diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a6c4524b..306c11d6c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,8 +1,7 @@
 # Table of Contents
 
-* [Changelog for unreleased](#changelog-for-unreleased-unreleased)
+* [Changelog for 5.0.0-rc.5](#changelog-for-500-rc5-2024-02-26)
 * [Changelog for 4.0.6](#changelog-for-406-2024-02-07)
-* [Changelog for 5.0.0-rc.4](#changelog-for-500-rc4-2024-02-07)
 * [Changelog for 4.0.5](#changelog-for-405-2023-12-21)
 * [Changelog for 4.0.4](#changelog-for-404-2023-12-07)
 * [Changelog for 4.0.3](#changelog-for-403-2023-11-24)
@@ -12,8 +11,8 @@
 * [Changelog for 3.0.0](#changelog-for-300-2023-06-06)
 * [Changelog for 2.0.0](#changelog-for-200-2022-11-30)
 * [Changelog for 1.20.0](#changelog-for-1200-2022-04-13)
-* [Changelog for 1.19.1](#changelog-for-1191-2022-03-29)
 * [Changelog for 1.19.0](#changelog-for-1190-2022-03-29)
+* [Changelog for 1.19.1](#changelog-for-1191-2022-03-29)
 * [Changelog for 1.18.0](#changelog-for-1180-2022-03-03)
 * [Changelog for 1.17.0](#changelog-for-1170-2022-02-16)
 * [Changelog for 1.16.0](#changelog-for-1160-2021-12-10)
@@ -34,555 +33,11 @@
 * [Changelog for 1.1.0](#changelog-for-110-2021-01-22)
 * [Changelog for 1.0.0](#changelog-for-100-2020-12-17)
 
-# Changelog for [unreleased] (UNRELEASED)
+# Changelog for [5.0.0-rc.5] (2024-02-26)
 
-The following sections list the changes for unreleased.
+The following sections list the changes for 5.0.0-rc.5.
 
