Nextcloud Server Changelog

• • 
    
    • server
      • Fix(admin-delegation): Prevent delegation to group if delegation alre… (server#57119)
      • Fix(UserMountCache): Add back unique index for oc_mounts and use normal insert (server#57123)
      • Fix: Only attempt $result array access if array not empty. (server#57331)
      • Fix(encryption): init filesystem before unshare hook (server#57339)
      • Fix(admin_audit): Fix typo in visibility log message (server#57431)
      • Fix interval option in `occ background-job:worker` (server#57436)
      • Feat: also send x-user-id for dav responses (server#57459)
      • Feat: restrict calendar invitation participants (server#57462)
      • Build(deps): bump @nextcloud/vue from 8.35.0 to 8.35.2 (server#57474)
      • Build(deps-dev): bump sass from 1.97.1 to 1.97.2 (server#57476)
      • Fix: Make User_Proxy IGetDisplayNameBackend complient (server#57486)
      • Fix(NavigationManager): Remove break to return all defaultEntryIds (server#57500)
      • Use strict array search (server#57517)
      • Fix(files): Inhibit download for non downloadable nodes in all contexts (server#57532)
      • Fix: handle InvalidArumentException as availability failure in smb->getFileInfo (server#57538)
      • Feat: Add appconfig to disable fixed userfolder permissions optimization (server#57543)
      • Build(deps-dev): bump @zip.js/zip.js from 2.8.11 to 2.8.15 (server#57616)
      • Build(deps-dev): bump @babel/node from 7.28.0 to 7.28.6 (server#57617)
      • Build(deps-dev): bump puppeteer from 24.34.0 to 24.35.0 (server#57618)
      • Build(deps-dev): bump @babel/plugin-transform-private-methods from 7.27.1 to 7.28.6 (server#57619)
      • Build(deps): bump focus-trap from 7.7.1 to 7.8.0 (server#57620)
      • Build(deps): bump libphonenumber-js from 1.12.33 to 1.12.34 (server#57621)
      • Build(deps-dev): bump tar from 7.5.2 to 7.5.3 (server#57622)
      • Fix(theming): Fix favicon and touchicon ratios (server#57656)
      • Fix(files_sharing): Fix BeforeZipCreatedListener path handling (server#57662)
      • Fix(files): ensure creating folders in public shares work (server#57671)
      • Fix(UserPlugin): Rewrite from scratch (server#57674)
      • Fix(security): Update Expires time (server#57686)
      • Build(deps): bump libphonenumber-js from 1.12.34 to 1.12.35 (server#57699)
      • Build(deps): bump @nextcloud/vue from 8.35.2 to 8.35.3 (server#57705)
      • Build(deps): bump core-js from 3.47.0 to 3.48.0 (server#57708)
      • Build(deps): bump lodash from 4.17.21 to 4.17.23 (server#57712)
      • Build(deps-dev): bump tar from 7.5.3 to 7.5.6 (server#57715)
      • Build(deps-dev): bump sass from 1.97.2 to 1.97.3 (server#57719)
      • Fix(userconfig): duplicate core lexicon (server#57743)
      • Fix(caldav): Enhance UID check for base component (server#57769)
      • Build(deps-dev): bump puppeteer from 24.35.0 to 24.36.0 (server#57779)
      • Feat(flake): Add reuse cli (server#57806)
      • Fix(TaskProcessing): Fix occ commands to cast strings to integer (server#57812)
      • Chore: remove X from social links (server#57817)
      • Fix(search): All elements are included regardless of their keys (server#57823)
      • Fix(composer): Set overwrite.cli.url in serve script (server#57833)
      • Ci(actions): Satisfy zizmor (server#57850)
      • Pinact run (server#57916)
      • Add InstallationCompletedEvent for post-installation actions (server#57923)
      • Fix(security): Update code signing revocation list (server#57946)
      • Build(deps-dev): bump puppeteer from 24.36.0 to 24.36.1 (server#57958)
      • Build(deps-dev): bump css-loader from 7.1.2 to 7.1.3 (server#57959)
      • Build(deps-dev): bump phpunit/phpunit from 9.6.31 to 9.6.34 in /build/integration (server#57960)
      • Build(deps-dev): bump symfony/event-dispatcher from 6.4.25 to 6.4.32 in /build/integration (server#57961)
      • Build(deps): bump phpunit/phpunit from 9.6.31 to 9.6.34 in /vendor-bin/phpunit (server#57962)
      • Build(deps-dev): bump tar from 7.5.6 to 7.5.7 (server#57963)
      • Build(deps): bump libphonenumber-js from 1.12.35 to 1.12.36 (server#57964)
      • Build(deps): bump @nextcloud/upload from 1.11.0 to 1.11.1 (server#57965)
      • Fix(files_external): Respect explicit port configuration (server#57995)
      • Fix(app-settings): limit app to group initial state (server#58006)
      • Fix(federation): Don’t ask the database for an empty url (server#58012)
      • Fix(files_sharing): add missing import of `NcIconSvgWrapper` (server#58040)
      • Fix(comments): Put a limit to the limit (server#58046)
      • 31.0.14 RC1 (server#58049)
      • Build(deps): bump webdav from 5.8.0 to 5.9.0 (server#58066)
      • Build(deps-dev): bump @babel/node from 7.28.6 to 7.29.0 (server#58068)
      • Build(deps-dev): bump stylelint-use-logical from 2.1.2 to 2.1.3 (server#58071)
      • Build(deps-dev): bump cypress-split from 1.24.25 to 1.24.28 (server#58074)
      • Build(deps-dev): bump webpack from 5.104.1 to 5.105.0 (server#58077)
      • Build(deps-dev): bump msw from 2.12.7 to 2.12.8 (server#58079)
      • Build(deps): bump @nextcloud/vue from 8.35.3 to 8.36.0 (server#58082)
      • Build(deps-dev): bump @zip.js/zip.js from 2.8.15 to 2.8.16 (server#58084)
      • Chore: Improve SVG handling in link previews (server#58103)
      • Fix: pass only necessary information when deleting mulitple objects (server#58255)
      • 31.0.14 (server#58259)
    • activity
      • Update nextcloud/ocp dependency (activity#2307)
      • Update nextcloud/ocp dependency (activity#2334)
      • Fix: rework attributes (activity#2356)
    • app_api
      • Fix(daemon-name): check for forbidden character in daemon name (app_api#742)
      • Fix(CI): manual backport of #768 (app_api#772)
      • Chore(deps): update NPM axios package (app_api#776)
    • bruteforcesettings
      • Fix npm audit (bruteforcesettings#928)
      • Update nextcloud/ocp dependency (bruteforcesettings#946)
      • Update nextcloud/ocp dependency (bruteforcesettings#970)
    • circles
      • Update nextcloud/ocp dependency (circles#2281)
      • Fix(population): exclude nested circles from population counts (circles#2305)
      • Allow admins to edit circle details (circles#2316)
      • Update nextcloud/ocp dependency (circles#2320)
      • Fix(groups): add repair step for group circles sync and adjust ‘circles:sync –groups’ command (circles#2323)
    • files_downloadlimit
      • Update nextcloud/ocp dependency (files_downloadlimit#676)
    • files_pdfviewer
      • Fix npm audit (files_pdfviewer#1336)
      • Fix: Show save button in secondary toolbar for editable files (files_pdfviewer#1337)
      • Chore(deps-dev): Bump phpunit/phpunit from 9.6.22 to 9.6.33 (files_pdfviewer#1353)
    • firstrunwizard
      • Update nextcloud/ocp dependency (firstrunwizard#1839)
      • Fix npm audit (firstrunwizard#1844)
      • Fix npm audit (firstrunwizard#1897)
      • Fix npm audit (firstrunwizard#1943)
    • logreader
      • Fix npm audit (logreader#1873)
      • Update nextcloud/ocp dependency (logreader#1892)
      • Fix npm audit (logreader#1893)
      • Fix npm audit (logreader#1900)
      • Chore(deps-dev): bump phpunit/phpunit from 9.6.22 to 9.6.33 (logreader#1906)
      • Update nextcloud/ocp dependency (logreader#1911)
    • nextcloud_announcements
      • Fix(crawler): Skip notifications code completely in first run (nextcloud_announcements#564)
      • Update nextcloud/ocp dependency (nextcloud_announcements#571)
      • Ci: update all workflow templates from organization template repository (nextcloud_announcements#577)
      • Update nextcloud/ocp dependency (nextcloud_announcements#583)
    • notifications
      • Fix npm audit (notifications#2723)
      • Update nextcloud/ocp dependency (notifications#2737)
      • Update nextcloud/ocp dependency (notifications#2739)
      • Fix npm audit (notifications#2756)
      • Fix npm audit (notifications#2770)
      • Fix(push): Limit device deletion by push-proxy (notifications#2776)
      • Update nextcloud/ocp dependency (notifications#2779)
      • Update nextcloud/ocp dependency (notifications#2783)
    • password_policy
      • Fix: update `axios` (password_policy#885)
      • Chore(deps-dev): Bump typescript from 5.8.2 to 5.8.3 (password_policy#890)
      • Chore(deps): Bump @nextcloud/dialogs from 6.3.1 to 6.3.2 (password_policy#892)
    • photos
      • Fix npm audit (photos#3276)
      • Update nextcloud/ocp dependency (photos#3366)
      • Update nextcloud/ocp dependency (photos#3392)
    • related_resources
      • Fix npm audit (related_resources#677)
    • serverinfo
      • Update nextcloud/ocp dependency (serverinfo#928)
      • Update nextcloud/ocp dependency (serverinfo#941)
      • Update nextcloud/ocp dependency (serverinfo#949)
    • suspicious_login
      • Ci(actions): Apply some hardenings for zizmor (suspicious_login#1071)
    • text
      • Update nextcloud/ocp dependency (text#8150)
      • Fix: preserve OCA.Text properties in public share script (text#8160)
      • Fix: add break extension to table editor (text#8175)
      • Ci(actions): Satisfy zizmor (text#8199)
      • Chore: Improve session validation (text#8237)
      • Fix/hide link decoration in read-only mode (text#8257)
    • twofactor_nextcloud_notification
      • Fix npm audit (twofactor_nextcloud_notification#1163)
      • Ci: update all workflow templates from organization template repository (twofactor_nextcloud_notification#1165)
      • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1188)
      • Fix npm audit (twofactor_nextcloud_notification#1192)
      • Fix npm audit (twofactor_nextcloud_notification#1198)
      • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1206)
    • twofactor_totp
      • Fix(deps): update npm packages manually (twofactor_totp#1714)

     

• server
  • Feat(log): Add script name and occ command to log details (server#56852)
  • Feat(admin_audit): Log cache insert/delete to audit log (server#56856)
  • Build(deps-dev): bump msw from 2.12.3 to 2.12.4 (server#56895)
  • Fix(files_sharing): Allow removing password from link shares (server#56914)
  • Fix(settings): Improve mail test error handling and logging (server#56934)
  • Fix: calendar subscription memory exhaustion (server#56939)
  • Build(deps-dev): bump phpunit/phpunit from 9.6.29 to 9.6.31 in /build/integration (server#56945)
  • Build(deps): bump phpunit/phpunit from 9.6.29 to 9.6.31 in /vendor-bin/phpunit (server#56947)
  • Build(deps-dev): bump jsdom from 27.2.0 to 27.3.0 (server#56949)
  • Build(deps): bump dompurify from 3.3.0 to 3.3.1 (server#56951)
  • Fix(sharing): allow federated shares to non-trusted servers (server#56968)
  • Fix: Fix orphan shares blocking moving other shares (server#56970)
  • Fix(unified-search): prevent provider disabling on content filter apply (server#56975)
  • Fix(files_sharing): Normalize dir type to folder for federated shares (server#57002)
  • Fix(security): Update code signing revocation list (server#57030)
  • Fix: do not truncate birth year to 1970 (server#57048)
  • Fix(templates): deduplicate provider templates (server#57053)
  • Build(deps): bump @nextcloud/paths from 2.3.0 to 2.4.0 (server#57067)
  • Build(deps): bump @nextcloud/vue from 8.34.0 to 8.35.0 (server#57069)
  • Fix(css): correct boundaries of breaking points (server#57087)
  • Fix(TaskProcessing): Increase EShapeType::Text limit to 512 KB (server#57089)
  • Fix(dav): catch NotFound exception in UploadHome::childExists() (server#57103)
  • Fix(shares): Fix infinite loop when all shares are invalid (server#57106)
  • Build(deps): Bump guzzlehttp/guzzle from 7.9.2 to 7.9.3 (server#57161)
  • Build(deps): Bump the symfony group with 9 updates (server#57175)
  • Build(deps): bump doctrine/dbal from 3.10.2 to 3.10.4 (server#57182)
  • Fix(ocm): fully disable signed request on config (server#57183)
  • Build(deps): Bump web-auth/webauthn-lib from 4.9.1 to 4.9.2 (server#57188)
  • Build(deps): Bump @nextcloud/dialogs from 6.4.1 to 6.4.2 (server#57210)
  • Build(deps): Bump libphonenumber-js from 1.12.29 to 1.12.33 (server#57211)
  • Build(deps-dev): Bump puppeteer from 24.31.0 to 24.34.0 (server#57212)
  • Build(deps): Bump @nextcloud/files from 3.12.0 to 3.12.2 (server#57213)
  • Build(deps-dev): Bump webpack from 5.103.0 to 5.104.1 (server#57214)
  • Build(deps-dev): Bump sass from 1.94.2 to 1.97.1 (server#57215)
  • Fix(security): Update code signing revocation list (server#57260)
  • Build(deps-dev): bump jsdom from 27.3.0 to 27.4.0 (server#57264)
  • Build(deps-dev): bump msw from 2.12.4 to 2.12.6 (server#57265)
  • Build(deps): bump focus-trap from 7.6.6 to 7.7.0 (server#57266)
  • Fix(NewUserDialog): update group selection to prevent admin group from being assigned as subadmin (server#57294)
  • Feat: add an option to filter what paths get checked for updates (server#57298)
  • Build(deps): bump focus-trap from 7.7.0 to 7.7.1 (server#57321)
  • Build(deps-dev): bump msw from 2.12.6 to 2.12.7 (server#57322)
  • Feat: don’t gate perBucket object store configuration behind multibucket (server#57345)
  • Fix: Ensure CLOUD key exists before resolving Cloud ID (server#57359)
  • Fix: allow moving from of non-resharable to other share if the user has delete permissions (server#57369)
  • Fix(team-manager): team is already teamid (server#57377)
  • Fix(security): Update code signing revocation list (server#57389)
  • 31.0.13 RC1 (server#57396)
  • Feat(Config.php): change `array_merge` to `array_replace_recursive` when merging configs (server#57400)
  • Fix: Unify handling of exclude groups in contacts menu and sharing (server#57415)
  • Fix(controller): Support native int ranges (server#57417)
  • Fix(l10n): Fix language selection (server#57419)
  • Chore: add chunked queries on `occ sharing:delete-orphan-shares` (server#57424)
  • Build(deps): bump aws/aws-sdk-php from 3.324.13 to 3.369.9 (server#57429)
  • 31.0.13 (server#57547)
• 3rdparty
  • Build(deps): Bump web-auth/webauthn-lib from 4.9.1 to 4.9.2 (3rdparty#2034)
  • Build(deps): Bump guzzlehttp/guzzle from 7.9.2 to 7.9.3 (3rdparty#2069)
  • Build(deps): bump doctrine/dbal from 3.10.2 to 3.10.4 (3rdparty#2221)
  • Build(deps): Bump the symfony group with 9 updates (3rdparty#2231)
  • Build(deps): bump aws/aws-sdk-php from 3.324.13 to 3.369.9 (3rdparty#2256)
• activity
  • Update nextcloud/ocp dependency (activity#2273)
  • Build(deps): Bump axios (activity#2302)
• bruteforcesettings
  • Update nextcloud/ocp dependency (bruteforcesettings#886)
  • Fix npm audit (bruteforcesettings#888)
  • Update nextcloud/ocp dependency (bruteforcesettings#926)
• circles
  • Update nextcloud/ocp dependency (circles#2262)
  • Fix empty memberlist (circles#2270)
  • Update nextcloud/ocp dependency (circles#2272)
  • Fix: allow owner to leave a circle (circles#2285)
• files_downloadlimit
  • Update nextcloud/ocp dependency (files_downloadlimit#651)
• files_pdfviewer
  • Fix npm audit (files_pdfviewer#1316)
  • Fix npm audit (files_pdfviewer#1329)
• firstrunwizard
  • Update nextcloud/ocp dependency (firstrunwizard#1794)
  • Fix npm audit (firstrunwizard#1796)
• logreader
  • Fix npm audit (logreader#1844)
  • Update nextcloud/ocp dependency (logreader#1854)
  • Fix npm audit (logreader#1857)
  • Fix npm audit (logreader#1863)
  • Fix(LogController): prevent iterator from jumping over the last item (logreader#1866)
  • Update nextcloud/ocp dependency (logreader#1870)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#551)
  • Update nextcloud/ocp dependency (nextcloud_announcements#560)
• notifications
  • Fix npm audit (notifications#2694)
  • Update nextcloud/ocp dependency (notifications#2697)
  • Fix npm audit (notifications#2704)
  • Fix npm audit (notifications#2712)
  • Update nextcloud/ocp dependency (notifications#2715)
  • Update nextcloud/ocp dependency (notifications#2719)
• photos
  • Update nextcloud/ocp dependency (photos#3313)
  • Update nextcloud/ocp dependency (photos#3352)
• privacy
  • Chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1 (privacy#1160)
  • Fix npm audit (privacy#1164)
• recommendations
  • Fix npm audit (recommendations#930)
  • Fix(deps): migrate from `@nextcloud/vue-dashoard` to `@nextcloud/vue` (recommendations#966)
• serverinfo
  • Update nextcloud/ocp dependency (serverinfo#907)
• text
  • Update nextcloud/ocp dependency (text#8022)
  • Feat: Add table-only editor API (text#8029)
  • Fix updating node dist files (text#8048)
  • Fix(deps): update dependency @nextcloud/files to ^3.12.1 (text#8051)
  • Fix(deps): update dependency @nextcloud/logger to ^3.0.3 (text#8054)
  • Fix(deps): update dependency @nextcloud/router to ^3.1.0 (text#8055)
  • Fix(ci): add back token parameter to checkout action in update-node-dist (text#8062)
  • Fix: first action in empty document cannot be undone (text#8069)
  • Fix(ImageView): Use `mouseenter` instead of `mouseover` (text#8071)
  • Update nextcloud/ocp dependency (text#8098)
  • Fix(deps): update dependency @nextcloud/files to ^3.12.2 (text#8104)
  • Fix(deps): update dependency y-protocols to ^1.0.7 (text#8105)
  • Fix(deps): update yjs (text#8106)
  • Fix: expose getHtml() to editor api (text#8109)
  • Fix(deps): update dependency lib0 to ^0.2.116 (text#8123)
  • Fix(ci): Only build Assistant from git for main branch (text#8124)
  • Fix(deps): update yjs (text#8130)
• twofactor_nextcloud_notification
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1138)
  • Fix npm audit (twofactor_nextcloud_notification#1143)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1147)
  • Fix npm audit (twofactor_nextcloud_notification#1154)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1158)
• twofactor_totp
  • Fix(deps): bump axios (twofactor_totp#1699)

