[stable29] fix: avoid duplicate tag inserts by checking if the mapping exists already in db by @backportbot in https://github.com/nextcloud/server/pull/45995
[stable29] chore(deps): Bump deepdiver/zipstreamer to 2.0.3 by @susnux in https://github.com/nextcloud/server/pull/45897
[stable29] fix(files): Properly handle denied ownership transfers by @backportbot in https://github.com/nextcloud/server/pull/45906
[stable29] fix(userstatus): Fix user status automation in real-life scenario by @backportbot in https://github.com/nextcloud/server/pull/46096
[stable29] fix(dav): add missing database index for dav_shares by @backportbot in https://github.com/nextcloud/server/pull/46148
[stable29] fix(security): Update code signing revocation list by @nextcloud-command in https://github.com/nextcloud/server/pull/46154
[stable29] fix(caldav): When message is a reply compare the message sender not the recipient by @backportbot in https://github.com/nextcloud/server/pull/46146
[stable29] perf(session): remove useless session open by @backportbot in https://github.com/nextcloud/server/pull/46168
[stable29] fix(federation): Fix missing protocol on CloudID remote by @backportbot in https://github.com/nextcloud/server/pull/46173
[stable29] fix(CI): Fix OpenAPI github action by @nickvergessen in https://github.com/nextcloud/server/pull/46175
[stable29] fix(cron): Log excess memory usage at debug and info levels by @backportbot in https://github.com/nextcloud/server/pull/45843
[stable29] Rename openFileInfo to fileInfo by @backportbot in https://github.com/nextcloud/server/pull/45988
[stable29] Update favorites navigation list on folder renames by @backportbot in https://github.com/nextcloud/server/pull/46137
[stable29] Use guzzle for addressbook federation by @backportbot in https://github.com/nextcloud/server/pull/46117
[stable29] fix(setupchecks): skip check when disk_free_space is disabled by @backportbot in https://github.com/nextcloud/server/pull/46203
[stable29] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/server/pull/45892
[stable29] ci: Migrate Litmus and CalDAVTester from drone to GitHub by @backportbot in https://github.com/nextcloud/server/pull/45726
[stable29] fix: getMountsForFileId may return an unordered list by @backportbot in https://github.com/nextcloud/server/pull/46213
[stable29] feat(files): increase max copy-move concurrency to 5 by @backportbot in https://github.com/nextcloud/server/pull/46128
[stable29] Don't trigger action when renaming by @backportbot in https://github.com/nextcloud/server/pull/46018
[stable29] fix(files_sharing): Also set the expiration date timezone during validation by @backportbot in https://github.com/nextcloud/server/pull/46142
[stable29] docs(ShareApiController): Correct note about expiry date timezone by @backportbot in https://github.com/nextcloud/server/pull/46228
build(deps-dev): Bump cypress-split from 1.21.0 to 1.21.2 by @dependabot in https://github.com/nextcloud/server/pull/46240
build(deps-dev): Bump @cypress/webpack-preprocessor from 6.0.1 to 6.0.2 by @dependabot in https://github.com/nextcloud/server/pull/46246
[stable29] fix(preview): don't create folder structure when previews are disabled by @backportbot in https://github.com/nextcloud/server/pull/45993
[stable29] fix(security): Update CA certificate bundle by @nextcloud-command in https://github.com/nextcloud/server/pull/46264
[stable29] fix(ExternalSharing): Handle template shares from external sources by @backportbot in https://github.com/nextcloud/server/pull/46281
build(deps-dev): Bump mime from 4.0.1 to 4.0.3 by @dependabot in https://github.com/nextcloud/server/pull/46244
build(deps): Bump libphonenumber-js from 1.10.58 to 1.10.64 by @dependabot in https://github.com/nextcloud/server/pull/46242
[stable29] fix(tests): Remove output when running tests by @backportbot in https://github.com/nextcloud/server/pull/46290
[stable29] fix: Authorization header can be an empty string by @backportbot in https://github.com/nextcloud/server/pull/46212
[stable29] build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 by @dependabot in https://github.com/nextcloud/server/pull/46237
[stable29] fix(DAV): offset not applied by @backportbot in https://github.com/nextcloud/server/pull/46226
chore(deps-dev): bump tslib from 2.6.2 to 2.6.3 by @dependabot in https://github.com/nextcloud/server/pull/46331
chore(deps): bump jquery-ui-dist from 1.13.2 to 1.13.3 by @dependabot in https://github.com/nextcloud/server/pull/46330