-[unreleased]: https://github.com/owncloud/ocis/compare/v4.0.6...master
-
-## Summary
-
-* Bugfix - Fix search response: [#7815](https://github.com/owncloud/ocis/pull/7815)
-* Bugfix - Fix Content-Disposition header for downloads: [#8381](https://github.com/owncloud/ocis/pull/8381)
-* Bugfix - Fix an error when move: [#8396](https://github.com/owncloud/ocis/pull/8396)
-* Bugfix - Fix extended env parser: [#8409](https://github.com/owncloud/ocis/pull/8409)
-* Bugfix - Graph/drives/permission Expiration date update: [#8413](https://github.com/owncloud/ocis/pull/8413)
-* Bugfix - Fix search error message: [#8444](https://github.com/owncloud/ocis/pull/8444)
-* Bugfix - Graph/sharedWithMe align IDs with webdav response: [#8467](https://github.com/owncloud/ocis/pull/8467)
-* Bugfix - Bump reva to pull in changes to fix recursive trashcan purge: [#8505](https://github.com/owncloud/ocis/pull/8505)
-* Change - Deprecate sharing cs3 backends: [#8478](https://github.com/owncloud/ocis/pull/8478)
-* Enhancement - Improve ocis single binary start: [#8320](https://github.com/owncloud/ocis/pull/8320)
-* Enhancement - Use environment variables in yaml config files: [#8339](https://github.com/owncloud/ocis/pull/8339)
-* Enhancement - Bump reva: [#8340](https://github.com/owncloud/ocis/pull/8340)
-* Enhancement - Allow sending multiple user ids in one sse event: [#8379](https://github.com/owncloud/ocis/pull/8379)
-* Enhancement - Allow to skip service listing: [#8408](https://github.com/owncloud/ocis/pull/8408)
-* Enhancement - Add a make step to validate the env var annotations: [#8436](https://github.com/owncloud/ocis/pull/8436)
-* Enhancement - Update web to v8.0.0-rc.5: [#8491](https://github.com/owncloud/ocis/pull/8491)
-* Enhancement - Bump reva: [#8502](https://github.com/owncloud/ocis/pull/8502)
-* Enhancement - Update reva to 2.19.0: [#8519](https://github.com/owncloud/ocis/pull/8519)
-
-## Details
-
-* Bugfix - Fix search response: [#7815](https://github.com/owncloud/ocis/pull/7815)
-
-   We fixed the search response code from 500 to 400 when the request is invalid
-
-   https://github.com/owncloud/ocis/issues/7812
-   https://github.com/owncloud/ocis/pull/7815
-
-* Bugfix - Fix Content-Disposition header for downloads: [#8381](https://github.com/owncloud/ocis/pull/8381)
-
-   We have fixed a bug that caused downloads to fail on Chromebased browsers when
-   the filename contained special characters.
-
-   https://github.com/owncloud/ocis/issues/8361
-   https://github.com/owncloud/ocis/pull/8381
-   https://github.com/cs3org/reva/pull/4498
-
-* Bugfix - Fix an error when move: [#8396](https://github.com/owncloud/ocis/pull/8396)
-
-   We fixed a bug that caused Internal Server Error when move using destination id
-
-   https://github.com/owncloud/ocis/issues/6739
-   https://github.com/owncloud/ocis/pull/8396
-   https://github.com/cs3org/reva/pull/4503
-
-* Bugfix - Fix extended env parser: [#8409](https://github.com/owncloud/ocis/pull/8409)
-
-   The extended envvar parser would be angry if there are two `os.Getenv` in the
-   same line. We fixed this.
-
-   https://github.com/owncloud/ocis/pull/8409
-
-* Bugfix - Graph/drives/permission Expiration date update: [#8413](https://github.com/owncloud/ocis/pull/8413)
-
-   We fixed a bug in the Update sharing permission the expiration dates can't be
-   removed from link permissions.
-
-   https://github.com/owncloud/ocis/issues/8405
-   https://github.com/owncloud/ocis/pull/8413
-
-* Bugfix - Fix search error message: [#8444](https://github.com/owncloud/ocis/pull/8444)
-
-   We fixed an error message returned when the search request is invalid
-
-   https://github.com/owncloud/ocis/issues/8442
-   https://github.com/owncloud/ocis/pull/8444
-
-* Bugfix - Graph/sharedWithMe align IDs with webdav response: [#8467](https://github.com/owncloud/ocis/pull/8467)
-
-   The IDs of the driveItems returned by the 'graph/v1beta1/me/drive/sharedWithMe'
-   endpoint are now aligned with the IDs returned in the PROPFIND response of the
-   webdav service.
-
-   https://github.com/owncloud/ocis/issues/8420
-   https://github.com/owncloud/ocis/issues/8080
-   https://github.com/owncloud/ocis/pull/8467
-
-* Bugfix - Bump reva to pull in changes to fix recursive trashcan purge: [#8505](https://github.com/owncloud/ocis/pull/8505)
-
-   We have fixed a bug in the trashcan purge process that did not delete folder
-   structures recursively.
-
-   https://github.com/owncloud/ocis/issues/8473
-   https://github.com/owncloud/ocis/pull/8505
-   https://github.com/cs3org/reva/pull/4533
-
-* Change - Deprecate sharing cs3 backends: [#8478](https://github.com/owncloud/ocis/pull/8478)
-
-   The `cs3` user and public sharing drivers have already been replaced by
-   `jsoncs3`. We now mark them as deprecated in preparation to kill a lot of unused
-   code in reva.
-
-   https://github.com/owncloud/ocis/pull/8478
-
-* Enhancement - Improve ocis single binary start: [#8320](https://github.com/owncloud/ocis/pull/8320)
-
-   Removes waiting times when starting the single binary. Improves ocis single
-   binary boot time from 8s to 2.5s
-
-   https://github.com/owncloud/ocis/pull/8320
-
-* Enhancement - Use environment variables in yaml config files: [#8339](https://github.com/owncloud/ocis/pull/8339)
-
-   We added the ability to use environment variables in yaml config files. This
-   allows to use environment variables in the config files of the ocis services
-   which will be replaced by the actual value of the environment variable at
-   runtime.
-
-   Example:
-
-   ```
-   web:
-     http:
-       addr: ${SOME_HTTP_ADDR}
-   ```
-
-   This makes it possible to use the same config file for different environments
-   without the need to change the config file itself. This is especially useful
-   when using docker-compose to run the ocis services. It is a common pattern to
-   create an .env file which contains the environment variables for the
-   docker-compose file. Now you can use the same .env file to configure the ocis
-   services.
-
-   https://github.com/owncloud/ocis/pull/8339
-
-* Enhancement - Bump reva: [#8340](https://github.com/owncloud/ocis/pull/8340)
-
-   We have bumped reve to pull in the changes needed for automatically increment
-   filenames on upload collisions in secret filedrops.
-
-   https://github.com/owncloud/ocis/issues/8291
-   https://github.com/owncloud/ocis/pull/8340
-
-* Enhancement - Allow sending multiple user ids in one sse event: [#8379](https://github.com/owncloud/ocis/pull/8379)
-
-   Sending multiple user ids in one sse event is now possible which reduces the
-   number of sent events.
-
-   https://github.com/owncloud/ocis/pull/8379
-   https://github.com/cs3org/reva/pull/4501
-
-* Enhancement - Allow to skip service listing: [#8408](https://github.com/owncloud/ocis/pull/8408)
-
-   The ocis version cmd listed all services by default. This is not always
-   intended, so we allow to skip the listing of the services by using the
-   --skip-services flag.
-
-   https://github.com/owncloud/ocis/issues/8070
-   https://github.com/owncloud/ocis/pull/8408
-
-* Enhancement - Add a make step to validate the env var annotations: [#8436](https://github.com/owncloud/ocis/pull/8436)
-
-   We have added a make step `make validate-env-var-annotations` to validate the
-   env var annotations in to the environment variables.
-
-   https://github.com/owncloud/ocis/issues/8258
-   https://github.com/owncloud/ocis/pull/8436
-
-* Enhancement - Update web to v8.0.0-rc.5: [#8491](https://github.com/owncloud/ocis/pull/8491)
-
-   Tags: web
-
-   We updated ownCloud Web to v8.0.0-rc.5. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#10473](https://github.com/owncloud/web/issues/10473): Public link
-   file download
-
-   We updated ownCloud Web to v8.0.0-rc.4. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#10489](https://github.com/owncloud/web/pull/10489): Wrong share
-   permissions when resharing off
-
-   We updated ownCloud Web to v8.0.0-rc.3. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#10318](https://github.com/owncloud/web/pull/10318): Scrollable
-   account page * Bugfix
-   [owncloud/web#10321](https://github.com/owncloud/web/pull/10321): Private link
-   error messages * Bugfix
-   [owncloud/web#10347](https://github.com/owncloud/web/pull/10347): Readonly user
-   attributes have no effect on group memberships * Bugfix
-   [owncloud/web#10424](https://github.com/owncloud/web/pull/10424): Restore space
-   * Enhancement [owncloud/web#10356](https://github.com/owncloud/web/pull/10356):
-   Preview app add reset button for images
-
-   We updated ownCloud Web to v8.0.0-rc.2. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#10176](https://github.com/owncloud/web/pull/10176): Turned off
-   file extensions not always respected * Bugfix
-   [owncloud/web#10232](https://github.com/owncloud/web/pull/10232): Skip searchbar
-   preview fetch on reload
-
-   We updated ownCloud Web to v8.0.0-rc.1. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Enhancement
-   [owncloud/web#10224](https://github.com/owncloud/web/issues/10224): Harmonize
-   AppSwitcher icon colors * Bugfix
-   [owncloud/web#10230](https://github.com/owncloud/web/issues/10230): Configurable
-   concurrent requests * Bugfix
-   [owncloud/web#10158](https://github.com/owncloud/web/issues/10158): GDPR export
-   polling * Bugfix
-   [owncloud/web#10220](https://github.com/owncloud/web/issues/10220): Loading
-   indicator during conflict dialog * Bugfix
-   [owncloud/web#10156](https://github.com/owncloud/web/issues/10156): Uploading
-   the same files parallel * Bugfix
-   [owncloud/web#10179](https://github.com/owncloud/web/issues/10179): Space
-   navigate to trash missing * Bugfix
-   [owncloud/web#10118](https://github.com/owncloud/web/issues/10118): Tilesview
-   has whitespace * Bugfix
-   [owncloud/web#10182](https://github.com/owncloud/web/issues/10182): Make
-   versions panel readonly in viewers and editors
-
-   We updated ownCloud Web to v8.0.0-beta.2. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#10010](https://github.com/owncloud/web/issues/10010): Displaying
-   full video in their dimensions * Bugfix
-   [owncloud/web#10149](https://github.com/owncloud/web/pull/10149): Spaces files
-   list previews cropped * Bugfix
-   [owncloud/web#10149](https://github.com/owncloud/web/pull/10149): Spaces
-   overview tile previews zoomed * Bugfix
-   [owncloud/web#10154](https://github.com/owncloud/web/pull/10154): Resolving
-   links without drive alias
-
-   We updated ownCloud Web to v8.0.0-beta.1. Please refer to the changelog (linked)
-   for details on the web release.
-
-   ## Summary * Change
-   [owncloud/web#9698](https://github.com/owncloud/web/pull/9698): Theme handling *
-   Enhancement [owncloud/web#10111](https://github.com/owncloud/web/pull/10111):
-   Registering right sidebar panels as extension * Enhancement
-   [owncloud/web#10111](https://github.com/owncloud/web/pull/10111): File sidebar
-   in viewer and editor apps
-
-   We updated ownCloud Web to v8.0.0-alpha.13. Please refer to the changelog
-   (linked) for details on the web release.
-
-   ## Summary * Enhancement
-   [owncloud/web#10104](https://github.com/owncloud/web/pull/10104): Create link
-   modal
-
-   We updated ownCloud Web to v8.0.0-alpha.12. Please refer to the changelog
-   (linked) for details on the web release.
-
-   ## Summary * Bugfix
-   [owncloud/web#9257](https://github.com/owncloud/web/issues/9257): Filter out
-   shares without display name * Bugfix
-   [owncloud/web#9483](https://github.com/owncloud/web/issues/9483): PDF loading
-   Safari * Bugfix [owncloud/web#9513](https://github.com/owncloud/web/pull/9513):
-   Set or remove expiration date on group share not possible * Bugfix
-   [owncloud/web#9529](https://github.com/owncloud/web/pull/9529): Shared with
-   action menu label alignment * Bugfix
-   [owncloud/web#9587](https://github.com/owncloud/web/pull/9587): Internal public
-   link resolving * Bugfix
-   [owncloud/web#9593](https://github.com/owncloud/web/issues/9593): Audio- &
-   video-loading on Shared with me page * Bugfix
-   [owncloud/web#9649](https://github.com/owncloud/web/pull/9649): Add project
-   space filter * Bugfix
-   [owncloud/web#9663](https://github.com/owncloud/web/pull/9663): Respect the
-   open-in-new-tab-config for external apps * Bugfix
-   [owncloud/web#9670](https://github.com/owncloud/web/pull/9670): Tiles view
-   accessibility * Bugfix
-   [owncloud/web#9694](https://github.com/owncloud/web/issues/9694): Special
-   characters in username * Bugfix
-   [owncloud/web#9788](https://github.com/owncloud/web/issues/9788): Create .space
-   folder if it does not exist * Bugfix
-   [owncloud/web#9799](https://github.com/owncloud/web/issues/9799): Link resolving
-   into default app * Bugfix
-   [owncloud/web#9832](https://github.com/owncloud/web/pull/9832): Copy quicklinks
-   for webkit navigator * Bugfix
-   [owncloud/web#9843](https://github.com/owncloud/web/pull/9843): Fix display path
-   on resources * Bugfix
-   [owncloud/web#9844](https://github.com/owncloud/web/pull/9844): Upload space
-   image * Bugfix [owncloud/web#9861](https://github.com/owncloud/web/pull/9861):
-   Duplicated file search request * Bugfix
-   [owncloud/web#9873](https://github.com/owncloud/web/pull/9873): Tags are no
-   longer editable for a locked file * Bugfix
-   [owncloud/web#9881](https://github.com/owncloud/web/pull/9881): Prevent
-   rendering of old/wrong set of resources in search list * Bugfix
-   [owncloud/web#9915](https://github.com/owncloud/web/pull/9915): Keep both
-   folders conflict in same-named folders * Bugfix
-   [owncloud/web#9931](https://github.com/owncloud/web/pull/9931): Enabling "invite
-   people" for password-protected folder/file * Bugfix
-   [owncloud/web#10031](https://github.com/owncloud/web/issues/10031): Icon
-   extension mapping * Bugfix
-   [owncloud/web#10065](https://github.com/owncloud/web/pull/10065): Logout page
-   after token expiry * Bugfix
-   [owncloud/web#10083](https://github.com/owncloud/web/pull/10083): Disable
-   expiration date for alias link (internal) * Bugfix
-   [owncloud/web#10092](https://github.com/owncloud/web/pull/10092): Allow empty
-   search query in "in-here" search * Bugfix
-   [owncloud/web#10096](https://github.com/owncloud/web/pull/10096): Remove
-   password buttons on input if disabled * Change
-   [owncloud/web#7338](https://github.com/owncloud/web/issues/7338): Remove
-   deprecated code * Enhancement
-   [owncloud/web#7317](https://github.com/owncloud/ocis/pull/7317): Make login url
-   configurable * Enhancement
-   [owncloud/web#7497](https://github.com/owncloud/ocis/issues/7497): Permission
-   checks for shares and favorites * Enhancement