• server
  • Fix(systemtags): Provide initial state for admin restriction setting (server#55278)
  • Fix(encryption): do not setup filesystem without permissions (server#55356)
  • Fix(sharing): Allow reasonable control for ‘Hide download’ on fed shares (server#56178)
  • Build(deps): bump @nextcloud/password-confirmation from 5.3.1 to 5.3.2 (server#56324)
  • Build(deps): bump @nextcloud/vue from 8.29.2 to 8.34.0 (server#56333)
  • Fix: don’t suggest files:scan with object store in info:file (server#56435)
  • Fix(core): RTL legacy snapper width (server#56449)
  • Build(deps-dev): bump typescript from 5.8.3 to 5.9.3 (server#56470)
  • Build(deps-dev): bump @babel/node from 7.27.1 to 7.28.0 (server#56471)
  • Build(deps): bump @nextcloud/capabilities from 1.2.0 to 1.2.1 (server#56473)
  • Build(deps): bump @nextcloud/router from 3.0.1 to 3.1.0 (server#56474)
  • Build(deps): bump @nextcloud/paths from 2.2.1 to 2.3.0 (server#56475)
  • Build(deps): bump focus-trap from 7.6.5 to 7.6.6 (server#56476)
  • Build(deps): bump @nextcloud/browserslist-config from 3.1.0 to 3.1.2 (server#56477)
  • Build(deps-dev): bump @testing-library/jest-dom from 6.6.3 to 6.9.1 (server#56478)
  • Build(deps-dev): bump @nextcloud/typings from 1.9.1 to 1.10.0 (server#56479)
  • Build(deps-dev): bump msw from 2.12.0 to 2.12.2 (server#56482)
  • Feat(profiler): Use gzdecode/gzencode to parse profiles (server#56507)
  • Fix(files): Do not fail on missing sidebar in files list (server#56514)
  • Feat: Add option to update the public key of a user (server#56525)
  • Fix(files_reminder): prevent setting reminder in the past (server#56534)
  • Feat(objectstore): add configurable S3 retry attempts (server#56542)
  • Fix: mp3info break frame parsing on short frames (server#56553)
  • Allow configuring multiple object store backends (server#56557)
  • Fix(settings): Reactive UI updates for app group limitations (server#56568)
  • Build(deps-dev): bump sass from 1.94.0 to 1.94.2 (server#56600)
  • Build(deps-dev): bump webpack from 5.102.1 to 5.103.0 (server#56601)
  • Build(deps-dev): bump @zip.js/zip.js from 2.8.10 to 2.8.11 (server#56602)
  • Build(deps): bump libphonenumber-js from 1.12.9 to 1.12.29 (server#56603)
  • Build(deps-dev): bump puppeteer from 24.29.1 to 24.31.0 (server#56604)
  • Build(deps-dev): bump @types/dockerode from 3.3.41 to 3.3.47 (server#56605)
  • Feat: emit an event when an S3 bucket is created (server#56616)
  • Build(deps-dev): bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (server#56637)
  • Build(deps-dev): bump workbox-webpack-plugin from 7.3.0 to 7.4.0 (server#56640)
  • Build(deps-dev): bump msw from 2.12.2 to 2.12.3 (server#56641)
  • Build(deps-dev): bump stylelint from 16.25.0 to 16.26.0 (server#56642)
  • Build(deps): bump core-js from 3.46.0 to 3.47.0 (server#56644)
  • Fix(encryption): Increment `lastChunkNr` when size is off (server#56653)
  • Fix(files_sharing): Allow deleting a share of a missing file (server#56656)
  • Fix(CalDAV): imip set language per user (server#56665)
  • Fix(l10n): do not consider user language when getting the generic one (server#56667)
  • Fix(files_sharing): Hide ‘Open locally’ action (server#56737)
  • Build(deps-dev): bump stylelint from 16.26.0 to 16.26.1 (server#56752)
  • Fix(files_sharing): sidebar link share password checkbox (server#56762)
  • Feat(CertificateManager): Add option to specify the default certificates bundle path (server#56765)
  • Fix(oracle): Add a warning for Oracle 11 (server#56775)
  • Feat(ObjectStore): Allow overriding arguments per bucket (server#56777)
  • Fix(QuotaPlugin): Always check the quota before moving (server#56786)
  • Fix(s3): rename ‘Amazon S3’ to ‘S3 Storage’ (server#56799)
  • Fix(security): Update CA certificate bundle (server#56815)
  • Debt(files): Remove regular stats request (server#56823)
  • Chore(deps): Update flake to 25.11 and haze to 2.1.3 (server#56828)
  • 31.0.12 RC1 (server#56833)
  • Refactor(workflowengine): Check if class is correct (server#56839)
  • Fix(sharing): Add isTrustedServer flag to lookup results (server#56844)
  • Fix(trashbin): deletedBy of a file from a federated folder (server#56848)
  • 31.0.12 RC2 (server#56854)
  • Patch the version file to allow upgrading from owncloud > v10.13 (server#56868)
  • Feat(files): Add support for `storage-id` and `path` in RepairTree command (server#56871)
  • Fix(flake): Allow using EOL PHP versions (server#56912)
  • 31.0.12 RC3 (server#56916)
  • Fix(dav): handle HTML in CalDAV invitations (server#56964)
  • Fix(comments): Check comment object (server#56984)
  • 31.0.12 (server#56990)
• 3rdparty
  • Fix: mp3info break frame parsing on short frames (3rdparty#2202)
• activity
  • Fix(emails): catch server connection exceptions (activity#2234)
  • Chore: pin php and nexctloud ocp version for psalm (activity#2236)
  • Update nextcloud/ocp dependency (activity#2250)
  • Update nextcloud/ocp dependency (activity#2263)
• app_api
  • Feat(docker-29): set minimum docker engine API version to v1.44 (app_api#701)
  • Fix: APCu cache condition (app_api#707)
• circles
  • Update nextcloud/ocp dependency (circles#2072)
  • Fix: replace circle/circles text with team/teams (circles#2228)
  • Ci: update all workflow templates from organization template repository (circles#2247)
  • Add auto-approve and merge workflow for Nextcloud OCP (circles#2249)
  • Fix(members): minlevel on initiator (circles#2258)
• files_downloadlimit
  • Update nextcloud/ocp dependency (files_downloadlimit#629)
  • Update nextcloud/ocp dependency (files_downloadlimit#643)
• files_pdfviewer
  • Fix npm audit (files_pdfviewer#1295)
  • Fix(deps): Use correct version of vue-loader (files_pdfviewer#1308)
• logreader
  • Fix npm audit (logreader#1815)
  • Chore: update workflows (logreader#1822)
  • Update nextcloud/ocp dependency (logreader#1831)
  • Update nextcloud/ocp dependency (logreader#1842)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#549)
• notifications
  • Fix npm audit (notifications#2651)
  • Chore: update workflows (notifications#2658)
  • Update nextcloud/ocp dependency (notifications#2660)
  • Update nextcloud/ocp dependency (notifications#2674)
  • Fix npm audit (notifications#2677)
• photos
  • Revert “Revert “fix: Disable ReverseGeoCoderService when the server has no internet”” (photos#3332)
• privacy
  • Ci: update all workflow templates from organization template repository (privacy#1216)
• recommendations
  • Ci: update all workflow templates from organization template repository (recommendations#943)
• related_resources
  • Ci: update all workflow templates from organization template repository (related_resources#773)
• serverinfo
  • Update nextcloud/ocp dependency (serverinfo#898)
• suspicious_login
  • Ci: update all workflow templates from organization template repository (suspicious_login#1048)
  • Chore(github): remove st3iny as maintainer (suspicious_login#1053)
• text
  • Ci: update all workflow templates from organization template repository (text#7921)
  • Update nextcloud/ocp dependency (text#7952)
  • Fix(TextDirection): Skip composition transactions (text#7984)
  • Ci: update all workflow templates from organization template repository (text#7988)
  • Update nextcloud/ocp dependency (text#7995)
  • Test: Use example.org instead of nextcloud.com for testing links (text#8000)
  • Fix: increase websocket timeout for background throttling (text#8007)
  • Fix: Properly check for array of authenticated share ids (text#8011)
• twofactor_nextcloud_notification
  • Fix npm audit (twofactor_nextcloud_notification#1115)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1130)
  • Fix npm audit (twofactor_nextcloud_notification#1134)
• twofactor_totp
  • Ci: update all workflow templates from organization template repository (twofactor_totp#1658)
  • Chore: update package lock format (twofactor_totp#1660)
  • Fix: add BFP to the enable route (twofactor_totp#1681)
  • Perf: load totp secret just once for verification (twofactor_totp#1684)
• updater
  • Fix(download): download fail with only one URL (updater#696)
• viewer
  • Fix: svg rendering (viewer#3025)
  • Ci: update all workflow templates from organization template repository (viewer#3031)

• server
  • Fix: Pass over product name as capability (server#53586)
  • Fix(TaskProcessing): Make sure list command int filter parameters are parsed as ints (server#55603)
  • Fix(sharing): Adapt share suggestions to match trusted servers configs (server#55643)
  • Fix: iMip reply from outlook.com does not contain organizer property (server#55764)
  • Fix(Apps): fix install command check on existing apps (server#55831)
  • Test: adjust cypress tests for changes filter behavior (server#55896)
  • Fix(FilesPicker): Prevent selection of nodes without create permission (server#55899)
  • Add font-variant-numeric to selected files list (server#55905)
  • Fix: join accounts_data instead of preferences when searching users (server#55957)
  • Fix(dav): allow multiple link shares token in session (server#55962)
  • Fix(NewUserDialog): allow to deselect a group from the list (server#55975)
  • Fix(federation): Allow outgoing and incoming federation with oCIS federated cloud ids (server#55976)
  • Validate filename when creating file from template (server#55979)
  • Fix(files_sharing): Only send password on change (server#55982)
  • Fix: make share recursion error more informative (server#55985)
  • Fix(bfp): Trim meta data so it can still be stored (server#56028)
  • Fix(profiler): Harden profiler writes (server#56031)
  • Fix(CalDav): use old event information if new is missing (server#56054)
  • Fix(files): make sure drag-and-drop and the upload menu behaves the same (server#56065)
  • Fix(Mailer): Log errors (server#56097)
  • Chore(l10n): Use numbered placeholders (server#56141)
  • Fix: adjust npm version to resolve corepack issue (dependabot) (server#56157)
  • Fix(pagination): render multistatus to XML before caching (server#56180)
  • Chore(i18n): Adapted spelling of MIME type (server#56182)
  • Fix(jobs): Limit command jobs to known cases (server#56187)
  • Fix(security): Update CA certificate bundle (server#56206)
  • Fix(files_versions): Add user to error message (server#56213)
  • Fix(files_versions): Do not assume source exist when migrating versions to new storage (server#56229)
  • Feat(EphemeralSessions): Introduce lax period (server#56234)
  • Fix: Force direct login after password reset (server#56246)
  • Chore(i18n): Fixed plural strings (server#56253)
  • Build(deps-dev): bump jsdoc from 4.0.4 to 4.0.5 (server#56257)
  • Build(deps): bump core-js from 3.43.0 to 3.46.0 (server#56258)
  • Build(deps-dev): bump puppeteer from 24.10.2 to 24.29.1 (server#56259)
  • Build(deps-dev): bump mime from 4.0.7 to 4.1.0 (server#56260)
  • Build(deps-dev): bump ts-loader from 9.5.2 to 9.5.4 (server#56261)
  • Build(deps): bump @nextcloud/browser-storage from 0.4.0 to 0.5.0 (server#56262)
  • Build(deps-dev): bump tar from 7.4.3 to 7.5.2 (server#56263)
  • Build(deps-dev): bump wait-on from 8.0.3 to 8.0.5 (server#56264)
  • Build(deps-dev): bump msw from 2.10.2 to 2.12.0 (server#56266)
  • Build(deps): bump query-string from 9.2.1 to 9.3.1 (server#56267)
  • Build(deps): bump @nextcloud/upload from 1.10.0 to 1.11.0 (server#56268)
  • Build(deps): bump @nextcloud/calendar-availability-vue from 2.2.6 to 2.2.11 (server#56269)
  • Build(deps-dev): bump @nextcloud/babel-config from 1.2.0 to 1.3.0 (server#56271)
  • Build(deps-dev): bump cypress-split from 1.24.18 to 1.24.25 (server#56272)
  • Build(deps): bump dompurify from 3.2.6 to 3.3.0 (server#56274)
  • Build(deps-dev): bump dockerode from 4.0.7 to 4.0.9 (server#56275)
  • Build(deps-dev): bump @vitejs/plugin-vue2 from 2.3.3 to 2.3.4 (server#56276)
  • Build(deps-dev): bump cypress-axe from 1.6.0 to 1.7.0 (server#56323)
  • Build(deps-dev): bump webpack from 5.99.9 to 5.102.1 (server#56325)
  • Build(deps-dev): bump sass-loader from 16.0.5 to 16.0.6 (server#56326)
  • Build(deps-dev): bump @babel/preset-typescript from 7.27.1 to 7.28.5 (server#56327)
  • Build(deps): bump @nextcloud/event-bus from 3.3.2 to 3.3.3 (server#56328)
  • Build(deps-dev): bump @nextcloud/stylelint-config from 3.1.0 to 3.1.1 (server#56329)
  • Build(deps-dev): bump sass from 1.89.2 to 1.93.3 (server#56330)
  • Build(deps-dev): bump stylelint from 16.21.0 to 16.25.0 (server#56331)
  • Build(deps-dev): bump @testing-library/cypress from 10.0.3 to 10.1.0 (server#56332)
  • Build(deps-dev): bump @zip.js/zip.js from 2.7.62 to 2.8.10 (server#56334)
  • Fix(team-api): get all teams details in a single request (server#56342)
  • Fix(unified-search): Remove hard-coded search result limit (server#56344)
  • Feat: add occ command to scan and delete orphaned keys (server#56348)
  • 31.0.11 RC1 (server#56351)
  • Fix(security): Update code signing revocation list (server#56358)
  • Add AI input limits (server#56368)
  • Fix(files_external): check for changes when saving settings (server#56375)
  • Feat(rate-limit): Allow overwriting the rate limit (server#56381)
  • Fix user collaborators returned when searching for mail collaborators (server#56385)
  • Build(deps): Bump symfony/http-foundation to 6.4.29 (server#56403)
  • Make failed availability check apply in the same request (server#56406)
  • Fix: Clear mount cache when file storage changes during move (server#56418)
  • Add rememberme checkbox (server#56421)
  • Fix(encryption): Add the script to test encryption status only on logged in pages (server#56422)
  • Fix(lostpassword): Delete lost password token on password change (server#56432)
  • 31.0.11 RC2 (server#56443)
  • Fix(unified-search): Register config lexicon of core so the default i… (server#56521)
  • 31.0.11 (server#56528)
• 3rdparty
  • Build(deps): Bump symfony/http-foundation to 6.4.29 (3rdparty#2186)
• activity
  • Update nextcloud/ocp dependency (activity#2168)
  • Update nextcloud/ocp dependency (activity#2213)
  • Fix: catch NotFoundException when user is resharer (activity#2217)
• bruteforcesettings
  • Fix npm audit (bruteforcesettings#853)
  • Fix(deps): Fix package-lock.json (bruteforcesettings#854)
  • Fix npm audit (bruteforcesettings#875)
  • Ci(ocp): Fix broken OCP update due to wrong PHP requirement (bruteforcesettings#881)
• circles
  • Improve action on multi-teams (circles#2207)
  • Refactoring activities (circles#2209)
  • Allow test during :check (circles#2214)
  • Limit event to configured interface (circles#2217)
• files_downloadlimit
  • Update nextcloud/ocp dependency (files_downloadlimit#586)
  • Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.0.1 to 3.1.1 (files_downloadlimit#595)
  • Fix(deps): Fix package-lock.json (files_downloadlimit#602)
  • Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 (files_downloadlimit#619)
  • Update nextcloud/ocp dependency (files_downloadlimit#623)
• firstrunwizard
  • Update nextcloud/ocp dependency (firstrunwizard#1739)
  • Fix npm audit (firstrunwizard#1740)
  • Chore(deps-dev): Bump @nextcloud/vite-config from 1.7.0 to 1.7.2 (firstrunwizard#1763)
• logreader
  • Fix npm audit (logreader#1787)
  • Update nextcloud/ocp dependency (logreader#1801)
  • Fix npm audit (logreader#1803)
  • Update nextcloud/ocp dependency (logreader#1811)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#541)
  • Update nextcloud/ocp dependency (nextcloud_announcements#543)
• notifications
  • Fix npm audit (notifications#2607)
  • Ci(actions): Update workflows (notifications#2612)
  • Update nextcloud/ocp dependency (notifications#2624)
  • Fix npm audit (notifications#2635)
  • Update nextcloud/ocp dependency (notifications#2638)
  • Update nextcloud/ocp dependency (notifications#2643)
  • Update nextcloud/ocp dependency (notifications#2649)
• photos
  • Update nextcloud/ocp dependency (photos#3213)
  • Fix npm audit (photos#3214)
  • Fix(albums): Do not overwrite albums on move (photos#3272)
  • Update nextcloud/ocp dependency (photos#3274)
  • Fix(Album): Do not overwrite album on rename (photos#3284)
  • Fix: escaping album names (photos#3288)
  • Fix(Album): Do not close the form on rename error (photos#3294)
  • Fix(Album): Stop replacing navigation button (photos#3298)
  • Fix(Timeline): Scroll to top of app content on route change (photos#3305)
  • Fix(Album): Prevent whitespace only album names (photos#3310)
  • Fix: Disable ReverseGeoCoderService when the server has no internet (photos#3320)
  • Revert “fix: Disable ReverseGeoCoderService when the server has no internet” (photos#3323)
• recommendations
  • Fix(deps): Use correct version of vue-loader (recommendations#934)
• serverinfo
  • Update nextcloud/ocp dependency (serverinfo#891)
• suspicious_login
  • Fix too short DataSet for shuffled samples when there is no unique IP address (suspicious_login#1031)
  • Chore(deps): update php-cs-fixer (suspicious_login#1042)
• text
  • Update nextcloud/ocp dependency (text#7807)
  • Fix(files.js): check,ether “show folder descr.” is set or not (text#7810)
  • Fix: prevent the collision between y-websocket reconnectTimeout and polling interval (text#7824)
  • Chore(deps): update dependency vite to ^5.4.21 (text#7844)
  • Fix(deps): update dependency @nextcloud/notify_push to ^1.3.1 (text#7845)
  • Fix(deps): update tiptap to ^2.26.4 (text#7852)
  • Fix(Markdown): copy full block node if it has more than one child (text#7867)
  • Fix(LinkBubbleView): Don’t choke on invalid URLs (text#7869)
  • Fix(deps): update dependency @nextcloud/event-bus to ^3.3.3 (text#7912)
  • Fix(deps): update dependency @nextcloud/l10n to ^3.4.1 (text#7913)
  • Update nextcloud/ocp dependency (text#7914)
  • Feat: add downloadCallback for Viewer handler (text#7927)
  • Chore: Bump composer autoloader files with composer 2.9.0 (text#7930)
  • Improve share token handling in AttachmentService (text#7935)
• twofactor_nextcloud_notification
  • Fix npm audit (twofactor_nextcloud_notification#1093)
  • Ci(actions): Update workflows (twofactor_nextcloud_notification#1104)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1111)
  • Ci: update all workflow templates from organization template repository (twofactor_nextcloud_notification#1121)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1122)
• updater
  • Fix(download): use mirror for downloading (updater#678)
• viewer
  • Fix: files root detection for public shares (viewer#3008)
  • Feat: Save current state of a file before downloading it (viewer#3017)
  • Fix: ensure fonts are shipped (viewer#3019)

