First beta release of Nextcloud Hub 26 Summer (v35)

[blizzz]

The first beta of Nextcloud 35 is now available on download servers!

As always, help with testing is very much welcome!
If you notice anything out of order, please report back on the appropriate GitHub repository!

We will follow up with frequent betas over the next weeks.

Downloads

• Nextcloud Server 35.0.0 Beta 1 on GitHub

Changelog

Nextcloud 35.0.0beta1

server

• Revert “Do not do redirect handling when loggin out” (server#40407)
• Movie preview bug fix, in some case stream reading functions may block indefinitely (server#43226)
• Add rel attribute for fediverse link to make verification possible. (server#43364)
• Fix(argon2): respect max value for hashingThreads (server#45027)
• Fix(caldav): explicitly check from component types (server#48131)
• Feat(deps): Upgrade phpseclib to v3 (server#48183)
• Feat(occ): Better handling of disabled or unreacheable App store (server#49697)
• Feat: Run setup checks by category or class (server#49978)
• Fix(session): Update `last_seen` when user session is validated (server#50835)
• Fix: pass parent id to correctParentStorageMtime when known (server#53464)
• Chore: remove `always_populate_raw_post_data` (server#53583)
• Added parameter to disable web UI integration with local client (server#54191)
• Feat(theming): add option for reduce animation (server#55406)
• Fix(DirectEditing): expose already used methods on the public interface (server#55993)
• Fix(Dav): make absenceform textarea not overlap (server#56055)
• Fix(systemtags): remove duplicates, cleanup existing tags (server#56079)
• Fix(PublicPreview): Call getMimetype() on File objects (server#56196)
• Fix(l10n): Fix plural (server#56254)
• Show group display name when the group object is not loaded yet (server#56533)
• Added a exclude disabled option to last seen (server#57081)
• Feat (2fa): Add IStatelessProvider interface (server#57216)
• Fix: allow `occ maintenance:update:htaccess` to create .htaccess file in case it doesn’t exist yet (server#57227)
• Implement token exchange from OCM (server#57234)
• Chore(files): drop unused list.php (server#57333)
• Move invite-accepted capability and implementation to contacts app. (server#57853)
• Feat: delay fetching the display name of a share recipient untill we need it (server#58335)
• Chore: remove redundant ext-json requirement (bundled since PHP 8.0) (server#58370)
• Feat: frankenphp (server#58541)
• Feat(lookup): search for local account only via lookupserver (server#58567)
• Refactor: Add new modern events for system tag lifecycle (server#58602)
• Fix: improve logging around failed chunked object store uploads (server#58608)
• Fix: don’t return cache entries with null paths (server#58676)
• Refactor(admin_audit): migrate to IAppConfig (server#58750)
• Docs(config): clarify `remember_login_cookie_lifetime` behavior (server#58792)
• Docs(config): document `session_lifetime` semantics and interactions (server#58794)
• Test(ldap): align expectation for unset `ldapUserDisplayName2` with implementation to avoid PHP 8.5 warning (server#58813)
• Refactor(dbal): move from deprecated to modern calls (server#58891)
• Refactor(CapabilitiesManager): log slow capabilities in a single message (server#58971)
• Fix(lookup-server): accept self-signed lus on globalscale (server#58976)
• Remove usage of static vars or properties (server#59002)
• Fix: treat all WebKit iOS browseres the same (server#59168)
• Fix(sharing): icon color mismatch on download button in public share (server#59175)
• Enh(occ): make it possible to add an arbitrary number of users to a g… (server#59271)
• Fix(files_reminders): switch from DB-side `NOW()` to PHP-side generation (server#59358)
• Fix: folder tree selection after any action in main content (server#59359)
• Fix(SetupChecks): maintenance window length is 4h (not 6h) (server#59413)
• Fix(user_status): stabilise the user_status (server#59535)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#59539)
• Feat(files_versions): allow to block version creation using WFE (server#59610)
• Fix(appconfig,userconfig): restore pre-migration fallback for ownCloud migration (server#59677)
• Feat: allow setting custom login-name for occ generated app password (server#59680)
• Refactor(share): DRY up expiration date validation and fix dispatchEvent() log message (server#59731)
• Fix(sharing): set STATUS_ACCEPTED when creating USERGROUP subshare on… (server#59813)
• Refactor: Cleanup files app bootstrap (server#59831)
• Fix: track time spent in recursive markOrRun calls (server#59857)
• Perf: remove needless check for changed storage id for mounts (server#59900)
• Perf: delay loading storage info in Cache untill needed (server#59901)
• Refactor(preview): remove deprecated `PreviewManager::registerProvider` API (server#59905)
• Fix(Files/Cache): align `MoveFromCacheTrait` fallback validation with `Cache::moveFromCache` (server#59916)
• Feat(settings): replace OnlyOffice with Euro-Office in office suite s… (server#59933)
• Add runtime operations in WFE (server#59966)
• Fix(repair): restrict unserialize() in RemoveBrokenProperties (server#59979)
• Docs(lock): clarify ILockManager API documentation (server#59984)
• Caldav party crasher (server#59988)
• Refactor(encryption): Migrate appconfig keys to typed bool IAppConfig with repair step (server#60002)
• Chore(i18n): Remove space in word1/word2 (server#60026)
• Chore(l10n): Plural needed to support multiplural languages (server#60027)
• Fix: missing early fail for basic auth without credentials (server#60029)
• Fix(encryption): Correctly report size for zero-byte encrypted files (server#60070)
• Fix rendering custom columns in file lists (server#60134)
• Feat(http-sig): Dual stack http-sig (server#60136)
• Fix(files_sharing): Hide incompatible actions in shares (server#60151)
• Let devs choose the handler for http requests (server#60167)
• Fix(files): only show template picker menu entries if possible (server#60187)
• Test: add playwright pipeline and start migrating Cypress to Playwright (server#60194)
• Fix: add proper ACLs for trashbin proxys (server#60211)
• Feat(settings): add shared Office admin section (server#60285)
• Fix(AppStore/Fetcher): catch GenericFileException when reading cache file in Fetcher (server#60286)
• Feat: make first login event webhook compatible (server#60305)
• Spelling fixes (server#60316)
• Fix(files_external): Move MountConfig to non-static services (server#60318)
• Fix(systemtags): Include leading slash in unified search tag link (server#60325)
• Fix(occ): set GID before UID to ensure success (server#60331)
• Fix(OC_Helper): properly calculate quota of shared storages (server#60341)
• Fix(encryption): Refactor EncryptionWrapper (server#60344)
• Fix(workflowengine): use proper contrast colors for operations (server#60347)
• Feat(appstore): show new column with groups the app is limited to (server#60355)
• Feat(core): app menu polish for NC34 (server#60358)
• Fix: Increase limit for share/unshare requests per hour (server#60359)
• Fix(appstore): do not offer rating apps not on appstore (server#60360)
• Fix(appstore): show reason why limit app to groups is not possible (server#60361)
• Fix error when creating mail shares if custom tokens are enabled (server#60378)
• Test(settings): reduce flakiness of authorized group integration assertions (server#60379)
• Master is now 35 (server#60391)
• Fix(windmill): Fix baseUrl in background job (server#60449)
• Fix(dav): finalize upload metadata before post-write hooks (server#60453)
• Fix(appstore): fix reference to non-existing `forceEnableApp` function (server#60455)
• Fix(files_sharing): do not double escape special characters (server#60457)
• Refactor(NavigationManager): move navigation definitions into apps (server#60458)
• Fix(dav): Skip removal of classified activity when not generated anymore (server#60461)
• Test(carddav): refactor testSearch to use clearer assertions and unique UIDs (server#60463)
• Fix: update cached mounts when moving share in repair step (server#60465)
• Fix: properly mark CleanupShareTarget as expensive (server#60466)
• Test(filesdrop): fix duplicate scenario titles, indentation, and add clarifying comments (server#60467)
• Docs(templates): fully document ITemplateManager (server#60470)
• Refactor(legacy): simplify getTheme and clarify legacy theme docs (server#60481)
• Feat: implement isSelectableGroup function to filter out unselectable groups (server#60483)
• Fix(files_sharing): Use UnknownActivityException (server#60493)
• Add task processing streaming support (server#60500)
• Feat(openmetrics): export more resilient if exception happens (server#60501)
• Fix(settings): Show loading spinner while searching accounts (server#60504)
