RC1s of 34.0.2, 33.0.7, 32.0.13

[blizzz]

RC1s of 34.0.2, 33.0.7 and 32.0.13

Maintenance releases of 34.0.2, 33.0.7 and32.0.13 are coming next Thursday and first RCs for those are now available on download servers.

As always, help with testing is very much welcome!

We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so we’re even more sure that it’s good to go! If you notice anything out of order, please report back on the appropriate GitHub repository!

Downloads

• Nextcloud Server 34.0.2 RC1 on GitHub
• Nextcloud Server 33.0.7 RC1 on GitHub
• Nextcloud Server 32.0.13 RC1 on GitHub

Changelog

Nextcloud 34.0.2rc1

server

• Chore(deps): bump @vueuse/integrations from 14.1.0 to 14.3.0 (server#60428)
• Chore(deps): bump @vueuse/core from 14.1.0 to 14.3.0 (server#60679)
• Chore(deps): Bump p-queue from 9.2.0 to 9.3.0 (server#60681)
• Chore(deps): Bump focus-trap from 8.0.1 to 8.2.1 in /build/frontend-legacy (server#60684)
• Chore(deps): Bump @simplewebauthn/browser from 13.2.2 to 13.3.0 in /build/frontend-legacy (server#60686)
• Chore(deps): Bump p-queue from 9.1.0 to 9.3.0 in /build/frontend-legacy (server#60687)
• Fix(cypress): disable unsupported-browser redirect in test container (server#60807)
• Feat(UserManager): Add getters for avatar URLs (server#60811)
• Chore(deps): Bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy (server#61036)
• Fix(core): public share download icon color and theme filter scope (server#61211)
• Fix: use card interface instead of object (server#61252)
• Chore(deps-dev): Bump the vitest group across 2 directories with 2 updates (server#61454)
• Chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 (server#61455)
• Chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 (server#61456)
• Chore(deps-dev): Bump nextcloud/rector from 0.5.1 to 0.5.2 in /vendor-bin/rector (server#61457)
• Chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 (server#61458)
• Chore(deps-dev): Bump rector/rector from 2.4.5 to 2.4.6 in /vendor-bin/rector (server#61459)
• Chore(deps-dev): Bump stylelint from 17.12.0 to 17.13.0 (server#61460)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61461)
• Chore(deps): Bump @nextcloud/vue from 9.8.1 to 9.8.2 (server#61462)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (server#61463)
• Docs(config): clarify metadata and conversion file size limits (server#61482)
• Fix: properly mark CleanupShareTarget as expensive (server#61498)
• Fix: update cached mounts when moving share in repair step (server#61500)
• Fix(files_trashbin): create folder if missing when expiring trash (server#61523)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61528)
• Fix: stop calling DI container in SharedStorage (server#61529)
• Fix(preview): First cleanup from filecache and then from preview table (server#61531)
• Perf(View): don’t sort twice the same array (server#61535)
• Perf: block more properties from using the custom properties backend (server#61540)
• Fix(settings): correct heading order in account management sidebar (server#61546)
• Fix: Make the IProvideUserSecretBackend usable (server#61550)
• Fix: track time spent in recursive markOrRun calls (server#61553)
• Perf(log): normalize log data only when logging (server#61557)
• Perf: avoid DIing IRootFolder at every shared storage init (server#61558)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61571)
• Fix(appstore): only show appstore entries if actual from appstore (server#61592)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61596)
• Fix(a11y): label account QR code button (server#61601)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61606)
• Fix(maintenance): allow AppAPI to serve requests during maintenance mode (server#61613)
• Fix(user_status): stabilise the user_status (server#61617)
• Fix: Add plural form for translations (server#61626)
• Fix(core): use proper API routes for recommended apps (server#61633)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61645)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61662)
• Fix(updatenotification): use correct appstore route (server#61664)
• Fix(LoginForm): improve login throttle warning wording (server#61671)
• Fix(files_sharing): reject custom share tokens longer than the db column (server#61676)
• Fix(files_external): ignore deprecated backends (server#61691)
• Build(deps): Composer audit updates (server#61697)
• Perf: Only sort wrappers when adding them (server#61700)
• Fix(files_external): properly apply default mount options (server#61702)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61712)
• Fix(l10n): Fix plural (server#61734)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61737)
• Fix(dav): Always show example content section (server#61742)
• Fix(core): resolve some edge cases with recommended apps (server#61747)
• Fix(db): align preview migration annotations with created tables (server#61749)
• Chore(deps-dev): bump the vite group across 2 directories with 1 update (server#61756)
• Chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (server#61768)
• Chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 (server#61769)
• Chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 (server#61770)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 (server#61771)
• Chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 (server#61772)
• Chore(deps): bump vue from 3.5.38 to 3.5.39 (server#61774)
• Chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 (server#61775)
• Chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy (server#61776)
• Chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy (server#61777)
• Chore(deps): bump libphonenumber-js from 1.13.4 to 1.13.7 in /build/frontend-legacy (server#61778)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 in /build/frontend-legacy (server#61781)
• Fix(files_external): prevent dropdown entries from shrinking (server#61797)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (server#61802)
• Chore: run `npm audit` (server#61804)
• Chore(deps): Bump axios from 1.15.0 to 1.16.1 in /build/frontend-legacy (server#61805)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61842)
• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61852)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61862)
• Feat(OCP): Add Interaction API (server#61867)
• Test: fix HEIC tests (server#61873)
• Fix(DeclarativeManager): Fix admin delegation (server#61876)
• Fix: adjust file picker for background image to allow folder navigation (server#61878)
• Fix(bruteforce): Don’t throttle requests with failing CSRF (server#61886)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61888)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61892)
• Fix: hide scroll bar in unified search when not needed (server#61909)
• Fix(appstore): use proper app icon or adjust color if needed (server#61918)
• Fix(files): distinguish between files and folders for validation messages (server#61919)
• Feat: Disable callable serialization in sabre/xml (server#61923)
• Fix(files): proper accessible row name and title for overflow (server#61930)
• Show group display name when the group object is not loaded yet (server#61932)
• Feat: Fetch groups in batch in getUserGroups (server#61936)
• Fix(files_sharing): Fail on sharing file with create or delete permission before failing on increased permissions (server#61939)
• Fix: webhook payload for system tag events (server#61943)
• Chore(jobs): write proper documentation for job:history (server#61945)
• Refactor(Interaction): Allow multiple resources and receivers in a single event (server#61956)
• Fix(systemtags): remove duplicates, cleanup existing tags (server#61965)
• Fix: Catch expected NotFoundException (server#61968)
• Feat(login): clean remember me tokens (server#61972)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#61977)
• Chore(deps-dev): bump the vitest group across 2 directories with 2 updates (server#61992)
• Chore(deps): bump p-queue from 9.3.0 to 9.3.1 (server#61993)
• Chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat (server#61994)
• Chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 (server#61995)
• Chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit (server#61996)
• Chore(deps-dev): bump webpack from 5.107.2 to 5.108.4 in /build/frontend-legacy (server#61997)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy (server#61998)
• Master] fix(security): Update code signing revocation list (server#62040)
• Master] fix(security): Update code signing revocation list (server#62046)
• Perf(carddav): reduce disk usage of photocache (server#62054)
• Perf(workflow): Implement result cache for IP checks (server#62057)
• Ci: migrate from buildjet to cache action (server#62061)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62069)
• Feat: KV cache based on predis (server#62070)
• Fix(caldav): url-encode owner/user in activity event links (server#62075)
• Fix(AppSearch): Always sort apps first for search (server#62085)
• Fix(UserPlugin): Don’t search for displayname when restricted (server#62096)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62103)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62109)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62119)
• 34.0.2 RC1 (server#62120)
• Fix(FilesWidget): allow to resize widget vertically (server#62125)
• Rate limiting for creating federated shares (server#62130)
• Feat(share): add public share-review API under OCP\Share\ShareReview (server#62132)
• Fix: Disable imagick preview providers (server#62147)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62150)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62160)
• Fix(preview): properly handle encoded content (server#62173)
• Fix(cache): make clear() redis cluster compatible (server#62177)
• Perf: Don’t fetch all the trash items when deleting a single item (server#62180)
• Fix(s3): trim multiple spaces to single space in original path header (server#62183)
• Master] fix(security): Update code signing revocation list (server#62184)
• Feat(files_sharing): schedule external share scan job when accepted (server#62197)
• Fix: don’t return cache entries with null paths (server#62199)
• Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62210)
• Fix(dav): release part-file lock when an upload fails (server#62216)
• Fix(files_sharing): preserve unmasked permissions as scan_permissions (server#62218)
• Perf(dav): Stream PROPFIND output (server#62224)
• Fix: don’t die if we can’t encode file metadata on upload (server#62226)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2498)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2513)
• Feat: add predis as a dependency for Valkey cluster support (3rdparty#2518)

