Final releases of 34.0.2, 33.0.7 and 32.0.13

[Altahrim]

Final releases of 34.0.2, 33.0.7 and 32.0.13 are now available!

Download

• Release 34.0.2 on GitHub

• Release 33.0.7 on GitHub

• Release 32.0.13 on GitHub

Changelogs

34.0.2

server

• Chore(deps): bump @vueuse/integrations from 14.1.0 to 14.3.0 (server#60428)
• Chore(deps): bump @vueuse/core from 14.1.0 to 14.3.0 (server#60679)
• Chore(deps): Bump p-queue from 9.2.0 to 9.3.0 (server#60681)
• Chore(deps): Bump focus-trap from 8.0.1 to 8.2.1 in /build/frontend-legacy (server#60684)
• Chore(deps): Bump @simplewebauthn/browser from 13.2.2 to 13.3.0 in /build/frontend-legacy (server#60686)
• Chore(deps): Bump p-queue from 9.1.0 to 9.3.0 in /build/frontend-legacy (server#60687)
• Fix(cypress): disable unsupported-browser redirect in test container (server#60807)
• Feat(UserManager): Add getters for avatar URLs (server#60811)
• Chore(deps): Bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy (server#61036)
• Fix(core): public share download icon color and theme filter scope (server#61211)
• Fix: use card interface instead of object (server#61252)
• Chore(deps-dev): Bump the vitest group across 2 directories with 2 updates (server#61454)
• Chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 (server#61455)
• Chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 (server#61456)
• Chore(deps-dev): Bump nextcloud/rector from 0.5.1 to 0.5.2 in /vendor-bin/rector (server#61457)
• Chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 (server#61458)
• Chore(deps-dev): Bump rector/rector from 2.4.5 to 2.4.6 in /vendor-bin/rector (server#61459)
• Chore(deps-dev): Bump stylelint from 17.12.0 to 17.13.0 (server#61460)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61461)
• Chore(deps): Bump @nextcloud/vue from 9.8.1 to 9.8.2 (server#61462)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (server#61463)
• Docs(config): clarify metadata and conversion file size limits (server#61482)
• Fix: properly mark CleanupShareTarget as expensive (server#61498)
• Fix: update cached mounts when moving share in repair step (server#61500)
• Fix(files_trashbin): create folder if missing when expiring trash (server#61523)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61528)
• Fix: stop calling DI container in SharedStorage (server#61529)
• Fix(preview): First cleanup from filecache and then from preview table (server#61531)
• Perf(View): don’t sort twice the same array (server#61535)
• Perf: block more properties from using the custom properties backend (server#61540)
• Fix(settings): correct heading order in account management sidebar (server#61546)
• Fix: Make the IProvideUserSecretBackend usable (server#61550)
• Fix: track time spent in recursive markOrRun calls (server#61553)
• Perf(log): normalize log data only when logging (server#61557)
• Perf: avoid DIing IRootFolder at every shared storage init (server#61558)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61571)
• Fix(appstore): only show appstore entries if actual from appstore (server#61592)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61596)
• Fix(a11y): label account QR code button (server#61601)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61606)
• Fix(maintenance): allow AppAPI to serve requests during maintenance mode (server#61613)
• Fix(user_status): stabilise the user_status (server#61617)
• Fix: Add plural form for translations (server#61626)
• Fix(core): use proper API routes for recommended apps (server#61633)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61645)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61662)
• Fix(updatenotification): use correct appstore route (server#61664)
• Fix(LoginForm): improve login throttle warning wording (server#61671)
• Fix(files_sharing): reject custom share tokens longer than the db column (server#61676)
• Fix(files_external): ignore deprecated backends (server#61691)
• Build(deps): Composer audit updates (server#61697)
• Perf: Only sort wrappers when adding them (server#61700)
• Fix(files_external): properly apply default mount options (server#61702)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61712)
• Fix(l10n): Fix plural (server#61734)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61737)
• Fix(dav): Always show example content section (server#61742)
• Fix(core): resolve some edge cases with recommended apps (server#61747)
• Fix(db): align preview migration annotations with created tables (server#61749)
• Chore(deps-dev): bump the vite group across 2 directories with 1 update (server#61756)
• Chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (server#61768)
• Chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 (server#61769)
• Chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 (server#61770)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 (server#61771)
• Chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 (server#61772)
• Chore(deps): bump vue from 3.5.38 to 3.5.39 (server#61774)
• Chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 (server#61775)
• Chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy (server#61776)
• Chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy (server#61777)
• Chore(deps): bump libphonenumber-js from 1.13.4 to 1.13.7 in /build/frontend-legacy (server#61778)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 in /build/frontend-legacy (server#61781)
• Fix(files_external): prevent dropdown entries from shrinking (server#61797)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (server#61802)
• Chore: run `npm audit` (server#61804)
• Chore(deps): Bump axios from 1.15.0 to 1.16.1 in /build/frontend-legacy (server#61805)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61842)
• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61852)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61862)
• Feat(OCP): Add Interaction API (server#61867)
• Test: fix HEIC tests (server#61873)
• Fix(DeclarativeManager): Fix admin delegation (server#61876)
• Fix: adjust file picker for background image to allow folder navigation (server#61878)
• Fix(bruteforce): Don’t throttle requests with failing CSRF (server#61886)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61888)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61892)
• Fix: hide scroll bar in unified search when not needed (server#61909)
• Fix(appstore): use proper app icon or adjust color if needed (server#61918)
• Fix(files): distinguish between files and folders for validation messages (server#61919)
• Feat: Disable callable serialization in sabre/xml (server#61923)
• Fix(files): proper accessible row name and title for overflow (server#61930)
• Show group display name when the group object is not loaded yet (server#61932)
• Feat: Fetch groups in batch in getUserGroups (server#61936)
• Fix(files_sharing): Fail on sharing file with create or delete permission before failing on increased permissions (server#61939)
• Fix: webhook payload for system tag events (server#61943)
• Chore(jobs): write proper documentation for job:history (server#61945)
• Refactor(Interaction): Allow multiple resources and receivers in a single event (server#61956)
• Fix(systemtags): remove duplicates, cleanup existing tags (server#61965)
• Fix: Catch expected NotFoundException (server#61968)
• Feat(login): clean remember me tokens (server#61972)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#61977)
• Chore(deps-dev): bump the vitest group across 2 directories with 2 updates (server#61992)
• Chore(deps): bump p-queue from 9.3.0 to 9.3.1 (server#61993)
• Chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat (server#61994)
• Chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 (server#61995)
• Chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit (server#61996)
• Chore(deps-dev): bump webpack from 5.107.2 to 5.108.4 in /build/frontend-legacy (server#61997)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy (server#61998)
• Master] fix(security): Update code signing revocation list (server#62040)
• Master] fix(security): Update code signing revocation list (server#62046)
• Perf(carddav): reduce disk usage of photocache (server#62054)
• Perf(workflow): Implement result cache for IP checks (server#62057)
• Ci: migrate from buildjet to cache action (server#62061)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62069)
• Feat: KV cache based on predis (server#62070)
• Fix(caldav): url-encode owner/user in activity event links (server#62075)
• Fix(AppSearch): Always sort apps first for search (server#62085)
• Fix(UserPlugin): Don’t search for displayname when restricted (server#62096)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62103)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62109)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62119)
• 34.0.2 RC1 (server#62120)
• Fix(FilesWidget): allow to resize widget vertically (server#62125)
• Rate limiting for creating federated shares (server#62130)
• Feat(share): add public share-review API under OCP\Share\ShareReview (server#62132)
• Fix: Disable imagick preview providers (server#62147)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62150)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62160)
• Fix(preview): properly handle encoded content (server#62173)
• Fix(cache): make clear() redis cluster compatible (server#62177)
• Perf: Don’t fetch all the trash items when deleting a single item (server#62180)
• Fix(s3): trim multiple spaces to single space in original path header (server#62183)
• Master] fix(security): Update code signing revocation list (server#62184)
• Feat(files_sharing): schedule external share scan job when accepted (server#62197)
• Fix: don’t return cache entries with null paths (server#62199)
• Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62210)
• Fix(dav): release part-file lock when an upload fails (server#62216)
• Fix(files_sharing): preserve unmasked permissions as scan_permissions (server#62218)
• Perf(dav): Stream PROPFIND output (server#62224)
• Fix: don’t die if we can’t encode file metadata on upload (server#62226)
• Fix(CleanupLoginTokens): Specify the table (server#62409)
• 34.0.2 (server#62435)
• Master] fix(security): Update CA certificate bundle (server#62437)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62449)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2498)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2513)
• Feat: add predis as a dependency for Valkey cluster support (3rdparty#2518)