-   [owncloud/web#7600](https://github.com/owncloud/web/issues/7600): Scroll to
-   newly created folder * Enhancement
-   [owncloud/web#9302](https://github.com/owncloud/web/issues/9302): Application
-   unification * Enhancement
-   [owncloud/web#9423](https://github.com/owncloud/web/pull/9423): Show local
-   loading spinner in sharing button * Enhancement
-   [owncloud/web#9441](https://github.com/owncloud/web/pull/9441): File versions
-   tooltip with absolute date * Enhancement
-   [owncloud/web#9441](https://github.com/owncloud/web/pull/9441): Disabling
-   extensions * Enhancement
-   [owncloud/web#9451](https://github.com/owncloud/web/pull/9451): Add SSE to get
-   notifications instantly * Enhancement
-   [owncloud/web#9525](https://github.com/owncloud/web/pull/9525): Tags form
-   improved * Enhancement
-   [owncloud/web#9527](https://github.com/owncloud/web/pull/9527): Don't display
-   confirmation dialog on file deletion * Enhancement
-   [owncloud/web#9531](https://github.com/owncloud/web/issues/9531): Personal
-   shares can be shown and hidden * Enhancement
-   [owncloud/web#9552](https://github.com/owncloud/web/pull/9552): Upload
-   preparation time * Enhancement
-   [owncloud/web#9561](https://github.com/owncloud/web/pull/9561): Indicate
-   processing state * Enhancement
-   [owncloud/web#9566](https://github.com/owncloud/web/pull/9566): Display locking
-   information * Enhancement
-   [owncloud/web#9584](https://github.com/owncloud/web/pull/9584): Moving share's
-   "set expiration date" function * Enhancement
-   [owncloud/web#9625](https://github.com/owncloud/web/pull/9625): Add keyboard
-   navigation to spaces overview * Enhancement
-   [owncloud/web#9627](https://github.com/owncloud/web/pull/9627): Add batch
-   actions to spaces * Enhancement
-   [owncloud/web#9653](https://github.com/owncloud/web/pull/9653): Keyword Query
-   Language (KQL) search syntax * Enhancement
-   [owncloud/web#9671](https://github.com/owncloud/web/pull/9671): OcModal set
-   buttons to same width * Enhancement
-   [owncloud/web#9682](https://github.com/owncloud/web/pull/9682): Add password
-   policy compatibility * Enhancement
-   [owncloud/web#9691](https://github.com/owncloud/web/pull/9691): Password
-   generator for public links * Enhancement
-   [owncloud/web#9696](https://github.com/owncloud/web/pull/9696): Added app banner
-   for mobile devices * Enhancement
-   [owncloud/web#9706](https://github.com/owncloud/web/pull/9706): Unify sharing
-   expiration date menu items * Enhancement
-   [owncloud/web#9727](https://github.com/owncloud/web/pull/9727): Show error if
-   password is on a banned password list * Enhancement
-   [owncloud/web#9771](https://github.com/owncloud/web/pull/9771): Handle
-   postprocessing state via Server Sent Events * Enhancement
-   [owncloud/web#9806](https://github.com/owncloud/web/pull/9806): Preview image
-   presentation * Enhancement
-   [owncloud/web#9809](https://github.com/owncloud/web/pull/9809): Add editors to
-   the application menu * Enhancement
-   [owncloud/web#9814](https://github.com/owncloud/web/pull/9814): Registering nav
-   items as extension * Enhancement
-   [owncloud/web#9815](https://github.com/owncloud/web/pull/9815): Add new portal
-   into runtime to include footer * Enhancement
-   [owncloud/web#9818](https://github.com/owncloud/web/pull/9818): Add `mode`
-   config option * Enhancement
-   [owncloud/web#9831](https://github.com/owncloud/web/pull/9831): Last modified
-   filter chips * Enhancement
-   [owncloud/web#9841](https://github.com/owncloud/web/pull/9841): Add embed mode
-   actions * Enhancement
-   [owncloud/web#9847](https://github.com/owncloud/web/issues/9847): Provide vendor
-   neutral file icons * Enhancement
-   [owncloud/web#9853](https://github.com/owncloud/web/pull/9853): Show only create
-   folder button in embed mode * Enhancement
-   [owncloud/web#9854](https://github.com/owncloud/web/pull/9854): Search query
-   term linking * Enhancement
-   [owncloud/web#9857](https://github.com/owncloud/web/pull/9857): Add permission
-   to delete link passwords when password is enforced * Enhancement
-   [owncloud/web#9858](https://github.com/owncloud/web/pull/9858): Remove settings
-   icon from searchbar * Enhancement
-   [owncloud/web#9863](https://github.com/owncloud/web/pull/9863): Location picker
-   in embed mode * Enhancement
-   [owncloud/web#9864](https://github.com/owncloud/web/pull/9864): Search tags
-   filter chips style aligned * Enhancement
-   [owncloud/web#9884](https://github.com/owncloud/web/pull/9884): Enable dark
-   theme on importer * Enhancement
-   [owncloud/web#9890](https://github.com/owncloud/web/pull/9890): Create shortcuts
-   * Enhancement [owncloud/web#9905](https://github.com/owncloud/web/pull/9905):
-   Manage tags in details panel * Enhancement
-   [owncloud/web#9906](https://github.com/owncloud/web/pull/9906): Reorganize "New"
-   menu * Enhancement
-   [owncloud/web#9912](https://github.com/owncloud/web/pull/9912): Add media type
-   filter chip * Enhancement
-   [owncloud/web#9940](https://github.com/owncloud/web/pull/9940): Display error
-   message for upload to locked folder * Enhancement
-   [owncloud/web#9966](https://github.com/owncloud/web/issues/9966): Support more
-   audio formats with correct icon * Enhancement
-   [owncloud/web#10007](https://github.com/owncloud/web/issues/10007): Additional
-   languages * Enhancement
-   [owncloud/web#10013](https://github.com/owncloud/web/issues/10013): Shared by
-   filter * Enhancement
-   [owncloud/web#10014](https://github.com/owncloud/web/issues/10014): Share search
-   filter * Enhancement
-   [owncloud/web#10024](https://github.com/owncloud/web/pull/10024): Duplicate
-   space * Enhancement
-   [owncloud/web#10037](https://github.com/owncloud/web/pull/10037): Default link
-   permission * Enhancement
-   [owncloud/web#10047](https://github.com/owncloud/web/pull/10047): Add explaining
-   contextual helper to spaces overview * Enhancement
-   [owncloud/web#10057](https://github.com/owncloud/web/pull/10057): Folder tree
-   creation during upload * Enhancement
-   [owncloud/web#10062](https://github.com/owncloud/web/pull/10062): Show webdav
-   information in details view * Enhancement
-   [owncloud/web#10072](https://github.com/owncloud/web/issues/10072): Add
-   authentication delegation in the Embed mode * Enhancement
-   [owncloud/web#10099](https://github.com/owncloud/web/pull/10099): Support
-   mandatory filter while listing users * Enhancement
-   [owncloud/web#10102](https://github.com/owncloud/web/pull/10102): Registering
-   quick actions as extension
-
-   https://github.com/owncloud/ocis/pull/8491
-   https://github.com/owncloud/ocis/pull/8468
-   https://github.com/owncloud/ocis/pull/8342
-   https://github.com/owncloud/ocis/pull/8154
-   https://github.com/owncloud/ocis/pull/8154
-   https://github.com/owncloud/ocis/pull/8055
-   https://github.com/owncloud/ocis/pull/7930
-   https://github.com/owncloud/ocis/pull/7952
-   https://github.com/owncloud/ocis/pull/7918
-   https://github.com/owncloud/ocis/pull/7883
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.5
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.4
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.3
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.2
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.2
-   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.1
-   https://github.com/owncloud/web/releases/tag/v8.0.0-beta.1
-   https://github.com/owncloud/web/releases/tag/v8.0.0-beta.2
-   https://github.com/owncloud/web/releases/tag/v8.0.0-alpha.13
-   https://github.com/owncloud/web/releases/tag/v8.0.0-alpha.12
-
-* Enhancement - Bump reva: [#8502](https://github.com/owncloud/ocis/pull/8502)
-
-   We have bumped reva to drop the unnecessary grants exists check when creating
-   shares.
-
-   https://github.com/owncloud/ocis/pull/8502
-
-* Enhancement - Update reva to 2.19.0: [#8519](https://github.com/owncloud/ocis/pull/8519)
-
-   We update reva to the version 2.19.0
-
-  *   Bugfix [cs3org/reva#4464](https://github.com/cs3org/reva/pull/4464): Don't check lock grants
-  *   Bugfix [cs3org/reva#4516](https://github.com/cs3org/reva/pull/4516): The sharemanager can now reject grants with resharing permissions
-  *   Bugfix [cs3org/reva#4512](https://github.com/cs3org/reva/pull/4512): Bump dependencies
-  *   Bugfix [cs3org/reva#4481](https://github.com/cs3org/reva/pull/4481): Distinguish failure and node metadata reversal
-  *   Bugfix [cs3org/reva#4456](https://github.com/cs3org/reva/pull/4456): Do not lose revisions when restoring the first revision
-  *   Bugfix [cs3org/reva#4472](https://github.com/cs3org/reva/pull/4472): Fix concurrent access to a map
-  *   Bugfix [cs3org/reva#4457](https://github.com/cs3org/reva/pull/4457): Fix concurrent map access in sharecache
-  *   Bugfix [cs3org/reva#4498](https://github.com/cs3org/reva/pull/4498): Fix Content-Disposition header in dav
-  *   Bugfix [cs3org/reva#4461](https://github.com/cs3org/reva/pull/4461): CORS handling for WebDAV requests fixed
-  *   Bugfix [cs3org/reva#4462](https://github.com/cs3org/reva/pull/4462): Prevent setting container specific permissions on files
-  *   Bugfix [cs3org/reva#4479](https://github.com/cs3org/reva/pull/4479): Fix creating documents in the app provider
-  *   Bugfix [cs3org/reva#4474](https://github.com/cs3org/reva/pull/4474): Make /dav/meta consistent
-  *   Bugfix [cs3org/reva#4446](https://github.com/cs3org/reva/pull/4446): Disallow to delete a file during the processing
-  *   Bugfix [cs3org/reva#4517](https://github.com/cs3org/reva/pull/4517): Fix duplicated items in the sharejail root
-  *   Bugfix [cs3org/reva#4473](https://github.com/cs3org/reva/pull/4473): Decomposedfs now correctly lists sessions
-  *   Bugfix [cs3org/reva#4528](https://github.com/cs3org/reva/pull/4528): Respect IfNotExist option when uploading in cs3 metadata storage
-  *   Bugfix [cs3org/reva#4503](https://github.com/cs3org/reva/pull/4503): Fix an error when move
-  *   Bugfix [cs3org/reva#4466](https://github.com/cs3org/reva/pull/4466): Fix natsjskv store
-  *   Bugfix [cs3org/reva#4533](https://github.com/cs3org/reva/pull/4533): Fix recursive trashcan purge
-  *   Bugfix [cs3org/reva#4492](https://github.com/cs3org/reva/pull/4492): Fix the resource name
-  *   Bugfix [cs3org/reva#4463](https://github.com/cs3org/reva/pull/4463): Fix the resource name
-  *   Bugfix [cs3org/reva#4448](https://github.com/cs3org/reva/pull/4448): Fix truncating existing files
-  *   Bugfix [cs3org/reva#4434](https://github.com/cs3org/reva/pull/4434): Fix the upload postprocessing
-  *   Bugfix [cs3org/reva#4469](https://github.com/cs3org/reva/pull/4469): Handle interrupted uploads
-  *   Bugfix [cs3org/reva#4532](https://github.com/cs3org/reva/pull/4532): Jsoncs3 cache fixes
-  *   Bugfix [cs3org/reva#4449](https://github.com/cs3org/reva/pull/4449): Keep failed processing status
-  *   Bugfix [cs3org/reva#4529](https://github.com/cs3org/reva/pull/4529): We aligned some OCS return codes with oc10
-  *   Bugfix [cs3org/reva#4507](https://github.com/cs3org/reva/pull/4507): Make tusd CORS headers configurable
-  *   Bugfix [cs3org/reva#4452](https://github.com/cs3org/reva/pull/4452): More efficient share jail
-  *   Bugfix [cs3org/reva#4476](https://github.com/cs3org/reva/pull/4476): No need to unmark postprocessing when it was not started
-  *   Bugfix [cs3org/reva#4454](https://github.com/cs3org/reva/pull/4454): Skip unnecessary share retrieval
-  *   Bugfix [cs3org/reva#4527](https://github.com/cs3org/reva/pull/4527): Unify datagateway method handling
-  *   Bugfix [cs3org/reva#4530](https://github.com/cs3org/reva/pull/4530): Drop unnecessary grant exists check
-  *   Bugfix [cs3org/reva#4475](https://github.com/cs3org/reva/pull/4475): Upload session specific processing flag
-  *   Enhancement [cs3org/reva#4501](https://github.com/cs3org/reva/pull/4501): Allow sending multiple user ids in one sse event
-  *   Enhancement [cs3org/reva#4485](https://github.com/cs3org/reva/pull/4485): Modify the concurrency default
-  *   Enhancement [cs3org/reva#4526](https://github.com/cs3org/reva/pull/4526): Configurable s3 put options
-  *   Enhancement [cs3org/reva#4453](https://github.com/cs3org/reva/pull/4453): Disable the password policy
-  *   Enhancement [cs3org/reva#4477](https://github.com/cs3org/reva/pull/4477): Extend ResumePostprocessing event
-  *   Enhancement [cs3org/reva#4491](https://github.com/cs3org/reva/pull/4491): Add filename incrementor for secret filedrops
-  *   Enhancement [cs3org/reva#4490](https://github.com/cs3org/reva/pull/4490): Lazy initialize public share manager
-  *   Enhancement [cs3org/reva#4494](https://github.com/cs3org/reva/pull/4494): Start implementation of a plain posix storage driver
-  *   Enhancement [cs3org/reva#4502](https://github.com/cs3org/reva/pull/4502): Add spaceindex.AddAll()
-
-   https://github.com/owncloud/ocis/pull/8519
-   https://github.com/owncloud/ocis/pull/8502
-   https://github.com/owncloud/ocis/pull/8340
-   https://github.com/owncloud/ocis/pull/8381
-
-# Changelog for [4.0.6] (2024-02-07)
-
-The following sections list the changes for 4.0.6.
-
-[4.0.6]: https://github.com/owncloud/ocis/compare/v5.0.0-rc.4...v4.0.6
-
-## Summary
-
-* Bugfix - Fix RED metrics on the metrics endpoint: [#7994](https://github.com/owncloud/ocis/pull/7994)
-* Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
-
-## Details
-
-* Bugfix - Fix RED metrics on the metrics endpoint: [#7994](https://github.com/owncloud/ocis/pull/7994)
-
-   We connected some metrics to the metrics endpoint to support the RED method for
-   monitoring microservices.
-
-   - Request Rate: The number of requests per second. The total count of requests
-   is available under `ocis_proxy_requests_total`. - Error Rate: The number of
-   failed requests per second. The total count of failed requests is available
-   under `ocis_proxy_errors_total`. - Duration: The amount of time each request
-   takes. The duration of all requests is available under
-   `ocis_proxy_request_duration_seconds`. This is a histogram metric, so it also
-   provides information about the distribution of request durations.
-
-   The metrics are available under the following paths: `PROXY_DEBUG_ADDR/metrics`
-   in a prometheus compatible format and maybe secured by `PROXY_DEBUG_TOKEN`.
-
-   https://github.com/owncloud/ocis/pull/7994
-
-* Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
-
-   Signed urls now expire properly
-
-   https://github.com/owncloud/ocis/pull/8385
-
-# Changelog for [5.0.0-rc.4] (2024-02-07)
-
-The following sections list the changes for 5.0.0-rc.4.
-
-[5.0.0-rc.4]: https://github.com/owncloud/ocis/compare/v4.0.5...v5.0.0-rc.4
+[5.0.0-rc.5]: https://github.com/owncloud/ocis/compare/v4.0.6...v5.0.0-rc.5
 