• Feat(users): Check assertion when enabling user (server#60505)
• Fix: remove too verbose error log line in AddExtraHeadersPlugin (server#60511)
• Fix(files): Chromium-based browsers drag-and-drop (server#60519)
• Fix(appstore): use alias for translations as `appstore` is taken by `apps.nextcloud.com` (server#60528)
• Fix(files): use displayname rather than basename to use progress (server#60541)
• Don’t put hashed password in share api response (server#60542)
• Fix: only allow full admins to create ‘token needed’ webhooks (server#60543)
• Fix: improve check if external storage backend is local (server#60544)
• Fix: handle NAT64 addresses in isLocalAddress (server#60546)
• Fix: don’t tell the remote their token is lower (server#60547)
• Fix: trim duplicate search results for external share (server#60587)
• Chore: cleanup useless files from repo (server#60590)
• Fix(settings): clear NcAppNavigation toggle overhang (server#60596)
• Chore(snowflake): add more randomness in server id fallback (server#60612)
• Fix(files): show proper information when a move will override the target (server#60631)
• Fix(caldav): grant sharee Acls to the delegate (server#60641)
• Refactor: Remove deprecated AutoCompleteEvent (server#60643)
• Fix(settings): confirm app-token revoke and preserve wipe state (server#60644)
• Fix: access shared and delegated trashbin objects (server#60648)
• Fix(http): avoid iconv for header ascii fallback (server#60649)
• Fix(config): add null coalescing fallback in getValueBool before strtolower (server#60654)
• Chore(psalm): forbid iconv (server#60655)
• Add fallback for Codespace environment variables (server#60663)
• Feat(core): Add centered search input to top bar (server#60665)
• Speedup share tests (server#60709)
• Fix(caldav-delegation): send notification to delegator (server#60712)
• Fix(files_reminders): keep batch alive on per-row failure (server#60713)
• Fix(federation): reset retainJob at start of run() (server#60714)
• Fix(MailPlugin): Stop applying the offset twice and the limit per wide/exact (server#60728)
• Fix: Add plural form for translations (server#60732)
• Fix(DB): Enforce foreign key constraints in SQLite (server#60733)
• Feat(UserManager): Add getters for avatar URLs (server#60734)
• Fix(security): don’t propagate ValueError from Crypto::decrypt() fallback (server#60735)
• Perf(ci): cache npm dependencies in Cypress init job using buildjet cache (server#60738)
• Test(ci): enforce PHPUnit time limits with sensible timeout values (server#60739)
• Fix(encryption): recovery keys should be shown when user keys are used (server#60741)
• Test: replace checkbox assertions with real assertions or DoesNotPerformAssertions (server#60742)
• Test(db): call parent::tearDown() in DB test classes that skipped it (server#60744)
• Test: replace checkbox assertions with DoesNotPerformAssertions (middleware) (server#60748)
• Test(share20): replace addToAssertionCount checkbox tests in Share20 ManagerTest (server#60751)
• Test(user_ldap): speed up AbstractMappingTestCase chunking test (server#60756)
• Fix(core): Hide current-app label at narrower viewports (server#60757)
• Test(behat): reset per-scenario state in BasicStructure and Sharing (server#60763)
• Background jobs improvements (server#60765)
• Fix(caldav): Expand recurring events for principal calendar search (server#60766)
• Feat: Add office as shipped app (server#60776)
• Feat(jobs): allow workers to keep track of executed jobs (server#60778)
• Feat(jobs): add command to list executed background jobs (server#60779)
• Refactor: Remove most usages of IAppContainer and IServerContainer (server#60780)
• Docs(appframework): clarify PasswordConfirmationRequired behavior in docblocks (server#60783)
• Fix(Storage): use `proxyexclude` parameter in DAV client (server#60787)
• Chore(Cache): Remove deprecated insert and update events (server#60797)
• Fix(encryption): Fix endpoint /ajax/userSetRecovery to support boolean (server#60801)
• Fix(Share): Add missing optional parameter to IManager::shareApiAllowLinks() (server#60809)
• Feat(search): Subdue header search input placeholder (server#60813)
• Fix: actually register listener for updating stored external storage credentials (server#60817)
• Fix(files_sharing): clear the password after saving (server#60825)
• Fix(AppSearch): Always sort apps first for search (server#60827)
• Refactor: move release changelog workflow to releases repo (server#60829)
• Feat(db): add occ db:info, db:size, db:index-usage and db:locks (server#60840)
• Fix(files_versions): guard null path in event listeners (server#60842)
• Feat(file-search): add property to SearchQuery and check select fields to decide wheter to join extended cache (server#60844)
• Test(cache): avoid ordering assumptions in testExtended (server#60881)
• Fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization (server#60884)
• Docs(IRequest): streamline duplicate docs + update for clarity and accuracy (server#60889)
• Chore(deps): Update flake to NixOS 26.05 (server#60896)
• Fix(core): restore app menu label, show “Settings” for sub-sections (server#60897)
• Fix: Make the IProvideUserSecretBackend usable (server#60898)
• Fix(previews): ffprobe hangs (server#60916)
• Docs: Add AI policy reference and starting point for agents.md (server#60922)
• Perf(user_ldap): chunk oracle queries for lower bind cost (server#60930)
• Fix(files): make sure nested changes are propagated to sidebar tabs (server#60943)
• Fix(user_ldap): allow editing profile fields not managed by LDAP (server#60948)
• Chore: Remove unused and long deprecated Remote components (server#60953)
• Chore: Deprecate IBroadcastEvent (server#60954)
• Refactor(server): Register alias when needed (server#60957)
• Fix: Files checker (server#60959)
• Refactor: Use new IQueryBuilder::MAX_IN_PARAMETERS (server#60960)
• Build: Dont include AGENTS.md and CLAUDE.md in release (server#60964)
• Job run history cleanup (server#60972)
• Fix: harden object store against copying a file to itself (server#60975)
• Fix(tests): remove integration tests that depend on deleted Remote API classes (server#60977)
• Fix(files_external): prevent dropdown entries from shrinking (server#60982)
• Fix(settings): add loading feedback to account create/edit dialogs (server#60986)
• Chore: fix SearchBinaryOperator constructor type hint (server#60988)
• Fix(menu): Fix icon colors on waffle menu (server#60989)
• Fix(theming): read cachebuster as int in manifest endpoint (server#61007)
• Fix(preview): First cleanup from filecache and then from preview table (server#61011)
• Fix: use card interface instead of object (server#61017)
• Fix(taskprocessing): claim tasks atomically so parallel workers don’t duplicate (server#61053)
• Fix(NavigationManager): resolve entries only when needed (server#61055)
• Fix(dav): properly handle files metadata (server#61057)
• Ci(integration): drop stale remoteapi_features test matrix entry (server#61063)
• Refactor(settings): migrate Users form sub-components to script setup (server#61064)
• Fix: use correct permissions mask for non-home storage public links (server#61067)
• Add AI policy check (server#61068)
• Chore: fix smbclient setup in ci (server#61069)
• Test: cleanup users before userbackend test (server#61071)
• Fix(comments): load comments styles when the comments app is loaded (server#61073)
• Fix(settings): Fix appstore icon color in settings menu (server#61075)
• Fix(comments): Use capped memory cache for comments (server#61091)
• Fix(files_sharing): Use share id in file actions (server#61099)
• Fix: Correctly detect appid for dist css files (server#61100)
• Fix(core): keep app menu settings icon legible on light backgrounds (server#61109)
• Fix(NavigationManager): only resolve navigations of booted apps (server#61120)
• Fix(ocm): merge resource types by name in discovery (server#61126)
• Feat(TaskProcessing): add AudioToTextSubtitles TaskType (server#61127)
• Feat(OCP): Add Interaction API (server#61128)
• Build(deps): bump symfony/mailer from 6.4.31 to 6.4.40 (server#61132)
• Fix deprecations in tests (server#61140)
• Test: Warn about slow startup time for phpunit tests (server#61141)
• Chore(PHP): Drop 8.2 for Nextcloud 35 (server#61142)
• Docs(tests): Add some general documentation for PlayWright (server#61143)
• Chore(workflows): keep only lowest and highest supported versions of dbs (server#61144)
• Test(files): migrate favorites e2e from Cypress to Playwright (server#61145)
• Fix(mimetype): Add TSV support in mimetype aliases, mapping, and names (server#61147)
• Build(deps): bump symfony/dom-crawler from 6.4.32 to 7.4.12 (server#61149)
• Speedup tests execution (server#61150)