activity

• Fix npm audit (activity#2620)
• Feat: make amount of items sent on email configurable via occ (activity#2708)
• Fix(deps): update dependency vite to v7.3.5 (activity#2734)
• Chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (activity#2735)
• Chore(deps): update dependency @vue/test-utils to ^2.4.11 (activity#2737)
• Chore(deps): update dependency bamarni/composer-bin-plugin to ^1.9.1 (activity#2738)
• Chore(deps): update dependency dockerode to ^5.0.1 (activity#2739)
• Chore(deps): update dependency eslint-plugin-cypress to ^6.4.2 (activity#2740)
• Chore(deps): update dependency phpunit/phpunit to ^11.5.56 (activity#2741)
• Chore(deps): update dependency vimeo/psalm to ^6.16.1 (activity#2742)
• Chore(deps): update dependency wait-on to ^9.0.10 (activity#2743)
• Chore(deps): update github actions (activity#2744)
• Chore(deps): update vitest monorepo to ^4.1.9 (activity#2745)
• Fix(deps): update dependency @nextcloud/vue to ^9.8.2 (activity#2746)
• Fix(deps): update dependency @vueuse/core to ^14.3.0 (activity#2747)
• Chore(deps): update dependency vite to ^7.3.6 (activity#2776)
• Fix(listener): Catch when trying to set up a settings that doesn’t exists (activity#2793)

app_api

• Fix(maintenance-mode): keep only HaRP and ExApp survival routes available in maintenance mode (app_api#903)
• Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 (app_api#912)
• Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 (app_api#913)
• Feat: add release relay gh workflow (app_api#924)
• Chore(deps): Bump undici from 7.24.1 to 7.28.0 (app_api#925)
• Chore(deps-dev): Bump launch-editor from 2.12.0 to 2.14.1 (app_api#926)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#930)
• Fix npm audit (app_api#933)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1115)
• Chore(deps): Bump vue from 3.5.34 to 3.5.35 (bruteforcesettings#1151)
• Update nextcloud/ocp dependency (bruteforcesettings#1158)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1160)
• Chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 (bruteforcesettings#1164)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 (bruteforcesettings#1165)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1178)
• Update nextcloud/ocp dependency (bruteforcesettings#1182)

circles

• Update nextcloud/ocp dependency (circles#2490)
• Ci(actions): Update workflow templates from organization template repository (circles#2501)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2577)
• Chore(deps): bump fast-xml-parser and webdav (circles#2582)
• Chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 (circles#2584)
• Chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 (circles#2587)
• Chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 (circles#2590)
• Chore(deps-dev): bump vite from 7.1.11 to 7.1.12 (circles#2594)
• Chore(deps): bump dompurify from 3.3.1 to 3.4.11 (circles#2604)
• Chore(deps): bump qs from 6.14.2 to 6.15.2 (circles#2605)
• Chore(deps): bump picomatch from 2.3.1 to 2.3.2 (circles#2607)
• Chore(deps): bump bn.js (circles#2608)
• Chore(deps): bump rollup from 4.46.3 to 4.62.2 (circles#2609)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2610)
• Ci(actions): Update workflow templates from organization template repository (circles#2626)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2634)