 ## Summary
 
@@ -609,6 +64,7 @@ The following sections list the changes for 5.0.0-rc.4.
 * Bugfix - Fix the tgz mime type: [#7772](https://github.com/owncloud/ocis/pull/7772)
 * Bugfix - Fix natsjs cache: [#7790](https://github.com/owncloud/ocis/pull/7790)
 * Bugfix - Fix search service start: [#7795](https://github.com/owncloud/ocis/pull/7795)
+* Bugfix - Fix search response: [#7815](https://github.com/owncloud/ocis/pull/7815)
 * Bugfix - The race conditions in tests: [#7847](https://github.com/owncloud/ocis/pull/7847)
 * Bugfix - Do not purge expired upload sessions that are still postprocessing: [#7859](https://github.com/owncloud/ocis/pull/7859)
 * Bugfix - Fix the public link update: [#7862](https://github.com/owncloud/ocis/pull/7862)
@@ -641,12 +97,20 @@ The following sections list the changes for 5.0.0-rc.4.
 * Bugfix - Fix nats registry: [#8281](https://github.com/owncloud/ocis/pull/8281)
 * Bugfix - Remove invalid environment variables: [#8303](https://github.com/owncloud/ocis/pull/8303)
 * Bugfix - Fix concurrent shares config: [#8317](https://github.com/owncloud/ocis/pull/8317)
+* Bugfix - Fix Content-Disposition header for downloads: [#8381](https://github.com/owncloud/ocis/pull/8381)
 * Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
+* Bugfix - Fix an error when move: [#8396](https://github.com/owncloud/ocis/pull/8396)
+* Bugfix - Fix extended env parser: [#8409](https://github.com/owncloud/ocis/pull/8409)
+* Bugfix - Graph/drives/permission Expiration date update: [#8413](https://github.com/owncloud/ocis/pull/8413)
+* Bugfix - Fix search error message: [#8444](https://github.com/owncloud/ocis/pull/8444)
+* Bugfix - Graph/sharedWithMe align IDs with webdav response: [#8467](https://github.com/owncloud/ocis/pull/8467)
+* Bugfix - Bump reva to pull in changes to fix recursive trashcan purge: [#8505](https://github.com/owncloud/ocis/pull/8505)
 * Bugfix - Fix last month search: [#31145](https://github.com/golang/go/issues/31145)
 * Change - Auto-Accept Shares: [#7097](https://github.com/owncloud/ocis/pull/7097)
 * Change - Change the default TUS chunk size: [#7273](https://github.com/owncloud/ocis/pull/7273)
 * Change - Remove privacyURL and imprintURL from the config: [#7938](https://github.com/owncloud/ocis/pull/7938/)
 * Change - Remove accessDeniedHelpUrl from the config: [#7970](https://github.com/owncloud/ocis/pull/7970)
+* Change - Deprecate sharing cs3 backends: [#8478](https://github.com/owncloud/ocis/pull/8478)
 * Enhancement - Add the Banned Passwords List: [#4197](https://github.com/cs3org/reva/pull/4197)
 * Enhancement - Introduce service accounts: [#6427](https://github.com/owncloud/ocis/pull/6427)
 * Enhancement - SSE for messaging: [#6992](https://github.com/owncloud/ocis/pull/6992)
@@ -706,10 +170,17 @@ The following sections list the changes for 5.0.0-rc.4.
 * Enhancement - Update antivirus service: [#8062](https://github.com/owncloud/ocis/pull/8062)
 * Enhancement - Remove deprecated environment variables: [#8149](https://github.com/owncloud/ocis/pull/8149)
 * Enhancement - Disable the password policy: [#8152](https://github.com/owncloud/ocis/pull/8152)
-* Enhancement - Update reva to latest edge version: [#8287](https://github.com/owncloud/ocis/pull/8287)
 * Enhancement - Allow restarting multiple uploads with one command: [#8287](https://github.com/owncloud/ocis/pull/8287)
 * Enhancement - Modify the concurrency default: [#8309](https://github.com/owncloud/ocis/pull/8309)
-* Enhancement - Update web to v8.0.0-rc.3: [#8342](https://github.com/owncloud/ocis/pull/8342)
+* Enhancement - Improve ocis single binary start: [#8320](https://github.com/owncloud/ocis/pull/8320)
+* Enhancement - Use environment variables in yaml config files: [#8339](https://github.com/owncloud/ocis/pull/8339)
+* Enhancement - Increment filenames on upload collisions in secret filedrops: [#8340](https://github.com/owncloud/ocis/pull/8340)
+* Enhancement - Allow sending multiple user ids in one sse event: [#8379](https://github.com/owncloud/ocis/pull/8379)
+* Enhancement - Allow to skip service listing: [#8408](https://github.com/owncloud/ocis/pull/8408)
+* Enhancement - Add a make step to validate the env var annotations: [#8436](https://github.com/owncloud/ocis/pull/8436)
+* Enhancement - Update web to v8.0.0-rc.5: [#8491](https://github.com/owncloud/ocis/pull/8491)
+* Enhancement - Drop the unnecessary grants exists check when creating shares: [#8502](https://github.com/owncloud/ocis/pull/8502)
+* Enhancement - Update reva to 2.19.0: [#8519](https://github.com/owncloud/ocis/pull/8519)
 
 ## Details
 
@@ -897,6 +368,13 @@ The following sections list the changes for 5.0.0-rc.4.
 
    https://github.com/owncloud/ocis/pull/7795
 
+* Bugfix - Fix search response: [#7815](https://github.com/owncloud/ocis/pull/7815)
+
+   We fixed the search response code from 500 to 400 when the request is invalid
+
+   https://github.com/owncloud/ocis/issues/7812
+   https://github.com/owncloud/ocis/pull/7815
+
 * Bugfix - The race conditions in tests: [#7847](https://github.com/owncloud/ocis/pull/7847)
 
    We fixed the race conditions in tests.
@@ -1138,12 +616,70 @@ The following sections list the changes for 5.0.0-rc.4.
 
    https://github.com/owncloud/ocis/pull/8317
 
+* Bugfix - Fix Content-Disposition header for downloads: [#8381](https://github.com/owncloud/ocis/pull/8381)
+
+   We have fixed a bug that caused downloads to fail on Chromebased browsers when
+   the filename contained special characters.
+
+   https://github.com/owncloud/ocis/issues/8361
+   https://github.com/owncloud/ocis/pull/8381
+   https://github.com/cs3org/reva/pull/4498
+
 * Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
 
    Signed urls now expire properly
 
    https://github.com/owncloud/ocis/pull/8385
 
+* Bugfix - Fix an error when move: [#8396](https://github.com/owncloud/ocis/pull/8396)
+
+   We fixed a bug that caused Internal Server Error when move using destination id
+
+   https://github.com/owncloud/ocis/issues/6739
+   https://github.com/owncloud/ocis/pull/8396
+   https://github.com/cs3org/reva/pull/4503
+
+* Bugfix - Fix extended env parser: [#8409](https://github.com/owncloud/ocis/pull/8409)
+
+   The extended envvar parser would be angry if there are two `os.Getenv` in the
+   same line. We fixed this.
+
+   https://github.com/owncloud/ocis/pull/8409
+
+* Bugfix - Graph/drives/permission Expiration date update: [#8413](https://github.com/owncloud/ocis/pull/8413)
+
+   We fixed a bug in the Update sharing permission the expiration dates can't be
+   removed from link permissions.
+
+   https://github.com/owncloud/ocis/issues/8405
+   https://github.com/owncloud/ocis/pull/8413
+
+* Bugfix - Fix search error message: [#8444](https://github.com/owncloud/ocis/pull/8444)
+
+   We fixed an error message returned when the search request is invalid
+
+   https://github.com/owncloud/ocis/issues/8442
+   https://github.com/owncloud/ocis/pull/8444
+
+* Bugfix - Graph/sharedWithMe align IDs with webdav response: [#8467](https://github.com/owncloud/ocis/pull/8467)
+
+   The IDs of the driveItems returned by the 'graph/v1beta1/me/drive/sharedWithMe'
+   endpoint are now aligned with the IDs returned in the PROPFIND response of the
+   webdav service.
+
+   https://github.com/owncloud/ocis/issues/8420
+   https://github.com/owncloud/ocis/issues/8080
+   https://github.com/owncloud/ocis/pull/8467
+
+* Bugfix - Bump reva to pull in changes to fix recursive trashcan purge: [#8505](https://github.com/owncloud/ocis/pull/8505)
+
+   We have fixed a bug in the trashcan purge process that did not delete folder
+   structures recursively.
+
+   https://github.com/owncloud/ocis/issues/8473
+   https://github.com/owncloud/ocis/pull/8505
+   https://github.com/cs3org/reva/pull/4533
+
 * Bugfix - Fix last month search: [#31145](https://github.com/golang/go/issues/31145)
 
    We've fixed the last month search edge case when currently is 31-th.
@@ -1192,6 +728,14 @@ The following sections list the changes for 5.0.0-rc.4.
 
    https://github.com/owncloud/ocis/pull/7970
 
+* Change - Deprecate sharing cs3 backends: [#8478](https://github.com/owncloud/ocis/pull/8478)
+
+   The `cs3` user and public sharing drivers have already been replaced by
+   `jsoncs3`. We now mark them as deprecated in preparation to kill a lot of unused
+   code in reva.
+
+   https://github.com/owncloud/ocis/pull/8478
+
 * Enhancement - Add the Banned Passwords List: [#4197](https://github.com/cs3org/reva/pull/4197)
 
