Nextcloud Release Notes

What's Changed

• [stable-34.0] fix(file-provider): invalidate lock tokens when file paths change. by @backportbot[bot] in #10185
• [stable-34.0] Fix initial menu bar extra sync status by @backportbot[bot] in #10191
• [stable-34.0] chore(macOS): Removed obsolete SwiftNIO dependency by @backportbot[bot] in #10194
• [stable-34.0] fix(#10177): Unblock menu bar extra by @backportbot[bot] in #10195
• [stable-34.0] Movable wizard window by @backportbot[bot] in #10197
• [stable-34.0] fix(gui): prevent nullptr dereference when VFS mode is unavailable by @backportbot[bot] in #10199
• [stable-34.0] fix(vfs/windows): use proper relative local path for DB records by @backportbot[bot] in #10207
• [stable-34.0] chore(agents): add guideline for verifiable claims in contributions. by @backportbot[bot] in #10201
• [stable-34.0] Relabel "virtual files" as "File Provider" by @backportbot[bot] in #10209
• [stable-34.0] fix(libsync): folder move or rename data loss. by @backportbot[bot] in #10218
• [stable-34.0] fix: build error with OpenSSL 4.0 by @backportbot[bot] in #10228
• [stable-34.0] fix(#10216): Prevent app nap and silent kill by @backportbot[bot] in #10231
• [stable-34.0] fix(UI): read OCC_UPDATE_URL only for dev builds by @backportbot[bot] in #10240
• [stable-34.0] feat(tray): move logout and remove to settings menu by @backportbot[bot] in #10239
• [stable-34.0] fix(gui): remove gap after status messages by @backportbot[bot] in #10247
• [stable-34.0] Bugfix/end to end encryption by @backportbot[bot] in #10249
• [stable-34.0] Correct Remote Change Propagation to File Provider Framework by @backportbot[bot] in #10254
• [stable-34.0] Support Adobe Lock Files by @backportbot[bot] in #10265
• [stable-34.0] Confine Enumeration (master) by @backportbot[bot] in #10267
• [stable-34.0] fix: parsing ] in ignore list in File Provider correctly by @backportbot[bot] in #10270
• [stable-34.0] Remove QtWebEngine by @backportbot[bot] in #10278
• [stable-34.0] Fix crash due to FILEPROVIDER_OBSERVER_TOO_MANY_ITEMS by @backportbot[bot] in #10285
• [stable-34.0] fix(cmd,csync): don't silently ignore a missing --exclude file by @backportbot[bot] in #10291
• [stable-34.0] fix(logs): prints the Qt platform name at startup by @backportbot[bot] in #10287
• [stable-34.0] Prevent crash on wake (Ticket#96101255) by @backportbot[bot] in #10294
• [stable-34.0] chore: disable building with Qt WebEngine in craft settings by @backportbot[bot] in #10296
• [stable-34.0] "Edit locally" in Web → Reveal in Finder on macOS by @backportbot[bot] in #10305
• [stable-34.0] feature(signup): migrate simple-signup to standard browser by @backportbot[bot] in #10311
• [stable-34.0] Bugfix/noid/fix account provisioning by @backportbot[bot] in #10319
• [stable-34.0] feat(tray): Migrate TrayWindow to the new tray user menu by @backportbot[bot] in #10321
• [stable-34.0] Support Adobe InDesign safe save by @backportbot[bot] in #10324
• [stable-34.0] fix: translation strings by @backportbot[bot] in #10330
• [stable-34.0] fix: load existing accounts before creating a new one by @backportbot[bot] in #10327
• [stable-34.0] fix: Don't recursively call processEvents by @backportbot[bot] in #10333
• [stable-34.0] fix(UI): validate E2EE file names by @backportbot[bot] in #10337
• [stable-34.0] fix(exclude): avoid trying to read patterns from file when reading failed by @backportbot[bot] in #10341
• [stable-34.0] Enable removal of downloaded items on a folder by @backportbot[bot] in #10342
• [stable-34.0] fix: "dismiss" string and showing of chat message in tray preview by @backportbot[bot] in #10346
• [stable-34.0] fix(TransifexStringCatalogSanitizer): Hardening to prevent data loss by @backportbot[bot] in #10347
• [stable-34.0] feature: add search dialog to new tray menu by @backportbot[bot] in #10349
• [stable-34.0] fix: do not allow scheme change for push notifications by @backportbot[bot] in #10352
• [stable-34.0] Feature/governance labels integration by @backportbot[bot] in #10353
• [stable-34.0] chore: cleanup some unused capability/sharing methods by @backportbot[bot] in #10355
• [stable-34.0] perf(activity): cache singleton pointers and avoid string concat in hot path by @backportbot[bot] in #10358