files_downloadlimit

• Chore(CI): Adjust testing matrix for Nextcloud 34 on stable34 (files_downloadlimit#805)
• Chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 (files_downloadlimit#809)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#819)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 (files_downloadlimit#822)
• Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 (files_downloadlimit#826)
• Chore(deps): Bump vue from 3.5.22 to 3.5.35 (files_downloadlimit#840)
• Chore: update Node version and align with stable34 (files_downloadlimit#849)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_downloadlimit#857)
• Fix npm audit (files_downloadlimit#864)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_downloadlimit#869)

files_lock

• Ci(litmus): change server-version to stable34 (files_lock#1126)
• Fix npm audit (files_lock#1129)
• Ci(tools): Update dev dependencies (files_lock#1132)
• Chore(deps): Bump @rollup/rollup-linux-x64-gnu from 4.62.0 to 4.62.2 (files_lock#1136)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_lock#1138)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_lock#1148)
• Chore(deps): Bump dompurify from 3.4.10 to 3.4.11 (files_lock#1149)
• Chore(deps-dev): Bump prettier from 3.8.4 to 3.8.5 (files_lock#1153)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_lock#1157)
• Chore(deps-dev): Bump @playwright/test from 1.61.0 to 1.61.1 (files_lock#1164)
• Update nextcloud/ocp dependency (files_lock#1165)
• Enh: allow file owner to unlock TYPE_TOKEN locks (files_lock#1169)
• Chore(release): bump version to 34.0.1 (files_lock#1178)
• Chore(deps-dev): Bump sabre/dav from 4.7.0 to 4.7.1 (files_lock#1183)
• Chore(deps-dev): Bump phpunit/phpunit from 11.5.55 to 11.5.56 (files_lock#1184)
• Update nextcloud/ocp dependency (files_lock#1190)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (files_pdfviewer#1463)
• Chore(deps): Bump dompurify from 3.3.3 to 3.4.11 (files_pdfviewer#1465)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_pdfviewer#1468)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1471)

firstrunwizard

• Update nextcloud/ocp dependency (firstrunwizard#2103)
• Fix npm audit (firstrunwizard#2104)
• Chore(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.2 (firstrunwizard#2115)
• Chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 (firstrunwizard#2117)
• Chore(deps): Bump vue from 3.5.28 to 3.5.39 (firstrunwizard#2137)
• Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.3.0 (firstrunwizard#2139)
• Chore(deps): Bump dompurify from 3.4.2 to 3.4.11 (firstrunwizard#2140)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (firstrunwizard#2141)

logreader

• Fix npm audit (logreader#2075)
• Chore: bump PHP version to 8.2 (logreader#2081)
• Update nextcloud/ocp dependency (logreader#2083)
• Fix npm audit (logreader#2093)
• Chore(deps-dev): bump browserslist from 4.28.2 to 4.28.4 (logreader#2096)
• Chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 (logreader#2097)
• Chore(deps): bump vue from 3.5.28 to 3.5.39 (logreader#2100)
• Chore(deps-dev): bump vitest from 4.1.5 to 4.1.9 (logreader#2101)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (logreader#2110)
• Update nextcloud/ocp dependency (logreader#2112)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (logreader#2127)
• Chore(deps-dev): bump @vitest/coverage-istanbul from 4.1.9 to 4.1.10 (logreader#2128)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#653)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#659)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#668)
• Update nextcloud/ocp dependency (nextcloud_announcements#669)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#673)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3128)
• Fix npm audit (notifications#3133)
• Test: Push notification payload (notifications#3145)
• Update nextcloud/ocp dependency (notifications#3151)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3165)
• Ci(actions): Update workflow templates from organization template repository (notifications#3168)
• Fix npm audit (notifications#3171)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3178)
• Fix(Makefile): Add missing composer setup for dev-setups and building… (notifications#3181)
• Build(deps): Apply composer audit fixes (notifications#3182)
• Update nextcloud/ocp dependency (notifications#3183)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3191)
• Update nextcloud/ocp dependency (notifications#3192)
• Ci(actions): Update workflow templates from organization template repository (notifications#3195)
• Update nextcloud/ocp dependency (notifications#3198)
• Update nextcloud/ocp dependency (notifications#3203)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (notifications#3212)

office

• Fix npm audit (office#42)

password_policy

• Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.29.2 (password_policy#939)
• Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 (password_policy#943)
• Chore(deps-dev): Bump sass from 1.97.1 to 1.97.3 (password_policy#946)
• Fix npm audit (password_policy#956)
• Chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 (password_policy#959)
• Feat: Add login output when password policy fails (password_policy#966)
• Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 (password_policy#969)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (password_policy#970)
• Chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 (password_policy#971)
• Chore(deps-dev): Bump qs from 6.14.2 to 6.15.2 (password_policy#973)
• Fix npm audit (password_policy#975)

photos

• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.1.1 (photos#3521)
• Chore(deps-dev): Bump wait-on from 8.0.3 to 8.0.5 (photos#3522)
• Chore(deps): Bump @nextcloud/sharing from 0.2.4 to 0.2.5 (photos#3527)
• Fix: faces actions and add recognize e2e tests (photos#3577)
• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3587)
• Fix npm audit (photos#3589)
• Ci(actions): Update workflow templates from organization template repository (photos#3600)
• Fix npm audit (photos#3607)
• Chore(deps): Bump axios from 1.16.0 to 1.16.1 (photos#3612)
• Chore(deps-dev): Bump autoprefixer from 10.4.21 to 10.4.27 (photos#3613)
• Chore(deps-dev): Bump cypress-split from 1.24.14 to 1.24.31 (photos#3614)
• Chore(deps-dev): Bump eslint-plugin-cypress from 5.1.0 to 5.1.1 (photos#3615)
• Chore(deps-dev): Bump vue-tsc from 2.2.10 to 2.2.12 (photos#3616)
• Ci(actions): Update workflow templates from organization template repository (photos#3627)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3633)
• Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 (photos#3634)