activity

• Fix npm audit (activity#2620)
• Feat: make amount of items sent on email configurable via occ (activity#2708)
• Fix(deps): update dependency vite to v7.3.5 (activity#2734)
• Chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (activity#2735)
• Chore(deps): update dependency @vue/test-utils to ^2.4.11 (activity#2737)
• Chore(deps): update dependency bamarni/composer-bin-plugin to ^1.9.1 (activity#2738)
• Chore(deps): update dependency dockerode to ^5.0.1 (activity#2739)
• Chore(deps): update dependency eslint-plugin-cypress to ^6.4.2 (activity#2740)
• Chore(deps): update dependency phpunit/phpunit to ^11.5.56 (activity#2741)
• Chore(deps): update dependency vimeo/psalm to ^6.16.1 (activity#2742)
• Chore(deps): update dependency wait-on to ^9.0.10 (activity#2743)
• Chore(deps): update github actions (activity#2744)
• Chore(deps): update vitest monorepo to ^4.1.9 (activity#2745)
• Fix(deps): update dependency @nextcloud/vue to ^9.8.2 (activity#2746)
• Fix(deps): update dependency @vueuse/core to ^14.3.0 (activity#2747)
• Chore(deps): update dependency vite to ^7.3.6 (activity#2776)
• Fix(listener): Catch when trying to set up a settings that doesn’t exists (activity#2793)

app_api

• Fix(maintenance-mode): keep only HaRP and ExApp survival routes available in maintenance mode (app_api#903)
• Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 (app_api#912)
• Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 (app_api#913)
• Feat: add release relay gh workflow (app_api#924)
• Chore(deps): Bump undici from 7.24.1 to 7.28.0 (app_api#925)
• Chore(deps-dev): Bump launch-editor from 2.12.0 to 2.14.1 (app_api#926)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#930)
• Fix npm audit (app_api#933)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1115)
• Chore(deps): Bump vue from 3.5.34 to 3.5.35 (bruteforcesettings#1151)
• Update nextcloud/ocp dependency (bruteforcesettings#1158)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1160)
• Chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 (bruteforcesettings#1164)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 (bruteforcesettings#1165)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1178)
• Update nextcloud/ocp dependency (bruteforcesettings#1182)