Full Changelog: v34.0.0-rc1...v34.0.0-rc2

Original source

What's Changed

• [stable-4.0] Remove Windows Shell/Explorer pinning fallback commands from SocketApi by @backportbot[bot] in #9916
• [stable-4.0] fix(editLocally): evaluate lock-record DB call outside Q_ASSERT by @backportbot[bot] in #9984
• [stable-4.0] fix logger for stdout by @backportbot[bot] in #10005
• [stable-4.0] fix(logs): change update channel log severity to info by @backportbot[bot] in #10042
• [stable-4.0] fix: remove admin recall feature by @backportbot[bot] in #10047
• [stable-4.0] fix(filedetails): use correct path for fetching file tags by @backportbot[bot] in #10128
• [stable-4.0] fix(networkjobs): move processEvents after reply reads in LsColJob by @backportbot[bot] in #10102
• [stable-4.0] fix(common): preserve Windows Explorer custom folder icons during migration. by @backportbot[bot] in #10131
• [stable-4.0] fix: do not double translate string by @backportbot[bot] in #10156
• [stable-4.0] fix(UI): read OCC_UPDATE_URL only for dev builds by @backportbot[bot] in #10242
• [stable-4.0] Bugfix/end to end encryption by @backportbot[bot] in #10250
• [stable-4.0] fix(lscoljob): disable Qt's decompression check to allow listing of really large folders again by @backportbot[bot] in #10253
• chore: update craft cache by @mgallien in #10276
• [stable-4.0] fix(logs): prints the Qt platform name at startup by @backportbot[bot] in #10289
• [stable-4.0] Prevent crash on wake (Ticket#96101255) by @backportbot[bot] in #10292
• chore: bump NextcloudFileProviderKit version to 3.2.14. by @camilasan in #10316
• [stable-4.0] Bugfix/noid/fix account provisioning by @backportbot[bot] in #10317
• [stable-4.0] fix: load existing accounts before creating a new one by @backportbot[bot] in #10326

Full Changelog: v4.0.10...v4.0.11

Original source

What's Changed

• [stable-33.0] fix: build error with OpenSSL 4.0 by @backportbot[bot] in #10229
• [stable-33.0] fix(#10216): Prevent app nap and silent kill by @backportbot[bot] in #10232
• [stable-33.0] fix(UI): read OCC_UPDATE_URL only for dev builds by @backportbot[bot] in #10241
• [stable-33.0] fix(gui): remove gap after status messages by @backportbot[bot] in #10246
• [stable-33.0] Bugfix/end to end encryption by @backportbot[bot] in #10248
• Port #10252 back manually to stable-33.0 by @i2h3 in #10256
• Confine Enumeration (stable-33.0) by @i2h3 in #10261