    Added an option to enable a password check against a banned passwords list
@@ -1823,146 +1367,6 @@ The following sections list the changes for 5.0.0-rc.4.
    https://github.com/owncloud/ocis/pull/8152
    https://github.com/cs3org/reva/pull/4453
 
-* Enhancement - Update reva to latest edge version: [#8287](https://github.com/owncloud/ocis/pull/8287)
-
-   We update reva to the latest edge version to get the latest fixes and features.
-
-   ## Changelog for reva edge
-
-  *   Bugfix [cs3org/reva#4454](https://github.com/cs3org/reva/pull/4454): Skip unnecessary share retrieval
-  *   Bugfix [cs3org/reva#4461](https://github.com/cs3org/reva/pull/4461): CORS handling for WebDAV requests fixed
-  *   Bugfix [cs3org/reva#4462](https://github.com/cs3org/reva/pull/4462): Prevent setting container specific permissions on files
-  *   Bugfix [cs3org/reva#4463](https://github.com/cs3org/reva/pull/4463): Fix the resource name
-  *   Bugfix [cs3org/reva#4466](https://github.com/cs3org/reva/pull/4466): Fix natsjskv store
-  *   Bugfix [cs3org/reva#4469](https://github.com/cs3org/reva/pull/4469): Handle interrupted uploads
-  *   Bugfix [cs3org/reva#4472](https://github.com/cs3org/reva/pull/4472): Fix concurrent access to a map
-  *   Bugfix [cs3org/reva#4473](https://github.com/cs3org/reva/pull/4473): Decomposedfs now correctly lists sessions
-  *   Bugfix [cs3org/reva#4474](https://github.com/cs3org/reva/pull/4474): Make /dav/meta consistent
-  *   Bugfix [cs3org/reva#4475](https://github.com/cs3org/reva/pull/4475): Upload session specific processing flag
-  *   Bugfix [cs3org/reva#4476](https://github.com/cs3org/reva/pull/4476): No need to unmark postprocessing when it was not started
-  *   Bugfix [cs3org/reva#4479](https://github.com/cs3org/reva/pull/4479): Fix creating documents in the approvider
-  *   Bugfix [cs3org/reva#4481](https://github.com/cs3org/reva/pull/4481): Distinguish failure and node metadata reversal
-  *   Bugfix [cs3org/reva#4434](https://github.com/cs3org/reva/pull/4434): Fix the upload postprocessing
-  *   Bugfix [cs3org/reva#4443](https://github.com/cs3org/reva/pull/4443): Fixed wrong status code when moving a file to a denied path
-  *   Bugfix [cs3org/reva#4446](https://github.com/cs3org/reva/pull/4446): Disallow to delete a file during the processing
-  *   Bugfix [cs3org/reva#4448](https://github.com/cs3org/reva/pull/4448): Fix truncating existing files
-  *   Bugfix [cs3org/reva#4449](https://github.com/cs3org/reva/pull/4449): Keep failed processing status
-  *   Bugfix [cs3org/reva#4452](https://github.com/cs3org/reva/pull/4452): More efficient share jail
-  *   Bugfix [cs3org/reva#4456](https://github.com/cs3org/reva/pull/4456): Do not lose revisions when restoring the first revision
-  *   Bugfix [cs3org/reva#4457](https://github.com/cs3org/reva/pull/4457): Fix concurrent map access in sharecache
-  *   Enhancement [cs3org/reva#4453](https://github.com/cs3org/reva/pull/4453): Disable the password policy
-  *   Enhancement [cs3org/reva#4477](https://github.com/cs3org/reva/pull/4477): Extend ResumePostprocessing event
-
-   ## Changelog for reva 2.18.0 (2023-12-22)
-
-   The following sections list the changes in reva 2.18.0 relevant to reva users.
-   The changes are ordered by importance.
-
-  *   Bugfix [cs3org/reva#4424](https://github.com/cs3org/reva/pull/4424): Fixed panic in receivedsharecache pkg
-  *   Bugfix [cs3org/reva#4425](https://github.com/cs3org/reva/pull/4425): Fix overwriting files with empty files
-  *   Bugfix [cs3org/reva#4432](https://github.com/cs3org/reva/pull/4432): Fix /dav/meta endpoint for shares
-  *   Bugfix [cs3org/reva#4422](https://github.com/cs3org/reva/pull/4422): Fix disconnected traces
-  *   Bugfix [cs3org/reva#4429](https://github.com/cs3org/reva/pull/4429): Internal link creation
-  *   Bugfix [cs3org/reva#4407](https://github.com/cs3org/reva/pull/4407): Make ocdav return correct oc:spaceid
-  *   Bugfix [cs3org/reva#4410](https://github.com/cs3org/reva/pull/4410): Improve OCM support
-  *   Bugfix [cs3org/reva#4402](https://github.com/cs3org/reva/pull/4402): Refactor upload session
-  *   Enhancement [cs3org/reva#4421](https://github.com/cs3org/reva/pull/4421): Check permissions before adding, deleting or updating shares
-  *   Enhancement [cs3org/reva#4403](https://github.com/cs3org/reva/pull/4403): Add validation to update public share
-  *   Enhancement [cs3org/reva#4409](https://github.com/cs3org/reva/pull/4409): Disable the password policy
-  *   Enhancement [cs3org/reva#4412](https://github.com/cs3org/reva/pull/4412): Allow authentication for nats connections
-  *   Enhancement [cs3org/reva#4411](https://github.com/cs3org/reva/pull/4411): Add option to configure streams non durable
-  *   Enhancement [cs3org/reva#4406](https://github.com/cs3org/reva/pull/4406): Rework cache configuration
-  *   Enhancement [cs3org/reva#4414](https://github.com/cs3org/reva/pull/4414): Track more upload session metrics
-
-   ## Changelog for reva 2.17.0 (2023-12-12)
-
-   The following sections list the changes in reva 2.17.0 relevant to reva users.
-   The changes are ordered by importance.
-
-  *   Bugfix [cs3org/reva#4278](https://github.com/cs3org/reva/pull/4278): Disable DEPTH infinity in PROPFIND
-  *   Bugfix [cs3org/reva#4318](https://github.com/cs3org/reva/pull/4318): Do not allow moves between shares
-  *   Bugfix [cs3org/reva#4290](https://github.com/cs3org/reva/pull/4290): Prevent panic when trying to move a non-existent file
-  *   Bugfix [cs3org/reva#4241](https://github.com/cs3org/reva/pull/4241): Allow an empty credentials chain in the auth middleware
-  *   Bugfix [cs3org/reva#4216](https://github.com/cs3org/reva/pull/4216): Fix an error message
-  *   Bugfix [cs3org/reva#4324](https://github.com/cs3org/reva/pull/4324): Fix capabilities decoding
-  *   Bugfix [cs3org/reva#4267](https://github.com/cs3org/reva/pull/4267): Fix concurrency issue
-  *   Bugfix [cs3org/reva#4362](https://github.com/cs3org/reva/pull/4362): Fix concurrent lookup
-  *   Bugfix [cs3org/reva#4336](https://github.com/cs3org/reva/pull/4336): Fix definition of "file-editor" role
-  *   Bugfix [cs3org/reva#4302](https://github.com/cs3org/reva/pull/4302): Fix checking of filename length
-  *   Bugfix [cs3org/reva#4366](https://github.com/cs3org/reva/pull/4366): Fix CS3 status code when looking up non existing share
-  *   Bugfix [cs3org/reva#4299](https://github.com/cs3org/reva/pull/4299): Fix HTTP verb of the generate-invite endpoint
-  *   Bugfix [cs3org/reva#4249](https://github.com/cs3org/reva/pull/4249): GetUserByClaim not working with MSAD for claim "userid"
-  *   Bugfix [cs3org/reva#4217](https://github.com/cs3org/reva/pull/4217): Fix missing case for "hide" in UpdateShares
-  *   Bugfix [cs3org/reva#4140](https://github.com/cs3org/reva/pull/4140): Fix missing etag in shares jail
-  *   Bugfix [cs3org/reva#4229](https://github.com/cs3org/reva/pull/4229): Fix destroying the Personal and Project spaces data
-  *   Bugfix [cs3org/reva#4193](https://github.com/cs3org/reva/pull/4193): Fix overwrite a file with an empty file
-  *   Bugfix [cs3org/reva#4365](https://github.com/cs3org/reva/pull/4365): Fix create public share
-  *   Bugfix [cs3org/reva#4380](https://github.com/cs3org/reva/pull/4380): Fix the public link update
-  *   Bugfix [cs3org/reva#4250](https://github.com/cs3org/reva/pull/4250): Fix race condition
-  *   Bugfix [cs3org/reva#4345](https://github.com/cs3org/reva/pull/4345): Fix conversion of custom ocs permissions to roles
-  *   Bugfix [cs3org/reva#4134](https://github.com/cs3org/reva/pull/4134): Fix share jail
-  *   Bugfix [cs3org/reva#4335](https://github.com/cs3org/reva/pull/4335): Fix public shares cleanup config
-  *   Bugfix [cs3org/reva#4338](https://github.com/cs3org/reva/pull/4338): Fix unlock via space API
-  *   Bugfix [cs3org/reva#4341](https://github.com/cs3org/reva/pull/4341): Fix spaceID in meta endpoint response
-  *   Bugfix [cs3org/reva#4351](https://github.com/cs3org/reva/pull/4351): Fix 500 when open public link
-  *   Bugfix [cs3org/reva#4352](https://github.com/cs3org/reva/pull/4352): Fix the tgz mime type
-  *   Bugfix [cs3org/reva#4388](https://github.com/cs3org/reva/pull/4388): Allow UpdateUserShare() to update just the expiration date
-  *   Bugfix [cs3org/reva#4214](https://github.com/cs3org/reva/pull/4214): Always pass adjusted default nats options
-  *   Bugfix [cs3org/reva#4291](https://github.com/cs3org/reva/pull/4291): Release lock when expired
-  *   Bugfix [cs3org/reva#4386](https://github.com/cs3org/reva/pull/4386): Remove dead enable_home config
-  *   Bugfix [cs3org/reva#4292](https://github.com/cs3org/reva/pull/4292): Return 403 when user is not permitted to lock
-  *   Enhancement [cs3org/reva#4389](https://github.com/cs3org/reva/pull/4389): Add audio and location props
-  *   Enhancement [cs3org/reva#4337](https://github.com/cs3org/reva/pull/4337): Check permissions before creating shares
-  *   Enhancement [cs3org/reva#4326](https://github.com/cs3org/reva/pull/4326): Add search mediatype filter
-  *   Enhancement [cs3org/reva#4367](https://github.com/cs3org/reva/pull/4367): Add GGS mime type
-  *   Enhancement [cs3org/reva#4194](https://github.com/cs3org/reva/pull/4194): Add hide flag to shares
-  *   Enhancement [cs3org/reva#4358](https://github.com/cs3org/reva/pull/4358): Add default permissions capability for links
-  *   Enhancement [cs3org/reva#4133](https://github.com/cs3org/reva/pull/4133): Add more metadata to locks
-  *   Enhancement [cs3org/reva#4353](https://github.com/cs3org/reva/pull/4353): Add support for .docxf files
-  *   Enhancement [cs3org/reva#4363](https://github.com/cs3org/reva/pull/4363): Add nats-js-kv store
-  *   Enhancement [cs3org/reva#4197](https://github.com/cs3org/reva/pull/4197): Add the Banned-Passwords List
-  *   Enhancement [cs3org/reva#4190](https://github.com/cs3org/reva/pull/4190): Add the password policies
-  *   Enhancement [cs3org/reva#4384](https://github.com/cs3org/reva/pull/4384): Add a retry postprocessing outcome and event
-  *   Enhancement [cs3org/reva#4271](https://github.com/cs3org/reva/pull/4271): Add search capability
-  *   Enhancement [cs3org/reva#4119](https://github.com/cs3org/reva/pull/4119): Add sse event
-  *   Enhancement [cs3org/reva#4392](https://github.com/cs3org/reva/pull/4392): Add additional permissions to service accounts
-  *   Enhancement [cs3org/reva#4344](https://github.com/cs3org/reva/pull/4344): Add url extension to mime type list
-  *   Enhancement [cs3org/reva#4372](https://github.com/cs3org/reva/pull/4372): Add validation to the public share provider
-  *   Enhancement [cs3org/reva#4244](https://github.com/cs3org/reva/pull/4244): Allow listing reveived shares by service accounts
-  *   Enhancement [cs3org/reva#4129](https://github.com/cs3org/reva/pull/4129): Auto-Accept Shares through ServiceAccounts
-  *   Enhancement [cs3org/reva#4374](https://github.com/cs3org/reva/pull/4374): Handle trashbin file listings concurrently
-  *   Enhancement [cs3org/reva#4325](https://github.com/cs3org/reva/pull/4325): Enforce Permissions
-  *   Enhancement [cs3org/reva#4368](https://github.com/cs3org/reva/pull/4368): Extract log initialization
-  *   Enhancement [cs3org/reva#4375](https://github.com/cs3org/reva/pull/4375): Introduce UploadSessionLister interface
-  *   Enhancement [cs3org/reva#4268](https://github.com/cs3org/reva/pull/4268): Implement sharing roles
-  *   Enhancement [cs3org/reva#4160](https://github.com/cs3org/reva/pull/4160): Improve utils pkg
-  *   Enhancement [cs3org/reva#4335](https://github.com/cs3org/reva/pull/4335): Add sufficient permissions check function
-  *   Enhancement [cs3org/reva#4281](https://github.com/cs3org/reva/pull/4281): Port OCM changes from master
-  *   Enhancement [cs3org/reva#4270](https://github.com/cs3org/reva/pull/4270): Opt out of public link password enforcement
-  *   Enhancement [cs3org/reva#4181](https://github.com/cs3org/reva/pull/4181): Change the variable names for the password policy
-  *   Enhancement [cs3org/reva#4256](https://github.com/cs3org/reva/pull/4256): Rename hidden share variable name
-  *   Enhancement [cs3org/reva#3926](https://github.com/cs3org/reva/pull/3926): Service Accounts
-  *   Enhancement [cs3org/reva#4359](https://github.com/cs3org/reva/pull/4359): Update go-ldap to v3.4.6
-  *   Enhancement [cs3org/reva#4170](https://github.com/cs3org/reva/pull/4170): Update password policies
-  *   Enhancement [cs3org/reva#4232](https://github.com/cs3org/reva/pull/4232): Improve error handling in utils package
-
-   https://github.com/owncloud/ocis/pull/8287
-   https://github.com/owncloud/ocis/pull/8278
-   https://github.com/owncloud/ocis/pull/8264
-   https://github.com/owncloud/ocis/pull/8100
-   https://github.com/owncloud/ocis/pull/8100
-   https://github.com/owncloud/ocis/pull/8038
-   https://github.com/owncloud/ocis/pull/8056
-   https://github.com/owncloud/ocis/pull/7949
-   https://github.com/owncloud/ocis/pull/7793
-   https://github.com/owncloud/ocis/pull/7978
-   https://github.com/owncloud/ocis/pull/7979
-   https://github.com/owncloud/ocis/pull/7963
-   https://github.com/owncloud/ocis/pull/7986
-   https://github.com/owncloud/ocis/pull/7721
-   https://github.com/owncloud/ocis/pull/7727
-   https://github.com/owncloud/ocis/pull/7752
-
 * Enhancement - Allow restarting multiple uploads with one command: [#8287](https://github.com/owncloud/ocis/pull/8287)
 