circles

• Update nextcloud/ocp dependency (circles#2490)
• Ci(actions): Update workflow templates from organization template repository (circles#2501)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2577)
• Chore(deps): bump fast-xml-parser and webdav (circles#2582)
• Chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 (circles#2584)
• Chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 (circles#2587)
• Chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 (circles#2590)
• Chore(deps-dev): bump vite from 7.1.11 to 7.1.12 (circles#2594)
• Chore(deps): bump dompurify from 3.3.1 to 3.4.11 (circles#2604)
• Chore(deps): bump qs from 6.14.2 to 6.15.2 (circles#2605)
• Chore(deps): bump picomatch from 2.3.1 to 2.3.2 (circles#2607)
• Chore(deps): bump bn.js (circles#2608)
• Chore(deps): bump rollup from 4.46.3 to 4.62.2 (circles#2609)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2610)
• Ci(actions): Update workflow templates from organization template repository (circles#2626)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2634)

files_downloadlimit

• Chore(CI): Adjust testing matrix for Nextcloud 34 on stable34 (files_downloadlimit#805)
• Chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 (files_downloadlimit#809)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#819)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 (files_downloadlimit#822)
• Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 (files_downloadlimit#826)
• Chore(deps): Bump vue from 3.5.22 to 3.5.35 (files_downloadlimit#840)
• Chore: update Node version and align with stable34 (files_downloadlimit#849)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_downloadlimit#857)
• Fix npm audit (files_downloadlimit#864)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_downloadlimit#869)

files_lock

• Ci(litmus): change server-version to stable34 (files_lock#1126)
• Fix npm audit (files_lock#1129)
• Ci(tools): Update dev dependencies (files_lock#1132)
• Chore(deps): Bump @rollup/rollup-linux-x64-gnu from 4.62.0 to 4.62.2 (files_lock#1136)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_lock#1138)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_lock#1148)
• Chore(deps): Bump dompurify from 3.4.10 to 3.4.11 (files_lock#1149)
• Chore(deps-dev): Bump prettier from 3.8.4 to 3.8.5 (files_lock#1153)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_lock#1157)
• Chore(deps-dev): Bump @playwright/test from 1.61.0 to 1.61.1 (files_lock#1164)
• Update nextcloud/ocp dependency (files_lock#1165)
• Enh: allow file owner to unlock TYPE_TOKEN locks (files_lock#1169)
• Chore(release): bump version to 34.0.1 (files_lock#1178)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (files_pdfviewer#1463)
• Chore(deps): Bump dompurify from 3.3.3 to 3.4.11 (files_pdfviewer#1465)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_pdfviewer#1468)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1471)

firstrunwizard

• Update nextcloud/ocp dependency (firstrunwizard#2103)
• Fix npm audit (firstrunwizard#2104)
• Chore(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.2 (firstrunwizard#2115)
• Chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 (firstrunwizard#2117)
• Chore(deps): Bump vue from 3.5.28 to 3.5.39 (firstrunwizard#2137)
• Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.3.0 (firstrunwizard#2139)
• Chore(deps): Bump dompurify from 3.4.2 to 3.4.11 (firstrunwizard#2140)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (firstrunwizard#2141)

logreader

• Fix npm audit (logreader#2075)
• Chore: bump PHP version to 8.2 (logreader#2081)
• Update nextcloud/ocp dependency (logreader#2083)
• Fix npm audit (logreader#2093)
• Chore(deps-dev): bump browserslist from 4.28.2 to 4.28.4 (logreader#2096)
• Chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 (logreader#2097)
• Chore(deps): bump vue from 3.5.28 to 3.5.39 (logreader#2100)
• Chore(deps-dev): bump vitest from 4.1.5 to 4.1.9 (logreader#2101)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (logreader#2110)
• Update nextcloud/ocp dependency (logreader#2112)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#653)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#659)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#668)
• Update nextcloud/ocp dependency (nextcloud_announcements#669)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#673)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3128)
• Fix npm audit (notifications#3133)
• Test: Push notification payload (notifications#3145)
• Update nextcloud/ocp dependency (notifications#3151)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3165)
• Ci(actions): Update workflow templates from organization template repository (notifications#3168)
• Fix npm audit (notifications#3171)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3178)
• Fix(Makefile): Add missing composer setup for dev-setups and building… (notifications#3181)
• Build(deps): Apply composer audit fixes (notifications#3182)
• Update nextcloud/ocp dependency (notifications#3183)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3191)
• Update nextcloud/ocp dependency (notifications#3192)
• Ci(actions): Update workflow templates from organization template repository (notifications#3195)
• Update nextcloud/ocp dependency (notifications#3198)
• Update nextcloud/ocp dependency (notifications#3203)

office

• Fix npm audit (office#42)

password_policy

• Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.29.2 (password_policy#939)
• Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 (password_policy#943)
• Chore(deps-dev): Bump sass from 1.97.1 to 1.97.3 (password_policy#946)
• Fix npm audit (password_policy#956)
• Chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 (password_policy#959)
• Feat: Add login output when password policy fails (password_policy#966)
• Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 (password_policy#969)
• Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (password_policy#970)
• Chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 (password_policy#971)
• Chore(deps-dev): Bump qs from 6.14.2 to 6.15.2 (password_policy#973)
• Fix npm audit (password_policy#975)

photos

• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.1.1 (photos#3521)
• Chore(deps-dev): Bump wait-on from 8.0.3 to 8.0.5 (photos#3522)
• Chore(deps): Bump @nextcloud/sharing from 0.2.4 to 0.2.5 (photos#3527)
• Fix: faces actions and add recognize e2e tests (photos#3577)
• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3587)
• Fix npm audit (photos#3589)
• Ci(actions): Update workflow templates from organization template repository (photos#3600)
• Fix npm audit (photos#3607)
• Chore(deps): Bump axios from 1.16.0 to 1.16.1 (photos#3612)
• Chore(deps-dev): Bump autoprefixer from 10.4.21 to 10.4.27 (photos#3613)
• Chore(deps-dev): Bump cypress-split from 1.24.14 to 1.24.31 (photos#3614)
• Chore(deps-dev): Bump eslint-plugin-cypress from 5.1.0 to 5.1.1 (photos#3615)
• Chore(deps-dev): Bump vue-tsc from 2.2.10 to 2.2.12 (photos#3616)
• Ci(actions): Update workflow templates from organization template repository (photos#3627)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3633)
• Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 (photos#3634)

