RC1s of 29.0.3, 28.0.7, 27.1.11

[blizzz]

Maintenance releases of 29.0.3, 28.0.7 and 27.1.11 are coming next Thursday and RCs for those are now available on our download server.

As always, help with testing is very much welcome!

We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so we’re even more sure that it’s good to go! If you notice anything out of order, please report back on the appropriate Github repository!

Nextcloud 27 is sunsetting and will receive it’s final release. If you are running this series, it is a good time to plan upgrade to 28!

Downloads

• https://download.nextcloud.com/server/prereleases/nextcloud-29.0.3rc1.zip
• https://download.nextcloud.com/server/prereleases/nextcloud-28.0.7rc1.zip
• https://download.nextcloud.com/server/prereleases/nextcloud-27.1.11rc1.zip

Changelogs

29.0.3 RC1

• Fix(settings): show warning for indexToReplace as part of missing indices (server#44675)

• Fix(appconfig): format app values (server#44894)

• Fix(files): Display selected files count (server#44909)

• Fix: regression with updating read-only config (server#44927)

• Fix(auth): Keep redirect URL during 2FA setup and challenge (server#44977)

• Feat: Add legal notice and privacy policy links to help page (server#44988)

• 44032 fix show new shares without refresh (server#45304)

• Avoid updating the same oc_authtoken row twice (server#45348)

• Feat: Add forbidden_filename_characters to JSConfig for use in frontend libraries (server#45379)

• Fix: register DI alias for IFileAccess (server#45476)

• Fix(dav): Rate limit address book creation (server#45543)

• CalDAV fix search with limit and time range (server#45566)

• Fix(theming): replace standard generic package icon by material design (server#45577)

• Unmark deleted users if their last login date is more recent than deleted date (server#45587)

• Fix(files): Don’t fail if dir exists (server#45590)

• Fix(files): Ensure active file list entry is highlighted (server#45597)

• Fix: Update @nextcloud/files to fix public link shares (server#45601)

• Fix(session): Do not update authtoken last_check for passwordless (server#45602)

• Fix(core): unsupported browser redirect url (server#45621)

• Fix(caldav): automatically delete outdated scheduling objects (server#45641)

• Fix(core): Add missing null value possibility to Resource and Reference richObject (server#45644)

• Fix(INavigationManager): Fix psalm alias not set in the right place (server#45645)

• Fix(files): Close sidebar and update fileid when current node is deleted (server#45659)

• Fix(Mailer): Allow to enforce strict email format (server#45660)

• Fix(files): Only execute default action if there is an action to perform (server#45662)

• Fix(files): reset menu pos when opening in grid mode (server#45666)

• Fix(federatedfilesharing): import external federated share script (server#45675)

• Fix(files_sharing): usage of NcTextField in SelectShareFolderDialogue (server#45690)

• Fix(Session): avoid password confirmation on SSO (server#45705)

• Fix(files): Make sure files are opened when using open-in-files action(s) or at lease are scrolled into view (server#45728)

• Ci(eol): update workflow from template (server#45734)

• Fix(dav): Don’t log access control as error (server#45756)

• Fix(files): handling numbered type owner name & id (server#45764)

• Fix(settings): Use axios directly for health check to preven URL sanitizing (server#45765)

• Fix: Only list remnants as disabled if option is enabled (server#45773)

• Fix: Autodetect legacy filekey instead of trusting the header for legacy header (server#45778)

• Fix(search): tags redirect route (server#45791)

• Fix(caldav): event links in shared calendar notifications (server#45800)

• Use isRetryable to catch retryable exceptions (server#45808)

• Fix(Token): make new scope future compatible (server#45809)

• Fix(cron): Log long running jobs (server#45813)

• Fix(files_sharing): fix parsing of remote shares (server#45816)

• Test: add tests for ProfilePageController (server#45821)

• Fix(files): also trigger new tab on file name middle click (server#45826)

• Fix(files): do not rely on unique fileid (server#45837)

• Fix(ObjectStore): Fix regression when hostname is empty (server#45840)

• Get child ids for folder in a separate query during move (server#45851)

• Feat: add option to disable scanner transactions (server#45856)

• Fix(files): Ignore right click for default action (server#45862)

• Show non writable folders during move or copy (server#45864)

• Fix(comments): Use proper icon components instead of icon classes to fix dark mode (server#45871)

