Maintenance releases of 31.0.9 and 30.0.15 are coming next Thursday and RCs for those are now available on our download server.
As always, help with testing is very much welcome!
We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so we’re even more sure that it’s good to go! If you notice anything out of order, please report back on the appropriate Github repository! 
Download
Changelogs
31.0.9 RC1
server
- Fix: rework UploadFolder implementation (server#51063)
- Fix(CardDAV): do not ignore move command object target uri (server#54201)
- Feat(cardav): support result truncation for addressbook federation (server#54276)
- Fix(trash): Fix order of metadata deletion (server#54320)
- Enh(unified-search): Smarter load more (server#54333)
- Fix(files): drop usage of FileInfoModel (server#54355)
- Fix(maintenance): refresh page when turned off (sometimes) (server#54359)
- Fix: increase how long we cache display names (server#54361)
- Fix(settings): add missing AI icon (server#54365)
- Fix(files_sharing): Implement conditional federation placeholder (server#54369)
- Fix(installer): ensure valid tempFile & extractDir (server#54373)
- Fix: Fix getting trusted server other than the first (server#54381)
- Fix(ZipFolderPlugin): set mtime of directories in archive (server#54412)
- Fix(search): Fix SearchComposer.php filtering logic (server#54423)
- Perf: ignore any custom property in the nc/oc namespace that isn’t explicitly allowed (server#54425)
- Perf(calendar): Disable custom properties for individual calendar events (server#54427)
- Fix: use double / in strings (server#54478)
- Fix(files_sharing): Also hide own reshares in shared with me section (server#54481)
- Fix(core): unified search is cut off on small window (server#54499)
- Fix(caldav): encode calendar URLs properly when formatting search results (server#54509)
- Feat(ocm): split ocm discovery and capabilities (server#54544)
- Change “core.ProfilePage.index” to lowercase (server#54547)
- Fix(AppManager): Argument must be of type array|object (server#54549)
- Fix(files_sharing): sharing status action permission and sidebar await (server#54555)
- Fix: Fix unique constraint violation in oc_vcategory migration (server#54572)
- Fix(files): filter non batch actions in header (server#54582)
- Fix: use appropriate user agent string when syncing Outlook calendar subscriptions (server#54585)
- Fix(sharing): fix json decoding the list of groups excluded from sharing (server#54596)
- Fix: Make some strings in CodeIntegrity.php translatable (server#54602)
- Chore(flake): Add haze (server#54604)
- Tests: Update testing certificates that expired after 10 years (server#54616)
- Fix(encryption): Fix TypeError when trying to decrypt unencrypted file (server#54628)
- Fix(files_sharing): Correctly reject pending remote shares (server#54635)
- Add commands to set/get/delete/clear the distributed memcache (server#54641)
- Fix(carddav): IAddressBook::getKey() should return a string (server#54652)
- Fix(2fa): Fix 2FA session setup when ephemeral session is used (server#54663)
- Do not always check password checkbox when sharing without password (server#54668)
- Fix(caldav): show confidential event if writable (server#54676)
- Restore “Others with access” section (server#54680)
- Fix(AppConfig#setTypedValue): Catch AppConfigUnknownKeyException (server#54686)
- Fix(TaskProcessingApiController): Don’t allow anonymous access anymore (server#54702)
- Fix(trashbin): Fix errors in the log on MOVE operations (server#54704)
- Feat: allow filtering sharing:delete-orphan-shares by share owner or target (server#54710)
- Fix(deps): Update @nextcloud/vue to v8.29.2 (server#54714)
- Fix(files_versions): retrieve all display names with one request (server#54720)
- Fix(files): verify files are still accessible before downloading (server#54724)
- Fix(files_versions): Use helper function to get versions folder (server#54726)
- Fix(theming): use IAppConfig instead of IConfig to set theming config (server#54740)
- Fix: cast fileid to string in getMountsForFileId (server#54744)
- Fix(files_versions): ensure IDs, Author and Label are strings (server#54767)
- Fix(status.php): Fix samesite cookies (server#54776)
- Fix: resolving conflict when uploading multiple files via drag&drop (server#54780)
- Chore(flake): update haze to 2.1.1 (server#54787)
- Fix: add missing listener (server#54808)
- Fix(dav): ensure moving or copying a file is possible (server#54815)
- Fix(dav): Mark removal of dav object properties as expensive (server#54824)
- Fix(comments): use showFile route to reference files with a matching … (server#54829)
- Fix(Filesystem): use FilenameValidator for `Filesystem::isFileBlacklisted` (server#54844)
- Fix dashboard icons (server#54845)
- Perf(users): Create lazy users in IUserManager::getSeenUsers (server#54849)
- Fix: the account files filter should also work in trashbin (server#54852)
activity
- Fix(dashboard): enable rounded icons (activity#2100)
- Perf: pass the node of shares around instead getting the path from id each time (activity#2101)
app_api
bruteforcesettings
circles