• server
  • Feat(files_trashbin): Refactor expire background job to support parallel run (server#53026)
  • Fix(Streamer): use localtime for ZIP files (server#54487)
  • Fix(theming): correctly parse CSS colors for user primary color picker (server#54522)
  • Fix: aliases and capitalization of emails (server#54771)
  • Fix: TypeError: this.fetchDisplayName is not a function (server#54901)
  • Chore(flake): update haze to 2.1.2 (server#54909)
  • Fix(cache): Set default Redis port to `0` for UNIX sockets (server#54944)
  • Feat(file_sharing): Provide template creator list in public shares (server#54947)
  • Fix: calculate node limit using MiB instead of MB (server#54955)
  • Chore: update `doctrine/dbal` to v3.10.2 (server#54959)
  • Fix: Avoid internal error when logging in with the wrong account to verify email address (server#54975)
  • Fix: don’t show object size warning if we can’t determine the object size (server#54995)
  • Fix(files_trashbin): Fix size propagation when moving file to trash (server#54999)
  • Fix(auth): allow access to dynamic js files during 2FA (server#55022)
  • Fix(security): Update code signing revocation list (server#55050)
  • Fix: update transifex link (server#55070)
  • Fix(files_sharing): use `newPassword` always for the unsaved password (server#55073)
  • Fix(unified-search): make sure date range option is translated (server#55075)
  • Fix(ownCloud): ensure that `accounts.display_name` fits into `users.displayname` (server#55077)
  • Fix(contactsmenu): adjust padding to new design (server#55090)
  • Build(deps-dev): bump phpunit/phpunit from 9.6.25 to 9.6.26 in /build/integration (server#55105)
  • Build(deps): bump phpunit/phpunit from 9.6.25 to 9.6.26 in /vendor-bin/phpunit (server#55107)
  • Fix(auth): Fix invalid unique constraint violation catch (server#55123)
  • Fix: Dispatch favorite event with an actual path (server#55126)
  • Fix(Updater): Lower deadlock log level from warning to info (server#55148)
  • Fix: always use english name for recently contacted category (server#55158)
  • Fix(TaskProcessing): Cache task types by user language (server#55164)
  • Feat(files_sharing): provide web components based API for sidebar (server#55175)
  • Fix(trashbin): Translate Nextcloud exception to Sabre exception (server#55188)
  • Fix(comments): add inline container size query to comment body (server#55194)
  • Build(deps-dev): bump phpunit/phpunit from 9.6.26 to 9.6.27 in /build/integration (server#55215)
  • Build(deps): bump phpunit/phpunit from 9.6.26 to 9.6.27 in /vendor-bin/phpunit (server#55216)
  • Fix(comments): expand long comment on click (server#55244)
  • Fix(github): add labels and milestone to PR checklist (server#55248)
  • Fix: Allow hyphen in appid (server#55250)
  • Feat(db): add SSL/TLS support for PostgreSQL (server#55255)
  • Chore(config): fix typo in config.sample.php comments (server#55268)
  • Fix(comments): explicitly return limbo status of comment (server#55286)
  • Feat: move primary object store configuration to a single place (server#55288)
  • Fix: create room/resource calendar synchronously (server#55291)
  • Feat(Unified search): Use existing min search length setting (server#55299)
  • Fix(core): Stop abusing the cache for avatar upload (server#55302)
  • Fix: Stop infinite loop in ExpireTrash (server#55310)
  • Fix(dav): clean up user’s addressbook shares on deletion (server#55317)
  • Fix(sharing): ensure to check new password (server#55322)
  • Fix(ocm): ignore cache if not setup (server#55325)
  • Fix: add missing sharing options to ui and add full-match results (server#55328)
  • Build(deps-dev): bump phpunit/phpunit from 9.6.27 to 9.6.29 in /build/integration (server#55349)
  • Build(deps): bump phpunit/phpunit from 9.6.27 to 9.6.29 in /vendor-bin/phpunit (server#55351)
  • Fix: small typo fix (server#55408)
  • Fix(files): Stop overwriting scan_permissions (server#55410)
  • Admin-delegation occ – add output option for show command to support JSON formats (server#55429)
  • Fix(appstore): Also catch ClientException and ServerException (server#55436)
  • Fix(appstore): Make appstore timeout configurable (server#55439)
  • Fix(security): Update code signing revocation list (server#55450)
  • Fix: legacy app navigation snapper on RTL layout (server#55464)
  • Fix(IUserManager): Fix deprecation of search method (server#55479)
  • Refactor(ShareApiController): Add more error handling (server#55488)
  • Feat: add header with user id in response (server#55503)
  • Fix(files): Always return a valid mimetype (server#55569)
  • Feat(test-case): allow to use PHPUnit Group attributes to mark tests requiring database (server#55572)
  • Fix(TaskProcessing): Increase MAX_TASK_AGE to 6 months (server#55600)
  • Fix(ooo): don’t catch general DB exceptions (server#55606)
  • Fix(workflowenigne): stricter length header handling (server#55611)
  • Fix(live-photo): Allow files-live-photo meta data with edit permissions (server#55616)
  • Fix(caldav): encoding inconsistencies in event search provider (server#55625)
  • Fix(systemtags): catch empty nodes (server#55635)
  • Internal] Fix admin delegation show all priority items (server#55647)
  • Fix comments when used by other apps (server#55664)
  • Fix(S3): Only append streams if non-seekable (server#55670)
  • Fix(contacts): Do not expose SAB in `/contactsmenu` (server#55701)
  • Fix: disable mp3 preview provider (server#55725)
  • Fix(files): clear search input on directory navigation (server#55737)
  • Fix(files_sharing): correctly handle error in case of failing share creation (server#55740)
  • 31.0.10 RC1 (server#55745)
  • Fix(TextProcessingApiController): Set better attribute on routes (server#55774)
  • Fix(TextToImage): Set better attribute for routes (server#55792)
  • Fix(l10n): Don’t fallback from 3-letter languages to 2-letter (server#55808)
  • Chore: bump @nextcloud/browserslist-config from 3.0.1 to 3.1.0 (server#55825)
  • Fix(dav): Restrict properties allowed object classes (server#55852)
  • Fix: translation on /unsupported screen (server#55877)
  • 31.0.10 RC2 (server#55886)
  • 31.0.10 (server#55959)
• 3rdparty
  • Build(deps): Bump doctrine/dbal from 3.9.4 to 3.10.2 (3rdparty#2094)
• activity
  • Update nextcloud/ocp dependency (activity#2143)
  • Update nextcloud/ocp dependency (activity#2153)
  • Update nextcloud/ocp dependency (activity#2158)
• app_api
  • Fix(exAppArchiveFetcher): correct apps_path handling (app_api#664)
• bruteforcesettings
  • Fix npm audit (bruteforcesettings#813)
  • Fix npm audit (bruteforcesettings#836)
• circles
  • Fix: adjust source names to “Team” instead of cicles (circles#2121)
  • Ignore non-circles share while extracting permissions (circles#2160)
• files_downloadlimit
  • Update nextcloud/ocp dependency (files_downloadlimit#549)
  • Feat: migrate to web components API (files_downloadlimit#551)
  • Chore(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (files_downloadlimit#558)
  • Update nextcloud/ocp dependency (files_downloadlimit#567)
  • Update nextcloud/ocp dependency (files_downloadlimit#576)
• files_pdfviewer
  • Fix npm audit (files_pdfviewer#1263)
  • Fix: Remove unneeded PDF.js web files from release (files_pdfviewer#1286)
• firstrunwizard
  • Chore(deps-dev): Bump vite from 7.1.4 to 7.1.5 (firstrunwizard#1695)
  • Fix npm audit (firstrunwizard#1703)
  • Chore(deps-dev): Bump vite from 7.1.5 to 7.1.6 (firstrunwizard#1710)
  • Update nextcloud/ocp dependency (firstrunwizard#1716)
• logreader
  • Update nextcloud/ocp dependency (logreader#1744)
  • Chore(deps): update dependencies (logreader#1747)
  • Update nextcloud/ocp dependency (logreader#1757)
  • Update nextcloud/ocp dependency (logreader#1762)
  • Fix npm audit (logreader#1766)
  • Update nextcloud/ocp dependency (logreader#1773)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#523)
  • Update nextcloud/ocp dependency (nextcloud_announcements#527)
  • Update nextcloud/ocp dependency (nextcloud_announcements#532)
  • Update nextcloud/ocp dependency (nextcloud_announcements#534)
• notifications
  • Fix npm audit (notifications#2502)
  • Update nextcloud/ocp dependency (notifications#2520)
  • Update nextcloud/ocp dependency (notifications#2541)
  • Update nextcloud/ocp dependency (notifications#2544)
  • Fix npm audit (notifications#2548)
  • Update nextcloud/ocp dependency (notifications#2552)
  • Update nextcloud/ocp dependency (notifications#2554)
  • Fix npm audit (notifications#2576)
  • Create update-stable-titles.yml (notifications#2581)
  • Update nextcloud/ocp dependency (notifications#2585)
• photos
  • Fix npm audit (photos#3165)
  • Chore(deps): Add missing resolved and integrity fields in package-lock.json (photos#3179)
  • Fix(deps): Use vue-loader ^15.11.1 for Vue 2 (photos#3182)
  • Validate album names (photos#3185)
  • Update nextcloud/ocp dependency (photos#3191)
  • Fix empty photos/people tab (photos#3197)
  • Fix npm audit (photos#3203)
  • Feat(PhotoPicker): Do not show non-owned files (photos#3208)
  • Ci(actions): Update workflows from templates (photos#3228)
  • Feat(Albums): Allow deleting an album photo from the viewer (photos#3232)
  • Fix(api): Validate user config values (photos#3236)
• recommendations
  • Fix npm audit (recommendations#911)
• serverinfo
  • Update nextcloud/ocp dependency (serverinfo#879)
  • Update nextcloud/ocp dependency (serverinfo#884)
  • Update nextcloud/ocp dependency (serverinfo#887)
• survey_client
  • Admin ui: fix checkbox toggles not working (survey_client#378)
• text
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.50.2 (text#7619)
  • Chore(deps): update dependency vite to ^5.4.20 (text#7636)
  • Fix(deps): update dependency @nextcloud/dialogs to ^6.3.2 (text#7637)
  • Chore(deps): update dependency cypress-split to ^1.24.22 (text#7642)
  • Fix(readonly-bar): Clean up read-only menu bar to behave consistently with normal menu bar (text#7650)
  • Chore(deps): update dependency cypress-split to ^1.24.23 (text#7659)
  • Fix(deps): update dependency @nextcloud/axios to ^2.5.2 (text#7661)
  • Update nextcloud/ocp dependency (text#7669)
  • Fix: add close button when open readonly files on mobile app (text#7673)
  • Fix: Delete old sessions in cleanup cron (text#7676)
  • Fix(deps): update tiptap to ^2.26.2 (text#7685)
  • Chore(DocumentService): Raise log level for SyncStep2 message to error (text#7696)
  • Fix(sync): lastSavedVersion is version send with the request (text#7698)
  • Chore(deps): update dependency @vitejs/plugin-vue2 to ^2.3.4 (text#7709)
  • Chore(deps): update dependency typescript to ^5.9.3 (text#7710)
  • Update nextcloud/ocp dependency (text#7713)
  • Test(cy): Test against server stable31 on stable31 (text#7722)
  • Feat: Save a checksum for documents and use it to detect conflicts (text#7724)
  • Fix(print): Overwrite `display: grid` to prevent cut content (text#7730)
  • Fix(sync): handle empty push requests (text#7734)
  • Fix(DocumentService): Return 200 steps before saved version in SyncStep2 (text#7736)
  • Revert “chore(DocumentService): Raise log level for SyncStep2 message to error” (text#7739)
  • Fix(code): don’t wrap lines in code blocks, only in plaintext documents (text#7744)
  • Chore: bump version to 5.0.1 (text#7749)
  • Chore(deps): update dependency @nextcloud/stylelint-config to ^3.1.1 (text#7765)
  • Fix(deps): update dependency @nextcloud/auth to ^2.5.3 (text#7767)
  • Fix(deps): update tiptap to ^2.26.3 (text#7768)
  • Update nextcloud/ocp dependency (text#7776)
  • Backport sync fixes to stable31 (text#7779)
  • Fix(PreviewOptions): set active radio button on open (text#7784)
  • Fix(sync): Reset document sessions on upgrade (text#7785)
  • Fix(sync): send first update without initial document state (text#7790)
• twofactor_nextcloud_notification
  • Fix npm audit (twofactor_nextcloud_notification#1058)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1065)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1073)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1078)
  • Fix npm audit (twofactor_nextcloud_notification#1082)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1086)
• updater
  • Chore(ci): update workflows from .github repository (updater#668)
• viewer
  • Update cypress snapshots (viewer#2966)
  • Fix npm audit (viewer#2968)
  • Fix(ImageEditing): controls might hide behind iPadOS home bar (viewer#2986)
  • Fix(Viewer): Provide `id` instead of `fileid` to `File` constructor (viewer#2993)
  • Fix(viewer): address file path composition for subfolders in public shares (viewer#2996)
  • Fix: Cast fileid to int before building the Node object (viewer#2997)