• Chore(deps-dev): Bump adm-zip from 0.5.12 to 0.5.14 (files_pdfviewer#977)

• Chore(deps-dev): Bump vite from 5.2.12 to 5.2.13 (firstrunwizard#1242)

• Update nextcloud/ocp dependency (nextcloud_announcements#343)

• Update nextcloud/ocp dependency (notifications#1933)

• Update nextcloud/ocp dependency (notifications#1941)

• Fix(browser): Don’t create web notifications for old notifications (notifications#1945)

• Fix: separate creation of browser notifications and sounds from Vue rendering (notifications#1948)

• Update nextcloud/ocp dependency (related_resources#429)

• Update nextcloud/ocp dependency (related_resources#434)

• Update nextcloud/ocp dependency (serverinfo#614)

• Ci: automate ocp updates (serverinfo#622)

• Update nextcloud/ocp dependency (survey_client#281)

• Update nextcloud/ocp dependency (text#5854)

• Fix(table): Fix readonly detection in vue components (text#5857)

• Test(cypress): Fix selector for new button in files app (text#5860)

• Fix(locks): only lock when editing (text#5865)

• Update nextcloud/ocp dependency (text#5883)

• Reset all sessions (in occ command and on upgrade) (text#5889)

• Fix: Ignore pushes of update steps for read only sessions (text#5896)

• Properly save old route when opening the viewer (viewer#2326)

• Fix: Add missing generateUrl (viewer#2329)

28.0.7 RC1

• Fix(sharing): Avoid (dead)locking during orphan deletion (server#44010)

• Fix(dav): Add occ command to fix missing caldav sync tokens (server#44197)

• Fix(dav): Add retention time to sync token cleanup (server#44398)

• Fix(files): Display selected files count (server#44908)

• Fix: avoid douple expireDate parsing (server#44912)

• Fix: regression with updating read-only config (server#44926)

• Feat: add request id as comment to all queries (server#44958)

• Fix(memcache): remove double $$ to fix error (server#44980)

• Fix: Fix truncation on public page (server#44990)

• Fix(files_sharing): Add one string for every share type + fix(sharingDetails): Show correct share target (server#45024)

• Fix(unifiedSearch): Prevent broken avatars for federated users (server#45028)

• Fix(CalDAV): remove UNKNOWN from room / resource consideration (server#45052)

• Feat: support “s3-accelerate” endpoint (server#45059)

• Fix(session): Do not update authtoken last_check for passwordless (server#45063)

• Fix(files): Fix ownership transfer encrypted files detection (server#45110)

• Fix(OC_Image): Set correct return type for exif_imagetype stub (server#45198)

• Fix(userstatus): catch unique constrain violation on revert (server#45205)

• Perf(db): Sort data for IN before chunking (server#45214)

• Expose subscription calendars (server#45225)

• Fix(contactsinteraction): Allow vCard download (server#45286)

• Feat: Limit email input to 255 chars (server#45289)

• Fix: consider all paths the user has for a share source when considering max permissions (server#45294)

• 44032 fix show new shares without refresh (server#45303)

• Avoid updating the same oc_authtoken row twice (server#45349)

• Fix: delete user credentials stored in storages_credentials when user gets deleted (server#45362)

• Fix(groups): allows to save group names with more than 64 characters (server#45368)

• Fix(contactsmenu): empty content margin (server#45426)

• Fix(files): properly reset preview component (server#45432)

• Fix: Mark more configs as sensitive (server#45442)

• Feat: Add back searching in disabled user list (server#45478)

• Fix: forbid moving a folder into a subfolder of itself (server#45528)

• Fix(files): Implement SortingService to fix sorting of files (server#45533)

• Fix(dav): Rate limit address book creation (server#45542)

• Fix header menu icon color (server#45552)

• CalDAV fix search with limit and time range (server#45567)

• Fix: Refresh file picker on folder creation (server#45575)

• Fix(theming): replace standard generic package icon by material design (server#45578)

• Unmark deleted users if their last login date is more recent than deleted date (server#45588)

• Fix(files): Don’t fail if dir exists (server#45591)

• Fix(files): Ensure active file list entry is highlighted (server#45598)

• Fix: Update @nextcloud/files to fix public link shares (server#45600)

• Respect empty expiryDate value in server (server#45604)