    Allows to restart all commands in a specific state.
@@ -1979,10 +1383,88 @@ The following sections list the changes for 5.0.0-rc.4.
    https://github.com/owncloud/ocis/pull/8309
    https://github.com/cs3org/reva/pull/4485
 
-* Enhancement - Update web to v8.0.0-rc.3: [#8342](https://github.com/owncloud/ocis/pull/8342)
+* Enhancement - Improve ocis single binary start: [#8320](https://github.com/owncloud/ocis/pull/8320)
+
+   Removes waiting times when starting the single binary. Improves ocis single
+   binary boot time from 8s to 2.5s
+
+   https://github.com/owncloud/ocis/pull/8320
+
+* Enhancement - Use environment variables in yaml config files: [#8339](https://github.com/owncloud/ocis/pull/8339)
+
+   We added the ability to use environment variables in yaml config files. This
+   allows to use environment variables in the config files of the ocis services
+   which will be replaced by the actual value of the environment variable at
+   runtime.
+
+   Example:
+
+   ```
+   web:
+     http:
+       addr: ${SOME_HTTP_ADDR}
+   ```
+
+   This makes it possible to use the same config file for different environments
+   without the need to change the config file itself. This is especially useful
+   when using docker-compose to run the ocis services. It is a common pattern to
+   create an .env file which contains the environment variables for the
+   docker-compose file. Now you can use the same .env file to configure the ocis
+   services.
+
+   https://github.com/owncloud/ocis/pull/8339
+
+* Enhancement - Increment filenames on upload collisions in secret filedrops: [#8340](https://github.com/owncloud/ocis/pull/8340)
+
+   We have bumped reva to pull in the changes needed for automatically increment
+   filenames on upload collisions in secret filedrops.
+
+   https://github.com/owncloud/ocis/issues/8291
+   https://github.com/owncloud/ocis/pull/8340
+
+* Enhancement - Allow sending multiple user ids in one sse event: [#8379](https://github.com/owncloud/ocis/pull/8379)
+
+   Sending multiple user ids in one sse event is now possible which reduces the
+   number of sent events.
+
+   https://github.com/owncloud/ocis/pull/8379
+   https://github.com/cs3org/reva/pull/4501
+
+* Enhancement - Allow to skip service listing: [#8408](https://github.com/owncloud/ocis/pull/8408)
+
+   The ocis version cmd listed all services by default. This is not always
+   intended, so we allow to skip the listing of the services by using the
+   --skip-services flag.
+
+   https://github.com/owncloud/ocis/issues/8070
+   https://github.com/owncloud/ocis/pull/8408
+
+* Enhancement - Add a make step to validate the env var annotations: [#8436](https://github.com/owncloud/ocis/pull/8436)
+
+   We have added a make step `make validate-env-var-annotations` to validate the
+   env var annotations in to the environment variables.
+
+   https://github.com/owncloud/ocis/issues/8258
+   https://github.com/owncloud/ocis/pull/8436
+
+* Enhancement - Update web to v8.0.0-rc.5: [#8491](https://github.com/owncloud/ocis/pull/8491)
 
    Tags: web
 
+   We updated ownCloud Web to v8.0.0-rc.5. Please refer to the changelog (linked)
+   for details on the web release.
+
+   ## Summary * Bugfix
+   [owncloud/web#10473](https://github.com/owncloud/web/issues/10473): Public link
+   file download
+
+   We updated ownCloud Web to v8.0.0-rc.4. Please refer to the changelog (linked)
+   for details on the web release.
+
+   ## Summary * Bugfix
+   [owncloud/web#10489](https://github.com/owncloud/web/pull/10489): Wrong share
+   permissions when resharing off
+
    We updated ownCloud Web to v8.0.0-rc.3. Please refer to the changelog (linked)
    for details on the web release.
 
@@ -2225,6 +1707,8 @@ The following sections list the changes for 5.0.0-rc.4.
    [owncloud/web#10102](https://github.com/owncloud/web/pull/10102): Registering
    quick actions as extension
 
+   https://github.com/owncloud/ocis/pull/8491
+   https://github.com/owncloud/ocis/pull/8468
    https://github.com/owncloud/ocis/pull/8342
    https://github.com/owncloud/ocis/pull/8154
    https://github.com/owncloud/ocis/pull/8154
@@ -2233,6 +1717,8 @@ The following sections list the changes for 5.0.0-rc.4.
    https://github.com/owncloud/ocis/pull/7952
    https://github.com/owncloud/ocis/pull/7918
    https://github.com/owncloud/ocis/pull/7883
+   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.5
+   https://github.com/owncloud/web/releases/tag/v8.0.0-rc.4
    https://github.com/owncloud/web/releases/tag/v8.0.0-rc.3
    https://github.com/owncloud/web/releases/tag/v8.0.0-rc.2
    https://github.com/owncloud/web/releases/tag/v8.0.0-rc.2
@@ -2242,6 +1728,212 @@ The following sections list the changes for 5.0.0-rc.4.
    https://github.com/owncloud/web/releases/tag/v8.0.0-alpha.13
    https://github.com/owncloud/web/releases/tag/v8.0.0-alpha.12
 