server

• Fix: rework UploadFolder implementation (server#51063)
• Fix(CardDAV): do not ignore move command object target uri (server#54201)
• Feat(cardav): support result truncation for addressbook federation (server#54276)
• Fix(trash): Fix order of metadata deletion (server#54320)
• Enh(unified-search): Smarter load more (server#54333)
• Fix(files): drop usage of FileInfoModel (server#54355)
• Fix(maintenance): refresh page when turned off (sometimes) (server#54359)
• Fix: increase how long we cache display names (server#54361)
• Fix(settings): add missing AI icon (server#54365)
• Fix(files_sharing): Implement conditional federation placeholder (server#54369)
• Fix(installer): ensure valid tempFile & extractDir (server#54373)
• Fix: Fix getting trusted server other than the first (server#54381)
• Fix(ZipFolderPlugin): set mtime of directories in archive (server#54412)
• Fix(search): Fix SearchComposer.php filtering logic (server#54423)
• Perf: ignore any custom property in the nc/oc namespace that isn’t explicitly allowed (server#54425)
• Perf(calendar): Disable custom properties for individual calendar events (server#54427)
• Fix: use double / in strings (server#54478)
• Fix(files_sharing): Also hide own reshares in shared with me section (server#54481)
• Fix(core): unified search is cut off on small window (server#54499)
• Fix(caldav): encode calendar URLs properly when formatting search results (server#54509)
• Feat(ocm): split ocm discovery and capabilities (server#54544)
• Change “core.ProfilePage.index” to lowercase (server#54547)
• Fix(AppManager): Argument must be of type array|object (server#54549)
• Fix(files_sharing): sharing status action permission and sidebar await (server#54555)
• Fix: Fix unique constraint violation in oc_vcategory migration (server#54572)
• Fix(files): filter non batch actions in header (server#54582)
• Fix: use appropriate user agent string when syncing Outlook calendar subscriptions (server#54585)
• Fix(sharing): fix json decoding the list of groups excluded from sharing (server#54596)
• Fix: Make some strings in CodeIntegrity.php translatable (server#54602)
• Chore(flake): Add haze (server#54604)
• Tests: Update testing certificates that expired after 10 years (server#54616)
• Fix(encryption): Fix TypeError when trying to decrypt unencrypted file (server#54628)
• Fix(files_sharing): Correctly reject pending remote shares (server#54635)
• Add commands to set/get/delete/clear the distributed memcache (server#54641)
• Fix(carddav): IAddressBook::getKey() should return a string (server#54652)
• Fix(2fa): Fix 2FA session setup when ephemeral session is used (server#54663)
• Do not always check password checkbox when sharing without password (server#54668)
• Fix(caldav): show confidential event if writable (server#54676)
• Restore “Others with access” section (server#54680)
• Fix(AppConfig#setTypedValue): Catch AppConfigUnknownKeyException (server#54686)
• Fix(TaskProcessingApiController): Don’t allow anonymous access anymore (server#54702)
• Fix(trashbin): Fix errors in the log on MOVE operations (server#54704)
• Feat: allow filtering sharing:delete-orphan-shares by share owner or target (server#54710)
• Fix(deps): Update @nextcloud/vue to v8.29.2 (server#54714)
• Fix(files_versions): retrieve all display names with one request (server#54720)
• Fix(files): verify files are still accessible before downloading (server#54724)
• Fix(files_versions): Use helper function to get versions folder (server#54726)
• Fix(theming): use IAppConfig instead of IConfig to set theming config (server#54740)
• Fix: cast fileid to string in getMountsForFileId (server#54744)
• Fix(files_versions): ensure IDs, Author and Label are strings (server#54767)
• Fix(status.php): Fix samesite cookies (server#54776)
• Fix: resolving conflict when uploading multiple files via drag&drop (server#54780)
• Chore(flake): update haze to 2.1.1 (server#54787)
• Fix: add missing listener (server#54808)
• Fix(dav): ensure moving or copying a file is possible (server#54815)
• Fix(dav): Mark removal of dav object properties as expensive (server#54824)
• Fix(comments): use showFile route to reference files with a matching … (server#54829)
• Fix(Filesystem): use FilenameValidator for `Filesystem::isFileBlacklisted` (server#54844)
• Fix dashboard icons (server#54845)
• Perf(users): Create lazy users in IUserManager::getSeenUsers (server#54849)
• Fix: the account files filter should also work in trashbin (server#54852)
• Fix(security): Update Expires time (server#54866)
• Fix(files_trashbin): Fix size propagation when moving file to trash (server#54971)
• Chore: Use new REUSE format (server#54979)
• Revert “fix(files_trashbin): Fix size propagation when moving file to trash” (server#54997)

activity

• Fix(dashboard): enable rounded icons (activity#2100)
• Perf: pass the node of shares around instead getting the path from id each time (activity#2101)

app_api

• Fix(Memcache-OccService): use “is_array” to support “false” from “cache->get” (app_api#634)

bruteforcesettings

• Ci(github): Update workflows (bruteforcesettings#786)

circles

• Fix(dashboard): enable rounded item icons (circles#2087)
• Fix(share): returns expiration date to front-end (circles#2091)
• Fix: ignore empty expiration date (circles#2095)
• Enh(loopback): ignore on occ (circles#2097)
• Fix(share): extract expiration from cached data (circles#2105)
• Fix federated teams with space-containing userid (circles#2114)
• Fix: feed array (circles#2123)

files_downloadlimit

• Fix: keep track of download count (files_downloadlimit#512)

files_pdfviewer

• Chore: Update GitHub workflows from templates (files_pdfviewer#1249)

firstrunwizard

• Fix: gracefully handle disabled autoplay policies (firstrunwizard#1667)
• Chore: adjust codeowners (firstrunwizard#1687)

password_policy

• Ci(github): Update workflows (password_policy#803)

photos

• Fix: Fallback to icon if collection cover fails to load (photos#3134)
• Fix(deps): Update @nextcloud/sharing to ^0.2.5 (photos#3142)

related_resources

• Fix: add check if app is enabled for RelatedService (related_resources#645)
• Chore(workflows): Update lint-php-cs workflow (related_resources#647)

suspicious_login

• Change attribute name “f1_score” to “f1 score” due to RubixML change (suspicious_login#1023)

text

• Chore(upgrade): mermaid and nextcloud/vue (text#7558)
• Fix(links): do not steal focus on initial loading (text#7602)

updater

• Feat: allow to provide manual URL (updater#643)
• Feat(download): allow to download archives from several URLs (updater#654)

viewer

• Fix: sorting to align with files list (viewer#2935)
• Backport/2946/stable31 (viewer#2948)
• Fix: viewer files router in standalone mode (viewer#2952)
• Feat: only provide fonts which are available (shipped by us) (viewer#2957)
• Feat: add API package to register handlers in init scripts (viewer#2958)

• server
  • Refactor(files): remove custom page title handling (server#53601)
  • Fix(settings): translate pronounce account property (server#53709)
  • Fix TimedJob execution time to allow job execution exactly when scheduled (server#53790)
  • Fix(profile): add max width for the user actions (server#53796)
  • Fix: Correctly show free space if lower than quota in Files navigation (server#53813)
  • Feat(settings): simplify OPcache checks (server#53817)
  • Fix(files_trashbin): Expire trashbin items when space is needed (server#53837)
  • Fix(imip): set charset for imip attachment (server#53838)
  • Fix(settings): change Mastodon only URI to webfinger (server#53843)
  • Fix(files_reminders): Don’t load if disabled for user (server#53854)
  • Fix(federatedfilesharing): Fix external share being deleted when accepting share (server#53858)
  • Fix(files): ensure proper headers lifecycle (server#53880)
  • Fix(systemtags): case-insensitive search & prevent duplicates (server#53888)
  • Fix: Fix theming for disabled accounts (server#53902)
  • Fix: force lowercase emails (server#53907)
  • Fix(Krb): switch away from deprecated and broken KerberosApacheAuth() (server#53912)
  • Fix: hide rename action in trashbin (server#53916)
  • Fix(theming): Correctly generate CSS for font themes (server#53921)
  • Chore(deps): update `@nextcloud/vue` to v8.28.0 (server#53939)
  • Fix(security): Update CA certificate bundle (server#53961)
  • Fix(federation): respect sharing.federation.allowSelfSignedCertificat… (server#53973)
  • Fix: Fix clearing unified search when modal is closed (server#53990)
  • Fix(files_sharing): ensure share folder exists in the settings (server#53999)
  • Feat(appconfig): add searchKeys() (server#54018)
  • Fix(update): Correctly trigger update for auto-disabled local apps (server#54022)
  • Update groupware code owners (server#54023)
  • Fix(settings): verify source of app-discover media (server#54030)
  • Feat(federated-share): forward notification only on remote reshare (server#54032)
  • Fix(files): new folder icon color (server#54039)
  • Fix(appconfig): mark searchKeys() as internal until 32 (server#54042)
  • Fix(TaskProcessingApiController): Improve error handling (server#54046)
  • Fix: group imip log messages by removing principal and uri (server#54053)
  • Fix(files): sort favorites navigation alphabetically (server#54061)
  • Fix(files_sharing): restore state when updating share failed (server#54066)
  • Fix(ConnectionFactory): Apply Oracle connection fix to primary and replica params as well (server#54105)
  • Fix(session): log when ephemeral sessions are closed (server#54106)
  • Fix(cron): Fix infinite loop on ParallelAware blocked jobs (server#54108)
  • Fix(provisioning_api): catch failed user creation (server#54110)
  • Fix(caldav): don’t return cancelled events for upcoming events API (server#54113)
  • Fix(files_sharing): fallback self.crypto.getRandomValues (server#54122)
  • Fix: Use default share folder of the user on share accept (server#54130)
  • Fix: Do not show password dialog when user can not validate password (server#54147)
  • Show nice label when searching in root (server#54148)
  • Feat(files_sharing): Toggle display for trusted server shares (server#54149)
  • Feat(dav): add occ commands to get and set absences (server#54169)
  • Fix: hide guests group from overall principals (server#54174)
  • Chore: remove `nextcloud-vue-collections` and use `@nextcloud/vue` instead (server#54175)
  • Fix: spelling mistake (server#54185)
  • Fix: add missing color select to tags usage query (server#54190)
  • Fix(AppMenu): ensure that aria attributes are set when needed (server#54199)
  • Fix: don’t update cached mountpoints if the request doesn’t have filesystem access (server#54204)
  • Chore(deps-dev): bump symfony/event-dispatcher from 6.4.13 to 6.4.24 in /build/integration (server#54216)
  • Fix(files_sharing): ensure password or date is enabled by default to be enforced (server#54244)
  • Fix: fix oci string length with empty strings (server#54252)
  • Fix(logging): Fix query logging with DateTimeImmutable parameters (server#54254)
  • 31.0.8 RC1 (server#54256)
  • Fix(caldav): get UID value (server#54259)
  • Fix(encryption): Ignore shared files in encrypt-all command (server#54262)
  • Cache IdentityProof keys (server#54265)
  • Fix(core): ensure unique vcategory (server#54270)
  • Fix(files_sharing): only show “shared with me” information if shared (server#54273)
  • Fix(security): Update code signing revocation list (server#54288)
  • Fix: handle smb timeouts as storage not available (server#54295)
  • Fix: validate written size for s3 multipart uploads (server#54297)
  • Fix: Fix button alignment for email templates in Outlook (server#54302)
  • Fix(dav): calculate permissions based on addressbook principal (server#54308)
  • Fix: use correct return value for `has-preview` dav property (server#54315)
  • Feat: allow admins to configure additional sensitive config values (server#54322)
  • 31.0.8 (server#54416)
• 3rdparty
  • Build(deps): Bump icewind/streams from 0.7.7 to 0.7.8 (3rdparty#2037)
• activity
  • Update nextcloud/ocp dependency (activity#2074)
  • Update nextcloud/ocp dependency (activity#2088)
  • Update nextcloud/ocp dependency (activity#2092)
• app_api
  • Fix: streaming (app_api#611)
  • Feat(new-route): added endpoint to call NC getAbsoluteURL (app_api#613)
  • Fix(ocs-route): get absolute URL from overwrite.cli.url (app_api#617)
  • Fix: for transfer encoding causing problems (app_api#622)
• bruteforcesettings
  • Fix npm audit (bruteforcesettings#780)
• circles
  • Fix(Command): Stop re-rendering tables for each row (circles#2062)
  • Chore(dev-deps): Bump nextcloud/ocp package (circles#2065)
  • Fix: translate name of dashboard widget (circles#2075)
• files_downloadlimit
  • Fix npm audit (files_downloadlimit#465)
  • Fix(public): use correct color for header text (files_downloadlimit#495)
  • Update nextcloud/ocp dependency (files_downloadlimit#496)
  • Update nextcloud/ocp dependency (files_downloadlimit#503)
  • Update nextcloud/ocp dependency (files_downloadlimit#506)
• files_pdfviewer
  • Fix npm audit (files_pdfviewer#1234)
• logreader
  • Fix npm audit (logreader#1700)
  • Update nextcloud/ocp dependency (logreader#1703)
  • Update nextcloud/ocp dependency (logreader#1706)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#500)
  • Update nextcloud/ocp dependency (nextcloud_announcements#505)
  • Fix: ensure that Crawler does not run if no internet connection is disabled (nextcloud_announcements#508)
  • Update nextcloud/ocp dependency (nextcloud_announcements#509)
• notifications
  • Fix npm audit (notifications#2433)
  • Update nextcloud/ocp dependency (notifications#2437)
  • Fix npm audit (notifications#2440)
  • Update nextcloud/ocp dependency (notifications#2447)
  • Fix: no notifications icon in header when using locale en (notifications#2459)
• photos
  • Update nextcloud/ocp dependency (photos#3103)
  • Update nextcloud/ocp dependency (photos#3110)
  • Fix: close sidebar on navigation change (photos#3114)
  • Chore(workflows): add update-stable-titles (photos#3115)
• recommendations
  • Fix npm audit (recommendations#897)
  • Fix npm audit (recommendations#900)
  • Fix npm audit (recommendations#904)
• serverinfo
  • Update nextcloud/ocp dependency (serverinfo#849)
  • Update nextcloud/ocp dependency (serverinfo#855)
  • Update nextcloud/ocp dependency (serverinfo#858)
• survey_client
  • Fix(report): Make the last_report lazy so we don’t load it on each request (survey_client#372)
• suspicious_login
  • Fix(deps): bump amphp/parallel to v1.4.4. for PHP8.4 compatibility (suspicious_login#1015)
• text
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.0 (text#7400)
  • Fix(deps): update dependency @nextcloud/sharing to ^0.2.5 (text#7401)
  • Fix(deps): update dependency y-prosemirror to ^1.3.7 (text#7402)
  • Fix(deps): update dependency @nextcloud/files to ^3.11.0 (text#7403)
  • Fix(deps): update dependency mermaid to ^11.8.1 (text#7404)
  • Fix(deps): update tiptap to ^2.26.1 (text#7405)
  • Update nextcloud/ocp dependency (text#7408)
  • Fix(files): workspace implementation (text#7421)
  • Chore(deps): update dependency cypress-split to ^1.24.19 (text#7428)
  • Fix(deps): update dependency @nextcloud/auth to ^2.5.2 (text#7429)
  • Fix(deps): update dependency @nextcloud/l10n to ^3.4.0 (text#7430)
  • Chore(deps): update dependency cypress-split to ^1.24.20 (text#7439)
  • Fix(deps): update dependency @nextcloud/moment to ^1.3.5 (text#7440)
  • Fix(workspace): fix race condition when loading (text#7449)
  • Fix(richworkspace): load after mounted. (text#7451)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.1 (text#7463)
  • Fix(deps): update dependency lib0 to ^0.2.114 (text#7464)
  • Fix(deps): update dependency @nextcloud/vue to ^8.28.0 (text#7465)
  • Fix(deps): update dependency mermaid to ^11.9.0 (text#7466)
  • Several link bubble/preview fixes (text#7476)
  • Chore(deps): update form-data to 4.0.4 (text#7480)
  • Chore(deps): update dependency @nextcloud/vite-config to ^1.6.0 (text#7486)
  • Fix(deps): update dependency @nextcloud/files to ^3.12.0 (text#7487)
  • Fix(keymap): Fix browser keybinding ctrl+del to delete word ahead (text#7492)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.3 (text#7494)
  • Fix(mermaid): Use dark theme if appropriate (text#7498)
  • Update nextcloud/ocp dependency (text#7499)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.46.0 (text#7503)
  • Fix(workspace): toggle right away and only render if needed (text#7506)
  • Fix(share): use relative path in share as davPath for attachments (text#7508)
  • Fixes for TextDirection extension (text#7512)
  • Further TextDirection improvements (text#7515)
  • Fix(TextDirection): Ignore inputRule or collaboration transactions (text#7520)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.46.2 (text#7527)
  • Chore(deps): update dependency typescript to ^5.9.2 (text#7528)
  • Update nextcloud/ocp dependency (text#7532)
  • Fix npm audit (text#7534)
• twofactor_nextcloud_notification
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1028)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1033)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1036)
• twofactor_totp
  • Chore(CI): update workflows (twofactor_totp#1609)
• viewer
  • Fix(deps): update dependency webdav to ^5.8.0 (viewer#2851)
  • Fix: file list update (viewer#2907)
  • Fix(image-editor): open newly created image when closing the image editor (viewer#2909)
  • Fix: image editor dependencies (viewer#2911)
  • Update cypress snapshots (viewer#2913)
  • Fix(workflows): ignore auto title for renovate PRs (viewer#2921)