• Test(files): migrate files actions e2e from Cypress to Playwright (server#61152)
• Test(files): migrate recent-view and regression specs from Cypress to… (server#61153)
• Ci(PHP): Only test against highest and lowest supported PHP versions (server#61158)
• Fix(appstore): bring back “update all” button (server#61163)
• Test(files): migrate copy/move e2e from Cypress to Playwright (server#61165)
• Test(ci): Do not always run e2e tests (server#61167)
• Fix Memcached CI job (server#61168)
• Test: Add missing calls to the parent setUp method (server#61169)
• Test(systemtags): migrate from Cypress to PlayWright (server#61175)
• Fix: resolve PHP deprecation of `imagedestroy` (server#61176)
• Build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 (server#61177)
• Chore: Run integration tests only on PRs as the other tests (server#61181)
• Fix: Fix alignment issues of app password form ( #53123 ) (server#61186)
• Feat(TaskProcessing): Update completionExpectedAt in Manager#setTaskProgress (server#61190)
• Chore: Fix reuse licence after #60840 (server#61194)
• Set preferStreaming default value to false for task processing tasks (server#61197)
• Add OCM Notification Received Event (server#61201)
• Fix: Psalm errors from #60840 (server#61208)
• Chore: apply code style (server#61214)
• Style(PHP): Fix (server#61216)
• Test(core): migrate end-to-end test to PlayWright (server#61217)
• Test(playwright): fix local test server config for SQLite runs (server#61218)
• Test(files): migrate files/trashbin e2e from Cypress to Playwright (server#61219)
• Test(files): migrate files selection e2e from Cypress to Playwright (server#61221)
• Test(files): migrate files download e2e from Cypress to Playwright (server#61223)
• Test(login): migrate end-to-end tests to PlayWright (server#61225)
• Fix: Fix PHP Warning foreach() argument must be of type array|object, null given (server#61245)
• Chore: bump MySQL to min 8.4 and support 9.7 (server#61247)
• Fix(theming): preserve uploaded favicon and touch icon (server#61253)
• Fix(files_versions): avoid version snapshot races during cross-storage renames (server#61254)
• Test(s3): fix flaky EOF check and remove PHP 8.5 skip (server#61275)
• Chore: Update AI-policy workflow (server#61280)
• Fix: Drop PHP 8.2 in Nextcloud 35 in 3rdparty/ (server#61281)
• Feat(oauth2): Add commands for adding and deleting clients (server#61289)
• Fix(twofactor_backupcodes): Add a clean helper to set code as used (server#61292)
• Fix(caldav): respect federation settings (server#61293)
• Fix(maintenance): allow AppAPI to serve requests during maintenance mode (server#61294)
• Fix: Use token expiration for ephemeral sessions (server#61295)
• Fix(files_sharing): remove leading slash from filename on unshare toast (server#61303)
• Fix(team-manager): ensure team resources are only retrived for members (server#61308)
• Fix(ocm-add-share): adjust domain validation (server#61310)
• Fix(files_external): Allow editing auth mechanism on saved mounts (server#61312)
• Fix(user_ldap): Escape filter part when searching for group members (server#61320)
• Fix: Do not set last-password-confirm for apptoken sessions (server#61322)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61330)
• Fix: ensure file names are string-typed (server#61332)
• Fix: prevent editing delegated admins (server#61368)
• Fix(OCM): Remove comment meant only for OCP APIs (server#61399)
• Fix(settings): show app menu current-app button on settings pages (server#61406)
• Chore: Sync codeowner with our internal organisation (server#61407)
• Fix(auth): log invalid token during password reset (server#61408)
• Fix: Use a CappedMemoryCache for UserConfig to avoid memory exhaustion (server#61413)
• Fix(migrations): Trigger recently added migrations (server#61428)
• Fix(files): remove leading slash from destination in copy/move toast (server#61435)
• Perf: Only sort wrappers when adding them (server#61438)
• Perf(View): don’t sort twice the same array (server#61440)
• Fix(files_trashbin): create folder if missing when expiring trash (server#61442)
• Docs(config): clarify metadata and conversion file size limits (server#61478)
• Fix(dav): Always show example content section (server#61483)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61485)
• Fix: Remove uses of deprecated service string names (server#61489)
• Fix: webhook payload for system tag events (server#61490)
• Feat: Make it possible to add a storage wrapper using public APIs (server#61493)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#61497)
• Fix(onetime-qrcode): Remove password confirmation attribute (server#61501)
• Fix(settings): correct heading order in account management sidebar (server#61505)
• Fix(files): distinguish between files and folders for validation messages (server#61506)
• Perf: block more properties from using the custom properties backend (server#61509)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61511)
• Chore(tests): adjust PlayWright tests to follow ESLint rules (server#61513)
• Chore(comments): resolve ESLint warnings (server#61516)
• Fix: stop calling DI container in SharedStorage (server#61517)
• Feat: Add support for `NOT ILIKE` in query builder expressions (server#61521)
• Test(settings): migrate end-to-end tests from Cypress to PlayWright (server#61522)
• Perf: avoid DIing IRootFolder at every shared storage init (server#61530)
• Perf(log): normalize log data only when logging (server#61532)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61534)
• Chore(ISecureRandom): Deprecate generate() in favor of Randomizer::getBytesFromString() (server#61538)
• Refactor: Soft remove Emitter from IRootFolder interface (server#61539)
• Feat(share): add public share-review API under OCP\Share\ShareReview (server#61543)
• Refactor: Expose a public exception when no user is found (server#61544)
• Fix(db): add support for MariaDB 12.3 LTS and increase min. to 10.11 (server#61554)
• Fix(cache): make clear() redis cluster compatible (server#61559)
• Refactor: consolidate app loading logic in bootstrap process (server#61560)
• Feat(TaskProcessing): Add AudioToAudioTranslate TaskType (server#61564)
• Fix(psalm-strict): Fix lib exclusions (server#61565)
• Feat: mark legacy ai providers (server#61567)
• Fix(files_external): ignore deprecated backends (server#61568)
• Fix(files_external): properly apply default mount options (server#61573)
• Fix(updatenotification): use correct appstore route (server#61574)
• Fix(core): use proper API routes for recommended apps (server#61575)
• Fix(appstore): use proper app icon or adjust color if needed (server#61577)
• Fix(appstore): only show appstore entries if actual from appstore (server#61578)
• Fix(psalm): Set PHP version to 8.3 (server#61583)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61586)
• Fix(a11y): label account QR code button (server#61600)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61608)
• Refactor(tests): cleanup PlayWright tests (server#61614)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61615)
• Refactor(taskprocessing): mark built-in text task types as internal and deprecated if needed (server#61616)
• Fix(files_external/SMB): Use ‘null’ explicitly for no workgroup (server#61622)
• Fix(theming): allow to unselect a font theme (server#61627)
• Fix(core): reduce header height (server#61628)
• Refactor(preview): align provider lookup in PreviewManager checks (server#61629)
• Fix(files_sharing): reject custom share tokens longer than the db column (server#61630)
• Docs(preview): improve IPreview and IProviderV2 interface docs (server#61632)
• Fix(LoginForm): improve login throttle warning wording (server#61636)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61638)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61639)
• Chore: Remove redundant assignment (server#61641)
• Fix(core): scope public share theme filter to the download icon (server#61648)
• Chore(jobs): write proper documentation for job:history (server#61657)
• Fix(files): proper accessible row name and title for overflow (server#61658)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#61659)
• Update script to latest (server#61660)
• Fix(core): resolve some edge cases with recommended apps (server#61663)
• Test(files_external): migrate end-to-end tests to PlayWright (server#61665)
• Fix(core): keep the header search input in document flow (server#61668)
• Sync ai-policy with org template (server#61669)
• Fix(rector): Don’t use AddSeeTestAnnotationRector in rector strict (server#61670)
• Fix: hide scroll bar in unified search when not needed (server#61679)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#61680)
• Feat(bruteforce): improve bruteforce protection command output (server#61682)
