November releases: 30.0.2, 29.0.9 and 28.0.12

[Altahrim]

Nextcloud releases 30.0.2, 29.0.9 and 28.0.12 are now available!

We are excited to announce the new releases of Nextcloud! These updates bring numerous fixes and improvements to enhance your Nextcloud experience.

Downloads:

• 30.0.2
• 29.0.9
• 28.0.12

Changelogs

30.0.2

• Fix(files): Reset context menu position on close (server#47878)
• Fix(files): Ensure children are removed from folder and not duplicated (server#48240)
• Fix: improve moving object store items to trashbin (server#48245)
• Fix(FileList): Show correct avatar for federated share owner (server#48294)
• Fix(files): Add more visual move / copy notification (server#48458)
• Fix: provision api’s status codes (server#48474)
• Fix(filesexternal): Remove unneeded 3rdparty library use (server#48550)
• Fix: do not reduce count for subadmins if they are members of group (server#48571)
• Fix: Make user removal more resilient (server#48589)
• Fix email share transfer accross storages (server#48618)
• Chore: Replace Twitter & Diaspora links and text (server#48620)
• Fix: Return correct list of managers for a user (server#48622)
• Fix: Fix empty sections appearing in search results (server#48624)
• Fix: Allow overriding shouldApplyQuota check from child classes (server#48635)
• Fix: Fix “Reasons to use Nextcloud” design (server#48652)
• Chore(deps): Bump libphonenumber-js from 1.11.9 to 1.11.11 (server#48667)
• Fix(locking): Accept mixed as value on setTTL (server#48694)
• Fix: Shipped apps should include the Nextcloud version in the cache buster (server#48701)
• Fix(share): Return empty string if no label is set (server#48703)
• Fix(AppConfig): Add external JWT private key to sensitive keys (server#48710)
• Fix(files_sharing): Add proper user facing messages on success (server#48730)
• Fix(files): Ensure renaming state is correctly reset (server#48731)
• Fix: Fix “Unknown path” error when source user files folder has not been initialized (server#48746)
• Fix: add PasswordConfirmationRequired to create user storages endpoint (server#48748)
• Fix: get rid of denied notification when accept (server#48751)
• Fix(appstore): Hide last modified information for shipped apps (server#48754)
• Build: Bump symfony/* to 6.4 (server#48763)
• Fix(security): Update code signing revocation list (server#48778)
• Feat(comments): Support mentioning emails (server#48785)
• Fix(activity): Fix download activity parameters (server#48818)
• Ci: Update list of installed PHP extensions (as some are not default … (server#48824)
• Fix(logger): Remove more parameters of other methods (server#48830)
• Fix(files): Adjust NavigationQuota for Nextcloud 30 design (server#48834)
• Fix(files_sharing): Add correct context to translation (server#48836)
• Build: Print RTL limited characters in translation-checker (server#48856)
• Fix(unified-search): Close on second ctrl+f (server#48861)
• Fix(app-store): Ensure the groups property is always an array (server#48866)
• Fix(app-store): Also proxy images of locally installed apps (server#48868)
• Fix(app-store): Correctly render Markdown in app description (server#48872)
• Fix(TextProcessing): Also list types that are available in task processing (server#48877)
• Fix(ShareAPI): Send mails for mail shares by default (server#48881)
• Fix(files_sharing): federated shares avatar (server#48888)
• Refactor(ShareApiController): Check for null and empty strings with e… (server#48890)
• Fix(files): handle empty view with error (server#48893)
• Chore(deps): Bump guzzlehttp/guzzle from 7.8.1 to 7.8.2 (server#48896)
• Fix(files): add title for files list table header button (server#48901)
• Fix(dav): Cleanup view-only check (server#48931)
• Fix(files_sharing): Cleanup error messages (server#48937)
• Fix: encrypt and store password, decrypt and retrieve the same (server#48939)
• Fix(app-store): Update update count in navigation (server#48945)