• server
  • Fix(singularandpluralfiles):implemented ternary operator to handle si… (server#51419)
  • Fix(core): correctly show displayname when picking a file (server#53347)
  • Fix(imip): dont compare events for the reply message (server#53349)
  • Fix(user_ldap): Harmonize parameter obfuscation and serialization accross logging methods (server#53357)
  • Docs(caldav): improve documentation of CalDavBackend::getCalendarsForUserCount (server#53358)
  • Fix(notifications): Fix check for hasNotifiers when all apps use Regi… (server#53365)
  • Fix: Run cleanByMoundId query on all shards (server#53380)
  • Fix(settings): show group label instead of gid in accounts management (server#53411)
  • Test: files_sharing add test for LoadAdditionalListener (server#53416)
  • Test: run all files_external tests for S3 (server#53425)
  • Fix: unblock ffmpeg on some broken videos (server#53431)
  • Fix: allow hinting the shard keys for joined tables (server#53452)
  • Fix(UserRow): fallback to group name in case of undefined availableGroup (server#53509)
  • Fix(files_versions): only handle path updates when there is path (server#53518)
  • Fix(encryption): Do not register user key related event listeners (server#53520)
  • Fix: refactor request token handling and do not update with invalid result (server#53522)
  • Fix(ObjectStore): Make S3 “connect_timeout” option configurable (server#53532)
  • Fix: Fix Undefined array key “flags” on upgrade (server#53536)
  • Fix(core): getRequestToken import typo (server#53543)
  • Fix(files): auto reload sidebar tags on update (server#53545)
  • Fix: hide guests group when searching for principals (server#53546)
  • Fix: do not extract fields for blank template (server#53547)
  • Fix: Set public link upload email notification to opt-in (server#53549)
  • Fix(files_sharing): Hide link shares for users in excluded groups (server#53554)
  • FilesList] Use the correct theming instance name from capabilities (server#53571)
  • Files_versions] Fix sidebar version item style (server#53577)
  • Fix(s3): retry failed multipart uploads with decreased concurrency (server#53581)
  • Fix(files): add plural form for selected nodes (server#53589)
  • Fix: clear opcache after app extraction (server#53591)
  • Feat: add ocs route to get apps enabled for current user (server#53599)
  • Fix(files_sharing): do not double escape the share title (server#53604)
  • Fix: reload login page after password reset (server#53609)
  • Feat: improve logging of fopen failures for smb (server#53612)
  • Fix(core): Make –password-from-env work with NC_PASS everywhere (server#53618)
  • Fix(files_reminders): Join the reminders with the file system metadata (server#53642)
  • Fix CSRF token not being refreshed while a two-factor challenge is ongoing (server#53646)
  • Fix: make Rotate a TimedJob and run every hour (server#53655)
  • Fix: revive always storing lowercased email addresses (server#53660)
  • Fix(admin_audit): Avoid crash when rename event fileid changes (server#53664)
  • Fix(encryption): Catch exceptions in encrypt-all command and continue (server#53666)
  • Feat(occ): Add commands to list all routes and match a single one (server#53672)
  • Fix: don’t scan the same storage multiple times (server#53675)
  • Fix(dav): catch exception on non local account (server#53681)
  • Fix(profile): Consistent email confirmation pages (server#53686)
  • Fix(settings): use correct scope for translations (server#53704)
  • Fix(files_sharing): add mime fallback to public preview too (server#53715)
  • Fix(files_sharing): Stop hiding delete share button in advanced settings menu (server#53724)
  • Perf(dav): Preload dav search with tags/favorites (server#53730)
  • Fix(files_sharing): Hide own reshares (server#53743)
  • Chore(public): Remove unused union type for user mount events (server#53745)
  • Fix: don’t try to get fileid for non exising nodes when serializing events file (server#53748)
  • Fix(ROS): Document hide-download option on files (server#53749)
  • Fix(syslog): open syslog channel on write (server#53758)
  • Perf: Skip photos related properties in custom properties (server#53769)
  • Fix(cypress): add missing PublicShareUtils.ts (server#53772)
  • Fix(files_versions): Log failure to compute node path (server#53782)
  • Feat(taskprocessing): add toggle for AI guest restriction (server#53784)
  • Fix(files): provide boundaries for FileListTableHeaderActions element (server#53786)
  • Fix(files_versions): Log error instead of crashing when event listeners get called on non-existing files (server#53793)
  • Revert “fix(dav): only consider user’s principal for unsharing entries” (server#53891)
• activity
  • Fix(FilesHooks): Catch all exceptions when looking up unrelated users (activity#2063)
• circles
  • Update displayname on new member (circles#2033)
  • Fix: Get Sanitized Name (circles#2036)
  • Ignore eventual duplicate entries (circles#2038)
• files_pdfviewer
  • Fix: Fix content size (files_pdfviewer#1232)
• photos
  • Fix: Set version number to stable and add migration to fix configvalues (photos#3095)
• suspicious_login
  • Fix(php): suppress notice of JsonSerializable::jsonSerialize (suspicious_login#1012)
  • Ci: add fixup check (suspicious_login#997)
• text
  • Fix: Replace attachment file IDs when copying markdown files (text#7307)
  • Fix(files): Add smooth animation via clicking on heading (text#7320)
  • Fix(deps): bump psr/log to v3 for NC 31 (text#7346)
  • Fix(character-count): use the NcActionTexts name prop (text#7373)
  • Debug(SessionMiddleware): Log if we have an invalid session (text#7374)
  • Fix/out of sync (text#7379)
  • Fixed issue nextcloud/notes/#1538 (text#7382)
  • Fix(links): Use custom link handling only for text-only links (text#7387)
  • Revert “debug(SessionMiddleware): Log if we have an invalid session” (text#7392)
• viewer
  • Fix: add route query for image editor (viewer#2862)
  • Fix: image editor focus trap (viewer#2899)

• server
  • Fix(files_sharing): Disable folder upload on file drop shares for now (server#50591)
  • Build(deps-dev): bump phpunit/phpunit from 9.6.22 to 9.6.23 in /build/integration (server#52598)
  • Build(deps): bump phpunit/phpunit from 9.6.22 to 9.6.23 in /vendor-bin/phpunit (server#52599)
  • Build(deps-dev): bump @babel/preset-typescript from 7.27.0 to 7.27.1 (server#52600)
  • Build(deps): bump @nextcloud/dialogs from 6.1.1 to 6.2.0 (server#52602)
  • Build(deps-dev): bump @babel/plugin-transform-private-methods from 7.25.9 to 7.27.1 (server#52603)
  • Build(deps): bump core-js from 3.41.0 to 3.42.0 (server#52605)
  • Feat(files): add command to automatically rename filenames (server#52644)
  • Fix(TaskProcessing): increase task cleanup delay (server#52656)
  • Fix(dav): move orphan cleaning logic to a chunked background job (server#52663)
  • Fix(metadata): set background job on fresh setup (server#52673)
  • Fix(files): middle click & ctrl new tab (server#52674)
  • Fix(share): assume download enabled on federated share (server#52683)
  • Fix: disable direct download for shares (server#52689)
  • Perf(Share20): Add interface to query all shares in a folder without filtering by user (server#52691)
  • Fix(webhooks_listener): correctly set userId from event (server#52701)
  • Fix(CalDAV): add calendar enable (server#52705)
  • Build(deps-dev): bump behat/behat from 3.16.0 to 3.16.1 in /build/integration (server#52713)
  • Build(deps): bump @nextcloud/upload from 1.9.1 to 1.10.0 (server#52714)
  • Build(deps): bump libphonenumber-js from 1.12.7 to 1.12.8 (server#52715)
  • Build(deps): bump @nextcloud/moment from 1.3.2 to 1.3.4 (server#52716)
  • Build(deps): bump @nextcloud/vue from 8.26.0 to 8.26.1 (server#52717)
  • Build(deps-dev): bump @nextcloud/cypress from 1.0.0-beta.14 to 1.0.0-beta.15 (server#52721)
  • Fix: throw a better error if we can’t get the encrypted header size (server#52762)
  • Feat: add more encryption checks to info:file (server#52764)
  • Feat: allow setting system config values with json value (server#52765)
  • Fix(files_external): Safely check if the timestamp is numeric (server#52767)
  • Fix: create mountpoint folder even if the user has a quota of 0 (server#52769)
  • Fix(updatenotification): respect `updatechecker` config (server#52780)
  • Feat: add command to check files_external dependencies (server#52783)
  • Fix: improve handling of newFolder race condition handling (server#52787)
  • Fix: better error message when trying to scan a folder that is already being scanned (server#52790)
  • Feat(log): Log the request id sent with the request (server#52804)
  • Fix(files_versions): Folder should not be hardcoded (server#52806)
  • Fix: check if properties exist before using them (server#52807)
  • Introduce own method for calendar unsharing (server#52808)
  • Fix: log requests exceeding the rate limiting (server#52815)
  • Fix(files): do not even try to fetch a preview if `has-preview` is false (server#52819)
  • Fix unjailedroot of nested jails if there are other wrappers in between (server#52823)
  • Build(deps): bump @nextcloud/auth from 2.4.0 to 2.5.1 (server#52826)
  • Build(deps-dev): bump cypress-split from 1.24.14 to 1.24.17 (server#52827)
  • Fix(files_sharing): Show note if note exists on share (server#52849)
  • Feat: add command to get basic storage info (server#52864)
  • Add command to list orphan objects (server#52866)
  • Fix: improve error message when cache rename source can’t be found (server#52883)
  • Fix: do not show account filter for public shares (server#52888)
  • Fix(previews): lower log level when cached preview isn’t found (server#52892)
  • Fix(unified_search): Maintain filters when loading more results (server#52900)
  • Fix(dav): add repair step to queue job to update rooms and resources (server#52903)
  • Chore(deps-dev): Bump sass from 1.87.0 to 1.89.0 (server#52920)
  • Chore: Add nix flake with development shell (server#52953)
  • Chore: Add an autoload.php file for tests relying on core class (server#52966)
  • Feat: only get template fields once selected (server#52969)
  • Feat: add command to clear contacts photo cache (server#52978)
  • Fix: Throw exception in PreviewManager when preview is not available (server#52984)
  • Fix(files): make sure to always have proper plural forms (server#52986)
  • Feat(UserMountCache): Emit events for added, removed and updated mounts (server#52987)
  • Fix(SetupManager): Include home and root providers when registering mounts (server#52989)
  • Fix: Fix warning when crash reporter fails to get loaded (server#53003)
  • Fix(theming): Instead of expecting a warning handle it properly (server#53009)
  • Fix(security): Update CA certificate bundle (server#53013)
  • Test: Speed up comments test (server#53021)
  • Fix(systemtags): case-insensitive search (server#53034)
  • Fix(caldav): don’t send invitations to circles (server#53036)
  • Fix: Move CSRF check from base to PublicAuth for public.php (server#53040)
  • Fix(settings): Send update request when clearing user manager (server#53051)
  • Fix(files_sharing): show note, label and list of uploaded files on file drop (server#53055)
  • GH action sync (server#53056)
  • Fix: hide guests group from principal backend (server#53077)
  • Feat: auto-generate changelog on release (server#53080)
  • Chore(deps-dev): Bump webpack from 5.99.7 to 5.99.9 (server#53086)
  • Chore(deps): Bump marked from 15.0.11 to 15.0.12 (server#53087)
  • Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.0.1 to 3.1.0 (server#53088)
  • Chore(deps): Bump dompurify from 3.2.5 to 3.2.6 (server#53089)
  • Chore(deps-dev): Bump @zip.js/zip.js from 2.7.60 to 2.7.62 (server#53090)
  • Chore(deps-dev): Bump @types/dockerode from 3.3.38 to 3.3.39 (server#53091)
  • Chore(deps-dev): Bump puppeteer from 24.7.2 to 24.9.0 (server#53092)
  • Replace “remove” wording with “delete” (server#53101)
  • Feat(SetupChecks): Add check for TaskProcessing pickup speed (server#53103)
  • Ci: Update comments and correctly skip the “pull 3rdparty” command (server#53117)
  • Fix(log): map all warnings to warn log level, notice to info (server#53127)
  • Fix(files_trashbin): check if there is enough space before restoring (server#53128)
  • Fix(FileReferenceEventListener): Invalidate cache after node was renamed (server#53133)
  • Perf: improve query to determine which users need a background scan (server#53135)
  • Fix(blurhash): Skip generation if the previews are disabled (server#53139)
  • Fix(node): emit hooks on `Node::copy()` (server#53159)
  • Fix(files): do nothing if `view local` dialog was just closed (server#53177)
  • Fix(files_versions): “undefined restored” on restore (server#53182)
  • Fix(security): Update code signing revocation list (server#53199)
  • Fix(user_status): Avoid unique constraint violations from parallel he… (server#53204)
  • Fix: log error when writing stream to dav file (server#53207)
  • Build(deps): bump @nextcloud/vue from 8.26.1 to 8.27.0 (server#53214)
  • Build(deps): bump query-string from 9.1.2 to 9.2.0 (server#53215)
  • Build(deps): bump moment-timezone from 0.5.48 to 0.6.0 (server#53216)
  • Build(deps): bump focus-trap from 7.6.4 to 7.6.5 (server#53217)
  • Build(deps-dev): bump sass from 1.89.0 to 1.89.1 (server#53218)
  • Build(deps-dev): bump stylelint from 16.19.1 to 16.20.0 (server#53219)
  • Test: ignore git-ignored files from tests (server#53232)
  • Fix(profile): do not restore previous value on invalid request (server#53240)
  • Fix(systemtags): fix translations for systemtags view (server#53245)
  • Fix(accounts): enhance UX for groups assignment (server#53248)
  • Fix(S3): Use original folder size during copy (server#53253)
  • Perf(dashboard): lags on dashboard items drag (server#53256)
  • Perf(carddav): don’t query circle memberships (server#53266)
  • Fix(PreviewManager): use the forced mimetype in throwIfPreviewsDisabled (server#53270)
  • Fix(dav): file drop nickname (server#53278)
  • Feat: link upcoming event to calendar app modal (server#53286)
  • Fix(TaskProcessingApiController): use StreamResponse to return file content (server#53290)
  • Feat: add –unscanned option to files_external:scan (server#53293)
  • Fix: handle IDLE timeout (server#53297)
  • Build(deps): bump tar-fs from 2.1.2 to 2.1.3 (server#53298)
  • Fix(provisioning_api): Allow group details access for users with admin delegation (server#53302)
  • Fix(accounts): new account quota value (server#53303)
  • Fix(files): highlight previous folder on history up (server#53309)
  • Fix(security): Update code signing revocation list (server#53337)
  • Fix(workflows): releases changelog generator tags handling (server#53344)
  • Revert “fix: hide guests group from principal backend” (server#53371)
  • Chore(workflows): add auto stable PR title update (server#53407)
  • 31.0.6 (server#53413)
• activity
  • Fix npm audit (activity#1955)
  • Update nextcloud/ocp dependency (activity#2014)
  • Update nextcloud/ocp dependency (activity#2029)
  • Chore: update workflows (activity#2032)
  • Test(cypress): Enable test isolation (activity#2040)
  • Update nextcloud/ocp dependency (activity#2046)
  • Fix npm audit (activity#2048)
• app_api
  • Fix(DeployDaemon): support for daemon names containing spaces (app_api#579)
  • Fix(Podman-HealthCheck): treat empty health status as success. (app_api#589)
• bruteforcesettings
  • Fix npm audit (bruteforcesettings#744)
  • Feat: apply whitelist to ratelimit (bruteforcesettings#751)
  • Fix npm audit (bruteforcesettings#758)
• circles
  • Update child share permissions (circles#1991)
  • Fix(ShareByCircleProvider): Include data in getSharesByPath to fix share_with_displayname (circles#2014)
  • Perf(MemberRequest): Remove unused LEFT JOINs (circles#2015)
  • Fix(LocalController): Allow to still get full details of members (circles#2022)
• files_pdfviewer
  • Fix npm audit (files_pdfviewer#1209)
• logreader
  • Fix npm audit (logreader#1649)
  • Update nextcloud/ocp dependency (logreader#1654)
  • Update nextcloud/ocp dependency (logreader#1659)
  • Update nextcloud/ocp dependency (logreader#1665)
  • Fix npm audit (logreader#1667)
• nextcloud_announcements
  • Update nextcloud/ocp dependency (nextcloud_announcements#480)
  • Ci(github): Update workflows (nextcloud_announcements#483)
  • Update nextcloud/ocp dependency (nextcloud_announcements#486)
  • Update nextcloud/ocp dependency (nextcloud_announcements#489)
• notifications
  • Update nextcloud/ocp dependency (notifications#2342)
  • Fix npm audit (notifications#2345)
  • Chore(tests): Cleanup bootstrap.php to be forward-compatible (notifications#2355)
  • Ci: Update workflows (notifications#2359)
  • Update nextcloud/ocp dependency (notifications#2365)
  • Update nextcloud/ocp dependency (notifications#2367)
  • Update nextcloud/ocp dependency (notifications#2368)
  • Fix npm audit (notifications#2373)
• photos
  • Chore(deps-dev): Bump jest and @types/jest (photos#2976)
  • Chore(deps): Bump vue-material-design-icons from 5.2.0 to 5.3.1 (photos#2992)
  • Fix npm audit (photos#2999)
  • Chore(deps-dev): Bump @nextcloud/cypress from 1.0.0-beta.14 to 1.0.0-beta.15 (photos#3010)
  • Update nextcloud/ocp dependency (photos#3012)
  • Fix: Adapt sidebar tab to new fileinfo structure (photos#3028)
  • Fix(perf): Do not request faces properties in search requests (photos#3030)
  • Chore(deps-dev): Bump @types/dockerode from 3.3.38 to 3.3.39 (photos#3035)
  • Chore(deps-dev): Bump cypress-split from 1.24.14 to 1.24.17 (photos#3036)
  • Update nextcloud/ocp dependency (photos#3039)
  • Chore(deps-dev): Bump postcss from 8.5.3 to 8.5.4 (photos#3051)
  • Update nextcloud/ocp dependency (photos#3053)
  • Fix npm audit (photos#3056)
• recommendations
  • Fix(Dashboard): hides overflow for text (recommendations#876)
• serverinfo
  • Ci(deps): update psalm (serverinfo#784)
  • Update nextcloud/ocp dependency (serverinfo#805)
  • Ci: drop zizmor (serverinfo#811)
  • Chore(actions): update workflows (serverinfo#815)
  • Chore: drop yaml linter workflow (serverinfo#817)
  • Update nextcloud/ocp dependency (serverinfo#822)
  • Fix: get actual number of active users (serverinfo#825)
  • Chore(actions): update workflows (serverinfo#826)
  • Update nextcloud/ocp dependency (serverinfo#831)
• text
  • Disable attachment upload on federated shares (text#7183)
  • Feat(link): Toggle link on selection with Mod-K shortcut (text#7203)
  • Fix(image): Only focus image description on newly inserted image (text#7205)
  • Chore(deps): update dependency @nextcloud/vite-config to ^1.5.6 (text#7220)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.41.0 (text#7221)
  • Chore(deps): update dependency cypress-split to ^1.24.17 (text#7222)
  • Fix(deps): update dependency @nextcloud/moment to ^1.3.4 (text#7223)
  • Fix(deps): update yjs (text#7224)
  • Fix(deps): update dependency y-prosemirror to ^1.3.5 (text#7225)
  • Fix(deps): update tiptap to ^2.12.0 (text#7226)
  • Fix(details): Accept details open tag and summary tag in same line (text#7227)
  • Feat: Implement event so collectives can inject custom notification messages (text#7230)
  • Respect default extension setting in direct editing (text#7234)
  • Fix(attachments): Adjust path to attachments folder when copying a node (text#7240)
  • Bring back and refactor keymap, add focus trap to plain text editor (text#7242)
  • Perf: Cache read only state for pushing steps (text#7250)
  • Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.41.1 (text#7253)
  • Chore(deps): update dependency @nextcloud/stylelint-config to ^3.1.0 (text#7254)
  • Fix(deps): update dependency @nextcloud/auth to ^2.5.1 (text#7255)
  • Fix(Cleanup): Cleanup attachments in cron job (text#7269)
• twofactor_nextcloud_notification
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1000)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1005)
  • Ci(github): Update workflows (twofactor_nextcloud_notification#1007)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1012)
  • Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1016)
• updater
  • Chore(download): allows Updater to follow redirects (updater#626)
  • Chore: Update workflows from templates, with few adaptations (updater#628)
  • Chore: master is now 32 (updater#630)
  • Feat: allow redirections when downloading package (updater#632)
• viewer
  • Chore(deps): update cypress (viewer#2785)
  • Fix: Do not update page title for single file public shares (viewer#2793)
  • Fix npm audit (viewer#2798)
  • Perf: Set and show current file before running heavier request to list directory (viewer#2818)
  • Chore(deps): update dependency @types/dockerode to ^3.3.39 (viewer#2832)
  • Chore(deps): update dependency vite to ^5.4.19 (viewer#2833)
  • Fix(image-editor): remove hamburger menu button and show close button (viewer#2837)
  • Fix(image-editor): prevent double discard changes confirmation (viewer#2839)
  • Chore(deps): lock file maintenance (viewer#2844)
  • Feat(viewer): Add file overwrite confirmation dialog (viewer#2855)
  • Chore: Update github actions (viewer#2858)
  • Ci: Fix split containers for cypress (viewer#2859)
  • Chore: add update-stable-titles.yml (viewer#2874)