privacy

• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 (privacy#1356)
• Ci(actions): Update workflow templates from organization template repository (privacy#1358)
• Fix npm audit (privacy#1362)
• Chore(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 (privacy#1370)
• Chore(deps): Bump vue from 3.5.34 to 3.5.38 (privacy#1373)
• Chore: Add `update-stable-titles` workflow (privacy#1383)
• Ci(actions): Update workflow templates from organization template repository (privacy#1392)
• Fix npm audit (privacy#1397)

recommendations

• Fix npm audit (recommendations#1062)
• Fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (recommendations#1107)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1129)

related_resources

• Chore(deps): bump dompurify from 3.2.6 to 3.4.11 (related_resources#1028)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1028)
• Update nextcloud/ocp dependency (serverinfo#1035)
• Use a parameterized translation for CPU thread count (serverinfo#1039)
• Update nextcloud/ocp dependency (serverinfo#1046)

survey_client

• Update nextcloud/ocp dependency (survey_client#443)

suspicious_login

• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1129)

text

• Fix npm audit (text#8739)
• Update nextcloud/ocp dependency (text#8770)
• Fix(autofocus): persist cursor positions in localStorage (text#8778)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8780)
• Fix(editor): preserve leading newlines in plain text editor (text#8788)
• Fix(ActionInsertLink): allow to get title from link picker (text#8791)
• Fix(markdown): preserve horizontal rule markup (text#8792)
• Preserve Markdown reference links (text#8811)
• Fix npm audit (text#8817)
• Chore(deps): update dependency cypress-vite to ^1.10.2 (text#8830)
• Chore(deps): update dependency vite to ^7.3.6 (text#8831)
• Chore(deps): update vitest monorepo to ^4.1.9 (text#8832)
• Fix(deps): update dependency prosemirror-markdown to ^1.13.5 (text#8833)
• Fix(deps): update dependency uuid to ^14.0.1 (text#8834)
• Fix(ImageView): use `a` element for clickable items (text#8843)
• Ci(playwright): fix installing pinned NPM version (text#8845)
• Chore(deps): update vitest monorepo to ^4.1.10 (text#8849)
• Update nextcloud/ocp dependency (text#8853)
• Fix(links): scroll to anchor links directly (text#8861)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8863)
• Chore(playwright): use `list` reporter when run locally (text#8865)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8866)
• Chore(deps): bump @nextcloud/vue to 8.40.0 (text#8872)
• Fix(Table): allow changing list indention inside tables (text#8878)
• Fix(share): detect if documentId is outside of share early (text#8880)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1383)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1387)
• Fix npm audit (twofactor_nextcloud_notification#1392)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (twofactor_nextcloud_notification#1397)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1402)
• Fix npm audit (twofactor_nextcloud_notification#1409)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (twofactor_nextcloud_notification#1411)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1414)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1415)

twofactor_totp

• Fix npm audit (twofactor_totp#1777)
• Ci: update codecov action to v7 (twofactor_totp#1789)
• Ci: drop unused app publish workflow (twofactor_totp#1838)

viewer

• Fix(composer): Remove trailing comma breaking composer.json parsing (viewer#3228)
• Fix(deps): update dependency @fontsource/roboto to ^5.2.10 (viewer#3243)
• Chore(deps): update dependency dompurify to v3.4.11 [security] (viewer#3268)

[blizzz]