Full Changelog: v33.0.6...v33.0.7

Original source

Changes

server

• Fix: folder tree selection after any action in main content (server#60478)
• Test: replace checkbox assertions with DoesNotPerformAssertions (middleware) (server#60759)
• Test: replace checkbox assertions with real assertions or DoesNotPerformAssertions (server#60785)
• Fix(files): show proper information when a move will override the target (server#60963)
• Perf(user_ldap): chunk oracle queries for lower bind cost (server#60978)
• Fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization (server#60983)
• Fix(theming): read cachebuster as int in manifest endpoint (server#61010)
• Fix(dav): finalize upload metadata before post-write hooks (server#61072)
• Fix(comments): load comments styles when the comments app is loaded (server#61076)
• Fix(dav): properly handle files metadata (server#61078)
• Fix(settings): Fix appstore icon color in settings menu (server#61093)
• Fix(comments): Use capped memory cache for comments (server#61097)
• Fix(security): don’t propagate ValueError from Crypto::decrypt() fallback (server#61105)
• Fix(files): make sure nested changes are propagated to sidebar tabs (server#61106)
• Fix: Correctly detect appid for dist css files (server#61113)
• Fix: use correct permissions mask for non-home storage public links (server#61118)
• Fix(settings): Show loading spinner while searching accounts (server#61122)
• Build(deps): bump the symfony group across 1 directory with 9 updates (server#61129)
• Master] fix(security): Update code signing revocation list (server#61133)
• Feat(file-search): add property to SearchQuery and check select fields to decide wheter to join extended cache (server#61157)
• Fix(core): keep app menu settings icon legible on light backgrounds (server#61161)
• Build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 (server#61178)
• Fix(previews): ffprobe hangs (server#61182)
• Test(settings): reduce flakiness of authorized group integration assertions (server#61185)
• Fix(files_versions): guard null path in event listeners (server#61189)
• Fix(repair): restrict unserialize() in RemoveBrokenProperties (server#61203)
• Fix(appstore): bring back “update all” button (server#61212)
• Fix(settings): clear NcAppNavigation toggle overhang (server#61234)
• Master] fix(security): Update code signing revocation list (server#61239)
• Feat(settings): Require 8.3 for 35 (server#61241)
• Fix(encryption): Fix endpoint /ajax/userSetRecovery to support boolean (server#61243)
• Job run history cleanup (server#61249)
• Fix: Fix PHP Warning foreach() argument must be of type array|object, null given (server#61258)
• Master] fix(security): Update code signing revocation list (server#61283)
• Fix(twofactor_backupcodes): Add a clean helper to set code as used (server#61296)
• Fix(theming): preserve uploaded favicon and touch icon (server#61302)
• Fix: Use token expiration for ephemeral sessions (server#61305)
• Feat(oauth2): Add commands for adding and deleting clients (server#61309)
• Fix(user_ldap): Escape filter part when searching for group members (server#61325)
• Chore: Reduce PHPUnit test matrix on stable34 and remove coverage (server#61331)
• Fix: trim duplicate search results for external share (server#61340)
• Fix: Do not set last-password-confirm for apptoken sessions (server#61342)
• Fix(team-manager): ensure team resources are only retrived for members (server#61351)
• Fix(ocm-add-share): adjust domain validation (server#61357)
• Fix: ensure file names are string-typed (server#61361)
• Feat(oauth2): Add commands for adding and deleting clients (server#61362)
• Fix: prevent editing delegated admins (server#61370)
• Fix(caldav): respect federation settings (server#61380)
• Fix(files_sharing): Hide incompatible actions in shares (server#61386)
• Fix(files_versions): avoid version snapshot races during cross-storage renames (server#61403)
• Fix: Fix alignment issues of app password form (server#61404)
• Master] fix(security): Update code signing revocation list (server#61430)
• Fix(onetime-qrcode): Remove password confirmation attribute (server#61502)

activity

• Refactor(types): add native parameter and return types to UserSettings (activity#2614)
• Perf(mailqueue): cover amq_latest_send in the affecteduser index (activity#2636)

circles

• Fix(local-controller): dont show full config int of circle for non-members (circles#2528)
• Fix(local-controller): validate params set on team creation (circles#2534)
• Adjust local controller to better handle permission checks (circles#2538)
• Fix(local-controller): include CFG_OPEN in config mask for visible circles (circles#2557)

files_lock

• Perf: Avoir calling Server::get for each share mounts (files_lock#1123)