+* Enhancement - Drop the unnecessary grants exists check when creating shares: [#8502](https://github.com/owncloud/ocis/pull/8502)
+
+   We have bumped reva to drop the unnecessary grants exists check when creating
+   shares.
+
+   https://github.com/owncloud/ocis/pull/8502
+
+* Enhancement - Update reva to 2.19.0: [#8519](https://github.com/owncloud/ocis/pull/8519)
+
+   We update reva to the version 2.19.0
+
+  *   Bugfix [cs3org/reva#4464](https://github.com/cs3org/reva/pull/4464): Don't check lock grants
+  *   Bugfix [cs3org/reva#4516](https://github.com/cs3org/reva/pull/4516): The sharemanager can now reject grants with resharing permissions
+  *   Bugfix [cs3org/reva#4512](https://github.com/cs3org/reva/pull/4512): Bump dependencies
+  *   Bugfix [cs3org/reva#4481](https://github.com/cs3org/reva/pull/4481): Distinguish failure and node metadata reversal
+  *   Bugfix [cs3org/reva#4456](https://github.com/cs3org/reva/pull/4456): Do not lose revisions when restoring the first revision
+  *   Bugfix [cs3org/reva#4472](https://github.com/cs3org/reva/pull/4472): Fix concurrent access to a map
+  *   Bugfix [cs3org/reva#4457](https://github.com/cs3org/reva/pull/4457): Fix concurrent map access in sharecache
+  *   Bugfix [cs3org/reva#4498](https://github.com/cs3org/reva/pull/4498): Fix Content-Disposition header in dav
+  *   Bugfix [cs3org/reva#4461](https://github.com/cs3org/reva/pull/4461): CORS handling for WebDAV requests fixed
+  *   Bugfix [cs3org/reva#4462](https://github.com/cs3org/reva/pull/4462): Prevent setting container specific permissions on files
+  *   Bugfix [cs3org/reva#4479](https://github.com/cs3org/reva/pull/4479): Fix creating documents in the app provider
+  *   Bugfix [cs3org/reva#4474](https://github.com/cs3org/reva/pull/4474): Make /dav/meta consistent
+  *   Bugfix [cs3org/reva#4446](https://github.com/cs3org/reva/pull/4446): Disallow to delete a file during the processing
+  *   Bugfix [cs3org/reva#4517](https://github.com/cs3org/reva/pull/4517): Fix duplicated items in the sharejail root
+  *   Bugfix [cs3org/reva#4473](https://github.com/cs3org/reva/pull/4473): Decomposedfs now correctly lists sessions
+  *   Bugfix [cs3org/reva#4528](https://github.com/cs3org/reva/pull/4528): Respect IfNotExist option when uploading in cs3 metadata storage
+  *   Bugfix [cs3org/reva#4503](https://github.com/cs3org/reva/pull/4503): Fix an error when move
+  *   Bugfix [cs3org/reva#4466](https://github.com/cs3org/reva/pull/4466): Fix natsjskv store
+  *   Bugfix [cs3org/reva#4533](https://github.com/cs3org/reva/pull/4533): Fix recursive trashcan purge
+  *   Bugfix [cs3org/reva#4492](https://github.com/cs3org/reva/pull/4492): Fix the resource name
+  *   Bugfix [cs3org/reva#4463](https://github.com/cs3org/reva/pull/4463): Fix the resource name
+  *   Bugfix [cs3org/reva#4448](https://github.com/cs3org/reva/pull/4448): Fix truncating existing files
+  *   Bugfix [cs3org/reva#4434](https://github.com/cs3org/reva/pull/4434): Fix the upload postprocessing
+  *   Bugfix [cs3org/reva#4469](https://github.com/cs3org/reva/pull/4469): Handle interrupted uploads
+  *   Bugfix [cs3org/reva#4532](https://github.com/cs3org/reva/pull/4532): Jsoncs3 cache fixes
+  *   Bugfix [cs3org/reva#4449](https://github.com/cs3org/reva/pull/4449): Keep failed processing status
+  *   Bugfix [cs3org/reva#4529](https://github.com/cs3org/reva/pull/4529): We aligned some OCS return codes with oc10
+  *   Bugfix [cs3org/reva#4507](https://github.com/cs3org/reva/pull/4507): Make tusd CORS headers configurable
+  *   Bugfix [cs3org/reva#4452](https://github.com/cs3org/reva/pull/4452): More efficient share jail
+  *   Bugfix [cs3org/reva#4476](https://github.com/cs3org/reva/pull/4476): No need to unmark postprocessing when it was not started
+  *   Bugfix [cs3org/reva#4454](https://github.com/cs3org/reva/pull/4454): Skip unnecessary share retrieval
+  *   Bugfix [cs3org/reva#4527](https://github.com/cs3org/reva/pull/4527): Unify datagateway method handling
+  *   Bugfix [cs3org/reva#4530](https://github.com/cs3org/reva/pull/4530): Drop unnecessary grant exists check
+  *   Bugfix [cs3org/reva#4475](https://github.com/cs3org/reva/pull/4475): Upload session specific processing flag
+  *   Enhancement [cs3org/reva#4501](https://github.com/cs3org/reva/pull/4501): Allow sending multiple user ids in one sse event
+  *   Enhancement [cs3org/reva#4485](https://github.com/cs3org/reva/pull/4485): Modify the concurrency default
+  *   Enhancement [cs3org/reva#4526](https://github.com/cs3org/reva/pull/4526): Configurable s3 put options
+  *   Enhancement [cs3org/reva#4453](https://github.com/cs3org/reva/pull/4453): Disable the password policy
+  *   Enhancement [cs3org/reva#4477](https://github.com/cs3org/reva/pull/4477): Extend ResumePostprocessing event
+  *   Enhancement [cs3org/reva#4491](https://github.com/cs3org/reva/pull/4491): Add filename incrementor for secret filedrops
+  *   Enhancement [cs3org/reva#4490](https://github.com/cs3org/reva/pull/4490): Lazy initialize public share manager
+  *   Enhancement [cs3org/reva#4494](https://github.com/cs3org/reva/pull/4494): Start implementation of a plain posix storage driver
+  *   Enhancement [cs3org/reva#4502](https://github.com/cs3org/reva/pull/4502): Add spaceindex.AddAll()
+
+   ## Changelog for reva 2.18.0 (2023-12-22)
+
+   The following sections list the changes in reva 2.18.0 relevant to reva users.
+   The changes are ordered by importance.
+
+  *   Bugfix [cs3org/reva#4424](https://github.com/cs3org/reva/pull/4424): Fixed panic in receivedsharecache pkg
+  *   Bugfix [cs3org/reva#4425](https://github.com/cs3org/reva/pull/4425): Fix overwriting files with empty files
+  *   Bugfix [cs3org/reva#4432](https://github.com/cs3org/reva/pull/4432): Fix /dav/meta endpoint for shares
+  *   Bugfix [cs3org/reva#4422](https://github.com/cs3org/reva/pull/4422): Fix disconnected traces
+  *   Bugfix [cs3org/reva#4429](https://github.com/cs3org/reva/pull/4429): Internal link creation
+  *   Bugfix [cs3org/reva#4407](https://github.com/cs3org/reva/pull/4407): Make ocdav return correct oc:spaceid
+  *   Bugfix [cs3org/reva#4410](https://github.com/cs3org/reva/pull/4410): Improve OCM support
+  *   Bugfix [cs3org/reva#4402](https://github.com/cs3org/reva/pull/4402): Refactor upload session
+  *   Enhancement [cs3org/reva#4421](https://github.com/cs3org/reva/pull/4421): Check permissions before adding, deleting or updating shares
+  *   Enhancement [cs3org/reva#4403](https://github.com/cs3org/reva/pull/4403): Add validation to update public share
+  *   Enhancement [cs3org/reva#4409](https://github.com/cs3org/reva/pull/4409): Disable the password policy
+  *   Enhancement [cs3org/reva#4412](https://github.com/cs3org/reva/pull/4412): Allow authentication for nats connections
+  *   Enhancement [cs3org/reva#4411](https://github.com/cs3org/reva/pull/4411): Add option to configure streams non durable
+  *   Enhancement [cs3org/reva#4406](https://github.com/cs3org/reva/pull/4406): Rework cache configuration
+  *   Enhancement [cs3org/reva#4414](https://github.com/cs3org/reva/pull/4414): Track more upload session metrics
+
+   ## Changelog for reva 2.17.0 (2023-12-12)
+
+   The following sections list the changes in reva 2.17.0 relevant to reva users.
+   The changes are ordered by importance.
+
+  *   Bugfix [cs3org/reva#4278](https://github.com/cs3org/reva/pull/4278): Disable DEPTH infinity in PROPFIND
+  *   Bugfix [cs3org/reva#4318](https://github.com/cs3org/reva/pull/4318): Do not allow moves between shares
+  *   Bugfix [cs3org/reva#4290](https://github.com/cs3org/reva/pull/4290): Prevent panic when trying to move a non-existent file
+  *   Bugfix [cs3org/reva#4241](https://github.com/cs3org/reva/pull/4241): Allow an empty credentials chain in the auth middleware
+  *   Bugfix [cs3org/reva#4216](https://github.com/cs3org/reva/pull/4216): Fix an error message
+  *   Bugfix [cs3org/reva#4324](https://github.com/cs3org/reva/pull/4324): Fix capabilities decoding
+  *   Bugfix [cs3org/reva#4267](https://github.com/cs3org/reva/pull/4267): Fix concurrency issue
+  *   Bugfix [cs3org/reva#4362](https://github.com/cs3org/reva/pull/4362): Fix concurrent lookup
+  *   Bugfix [cs3org/reva#4336](https://github.com/cs3org/reva/pull/4336): Fix definition of "file-editor" role
+  *   Bugfix [cs3org/reva#4302](https://github.com/cs3org/reva/pull/4302): Fix checking of filename length
+  *   Bugfix [cs3org/reva#4366](https://github.com/cs3org/reva/pull/4366): Fix CS3 status code when looking up non existing share
+  *   Bugfix [cs3org/reva#4299](https://github.com/cs3org/reva/pull/4299): Fix HTTP verb of the generate-invite endpoint
+  *   Bugfix [cs3org/reva#4249](https://github.com/cs3org/reva/pull/4249): GetUserByClaim not working with MSAD for claim "userid"
+  *   Bugfix [cs3org/reva#4217](https://github.com/cs3org/reva/pull/4217): Fix missing case for "hide" in UpdateShares
+  *   Bugfix [cs3org/reva#4140](https://github.com/cs3org/reva/pull/4140): Fix missing etag in shares jail
+  *   Bugfix [cs3org/reva#4229](https://github.com/cs3org/reva/pull/4229): Fix destroying the Personal and Project spaces data
+  *   Bugfix [cs3org/reva#4193](https://github.com/cs3org/reva/pull/4193): Fix overwrite a file with an empty file
+  *   Bugfix [cs3org/reva#4365](https://github.com/cs3org/reva/pull/4365): Fix create public share
+  *   Bugfix [cs3org/reva#4380](https://github.com/cs3org/reva/pull/4380): Fix the public link update
+  *   Bugfix [cs3org/reva#4250](https://github.com/cs3org/reva/pull/4250): Fix race condition
+  *   Bugfix [cs3org/reva#4345](https://github.com/cs3org/reva/pull/4345): Fix conversion of custom ocs permissions to roles
+  *   Bugfix [cs3org/reva#4134](https://github.com/cs3org/reva/pull/4134): Fix share jail
+  *   Bugfix [cs3org/reva#4335](https://github.com/cs3org/reva/pull/4335): Fix public shares cleanup config
+  *   Bugfix [cs3org/reva#4338](https://github.com/cs3org/reva/pull/4338): Fix unlock via space API
+  *   Bugfix [cs3org/reva#4341](https://github.com/cs3org/reva/pull/4341): Fix spaceID in meta endpoint response
+  *   Bugfix [cs3org/reva#4351](https://github.com/cs3org/reva/pull/4351): Fix 500 when open public link
+  *   Bugfix [cs3org/reva#4352](https://github.com/cs3org/reva/pull/4352): Fix the tgz mime type
+  *   Bugfix [cs3org/reva#4388](https://github.com/cs3org/reva/pull/4388): Allow UpdateUserShare() to update just the expiration date
+  *   Bugfix [cs3org/reva#4214](https://github.com/cs3org/reva/pull/4214): Always pass adjusted default nats options
+  *   Bugfix [cs3org/reva#4291](https://github.com/cs3org/reva/pull/4291): Release lock when expired
+  *   Bugfix [cs3org/reva#4386](https://github.com/cs3org/reva/pull/4386): Remove dead enable_home config
+  *   Bugfix [cs3org/reva#4292](https://github.com/cs3org/reva/pull/4292): Return 403 when user is not permitted to lock
+  *   Enhancement [cs3org/reva#4389](https://github.com/cs3org/reva/pull/4389): Add audio and location props
+  *   Enhancement [cs3org/reva#4337](https://github.com/cs3org/reva/pull/4337): Check permissions before creating shares
+  *   Enhancement [cs3org/reva#4326](https://github.com/cs3org/reva/pull/4326): Add search mediatype filter
+  *   Enhancement [cs3org/reva#4367](https://github.com/cs3org/reva/pull/4367): Add GGS mime type
+  *   Enhancement [cs3org/reva#4194](https://github.com/cs3org/reva/pull/4194): Add hide flag to shares
+  *   Enhancement [cs3org/reva#4358](https://github.com/cs3org/reva/pull/4358): Add default permissions capability for links
+  *   Enhancement [cs3org/reva#4133](https://github.com/cs3org/reva/pull/4133): Add more metadata to locks
+  *   Enhancement [cs3org/reva#4353](https://github.com/cs3org/reva/pull/4353): Add support for .docxf files
+  *   Enhancement [cs3org/reva#4363](https://github.com/cs3org/reva/pull/4363): Add nats-js-kv store
+  *   Enhancement [cs3org/reva#4197](https://github.com/cs3org/reva/pull/4197): Add the Banned-Passwords List
+  *   Enhancement [cs3org/reva#4190](https://github.com/cs3org/reva/pull/4190): Add the password policies
+  *   Enhancement [cs3org/reva#4384](https://github.com/cs3org/reva/pull/4384): Add a retry postprocessing outcome and event
+  *   Enhancement [cs3org/reva#4271](https://github.com/cs3org/reva/pull/4271): Add search capability
+  *   Enhancement [cs3org/reva#4119](https://github.com/cs3org/reva/pull/4119): Add sse event
+  *   Enhancement [cs3org/reva#4392](https://github.com/cs3org/reva/pull/4392): Add additional permissions to service accounts
+  *   Enhancement [cs3org/reva#4344](https://github.com/cs3org/reva/pull/4344): Add url extension to mime type list
+  *   Enhancement [cs3org/reva#4372](https://github.com/cs3org/reva/pull/4372): Add validation to the public share provider
+  *   Enhancement [cs3org/reva#4244](https://github.com/cs3org/reva/pull/4244): Allow listing reveived shares by service accounts
+  *   Enhancement [cs3org/reva#4129](https://github.com/cs3org/reva/pull/4129): Auto-Accept Shares through ServiceAccounts
+  *   Enhancement [cs3org/reva#4374](https://github.com/cs3org/reva/pull/4374): Handle trashbin file listings concurrently
+  *   Enhancement [cs3org/reva#4325](https://github.com/cs3org/reva/pull/4325): Enforce Permissions
+  *   Enhancement [cs3org/reva#4368](https://github.com/cs3org/reva/pull/4368): Extract log initialization
+  *   Enhancement [cs3org/reva#4375](https://github.com/cs3org/reva/pull/4375): Introduce UploadSessionLister interface
+  *   Enhancement [cs3org/reva#4268](https://github.com/cs3org/reva/pull/4268): Implement sharing roles
+  *   Enhancement [cs3org/reva#4160](https://github.com/cs3org/reva/pull/4160): Improve utils pkg
+  *   Enhancement [cs3org/reva#4335](https://github.com/cs3org/reva/pull/4335): Add sufficient permissions check function
+  *   Enhancement [cs3org/reva#4281](https://github.com/cs3org/reva/pull/4281): Port OCM changes from master
+  *   Enhancement [cs3org/reva#4270](https://github.com/cs3org/reva/pull/4270): Opt out of public link password enforcement
+  *   Enhancement [cs3org/reva#4181](https://github.com/cs3org/reva/pull/4181): Change the variable names for the password policy
+  *   Enhancement [cs3org/reva#4256](https://github.com/cs3org/reva/pull/4256): Rename hidden share variable name
+  *   Enhancement [cs3org/reva#3926](https://github.com/cs3org/reva/pull/3926): Service Accounts
+  *   Enhancement [cs3org/reva#4359](https://github.com/cs3org/reva/pull/4359): Update go-ldap to v3.4.6
+  *   Enhancement [cs3org/reva#4170](https://github.com/cs3org/reva/pull/4170): Update password policies
+  *   Enhancement [cs3org/reva#4232](https://github.com/cs3org/reva/pull/4232): Improve error handling in utils package
+
+   https://github.com/owncloud/ocis/pull/8519
+   https://github.com/owncloud/ocis/pull/8502
+   https://github.com/owncloud/ocis/pull/8340
+   https://github.com/owncloud/ocis/pull/8381
+   https://github.com/owncloud/ocis/pull/8287
+   https://github.com/owncloud/ocis/pull/8278
+   https://github.com/owncloud/ocis/pull/8264
+   https://github.com/owncloud/ocis/pull/8100
+   https://github.com/owncloud/ocis/pull/8100
+   https://github.com/owncloud/ocis/pull/8038
+   https://github.com/owncloud/ocis/pull/8056
+   https://github.com/owncloud/ocis/pull/7949
+   https://github.com/owncloud/ocis/pull/7793
+   https://github.com/owncloud/ocis/pull/7978
+   https://github.com/owncloud/ocis/pull/7979
+   https://github.com/owncloud/ocis/pull/7963
+   https://github.com/owncloud/ocis/pull/7986
+   https://github.com/owncloud/ocis/pull/7721
+   https://github.com/owncloud/ocis/pull/7727
+   https://github.com/owncloud/ocis/pull/7752
+
+# Changelog for [4.0.6] (2024-02-07)
+
+The following sections list the changes for 4.0.6.
+
+[4.0.6]: https://github.com/owncloud/ocis/compare/v4.0.5...v4.0.6
+
+## Summary
+
+* Bugfix - Fix RED metrics on the metrics endpoint: [#7994](https://github.com/owncloud/ocis/pull/7994)
+* Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
+
+## Details
+
+* Bugfix - Fix RED metrics on the metrics endpoint: [#7994](https://github.com/owncloud/ocis/pull/7994)
+
+   We connected some metrics to the metrics endpoint to support the RED method for
+   monitoring microservices.
+
+   - Request Rate: The number of requests per second. The total count of requests
+   is available under `ocis_proxy_requests_total`. - Error Rate: The number of
+   failed requests per second. The total count of failed requests is available
+   under `ocis_proxy_errors_total`. - Duration: The amount of time each request
+   takes. The duration of all requests is available under
+   `ocis_proxy_request_duration_seconds`. This is a histogram metric, so it also
+   provides information about the distribution of request durations.
+
+   The metrics are available under the following paths: `PROXY_DEBUG_ADDR/metrics`
+   in a prometheus compatible format and maybe secured by `PROXY_DEBUG_TOKEN`.
+
+   https://github.com/owncloud/ocis/pull/7994
+
+* Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
+
+   Signed urls now expire properly
+
+   https://github.com/owncloud/ocis/pull/8385
+
 # Changelog for [4.0.5] (2023-12-21)
 
