Maintenance releases of 26.0.3 and 25.0.8 are coming next Thursday and RCs for those are now available on our download server.
As always, help with testing is very much welcome!
We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so we’re even more sure that it’s good to go! If you notice anything out of order, please report back on the appropriate github repository! 
Downloads
- https://download.nextcloud.com/server/prereleases/nextcloud-26.0.3rc1.zip
- https://download.nextcloud.com/server/prereleases/nextcloud-25.0.8rc1.zip
Changelog
26.0.3rc1
- Invalidate existing tokens when deleting an oauth client (server#37230)
- Adjust the value of the “max-parts” parameter of the object storage ‘ListPart’ interface to 1000 (server#37776)
- Allow storing multiple mounts for the same rootid in the mount cache (server#38023)
- Fix npm audit (server#38118)
- Use aria-expanded correctly on toggle user actions (server#38358)
- Show pending popover menu when password is enabled by default (server#38396)
- Fix loading custom logo image (server#38399)
- Fix: Catch Deadlock properly as execute throws Doctrine exceptions not our wrapped ones (server#38479)
- Ungroup
placeholdercss rules (server#38487) - Add fallback when a there is no preview for a version (server#38509)
- Fix: catch errors in id3parser library (server#38517)
- Fix initialisation of versions in the DB (server#38521)
- Update ca-cert bundle (server#38530)
- Redis: use atomic operations everywhere (server#38539)
- Reload filelist when adding or removing shares (server#38557)
- Fix app menu flicker (server#38564)
- Fix(trashbin): Truncate long filenames (server#38573)
- Fix(caldav): Ignore invalid events for reminder generation (server#38574)
- Increase from 100000 to 600000 iterations for hash_pbkdf2 (server#38583)
- Update psalm-baseline.xml (server#38598)
- Fix: Use proper link for navigating to files on click handler (server#38654)
- Fix(caldav): Close DB cursor in reminder index background job (server#38660)
- Improve oauth2 database migration from ownCloud (server#38672)
- Fix(caldav): Cast calendar objects id to int when building index (server#38677)
- Sharing: Do not show copy action when user doesn’t have permissions (server#38684)
- Fix(actions): cypress (server#38698)
- Chore: update workflows from templates (server#38704)
- Create lint-eslint-when-unrelated.yml (server#38720)
- Fix npm audit (server#38741)
- Allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation (server#38752)
- Log failures to read certificates during listing (server#38757)
- Fix npm audit (server#38807)
- Make sure to show download button only one time (server#38818)
- Groupfolder activities on move/rename (activity#1204)
- Update nextcloud/ocp dependency (firstrunwizard#878)
- Chore(deps): Bump @nextcloud/vue from 7.7.1 to 7.7.2 (firstrunwizard#885)
- Fix npm audit (firstrunwizard#891)
- Chore(CI): Adjust testing matrix for Nextcloud 26 on stable26 (logreader#844)
- Audit and update dependencies (logreader#860)
- Update nextcloud/ocp dependency (nextcloud_announcements#201)
- Update nextcloud/ocp dependency (notifications#1562)
- Audit fix (password_policy#470)
- Update nextcloud/ocp dependency (photos#1747)
- Listen to more events for albums (photos#1846)
- Chore: update workflows from templates (photos#1848)
- Fix: properly handle public link share deletion (photos#1850)
- Fix: use owner instead of owner_id to delete photos by owner (photos#1852)
- Update view when layout setting changes (photos#1858)
- Prevent progress bar overflow when uploading in album content (photos#1863)
- Make file list semantically correct (photos#1869)
- Fix npm audit (photos#1879)
- Fix npm audit (privacy#905)
- Chore(CI): Adjust testing matrix for Nextcloud 26 on stable26 (recommendations#592)
- Chore(CI): Adjust testing matrix for Nextcloud 26 on stable26 (suspicious_login#777)
- Chore: run npm audit fix (suspicious_login#805)
- Feat: update image view width and add title (text#4165)
- Chore(deps): update dependency vite to ^4.3.9 (text#4197)