• Fix(config): Mark more configs as sensitive (server#48950)
• Ci(psalm): Add missing imagick extension (server#48957)
• Fix disabled user list for subadmins (server#48970)
• Fix: add PasswordConfirmationRequired to the external storages mentioned in review (server#48976)
• Fix(files): Do not jump to top when fileId is set to currentFolder (server#48979)
• Fix copying or moving from shared groupfolders (server#48984)
• Feat(settings): migrate AppAPI ExApps management to settings (server#48988)
• Fix(users): improve recently active search (server#49001)
• Fix: add PasswordConfirmationRequired to saveGlobalCredentials (server#49005)
• Fix(files_sharing): Password field must not be required if already set (server#49013)
• Fix(ShareEntryLinkList): Append new links to the end of list (server#49022)
• Fix(files-external): set password as sensitive (server#49028)
• Fix(apps-store): Fix exception on generating preview url for installed app screenshot (server#49044)
• Chore: Update code owners (server#49057)
• Docs: update overwrite.cli.url wording (server#49067)
• Fix(owncloud): Fix ownCloud migration with oauth2 app (server#49076)
• Fix(caldav): broken activity rich objects (server#49080)
• Update @nextcloud/dialogs to v6.0.1 (server#49093)
• Chore(deps): Bump guzzlehttp/guzzle from 7.8.1 to 7.8.2 (3rdparty#1926)
• Build: Bump symfony/* to 6.4 (3rdparty#1960)
• Fix/remote activity constructor (activity#1815)
• Fix: do not send daily digest email to user who is disabled (activity#1829)
• Fix(notification): Throw new exceptions to stop debug logs (circles#1712)
• Migrating custom groups (circles#1719)
• Fix(ShareWrapperRequest): Save share attributes on creation (circles#1732)
• Fix toArray on null (circles#1740)
• Fix npm audit (files_pdfviewer#1067)
• Update nextcloud/ocp dependency (firstrunwizard#1394)
• Chore(deps-dev): Bump vite from 5.4.8 to 5.4.9 (firstrunwizard#1409)
• Fix npm audit (firstrunwizard#1413)
• Chore(deps-dev): Bump vite from 5.4.9 to 5.4.10 (firstrunwizard#1419)
• Fix npm audit (firstrunwizard#1424)
• Refactor: Replace security annotations with respective attributes (logreader#1387)
• Chore(dev-deps): Bump nextcloud/ocp package (logreader#1392)
• Chore(dev-deps): Bump nextcloud/ocp package (nextcloud_announcements#399)
• Update nextcloud/ocp dependency (nextcloud_announcements#403)
• Chore(dev-deps): Bump nextcloud/ocp package (notifications#2081)
• Fix(push): Make testing the push server easier (notifications#2084)
• Fix(generation): Fix common-password check when we accidentally hit t… (password_policy#687)
• Fix npm audit (recommendations#784)
• Fix inaccurate disk usage reporting for ext* filesystems due to reserved blocks (serverinfo#696)
• Chore(dev-deps): Bump nextcloud/ocp package (serverinfo#702)
• Feat(active users): add more active user statistics intervals and improve presentation (serverinfo#703)
• Chore(CI): Adjust testing matrix for Nextcloud 30 on stable30 (survey_client#306)
• Update nextcloud/ocp dependency (text#6499)
• Fix(plaintext): multiple linebreaks at end (text#6508)
• Ci: Fix assistant button selector (text#6517)
• Chore(deps): update dependency typescript to ^5.6.3 (text#6527)
• Chore(deps): update vite (text#6528)
• Fix(deps): update dependency @nextcloud/axios to ^2.5.1 (text#6529)
• Fix(deps): update dependency @nextcloud/vue to ^8.19.0 (text#6530)
• Fix npm audit (text#6556)
• Feat(editorApi): Add function to allow setting readonly bar props (text#6570)
• Fix(mermaid): No custom link handling for links in mermaid diagrams (text#6576)
• Fix npm audit (twofactor_nextcloud_notification#910)
• Chore(dev-deps): Bump nextcloud/ocp package (twofactor_nextcloud_notification#912)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#917)
• Fix npm audit (twofactor_nextcloud_notification#918)
• Fix npm audit (viewer#2575)
• Fix: Update default editor translations for version 4.8.1 (viewer#2594)
• Fix: Usage of pushToHistory function on prev/next (viewer#2608)