Nextcloud 33.0.7rc1

server

• Fix(files_sharing): Drop trailing ‘?’ from public download redirect URL (server#59885)
• Fix(settings): sort app list by app name instead of app objects (server#59992)
• Chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 (server#60046)
• Chore(deps): Bump @vueuse/core from 14.2.1 to 14.3.0 (server#60265)
• Chore(deps): bump @vueuse/integrations from 14.2.1 to 14.3.0 (server#60268)
• Fix(cypress): disable unsupported-browser redirect in test container (server#60805)
• Fix(core): public share download icon color and theme filter scope (server#61210)
• Test(ldap): align expectation for unset `ldapUserDisplayName2` with implementation to avoid PHP 8.5 warning (server#61411)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (server#61467)
• Chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 (server#61468)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 (server#61470)
• Chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 (server#61471)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61472)
• Chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 (server#61474)
• Fix: update cached mounts when moving share in repair step (server#61499)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61527)
• Perf: block more properties from using the custom properties backend (server#61541)
• Fix(settings): correct heading order in account management sidebar (server#61547)
• Fix: Make the IProvideUserSecretBackend usable (server#61549)
• Perf(log): normalize log data only when logging (server#61556)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61570)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61595)
• Fix(a11y): label account QR code button (server#61603)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61605)
• Fix(user_status): stabilise the user_status (server#61619)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61644)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61661)
• Fix(files_external): ignore deprecated backends (server#61692)
• Build(deps): Composer audit updates (server#61698)
• Fix(files_external): properly apply default mount options (server#61701)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61711)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61714)
• Perf: Only sort wrappers when adding them (server#61718)
• Fix(dav): Always show example content section (server#61741)
• Fix(db): align preview migration annotations with created tables (server#61750)
• Chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (server#61782)
• Chore(deps-dev): bump vite from 7.3.5 to 7.3.6 (server#61783)
• Chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 (server#61784)
• Chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 (server#61785)
• Chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 (server#61786)
• Chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 (server#61787)
• Chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 (server#61788)
• Chore(deps): bump vue from 3.5.38 to 3.5.39 (server#61789)
• Fix(files_external): prevent dropdown entries from shrinking (server#61796)
• Chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy (server#61807)
• Chore(deps-dev): bump @babel/plugin-transform-private-methods from 7.28.6 to 7.29.7 in /build/frontend-legacy (server#61808)
• Chore(deps): bump @nextcloud/vue from 8.38.0 to 8.39.0 in /build/frontend-legacy (server#61809)
• Chore(deps-dev): bump @babel/preset-typescript from 7.28.5 to 7.29.7 in /build/frontend-legacy (server#61810)
• Chore(deps-dev): bump sass from 1.99.0 to 1.101.0 in /build/frontend-legacy (server#61812)
• Chore(deps-dev): bump vite from 7.3.2 to 7.3.6 in /build/frontend-legacy (server#61813)
• Chore(deps-dev): bump @babel/node from 7.29.0 to 7.29.7 in /build/frontend-legacy (server#61814)
• Chore(deps): bump libphonenumber-js from 1.12.42 to 1.13.7 in /build/frontend-legacy (server#61815)
• Chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy (server#61816)
• Chore(deps-dev): bump msw from 2.14.3 to 2.14.6 in /build/frontend-legacy (server#61817)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.4 to 4.1.9 in /build/frontend-legacy (server#61818)
• Chore(deps): bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy (server#61819)
• Chore(deps-dev): bump vitest from 4.1.4 to 4.1.9 in /build/frontend-legacy (server#61820)
• Fix: don’t return cache entries with null paths (server#61835)
• Test(settings): fix E2E selector for out of office replacement element (server#61839)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61843)
• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61851)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61861)
• Fix(DeclarativeManager): Fix admin delegation (server#61875)
• Fix: adjust file picker for background image to allow folder navigation (server#61879)
• Fix(bruteforce): Don’t throttle requests with failing CSRF (server#61885)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61887)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61891)
• Test: fix HEIC tests (server#61893)
• Fix: hide scroll bar in unified search when not needed (server#61910)
• Fix(files): distinguish between files and folders for validation messages (server#61920)
• Feat: Disable callable serialization in sabre/xml (server#61924)
• Feat: Fetch groups in batch in getUserGroups (server#61935)
• Fix: webhook payload for system tag events (server#61942)
• Show group display name when the group object is not loaded yet (server#61954)
• Fix: Catch expected NotFoundException (server#61969)
• Feat(login): clean remember me tokens (server#61971)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#61978)
• Chore(deps-dev): bump sass from 1.100.0 to 1.101.0 (server#62000)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 (server#62002)
• Chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 (server#62003)
• Chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 (server#62004)
• Chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat (server#62005)
• Chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit (server#62006)
• Chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /build/frontend-legacy (server#62007)
• Chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 in /build/frontend-legacy (server#62009)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy (server#62011)
• Chore(deps): bump p-queue from 9.3.0 to 9.3.1 in /build/frontend-legacy (server#62013)
• Master] fix(security): Update code signing revocation list (server#62041)
• Master] fix(security): Update code signing revocation list (server#62047)
• Perf(carddav): reduce disk usage of photocache (server#62053)
• Perf(workflow): Implement result cache for IP checks (server#62056)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62068)
• Fix(caldav): url-encode owner/user in activity event links (server#62074)
• Fix(UserPlugin): Don’t search for displayname when restricted (server#62097)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62102)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62110)
• 33.0.7 RC1 (server#62116)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62118)
• Ci: migrate from buildjet to cache action (server#62124)
• Fix(FilesWidget): allow to resize widget vertically (server#62126)
• Rate limiting for creating federated shares (server#62129)
• Fix: Disable imagick preview providers (server#62148)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62151)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62159)
• Fix(preview): properly handle encoded content (server#62174)
• Fix(cache): make clear() redis cluster compatible (server#62176)
• Perf: Don’t fetch all the trash items when deleting a single item (server#62179)
• Fix(s3): trim multiple spaces to single space in original path header (server#62182)
• Master] fix(security): Update code signing revocation list (server#62185)
• Feat(files_sharing): schedule external share scan job when accepted (server#62198)
• Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62211)
• Revert - Merge pull request #61954 (server#62212)
• Fix(dav): release part-file lock when an upload fails (server#62215)
• Perf(dav): Stream PROPFIND output (server#62225)
• Fix: don’t die if we can’t encode file metadata on upload (server#62227)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2499)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2512)

activity

• Fix npm audit (activity#2645)
• Feat: make amount of items sent on email configurable via occ (activity#2709)
• Fix(deps): update dependency phpunit/phpunit to v11.5.50 (activity#2749)
• Chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (activity#2751)
• Chore(deps): update github actions (activity#2757)
• Chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (activity#2781)
• Chore(deps): update dependency phpunit/phpunit to ^11.5.55 (activity#2782)
• Fix(deps): pin nextcloud/ocp to dev-stable33 in psalm vendor-bin (activity#2789)
• Fix(listener): Catch when trying to set up a settings that doesn’t exists (activity#2792)
• Perf(files): compute move/rename activity settings once (activity#2795)
• Fix: do not fail moves when the old location cannot be resolved (activity#2797)

app_api

• Feat: add release relay gh workflow (app_api#923)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#931)
• Fix npm audit (app_api#935)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1079)
• Update nextcloud/ocp dependency (bruteforcesettings#1155)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1163)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1177)

circles

• Ci(actions): Update workflow templates from organization template repository (circles#2498)
• Fix: update stubs to avoid psalm errors (circles#2560)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2576)
• Chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 (circles#2585)
• Chore(deps-dev): bump vite from 7.1.11 to 7.1.12 (circles#2589)
• Chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 (circles#2592)
• Chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 (circles#2597)
• Chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 (circles#2598)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2611)
• Ci(actions): Update workflow templates from organization template repository (circles#2628)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2635)