• Feat(TaskProcessing): add TextToTextImprove to improve or iterate on text (server#61683)
• Fix(bruteforce): Don’t throttle requests with failing CSRF (server#61686)
• Fix: adjust file picker for background image to allow folder navigation (server#61688)
• Store taskprocessing output files with extension to ease mimtype guessing (server#61689)
• Feat: KV cache based on predis (server#61690)
• Build(deps): Composer audit updates (server#61696)
• Fix(db): align preview migration annotations with created tables (server#61705)
• Perf(db): drop redundant db-side migrations version sorting (server#61707)
• Docs(config): fix unbalanced inline literal in remember-me sample com… (server#61719)
• Ci: Add lables via rest api (server#61735)
• Docs(ratelimit): add missing @param documentation (server#61736)
• Docs(JS): fix typo in function name (server#61746)
• Test(files): migrate end-to-end tests to PlayWright (server#61751)
• Ci(dependabot): restore build/frontend dirs for stable33 npm updates (server#61806)
• Chore(deps): Bump postcss from 8.5.6 to 8.5.16 in /build/frontend-legacy (server#61823)
• Fix(jobs): resolve portability issues with background job cleanup (server#61830)
• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61838)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61841)
• Fix(DeclarativeManager): Fix admin delegation (server#61845)
• Ci: Update policy check to org-latest (server#61847)
• Build(rector-strict): Bump PHP set to 8.3 (server#61848)
• Feat(core): header-anchored combobox shell for unified search (server#61849)
• Fix(metadata): bind chunked file ids (server#61857)
• Test: fix HEIC tests (server#61858)
• Fix(dav): release part-file lock when an upload fails (server#61863)
• Feat: Disable callable serialization in sabre/xml (server#61866)
• Fix(auth): confine OCM access token to the masked share endpoint (server#61870)
• Fix(jobs): compute memory usage after clean-up (server#61877)
• Fix(settings): missing end of html tag (server#61880)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61881)
• Test(installer): migrate end-to-end tests to PlayWright (server#61883)
• Perf: Replace more calls from getUserGroups to getUserGroupIds (server#61904)
• Fix(files_sharing): preserve unmasked permissions as scan_permissions (server#61905)
• Perf: Don’t fetch all the trash items when deleting a single item (server#61906)
• Feat(files_sharing): schedule external share scan job when accepted (server#61908)
• Fix(s3): trim multiple spaces to single space in original path header (server#61914)
• Feat: Fetch groups in batch in getUserGroups (server#61916)
• Fix: Catch expected NotFoundException (server#61917)
• Fix(files_sharing): Fail on sharing file with create or delete permission before failing on increased permissions (server#61929)
• Fix(files): use proper translation templates (server#61931)
• Fix(files): do not let a failing move hook break the move or hide files (server#61937)
• Refactor(Interaction): Allow multiple resources and receivers in a single event (server#61938)
• Feat(core): add unified search loading controller (server#61941)
• Feat(login): clean remember me tokens (server#61944)
• Refactor: Centralize logic for checking if a share is password protected (server#61946)
• Ci: migrate from buildjet to cache action (server#61947)
• Fix(preview): Handle unique constraints violation exception (server#61950)
• Feat(occ): improve config:list help text/descriptions (server#61953)
• Perf(carddav): reduce disk usage of photocache (server#61957)
• Fix: Output shape validation will delete keys when there is a list of files (server#61962)
• Feat: Add MultimodalChatWithTools and MultimodalContextAgentInteraction (server#61963)
• Fix(systemtags): correct @since tag for sanitizeWordsAndEmojis (server#61966)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#61981)
• Fix(UserPlugin): Don’t search for displayname when restricted (server#61982)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#61984)
• Fix(encryption): bind personal private key password inputs (server#62027)
• Chore(playwright): Wait for server response before checking sorting result (server#62032)
• Chore(playwright): Rewrite password confirmation handler to avoid race conditions (server#62033)
• Chore(tests): Fix broken rector run due to conflict with psalm (server#62034)
• Chore(tests): Fix flaky nodb tests due to `AlgorithmTest` (server#62035)
• Feat(ITeamManager): Add getTeam method (server#62038)
• Perf(workflow): Implement result cache for IP checks (server#62039)
• Fix(caldav): url-encode owner/user in activity event links (server#62063)
• Improve logout url generation (server#62081)
• Fix(FilesWidget): allow to resize widget vertically (server#62089)
• Rate limiting for creating federated shares (server#62091)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62092)
• Feat(core): drive the unified search modal from the search controller (server#62093)
• Fix(KeyValueCache): allow negative TTL for file locking (server#62114)
• Fix: Disable imagick preview providers (server#62145)
• Feat(core): keyboard navigation and focus shortcut for unified search (server#62157)
• Fix(preview): properly handle encoded content (server#62162)
• Fix(AmazonS3): pass S3 error messages through to the frontend (server#62163)
• Perf(dav): Stream PROPFIND output (server#62164)
• Chore: undeprecate the redis cache backend (server#62195)
• Fix(files_version): mtime confusion on milliseconds (server#62204)
• Occ file command enhancements (server#62207)
• Fix: don’t die if we can’t encode file metadata on upload (server#62208)
• Use stricter types on a few classes (server#62228)
• Feat(Dispatcher): Warn about open transaction after controller method was executed (server#62232)
• Fix(SetupChecks): Link to task processing worker docs (server#62240)
• Add Unified Sharing (server#62241)
• Fix(theming): mark background button text as English (server#62242)
• Fix(TaskProcessing): Claim tasks atomically in both SynchronousBackgr… (server#62243)
• Fix(dashboard): update scrollbar contrast on background (server#62244)
• Fix(files): properly handle folders without permissions (server#62254)
• Fix(files): preserve encryptedVersion when copying cache entries (server#62255)
• Fix(appstore): initialize the exApps store when enabled (server#62276)
• Test: mark installation tests as slow (server#62282)
• Test(users): prevent flaky tests with hardcoded values (server#62283)
• Test(files): wait for PUT before continue with tests (server#62284)
• Test(files): wait for actual requests when deleting files (server#62286)
• Test(TestCase): restore unregistered services correctly (server#62326)
• Test(files): make watcher propagation mtime regression test deterministic (server#62329)
• Fix(core): handle parameter limits in files metadata deletion (server#62331)
• Refactor: Add type annotations to middlewares (server#62334)
• Use constructor properties in Sharing (server#62335)
• Fix: Mark some parameters as sensitive (server#62336)
• Perf(ShareUser): Only fetch display name instead of user object (server#62341)
• Perf(user-display-name): Check memory cache before trying redis (server#62353)
• Fix(SharingBackend): Call ISharePropertyTypeModifyValue::modifyValueOnSave when saving default value (server#62354)
• Feat(files_sharing): fetch remote avatars for external shares (server#62355)
• Fix(sharing): Set REUSE annotations for l10n (server#62356)
• Feat(core): reveal unified search filters from the input (server#62359)
• Fix(PasswordSharePropertyType): Generate default password when passwords are required (server#62360)
• Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#62364)
• Don’t fill the pagination cache if there are no extra items (server#62365)
• Fix(TeamShareRecipientType): Defer getting CirclesManager class as it might not exist yet (server#62366)
• Fix: allow Enter on public share Download link (server#62367)
• Fix(files_sharing): skip unresolvable share recipients (server#62368)
• Fix(share): do not re-accept rejected shares (server#62373)
• Fix(search): Add end date for last 7 and last 30 days (server#62375)
• Perf(files_external): pipeline SFTP stream writes (server#62377)
• Fix(Sharing): Fix l10n interpolation (server#62393)
• Feat(Sharing): Fallback to guest avatar if recipient provides no icon (server#62397)
• Ci: update workflows from organization (server#62407)
• Fix(CleanupLoginTokens): Specify the table (server#62408)
• Fix: Don’t add empty and broken ExternalShareScanJob on upgrade (server#62412)
• Test(files_versions): migrate end-to-end tests to PlayWright (server#62423)
• Fix(background-jobs): preserve Snowflake IDs as strings (server#62425)
• Fix: multimodal chatwithtools was not made internal (server#62426)