• Perf(files_reminders): Reduce db queries on propfind (server#51736)
• Fix(systemtags): emit assign and unassign bulk tagging events (server#51996)
• Perf(files_sharing): do not emit second propfind for account filter (server#52001)
• Fix: adjust webpack nonce generation (server#52003)
• Perf(cloud_federation_api): only provide capabilities if needed (server#52030)
• Fix: Proper order for checking path prefix for getting file by id from cache (server#52039)
• Fix: fix preloading files with no custom properties (server#52101)
• Fix(TaskProcessing): for validation for taskprocessing EShapeType (server#52118)
• Revert “feat(bulk-upload): change the default to disabled as there are still some bugs present” (server#52138)
• Fix: Transfer ownership with S3 as primary (server#52185)
• Fix(files_sharing): file request pass empty string if password or expiration is disabled (server#52197)
• Perf: Log requests using high amount of memory as warning (server#52219)
• Fix(files_sharing): bring back handling of `hide-download` on public shares (server#52226)
• Feat(security): add configurable IPv6 subnet for BFP and throttling (server#52233)
• Fix: Check that user actually can validate password for js (server#52237)
• Fix(mail): use matching text color for primary elements (server#52248)
• Fix(Log): revert swich to ?? operator (server#52254)
• Fix(usermanager): Don’t throw when checking if a too long user id is an existing user (server#52256)
• Fix(LDAP): inlcude ldapExpertUsernameAttr in general attribute list (server#52287)
• Chore(dependencies): update `@nextcloud/vue` to v8.25.1 (server#52295)
• Feat: add logging to preview generation (server#52300)
• Fix(dav): allow uploading of files with long filenames (server#52302)
• Fix(files): prevent dragging preview when drag-drop (server#52363)
• Chore(i18n): Use “name” instead of “nickname” (server#52371)
• Feat(profile): Add an API to get the profile field data (server#52372)
• Fix(objectstorage): add retry attempts to S3 connection (server#52382)
• Fix(federation): allows equal signs in federation id (server#52387)
• Fix(db): Create replacement index where original index is missing (server#52394)
• Refactor: Thumbnail Generator logging and tests (server#52401)
• Fix(updatenotification): Fix error handling when fetching applist for server update (server#52406)
• Fix(files_sharing): Improve expiration date input change handling (server#52409)
• Fix(files_versions): create version if previous does not exist (server#52411)
• Perf(db): Extend index on cards_properties to cover name and value (server#52415)
• Fix(previews): avoid large file downloads for remote movie storage (server#52418)
• Test(cypress): rename select all clear (server#52422)
• Fix(federation): Allow federation file sharing when federation app is… (server#52425)
• Fix(config): Censor more app configs in system report (server#52433)
• Fix(occ): Fix autocompletion of config:app:* commands (server#52435)
• Fix(settings): Use axios directly for health check to preven URL sanitizing (server#52440)
• Fix(settings): only provide groups the subadmin has access to (server#52486)
• Fix(settings): allow to clear twitter and fediverse (server#52488)
• Fix(files_sharing): Show remote shares as external (server#52498)
• Fix: don’t check node access again for listing reminders in dav (server#52504)
• Fix(navigation): Fix default app entry registered as closure (server#52507)
• Fixbit): use `PHP_INT_MAX` where needed (server#52512)
• Fix(JSResourceLocator) fix incorrect parameter being used. (server#52520)
• Fix(theming): remove scssphp and use just native nested CSS (server#52521)
• Fix(WFE): properly set inital status (server#52527)
• Fix(files_sharing): Prevent create/delete permissions on file shares (server#52531)
• Perf(caldav): increase chunk size in RemoveOrphanEventsAndContacts repair step (server#52548)
• Fix(dav): check the owner displayName scope before giving attribute (server#52554)
• Fix(files_sharing): bring back owner and ownerDisplayName initial state (server#52555)
• Fix(CalDAV): do not ignore move command object target uri (server#52562)
• Fix: Forward attributes to the sidebar (server#52566)
• Fix(WeatherStatus): Check if result is an array (server#52569)
• Fix(notification): Notification in activity shows “Rich subject or a … (server#52576)
• Fix: Flaky samba kerberos tests (server#52578)
• Fix(loginflow): Fix type error when password could not be decrypted (server#52625)
• Fix(workflowengine): fix group not shown in Group membership check (server#52640)
• Fix(files_external): Mark password fields for LoginCredentials and SessionCredentials as hidden and optional (server#52643)
• Fix(apps): Sort names separately from active/update state (server#52653)
• Fix(files): Fix non-string values for activity rich object strings (server#52658)
• Fix(blurhash): Use preview API to generate the previews (server#52661)
• Fix: don’t setup the filesystem to check if a user is blocked by ACLs (activity#1985)
• Chore: Update workflows (activity#1991)
• Fix multiple cypress issues (activity#1994)
• Fix(info.xml): correct developer docs link (typo) (app_api#560)
• Fix(exAppMapper): init missing headers_to_exclude (app_api#564)
• Fix(CI): disable RateLimiting for Nextcloud in the CI (app_api#565)
• Feat: lowercase headers to exclude in exapp proxy (app_api#569)
• Fix task processing registration validation (app_api#573)
• Switch to probeCircles (circles#1983)
• Fix saving annotations in paths with special characters (files_pdfviewer#1194)
• Fix: Open PDF file in “richdocuments” if it is not downloadable (files_pdfviewer#1204)
• Remove custom handling for public share pages with single files (files_pdfviewer#1206)
• Fix(LogTable): implement virtual scrolling (logreader#1616)
• Chore: update workflows (logreader#1629)
• Ci: Fix typo in performance integration test run (notifications#2293)
• Fix(build): avoid double load of the app (notifications#2309)
• Fix(Places): Use event metadata to compute the place (photos#2989)
• Fix: try to avoid memory exhaustion (suspicious_login#988)
• Fix: exclude vendor-bin from release artifacts (suspicious_login#989)
• Chore: drop remaining files from webpack / jest (text#7085)
• Refactor document status and menubar padding (text#7158)
• Fix(files): Remove obsolete loading code from old API, add public shared id to enabled view (text#7181)
• Chore(SessionList): Migrate to NcButton and MDI icon (text#7186)
• Fix: Adjust padding in table cell and header components (text#7189)
• Fix: submit button on file picker dialog (text#7190)
• Fix: Apply storage checks in addition to share (text#7192)
• Ci: Update github actions (twofactor_nextcloud_notification#989)
• Feat: handle `hide-download` DAV property (viewer#2807)

• Build(deps): bump @nextcloud/event-bus from 3.3.1 to 3.3.2 (server#51348)
• Build(deps): bump dompurify from 3.2.4 to 3.2.5 (server#51964)
• Chore(files_trashbin): Add user details in log from Trashbin (server#51999)
• Fix: Handle missing share providers when promoting reshares (server#52043)
• Fix(dav): Really only run the chunk cleanup once (server#52054)
• Fix(federation): Don’t load the addressbook when resolving a cloud ID (server#52068)
• Fix(files_sharing): fix share creation error handling (server#52078)
• Fix(taskprocessing): use the event for AppAPI to get list of AI providers (server#52120)
• Feat(bulk-upload): change the default to disabled as there are still some bugs present (server#52123)
• Ignore missing theming app (server#52135)
• Build(deps): bump marked from 15.0.7 to 15.0.8 (server#52155)
• Fix(ContextAgent): Do not translate the name ContextAgent (server#52169)
• Fix(files_sharing): rate limit share creation 20 times per 10 minutes (server#52206)
• Fix(files_sharing): Apply default password setting in SharingDetailsTab (server#52208)
• Fix: Improving logging of invalid parameters for activity subject and… (activity#1980)
• Fix): perfomance – load ExApps menu items only when event is triggered (app_api#543)
• Fix): use the event for AppAPI to get list of AI providers (app_api#550)
• Fix npm audit (bruteforcesettings#719)
• Fix(sharing): Handle share notes (circles#1963)
• Chore(deps-dev): Bump vite from 5.4.15 to 5.4.18 (firstrunwizard#1584)
• Fix npm audit (logreader#1600)
• Update nextcloud/ocp dependency (logreader#1606)
• Update nextcloud/ocp dependency (nextcloud_announcements#467)
• Fix npm audit (notifications#2289)
• Update nextcloud/ocp dependency (notifications#2298)
• Update nextcloud/ocp dependency (photos#2918)
• Test: Fix location and navigation errors (photos#2925)
• Test: Fix test and add CI job (photos#2929)
• Update nextcloud/ocp dependency (serverinfo#783)
• Test: Set PHPUNIT_RUN env var (suspicious_login#983)
• Chore(deps): update dependency vite to ^5.4.18 (text#7075)
• Chore(deps): update dependency typescript to ^5.8.3 (text#7078)
• Fix: writing during short connection failures (text#7096)
• Fix(deps): update dependency lib0 to ^0.2.103 (text#7101)
• Fix(deps): update dependency y-prosemirror to ^1.3.2 (text#7102)
• Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.40.0 (text#7106)
• Fix(deps): update dependency lib0 to ^0.2.104 (text#7108)

• Fix(files): also show file list headers on empty views (server#51275)
• Fix(dav): Create SAB at installation (server#51316)
• Fix: remote account activity translation (server#51326)
• Fix: Do not build encrypted password if there is none (server#51330)
• Feat(dav): add webhook compatibility for calendar object events (server#51331)
• Fix disabled user list for SAML group subadmin (server#51376)
• Fix(files_external): Stop building path twice when checking if file exists on case insensitive SMB storage (server#51388)
• Fix(CalDav): alter invitation attachment filename and type (server#51466)
• Fix(files_sharing): ensure share status action works also in grid view (server#51474)
• Fix(profile): allow to unset phone number (server#51511)
• Fix: skip caching lastSeenQuotaUsage for remote shares (server#51522)
• Fix(cardav): only show users from enabled addressBooks in contacts menu (server#51539)
• Enh: improve occ file:transfer-ownership logging (server#51561)
• Fix(unified-search): do not overlap search bar with button (server#51566)
• Fix(webauthn): adjust for updated library and add tests (server#51578)
• Fix: pass hide download attribute while creating the share to fix github issue 50788 (server#51582)
• Fix(files_sharing): skip expiration notify for invalid share record (server#51616)
• Fix(ocm): `publicKey` can be disabled so capabilities do not match (server#51653)
• Fix(files): Ensure actions never overflow filename (server#51659)
• Fix(IFilenameValidator): correctly handle case insensitivity (server#51662)
• Fix(user): Some strings not being translated (server#51666)
• Fix(provisioning_api): Pass on translated hint if password change fails (server#51672)
• Fix(setupchecks): Treat information messages as success (server#51678)
• Fix(database): Cast users count to integer (server#51688)
• Fix(systemtags): Dispatch events when bulk assigning system tags (server#51690)
• Perf(sharing): Use oc_share.item_type IN instead of OR equals (server#51691)
• Fix(dav): filter user files when updating tags (server#51693)
• Fix files_sorting cypress tests (server#51695)
• Fix(login): Improve CSRF error message for better user understanding (server#51699)
• Fix public download activity (server#51704)
• Fix: filter out contacts with empty email addresses in sharee completion (server#51708)
• Fix(GenerateBlurhashMetadata): Suppress imagescale errors (server#51718)
• Fix(occ): Suppress errors when checking config.php fileowner (server#51720)
• Fix(files_versions): correctly show version author also for shared files (server#51723)
• Fix(files_reminders): Fix reminder actions being displayed on invalid nodes (server#51738)
• Fix: task type translations (server#51741)
• Fix(files_versions): Rely on server mime fallback icons (server#51748)
• Fix(files): Properly encode URLs when preparing ZIP download (server#51751)
• Fix(theming): enforce theme also for login (server#51753)
• Fix: resolve typo in authMethod enum cases (server#51758)
• Fix: add event status and participant status (server#51770)
• Fix(settings): Fix infinitely loading account management page with pagination of groups (server#51781)
• Feat: Limit `ExpireTrash` job to 30 minutes (server#51808)
• Fix(dav): Give proper HTTP status code on MKCOL when quota exceeded (server#51813)
• Perf(cron): Delay (re)checking timed jobs (server#51820)
• Fix(files_reminders): Lower disabled notifications app error to info (server#51843)
• Fix: don’t have sabre/dav send it’s own reponse if we already send the zip response (server#51850)
• Fix(oauth2): retain support for legacy ownCloud clients (server#51859)
• Fix(encryption): init keys also when logged in using cookie auth (server#51865)
• Fix: use proper migration sorting when checking if a migration needs to be executed (server#51869)
• Fix(files): right click actions menu flicker (server#51871)
• Fix: Use login name to check the password (server#51880)
• Fix(settings): Handle email change restriction separately from display name change restriction (server#51901)
• Fix(session): Only mark sessions of permanent tokens as app passwords (server#51906)
• Fix: Catch exceptions when expiring trashbin (server#51912)
• Fix(workflowengine): require a web component as operation plugin (server#51915)
• Fix: ensure enabled themes are set on the template (server#51929)
• Fix(dav): Allow underscores on custom links (server#51981)
• Fix(cache): always require updates if mtime is null (server#51984)
• Revert “refactor: add migration for email setting” (server#51987)
• Fix(files_reminders): add missing import (server#51992)
• Feat(ip): use larger IPv6 range by default (server#52033)
• Refactor(RichObjectStrings): Only log error if key or value is not string in validator (server#52038)
• Revert “refactor(RichObjectStrings): Only log error if key or value i… (server#52059)
• Test: Use utils function from server and wait for requests (activity#1921)
• Fix: disable loading when there are no more activities to load (activity#1934)
• Feat: skip expire sharing notify if node deleted (activity#1937)
• Fix(settings): ensure we handle file_created, file_deleted and file_restored as file_changed (activity#1948)
• Revert “fix: disable loading when there are no more activities to load” (activity#1959)
• Fix(ActivityAppFeed): handle cases for non-scrollable container (activity#1964)
• Fix): AppAPI Proxy – invalid “content-length” (app_api#538)
• Fix: propagate group name changes (circles#1900)
• Fix(SyncService): Sync group display names (circles#1905)
• Composer upgrade and cs:fix (circles#1916)
• Ignore empty string when adding member (circles#1926)
• Only sync users on explicit request (circles#1930)
• Ignore non-existant users (circles#1937)
• Speedup circles fetching (circles#1950)
• Do not refresh display name on known local user (circles#1957)
• Chore(GA): update GA master (files_pdfviewer#1180)
• Update GitHub actions (files_pdfviewer#1181)
• Chore: update ci workflows (logreader#1568)
• Fix: Do not register listener when not in console (logreader#1578)
• Ci: Update workflows (nextcloud_announcements#464)
• Style: fix custom icon height (notifications#2264)
• Chore(deps): bump @nextcloud/vue from 8.23.1 to 8.24.0 (notifications#2281)
• Fix(l10n): Improve translation exclude list (photos#2906)
• Fix(l10n): remove breaking trailing dot after curly brace (photos#2911)
• Fix: resolve file version conflict during restore (text#6948)
• Fix flaky cypress tests (text#6968)
• Fix(ui): style conflict resolution buttons (text#6972)
• Fix(workspace): Use filecache existance for checking if readme exists (text#6975)
• Chore(deps-dev): bump psalm/phar from 5.26.1 to 6.5.1 (text#6980)
• Fix: replace deprecated translation methods (text#6981)
• Feat(session): Send save request via `sendBeacon` at `beforeunload` (text#7062)
• Fix(cypress): define visual regression threshold to 0.01 (viewer#2766)