 The following sections list the changes for 4.0.5.
@@ -7604,7 +7296,7 @@ The following sections list the changes for 2.0.0.
 
 The following sections list the changes for 1.20.0.
 
-[1.20.0]: https://github.com/owncloud/ocis/compare/v1.19.1...v1.20.0
+[1.20.0]: https://github.com/owncloud/ocis/compare/v1.19.0...v1.20.0
 
 ## Summary
 
@@ -7778,29 +7470,11 @@ The following sections list the changes for 1.20.0.
    https://github.com/owncloud/ocis/pull/3509
    https://github.com/owncloud/web/releases/tag/v5.4.0
 
-# Changelog for [1.19.1] (2022-03-29)
-
-The following sections list the changes for 1.19.1.
-
-[1.19.1]: https://github.com/owncloud/ocis/compare/v1.19.0...v1.19.1
-
-## Summary
-
-* Bugfix - Return correct special item urls: [#3419](https://github.com/owncloud/ocis/pull/3419)
-
-## Details
-
-* Bugfix - Return correct special item urls: [#3419](https://github.com/owncloud/ocis/pull/3419)
-
-   URLs for Special items (space image, readme) were broken.
-
-   https://github.com/owncloud/ocis/pull/3419
-
 # Changelog for [1.19.0] (2022-03-29)
 
 The following sections list the changes for 1.19.0.
 
-[1.19.0]: https://github.com/owncloud/ocis/compare/v1.18.0...v1.19.0
+[1.19.0]: https://github.com/owncloud/ocis/compare/v1.19.1...v1.19.0
 
 ## Summary
 
@@ -7974,6 +7648,24 @@ The following sections list the changes for 1.19.0.
    https://github.com/owncloud/ocis/pull/3375
    https://github.com/owncloud/web/releases/tag/v5.3.0
 
+# Changelog for [1.19.1] (2022-03-29)
+
+The following sections list the changes for 1.19.1.
+
+[1.19.1]: https://github.com/owncloud/ocis/compare/v1.18.0...v1.19.1
+
+## Summary
+
+* Bugfix - Return correct special item urls: [#3419](https://github.com/owncloud/ocis/pull/3419)
+
+## Details
+
+* Bugfix - Return correct special item urls: [#3419](https://github.com/owncloud/ocis/pull/3419)
+
+   URLs for Special items (space image, readme) were broken.
+
+   https://github.com/owncloud/ocis/pull/3419
+
 # Changelog for [1.18.0] (2022-03-03)
 
 The following sections list the changes for 1.18.0.