[stable28] fix(user_ldap): Catch DB Exceptions when updating group memberships by @backportbot in https://github.com/nextcloud/server/pull/47335
[stable28] fix(trashbin): Correctly set original name as displayname by @backportbot in https://github.com/nextcloud/server/pull/47037
[stable28] fix(files): Provide default file action for file entry name (on click action) by @backportbot in https://github.com/nextcloud/server/pull/46939
[stable28] fix(FileList): Update filelist or share save by @Fenn-CS in https://github.com/nextcloud/server/pull/47318
[stable28] Don't save translated predefined user status as custom status by @backportbot in https://github.com/nextcloud/server/pull/47262
[stable28] fix(setupcheck): Fix mimetype server version check in backport by @nickvergessen in https://github.com/nextcloud/server/pull/47377
[stable28] fix(theming): Make getImage() call save against missing non-SVG version by @backportbot in https://github.com/nextcloud/server/pull/47383
[stable28] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/server/pull/47019
[stable28] Fix/comment deleting with activities installed by @GretaD in https://github.com/nextcloud/server/pull/47233
[stable28] fix(caldav): limit property length by @backportbot in https://github.com/nextcloud/server/pull/47420
[stable28] fix(sharing): Pin @nextcloud/dialogs to a version that doesn't use Nextcloud 29 APIs by @nickvergessen in https://github.com/nextcloud/server/pull/47271
[stable28] fix: Trusted server icon recovery without addressbook change by @backportbot in https://github.com/nextcloud/server/pull/47427
[stable28] fix(files): Adjust import of ShareType by @susnux in https://github.com/nextcloud/server/pull/47386
[stable28] fix(mailer): Call to custom mail_template_class by @backportbot in https://github.com/nextcloud/server/pull/47476
[stable28] fix: csrf check failed on public share with password by @blizzz in https://github.com/nextcloud/server/pull/47445
[stable28] fix(flow): cannot set custom user agent by @backportbot in https://github.com/nextcloud/server/pull/47481
[stable28] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/server/pull/47472
[stable28] fix(files): Correctly validate new node name by @backportbot in https://github.com/nextcloud/server/pull/47035
[stable28] fix(userstatus): run user status automation job for start and end events by @backportbot in https://github.com/nextcloud/server/pull/47214
[stable28] fix: gracefully handle unexpected exif orientation types by @backportbot in https://github.com/nextcloud/server/pull/47531
[stable28] fix(files): fix list gap at bottom by @backportbot in https://github.com/nextcloud/server/pull/47537
[stable28] fix(provisionning_api): Remove parameters that are not set into template by @backportbot in https://github.com/nextcloud/server/pull/47572
[stable28] fix: optimise getWrongShareOwnership query by @backportbot in https://github.com/nextcloud/server/pull/47576
[stable28] fix(webauthn): Increase database column for public key id by @backportbot in https://github.com/nextcloud/server/pull/47246
[stable28] fix(caldav): allow renaming of birthday calendars by @backportbot in https://github.com/nextcloud/server/pull/47336
[stable28] fix: re-enable content-length header via htaccess by @backportbot in https://github.com/nextcloud/server/pull/47622
[stable28] fix(config): Avoid error messages for restricted opcache API by @backportbot in https://github.com/nextcloud/server/pull/47624
[stable28] fix(files): Reset drop notice on firefox by @backportbot in https://github.com/nextcloud/server/pull/47639
[stable28] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/server/pull/47669
[stable28] [LinkReferenceProvider] Better size check by @julien-nc in https://github.com/nextcloud/server/pull/47697
[stable28] [oauth2] Store hashed secret instead of encrypted by @julien-nc in https://github.com/nextcloud/server/pull/47701
[stable28] fix: Pass the mountpoint target user to storages without owner by @backportbot in https://github.com/nextcloud/server/pull/46680
[stable28] fix(settings): Fix sharing exclude groups from password requirement option not working by @provokateurin in https://github.com/nextcloud/server/pull/47714
[stable28] fix: only keep major as server version by @backportbot in https://github.com/nextcloud/server/pull/47722
[stable28] fix(dav): adjust usages of webdav.customRequest by @st3iny in https://github.com/nextcloud/server/pull/47732
[stable28] fix(files): undefined sidebar by @backportbot in https://github.com/nextcloud/server/pull/47746
[stable28] fix(appstore): Cache apps.json also on dev instances by @backportbot in https://github.com/nextcloud/server/pull/47766
[stable28] Fix status check and saving of external storages by @backportbot in https://github.com/nextcloud/server/pull/47735
[stable28] fix(files): Create non-existent parents of mountpoints by @backportbot in https://github.com/nextcloud/server/pull/47749
build(deps): bump jquery-ui-dist from 1.13.2 to 1.13.3 by @dependabot in https://github.com/nextcloud/server/pull/46483
[stable28] feat(transfer-ownership): Correctly react to encrypted files by @backportbot in https://github.com/nextcloud/server/pull/47779
[stable28] fix: Use sha256 to hash arguments of background jobs by @backportbot in https://github.com/nextcloud/server/pull/47776
28.0.10 RC1 by @blizzz in https://github.com/nextcloud/server/pull/47759

Full Changelog: https://github.com/nextcloud/server/compare/v28.0.9...v28.0.10rc1