- Fix(deps): update dependency @nextcloud/vue to ^7.11.6 (text#4198)
- Update nextcloud/ocp dependency (text#4215)
- Ci: Backport relevant action changes from main (text#4240)
- Fix(UserApiController): Fix warning during test run with PHP 8.2 (text#4245)
- Don’t expect HTML element with ID
mimetypein public share (text#4257) - Fix: paste multiple line to table issue (text#4265)
- Fix/4267 js tests (text#4271)
- Fix: handle non markdown files in conflicts (text#4273)
- Fix npm audit (text#4279)
- Fix: Catch unique constraint violation when creating new documents (text#4294)
- Chore: Bump composer autoloader for new composer version (text#4295)
- Fix 404 on blank.mp4 (viewer#1677)
- Chore(deps-dev): Bump @types/dockerode from 3.3.17 to 3.3.18 (viewer#1687)
- Chore(deps-dev): Bump tslib from 2.5.0 to 2.5.3 (viewer#1702)
- Fix size of progress container (viewer#1714)
- Chore: update workflows from templates (viewer#1721)
- Fix npm audit (viewer#1732)
25.0.8rc1
- Invalidate existing tokens when deleting an oauth client (server#37231)
- Fix event moving (server#37813)
- Allow storing multiple mounts for the same rootid in the mount cache (server#38022)
- Fix npm audit (server#38117)
- Add command to summarize space usage (server#38253)
- Use aria-expanded correctly on toggle user actions (server#38359)
- Fix loading custom logo image (server#38408)
- Fix(theming): fix header primary invert if background disabled (server#38433)
- Fix: Catch Deadlock properly as execute throws Doctrine exceptions not our wrapped ones (server#38480)
- Fix: catch errors in id3parser library (server#38518)
- Update ca-cert bundle (server#38532)
- Reload filelist when adding or removing shares (server#38560)
- Fix(caldav): Ignore invalid events for reminder generation (server#38575)
- Fix(trashbin): Truncate long filenames (server#38576)
- Increase from 100000 to 600000 iterations for hash_pbkdf2 (server#38582)
- Fix(caldav): Close DB cursor in reminder index background job (server#38661)
- Trap focus in dialogs (server#38668)
- Fix(caldav): Cast calendar objects id to int when building index (server#38676)
- Improve oauth2 database migration from ownCloud (server#38682)
- Sharing: Do not show copy action when user doesn’t have permissions (server#38683)
- Chore: update workflows from templates (server#38705)
- Store encrypted OAuth2 client secrets (server#38709)
- Create lint-eslint-when-unrelated.yml (server#38721)
- Fix npm audit (server#38738)
- Set stream size for SeekableHttpStream (server#38760)
- Make sure to show download button only one time (server#38820)
- Groupfolder activities on move/rename (activity#1205)
- Shared to circles (circles#1323)
- Chore(deps): Bump @nextcloud/vue from 7.7.1 to 7.7.2 (firstrunwizard#883)
- Fix npm audit (firstrunwizard#893)
- Update nextcloud/ocp dependency (logreader#798)
- Audit and update dependencies (logreader#861)
- Adjust server version to test against (logreader#886)
- Audit fix (password_policy#471)
- Update nextcloud/ocp dependency (photos#1550)
- Fix: use owner instead of owner_id to delete photos by owner (photos#1844)
- Chore: update workflows from templates (photos#1849)
- Fix updating file from albums (photos#1851)
- Fix: properly handle public link share deletion (photos#1853)
- Update view when layout setting changes (photos#1859)
- Prevent progress bar overflow when uploading in album content (photos#1865)
- Make file list semantically correct (photos#1870)
- Fix npm audit (photos#1877)
- Fix npm audit (privacy#907)
- Chore: run npm audit fix (suspicious_login#804)
- Don’t expect HTML element with ID
mimetypein public share (text#4258) - Fix npm audit (text#4278)
- Fix compiled JS assets (text#4282)
- Fix: Catch unique constraint violation when creating new documents (text#4293)
- Fix 404 on blank.mp4 (viewer#1679)
- Chore(deps-dev): Bump @types/dockerode from 3.3.17 to 3.3.18 (viewer#1689)
- Fix size of progress container (viewer#1713)
- Chore: update workflows from templates (viewer#1720)
- Fix npm audit (viewer#1729)