29.0.9

• Fix(setup-checks): Ensure URL with webroot works (server#47943)
• Fix(files): Ensure children are removed from folder and not duplicated (server#48239)
• Fix(files): Add more visual move / copy notification (server#48457)
• Ci: fail psalm when baseline update required (server#48471)
• Fix: provision api’s status codes (server#48473)
• Test: re-add object store primary storage phpunit tests (server#48488)
• Fix: do not reduce count for subadmins if they are members of group (server#48570)
• Fix: Make user removal more resilient (server#48588)
• Fix email share transfer accross storages (server#48617)
• Fix(dav): Public WebDAV endpoint should allow GET requests (server#48631)
• Fix: Allow overriding shouldApplyQuota check from child classes (server#48634)
• Fix(locking): Accept mixed as value on setTTL (server#48693)
• Fix: Shipped apps should include the Nextcloud version in the cache buster (server#48700)
• Fix(share): Return empty string if no label is set (server#48704)
• Fix(AppConfig): Add external JWT private key to sensitive keys (server#48709)
• Fix(files_sharing): Add proper user facing messages on success (server#48729)
• Fix: Fix “Unknown path” error when source user files folder has not been initialized (server#48745)
• Fix: add PasswordConfirmationRequired to create user storages endpoint (server#48750)
• Fix: get rid of denied notification when accept (server#48752)
• Fix(appstore): Hide last modified information for shipped apps (server#48755)
• Fix(message): Fix logic of Mail test (server#48764)
• Fix(security): Update code signing revocation list (server#48780)
• Fix(activity): Fix download activity parameters (server#48817)
• Ci: Update list of installed PHP extensions (as some are not default … (server#48825)
• Fix(logger): Remove more parameters of other methods (server#48831)
• Build: Print RTL limited characters in translation-checker (server#48857)
• Fix(files_sharing): federated shares avatar (server#48889)
• Chore(deps-dev): Bump jsdoc from 4.0.2 to 4.0.4 (server#48905)
• Fix(files): add title for files list table header button (server#48922)
• Fix(dav): Cleanup view-only check (server#48930)
• Fix(files): handle empty view with error (server#48934)
• Fix(files_sharing): Cleanup error messages (server#48936)
• Fix: encrypt and store password, decrypt and retrieve the same (server#48940)
• Fix(app-store): Update update count in navigation (server#48944)
• Fix(config): Mark more configs as sensitive (server#48949)
• Ci(psalm): Add missing imagick extension (server#48958)
• Fix copying or moving from shared groupfolders (server#48968)
• Fix disabled user list for subadmins (server#48969)
• Fix: add PasswordConfirmationRequired to the external storages mentioned in review (server#48973)
• Fix(files): Do not jump to top when fileId is set to currentFolder (server#48980)
• Perf(ObjectStoreStorage): Improve (slow) move on same object bucket (server#48998)
• Fix: add PasswordConfirmationRequired to saveGlobalCredentials (server#49006)
• Fix(files_sharing): Password field must not be required if already set (server#49012)
• Fix(ShareEntryLinkList): Append new links to the end of list (server#49021)
• Fix(files-external): set password as sensitive (server#49029)
• Chore: request review from groupware when changing the card- and cald… (server#49055)
• Docs: update overwrite.cli.url wording (server#49068)
• Fix(owncloud): Fix ownCloud migration with oauth2 app (server#49085)
• Chore(deps): Update @nextcloud/dialogs to v5.3.8 (server#49095)
• Fix/remote activity constructor (activity#1814)
• Fix: do not send daily digest email to user who is disabled (activity#1830)
• Fix npm audit (bruteforcesettings#674)
• Update nextcloud/ocp dependency (circles#1684)
• Migrating custom groups (circles#1720)
• Fix(ShareWrapperRequest): Save share attributes on creation (circles#1733)
• Fix toArray on null (circles#1739)
• Update nextcloud/ocp dependency (files_downloadlimit#396)
• Fix npm audit (files_pdfviewer#1068)
• Fix npm audit (files_pdfviewer#1076)
• Update nextcloud/ocp dependency (firstrunwizard#1395)
• Fix: cards should have the same size (firstrunwizard#1401)
• Chore(deps-dev): Bump vite from 5.4.8 to 5.4.9 (firstrunwizard#1406)
• Fix npm audit (firstrunwizard#1414)
• Chore(deps-dev): Bump vite from 5.4.9 to 5.4.10 (firstrunwizard#1418)
• Fix npm audit (firstrunwizard#1422)
• Refactor: Replace security annotations with respective attributes (logreader#1386)
• Update nextcloud/ocp dependency (nextcloud_announcements#395)
• Update nextcloud/ocp dependency (notifications#2070)
• Chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1 (notifications#2076)
• Fix(push): Make testing the push server easier (notifications#2088)
• Fix(generation): Fix common-password check when we accidentally hit t… (password_policy#689)
• Fix npm audit (recommendations#785)
• Update nextcloud/ocp dependency (serverinfo#693)
• Fix inaccurate disk usage reporting for ext* filesystems due to reserved blocks (serverinfo#697)
• Fix npm audit (suspicious_login#926)
• Fix(LoginClassifier): Adjust log levels / reduce logging noise (suspicious_login#942)
• Update nextcloud/ocp dependency (text#6500)
• Feat(editorApi): Add function to allow setting readonly bar props (text#6571)
• Fix npm audit (twofactor_totp#1569)
• Fix: Make loading the viewer an init script (viewer#2490)
• Fix npm audit (viewer#2574)
• Fix: Update default editor translations for version 4.8.1 (viewer#2593)
• Fix: Usage of pushToHistory function on prev/next (viewer#2607)