files_downloadlimit

• Chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 (files_downloadlimit#704)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#712)
• Chore(deps-dev): Bump eslint from 9.38.0 to 9.39.4 (files_downloadlimit#738)
• Chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 (files_downloadlimit#758)
• Chore(deps): Bump @nextcloud/auth from 2.5.3 to 2.6.0 (files_downloadlimit#780)
• Chore(deps): Bump @nextcloud/dialogs from 7.1.0 to 7.4.0 (files_downloadlimit#835)
• Chore(deps): Bump @nextcloud/vue from 9.1.0 to 9.8.2 (files_downloadlimit#839)
• Chore(deps): Bump vue from 3.5.22 to 3.5.35 (files_downloadlimit#841)
• Chore(deps-dev): Bump vite from 7.1.12 to 7.3.5 (files_downloadlimit#842)
• Chore(deps): Bump vue from 3.5.35 to 3.5.38 (files_downloadlimit#856)
• Fix npm audit (files_downloadlimit#863)
• Fix: don’t apply limit if it’s disabled (files_downloadlimit#866)
• Chore(deps): Bump vue from 3.5.38 to 3.5.39 (files_downloadlimit#868)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (files_pdfviewer#1462)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1470)

firstrunwizard

• Chore(deps-dev): Bump vite from 7.3.1 to 7.3.6 (firstrunwizard#2082)
• Fix npm audit (firstrunwizard#2087)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 (firstrunwizard#2147)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (firstrunwizard#2148)
• Chore(deps-dev): Bump stylelint from 17.11.1 to 17.14.0 (firstrunwizard#2149)
• Fix npm audit (firstrunwizard#2155)

logreader

• Fix npm audit (logreader#2076)
• Chore: bump PHP version to 8.2 (logreader#2082)
• Update nextcloud/ocp dependency (logreader#2084)
• Fix npm audit (logreader#2092)
• Chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 (logreader#2099)
• Chore(deps-dev): bump @vitest/coverage-istanbul from 4.1.8 to 4.1.9 (logreader#2102)
• Chore(deps): bump vue from 3.5.26 to 3.5.39 (logreader#2103)
• Chore(deps-dev): bump vitest from 4.1.8 to 4.1.9 (logreader#2105)
• Chore(deps-dev): bump browserslist from 4.28.1 to 4.28.4 (logreader#2106)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0 (logreader#2109)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#654)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#657)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#666)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#672)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3130)
• Fix npm audit (notifications#3131)
• Test: Push notification payload (notifications#3139)
• Update nextcloud/ocp dependency (notifications#3150)
• Feat: Show request time to the push proxy (notifications#3155)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3164)
• Ci(actions): Update workflow templates from organization template repository (notifications#3169)
• Fix npm audit (notifications#3173)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3179)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3190)
• Ci(actions): Update workflow templates from organization template repository (notifications#3193)
• Update nextcloud/ocp dependency (notifications#3201)

password_policy

• Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 (password_policy#876)
• Fix npm audit (password_policy#883)
• Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.39.0 (password_policy#944)
• Chore(deps-dev): Bump vite from 7.3.0 to 7.3.6 (password_policy#950)
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.2 (password_policy#954)
• Feat: Add login output when password policy fails (password_policy#967)
• Fix npm audit (password_policy#976)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (password_policy#986)
• Chore(deps-dev): Bump @vue/tsconfig from 0.5.1 to 0.9.1 (password_policy#987)

photos

• Ci(actions): Update workflow templates from organization template repository (photos#3511)
• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3588)
• Fix npm audit (photos#3591)
• Ci(actions): Update workflow templates from organization template repository (photos#3598)
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.2.2 (photos#3618)
• Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 (photos#3635)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3637)
• Chore(test): Migrate to @nc/e2e-test-server (photos#3645)

privacy

• Ci(actions): Update workflow templates from organization template repository (privacy#1359)
• Chore: Add `update-stable-titles` workflow (privacy#1384)
• Ci(actions): Update workflow templates from organization template repository (privacy#1394)

recommendations

• Fix npm audit (recommendations#1063)
• Fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (recommendations#1121)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1127)

related_resources

• Chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 (related_resources#846)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1031)
• Update nextcloud/ocp dependency (serverinfo#1034)
• Use a parameterized translation for CPU thread count (serverinfo#1040)

suspicious_login

• Chore(psalm): Update to psalm 6 (suspicious_login#1069)
• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1130)

text

• Update nextcloud/ocp dependency (text#8771)
• Fix npm audit (text#8772)
• Fix(autofocus): persist cursor positions in localStorage (text#8777)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8781)
• Fix(ActionInsertLink): allow to get title from link picker (text#8790)
• Fix(markdown): preserve horizontal rule markup (text#8793)
• Fix npm audit (text#8818)
• Chore(deps): update dependency vite to ^7.3.6 (text#8835)
• Chore(deps): update vitest monorepo to ^4.1.9 (text#8836)
• Fix(deps): update dependency prosemirror-markdown to ^1.13.5 (text#8837)
• Fix(ImageView): use `a` element for clickable items (text#8842)
• Ci(playwright): fix installing pinned NPM version (text#8846)
• Chore(deps): update vitest monorepo to ^4.1.10 (text#8850)
• Fix(links): scroll to anchor links directly (text#8862)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8864)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8867)
• Chore(deps): bump @nextcloud/vue to 8.40.0 (text#8873)
• Fix(Table): allow changing list indention inside tables (text#8877)
• Fix(share): detect if documentId is outside of share early (text#8881)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1381)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1388)
• Fix npm audit (twofactor_nextcloud_notification#1391)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (twofactor_nextcloud_notification#1398)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1404)
• Fix npm audit (twofactor_nextcloud_notification#1406)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (twofactor_nextcloud_notification#1412)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1416)

twofactor_totp

• Fix npm audit (twofactor_totp#1756)
• Ci: update codecov action to v7 (twofactor_totp#1788)
• Chore(deps): bump actions/setup-node digest to 2499707 (twofactor_totp#1825)
• Ci: drop unused app publish workflow (twofactor_totp#1837)

