Maintenance releases of 28.0.8
and 29.0.4
are coming next Thursday and RCs for those are now available on our download server.
As always, help with testing is very much welcome!
We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so weāre even more sure that itās good to go! If you notice anything out of order, please report back on the appropriate Github repository!
Downloads
Changelogs
29.0.4 RC
- Ci: Migrate Litmus and CalDAVTester from drone to GitHub (server#45726)
- Fix(cron): Log excess memory usage at debug and info levels (server#45843)
- Fix npm audit (server#45892)
- Chore(deps): Bump deepdiver/zipstreamer to 2.0.3 (server#45897)
- Fix(files): Properly handle denied ownership transfers (server#45906)
- Fix(files_versions): Use
NcDateTime
for proper translated version dates (server#45911) - Delete background jobs by id when cleaning up (server#45919)
- Fix(settings): define a āheartbeatā route, so SecurityHeaders can handle redirected root (server#45956)
- Rename openFileInfo to fileInfo (server#45988)
- Fix(preview): donāt create folder structure when previews are disabled (server#45993)
- Fix: avoid duplicate tag inserts by checking if the mapping exists already in db (server#45995)
- Fix(files_versions): renaming file version when its not a string (server#46001)
- Fix(caldav): encode calendar URIs with umlauts for activities (server#46012)
- Donāt trigger action when renaming (server#46018)
- Fix: also use optimized getFirstNodeyIdInPath for Folder::getFirstNodeById (server#46035)
- Fix: csrf check failed on public share with password (server#46039)
- Fix(files_trashbin): Make files view registering an init script (server#46054)
- Fix: Do not log an error when connecting to SFTP without a logged in user (server#46061)
- Fix: donāt use custom certificate bundle if no customer certificates are configured (server#46069)
- Fix: allows admin to edit global credentials (server#46091)
- Fix(settings): make trailing slash for caldav/carddav redirects optional (server#46093)
- Fix(userstatus): Fix user status automation in real-life scenario (server#46096)
- Use guzzle for addressbook federation (server#46117)
- Fix(FilesView): Update files view upon share creation/delete (server#46119)
- Feat(files): increase max copy-move concurrency to 5 (server#46128)
- Update favorites navigation list on folder renames (server#46137)
- Fix(files_sharing): Also set the expiration date timezone during validation (server#46142)
- Fix(caldav): When message is a reply compare the message sender not the recipient (server#46146)
- Fix(security): Update code signing revocation list (server#46154)
- Fix(SharingEntryLink): Show enforced password input label (server#46162)
- Fix: Avoid throwing errors for teams are unavailable (server#46163)
- Perf(session): remove useless session open (server#46168)
- Fix(federation): Fix missing protocol on CloudID remote (server#46173)
- Fix(CI): Fix OpenAPI github action (server#46175)
- Fix(setupchecks): skip check when disk_free_space is disabled (server#46203)
- Fix(theming): Also provide default image as background by absolut URL (server#46211)
- Fix: Authorization header can be an empty string (server#46212)
- Fix: getMountsForFileId may return an unordered list (server#46213)
- Fix(DAV): offset not applied (server#46226)
- Docs(ShareApiController): Correct note about expiry date timezone (server#46228)
- Build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 (server#46237)
- Build(deps-dev): Bump cypress-split from 1.21.0 to 1.21.2 (server#46240)
- Build(deps): Bump libphonenumber-js from 1.10.58 to 1.10.64 (server#46242)
- Build(deps-dev): Bump mime from 4.0.1 to 4.0.3 (server#46244)
- Build(deps-dev): Bump @cypress/webpack-preprocessor from 6.0.1 to 6.0.2 (server#46246)
- Fix(theming): Conitionally disable blur filter for performance (server#46258)