privacy

• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 (privacy#1356)
• Ci(actions): Update workflow templates from organization template repository (privacy#1358)
• Fix npm audit (privacy#1362)
• Chore(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 (privacy#1370)
• Chore(deps): Bump vue from 3.5.34 to 3.5.38 (privacy#1373)
• Chore: Add `update-stable-titles` workflow (privacy#1383)
• Ci(actions): Update workflow templates from organization template repository (privacy#1392)
• Fix npm audit (privacy#1397)

recommendations

• Fix npm audit (recommendations#1062)
• Fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (recommendations#1107)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1129)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1132)

related_resources

• Chore(deps): bump dompurify from 3.2.6 to 3.4.11 (related_resources#1028)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1028)
• Update nextcloud/ocp dependency (serverinfo#1035)
• Use a parameterized translation for CPU thread count (serverinfo#1039)
• Update nextcloud/ocp dependency (serverinfo#1046)

survey_client

• Update nextcloud/ocp dependency (survey_client#443)

suspicious_login

• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1129)

text

• Fix npm audit (text#8739)
• Update nextcloud/ocp dependency (text#8770)
• Fix(autofocus): persist cursor positions in localStorage (text#8778)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8780)
• Fix(editor): preserve leading newlines in plain text editor (text#8788)
• Fix(ActionInsertLink): allow to get title from link picker (text#8791)
• Fix(markdown): preserve horizontal rule markup (text#8792)
• Preserve Markdown reference links (text#8811)
• Fix npm audit (text#8817)
• Chore(deps): update dependency cypress-vite to ^1.10.2 (text#8830)
• Chore(deps): update dependency vite to ^7.3.6 (text#8831)
• Chore(deps): update vitest monorepo to ^4.1.9 (text#8832)
• Fix(deps): update dependency prosemirror-markdown to ^1.13.5 (text#8833)
• Fix(deps): update dependency uuid to ^14.0.1 (text#8834)
• Fix(ImageView): use `a` element for clickable items (text#8843)
• Ci(playwright): fix installing pinned NPM version (text#8845)
• Chore(deps): update vitest monorepo to ^4.1.10 (text#8849)
• Update nextcloud/ocp dependency (text#8853)
• Fix(links): scroll to anchor links directly (text#8861)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8863)
• Chore(playwright): use `list` reporter when run locally (text#8865)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8866)
• Chore(deps): bump @nextcloud/vue to 8.40.0 (text#8872)
• Fix(Table): allow changing list indention inside tables (text#8878)
• Fix(share): detect if documentId is outside of share early (text#8880)
• Update nextcloud/ocp dependency (text#8889)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1383)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1387)
• Fix npm audit (twofactor_nextcloud_notification#1392)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (twofactor_nextcloud_notification#1397)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1402)
• Fix npm audit (twofactor_nextcloud_notification#1409)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (twofactor_nextcloud_notification#1411)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1414)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1415)

twofactor_totp

• Fix npm audit (twofactor_totp#1777)
• Ci: update codecov action to v7 (twofactor_totp#1789)
• Fix npm audit (twofactor_totp#1794)
• Chore(deps): bump actions/checkout digest to df4cb1c (twofactor_totp#1815)
• Chore(deps): bump actions/setup-node digest to 2499707 (twofactor_totp#1816)
• Chore(deps): bump @nextcloud/stylelint-config from 3.2.1 to ^3.2.2 (twofactor_totp#1817)
• Chore(deps): bump @vue/test-utils from 2.4.6 to ^2.4.11 (twofactor_totp#1818)
• Chore(deps): bump eslint-plugin-chai-friendly from 1.2.0 to ^1.2.1 (twofactor_totp#1820)
• Ci: drop unused app publish workflow (twofactor_totp#1838)

viewer

• Fix(composer): Remove trailing comma breaking composer.json parsing (viewer#3228)
• Fix(deps): update dependency @fontsource/roboto to ^5.2.10 (viewer#3243)
• Chore(deps): update dependency dompurify to v3.4.11 [security] (viewer#3268)
• Test: migrate e2e tests from Cypress to Playwright (viewer#3275)
• Chore: replace node.yml workflow with npm-build.yml (viewer#3282)
• Update nextcloud/ocp dependency (viewer#3284)
• Ci(actions): Update workflow templates from organization template repository (viewer#3286)

[Altahrim]

