July 2024 releases: 29.0.4 / 28.0.8

[Altahrim]

Maintenance releases of 28.0.8 and 29.0.4 are out

Downloads

• 29.0.4
• 28.0.8

Changelogs (since latest stable)

29.0.4

• Ci: Migrate Litmus and CalDAVTester from drone to GitHub (server#45726)
• Fix(cron): Log excess memory usage at debug and info levels (server#45843)
• Fix npm audit (server#45892)
• Chore(deps): Bump deepdiver/zipstreamer to 2.0.3 (server#45897)
• Fix(files): Properly handle denied ownership transfers (server#45906)
• Fix(files_versions): Use NcDateTime for proper translated version dates (server#45911)
• Delete background jobs by id when cleaning up (server#45919)
• Fix(settings): define a ‘heartbeat’ route, so SecurityHeaders can handle redirected root (server#45956)
• Rename openFileInfo to fileInfo (server#45988)
• Fix(preview): don’t create folder structure when previews are disabled (server#45993)
• Fix: avoid duplicate tag inserts by checking if the mapping exists already in db (server#45995)
• Fix(files_versions): renaming file version when its not a string (server#46001)
• Fix(caldav): encode calendar URIs with umlauts for activities (server#46012)
• Don’t trigger action when renaming (server#46018)
• Fix: also use optimized getFirstNodeyIdInPath for Folder::getFirstNodeById (server#46035)
• Fix: csrf check failed on public share with password (server#46039)
• Fix(files_trashbin): Make files view registering an init script (server#46054)
• Fix: Do not log an error when connecting to SFTP without a logged in user (server#46061)
• Fix: don’t use custom certificate bundle if no customer certificates are configured (server#46069)
• Fix: allows admin to edit global credentials (server#46091)
• Fix(settings): make trailing slash for caldav/carddav redirects optional (server#46093)
• Fix(userstatus): Fix user status automation in real-life scenario (server#46096)
• Use guzzle for addressbook federation (server#46117)
• Fix(FilesView): Update files view upon share creation/delete (server#46119)
• Feat(files): increase max copy-move concurrency to 5 (server#46128)
• Update favorites navigation list on folder renames (server#46137)
• Fix(files_sharing): Also set the expiration date timezone during validation (server#46142)
• Fix(caldav): When message is a reply compare the message sender not the recipient (server#46146)
• Fix(security): Update code signing revocation list (server#46154)
• Fix(SharingEntryLink): Show enforced password input label (server#46162)
• Fix: Avoid throwing errors for teams are unavailable (server#46163)
• Perf(session): remove useless session open (server#46168)
• Fix(federation): Fix missing protocol on CloudID remote (server#46173)
• Fix(CI): Fix OpenAPI github action (server#46175)
• Fix(setupchecks): skip check when disk_free_space is disabled (server#46203)
• Fix(theming): Also provide default image as background by absolut URL (server#46211)
• Fix: Authorization header can be an empty string (server#46212)
• Fix: getMountsForFileId may return an unordered list (server#46213)
• Fix(DAV): offset not applied (server#46226)
• Docs(ShareApiController): Correct note about expiry date timezone (server#46228)
• Build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 (server#46237)
• Build(deps-dev): Bump cypress-split from 1.21.0 to 1.21.2 (server#46240)
• Build(deps): Bump libphonenumber-js from 1.10.58 to 1.10.64 (server#46242)
• Build(deps-dev): Bump mime from 4.0.1 to 4.0.3 (server#46244)
• Build(deps-dev): Bump @cypress/webpack-preprocessor from 6.0.1 to 6.0.2 (server#46246)
• Fix(theming): Conitionally disable blur filter for performance (server#46258)
• Fix(security): Update CA certificate bundle (server#46264)
• Fix(ExternalSharing): Handle template shares from external sources (server#46281)
• Fix(tests): Remove output when running tests (server#46290)
• Fix(IntegrityCheck): Ensure the check is run if no results are available (server#46298)
• Chore(mp3info): apply upstream patch for invalid array access (server#46306)
• Fix(carddav): limit vcard size (server#46314)
• Chore(deps): bump jquery-ui-dist from 1.13.2 to 1.13.3 (server#46330)
• Chore(deps-dev): bump tslib from 2.6.2 to 2.6.3 (server#46331)
• Chore(deps-dev): bump cypress-if from 1.12.0 to 1.12.3 (server#46332)
• Chore(deps-dev): bump cypress from 13.7.1 to 13.7.3 (server#46333)
• Chore(deps-dev): bump eslint-plugin-cypress from 2.15.1 to 2.15.2 (server#46334)
• Fix(SharingDetailsView): Prevent illegal unselection of read permissions (server#46362)
• Fix(s3): Don’t wait indefinitely for S3 to return (server#46367)
• Fix: Update Nextcloud libraries (server#46374)
• Fix(cypress): wait for apps list fetch for better testing stability (server#46385)
• Perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP (server#46393)
• Fix(workflows): Fix file systemtag cache (server#46412)
• Fix(caldav): limit vevent size (server#46413)
• Fix(theming): Don’t reset the cachebuster value when we reset theming (server#46434)
• Fix(Session): avoid race conditions on clustered setups (server#46437)
• Feat: don’t count failed CSRF as failed login attempt (server#46443)
• Fix(ci): Correctly check for assets that need compilation (server#46469)
• Test(theming): Fix unit tests for personal settings (server#46471)
• Stop file actions when conflict dialog skipped (server#46562)
• Fix(CI): Update setup-php, setup-node, checkout and paths-filter actions (server#46575)
• Fix(files_sharing): also allow removing READ permissions on email shares (server#46598)
• Chore(deps): Bump deepdiver/zipstreamer from 2.0.2 to 2.0.3 (3rdparty#1864)
• Chore(mp3info): apply upstream patch for invalid array access (3rdparty#1889)
• Chore: set version in composer.json (3rdparty#1891)
• Fix(dashboard): Fix missing dashboard icon (activity#1727)
• Update nextcloud/ocp dependency (circles#1583)
• Ignore empty fileIds (circles#1625)
• Fix npm audit (files_downloadlimit#303)
• Fix npm audit (files_pdfviewer#983)
• Chore(deps-dev): Bump @nextcloud/vite-config from 1.2.3 to 1.2.5 (firstrunwizard#1250)
• Fix npm audit (firstrunwizard#1256)
• Perf: optimize @nextcloud/vue imports (firstrunwizard#1266)
• Update nextcloud/ocp dependency (firstrunwizard#1273)
• Update nextcloud/ocp dependency (logreader#1252)
• Update nextcloud/ocp dependency (nextcloud_announcements#355)
• Update nextcloud/ocp dependency (notifications#1965)
• Fix npm audit (photos#2467)
• Update nextcloud/ocp dependency (photos#2488)
• Various fix from 30 (photos#2517)
• Chore(deps-dev): Bump postcss from 8.4.35 to 8.4.39 (photos#2521)
• Fix: avoid erroring out on corrupt image data (photos#2530)
• Fix(l10n): Translate “All Tags” string (photos#2532)
• Feat: Handle complex location type (photos#2538)
• Fix(dashboard): Fix ID and provide icon url (photos#2543)
• Fix npm audit (privacy#1088)
• Fix: catch and filter shares whom storage is not available (recommendations#757)
• Fix(dashboard): Fix dashboard icon (recommendations#768)
• Fix npm audit (related_resources#440)
• Fix: handle getNetInterfaces error (serverinfo#633)
• Fix: update wording about apps element in monitoring response (serverinfo#635)
• Update nextcloud/ocp dependency (serverinfo#638)
• Update nextcloud/ocp dependency (survey_client#296)
• Fix npm audit (suspicious_login#883)
• Chore(deps): update cypress (text#5907)
• Chore(deps): update dependency vue-demi to ^0.14.8 (text#5908)
• Fix(deps): update dependency @nextcloud/dialogs to ^5.3.4 (text#5909)
• Fix npm audit (text#5915)
• Fix(SmartPicker): Insert smart picker links as preview per default (text#5925)
• Fix(Preview): Show reference fallback (text#5928)
• Perf: Reduce polling interval for read only users (text#5934)
• Fix(LinkPicker): Fix inserting markdown (e.g. from text_templates app) (text#5940)
• Fix(LinkBubble): Don’t open bubble at initialization and on remote changes (text#5949)
• Fix(LinkBubble): Fix logic to detect transactions without history (text#5955)
• Ci: Skip cypress test crashing electron right now (text#5957)
• Update nextcloud/ocp dependency (text#5975)
• Fix(attachments): Don’t require document session for getting attachments (text#5981)
• Request the native app to reload the direct editing view on 403 errors (text#5985)
• Keep base version etag during reload (text#5987)
• Fix(deps): update dependency @nextcloud/dialogs to ^5.3.5 (text#5999)
• Fix(deps): update dependency @nextcloud/event-bus to ^3.3.1 (text#6000)
• Fix(deps): update dependency @nextcloud/files to ^3.5.1 (text#6001)
• Fix(deps): update dependency mermaid to ^10.9.1 (text#6002)
• Fix(deps): update dependency y-prosemirror to ^1.2.9 (text#6003)
• Fix(deps): update yjs (text#6004)
• Chore(deps): update dependency @nextcloud/babel-config to ^1.2.0 (text#6005)
• Chore(deps): update dependency @nextcloud/eslint-config to ^8.4.1 (text#6006)
• Chore(deps): update dependency cypress to ^13.13.0 (text#6007)
• Chore(deps): update dependency cypress-split to ^1.24.0 (text#6008)
• Chore(deps): update dependency vite to ^5.3.3 (text#6009)
• Chore(deps): update vueuse to ^10.11.0 (text#6010)
• Fix: use composables in setup function (text#6017)
• Fix(ApiService): Catch NotPermittedException and return 404 (text#6021)
• Ci(test): use codecov token (twofactor_totp#1537)
• Fix npm audit (viewer#2336)
• Fix(requesttoken): Make sure to use the correct requesttoken in WebdavClient (viewer#2342)