• Fix(theming): replace standard generic package icon by material design (server#45610)

• Fix(core): unsupported browser redirect url (server#45622)

• Fix(caldav): automatically delete outdated scheduling objects (server#45640)

• Fix(core): Add missing null value possibility to Resource and Reference richObject (server#45643)

• Fix(INavigationManager): Fix psalm alias not set in the right place (server#45646)

• Fix(files): Close sidebar and update fileid when current node is deleted (server#45658)

• Fix(files): Only execute default action if there is an action to perform (server#45663)

• Fix(files): reset menu pos when opening in grid mode (server#45665)

• Fix(federatedfilesharing): import external federated share script (server#45674)

• Fix(files_sharing): usage of NcTextField in SelectShareFolderDialogue (server#45689)

• Fix(Session): avoid password confirmation on SSO (server#45704)

• Update psalm-baseline.xml (server#45719)

• Fix(files): Make sure files are opened when using open-in-files action(s) or at lease are scrolled into view (server#45727)

• Ci(eol): update workflow from template (server#45735)

• Fix(dav): Don’t log access control as error (server#45758)

• Fix: Only list remnants as disabled if option is enabled (server#45774)

• Fix: Autodetect legacy filekey instead of trusting the header for legacy header (server#45777)

• Fix(search): tags redirect route (server#45790)

• Fix(Mailer): Allow to enforce strict email format (server#45793)

• Fix(caldav): event links in shared calendar notifications (server#45799)

• Fix(files): handling numbered type owner name & id (server#45803)

• Use isRetryable to catch retryable exceptions (server#45807)

• Fix(files_sharing): fix parsing of remote shares (server#45817)

• Test: add tests for ProfilePageController (server#45823)

• Fix(files): also trigger new tab on file name middle click (server#45825)

• Fix(files): do not rely on unique fileid (server#45836)

• Fix(ObjectStore): Fix regression when hostname is empty (server#45839)

• Get child ids for folder in a separate query during move (server#45850)

• Feat: add option to disable scanner transactions (server#45857)

• Fix(files): Ignore right click for default action (server#45863)

• Show non writable folders during move or copy (server#45865)

• Fix npm audit (files_pdfviewer#950)

• Chore(deps): Bump @nextcloud/dialogs from 4.2.6 to 4.2.7 (files_pdfviewer#956)

• Chore(deps-dev): Bump adm-zip from 0.5.12 to 0.5.14 (files_pdfviewer#975)

• Update nextcloud/ocp dependency (firstrunwizard#1238)

• Update nextcloud/ocp dependency (nextcloud_announcements#344)

• Update nextcloud/ocp dependency (nextcloud_announcements#348)

• Update nextcloud/ocp dependency (notifications#1934)

• Update nextcloud/ocp dependency (notifications#1942)

• Fix(browser): Don’t create web notifications for old notifications (notifications#1944)

• Fix: separate creation of browser notifications and sounds from Vue rendering (notifications#1949)

• Fix: use folder material design icon (recommendations#750)

• Update nextcloud/ocp dependency (related_resources#428)

• Update nextcloud/ocp dependency (related_resources#432)

• Update nextcloud/ocp dependency (serverinfo#612)

• Update nextcloud/ocp dependency (serverinfo#618)

• Ci: automate ocp updates (serverinfo#621)

• Feat: update dependency on branch stable28 (survey_client#291)

• Test(cypress): Avoid failure when editor is updated on webdav requests (text#5775)

• Fix: smartpicker set links for selected text (text#5837)

• Cleanup _oc_webroot stubs where possible (text#5842)

• Test(cy): rely on @nextcloud/axios for requests (text#5843)

• Update nextcloud/ocp dependency (text#5852)

• Fix(table): Fix readonly detection in vue components (text#5858)

• Fix(locks): only lock when editing (text#5866)

• Update nextcloud/ocp dependency (text#5881)

• Reset all sessions (in occ command and on upgrade) (text#5890)

• Fix: Ignore pushes of update steps for read only sessions (text#5897)

• Fix npm audit (viewer#2301)

• Properly save old route when opening the viewer (viewer#2327)

• Fix: Add missing generateUrl (viewer#2330)

27.1.11 RC1

• Update psalm-baseline.xml (server#43776)

• Fix(sharing): Avoid (dead)locking during orphan deletion (server#44009)