[blizzz]

server (continued)

• Feat: allow specifying applicable users and groups in the files_external:create command (server#62431)
• Fix(Sharing): Use positional parameters in property validation error messages (server#62432)
• Fix(SharingManager): Skip interaction checks if checks are overridden (server#62444)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62445)
• Fix(Sharing): Enable node download permission by default (server#62454)
• Fix(Sharing): Remove faulty check if required properties have a defaut value (server#62455)
• Fix(Sharing): Compute required, default and max expiration date based on recipients (server#62464)
• Fix(IRegistrationContext): Fix type hinting (server#62475)
• Feat: introduce a function to bind a teamfolder to a team (server#62476)
• Fix: Use PHP_AUTH_PW for strict password confirmation (server#62477)
• Feat(webauthn): Skip 2FA for user verified logins (server#62540)
• Http-sig: Update http message signatures for OCM after spec review (server#62543)
• Fix(rector-strict): Ignore wrong cases of RemoveReturnTagIncompatibleWithNativeTypeRector (server#62548)
• Feat(Sharing): Allow omitting existing recipients when searching for recipients (server#62550)
• Perf: Use hash map to check if path was already checked (server#62552)
• Chore(Sharing): Fix some typos (server#62556)
• Perf: Don’t construct Config object twice (server#62559)
• Fix(imip): add context to imip log messages (server#62561)
• Optimize propagator (server#62562)
• Fix: correct spelling errors in comments (server#62564)
• Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62585)
• Fix: throw better error message if a user doesn’t have a key even though it should have (server#62586)
• Test: migrate remaining e2e tests to PlayWright (server#62592)
• More logging around partfile rename failures (server#62594)
• CI/Test fixes for unified sharing (server#62596)
• Fix(Sharing): Improve date error messages (server#62598)
• Add hints for password and expiration date if they are required (server#62599)
• Chore(previews): add file signature check before opening files (server#62600)
• Perf(preview): Optimize retriving all previews from oc_filecache (server#62601)
• Fix(Sharing): Pass ShareUser instead of IUser (server#62602)
• Feat(core): redesign unified search result presentation (server#62605)
• Test(version-check): Fix flaky test (server#62609)
• Feat: Add missing NoSubAdminRequired attribute (server#62610)
• Preparations for files_sharing legacy backend (server#62613)
• Migrate the dashboard app to Vue 3 (server#62624)
• Migrate weather status to vue3 (server#62625)
• Test: reduce flakyness of files version tests (server#62627)
• Refactor(Sharing): Move from OCP to NCU (server#62640)
• Feat: profile mobile view (server#62646)
• Fix(systemTags): setObjectIdsForTag() dispatches once (server#62647)
• Expend a bit OCP\GlobalScale\IConfig (server#62660)
• Fix(encryption): handle decryption exception with outdated passwords (server#62666)
• Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62670)
• Chore: remove deprecated global aliases for OC functions (server#62674)
• Chore: remove deprecated global libraries (server#62677)
• Fix(dashboard): use non-deprecated functions + make tests work at night (server#62682)
• Feat(oauth2): Forward app tokens from primary to secondary in global scale (server#62687)
• Test: resolve potential flaky Playwright tests (server#62688)
• Fix(Database): Use real idle-timer to prevent `lastInsertId` being reset on MariaDB/MySQL (server#62697)
• Fix(console): write app command loading errors to stderr (server#62718)
• Fix(imip): don’t report success when a calendar cannot process iMip (server#62722)
• Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62724)
• Fix(setup): make sure CAN_INSTALL error page is shown (server#62765)
• Fix(provisioning_api): read newUser.sendEmail as a boolean (server#62776)
• Fix(dav): properly finalize with MOVE only (server#62786)
• Chore: Apply rector:strict ruleset (server#62794)
• Fix: improve logging when failing to get newly created user (server#62795)
• Test(net): Add more ip classifier test cases (server#62797)
• Fix: handle sftp private key as password (server#62805)
• Fix: clear key password after loading key (server#62806)
• Check free space in the proper folder when restoring from trash (server#62807)
• Fix: disable direct link if link shares are disabled (server#62809)
• Fix: require admin permissions for all systemtag updates (server#62810)
• Host/ip validator hardenings (server#62811)
• Hide personal settings of apps not enabled for the user (server#62852)
• Fix(direct editing): cleanup tokens on user deletion (server#62861)
• Feat(api): Add getOrCreateFolder also for SimpleFS module (server#62868)
• Feat: Allow to check user existence outside specific user backends (server#62870)
• Fix(sharing): properly handle verification of copy/move actions (server#62871)
• Fix(share): Prevent type error caused by non-existing user (server#62872)
• Fix(theming): Speed up slow animations (server#62879)
• Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62884)
• Fix: Port away from removed oc_default (server#62886)
• Perf(PasswordConfirmationMiddleware): Reuse reflection object (server#62887)
• Test(sharing): sort recipients before asserting in testGetShareWithPublicSecret (server#62902)
• Feat: keep a classname mapping instead of always storing the full name for shares (server#62904)
• Fix(ObjectStore): reset multipart upload byte counter on retry (server#62919)
• Fix(trashbin): properly show deleted by for federated shares (server#62925)
• Fix(core): improve app icon contrast in the app menu (server#62931)
• Fix(setup): de-duplicate host parsing allowing IPv6 connections (server#62932)
• Command API in OCP (server#62942)
• Style(icons): use filled variants for user, comment, share, password (server#62947)
• Refactor: use DateTimeImmutable in unified sharing api instead of timestamp (server#62957)
• Chore: Bump symfony/console (server#62962)
• App menu visual polishing (server#62963)
• Refactor: use IUser for IShareSourceType::getSourceInteractionResource instead of user id string (server#62972)
• Chore: Bump symfony components to v7 (server#62974)
• Fix: Handle 2fa enforcement earlier (server#62982)
• Fetch share source metadata in bulk (server#62987)
• Fix: improve type hinting for unified share listing methods (server#62989)
• Fix(core): prevent unified search placeholder from clipping (server#62999)
• Fix(CalDAV): Check for user status before serving public calendars (server#63004)
• Chore: Apply rector strict config again (server#63007)
• Revert "Merge pull request #62947 from nextcloud/fix/noid/filled-core… (server#63012)
• Add DBAL Schema wrapper in OCP (server#63013)
• Chore(deps): update 3rdparty dependencies (server#63018)
• Chore(deps): update `cweagans/composer-patches` to v2.0.0 (server#63023)
• Chore(deps): update `fusonic/opengraph` to v3.1.0 (server#63025)
• Chore(deps): update `php-opencloud/openstack` to v3.17.0 (server#63027)
• Build(deps): bump aws/aws-sdk-php from 3.376.2 to 3.390.1 (server#63030)
• Fix(files_trashbin): misleading trashbin:expire output when expiration is disabled (server#63040)
• Update CODEOWNERS to modify maintainers (server#63041)
• Chore: cleanup getting time for formatting logs (server#63043)
• Fix(files_trashbin): cleanup trash metadata after failed cross-user moves (server#63070)
• Feat(federation): Add accept/decline mechanism for federated calendars (server#63112)
• Fix errors from 32bits CI (server#63114)
• Backports ldap fixes (server#63124)
• Refactor: add PHP 8.3 types to BC-safe class constants (server#63133)
• Fix(files_versions): pass missing fileInfo properties to Viewer.compare (server#63149)
• Feat(dbal): Add missing stuff in DBAL wrapper (server#63152)