Next changelogs

33.0.7

server

• Fix(files_sharing): Drop trailing ‘?’ from public download redirect URL (server#59885)
• Fix(settings): sort app list by app name instead of app objects (server#59992)
• Chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 (server#60046)
• Chore(deps): Bump @vueuse/core from 14.2.1 to 14.3.0 (server#60265)
• Chore(deps): bump @vueuse/integrations from 14.2.1 to 14.3.0 (server#60268)
• Fix(cypress): disable unsupported-browser redirect in test container (server#60805)
• Fix(core): public share download icon color and theme filter scope (server#61210)
• Test(ldap): align expectation for unset `ldapUserDisplayName2` with implementation to avoid PHP 8.5 warning (server#61411)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (server#61467)
• Chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 (server#61468)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 (server#61470)
• Chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 (server#61471)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61472)
• Chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 (server#61474)
• Fix: update cached mounts when moving share in repair step (server#61499)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61527)
• Perf: block more properties from using the custom properties backend (server#61541)
• Fix(settings): correct heading order in account management sidebar (server#61547)
• Fix: Make the IProvideUserSecretBackend usable (server#61549)
• Perf(log): normalize log data only when logging (server#61556)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61570)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61595)
• Fix(a11y): label account QR code button (server#61603)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61605)
• Fix(user_status): stabilise the user_status (server#61619)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61644)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61661)
• Fix(files_external): ignore deprecated backends (server#61692)
• Build(deps): Composer audit updates (server#61698)
• Fix(files_external): properly apply default mount options (server#61701)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61711)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61714)
• Perf: Only sort wrappers when adding them (server#61718)
• Fix(dav): Always show example content section (server#61741)
• Fix(db): align preview migration annotations with created tables (server#61750)
• Chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (server#61782)
• Chore(deps-dev): bump vite from 7.3.5 to 7.3.6 (server#61783)
• Chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 (server#61784)
• Chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 (server#61785)
• Chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 (server#61786)
• Chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 (server#61787)
• Chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 (server#61788)
• Chore(deps): bump vue from 3.5.38 to 3.5.39 (server#61789)
• Fix(files_external): prevent dropdown entries from shrinking (server#61796)
• Chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy (server#61807)
• Chore(deps-dev): bump @babel/plugin-transform-private-methods from 7.28.6 to 7.29.7 in /build/frontend-legacy (server#61808)
• Chore(deps): bump @nextcloud/vue from 8.38.0 to 8.39.0 in /build/frontend-legacy (server#61809)
• Chore(deps-dev): bump @babel/preset-typescript from 7.28.5 to 7.29.7 in /build/frontend-legacy (server#61810)
• Chore(deps-dev): bump sass from 1.99.0 to 1.101.0 in /build/frontend-legacy (server#61812)
• Chore(deps-dev): bump vite from 7.3.2 to 7.3.6 in /build/frontend-legacy (server#61813)
• Chore(deps-dev): bump @babel/node from 7.29.0 to 7.29.7 in /build/frontend-legacy (server#61814)
• Chore(deps): bump libphonenumber-js from 1.12.42 to 1.13.7 in /build/frontend-legacy (server#61815)
• Chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy (server#61816)
• Chore(deps-dev): bump msw from 2.14.3 to 2.14.6 in /build/frontend-legacy (server#61817)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.4 to 4.1.9 in /build/frontend-legacy (server#61818)
• Chore(deps): bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy (server#61819)
• Chore(deps-dev): bump vitest from 4.1.4 to 4.1.9 in /build/frontend-legacy (server#61820)
• Fix: don’t return cache entries with null paths (server#61835)
• Test(settings): fix E2E selector for out of office replacement element (server#61839)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61843)
• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61851)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61861)
• Fix(DeclarativeManager): Fix admin delegation (server#61875)
• Fix: adjust file picker for background image to allow folder navigation (server#61879)
• Fix(bruteforce): Don’t throttle requests with failing CSRF (server#61885)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61887)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61891)
• Test: fix HEIC tests (server#61893)
• Fix: hide scroll bar in unified search when not needed (server#61910)
• Fix(files): distinguish between files and folders for validation messages (server#61920)
• Feat: Disable callable serialization in sabre/xml (server#61924)
• Feat: Fetch groups in batch in getUserGroups (server#61935)
• Fix: webhook payload for system tag events (server#61942)
• Show group display name when the group object is not loaded yet (server#61954)
• Fix: Catch expected NotFoundException (server#61969)
• Feat(login): clean remember me tokens (server#61971)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#61978)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 (server#62000)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 (server#62002)
• Chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 (server#62003)
• Chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 (server#62004)
• Chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat (server#62005)
• Chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit (server#62006)
• Chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /build/frontend-legacy (server#62007)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 in /build/frontend-legacy (server#62009)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy (server#62011)
• Chore(deps): bump p-queue from 9.3.0 to 9.3.1 in /build/frontend-legacy (server#62013)
• Master] fix(security): Update code signing revocation list (server#62041)
• Master] fix(security): Update code signing revocation list (server#62047)
• Perf(carddav): reduce disk usage of photocache (server#62053)
• Perf(workflow): Implement result cache for IP checks (server#62056)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62068)
• Fix(caldav): url-encode owner/user in activity event links (server#62074)
• Fix(UserPlugin): Don’t search for displayname when restricted (server#62097)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62102)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62110)
• 33.0.7 RC1 (server#62116)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62118)
• Ci: migrate from buildjet to cache action (server#62124)
• Fix(FilesWidget): allow to resize widget vertically (server#62126)
• Rate limiting for creating federated shares (server#62129)
• Fix: Disable imagick preview providers (server#62148)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62151)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62159)
• Fix(preview): properly handle encoded content (server#62174)
• Fix(cache): make clear() redis cluster compatible (server#62176)
• Perf: Don’t fetch all the trash items when deleting a single item (server#62179)
• Fix(s3): trim multiple spaces to single space in original path header (server#62182)
• Master] fix(security): Update code signing revocation list (server#62185)
• Feat(files_sharing): schedule external share scan job when accepted (server#62198)
• Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62211)
• Revert - Merge pull request #61954 (server#62212)
• Fix(dav): release part-file lock when an upload fails (server#62215)
• Perf(dav): Stream PROPFIND output (server#62225)
• Fix: don’t die if we can’t encode file metadata on upload (server#62227)
• Fix(CleanupLoginTokens): Specify the table (server#62410)
• 33.0.7 (server#62434)
• Master] fix(security): Update CA certificate bundle (server#62436)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62448)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2499)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2512)

activity

• Fix npm audit (activity#2645)
• Feat: make amount of items sent on email configurable via occ (activity#2709)
• Fix(deps): update dependency phpunit/phpunit to v11.5.50 (activity#2749)
• Chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (activity#2751)
• Chore(deps): update github actions (activity#2757)
• Chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (activity#2781)
• Chore(deps): update dependency phpunit/phpunit to ^11.5.55 (activity#2782)
• Fix(deps): pin nextcloud/ocp to dev-stable33 in psalm vendor-bin (activity#2789)
• Fix(listener): Catch when trying to set up a settings that doesn’t exists (activity#2792)
• Perf(files): compute move/rename activity settings once (activity#2795)
• Fix: do not fail moves when the old location cannot be resolved (activity#2797)