- Fix(security): Update CA certificate bundle (server#46264)
- Fix(ExternalSharing): Handle template shares from external sources (server#46281)
- Fix(tests): Remove output when running tests (server#46290)
- Fix(IntegrityCheck): Ensure the check is run if no results are available (server#46298)
- Chore(mp3info): apply upstream patch for invalid array access (server#46306)
- Fix(carddav): limit vcard size (server#46314)
- Chore(deps): bump jquery-ui-dist from 1.13.2 to 1.13.3 (server#46330)
- Chore(deps-dev): bump tslib from 2.6.2 to 2.6.3 (server#46331)
- Chore(deps-dev): bump cypress-if from 1.12.0 to 1.12.3 (server#46332)
- Chore(deps-dev): bump cypress from 13.7.1 to 13.7.3 (server#46333)
- Chore(deps-dev): bump eslint-plugin-cypress from 2.15.1 to 2.15.2 (server#46334)
- Fix(SharingDetailsView): Prevent illegal unselection of read permissions (server#46362)
- Fix(s3): Donāt wait indefinitely for S3 to return (server#46367)
- Fix: Update Nextcloud libraries (server#46374)
- Fix(cypress): wait for apps list fetch for better testing stability (server#46385)
- Perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP (server#46393)
- Fix(workflows): Fix file systemtag cache (server#46412)
- Fix(caldav): limit vevent size (server#46413)
- Fix(theming): Donāt reset the cachebuster value when we reset theming (server#46434)
- Fix(Session): avoid race conditions on clustered setups (server#46437)
- Feat: donāt count failed CSRF as failed login attempt (server#46443)
- Chore(deps): Bump deepdiver/zipstreamer from 2.0.2 to 2.0.3 (3rdparty#1864)
- Chore(mp3info): apply upstream patch for invalid array access (3rdparty#1889)
- Chore: set version in composer.json (3rdparty#1891)
- Update nextcloud/ocp dependency (circles#1583)
- Ignore empty fileIds (circles#1625)
- Fix npm audit (files_downloadlimit#303)
- Fix npm audit (files_pdfviewer#983)
- Chore(deps-dev): Bump @nextcloud/vite-config from 1.2.3 to 1.2.5 (firstrunwizard#1250)
- Fix npm audit (firstrunwizard#1256)
- Perf: optimize
@nextcloud/vue
imports (firstrunwizard#1266) - Update nextcloud/ocp dependency (firstrunwizard#1273)
- Update nextcloud/ocp dependency (logreader#1252)
- Update nextcloud/ocp dependency (nextcloud_announcements#355)
- Update nextcloud/ocp dependency (notifications#1965)
- Fix npm audit (photos#2467)
- Update nextcloud/ocp dependency (photos#2488)
- Various fix from 30 (photos#2517)
- Chore(deps-dev): Bump postcss from 8.4.35 to 8.4.39 (photos#2521)
- Fix: avoid erroring out on corrupt image data (photos#2530)
- Fix(l10n): Translate āAll Tagsā string (photos#2532)
- Feat: Handle complex location type (photos#2538)
- Fix(dashboard): Fix ID and provide icon url (photos#2543)
- Fix npm audit (privacy#1088)
- Fix: catch and filter shares whom storage is not available (recommendations#757)
- Fix(dashboard): Fix dashboard icon (recommendations#768)
- Fix npm audit (related_resources#440)
- Fix: handle getNetInterfaces error (serverinfo#633)
- Fix: update wording about apps element in monitoring response (serverinfo#635)
- Update nextcloud/ocp dependency (serverinfo#638)
- Update nextcloud/ocp dependency (survey_client#296)
- Fix npm audit (suspicious_login#883)
- Chore(deps): update cypress (text#5907)
- Chore(deps): update dependency vue-demi to ^0.14.8 (text#5908)
- Fix(deps): update dependency @nextcloud/dialogs to ^5.3.4 (text#5909)
- Fix npm audit (text#5915)
- Fix(SmartPicker): Insert smart picker links as preview per default (text#5925)
- Fix(Preview): Show reference fallback (text#5928)
- Perf: Reduce polling interval for read only users (text#5934)
- Fix(LinkPicker): Fix inserting markdown (e.g. from
text_templates
app) (text#5940) - Fix(LinkBubble): Donāt open bubble at initialization and on remote changes (text#5949)