3rdparty

• Chore: add firebase/php-jwt and gapple/structured-field as dependencies (3rdparty#2413)
• Ci(dependabot): Update stable34 (3rdparty#2419)
• Ci(workflows): Create update-stable-titles.yml (3rdparty#2460)
• Fix: Drop PHP 8.2 in Nextcloud 35 (3rdparty#2477)
• Fix: remove useless polyfills and block installing them (3rdparty#2478)
• Feat: add predis as a dependency for Valkey cluster support (3rdparty#2496)
• Build(deps): Composer audit updates (3rdparty#2497)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2511)
• Feat: Provide symfony polyfill php86 (3rdparty#2549)
• Chore: Bump symfony console (3rdparty#2550)
• Chore: Bump symfony components (3rdparty#2551)

activity

• Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2514)
• Fix(bulkReceive): honour admin email toggle and ISetting notification defaults (activity#2562)
• Fix(MailQueueHandler): check enable_email toggle before sending queued emails (activity#2563)
• Refactor: flatten nesting in shareNotificationForOriginalOwners with early return (activity#2566)
• Refactor(types): add native parameter and return types to UserSettings (activity#2572)
• Feat(deps): Add Nextcloud 35 support on master (activity#2593)
• Chore(deps): Bump nextcloud-vue from 9.7.0 to 9.8.0 (activity#2601)
• Refactor(tests): migrate e2e test suite from Cypress to Playwright (activity#2603)
• Fix(NotificationGenerator): catch InvalidArgumentException from notification setters in prepare() (activity#2604)
• Feat: adding an option to exclude users from the acitivity log (activity#2626)
• Fix(ActivityAppNavigation): use correct icon filter for NC34+ active nav items (activity#2627)
• Improve activity feed design (activity#2634)
• Perf(mailqueue): cover `amq_latest_send` in the affecteduser index (activity#2635)
• Fix(expire): delete conditions for activity_expire_exclude_users (activity#2655)
• Perf(files): compute move/rename activity settings once (activity#2656)
• Feat: make amount of items sent on email configurable via occ (activity#2673)
• Fix: Remove user memoization (activity#2674)
• Chore: update workflows and PHP version (activity#2675)
• Chore: switch npm and GitHub Actions dependency updates to Renovate (activity#2677)
• Fix(renovate): remove expandCodeOwnersGroups (paid-tier feature) (activity#2704)
• Fix(psalm): update psalm baseline (activity#2705)
• Fix: Fix psalm (activity#2711)
• Ci(renovate): update dependencies on maintained stable branches (activity#2721)
• Chore: lower cooldown to 4 days and remove monthly schedule for tooling (activity#2779)
• Fix: do not fail moves when the old location cannot be resolved (activity#2784)
• Fix(listener): Catch when trying to set up a settings that doesn’t exists (activity#2791)
• Fix: stop using deprecated IAppContainer::getServer() (activity#2804)
• Fix(files): roll back activity transaction when activity publishing f… (activity#2812)
• Fix(mail): always reset current user after sending activity emails (activity#2814)
• Feat(stream): add search, date range and account filters to the stream (activity#2836)
• Feat(stream): add an activity heatmap that drives the date filter (activity#2839)
• Fix(tests): Fix migration tests (activity#2856)

app_api

• Feat(deps): Add Nextcloud 35 support on main (app_api#872)
• Fix: proxy route leading slash (app_api#874)
• Feat(deps): Add Nextcloud 35 support on main (app_api#880)
• Fix: normalize missing bruteforce_protection and headers_to_exclude on ExApp routes (app_api#882)
• Feat: validate ExApp routes at registration and reject malformed data (app_api#885)
• Feat: add default_action field to files-actions-menu registration (app_api#887)
• Feat(config): store ExApp config & preferences in the server’s app/user config (app_api#889)
• Fix(fetcher): catch GenericFileException when reading the appstore cache file (app_api#891)
• Ci: use INFO loglevel in the Redis deploy jobs (app_api#893)
• Fix(maintenance-mode): keep only HaRP and ExApp survival routes available in maintenance mode (app_api#898)
• Ci: replace PHP 8.2 with PHP 8.4 in the PHPUnit matrix (app_api#899)
• Feat(openapi): add OpenAPI specification generation (app_api#905)
• Feat(setup-checks): let ExApps surface setup checks in the admin overview (app_api#908)
• Docs: Add an AGENTS.md guide for installing, operating and developing AppAPI (app_api#911)
• Ci(dependabot): add npm updates for stable branches (app_api#914)
• Feat: add release relay and npm audit fix workflows (app_api#921)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#928)
• Fix(notifications): do not translate empty ExApp strings, which throws on Nextcloud 35 (app_api#953)
• Ci(tests-deploy): wait until Nextcloud is installed before enabling AppAPI (app_api#954)
• Fix(deprecation): stop using OC_App and non-public AppManager methods (app_api#960)
• Move the agent guides to the nextcloud-skills repository (app_api#968)
• Do not deploy ExApp environment variables with an empty default as the literal string Array (app_api#970)

bruteforcesettings

• Feat(deps): Add Nextcloud 35 support on master (bruteforcesettings#1099)
• Fix: fix toggle the allow list option (bruteforcesettings#1103)
• Chore(deps): update dependencies (bruteforcesettings#1145)
• Ci(php): Require PHP 8.3 in all tooling (bruteforcesettings#1146)

circles

• Feat: Add the possibility to create invitation links to circles (circles#2254)
• Feat(mount-provider): implement IPartialMountProvider (circles#2378)
• Feat: add support for setting preview avatar for circle (circles#2438)
• Feat(deps): Add Nextcloud 35 support on master (circles#2475)
• Feat(deps): Add Nextcloud 35 support on master (circles#2479)
• Feat: Add role-based filtering for circle member queries (circles#2482)
• Update rector, fix configuration and run it (circles#2484)
• Chore(actions): add sync-workflow-templates github action (circles#2493)
• [master] build: add .nextcloudignore for release builds (circles#2508)
• Chore: getBasedOn() is nullable (circles#2519)
• Chore: Minimum php version is 8.3 (circles#2520)
• Adjust local controller to better handle permission checks (circles#2522)
• Fix(local-controller): dont show full config int of circle for non-members (circles#2523)
• Fix(local-controller): validate params set on team creation (circles#2524)
• Test(admin-controller): add unit tests covering all controller endpoints (circles#2544)
• Fix(local-controller): include CFG_OPEN in config mask for visible circles (circles#2545)
• Feat: add pull request template (circles#2558)
• Feat(teams): in-app Teams page (circles#2561)
• Test: scaffold front-end testing with Vitest and Playwright (circles#2562)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2572)
• Chore(i18n): Rename all occurrences of “circles” to “teams” (circles#2573)
• Ci(dependabot): add npm updates for stable branches (circles#2583)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2603)
• Feat(admin-controller): add route to fetch all circles (circles#2614)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2615)
• Fix(url): Make team link absolute URL (circles#2630)
• Fix(l10n): ignore compiled js files (circles#2631)
• Feat: Add filter by role and username (circles#2659)
• Feat: add release-relay.yml workflow (circles#2666)
• Fix(maintenance-service): remove redundant empty check on getDisplayName (circles#2667)
• Fix(reuse): add entry for .l10nignore (circles#2668)
• Fix: avoid attempting to fetch protected resources when user is not a member (circles#2673)
• Feat: implement scim and oidc integration (circles#2674)
• Fix(types): declare vite/modulepreload-polyfill virtual module (circles#2676)
• Avoid duplicate purge on inheritance (circles#2687)
• Fix(local-controller): validate when trying adding member of type contact (circles#2696)
• Fix: Use global members limit as default for circle (circles#2697)
• Fix: add promoteToOwner method (circles#2711)
• Fix(circles): preserve group display names when creating circles (circles#2722)