28.0.8

• Fix: don’t return null for SharedStorage::getWrapperStorage with share recursion (server#44323)
• Fix(settings): Use axios directly for health check to preven URL sanitizing (server#45770)
• Fix npm audit (server#45891)
• Chore(deps): Bump deepdiver/zipstreamer (server#45896)
• Fix(files): Properly handle denied ownership transfers (server#45905)
• Delete background jobs by id when cleaning up (server#45920)
• Fix(settings): define a ‘heartbeat’ route, so SecurityHeaders can handle redirected root (server#45955)
• Rename openFileInfo to fileInfo (server#45987)
• Fix: avoid duplicate tag inserts by checking if the mapping exists already in db (server#45994)
• Fix(caldav): encode calendar URIs with umlauts for activities (server#46011)
• Don’t trigger action when renaming (server#46019)
• Fix: Do not log an error when connecting to SFTP without a logged in user (server#46060)
• Fix: don’t use custom certificate bundle if no customer certificates are configured (server#46067)
• Fix: allows admin to edit global credentials (server#46090)
• Fix(files_versions): renaming file version when its not a string (server#46092)
• Fix(FilesView): Update files view upon share creation/delete (server#46118)
• Feat(files): increase max copy-move concurrency to 5 (server#46129)
• Update favorites navigation list on folder renames (server#46138)
• Fix(files_sharing): Also set the expiration date timezone during validation (server#46141)
• Fix(caldav): When message is a reply compare the message sender not the recipient (server#46145)
• Fix(security): Update code signing revocation list (server#46155)
• Fix(openapi): Regenerate OpenAPI after server changes (server#46164)
• Fix(cron): Log long running jobs (server#46191)
• Fix: getMountsForFileId may return an unordered list (server#46214)
• Fix(DAV): offset not applied (server#46221)
• Fix(setupchecks): skip check when disk_free_space is disabled (server#46223)
• Chore: upgrade @nextcloud/files and @nextcloud/sharing (server#46236)
• Build(deps): Bump @nextcloud/calendar-availability-vue from 2.2.0 to 2.2.2 (server#46238)
• Build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 (server#46239)
• Build(deps-dev): Bump karma-coverage from 2.2.0 to 2.2.1 (server#46241)
• Build(deps-dev): Bump @types/dockerode from 3.3.28 to 3.3.29 (server#46243)
• Build(deps-dev): Bump cypress from 13.7.2 to 13.7.3 (server#46245)
• Fix(security): Update CA certificate bundle (server#46265)
• Fix(ExternalSharing): Handle template shares from external sources (server#46280)
• Fix(IntegrityCheck): Ensure the check is run if no results are available (server#46297)
• Fix(SetupCheck): jsm test shall not give up with first no-response (server#46302)
• Fix(carddav): limit vcard size (server#46313)
• Sidebar: allow turning off tags view by default (server#46316)
• Chore(deps): bump dompurify from 3.1.4 to 3.1.6 (server#46335)
• Chore(deps-dev): bump jsdoc from 4.0.2 to 4.0.3 (server#46336)
• Chore(deps-dev): bump mime from 4.0.1 to 4.0.4 (server#46337)
• Chore(deps-dev): bump ts-jest from 29.1.2 to 29.1.5 (server#46338)
• Chore(mp3info): apply upstream patch for invalid array access (server#46341)
• Fix(SharingDetailsView): Prevent illegal unselection of read permissions (server#46364)