• Fix(dav): Add occ command to fix missing caldav sync tokens (server#44196)

• Fix(dav): Add retention time to sync token cleanup (server#44397)

• Feat: add request id as comment to all queries (server#44957)

• Fix: Fix truncation on public page (server#44991)

• Fix(session): Do not update authtoken last_check for passwordless (server#45062)

• Fix: Return a file element even if the rendered list does not contained one (server#45121)

• Perf(db): Sort data for IN before chunking (server#45213)

• Expose subscription calendars (server#45232)

• Feat: Limit email input to 255 chars (server#45290)

• Avoid updating the same oc_authtoken row twice (server#45351)

• Fix(groups): allows to save group names with more than 64 characters (server#45369)

• Fix: Mark more configs as sensitive (server#45441)

• Fix(contactsinteraction): Allow vCard download (server#45444)

• Fix: forbid moving a folder into a subfolder of itself (server#45527)

• Fix(dav): Rate limit address book creation (server#45544)

• CalDAV fix search with limit and time range (server#45568)

• Unmark deleted users if their last login date is more recent than deleted date (server#45589)

• Fix(core): unsupported browser redirect url (server#45624)

• Fix(caldav): automatically delete outdated scheduling objects (server#45639)

• Fix(dialogs): Make sure conflict dialog is loaded before adding conflicts (server#45664)

• Feat: add option to disable scanner transactions (server#45681)

• Fix(Session): avoid password confirmation on SSO (server#45703)

• Fix npm audit (server#45732)

• Ci(eol): update workflow from template (server#45736)

• Manual/backport/44910/stable27 (server#45749)

• Fix(dav): Don’t log access control as error (server#45757)

• Fix: failing tests for setup check (server#45762)

• Fix: Autodetect legacy filekey instead of trusting the header for legacy header (server#45776)

• Fix(caldav): event links in shared calendar notifications (server#45798)

• Use isRetryable to catch retryable exceptions (server#45806)

• Test: add tests for ProfilePageController (server#45824)

• Fix(ShareEntryLinkedList): Correctly propagate share data (server#45828)

• Fix(ObjectStore): Fix regression when hostname is empty (server#45838)

• Get child ids for folder in a separate query during move (server#45849)

• Fix(cron): Log long running jobs (server#45855)

• Chore(deps-dev): Bump adm-zip from 0.5.12 to 0.5.14 (files_pdfviewer#976)

• Update nextcloud/ocp dependency (firstrunwizard#1237)

• Update nextcloud/ocp dependency (nextcloud_announcements#342)

• Update nextcloud/ocp dependency (notifications#1936)

• Update nextcloud/ocp dependency (notifications#1939)

• Fix(browser): Don’t create web notifications for old notifications (notifications#1951)

• Fix: separate creation of browser notifications and sounds from Vue rendering (notifications#1952)

• Update nextcloud/ocp dependency (related_resources#427)

• Update nextcloud/ocp dependency (related_resources#431)

• Update nextcloud/ocp dependency (serverinfo#613)

• Update nextcloud/ocp dependency (serverinfo#616)

• Ci: automate ocp updates (serverinfo#620)

• Update nextcloud/ocp dependency (text#5853)

• Fix(locks): only lock when editing (text#5867)

• Update nextcloud/ocp dependency (text#5882)

• Reset all sessions (in occ command and on upgrade) (text#5892)

• Fix npm audit (viewer#2302)

[danddc]

I updated my NC29.0.2 test system to the new RC1 via the web admin panel. When it got to the download phase, the download said it was failing. There’s a button at the stop of the screen that seemed to allow a retry, but after trying several times over the span of 10 minutes, I decided to open a new browser window. The new window, when going to the upgrade, went straight to the download phase. I still had to click the button, but the download started. Ultimately the upgrade was successful, and the system seems to be running fine so far. I just thought I’d share the experience, since it wasn’t typical.

Thanks to everyone for all the hard work! I’m glad so many things are getting fixed.

[jtr]

Check your updater.log. It will have the entire Updater run (including the one that didn’t finish) logged. It may give some further clues about what happened the first run through.

[danddc]

It has some stuff about “other exception” and “not authenticated”.