files_downloadlimit

• Feat(deps): Add Nextcloud 35 support on master (files_downloadlimit#804)
• Chore: clean up old CSS files (files_downloadlimit#851)
• Fix: allow higher download limits than 500 (files_downloadlimit#906)

files_lock

• Perf: cache negative results in LockSerivice::getLockForNodeIds (files_lock#1057)
• Feat(config): switch to config lexicon (files_lock#1060)
• Feat(deps): Add Nextcloud 35 support on main (files_lock#1081)
• Fix(LockWrapper): gracefully handle null user in copyFromStorage() (files_lock#1097)
• Perf: Avoir calling Server::get for each share mounts (files_lock#1113)
• Refactor: Use modern events instead of old hooks (files_lock#1125)
• Use SPDX license identifier (files_lock#1130)
• Ci(tools): Update dev dependencies (files_lock#1131)
• Ci(dependabot): add composer updates for stable branches (files_lock#1150)
• Enh: allow file owner to unlock TYPE_TOKEN locks (files_lock#1168)
• Refactor: Remove CoreQueryBuilder and co (files_lock#1193)
• Feat: add release-relay.yml workflow (files_lock#1197)
• Docs(readme): restructure, expand, and revise locking documentation (files_lock#1198)
• Fix(webdav): align lock editor property responses (files_lock#1199)
• Test: clean up all lock feature test fixtures (files_lock#1200)
• Test(lock): access shared file as recipient in app lock test (files_lock#1206)
• Fix(command): clarify files:lock usage and unlock feedback (files_lock#1207)

files_pdfviewer

• Chore(performance): make the viewer component async (files_pdfviewer#1434)
• Feat(deps): Add Nextcloud 35 support on master (files_pdfviewer#1441)
• Feat(deps): Add Nextcloud 35 support on master (files_pdfviewer#1442)
• Fix: 1451 stop spinner once the document loaded (files_pdfviewer#1454)
• Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1474)
• Chore: Bump PHP version to 8.3 (files_pdfviewer#1488)
• Chore: Add workflow to sync workflow templates (files_pdfviewer#1489)
• Fix: Add explicit dependency for vue-loader@legacy (files_pdfviewer#1496)
• Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1502)

firstrunwizard

• Feat(deps): Add Nextcloud 35 support on master (firstrunwizard#2073)
• Feat(deps): Add Nextcloud 35 support on master (firstrunwizard#2074)
• Use SPDX license identifier (firstrunwizard#2128)

logreader

• Feat: Remove unnecessary whitespaces (logreader#1835)
• Feat(deps): Add Nextcloud 35 support on master (logreader#2019)
• Chore: bump PHP version to 8.3 (logreader#2064)
• Ci(dependabot): add npm updates for stable branches (logreader#2094)
• Chore: add update-stable-titles worfklow, exclude IDE dirs with .gitignore (logreader#2111)
• Fix(build): extract license information from .map files (logreader#2176)

nextcloud_announcements

• Feat(deps): Add Nextcloud 35 support on master (nextcloud_announcements#625)
• Use SPDX license identifier (nextcloud_announcements#662)
• Fix(crawler): Fix phpseclib3 compatibility (nextcloud_announcements#679)

notifications

• Feat(deps): Add Nextcloud 35 support on master (notifications#3007)
• Fix(webpush): recover gracefully from corrupted or mismatched VAPID keys (notifications#3031)
• Chore: extend testing of `encryptAndSign` and make the methods discoverable by psalm (notifications#3050)
• Fix(push): Use OAEP padding by default in Nextcloud 35+ (notifications#3068)
• Docs(webpush): Document knowledge and trust models of webpush flow (notifications#3075)
• Fix(email): Correctly initialize next_send_time field (notifications#3078)
• Fix(webpush): Don’t reuse query object for second query (notifications#3088)
• Test: Push notification payload (notifications#3144)
• Use SPDX license identifier (notifications#3149)
• Fix(Makefile): Add missing composer setup for dev-setups and building… (notifications#3159)
• Ci(dependabot): add composer updates for stable branches (notifications#3175)
• Fix(push): Fix undefined index when accessing token age (notifications#3224)
• Perf(push): Send push notifications async to proxies (notifications#3234)
• Build(deps): Bump guzzlehttp/guzzle (notifications#3239)
• Fix(webpush): Skip browsers when disabled (notifications#3245)

office

• Newly added in this release

password_policy

• Feat(deps): Add Nextcloud 35 support on master (password_policy#938)
• Feat: Add login output when password policy fails (password_policy#958)
• Chore(deps): drops support for PHP 8.2 (password_policy#972)

photos

• Refactor: Port to newer system tag events (photos#3437)
• Fix(metadata): exif_read_data() supports JPEG/TIFF (photos#3461)
• Feat(deps): Add Nextcloud 35 support on master (photos#3518)
• Feat(deps): Autoupdate rector (photos#3536)
• Chore: Bump @nc/vue to v8.35.0 (photos#3550)
• Fix handling of directory names with special characters (photos#3552)
• Feat: display video duration (photos#3553)
• Fix: faces actions and add recognize e2e tests (photos#3573)
• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3586)
• Ci(dependabot): add composer updates for stable branches (photos#3630)
• Fix: Bust full preview cache by etag (photos#3695)
• Fix(dav): properly handle metadata (photos#3705)
• Chore(ai): add AGENTS.md (photos#3728)

privacy

• Feat(deps): Add Nextcloud 35 support on master (privacy#1339)
• Use SPDX license identifier (privacy#1380)
• Fix(ci): unblock CI — enforce PHP 8.3 in psalm.xml + sync PHP workflow templates (privacy#1381)

recommendations

• Refactor: migrate components to Composition API (Vue 3 prep) (recommendations#1029)
• Feat(deps): Add Nextcloud 35 support on master (recommendations#1037)
• Refactor: Port away from deprecated APIs (recommendations#1045)
• Chore: set Psalm PHP version to 8.3 (recommendations#1055)
• Ci(renovate): update dependencies on maintained stable branches (recommendations#1065)
• Ci(renovate): ignore workflows managed by the org template repo (recommendations#1124)
• Ci: add workflow sync workflow (recommendations#1125)
• Ci: configure coderabbitai (recommendations#1126)
• Build: migrate from webpack to vite (recommendations#1131)
• Refactor: migrate state management from Vuex to Pinia (recommendations#1136)
• Refactor: migrate to Vue 3 (recommendations#1141)
• Chore: update composer platform to PHP8.3 (recommendations#1151)

related_resources

• Ci: Create update-nextcloud-ocp-approve-merge.yml (related_resources#1037)
• Ci: Create sync-workflow-templates.yml (related_resources#1038)
• Ci(psalm): Fix required PHP version (related_resources#1039)
• Ci(psalm): Fix nextcloud/ocp update (related_resources#1048)
• Chore: add release-relay.yml workflow (related_resources#1073)
• Feat(deps): Add Nextcloud 35 support on master (related_resources#970)
• Refactor: Simplify request builder (related_resources#999)

serverinfo

• Vue (serverinfo#1007)
• Ci(actions): Update workflows (serverinfo#1013)
• Chore: Require PHP 8.3 (serverinfo#1019)
• Ci(actions): Automate workflow updates (serverinfo#1027)
• Use a parameterized translation for CPU thread count (serverinfo#1032)
• Ci(actions): Add workflow to lint info.xml (serverinfo#1037)
• Ci: Disable npm-audit-fix on stable34 (serverinfo#1044)
• Fix(disk): do not divide by zero on a filesystem with no capacity (serverinfo#1062)
• Fix(disk): stop dropping filesystems whose mount point has unusual ch… (serverinfo#1063)
• Fix(disk): stop the disk card text overflowing and tidy up the chart (serverinfo#1068)
• Fix(layout): let info tables wrap and give PHP extensions the full width (serverinfo#1069)
• Fix(l10n): Ignore compiled js/ (serverinfo#1071)
• Ci: Add assisted-by workflow (serverinfo#1076)
• Background jobs (serverinfo#1084)
• Fix: Mark update storage stats as time insensitive (serverinfo#1085)
• Fix(background-jobs): adjust width for when column (serverinfo#1088)
• Feat(deps): Add Nextcloud 35 support on master (serverinfo#996)