chore(deps-dev): bump cypress from 13.7.1 to 13.7.3 by @dependabot in https://github.com/nextcloud/server/pull/46333
chore(deps-dev): bump cypress-if from 1.12.0 to 1.12.3 by @dependabot in https://github.com/nextcloud/server/pull/46332
[stable29] fix: Avoid throwing errors for teams are unavailable by @backportbot in https://github.com/nextcloud/server/pull/46163
chore(deps-dev): bump eslint-plugin-cypress from 2.15.1 to 2.15.2 by @dependabot in https://github.com/nextcloud/server/pull/46334
[stable29] chore(mp3info): apply upstream patch for invalid array access by @backportbot in https://github.com/nextcloud/server/pull/46306
[stable29] fix: csrf check failed on public share with password by @backportbot in https://github.com/nextcloud/server/pull/46039
[stable29] fix(s3): Don't wait indefinitely for S3 to return by @backportbot in https://github.com/nextcloud/server/pull/46367
[stable29] fix(files_versions): renaming file version when its not a string by @backportbot in https://github.com/nextcloud/server/pull/46001
[stable29] fix(SharingDetailsView): Prevent illegal unselection of read permissions by @backportbot in https://github.com/nextcloud/server/pull/46362
[stable29] fix(settings): make trailing slash for caldav/carddav redirects optional by @backportbot in https://github.com/nextcloud/server/pull/46093
[stable29] fix(cypress): wait for apps list fetch for better testing stability by @backportbot in https://github.com/nextcloud/server/pull/46385
[stable29] fix(carddav): limit vcard size by @backportbot in https://github.com/nextcloud/server/pull/46314
[stable29] fix(theming): Also provide default image as background by absolut URL by @susnux in https://github.com/nextcloud/server/pull/46211
[stable29] fix(files_trashbin): Make files view registering an init script by @susnux in https://github.com/nextcloud/server/pull/46054
[stable29] fix(IntegrityCheck): Ensure the check is run if no results are available by @backportbot in https://github.com/nextcloud/server/pull/46298
[stable29] fix: Update Nextcloud libraries by @susnux in https://github.com/nextcloud/server/pull/46374
[stable29] fix(caldav): limit vevent size by @backportbot in https://github.com/nextcloud/server/pull/46413
[stable29] fix(caldav): encode calendar URIs with umlauts for activities by @backportbot in https://github.com/nextcloud/server/pull/46012
[stable29] fix: Do not log an error when connecting to SFTP without a logged in user by @backportbot in https://github.com/nextcloud/server/pull/46061
[stable29] fix: also use optimized getFirstNodeyIdInPath for Folder::getFirstNodeById by @backportbot in https://github.com/nextcloud/server/pull/46035
[stable29] fix: don't use custom certificate bundle if no customer certificates are configured by @backportbot in https://github.com/nextcloud/server/pull/46069
[stable29] delete background jobs by id when cleaning up by @backportbot in https://github.com/nextcloud/server/pull/45919
[stable29] fix: allows admin to edit global credentials by @backportbot in https://github.com/nextcloud/server/pull/46091
[stable29] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root by @backportbot in https://github.com/nextcloud/server/pull/45956
[stable29] fix(workflows): Fix file systemtag cache by @backportbot in https://github.com/nextcloud/server/pull/46412
[stable29] fix(files_versions): Use NcDateTime for proper translated version dates by @backportbot in https://github.com/nextcloud/server/pull/45911
[stable29] fix(theming): Don't reset the cachebuster value when we reset theming by @backportbot in https://github.com/nextcloud/server/pull/46434
[stable29] fix(theming): Conitionally disable blur filter for performance by @backportbot in https://github.com/nextcloud/server/pull/46258
[stable29] perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP by @backportbot in https://github.com/nextcloud/server/pull/46393
[stable29] fix(FilesView): Update files view upon share creation/delete by @backportbot in https://github.com/nextcloud/server/pull/46119
[stable29] fix(Session): avoid race conditions on clustered setups by @backportbot in https://github.com/nextcloud/server/pull/46437
[stable29] fix(SharingEntryLink): Show enforced password input label by @backportbot in https://github.com/nextcloud/server/pull/46162
[stable29] feat: don't count failed CSRF as failed login attempt by @backportbot in https://github.com/nextcloud/server/pull/46443
29.0.4 RC1 by @Altahrim in https://github.com/nextcloud/server/pull/46389

Full Changelog: https://github.com/nextcloud/server/compare/v29.0.3...v29.0.4rc1