2026-05-28 Confidence: low |
— |
Full changelog
23.0.5 – 2026-05-28
Changed
- Fuzzy conversation search
#17897 - Better indication of anonymous polls in UI
#17927 - Update dependencies
- Update translations
Fixed
- fix(call): Render other user's video while screensharing
#18064 - fix(notifications): Fix name in reaction notification for federated users
#18067 - fix(admin): Allow accessing admin settings in limited Talk configuration environment
#18126 - fix(sipbridge): Authenticate internal request from SIP Bridge
#18118 - fix(conversation): Refresh list on disinvite event
#18131 - fix(chat): Fix email guests name caching
#18136 - fix(call): Respect participant permissions for hardware access
#17980
What's Changed
- [stable33] build(deps): Bump @mediapipe/tasks-vision from 0.10.34 to 0.10.35 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17891
- [stable33] build(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.9 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17892
- [stable33] Fuzzy conversation search by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17897
- [stable33] chore(rspack): remove warnings by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17914
- [stable33] fix(release): Fix changelog extraction without version argument by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17915
- [stable33] fix(release): Use version var without leading v by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17921
- [stable33] fix: ascyncronously load leaflet library by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17931
- [stable33] build(deps-dev): Bump vue-tsc from 3.2.7 to 3.2.8 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17947
- [stable33] build(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17962
- [stable33] build(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17963
- [stable33] build(deps-dev): Bump globals from 17.5.0 to 17.6.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17959
- [stable33] Update nextcloud/ocp dependency by @nextcloud-command in https://github.com/nextcloud/spreed/pull/17971
- [stable33] build(deps): Bump webdav from 5.9.0 to 5.10.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17958
- [stable33] build(deps): Bump @nextcloud/cdav-library from 2.2.0 to 2.5.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17954
- [stable33] build(deps): Bump @nextcloud/vue from 9.7.0 to 9.8.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17951
- [stable33] build(deps): Bump @vueuse/router from 14.2.1 to 14.3.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/17955
- [stable33] fix: Prepare backport of future PR by @nickvergessen in https://github.com/nextcloud/spreed/pull/17974
- [stable33] build(deps): Bump uuid from 13.0.0 to 13.0.2 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18006
- [stable33] build(deps-dev): Bump @vitest/coverage-v8 from 4.1.5 to 4.1.6 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18008
- [stable33] build(deps-dev): Bump sass-loader from 16.0.7 to 16.0.8 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18009
- [stable33] build(deps-dev): Bump vitest from 4.1.5 to 4.1.6 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18007
- build(deps): Bump vue from 3.5.33 to 3.5.34 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18010
- [stable33] test: Sort webdav entries before comparing by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18025
- [stable33] Update nextcloud/ocp dependency by @nextcloud-command in https://github.com/nextcloud/spreed/pull/18027
- [stable33] ci(actions): Update workflow templates from organization template repository by @nextcloud-command in https://github.com/nextcloud/spreed/pull/17765
- [stable33] fix(guest): replace 'Log in' button with a link by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18058
- [stable33] fix(PollViewer): show that the poll is anonymous by @DorraJaouad in https://github.com/nextcloud/spreed/pull/17927
- [stable33] fix(call): render other user's video while screenshare by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18064
- [stable33] fix: respect participant permissions for hardware access by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/17980
- [stable33] fix(notification): Fix name in reaction notification for federated users by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18067
- [stable33] build(deps-dev): Bump @vitejs/plugin-vue from 6.0.6 to 6.0.7 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18086
- [stable33] build(deps): Bump vue-router from 5.0.6 to 5.0.7 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18092
- [stable33] build(deps-dev): Bump vue-tsc from 3.2.8 to 3.3.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18093
- [stable33] build(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18088
- build(deps): Bump @nextcloud/cdav-library from 2.5.0 to 2.5.1 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18089
- [stable33] fix(signaling): allow SIP bridge to access getSettings without a user session by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18118
- [stable33] fix: Allow accessing some admin endpoints to admins that can not use Talk by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18126
- [stable33] fix: Refresh all conversations when deleted from one not active in by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18131
- [stable33] build(deps): Bump libphonenumber-js from 1.12.42 to 1.13.2 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18087
- [stable33] fix(chat): update cached guest names for email guests from server req… by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18136
- [stable33] build(deps-dev): Bump vitest from 4.1.6 to 4.1.7 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18163
- [stable33] build(deps): Bump libphonenumber-js from 1.13.2 to 1.13.3 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18161
- [stable33] build(deps): Bump ua-parser-js from 2.0.9 to 2.0.10 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18162
- [stable33] build(deps-dev): Bump @vitest/coverage-v8 from 4.1.6 to 4.1.7 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18159
- [stable33] build(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.1 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18154
Full Changelog: https://github.com/nextcloud/spreed/compare/v23.0.4...v23.0.5
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]