28.0.12

• Build(deps): bump @nextcloud/password-confirmation from 5.1.0 to 5.1.1 (server#47003)
• Fix(files): Add more visual move / copy notification (server#48456)
• Ci: fail psalm when baseline update required (server#48470)
• Fix: provision api’s status codes (server#48472)
• Fix: do not reduce count for subadmins if they are members of group (server#48569)
• Chore(deps-dev): Bump @nextcloud/cypress from 1.0.0-beta.8 to 1.0.0-beta.9 (server#48580)
• Fix: Make user removal more resilient (server#48587)
• Fix email share transfer accross storages (server#48616)
• Fix: Allow overriding shouldApplyQuota check from child classes (server#48633)
• Fix(locking): Accept mixed as value on setTTL (server#48695)
• Fix(AppConfig): Add external JWT private key to sensitive keys (server#48711)
• Fix(share): Return empty string if no label is set (server#48739)
• Fix: Fix “Unknown path” error when source user files folder has not been initialized (server#48744)
• Fix: add PasswordConfirmationRequired to create user storages endpoint (server#48749)
• Fix: get rid of denied notification when accept (server#48753)
• Fix(message): Fix logic of Mail test (server#48762)
• Fix(security): Update code signing revocation list (server#48783)
• Fix(files_sharing): Add proper user facing messages on success (server#48796)
• Fix(logger): Remove more parameters of other methods (server#48832)
• Build: Print RTL limited characters in translation-checker (server#48858)
• Fix(files): undefined displayname for outdated @nextcloud/files<3.6.0 apps (server#48875)
• Fix(files): add title for files list table header button (server#48923)
• Fix(dav): Cleanup view-only check (server#48929)
• Fix(files_sharing): Cleanup error messages (server#48935)
• Fix(files): handle empty view with error (server#48938)
• Fix: encrypt and store password, decrypt and retrieve the same (server#48941)
• Chore(deps): Update @nextcloud/upload to at least 1.5.0 (server#48946)
• Fix(config): Mark more configs as sensitive (server#48948)
• Fix(files_sharing): federated shares avatar (server#48955)
• Ci(psalm): Add missing imagick extension (server#48959)
• Fix copying or moving from shared groupfolders (server#48966)
• Fix disabled user list for subadmins (server#48967)
• Fix: add PasswordConfirmationRequired to the external storages mentioned in review (server#48974)
• Perf(ObjectStoreStorage): Improve (slow) move on same object bucket (server#48985)
• Fix: add PasswordConfirmationRequired to saveGlobalCredentials (server#49007)
• Fix(ShareEntryLinkList): Append new links to the end of list (server#49020)
• Fix(files-external): set password as sensitive (server#49027)
• Chore: request review from groupware when changing the card- and cald… (server#49063)
• Docs: update overwrite.cli.url wording (server#49070)
• Fix(owncloud): Fix ownCloud migration with oauth2 app (server#49084)
• Fix/remote activity constructor (activity#1813)
• Fix: do not send daily digest email to user who is disabled (activity#1831)
• Fix npm audit (bruteforcesettings#673)
• Fix npm audit (bruteforcesettings#678)
• Migrating custom groups (circles#1721)
• Fix(ShareWrapperRequest): Save share attributes on creation (circles#1734)
• Fix toArray on null (circles#1738)
• Fix npm audit (files_pdfviewer#1065)
• Fix npm audit (files_pdfviewer#1073)
• Fix npm audit (files_pdfviewer#1075)
• Update nextcloud/ocp dependency (firstrunwizard#1396)
• Fix npm audit (firstrunwizard#1397)
• Fix npm audit (firstrunwizard#1412)
• Fix npm audit (firstrunwizard#1423)
• Update nextcloud/ocp dependency (nextcloud_announcements#393)
• Update nextcloud/ocp dependency (notifications#2073)
• Fix(push): Make testing the push server easier (notifications#2087)
• Fix(generation): Fix common-password check when we accidentally hit t… (password_policy#688)
• Fix npm audit (recommendations#786)
• Update nextcloud/ocp dependency (serverinfo#692)
• Fix inaccurate disk usage reporting for ext* filesystems due to reserved blocks (serverinfo#698)
• Fix npm audit (suspicious_login#925)
• Fix(LoginClassifier): Adjust log levels / reduce logging noise (suspicious_login#941)
• Update nextcloud/ocp dependency (text#6498)
• Fix npm audit (text#6501)
• Fix npm audit (twofactor_totp#1566)
• Fix: Make loading the viewer an init script (viewer#2491)
• Fix: Update default editor translations for version 4.8.1 (viewer#2592)
• Fix: Usage of pushToHistory function on prev/next (viewer#2606)