• Fix(s3): Don’t wait indefinitely for S3 to return (server#46366)
• Perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP (server#46394)
• Fix(workflows): Fix file systemtag cache (server#46411)
• Fix(files_trashbin): Make files view registering an init script (server#46417)
• Fix(caldav): limit vevent size (server#46421)
• Fix: Update Nextcloud libraries (server#46422)
• Test: run tests in child process (server#46430)
• Fix(theming): Conitionally disable blur filter for performance (server#46431)
• Fix(theming): Don’t reset the cachebuster value when we reset theming (server#46433)
• Fix(Session): avoid race conditions on clustered setups (server#46436)
• Feat: don’t count failed CSRF as failed login attempt (server#46442)
• Fix(ci): Use low runners were possible (server#46468)
• Stop file actions when conflict dialog skipped (server#46561)
• Fix(CI): Update setup-php, setup-node, checkout and paths-filter actions (server#46576)
• Fix(files_sharing): also allow removing READ permissions on email shares (server#46599)
• Chore(deps): Bump deepdiver/zipstreamer from 2.0.2 to 2.0.3 (3rdparty#1865)
• Chore: set version in composer.json (3rdparty#1892)
• Chore(mp3info): apply upstream patch for invalid array access (3rdparty#1895)
• Ignore empty fileIds (circles#1624)
• Fix npm audit (files_pdfviewer#984)
• Update nextcloud/ocp dependency (firstrunwizard#1244)
• Fix npm audit (firstrunwizard#1258)
• Update nextcloud/ocp dependency (logreader#1253)
• Chore(deps): Bump @nextcloud/files from 3.1.0 to 3.1.1 (photos#2398)
• Fix npm audit (photos#2464)
• Update nextcloud/ocp dependency (photos#2473)
• Various fix from 30 (photos#2518)
• Chore(deps-dev): Bump postcss from 8.4.35 to 8.4.39 (photos#2523)
• Fix: avoid erroring out on corrupt image data (photos#2529)
• Fix(l10n): Translate “All Tags” string (photos#2531)
• Feat: Handle complex location type (photos#2537)
• Fix npm audit (privacy#1090)
• Update nextcloud/ocp dependency (related_resources#437)
• Fix npm audit (related_resources#439)
• Update nextcloud/ocp dependency (serverinfo#624)
• Fix: handle getNetInterfaces error (serverinfo#632)
• Fix: update wording about apps element in monitoring response (serverinfo#634)
• Chore: update workflows from templates (survey_client#225)
• Update nextcloud/ocp dependency (survey_client#292)
• Fix npm audit (suspicious_login#886)
• Fix(description): 5688 no need to encode filename (text#5718)
• Update nextcloud/ocp dependency (text#5911)
• Fix npm audit (text#5914)
• Perf: Reduce polling interval for read only users (text#5935)
• Chore(deps): update cypress (text#5972)
• Fix(attachments): Don’t require document session for getting attachments (text#5980)
• Revert “chore(deps): update cypress” (text#5982)
• Request the native app to reload the direct editing view on 403 errors (text#5984)
• Keep base version etag during reload (text#5986)
• Fix(ApiService): Catch NotPermittedException and return 404 (text#6022)
• Ci(test): use codecov token (twofactor_totp#1536)
• Fix(deps): update dependency webdav to ^5.6.0 (viewer#2257)
• Fix npm audit (viewer#2337)
• Fix(requesttoken): Make sure to use the correct requesttoken in WebdavClient (viewer#2343)
• Fix npm audit (viewer#2366)