app_api

• Feat: add release relay gh workflow (app_api#923)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#931)
• Fix npm audit (app_api#935)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1079)
• Update nextcloud/ocp dependency (bruteforcesettings#1155)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1163)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1177)

circles

• Ci(actions): Update workflow templates from organization template repository (circles#2498)
• Fix: update stubs to avoid psalm errors (circles#2560)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2576)
• Chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 (circles#2585)
• Chore(deps-dev): bump vite from 7.1.11 to 7.1.12 (circles#2589)
• Chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 (circles#2592)
• Chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 (circles#2597)
• Chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 (circles#2598)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2611)
• Ci(actions): Update workflow templates from organization template repository (circles#2628)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2635)

files_downloadlimit

• Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 (files_downloadlimit#704)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#712)
• Chore(deps-dev): Bump eslint from 9.38.0 to 9.39.4 (files_downloadlimit#738)
• Chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 (files_downloadlimit#758)
• Chore(deps): Bump @nextcloud/auth from 2.5.3 to 2.6.0 (files_downloadlimit#780)
• Chore(deps): Bump @nextcloud/dialogs from 7.1.0 to 7.4.0 (files_downloadlimit#835)
• Chore(deps): Bump @nextcloud/vue from 9.1.0 to 9.8.2 (files_downloadlimit#839)
• Chore(deps): Bump vue from 3.5.22 to 3.5.35 (files_downloadlimit#841)
• Chore(deps-dev): Bump vite from 7.1.12 to 7.3.5 (files_downloadlimit#842)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_downloadlimit#856)
• Fix npm audit (files_downloadlimit#863)
• Fix: don’t apply limit if it’s disabled (files_downloadlimit#866)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_downloadlimit#868)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (files_pdfviewer#1462)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1470)

firstrunwizard

• Chore(deps-dev): Bump vite from 7.3.1 to 7.3.6 (firstrunwizard#2082)
• Fix npm audit (firstrunwizard#2087)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 (firstrunwizard#2147)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (firstrunwizard#2148)
• Chore(deps-dev): Bump stylelint from 17.11.1 to 17.14.0 (firstrunwizard#2149)
• Fix npm audit (firstrunwizard#2155)

logreader

• Fix npm audit (logreader#2076)
• Chore: bump PHP version to 8.2 (logreader#2082)
• Update nextcloud/ocp dependency (logreader#2084)
• Fix npm audit (logreader#2092)
• Chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 (logreader#2099)
• Chore(deps-dev): bump @vitest/coverage-istanbul from 4.1.8 to 4.1.9 (logreader#2102)
• Chore(deps): bump vue from 3.5.26 to 3.5.39 (logreader#2103)
• Chore(deps-dev): bump vitest from 4.1.8 to 4.1.9 (logreader#2105)
• Chore(deps-dev): bump browserslist from 4.28.1 to 4.28.4 (logreader#2106)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0 (logreader#2109)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (logreader#2121)
• Chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 (logreader#2123)
• Chore(deps-dev): bump @vitest/coverage-istanbul from 4.1.9 to 4.1.10 (logreader#2124)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#654)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#657)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#666)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#672)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3130)
• Fix npm audit (notifications#3131)
• Test: Push notification payload (notifications#3139)
• Update nextcloud/ocp dependency (notifications#3150)
• Feat: Show request time to the push proxy (notifications#3155)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3164)
• Ci(actions): Update workflow templates from organization template repository (notifications#3169)
• Fix npm audit (notifications#3173)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3179)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3190)
• Ci(actions): Update workflow templates from organization template repository (notifications#3193)
• Update nextcloud/ocp dependency (notifications#3201)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (notifications#3211)

password_policy

• Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 (password_policy#876)
• Fix npm audit (password_policy#883)
• Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.39.0 (password_policy#944)
• Chore(deps-dev): Bump vite from 7.3.0 to 7.3.6 (password_policy#950)
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.2 (password_policy#954)
• Feat: Add login output when password policy fails (password_policy#967)
• Fix npm audit (password_policy#976)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (password_policy#986)
• Chore(deps-dev): Bump @vue/tsconfig from 0.5.1 to 0.9.1 (password_policy#987)

photos

• Ci(actions): Update workflow templates from organization template repository (photos#3511)
• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3588)
• Fix npm audit (photos#3591)
• Ci(actions): Update workflow templates from organization template repository (photos#3598)
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.2.2 (photos#3618)
• Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 (photos#3635)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3637)
• Chore(test): Migrate to @nc/e2e-test-server (photos#3645)

privacy

• Ci(actions): Update workflow templates from organization template repository (privacy#1359)
• Chore: Add `update-stable-titles` workflow (privacy#1384)
• Ci(actions): Update workflow templates from organization template repository (privacy#1394)

recommendations

• Fix npm audit (recommendations#1063)
• Fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (recommendations#1121)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1127)

related_resources

• Build: Fix required PHP version and missing nextcloud/ocp updates (related_resources#1036)
• Chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 (related_resources#846)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1031)
• Update nextcloud/ocp dependency (serverinfo#1034)
• Use a parameterized translation for CPU thread count (serverinfo#1040)

suspicious_login

• Chore(psalm): Update to psalm 6 (suspicious_login#1069)
• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1130)