Failure

2024-06-14T16:15:55+0000 c3TmwHnndX [info] end of createBackup()
2024-06-14T16:15:55+0000 c3TmwHnndX [info] endStep("3")
2024-06-14T16:15:56+0000 Wj536zn8vs [info] request to updater
2024-06-14T16:15:56+0000 Wj536zn8vs [info] currentStep()
2024-06-14T16:15:56+0000 Wj536zn8vs [info] Step 3 is in state "end".
2024-06-14T16:15:56+0000 Wj536zn8vs [info] POST request for step "4"
2024-06-14T16:15:56+0000 Wj536zn8vs [error] POST request failed with other exception
2024-06-14T16:15:56+0000 Wj536zn8vs [error] Exception: Exception
Message: Not authenticated
Code:0
Trace:
#0 {main}
File:/var/www/nextcloud/updater/index.php
Line:1325

2024-06-14T16:17:35+0000 3X2LJpwNxE [info] request to updater
2024-06-14T16:17:35+0000 3X2LJpwNxE [info] currentStep()
2024-06-14T16:17:35+0000 3X2LJpwNxE [info] Step 3 is in state "end".
2024-06-14T16:17:35+0000 3X2LJpwNxE [info] POST request for step "4"
2024-06-14T16:17:35+0000 3X2LJpwNxE [error] POST request failed with other exception
2024-06-14T16:17:35+0000 3X2LJpwNxE [error] Exception: Exception
Message: Not authenticated
Code:0
Trace:
#0 {main}
File:/var/www/nextcloud/updater/index.php
Line:1325

Then later, when it works …

Success

2024-06-14T16:22:03+0000 kM6d8uQB7M [info] request to updater
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] currentStep()
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] Step 3 is in state "end".
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] POST request for step "4"
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] startStep("4")
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] downloadUpdate()
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] getUpdateServerResponse()
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] updaterServer: https://updates.nextcloud.com/updater_server/
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] releaseChannel: beta
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] internal version: 29.0.2.2
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] updateURL: https://updates.nextcloud.com/updater_server/?version=29x0x2x2xxxbetaxx2024-06-06T08%3A36%3A45%2B00%3A00+fd9f8b5eab4b995d8dd0bf6a9e3000948094b008x8x2x20
2024-06-14T16:22:03+0000 kM6d8uQB7M [info] getUpdateServerResponse response: Array
(
    [version] => 29.0.3.0
    [versionstring] => Nextcloud 29.0.3 RC1
    [url] => https://download.nextcloud.com/server/prereleases/nextcloud-29.0.3rc1.zip
    [web] => https://docs.nextcloud.com/server/29/admin_manual/maintenance/upgrade.html
    [changes] => https://updates.nextcloud.com/changelog_server/?version=29.0.3
    [autoupdater] => 1
    [eol] => 0
    [signature] => teVd0ccIILBxO9zyJwBerqdlt8jkkBtdd9MeC5w45lRvsT5jj9qLHEv9WpXV9emh
te1CZfFpKlgTB3b5xkp9I11pJSe0q+ghtViflZs/bMbvPC6BbEHnCNDTvhj+qNJG
uEmk+R8hR2M54AfPRwoTWWDm3ufgBA0TwqYAsY/o+wgStxqYwbUaxFz6TUSL8tPU
Vck0Hk6W5t5J7ZFoT+XUAaEF9xy+JZm3bsfFeSMSXgB3T5KnC+x94SB/FG2jJcm3
Mq1X/sjGBYVBmMXFEKoD+9qKmd+Pzt0A5S2qv6mQGFRKrG16E4RyyAwOi0r9mcqb
PVp7tno+/wvatw23HTYDWg==
)

2024-06-14T16:22:03+0000 kM6d8uQB7M [info] storage location exists
2024-06-14T16:22:27+0000 kM6d8uQB7M [info] end of downloadUpdate()
2024-06-14T16:22:27+0000 kM6d8uQB7M [info] endStep("4")
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] request to updater
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] currentStep()
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] Step 4 is in state "end".
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] POST request for step "5"
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] startStep("5")
2024-06-14T16:22:27+0000 DVubOQGEH5 [info] verifyIntegrity()

[blizzz]

The “Not authenticated” message appears when the “updater.secret”, a random value created when opening the updater, does not match on the client side (what the browser sends) and what is stored on the server. This is a security thing. It could happen, when the config.php was open and is saved, override the value in between, or when the updater was opened again from another browser tab.