notifications

• Fix(webpush): recover gracefully from corrupted or mismatched VAPID keys (notifications#3070)
• Chore: extend testing of encryptAndSign and make the methods discoverable by psalm (notifications#3076)
• Docs(webpush): Document knowledge and trust models of webpush flow (notifications#3077)
• Build(deps): Bump guzzlehttp/psr7 from 2.8.0 to 2.11.0 (notifications#3087)
• Fix(webpush): Don’t reuse query object for second query (notifications#3089)
• Fix(email): Correctly initialize next_send_time field (notifications#3120)

recommendations

• Chore(CI): Adjust testing matrix for Nextcloud 34 (recommendations#1038)

serverinfo

• Ci(actions): Update workflows (serverinfo#1014)
• Chore: Require PHP 8.2 (serverinfo#1020)

survey_client

• Fix(report): Fix sending huge reports (survey_client#439)

suspicious_login

• Fix(notifier): Fix label length limited to 32 characters (suspicious_login#1117)

text

• Chore(github): update workflows (text#8714)
• Fix(math): fix lost content after math node (text#8722)
• Fix(editorApi): allow to disable image lazy-loading (text#8728)
• Fix permission change in text doc (text#8751)
• Fix: show Assistant icon if only translation provider available (text#8760)
• Performance: Only check permissions when changing content (text#8764)
• Ci: remove compile command, as it happens after merge. Then, also run reuse (text#8767)

twofactor_totp

• Fix(migration): preserve state=2 secrets when cleaning up unverified … (twofactor_totp#1776)

viewer

• Fix(plyr): the speed settings button should not be cut (viewer#3199)
• Fix(plyr): add l10n to components (viewer#3203)
• Fix(plyr): the speed selection should not go out of the viewport (viewer#3206)
• Fix(plyr): add l10n to speed selections (viewer#3216)

Original source

What's Changed

• [stable-33.0] New remote items inherit content policy by @backportbot[bot] in #10066
• [stable-33.0] Updated API calls NextcloudKit dependency to breaking changes in 7.3.3 by @backportbot[bot] in #10111
• [stable-33.0] fix(networkjobs): move processEvents after reply reads in LsColJob by @backportbot[bot] in #10103
• [stable-33.0] fix: do not trigger false remote wipe message by @backportbot[bot] in #10112
• [stable-33.0] fix(filedetails): use correct path for fetching file tags by @backportbot[bot] in #10129
• [stable-33.0] fix(common): preserve Windows Explorer custom folder icons during migration. by @backportbot[bot] in #10133
• fix(macOS): Updated NextcloudKit dependency to fix NextcloudFileProvi… by @Rello in #10140
• [stable-33.0] fix: add direct log when folder watcher detects changes by @backportbot[bot] in #10146
• [stable-33.0] fix: do not double translate string by @backportbot[bot] in #10154
• [stable-33.0] fix(file-provider): use slash prefix for child item queries. by @backportbot[bot] in #10169
• [stable-33.0] chore: update CODEOWNERS file. by @backportbot[bot] in #10170
• [stable-33.0] fix(file-provider): prevent data loss when parent folder moves during sync. by @backportbot[bot] in #10172
• [stable-33.0] fix(file-provider): invalidate lock tokens when file paths change. by @backportbot[bot] in #10186
• [stable-33.0] fix(gui): prevent nullptr dereference when VFS mode is unavailable by @backportbot[bot] in #10198
• [stable-33.0] fix(vfs/windows): use proper relative local path for DB records by @backportbot[bot] in #10206
• [stable-33.0] fix(lscoljob): disable Qt's decompression check to allow listing of really large folders again by @backportbot[bot] in #10211
• [stable-33.0] fix: evaluate notify-push ids and only start sync if the ids are know by @backportbot[bot] in #10210
• [stable-33.0] fix(libsync): folder move or rename data loss. by @backportbot[bot] in #10219

Full Changelog: v33.0.5...v33.0.6

Original source