[blizzz]

Nextcloud 32.0.13rc1

server

• Fix(sharing): Align userid config key in UserPlugin with Manager (server#58988)
• Fix: fix LazyUserFolder::getMountPoint (server#59653)
• Fix(files_sharing): Drop trailing ‘?’ from public download redirect URL (server#59884)
• Occ commands for listing and refreshing mounts (server#59890)
• Quota wrapper fixes (server#60130)
• Fix(files): use displayname rather than basename to use progress (server#60623)
• Fix: use card interface instead of object (server#61250)
• Fix(files_sharing): Hide incompatible actions in shares (server#61436)
• Chore(deps): Bump dompurify from 3.4.8 to 3.4.10 (server#61464)
• Chore(deps-dev): Bump sass from 1.100.0 to 1.101.0 (server#61465)
• Chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 (server#61466)
• Fix(files_sharing): remove filename’s leading slash on unshare toast (server#61526)
• Perf: block more properties from using the custom properties backend (server#61542)
• Fix(settings): correct heading order in account management sidebar (server#61545)
• Fix: Make the IProvideUserSecretBackend usable (server#61548)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61569)
• Fix(user_status): stabilise the user_status (server#61618)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61643)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61667)
• Build(deps): Composer audit updates (server#61699)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61713)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61744)
• Chore(deps): bump libphonenumber-js from 1.13.6 to 1.13.7 (server#61791)
• Chore(deps): bump dompurify from 3.4.10 to 3.4.11 (server#61792)
• Chore(deps): bump query-string from 9.4.0 to 9.4.1 (server#61793)
• Chore(deps-dev): bump tar from 7.5.16 to 7.5.19 (server#61794)
• Fix: don’t return cache entries with null paths (server#61836)
• Fix(Sharing): Don’t break cache entry by setting path to null (server#61844)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61860)
• Fix(DeclarativeManager): Fix admin delegation (server#61874)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61890)
• Fix: hide scroll bar in unified search when not needed (server#61911)
• Fix(files): distinguish between files and folders for validation messages (server#61921)
• Feat: Disable callable serialization in sabre/xml (server#61926)
• Test: fix HEIC tests (server#61927)
• Feat: Fetch groups in batch in getUserGroups (server#61934)
• Fix(Storage): use `proxyexclude` parameter in DAV client (server#61967)
• Feat(login): clean remember me tokens (server#61970)
• Chore(deps): bump phpunit/phpunit from 10.5.63 to 10.5.64 in /vendor-bin/phpunit (server#62001)
• Chore(deps-dev): bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 (server#62008)
• Chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 (server#62014)
• Master] fix(security): Update code signing revocation list (server#62042)
• Master] fix(security): Update code signing revocation list (server#62048)
• Perf(workflow): Implement result cache for IP checks (server#62055)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62067)
• Fix(caldav): url-encode owner/user in activity event links (server#62073)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62101)
• Fix(UserPlugin): Don’t return mail matches on user id search (server#62111)
• 32.0.13 RC1 (server#62115)
• Fix(UserPlugin): Don’t return disabled users on user ID and mail match (server#62117)
• Ci: migrate from buildjet to cache action (server#62123)
• Rate limiting for creating federated shares (server#62131)
• Fix(files): fix custom client-side error messages on move/copy actions (server#62133)
• Fix: Disable imagick preview providers (server#62149)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62152)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62158)
• Fix(preview): properly handle encoded content (server#62175)
• Fix(s3): trim multiple spaces to single space in original path header (server#62181)
• Master] fix(security): Update code signing revocation list (server#62186)
• Show group display name when the group object is not loaded yet (server#62194)
• Fix(cache): make clear() redis cluster compatible (server#62203)
• Revert group display name fix (server#62206)
• Fix(dav): release part-file lock when an upload fails (server#62214)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2500)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2514)

activity

• Update nextcloud/ocp dependency (activity#2672)
• Update nextcloud/ocp dependency (activity#2719)
• Chore(deps): update github actions (activity#2770)
• Chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (activity#2783)
• Update nextcloud/ocp dependency (activity#2786)

app_api

• Chore(deps): Bump @nextcloud/moment from 1.3.1 to 1.3.5 (app_api#915)
• Chore(deps): Bump marked from 14.1.1 to 14.1.4 (app_api#916)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 (app_api#917)
• Chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1 (app_api#918)
• Chore(deps): Bump @nextcloud/files from 3.9.0 to 3.9.2 (app_api#919)
• Feat: add release relay gh workflow (app_api#922)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#932)

bruteforcesettings

• Fix npm audit (bruteforcesettings#1125)
• Update nextcloud/ocp dependency (bruteforcesettings#1156)
• Ci(actions): Update workflow templates from organization template repository (bruteforcesettings#1162)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (bruteforcesettings#1181)

circles

• Ci(actions): Update workflow templates from organization template repository (circles#2499)
• Update nextcloud/ocp dependency (circles#2546)
• Fix: update stubs with provokateurin/php-stubs-updater (circles#2563)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2574)
• Update nextcloud/ocp dependency (circles#2581)
• Chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 (circles#2586)
• Chore(deps-dev): bump vue-tsc from 3.0.5 to 3.0.11 (circles#2588)
• Chore(deps): bump @nextcloud/axios from 2.5.1 to 2.5.2 (circles#2591)
• Chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 (circles#2593)
• Chore(deps): bump @nextcloud/dialogs from 7.0.0-rc.1 to 7.0.1 (circles#2596)
• Chore(deps-dev): bump vite from 7.3.1 to 7.3.6 (circles#2599)
• Chore(deps): bump @nextcloud/logger from 3.0.2 to 3.0.3 (circles#2600)
• Chore(deps): bump @nextcloud/vue from 9.0.0-rc.6 to 9.0.1 (circles#2601)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2612)
• Chore(reuse): add missing BSD-3-Clause.txt license (circles#2613)
• Ci(actions): Update workflow templates from organization template repository (circles#2627)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2638)