- Fix(LinkBubble): Fix logic to detect transactions without history (text#5955)
- Ci: Skip cypress test crashing electron right now (text#5957)
- Update nextcloud/ocp dependency (text#5975)
- Fix(attachments): Donāt require document session for getting attachments (text#5981)
- Request the native app to reload the direct editing view on 403 errors (text#5985)
- Keep base version etag during reload (text#5987)
- Fix(deps): update dependency @nextcloud/dialogs to ^5.3.5 (text#5999)
- Fix(deps): update dependency @nextcloud/event-bus to ^3.3.1 (text#6000)
- Fix(deps): update dependency @nextcloud/files to ^3.5.1 (text#6001)
- Fix(deps): update dependency mermaid to ^10.9.1 (text#6002)
- Fix(deps): update dependency y-prosemirror to ^1.2.9 (text#6003)
- Fix(deps): update yjs (text#6004)
- Chore(deps): update dependency @nextcloud/babel-config to ^1.2.0 (text#6005)
- Chore(deps): update dependency @nextcloud/eslint-config to ^8.4.1 (text#6006)
- Chore(deps): update dependency cypress to ^13.13.0 (text#6007)
- Chore(deps): update dependency cypress-split to ^1.24.0 (text#6008)
- Chore(deps): update dependency vite to ^5.3.3 (text#6009)
- Chore(deps): update vueuse to ^10.11.0 (text#6010)
- Fix: use composables in setup function (text#6017)
- Fix(ApiService): Catch NotPermittedException and return 404 (text#6021)
- Ci(test): use codecov token (twofactor_totp#1537)
- Fix npm audit (viewer#2336)
- Fix(requesttoken): Make sure to use the correct requesttoken in WebdavClient (viewer#2342)
28.0.8 RC1
- Fix: donāt return null for SharedStorage::getWrapperStorage with share recursion (server#44323)
- Fix(settings): Use axios directly for health check to preven URL sanitizing (server#45770)
- Fix npm audit (server#45891)
- Chore(deps): Bump deepdiver/zipstreamer (server#45896)
- Fix(files): Properly handle denied ownership transfers (server#45905)
- Delete background jobs by id when cleaning up (server#45920)
- Fix(settings): define a āheartbeatā route, so SecurityHeaders can handle redirected root (server#45955)
- Rename openFileInfo to fileInfo (server#45987)
- Fix: avoid duplicate tag inserts by checking if the mapping exists already in db (server#45994)
- Fix(caldav): encode calendar URIs with umlauts for activities (server#46011)
- Donāt trigger action when renaming (server#46019)
- Fix: Do not log an error when connecting to SFTP without a logged in user (server#46060)
- Fix: donāt use custom certificate bundle if no customer certificates are configured (server#46067)
- Fix: allows admin to edit global credentials (server#46090)
- Fix(files_versions): renaming file version when its not a string (server#46092)
- Fix(FilesView): Update files view upon share creation/delete (server#46118)
- Feat(files): increase max copy-move concurrency to 5 (server#46129)
- Update favorites navigation list on folder renames (server#46138)
- Fix(files_sharing): Also set the expiration date timezone during validation (server#46141)
- Fix(caldav): When message is a reply compare the message sender not the recipient (server#46145)
- Fix(security): Update code signing revocation list (server#46155)
- Fix(openapi): Regenerate OpenAPI after server changes (server#46164)
- Fix(cron): Log long running jobs (server#46191)
- Fix: getMountsForFileId may return an unordered list (server#46214)
- Fix(DAV): offset not applied (server#46221)
- Fix(setupchecks): skip check when disk_free_space is disabled (server#46223)
- Chore: upgrade
@nextcloud/files
and@nextcloud/sharing
(server#46236) - Build(deps): Bump @nextcloud/calendar-availability-vue from 2.2.0 to 2.2.2 (server#46238)
- Build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 (server#46239)
- Build(deps-dev): Bump karma-coverage from 2.2.0 to 2.2.1 (server#46241)
- Build(deps-dev): Bump @types/dockerode from 3.3.28 to 3.3.29 (server#46243)