- Fix(dashboard): enable rounded item icons (circles#2087)
- Fix(share): returns expiration date to front-end (circles#2091)
- Fix: ignore empty expiration date (circles#2095)
- Enh(loopback): ignore on occ (circles#2097)
files_downloadlimit
files_pdfviewer
password_policy
photos
- Fix: Fallback to icon if collection cover fails to load (photos#3134)
- Fix(deps): Update @nextcloud/sharing to ^0.2.5 (photos#3142)
related_resources
- Fix: add check if app is enabled for RelatedService (related_resources#645)
- Chore(workflows): Update lint-php-cs workflow (related_resources#647)
suspicious_login
text
- Chore(upgrade): mermaid and nextcloud/vue (text#7558)
- Fix(links): do not steal focus on initial loading (text#7602)
updater
- Feat: allow to provide manual URL (updater#643)
- Feat(download): allow to download archives from several URLs (updater#654)
viewer
- Fix: sorting to align with files list (viewer#2935)
- Backport/2946/stable31 (viewer#2948)
- Fix: viewer files router in standalone mode (viewer#2952)
- Feat: only provide fonts which are available (shipped by us) (viewer#2957)
- Feat: add API package to register handlers in init scripts (viewer#2958)
30.0.15 RC1
server
- Fix: rework UploadFolder implementation (server#51065)
- Enh(unified-search): Smarter load more (server#54334)
- Fix(maintenance): refresh page when turned off (sometimes) (server#54358)
- Fix(settings): add missing AI icon (server#54366)
- Fix(files_sharing): Implement conditional federation placeholder (server#54368)
- Fix(installer): ensure valid tempFile & extractDir (server#54375)
- Fix: use the join function for merging davRootPath and path (server#54382)
- Fix: use double / in strings (server#54477)
- Fix(files_sharing): Also hide own reshares in shared with me section (server#54489)
- Fix(core): unified search is cut off on small window (server#54498)
- Fix(caldav): encode calendar URLs properly when formatting search results (server#54508)
- Fix(AppManager): Argument must be of type array|object (server#54548)
- Fix(files_sharing): sharing status action permission and sidebar await (server#54556)
- Fix(cron): Ignore time sensitivity when a class was explicitely scheduled (server#54566)
- Fix: Fix unique constraint violation in oc_vcategory migration (server#54571)
- Fix: use appropriate user agent string when syncing Outlook calendar subscriptions (server#54584)
- Fix(sharing): fix json decoding the list of groups excluded from sharing (server#54595)
- Fix: Make some strings in CodeIntegrity.php translatable (server#54601)
- Chore(flake): Add haze (server#54603)
- Tests: Update testing certificates that expired after 10 years (server#54615)
- Fix(encryption): Fix TypeError when trying to decrypt unencrypted file (server#54629)
- Fix(files_sharing): Correctly reject pending remote shares (server#54634)
- Add commands to set/get/delete/clear the distributed memcache (server#54642)
- Fix(carddav): IAddressBook::getKey() should return a string (server#54651)
- Fix(2fa): Fix 2FA session setup when ephemeral session is used (server#54662)
- Fix(caldav): show confidential event if writable (server#54675)
- Fix(AppConfig#setTypedValue): Catch AppConfigUnknownKeyException (server#54687)
- Chore: pin NPM to at least `^10.5.1` to prevent bugs with `corepack` (server#54696)
- Fix(TaskProcessingApiController): Don’t allow anonymous access anymore (server#54701)
- Fix(trashbin): Fix errors in the log on MOVE operations (server#54705)
- Feat: allow filtering sharing:delete-orphan-shares by share owner or target (server#54711)
- Fix(provisioning_api): Allow group details access for users with admin delegation (server#54712)
- Fix(deps): Update @nextcloud/vue to v8.29.2 (server#54715)
- Fix(files_versions): retrieve all display names with one request (server#54719)
- Fix(files_versions): Use helper function to get versions folder (server#54725)
- Fix(files_versions): ensure IDs, Author and Label are strings (server#54768)
- Fix: resolving conflict when uploading multiple files via drag&drop (server#54779)
- Chore(flake): update haze to 2.1.1 (server#54786)
- Fix: add missing listener (server#54807)
- Fix(dav): ensure moving or copying a file is possible (server#54814)
- Fix(dav): Mark removal of dav object properties as expensive (server#54823)
- Fix(comments): use showFile route to reference files with a matching … (server#54828)
- Fix(Filesystem): use FilenameValidator for `Filesystem::isFileBlacklisted` (server#54843)
- Perf(users): Create lazy users in IUserManager::getSeenUsers (server#54850)
- Fix: the account files filter should also work in trashbin (server#54851)
- Build(deps): Bump icewind/streams from 0.7.7 to 0.7.8 (server#54857)
activity
app_api
bruteforcesettings
circles
files_downloadlimit
files_pdfviewer
password_policy
photos
related_resources
updater
viewer
- Fix: sorting to align with files list (viewer#2934)
- Backport/2946/stable30 (viewer#2949)
- Fix: viewer files router in standalone mode (viewer#2951)
- Fix(videos): ensure videos in public shares preserve the aspect ratio (viewer#2955)
- Feat: add API package to register handlers in init scripts (viewer#2959)