text

• Update nextcloud/ocp dependency (text#8771)
• Fix npm audit (text#8772)
• Fix(autofocus): persist cursor positions in localStorage (text#8777)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8781)
• Fix(ActionInsertLink): allow to get title from link picker (text#8790)
• Fix(markdown): preserve horizontal rule markup (text#8793)
• Fix npm audit (text#8818)
• Chore(deps): update dependency vite to ^7.3.6 (text#8835)
• Chore(deps): update vitest monorepo to ^4.1.9 (text#8836)
• Fix(deps): update dependency prosemirror-markdown to ^1.13.5 (text#8837)
• Fix(ImageView): use `a` element for clickable items (text#8842)
• Ci(playwright): fix installing pinned NPM version (text#8846)
• Chore(deps): update vitest monorepo to ^4.1.10 (text#8850)
• Fix(links): scroll to anchor links directly (text#8862)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8864)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8867)
• Chore(deps): bump @nextcloud/vue to 8.40.0 (text#8873)
• Fix(Table): allow changing list indention inside tables (text#8877)
• Fix(share): detect if documentId is outside of share early (text#8881)
• Update nextcloud/ocp dependency (text#8890)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1381)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1388)
• Fix npm audit (twofactor_nextcloud_notification#1391)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (twofactor_nextcloud_notification#1398)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1404)
• Fix npm audit (twofactor_nextcloud_notification#1406)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (twofactor_nextcloud_notification#1412)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1416)

twofactor_totp

• Fix npm audit (twofactor_totp#1756)
• Ci: update codecov action to v7 (twofactor_totp#1788)
• Fix npm audit (twofactor_totp#1792)
• Chore(deps): bump actions/setup-node digest to 2499707 (twofactor_totp#1825)
• Chore(deps): bump totp-generator from 2.0.0 to ^2.0.1 (twofactor_totp#1828)
• Ci: drop unused app publish workflow (twofactor_totp#1837)

viewer

• Chore: replace node.yml workflow with npm-build.yml (viewer#3281)

32.0.13

server

• Fix(sharing): Align userid config key in UserPlugin with Manager (server#58988)
• Fix: fix LazyUserFolder::getMountPoint (server#59653)
• Fix(files_sharing): Drop trailing ‘?’ from public download redirect URL (server#59884)
• Occ commands for listing and refreshing mounts (server#59890)
• Quota wrapper fixes (server#60130)
• Fix(files): use displayname rather than basename to use progress (server#60623)
• Fix: use card interface instead of object (server#61250)
• Fix(files_sharing): Hide incompatible actions in shares (server#61436)
• Chore(deps): Bump dompurify from 3.4.8 to 3.4.10 (server#61464)
• Chore(deps-dev): Bump sass from 1.100.0 to 1.101.0 (server#61465)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61466)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61526)
• Perf: block more properties from using the custom properties backend (server#61542)
• Fix(settings): correct heading order in account management sidebar (server#61545)
• Fix: Make the IProvideUserSecretBackend usable (server#61548)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61569)
• Fix(user_status): stabilise the user_status (server#61618)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61643)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61667)
• Build(deps): Composer audit updates (server#61699)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61713)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61744)
• Chore(deps): bump libphonenumber-js from 1.13.6 to 1.13.7 (server#61791)
• Chore(deps): bump dompurify from 3.4.10 to 3.4.11 (server#61792)
• Chore(deps): bump query-string from 9.4.0 to 9.4.1 (server#61793)
• Chore(deps-dev): bump tar from 7.5.16 to 7.5.19 (server#61794)
• Fix: don’t return cache entries with null paths (server#61836)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61844)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61860)
• Fix(DeclarativeManager): Fix admin delegation (server#61874)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61890)
• Fix: hide scroll bar in unified search when not needed (server#61911)
• Fix(files): distinguish between files and folders for validation messages (server#61921)
• Feat: Disable callable serialization in sabre/xml (server#61926)
• Test: fix HEIC tests (server#61927)
• Feat: Fetch groups in batch in getUserGroups (server#61934)
• Fix(Storage): use `proxyexclude` parameter in DAV client (server#61967)
• Feat(login): clean remember me tokens (server#61970)
• Chore(deps): bump phpunit/phpunit from 10.5.63 to 10.5.64 in /vendor-bin/phpunit (server#62001)
• Chore(deps-dev): bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 (server#62008)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 (server#62014)
• Master] fix(security): Update code signing revocation list (server#62042)
• Master] fix(security): Update code signing revocation list (server#62048)
• Perf(workflow): Implement result cache for IP checks (server#62055)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62067)
• Fix(caldav): url-encode owner/user in activity event links (server#62073)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62101)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62111)
• 32.0.13 RC1 (server#62115)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62117)
• Ci: migrate from buildjet to cache action (server#62123)
• Rate limiting for creating federated shares (server#62131)
• Fix(files): fix custom client-side error messages on move/copy actions (server#62133)
• Fix: Disable imagick preview providers (server#62149)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62152)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62158)
• Fix(preview): properly handle encoded content (server#62175)
• Fix(s3): trim multiple spaces to single space in original path header (server#62181)
• Master] fix(security): Update code signing revocation list (server#62186)
• Show group display name when the group object is not loaded yet (server#62194)
• Fix(cache): make clear() redis cluster compatible (server#62203)
• Revert group display name fix (server#62206)
• Fix(dav): release part-file lock when an upload fails (server#62214)
• Fix(CleanupLoginTokens): Specify the table (server#62411)
• 32.0.13 (server#62433)
• Master] fix(security): Update CA certificate bundle (server#62440)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2500)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2514)

activity

• Update nextcloud/ocp dependency (activity#2672)
• Update nextcloud/ocp dependency (activity#2719)
• Chore(deps): update github actions (activity#2770)
• Chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (activity#2783)
• Update nextcloud/ocp dependency (activity#2786)

app_api

• Chore(deps): Bump @nextcloud/moment from 1.3.1 to 1.3.5 (app_api#915)
• Chore(deps): Bump marked from 14.1.1 to 14.1.4 (app_api#916)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (app_api#917)
• Chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1 (app_api#918)
• Chore(deps): Bump @nextcloud/files from 3.9.0 to 3.9.2 (app_api#919)
• Feat: add release relay gh workflow (app_api#922)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#932)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1125)
• Update nextcloud/ocp dependency (bruteforcesettings#1156)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1162)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1181)