files_downloadlimit

• Fix npm audit (files_downloadlimit#624)
• Chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 (files_downloadlimit#711)
• Chore(deps-dev): Bump eslint from 9.39.2 to 9.39.4 (files_downloadlimit#737)
• Chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 (files_downloadlimit#788)
• Fix npm audit (files_downloadlimit#862)

files_pdfviewer

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 (files_pdfviewer#1461)
• Chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 (files_pdfviewer#1469)

firstrunwizard

• Fix npm audit (firstrunwizard#2086)
• Chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 (firstrunwizard#2109)
• Update nextcloud/ocp dependency (firstrunwizard#2119)
• Chore(deps): Bump vue from 3.5.34 to 3.5.39 (firstrunwizard#2136)
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (firstrunwizard#2151)

logreader

• Update nextcloud/ocp dependency (logreader#2070)
• Fix npm audit (logreader#2074)
• Update nextcloud/ocp dependency (logreader#2089)
• Chore(deps-dev): bump @nextcloud/browserslist-config from 3.1.0 to 3.1.2 (logreader#2095)
• Chore(deps-dev): bump vite from 7.3.5 to 7.3.6 (logreader#2098)
• Chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 (logreader#2108)
• Fix npm audit (logreader#2114)

nextcloud_announcements

• Update nextcloud/ocp dependency (nextcloud_announcements#652)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#658)
• Update nextcloud/ocp dependency (nextcloud_announcements#664)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#665)
• Ci(actions): Update workflow templates from organization template repository (nextcloud_announcements#671)

notifications

• Ci(actions): Update workflow templates from organization template repository (notifications#3127)
• Fix npm audit (notifications#3132)
• Test: Push notification payload (notifications#3146)
• Update nextcloud/ocp dependency (notifications#3153)
• Feat: Show request time to the push proxy (notifications#3156)
• Build(deps): Bump vue from 3.5.35 to 3.5.38 (notifications#3163)
• Ci(actions): Update workflow templates from organization template repository (notifications#3167)
• Fix npm audit (notifications#3172)
• Build(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (notifications#3177)
• Build(deps): Bump vue from 3.5.38 to 3.5.39 (notifications#3180)
• Build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 (notifications#3188)
• Ci(actions): Update workflow templates from organization template repository (notifications#3194)
• Update nextcloud/ocp dependency (notifications#3204)

password_policy

• Chore(deps): Bump @nextcloud/dialogs from 6.3.1 to 6.4.2 (password_policy#862)
• Chore(deps-dev): Bump vite from 6.3.5 to 6.4.2 (password_policy#942)
• Chore(deps): Bump @nextcloud/vue from 8.35.0 to 8.39.0 (password_policy#949)
• Chore(deps-dev): Bump sass from 1.97.3 to 1.99.0 (password_policy#955)
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 (password_policy#983)

photos

• Chore(deps-dev): Bump typescript from 5.8.3 to 5.9.3 (photos#3430)
• Chore(deps): Bump axios from 1.16.0 to 1.18.1 (photos#3439)
• Ci(actions): Update workflow templates from organization template repository (photos#3510)
• Ci(actions): Update workflow templates from organization template repository (photos#3599)
• Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.4 to 3.2.6 (photos#3619)
• Chore(deps): Bump qs from 6.14.2 to 6.15.2 (photos#3622)
• Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 (photos#3644)
• Chore(deps-dev): Bump postcss from 8.5.13 to 8.5.16 (photos#3654)

privacy

• Ci(actions): Update workflow templates from organization template repository (privacy#1360)
• Fix npm audit (privacy#1361)
• Chore: Add `update-stable-titles` workflow (privacy#1385)
• Fix npm audit (privacy#1396)

recommendations

• Fix npm audit (recommendations#1061)
• Ci(actions): Update workflow templates from organization template repository (recommendations#1128)

serverinfo

• Ci(actions): Update workflow templates from organization template repository (serverinfo#1029)
• Update nextcloud/ocp dependency (serverinfo#1038)

survey_client

• Update nextcloud/ocp dependency (survey_client#444)

text

• Fix(SessionService): sanitize displayName to utf8 encoding (text#8405)
• Chore(deps): update dependency vite to ^7.3.6 (text#8731)
• Chore(deps): update vitest monorepo to ^3.2.6 (text#8732)
• Update nextcloud/ocp dependency (text#8737)
• Fix npm audit (text#8742)
• Fix(editorApi): use onMentionSearch callback if provided (text#8784)
• Update nextcloud/ocp dependency (text#8814)
• Fix npm audit (text#8819)
• Chore(deps): update vitest monorepo to ^3.2.7 (text#8838)
• Fix(ImageView): use `a` element for clickable items (text#8841)
• Fix(links): scroll to anchor links directly (text#8868)
• Fix(share): detect if documentId is outside of share early (text#8882)

twofactor_nextcloud_notification

• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1384)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1385)
• Fix npm audit (twofactor_nextcloud_notification#1390)
• Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1400)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1403)
• Fix npm audit (twofactor_nextcloud_notification#1407)
• Ci(actions): Update workflow templates from organization template repository (twofactor_nextcloud_notification#1417)

twofactor_totp

• Fix npm audit (twofactor_totp#1765)
• Ci: update codecov action to v7 (twofactor_totp#1787)
• Ci: drop unused app publish workflow (twofactor_totp#1836)