[max1e6]

When will the docker image be updated to 30.0.2

[rakekniven]

See https://hub.docker.com/_/nextcloud/

Made by volunteers and so you have to wait until someone is spending time.

[max1e6]

Got it. Danke

[mitexleo]

Why I’m not seeing any updates for Nextcloud container in the AIO interface?

[max1e6]

Because the container on DockerHub has not been updated yet.

[szaimen]

@mitexleo

Why I’m not seeing any updates for Nextcloud container in the AIO interface?

v29.0.9 is currently in the beta channel: Release v9.9.0 Beta · nextcloud/all-in-one · GitHub

See GitHub - nextcloud/all-in-one: 📦 The official Nextcloud installation method. Provides easy deployment and maintenance with most features included in this one Nextcloud instance.

[Alexander_Robinson1]

Release 30.0.2 now gives me the following error message:

Some headers are not set correctly on your instance - The Strict-Transport-Security HTTP header is not set (should be at least 15552000 seconds). For enhanced security, it is recommended to enable HSTS.

Yet when I go to the hstspreload.org site it tells me the following:
The max-age must be at least 31536000 seconds (≈ 1 year), but the header currently only has max-age=15552000.

The hstspreload site seems to recognise my HSTS header. (I’ve not set preload)

[rakekniven]

You are replying to an release topic. Please open a new topic in support category and provide all necessary details like your webserver settings. Could be interesting for others as well.

[pachulo]

Hi! What happened to 29.0.9?
I can’t download it and neither see it listed on Nextcloud server changelog anymore…

Thanks!

[tflidd]

@pachulo

Hi! What happened to 29.0.9?

It is on github: Release v29.0.9 · nextcloud/server · GitHub
and I managed to update with the updater.

In the public download folder it seems to be missing as well: [Bug]: Release 29.0.9 missing on https://download.nextcloud.com/ · Issue #49498 · nextcloud/server · GitHub

[tflidd]

There was a reason the 29.0.9 is not distributed currently:

29.0.9 pulled from download servers

Due to a regression in the PDF viewer we had to pull NC 29.0.9 from the download server. Updates to this version are not proposed anymore (but to 30 instead). We will follow up with the regular 29.0.10 next week, along other maintenance releases. RC1s can be expected this Thursday.