Deck 1.18.3: Attachments cannot be removed from cards – DELETE request returns 404

Hi,

I can reproducibly attach files to a Deck card, but I cannot remove them afterwards using Attachments → … → Remove attachment.

Environment

  • Nextcloud: 34.0.0
  • Deck: 1.18.3
  • Nextcloud AIO
  • Browser: Safari 26.6.2 on macOS
  • The problem is reproducible with newly uploaded attachments.

Steps to reproduce

  1. Open a Deck card.
  2. Go to Attachments.
  3. Upload a new file using the upload function.
  4. The file is successfully attached to the card.
  5. Open the ... menu of the attachment.
  6. Select Remove attachment.

Expected behavior

The attachment should be removed from the card.

The underlying file does not necessarily need to be deleted from Nextcloud Files; the attachment/reference to the Deck card should be removed.

Actual behavior

Nothing is removed.

The browser’s network inspector shows that Deck sends a DELETE request like:

DELETE /ocs/v2.php/apps/deck/api/v1.0/cards/33/attachment/file:21?boardId=5

The server responds with:

HTTP 404

and the OCS response is:

{
    "ocs": {
        "meta": {
            "status": "failure",
            "statuscode": 998,
            "message": "Invalid query, please check the syntax."
        },
        "data": []
    }
}

Attachment data returned by Deck

Immediately before the delete attempt, the attachment endpoint successfully returns the newly uploaded attachment:

GET /ocs/v2.php/apps/deck/api/v1.0/cards/33/attachments?boardId=5

Response:

{
    "id": 21,
    "cardId": 33,
    "type": "file",
    "data": "Ordnerstruktur-MEINS (2).km",
    "deletedAt": 0
}

The GET request therefore identifies the attachment with numeric ID 21 and type file.

When removing it, however, the Deck frontend sends:

.../attachment/file:21

The same behavior was reproduced with another attachment (id: 20), so this does not appear to be related to one particular file.

Additional observation

The issue also occurs with a file that was freshly uploaded to the card using Deck 1.18.3. Therefore, it does not appear to be limited to old or migrated attachments.

No corresponding new entry appears in nextcloud.log when clicking Remove attachment.

Is anyone else able to reproduce this with Nextcloud 34.0.0 / Deck 1.18.3?