news
Dashboards & Home PagesRSS/Atom feed reader
Features
- Aggregates RSS/Atom feeds for users
- Provides a RESTful API for app developers
- Integrates via Nextcloud's integrated app store
Recent releases
View all 10 releases →
28.3.0
Security relevant
Security fixes
- Use IClientService (with SSRF protection) instead of straight Guzzle Client
Full changelog
What's Changed
🚓 Security
- Use IClientService (with SSRF protection) instead of straight Guzzle Client by @SMillerDev in https://github.com/nextcloud/news/pull/3672
🚀 Changed
- make future github release notes a bit more organized by @Grotax in https://github.com/nextcloud/news/pull/3688
- fix(starred): stop endless item requests in Starred view by @Copilot in https://github.com/nextcloud/news/pull/3694
- chore(devcontainer): devcontainer enhancements by @Grotax in https://github.com/nextcloud/news/pull/3698
📦 Dependency Updates
- build(deps): Bump crate-ci/typos from 1.45.0 to 1.45.1 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3689
- build(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3690
- build(deps-dev): Bump @types/node from 25.5.2 to 25.6.0 in the types group across 1 directory by @dependabot[bot] in https://github.com/nextcloud/news/pull/3691
- build(deps): Bump postcss from 8.5.8 to 8.5.10 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3696
- build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3699
- build(deps-dev): Bump the vite group with 2 updates by @dependabot[bot] in https://github.com/nextcloud/news/pull/3700
- build(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 by @dependabot[bot] in https://github.com/nextcloud/news/pull/3702
- build(deps): Bump the vue group with 2 updates by @dependabot[bot] in https://github.com/nextcloud/news/pull/3701
Full Changelog: https://github.com/nextcloud/news/compare/28.2.0...28.3.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