survey_client

• Fix(report): Fix sending huge reports (survey_client#394)
• Feat(deps): Add Nextcloud 35 support on master (survey_client#417)
• Use SPDX license identifier (survey_client#450)

suspicious_login

• Feat(deps): Add Nextcloud 35 support on master (suspicious_login#1112)
• Fix(notifier): Fix label length limited to 32 characters (suspicious_login#1114)
• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1118)
• Chore: update Psalm PHP to 8.3 (suspicious_login#1119)
• Chore: make David the primary maintainer (suspicious_login#1128)

text

• Chore(test): add test for 4480 (text#7777)
• Fix(code): don’t apply inline code CSS rules to code blocks (text#8587)
• Test(playwright): await `setO(n|ff)line` in autosave tests (text#8588)
• Feat(deps): Add Nextcloud 35 support on main (text#8590)
• Chore(ci): add stable34 to branches that receive updates (text#8593)
• Fix: allow dots in markdown link text (text#8596)
• Fix(ActionInsertLink): allow to get title from link picker (text#8615)
• Fix(folderDescription): fix max height in unfocused mode (text#8616)
• Chore: add AI checkboxes to PR template (text#8617)
• Chore/upgrade vue 3 (text#8619)
• Chore: remove codecov (text#8625)
• Fix: several table button design fixes (text#8627)
• Fix(translate): use assistant app dialog (text#8628)
• Fix: Rename mobile editing file creator name to leave out “New” prefix (text#8634)
• Fix: disable open link button for unsafe link (text#8651)
• Fix(folderDescription): always use ‘Readme.md’ as filename (text#8652)
• Fix(headings): skip headings in details in table of contents (text#8653)
• Test(playwright): add summary job so we can add it to merge rules (text#8656)
• Fix(Editor): emit modified fileNode size on save (text#8686)
• Fix(mediaHandler): strip relevant bidi chars in filenames (text#8687)
• Add a “question” bloc in addition of Danger, Info, Positive, Warn (text#8698)
• Chore(github): update workflows (text#8713)
• Preserve Markdown reference links (text#8717)
• Fix(math): fix lost content after math node (text#8718)
• Fix(editorApi): allow to disable image lazy-loading (text#8719)
• Fix(autofocus): persist cursor positions in localStorage (text#8723)
• Fix(markdown): preserve horizontal rule markup (text#8725)
• Fix permission change in text doc (text#8746)
• Chore(psalm): bump phpVersion to 8.3 (text#8752)
• Fix: show Assistant icon if only translation provider available (text#8753)
• Performance: Only check permissions when changing content (text#8754)
• Chore(psalm): throw directly to make types more obvious (text#8756)
• Ci: remove compile command, as it happens after merge. Then, also run reuse (text#8761)
• Chore(ci): continue playwright jobs if one fails (text#8763)
• Bump php version and update baseline (text#8776)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8779)
• Fix(editor): preserve leading newlines in plain text editor (text#8787)
• Chore(cleanup): deprecated secureRandom->generate (text#8789)
• Fix(table): replace alert() with showWarning() for nested table paste (text#8795)
• Fix(Table): allow changing list indention inside tables (text#8812)
• Fix(ImageView): use `a` element for clickable items (text#8813)
• Fix/vue3 followup (text#8822)
• Chore(refactor): aviod extending serializer options (text#8823)
• Add footnotes support (text#8840)
• Ci(playwright): fix installing pinned NPM version (text#8844)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8856)
• Fix(links): scroll to anchor links directly (text#8857)
• Chore(playwright): use `list` reporter when run locally (text#8859)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8860)
• Two small footnotes follow-up fixes (text#8874)
• Fix(filepicker): hide menu (text#8875)
• Chore(refactor): loop over possible footnotes once (text#8876)
• Fix(share): detect if documentId is outside of share early (text#8879)
• Upgrade/typescript v6 (text#8884)
• Fix: Pasting from excel inserts an image instead of a formatted table (text#8897)
• Feat: inline comments (text#8901)
• Fix: add file-access check (text#8903)
• Fix/autosave timer (text#8917)
• Chore(npm): allow scripts of known NPM dependencies (text#8922)
• Fix(collaboration): ellipsise user caret labels (text#8923)
• Fix: update ShowImageModal to use fullUrl for show original image ins… (text#8924)
• Fix(DirectEditing): check if user is enabled (text#8951)
• Fix(editor): fix viewer header overlaying page content on mobile (text#8952)
• Fix(editor): set `translate=yes` for read-only editor (text#8962)
• Fix(sync): reset #sending flag when no active connection on sendStepsNow (text#8963)
• Fix(attachments): check documentId matches (text#8966)
• Test(playwright): don’t set `webServer.url` parameter (text#8968)
• Chore(test): direct editing permissions (text#8969)
• Fix(embed): guard unavailable search commands (text#8970)
• Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9004)
• Fix(LinkPicker): improve suggestions order and rename ‘Files’ (text#9020)
• Fix(viewer): align content of old version in viewer version comparison (text#9029)
• Fix(dbal): Adapt to new DBAL wrapper (text#9030)
• Feat(php): install and configure PHP rector (text#9031)

twofactor_nextcloud_notification

• Feat(deps): Add Nextcloud 35 support on main (twofactor_nextcloud_notification#1324)
• Use SPDX license identifier (twofactor_nextcloud_notification#1395)

twofactor_totp

• Fix: handle potentially null return value of preg_replace (twofactor_totp#1762)
• Feat(deps): Add Nextcloud 35 support on master (twofactor_totp#1768)
• Fix(migration): preserve state=2 secrets when cleaning up unverified … (twofactor_totp#1771)
• Chore: add an agents file (twofactor_totp#1772)
• Chore: migrate issue templates to issue forms and simplify bug reports (twofactor_totp#1773)
• Feat: allow admins to configure TOTP algorithm and secret length (twofactor_totp#1778)
• Feat(totp): embed favicon URL in otpauth QR code (twofactor_totp#1779)
• Fix: add and apply nextcloud/rector (twofactor_totp#1782)
• Ci(renovate): update dependencies on maintained stable branches (twofactor_totp#1795)
• Ci: drop unused app publish workflow (twofactor_totp#1835)
• Chore(deps): bump phpunit from v11 to v12 (twofactor_totp#1843)

updater

• Chore(tests): master is now 35 (updater#755)
• Chore: Fix linting supported PHP versions (updater#756)
• Feat(build): introduce reproducible builds (updater#757)
• Chore(deps): upgrade Rector and use Nextcloud rules (updater#758)
• Fix: Fix explode calls for path parsing (updater#760)
• Docs(README): Fix typo (overview) (updater#774)

viewer

• Fix: adjust z-index for color picker modals (viewer#3175)
• Feat(deps): Add Nextcloud 35 support on master (viewer#3182)
• Feat(deps): Add Nextcloud 35 support on master (viewer#3183)
• Fix(plyr): the speed selection should not go out of the viewport (viewer#3192)
• Fix(plyr): the speed settings button should not be cut (viewer#3193)
• Fix(plyr): add l10n to components (viewer#3194)
• Fix(plyr): add l10n to speed selections (viewer#3195)
• Don’t download file if file path is not defined (viewer#3200)
• Fix(files): don’t expose WebDAV XML-attribute artifacts as DOM attributes (viewer#3225)
• [master] fix(composer): Remove trailing comma breaking composer.json parsing (viewer#3271)
• Test: migrate e2e tests from Cypress to Playwright (viewer#3272)
• Fix: urlencode file source based on resource url (viewer#3320)