- Build(deps-dev): Bump cypress from 13.7.2 to 13.7.3 (server#46245)
- Fix(security): Update CA certificate bundle (server#46265)
- Fix(ExternalSharing): Handle template shares from external sources (server#46280)
- Fix(IntegrityCheck): Ensure the check is run if no results are available (server#46297)
- Fix(SetupCheck): jsm test shall not give up with first no-response (server#46302)
- Fix(carddav): limit vcard size (server#46313)
- Sidebar: allow turning off tags view by default (server#46316)
- Chore(deps): bump dompurify from 3.1.4 to 3.1.6 (server#46335)
- Chore(deps-dev): bump jsdoc from 4.0.2 to 4.0.3 (server#46336)
- Chore(deps-dev): bump mime from 4.0.1 to 4.0.4 (server#46337)
- Chore(deps-dev): bump ts-jest from 29.1.2 to 29.1.5 (server#46338)
- Chore(mp3info): apply upstream patch for invalid array access (server#46341)
- Fix(SharingDetailsView): Prevent illegal unselection of read permissions (server#46364)
- Fix(s3): Donāt wait indefinitely for S3 to return (server#46366)
- Perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP (server#46394)
- Fix(workflows): Fix file systemtag cache (server#46411)
- Fix(files_trashbin): Make files view registering an init script (server#46417)
- Fix(caldav): limit vevent size (server#46421)
- Fix: Update Nextcloud libraries (server#46422)
- Test: run tests in child process (server#46430)
- Fix(theming): Conitionally disable blur filter for performance (server#46431)
- Fix(theming): Donāt reset the cachebuster value when we reset theming (server#46433)
- Fix(Session): avoid race conditions on clustered setups (server#46436)
- Feat: donāt count failed CSRF as failed login attempt (server#46442)
- Chore(deps): Bump deepdiver/zipstreamer from 2.0.2 to 2.0.3 (3rdparty#1865)
- Chore: set version in composer.json (3rdparty#1892)
- Chore(mp3info): apply upstream patch for invalid array access (3rdparty#1895)
- Ignore empty fileIds (circles#1624)
- Fix npm audit (files_pdfviewer#984)
- Update nextcloud/ocp dependency (firstrunwizard#1244)
- Fix npm audit (firstrunwizard#1258)
- Update nextcloud/ocp dependency (logreader#1253)
- Chore(deps): Bump @nextcloud/files from 3.1.0 to 3.1.1 (photos#2398)
- Fix npm audit (photos#2464)
- Update nextcloud/ocp dependency (photos#2473)
- Various fix from 30 (photos#2518)
- Chore(deps-dev): Bump postcss from 8.4.35 to 8.4.39 (photos#2523)
- Fix: avoid erroring out on corrupt image data (photos#2529)
- Fix(l10n): Translate āAll Tagsā string (photos#2531)
- Feat: Handle complex location type (photos#2537)
- Fix npm audit (privacy#1090)
- Update nextcloud/ocp dependency (related_resources#437)
- Fix npm audit (related_resources#439)
- Update nextcloud/ocp dependency (serverinfo#624)
- Fix: handle getNetInterfaces error (serverinfo#632)
- Fix: update wording about apps element in monitoring response (serverinfo#634)
- Chore: update workflows from templates (survey_client#225)
- Update nextcloud/ocp dependency (survey_client#292)
- Fix npm audit (suspicious_login#886)
- Fix(description): 5688 no need to encode filename (text#5718)
- Update nextcloud/ocp dependency (text#5911)
- Fix npm audit (text#5914)
- Perf: Reduce polling interval for read only users (text#5935)
- Chore(deps): update cypress (text#5972)
- Fix(attachments): Donāt require document session for getting attachments (text#5980)
- Revert āchore(deps): update cypressā (text#5982)
- Request the native app to reload the direct editing view on 403 errors (text#5984)
- Keep base version etag during reload (text#5986)
- Fix(ApiService): Catch NotPermittedException and return 404 (text#6022)
- Ci(test): use codecov token (twofactor_totp#1536)
- Fix(deps): update dependency webdav to ^5.6.0 (viewer#2257)
- Fix npm audit (viewer#2337)
- Fix(requesttoken): Make sure to use the correct requesttoken in WebdavClient (viewer#2343)