• Test: Remove `.only()` calls (server#51304)
• Fix(encryption): Listen for user login and logout to set encryption key (server#51311)
• Fix(base.php): Correct order for booting \OC\Server (server#51371)
• Fix(dav): Fix share token pattern for base uri extraction (server#51396)
• Allow to delete files without trashbin + add unit tests + some refactoring (server#51397)
• Fix(mime-types): adjust compiled mime types and sign (server#51437)
• Fix(RichObjectStrings): Make exception messages for invalid parameters more useful for debugging (server#51445)
• Fix(comments): Fix activity rich subject parameters (server#51515)
• Ci: Update 3rdparty actions (server#51519)
• Fix(files): Make sure file pointer exists (server#51536)
• Fix(auth): Allow 2FA challenges for Ephemeral sessions (server#51549)
• Ci: Update actions (3rdparty#2061)
• Update nextcloud/ocp dependency (activity#1906)
• Fix: update workflows (activity#1917)
• Fix: unshare from group activity user handling (activity#1928)
• Fix npm audit (bruteforcesettings#703)
• Chore(deps-dev): bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (bruteforcesettings#710)
• Fix npm audit (bruteforcesettings#715)
• Ci: Update actions (nextcloud_announcements#455)
• Build(deps): Bump ua-parser-js from 2.0.2 to 2.0.3 (notifications#2252)
• Ci: Update actions (notifications#2258)
• Update nextcloud/ocp dependency (photos#2858)
• Fix npm audit (photos#2863)
• Chore(deps-dev): Bump autoprefixer from 10.4.20 to 10.4.21 (photos#2866)
• Chore: Update workflow (photos#2870)
• Update nextcloud/ocp dependency (serverinfo#759)
• Chore: update workflows (serverinfo#764)
• Ci(actions): add yaml workflow (serverinfo#770)
• Help modal improvements (text#6932)
• Keep layout on sync errors (text#6944)
• [backport/6903/stable31] fix(reuse): add license info for vitest snapshots (text#6946)
• Fix: Avoid pushing empty messages (text#6957)
• Chore: Bump github actions from templates (text#6970)

• Fix(files_external): request strict password auth on credentials enter action (server#50932)
• Fix(files_sharing): Map sharee information for `shared-by-you` view (server#50935)
• Fix: Change UserAgent to *cloud (server#50941)
• Ci(autochecks): Run some autochecks also on non-PHP files (server#50953)
• Fix(cron): Ignore time sensitivity when a class was explicitely scheduled (server#50954)
• Chore(deps-dev): bump ts-loader from 9.5.1 to 9.5.2 (server#50963)
• Fix(admin_audit): Fix incorrect truncation of files path in admin audit log (server#50994)
• Fix: wipe local storages on log out (server#50995)
• Fix: NotFoundException for anonymous users (server#51003)
• Feat(files): allow to ignore warning to change file type (server#51015)
• Fix: Initialize lastConnectionCheck after first connection (server#51017)
• Fix(files_versions): Do not expire versions newer than min age (server#51025)
• Spelling standardization (server#51028)
• Feat: support migrating an instance to sharding (server#51034)
• Fix(security): Update CA certificate bundle (server#51041)
• Fix(systemtags): Use literal strings for i18n in showSuccess (server#51047)
• Fix(l10n): Improve english source strings (server#51058)
• Fix: Report duplicated extra files in integrity check (server#51062)
• Fix(translation): Fix string concatenation in LDAP endpoint (server#51076)
• Feat: Close sessions created for login flow v2 (server#51090)
• Fix SQL query so that it is ansi safe fixing #51067 (server#51091)
• Files: fix exception when share-attributes is undefined (server#51093)
• Fix(files_external): Move definition parameter to the correct place (server#51106)
• Fix: remove caching in fetchListOfGroups (server#51111)
• Make it possible to run occ as root (server#51118)
• Fix(files_reminders): Do not attempt to send reminders after a user has left a share (server#51121)
• Fix(dav): Handle end of stream in `File::put` (server#51128)
• Fix(files): Ensure the filter instance is mounted (server#51132)
• Fix(cypress): wait for toast to appear (server#51143)
• Remove space (server#51149)
• Chore(deps): bump focus-trap from 7.6.0 to 7.6.4 (server#51167)
• Chore(deps): bump marked from 15.0.6 to 15.0.7 (server#51168)
• Chore(deps): bump @nextcloud/files from 3.10.1 to 3.10.2 (server#51169)
• Chore(deps-dev): bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (server#51170)
• Chore(deps-dev): bump @types/dockerode from 3.3.34 to 3.3.35 (server#51171)
• Fix A+ rating when checking with Nextcloud Security Scan. (server#51173)
• Chore(deps): bump webdav from 5.7.1 to 5.8.0 (server#51186)
• Fix(userconfig): simpler db request pre-upgrade (server#51197)
• Refactor(TempManager): Simplify and unify implementations and remove legacy behavior (server#51203)
• Fix(FederatedShareProvider): Delete external shares when groups are deleted or users removed from a group (server#51206)
• Fix(files_trashbin): disable bulk download for trashbin (server#51210)
• Feat: Support deleting metadata from WebDAV (server#51223)
• Feat: Add bases and gidNumber attribute to ldap:test-user-settings output (server#51227)
• Feat: log query for dbal exceptions (server#51230)
• Fix(files_sharing): ignore duplicated navigation when replacing current route (server#51236)
• Fix(lookup_server_connector): correctly handle account properties (server#51237)
• Fix: Use case insensitive check when validating login name (server#51251)
• Test(e2e): adjust trashbin tests to be less flaky (server#51257)
• Chore(deps): update `@nextcloud/upload` to 1.9.0 (server#51262)
• Fix(files_sharing): ensure downloaded file has the correct filename (server#51263)
• Fix(Comment): replace richEditor mixin with NcRichText (server#51268)
• Fix(dav): Handle long absence status earlier (server#51273)
• Fix(files): Don’t do session related work in the constructor of the View (server#51276)
• Fix(dav): Use IUser::getDisplayName directly (server#51283)
• Fix(l10n): Remove leading space from translation string (server#51289)
• Fix(login): Properly target public page with attribute (server#51295)
• Fix(systemtags): unify restrict_creation_to_admin handling (server#51308)
• Fix(external_storage): fix settings save (server#51395)
• Fix(AppDiscover): Strip double-quotes from folder name (server#51402)
• Fix(lookup-server): disable when not using global scale (server#51404)
• Fix(mimetypes): drop `tar.gz` and `tar.bz2` and adjust `tgz` (server#51413)
• Fix(lookup-server): Only flag new users for lookup update / delete (server#51417)
• Revert(deps): jquery-ui to 1.13.3 (server#51440)
• Fix npm audit (activity#1874)
• Chore: bump @nextcloud/cypress from 1.0.0-beta.8 to 1.0.0-beta.14 (activity#1890)
• Fix parameter preparation for occ command (app_api#525)
• Fix(occ): handle share wrappers that do not have a circle (circles#1867)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (files_pdfviewer#1152)
• Get PDF.js version from “package-lock.json” (files_pdfviewer#1162)
• Fix: Pin pdfjs-dist to exact 4.0.189 (files_pdfviewer#1165)
• Fix npm audit (firstrunwizard#1533)
• Update nextcloud/ocp dependency (logreader#1535)
• Fix npm audit (logreader#1537)
• Update nextcloud/ocp dependency (logreader#1545)
• Update nextcloud/ocp dependency (logreader#1553)
• Fix: replace `axios` types import source (logreader#1558)
• Update nextcloud/ocp dependency (nextcloud_announcements#444)
• Update nextcloud/ocp dependency (nextcloud_announcements#451)
• Chore(deps): Bump ua-parser-js from 2.0.1 to 2.0.2 (notifications#2200)
• Build(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (notifications#2216)
• Update nextcloud/ocp dependency (notifications#2220)
• Ci(performance): Fix performance test and ease debugging it (notifications#2228)
• Build(deps): Bump @nextcloud/event-bus from 3.3.1 to 3.3.2 (notifications#2231)
• Update nextcloud/ocp dependency (notifications#2233)
• Fix(push): Check last activity and last check for age (notifications#2240)
• Fix(push): Improve test-push output (notifications#2242)
• Update nextcloud/ocp dependency (notifications#2249)
• Fix npm audit (password_policy#744)
• Chore(deps-dev): Bump tslib from 2.6.2 to 2.6.3 (photos#2779)
• Fix npm audit (photos#2802)
• Chore(deps-dev): Bump autoprefixer from 10.4.14 to 10.4.20 (photos#2804)
• Chore(deps): Bump @nextcloud/files from 3.10.1 to 3.10.2 (photos#2824)
• Update nextcloud/ocp dependency (photos#2825)
• Chore(deps-dev): Bump @nextcloud/cypress from 1.0.0-beta.13 to 1.0.0-beta.14 (photos#2833)
• Chore(deps): Bump @nextcloud/event-bus from 3.3.1 to 3.3.2 (photos#2834)
• Chore(deps-dev): Bump cypress-split from 1.24.7 to 1.24.14 (photos#2835)
• Chore(deps-dev): Bump dockerode from 4.0.2 to 4.0.4 (photos#2836)
• Update nextcloud/ocp dependency (photos#2845)
• Fix npm audit (photos#2846)
• Fix: Correct alignment of recommendation text (recommendations#854)
• Update nextcloud/ocp dependency (serverinfo#750)
• Update nextcloud/ocp dependency (serverinfo#757)
• Fix/6871 smart add to next line (text#6916)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#965)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#970)