circles

• Ci(actions): Update workflow templates from organization template repository (circles#2499)
• Update nextcloud/ocp dependency (circles#2546)
• Fix: update stubs with provokateurin/php-stubs-updater (circles#2563)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2574)
• Update nextcloud/ocp dependency (circles#2581)
• Chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 (circles#2586)
• Chore(deps-dev): bump vue-tsc from 3.0.5 to 3.0.11 (circles#2588)
• Chore(deps): bump @nextcloud/axios from 2.5.1 to 2.5.2 (circles#2591)
• Chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 (circles#2593)
• Chore(deps): bump @nextcloud/dialogs from 7.0.0-rc.1 to 7.0.1 (circles#2596)
• Chore(deps-dev): bump vite from 7.3.1 to 7.3.6 (circles#2599)
• Chore(deps): bump @nextcloud/logger from 3.0.2 to 3.0.3 (circles#2600)
• Chore(deps): bump @nextcloud/vue from 9.0.0-rc.6 to 9.0.1 (circles#2601)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2612)
• Chore(reuse): add missing BSD-3-Clause.txt license (circles#2613)
• Ci(actions): Update workflow templates from organization template repository (circles#2627)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2638)

files_downloadlimit

• Fix npm audit (files_downloadlimit#624)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#711)
• Chore(deps-dev): Bump eslint from 9.39.2 to 9.39.4 (files_downloadlimit#737)
• Chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 (files_downloadlimit#788)
• Fix npm audit (files_downloadlimit#862)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 (files_pdfviewer#1461)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1469)

firstrunwizard

• Fix npm audit (firstrunwizard#2086)
• Chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 (firstrunwizard#2109)
• Update nextcloud/ocp dependency (firstrunwizard#2119)
• Chore(deps): Bump vue from 3.5.34 to 3.5.39 (firstrunwizard#2136)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (firstrunwizard#2151)

logreader

• Update nextcloud/ocp dependency (logreader#2070)
• Fix npm audit (logreader#2074)
• Update nextcloud/ocp dependency (logreader#2089)
• Chore(deps-dev): bump @nextcloud/browserslist-config from 3.1.0 to 3.1.2 (logreader#2095)
• Chore(deps-dev): bump vite from 7.3.5 to 7.3.6 (logreader#2098)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 (logreader#2108)
• Fix npm audit (logreader#2114)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (logreader#2119)
• Chore(deps-dev): bump @vitest/coverage-istanbul from 3.2.6 to 3.2.7 (logreader#2120)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#652)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#658)
• Update nextcloud/ocp dependency (nextcloud_announcements#664)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#665)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#671)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3127)
• Fix npm audit (notifications#3132)
• Test: Push notification payload (notifications#3146)
• Update nextcloud/ocp dependency (notifications#3153)
• Feat: Show request time to the push proxy (notifications#3156)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3163)
• Ci(actions): Update workflow templates from organization template repository (notifications#3167)
• Fix npm audit (notifications#3172)
• Build(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (notifications#3177)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3180)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3188)
• Ci(actions): Update workflow templates from organization template repository (notifications#3194)
• Update nextcloud/ocp dependency (notifications#3204)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 (notifications#3209)

password_policy

• Chore(deps): Bump @nextcloud/dialogs from 6.3.1 to 6.4.2 (password_policy#862)
• Chore(deps-dev): Bump vite from 6.3.5 to 6.4.2 (password_policy#942)
• Chore(deps): Bump @nextcloud/vue from 8.35.0 to 8.39.0 (password_policy#949)
• Chore(deps-dev): Bump sass from 1.97.3 to 1.99.0 (password_policy#955)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (password_policy#983)

photos

• Chore(deps-dev): Bump typescript from 5.8.3 to 5.9.3 (photos#3430)
• Chore(deps): Bump axios from 1.16.0 to 1.18.1 (photos#3439)
• Ci(actions): Update workflow templates from organization template repository (photos#3510)
• Ci(actions): Update workflow templates from organization template repository (photos#3599)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.4 to 3.2.6 (photos#3619)
• Chore(deps): Bump qs from 6.14.2 to 6.15.2 (photos#3622)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3644)
• Chore(deps-dev): Bump postcss from 8.5.13 to 8.5.16 (photos#3654)

privacy

• Ci(actions): Update workflow templates from organization template repository (privacy#1360)
• Fix npm audit (privacy#1361)
• Chore: Add `update-stable-titles` workflow (privacy#1385)
• Fix npm audit (privacy#1396)

recommendations

• Fix npm audit (recommendations#1061)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1128)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1029)
• Update nextcloud/ocp dependency (serverinfo#1038)

survey_client

• Update nextcloud/ocp dependency (survey_client#444)

text

• Fix(SessionService): sanitize displayName to utf8 encoding (text#8405)
• Chore(deps): update dependency vite to ^7.3.6 (text#8731)
• Chore(deps): update vitest monorepo to ^3.2.6 (text#8732)
• Update nextcloud/ocp dependency (text#8737)
• Fix npm audit (text#8742)
• Fix(editorApi): use onMentionSearch callback if provided (text#8784)
• Update nextcloud/ocp dependency (text#8814)
• Fix npm audit (text#8819)
• Chore(deps): update vitest monorepo to ^3.2.7 (text#8838)
• Fix(ImageView): use `a` element for clickable items (text#8841)
• Fix(links): scroll to anchor links directly (text#8868)
• Fix(share): detect if documentId is outside of share early (text#8882)
• Update nextcloud/ocp dependency (text#8891)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1384)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1385)
• Fix npm audit (twofactor_nextcloud_notification#1390)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1400)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1403)
• Fix npm audit (twofactor_nextcloud_notification#1407)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1417)

twofactor_totp

• Fix npm audit (twofactor_totp#1765)
• Ci: update codecov action to v7 (twofactor_totp#1787)
• Fix npm audit (twofactor_totp#1793)
• Ci: drop unused app publish workflow (twofactor_totp#1836)

viewer

• Update nextcloud/ocp dependency (viewer#3278)
• Chore: replace node.yml workflow with npm-build.yml (viewer#3280)

[rakekniven]

@Altahrim Huge post