• Port files trashbin events to IEventDispatcher/IEventListener (server#32018)
• Modify user_ldap checkPassword to not fetch records from ldap each time because of extremely high CPU usage! (server#35867)
• Fix(provisionning_api): Remove parameters that are not set into template (server#37303)
• Invalidate oauth2 tokens only for seen users (server#37761)
• Fix remaining readdir() calls in loops with undesirable false evaluation potential (server#38630)
• Fix #38749, postgresql GRANT user’s permission after createDatabase, … (server#38750)
• (base) Give a hint in web interface if SimpleXML (php-xml) is missing (server#38857)
• (occ db:convert-type) Add support for UNIX sockets (server#39242)
• Add `occ user:welcome` command to send user welcome email from CLI (server#39611)
• Refactor encryption app commands (server#39692)
• Translate all share exceptions (server#40164)
• Fix mimetype not being updated when changing file extention on objectstore (server#40394)
• Fix(carddav): Handle race for SAB creation better (server#42052)
• (config.php.sample) Clarify the purpose of `session_keepalive` parameter (server#42610)
• Fix: Add command to update re-share if shared-by user has been revoked (server#43025)
• Enh: update desktop client unsupported version 3) error message (server#43281)
• Feat: make search path for BinaryFinder customizable. (server#43968)
• Feat: add pronouns to account profile (server#44013)
• Handle errors in encryption:migrate-key-storage-format (server#44555)
• Fix(i18n): Changed grammar (server#44945)
• Fix: update last_login timestamp for token based-logins (server#45020)
• Fix: remove mention of disabling file locking from config sample (server#45330)
• Expose escapeLikeParameter trough query builder (server#45457)
• Fix(setupChecks): Update Transactional File Locking instructions (server#45471)
• Feat(files_sharing): Migrate public shares to Vue (server#45652)
• Feat: add command to send raw commands to redis (server#45880)
• Signed requests (server#45979)
• Fix: write object to the correct urn when moving from another storage to object store (server#46013)
• Perf: delay getting (sub)admin status for user in the security middleware untill we need it (server#46021)
• Fix(user_ldap): Avoid extra LDAP request when mapping a user for the first time (server#46114)
• Fix: Fix “Unknown path” error when source user `files` folder has not been initialized (server#46124)
• Fix(config): Add missing handling for `envCache` in `getKeys()` (server#46140)
• Feat(cache): CLI should not fail if APCu is not available (server#46151)
• Ensure that the hash method does not return null (server#46218)
• Fix(TaskProcessingApiController): Don’t use + to merge non-assoc. arrays (server#46222)
• Fix: add option to remove the webroot for setup checks and don’t chec… (server#46255)
• Fix(Mailer): Fix sendmail binary fallback (server#46480)
• Transparent* database sharding (server#46639)
• Feat(sidebar): Show node owner in metadata subline (server#46691)
• Fix status check and saving of external storages (server#46859)
• Fix(ProvisioningAPI): set typed config values by via API (server#46991)
• Fix: check for correct storage class when checking for link parent (server#47038)
• Fix(jobs): Switch to executeStatement() while deleting rows (server#47155)
• Fix(files): Fix navigating with breadcrumbs not highlighting navigation entry (server#47158)
• Perf: improve cleanup of tags/comments (server#47182)
• Fix: Filename validation should only forbid `create` and `update` (server#47185)
• Fix(AppMenu): Prevent menu entries from jumping on hover (server#47203)
• Fix(files): Respect “Show hidden files” setting in tree (server#47204)
• Master is now 31 (server#47212)
• Chore(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 (server#47222)
• Chore(deps): bump is-svg from 5.0.1 to 5.1.0 (server#47225)
• Chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.6 in the github-actions group (server#47226)
• Fix(webauthn): Increase database column for public key id (server#47240)
• Fix: Adjust legacy CSS styles for new Nextcloud 30 design (server#47248)
• Fix(adminaudit): Don’t crash when creating folder (server#47252)
• Feat(webauthn): Add user verification to webauthn challenges (server#47253)
• Don’t save translated predefined user status as custom status (server#47258)
• Feat: add negative compare-and-delete to imemcache (server#47259)
• Feat(share): make sharelink token length configurable (server#47265)
• [occ:bg-job:worker] Add ‘stop_after’ option (server#47277)
• Fix: Do not throw if appstore is unavailable during upgrade (server#47285)
• Fix: Access node owner by top level `owner` property (server#47287)
• Feat(templates): checkbox field type (server#47290)
• Refactor(Log): Use new in initializer instead of constructor body (server#47291)
• Feat(PsrLoggerAdapter): Allow to use `Psr\Log\LogLevel` for `log` method (server#47293)
• Fix(files): Sort tree views correctly by natural order (server#47294)
• Chore(deps-dev): bump @pinia/testing from 0.1.4 to 0.1.5 (server#47296)
• Chore(deps): bump @vueuse/core from 10.11.0 to 11.0.0 (server#47297)
• Chore(deps): bump elliptic from 6.5.6 to 6.5.7 (server#47300)
• Chore(deps): bump @vueuse/components from 10.11.0 to 11.0.0 (server#47301)
• Chore(deps): bump @vueuse/integrations from 10.11.0 to 11.0.0 (server#47302)
• [master] Fix npm audit (server#47310)
• Fix: Prevent crash when refreshing metadata for files without an owner (server#47316)
• Fix(UnifiedSearch): Focus search input on open (server#47319)
• Feat(AppFramework): Add full support for date / time / datetime columns (server#47329)
• Fix: adding blurhash to definitions (server#47331)
• Fix(caldav): allow renaming of birthday calendars (server#47332)
• Fix: Display ‘Leave share’ instead of ‘Delete’ (server#47339)
• Fix(federation): Do not overwrite certificate bundle (server#47340)
• Fix: don’t recalculate folder size in Cache::delete if the entry didn’t exist (server#47342)
• Use logical positioning instead of physical for bidirectional text support (server#47343)
• Store the mountpoint of storages in the mount options and use it to find the encryption keys (server#47346)
• Add bidirectional text support – Backend (server#47349)
• Chore(build): Remove old Drone CI signed-off checker (server#47350)
• Fix(build): Allow update-apps.sh script to work with non-master branches (server#47351)
• Fix(TaskProcessing/ContextWrite): Fix wording “ContextWrite” -> “Context write” (server#47352)
• Chore: Add webhook_listeners to list of shipped apps (server#47356)
• Bump Hub 8 -> Hub 9 (server#47358)
• Fix: use empty template by default when pressing enter (server#47363)
• Fix(files_sharing): Sort by correct share attribute (“share with displayname”) (server#47365)
• Fix(files): Move loading icon before grid toggle (server#47370)
• Fix: Disable auto-zoom on iOS (server#47371)
• Fix: `FilenameValidator::isForbidden` should only check forbidden files (server#47372)
• Fix(cypress): improve cypress performances (server#47379)
• Fix(theming): Make getImage() call save against missing non-SVG version (server#47380)
• Chore(deps): Update openapi-extractor to v1.0.0 (server#47381)
• Ci: Skip flaky test on PHP 8.3 (server#47388)
• Update `@nextcloud/vue` to v8.17.0 (server#47397)
• Fix: expand select and group by for calendar reminder backend (server#47399)
• Feat(files): Allow more than 50 favorite views (server#47400)
• Feat(Security): Allow defining a password context for password validation and generation (server#47403)
• Fix(files_versions): Migrate version name dialog from NcModal to NcDialog (server#47407)
• Fix(dashboard): Adjust widget border radius (server#47408)
• Fix(provisioning): Support setting new app configs as well (server#47409)
• Feat(files_sharing): reminder for link shares with expiration date (server#47412)
• Fix(caldav): limit property length (server#47413)
• Test(admin_audit): add test for user management listener (server#47414)
• Fix: Trusted server icon recovery without addressbook change (server#47415)
• Fix(files): Create non-existent parents of mountpoints (server#47417)
• Fix(migration): Add missing migration attributes (server#47419)
• Fix: promote re-shares when deleting the parent share (server#47425)
• Fix(mailer): Call to custom mail_template_class (server#47435)
• Fix(files): Node loading information should be accessible (server#47443)
• Fix(user_status): add link to Availability page if user set predefined ‘Vacationing’ (server#47448)
• Update to coding-standard 1.2.3 (server#47449)
• “Line” manager instead of “Account” manager (server#47450)
• Fix: correct documentation for mail provider (server#47452)
• Chore(deps-dev): bump webpack from 5.93.0 to 5.94.0 (server#47458)
• Chore(deps): bump @vueuse/integrations from 11.0.0 to 11.0.1 (server#47460)
• Chore(deps): bump core-js from 3.37.1 to 3.38.1 (server#47461)
• Chore(deps): bump @vueuse/core from 11.0.0 to 11.0.1 (server#47463)
• Bump nextcloud/coding-standard from 1.2.1 to 1.2.3 in /vendor-bin/cs-fixer (server#47464)
• Fix(files): Reset drop notice on firefox (server#47465)
• Test: Migrate from Jest to vitest (server#47466)
• Fix(files): Adjust margin at the file list bottom (server#47467)
• [master] Fix npm audit (server#47470)
• Fix(cs-fixer): Correctly ignore files ignored by git (server#47474)
• Fix(flow): cannot set custom user agent (server#47480)
• Chore(files): Adjust wording for file type filter (server#47490)
• Fix(dav): Allow apps to get unshares for DAV resources (server#47494)
• Feat: Delegate is-encrypted handling to the e2ee app (server#47495)
• Feat: Improve encryption mode detection in occ info:file (server#47496)
• Fix(files): fix list gap at bottom (server#47500)
• Feat(settings): Add setup check for apcu cache expunge (server#47507)
• Fix(Router): Load attribute routes of all apps when not app is specified (server#47508)
• Fix: gracefully handle unexpected exif orientation types (server#47509)
• Fix(db): Increase log level for very slow transactions (server#47510)
• Chore: Improve `FileInfo::isEncrypted` description (server#47511)
• Fix(migration): Correctly sort migrations by version number (server#47515)
• Feat(transfer-ownership): Correctly react to encrypted files (server#47519)
• Fix(logger): ignore session logging during setup (server#47521)
• [TaskProcessing] Add manager::runTask method (server#47522)
• Use NavigationManager instead of AppManager to handle custom apps order (server#47523)
• Fix: optimise `getWrongShareOwnership` query (server#47525)
• Fix(files_external): Handling in FTP UI for custom ports (server#47526)
• Fix(files_external): Handling in SFTP UI for custom ports (server#47527)
• Feat(webhook_listeners): Enable the app by default (server#47532)
• Fix/move image to oc namespace (server#47535)
• Fix(files): Correctly check for already used names when creating new folder (server#47540)
• Ci: Reduce required run time (server#47541)
• Fix: Adjust filename validation messages (server#47546)
• Fix(files_sharing): Make share labels nullable (server#47551)
• Chore: fix usage of deprecated functions and adjust code style (server#47553)
• Fix(config): Avoid error messages for restricted opcache API (server#47567)
• Refactor: Migrate public-page header actions to Vue (server#47568)
• Fix: Do not fail to get internal path on NonExistingFile (server#47581)
• Move preferred install method to top spot (server#47582)
• Fix(theming): Add migration to restore primary color after separating primary and background (server#47586)
• Fix(settings): Hide forbidden UI elements for group managers (server#47589)
• Fix(test): Fix provisioning enabled apps (server#47596)
• Fix: re-enable content-length header via htaccess (server#47598)
• Fix(files): Remove margin and width to not break layout (server#47600)
• [TaskProcessing] Use taskprocessing in TextProcessing and STT managers (server#47601)
• Feat: Use the blurhash in Files (server#47605)
• Fix(DB): set sharding parameters only when intended (server#47611)
• Fix(css): Adjust header styles to only add focus-visible styles to menu (server#47616)
• Fix(css): make scrollbar visible again (server#47617)
• [LinkReferenceProvider] Better size check (server#47627)
• Fix(UnifiedSearch): Restore normal dialog size (server#47628)
• [oauth2] Store hashed secret instead of encrypted (server#47635)
• Fix: Properly handle share attributes if set to null (server#47638)
• Fix: Run migration sql as statement so that the primary db node is used (server#47640)
• Fix: Fix inaccessible content on public pages due to overlapping footer (server#47649)
• Chore: Cleanup app framework middleware (server#47650)
• Chore(deps): bump nextcloud-vue-collections from 0.12.0 to 0.13.0 (server#47654)
• Chore(deps): bump @nextcloud/dialogs from 5.3.5 to 6.0.0 (server#47655)
• Chore(deps): bump @vueuse/integrations from 11.0.1 to 11.0.3 (server#47656)
• Chore(deps): bump @nextcloud/vue from 8.17.0 to 8.17.1 (server#47657)
• IUserConfig (server#47658)
• Followup: fix(settings): Don’t display built-in task types in AI settings TextProcessing (server#47659)
• Fix(RichObjectStrings/Validator): Validate key value types of rich object parameters (server#47662)
• Chore(deps): bump the github-actions group with 4 updates (server#47664)
• Fix(files): Correctly parse external shares for files UI (server#47665)
• Fix: Properly calculate intermediate icon for touch icon generation (server#47670)
• Test(cypress): Await promise in response to prevent timeout (server#47671)
• Fix(settings): Fix sharing exclude groups from password requirement option not working (server#47674)
• Chore(db): Make the query more simple to read (server#47675)
• Fix(OCP): Fix Image interface (server#47676)
• Chore(IConfig): Adjust type of `getUsersForUserValue` (server#47678)
• Chore(IGetRealUIDBackend): Fix typo in doc block (server#47679)
• Chore: Update `.git-blame-ignore-revs` (server#47680)
• Fix: Move OC_API into \OC\ApiHelper in standard namespace (server#47685)
• Chore(theming): Increase app version (server#47690)
• Fix: only keep major as server version (server#47709)
• [master] Update psalm-baseline.xml (server#47724)
• Chore(storage): refactor some code portions (server#47731)
• Fix(caldav, carddav): also allow unsharing of circle shares (server#47737)
• Fix(files): undefined sidebar (server#47738)
• [master] fix(files): undefined displayname for outdated `@nextcloud/files`<3.6.0 apps (server#47752)
• Fix(appstore): Cache apps.json also on dev instances (server#47754)
• Fix(files): Check if target path is a descendant of the shared folder (server#47756)
• Fix: Fix missing footer on public pages (server#47761)
• Fix: Use sha256 to hash arguments of background jobs (server#47769)
• Fix(dav): Always respond custom error page on exceptions (server#47770)
• Fix(l10n): Rephrasing some exceptions to be translated (server#47782)
• Fix(FileInfo): correctly implement `\ArrayAccess::offsetGet` (server#47784)
• Feat(carddav): add command to list address books (server#47788)
• Chore: adjust code to adhere to coding standard (server#47789)
• Chore(files): Use public API where possible (server#47792)
• Fix(TaskProcessing): increase error_message column length (server#47801)
• Fix(files): Fallback icons should fill the container (server#47802)
• Chore(files_sharing): Add migration attribute for `share.reminder_sent` column (server#47803)
• Fix: Replace conflicting tags in `xml_exception` template (server#47805)
• Chore(files_sharing): Do not use files source files but directly the library (server#47806)
• Fix(files_sharing): password checkbox and labels in link share (server#47807)
• Chore(i18n): Spelling of ID (server#47808)
• [master] Update psalm-baseline.xml (server#47816)
• Chore(deps-dev): bump cypress-if from 1.12.5 to 1.12.6 (server#47818)
• Chore(deps-dev): bump cypress from 13.13.2 to 13.14.2 (server#47819)
• Chore(deps): bump underscore from 1.13.6 to 1.13.7 (server#47820)
• Chore(deps-dev): bump puppeteer from 22.15.0 to 23.3.0 (server#47821)
• Chore(deps-dev): bump stylelint from 16.8.2 to 16.9.0 (server#47822)
• Chore(deps): bump @vueuse/components from 11.0.0 to 11.0.3 (server#47823)
• Chore(i18n): adapted lowercase (server#47824)
• Feat: add iMip Request Handling (server#47826)
• Fix: Adjust preview for view-only shares (server#47831)
• Fix: (CalDav) Delete invitation link when deleting Calendars or Events (server#47832)
• Fix(appstore): return if appstore is manually disabled (server#47834)
• Fix(files): Never return a null ETag in DAV (server#47837)
• Fix(files_sharing): Open single-file-share by default (server#47841)
• Add an endpoint to remove all webhook registrations from an app (server#47845)
• Fix: provision api’s status codes (server#47846)
• Fix copying or moving from shared groupfolders (server#47847)
• Fix(files): Reset context menu position on close (server#47848)
• Fix: misc code fixes around db sharding (server#47852)
• Fix: make swift connect exception message more informative (server#47853)
• Fix(appstore): Ensure returned apps from AppStore are valid (server#47854)
• Fix(preview): gracefully handle file not being opened in ProviderV2 (server#47858)
• Fix: Only write once to template instead of create/copy (server#47860)
• Move admin_audit to proper event listeners v2 (server#47865)
• Fix(settings): Add back create group icon (server#47881)
• Fix(setup-checks): Ensure URL with webroot works (server#47883)
• Chore: Add another coding standard commit to the git blame ignore (server#47884)
• Fix(files): Make `openMenu` watcher null safe (server#47891)
• Fix: Make user removal more resilient (server#47896)
• Fix(files): Ensure children are removed from folder and not duplicated (server#47905)
• Chore: Update trashbin retention documentation with exceeded quota details (server#47906)
• Fix(files): Add more visual move / copy notification (server#47910)
• Fix: Add whiteboard to education and public sector bundle (server#47913)
• Fix(LDAP): check index before accessing it (server#47914)
• Feat(caldav): create subscriptions via occ (server#47916)
• Feat: Reset route if neither the Viewer of the Sidebar is open (server#47920)
• 🥅 — Catch MaxInstancesExceededException on calendar events (server#47924)
• Migrate away from OC_App to IAppManager (server#47927)
• Fix(a11y): Update OpenDyslexic from 0.920 to 2.001 (server#47928)
• Build: bump version to run sha256 for background job arguments migration (server#47930)
• [master] Update psalm-baseline.xml (server#47932)
• Fix(config): Throw PreconditionException always when it didn’t match (server#47933)
• Fix(files_external): broken credentials dialog (server#47945)
• Feat: Make `CheckServerResponseTrait` public and provide as `OCP\SetupCheck\CheckServerResponseTrait` (server#47947)
• Fix(collaboration): Reduce timeouts to 3s for link reference connects (server#47948)
• Fix(files): Adjust Cache::searchQuery() parameter name to match interface (server#47954)
• Build(deps): bump vimeo/psalm from 5.25.0 to 5.26.1 in /vendor-bin/psalm (server#47960)
• [master] Update psalm-baseline.xml (server#47961)
• Build(deps): bump send and express (server#47964)
• Build(deps-dev): bump express from 4.19.2 to 4.21.0 (server#47965)
• Fix(files_external): Check key exists before accessing it (server#47968)
• Fix: Do not try to set HTTP response code on already closed connection (server#47971)
• Add missing Nextcloud v30 to issue template (server#47973)
• Chore!: Remove `ILogger` and its friends (server#47978)
• Perf(ObjectStoreStorage): Improve (slow) move on same object bucket (server#47986)
• [master] Update psalm-baseline.xml (server#47990)
• Add SabreDav Patch for iTip Broker (server#47998)
• Fix(ci): Use latest buildjet version (server#47999)
• Fix: Restore missing dot in FilesListVirtual.vue (server#48003)
• Fix(Entity): Fix magic setter call for custom strong typed setters (server#48008)
• Fix: Remove OCP\Files\Storage interface deprecated since version 9 (server#48009)
• Feat(db): switch from settype to casts (server#48010)
• Fix(BaseResponse): Cast XML element values to string (server#48013)
• Fix(Tags): Return boolean for userHasTags() (server#48014)
• Fix(Storage\Local): Do not call getSourcePath() on SplFileInfo (server#48015)
• Fix(S3ConfigTrait): Allow proxy field to take false (server#48016)
• Fix(Comment): Initialize childrenCount as integer (server#48017)
• Feat: add verbose mode to cron.php (server#48018)
• Fix(user_ldap): Use %n in plural translation to avoid a crash in L10N (server#48028)
• Fix(dav): cast content length to interger (server#48029)
• Fix(dav): cast parameters to string (server#48030)
• Fix(filesreport): cast fileId to integer (server#48031)
• Fix: correct link to trademark (server#48037)
• Refactor: migrate dirname to __DIR__ constants (server#48041)
• Refactor: Use the elvis operator + fix: Handle null checks with the ?? operator (server#48042)
• Fix(dav): imip service test expects integers for last occurence (server#48043)
• Test: cast node name and data to string (server#48044)
• Fix(dav): set string type for sanitizeMtime (server#48045)
• Refactor: Replace __CLASS__ with ::class references (server#48046)
• Refactor: Add void return type to PHPUnit test methods (server#48049)
• Fix(weather_status): Fix search address errors when offline (server#48050)
• [master] Update psalm-baseline.xml (server#48060)
• Fix(a11y): Add OTF font loading check (server#48063)
• Fix(Storage): Fix method docs inheritance (server#48080)
• Chore(i18n): Fixed grammar and improved wording (server#48081)
• Refactor: move to new activity exception (server#48086)
• Fix(settings): disable Discover when appstore is disabled (server#48090)
• Fix(Storage): Document getOwner() can return false (server#48094)
• Feat: Move to ZipFolderPlugin for downloading multiple-nodes (server#48098)
• Chore: Remove deprecated aliases from dependency injection (server#48110)
• Fix: Move storage constructor to specific interface (server#48111)
• Fix(appstoreFetcher): get list from a custom store and remove unnecessary warning (server#48114)
• [master] Update psalm-baseline.xml (server#48115)
• Chore: add `application/zstd` (server#48129)
• Feat: mail provider settings (server#48134)
• Feat: Add OCP interface to format richtext into string (server#48137)
• Fix: Remove legacy settings forms (server#48138)
• Ci: Bump phpunit to 9.6.19 and add dependabot (server#48140)
• Fix(psalm): Fix @throws annotations (server#48144)
• Fix: Drop unnecessary exit (server#48145)
• Chore(deps): Bump vite from 5.4.2 to 5.4.6 (server#48151)
• Chore(legacy): Introduce public version class and drop version methods from OC_Util (server#48152)
• Feat(app_api): make app_api shipped and default enabled (server#48153)
• [master] Update psalm-baseline.xml (server#48154)
• Object store move fixes and more (server#48160)
• Fix(settings): pronouns UsersControllerTest (server#48161)
• Fix(autocomplete): Move known array keys to psalm docs (server#48162)
• Feat: add nfo file support (server#48163)
• Fix(activity): Update more activity providers to use new exceptions (server#48175)
• Fix: Override start method of \Sabre\DAV\Server to remove exception o… (server#48177)
• Chore(deps): Update nextcloud/coding-standard to v1.3.1 (server#48181)
• Fix: fix share reminder job for oracle (server#48182)
• Chore(deps-dev): Bump babel-loader from 9.1.3 to 9.2.1 (server#48185)
• Chore(deps): Bump @vueuse/components from 11.0.3 to 11.1.0 (server#48187)
• Chore(deps-dev): Bump @babel/plugin-transform-private-methods from 7.24.7 to 7.25.4 (server#48188)
• Chore(deps-dev): Bump @nextcloud/cypress from 1.0.0-beta.8 to 1.0.0-beta.9 (server#48190)
• Chore(deps-dev): Bump wait-on from 7.2.0 to 8.0.1 (server#48192)
• Chore: Add proper deprecation dates where missing (server#48196)
• Fix: add sharding compatible version of share reminder job (server#48200)
• Feat: make systemtags public visible (server#48206)
• Fix: Don’t crash if disabled user is missing in the database (server#48207)
• Fix(psalm): Update psalm baseline (server#48212)
• Fix(tests): Fix test selection and run unit tests of DAV and user_status (server#48215)
• Chore: Cleanup and prepare `\OC\Repair\RepairMimeTypes` tests for PHPUnit 10 (server#48217)
• Chore: Cleanup and prepare some app tests for PHPUnit 10 (server#48218)
• Fix(IStorage): Use false instead of bool intersection type to match implementations (server#48219)
• Chore: Remove old travis related stuff (server#48220)
• Perf: reuse cache info we already have when moving to object store (server#48222)
• Add rector config (server#48223)
• Fix: improve moving object store items to trashbin (server#48224)