RC1s of 34.0.3, 33.0.8, 32.0.14

[blizzz]

RC1s of 34.0.3, 33.0.8 and 32.0.14

Maintenance releases of 34.0.3, 33.0.8 and32.0.14 are coming next Thursday and first RCs for those are now available on download servers.

As always, help with testing is very much welcome!

We updated our servers, did our tests, and the release candidates seem pretty decent. Still, give it a whirl and report back here so we’re even more sure that it’s good to go! If you notice anything out of order, please report back on the appropriate GitHub repository!

Downloads

• Nextcloud Server 34.0.3 RC1 on GitHub
• Nextcloud Server 33.0.8 RC1 on GitHub
• Nextcloud Server 32.0.14 RC1 on GitHub

Changelog

Nextcloud 34.0.3rc1

server

• Perf: Replace more calls from getUserGroups to getUserGroupIds (server#62223)
• Improve logout url generation (server#62234)
• Fix: Output shape validation will delete keys when there is a list of files (server#62237)
• Chore: undeprecate the redis cache backend (server#62266)
• Fix(jobs): resolve portability issues with background job cleanup (server#62279)
• Fix(files_external/SMB): Use ‘null’ explicitly for no workgroup (server#62281)
• Fix(files): preserve encryptedVersion when copying cache entries (server#62337)
• Fix(preview): Handle unique constraints violation exception (server#62363)
• Fix(CleanupLoginTokens): Specify the table (server#62409)
• Fix(AmazonS3): pass S3 error messages through to the frontend (server#62418)
• Master] fix(security): Update CA certificate bundle (server#62437)
• Fix(SetupChecks): Link to task processing worker docs (server#62443)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62449)
• Fix: Don’t add empty and broken ExternalShareScanJob on upgrade (server#62451)
• Fix(background-jobs): preserve Snowflake IDs as strings (server#62457)
• Fix: harden object store against copying a file to itself (server#62461)
• Fix: Use PHP_AUTH_PW for strict password confirmation (server#62537)
• Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62584)
• Perf: Use hash map to check if path was already checked (server#62588)
• Fix(TaskProcessing): Claim tasks atomically in both SynchronousBackgr… (server#62608)
• Perf(preview): Optimize retriving all previews from oc_filecache (server#62611)
• Fix(unified-search): catch errors in response (server#62616)
• Chore(previews): add file signature check before opening files (server#62620)
• Test(version-check): Fix flaky test (server#62623)
• Master] fix(security): Update code signing revocation list (server#62652)
• Fix(search): Add end date for last 7 and last 30 days (server#62685)
• Fix(caldav): Expand recurring events for principal calendar search (server#62693)
• Optimize propagator (server#62699)
• Expend a bit OCP\GlobalScale\IConfig (server#62700)
• Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62702)
• Fix(Database): Use real idle-timer to prevent `lastInsertId` being reset on MariaDB/MySQL (server#62714)
• Fix(imip): add context to imip log messages (server#62723)
• Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62733)
• Fix(jobs): compute memory usage after clean-up (server#62768)
• Fix(metadata): bind chunked file ids (server#62771)
• Perf(user-display-name): Check memory cache before trying redis (server#62778)
• Fix(encryption): Correctly report size for zero-byte encrypted files (server#62780)
• More logging around partfile rename failures (server#62782)
• Fix(provisioning_api): read newUser.sendEmail as a boolean (server#62784)
• Fix(encryption): handle decryption exception with outdated passwords (server#62788)
• Test(TestCase): restore unregistered services correctly (server#62790)
• Fix(imip): don’t report success when a calendar cannot process iMip (server#62792)
• Fix(share): Avoid crash when share owner is not found (server#62798)
• Fix(systemTags): setObjectIdsForTag() dispatches once (server#62801)
• Test: migrate to Playwright (server#62803)
• Fix: handle sftp private key as password (server#62824)
• Host/ip validator hardenings (server#62829)
• Fix: disable direct link if link shares are disabled (server#62832)
• Check free space in the proper folder when restoring from trash (server#62837)
• Fix: clear key password after loading key (server#62850)
• Fix(direct editing): cleanup tokens on user deletion (server#62862)
• Fix(dav): properly finalize with MOVE only (server#62876)
• Fix(appstore): initialize the exApps store when enabled (server#62881)
• Fix(share): do not re-accept rejected shares (server#62891)
• Hide personal settings of apps not enabled for the user (server#62901)
• Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62908)
• Fix(share): Prevent type error caused by non-existing user (server#62912)
• Feat: Allow to check user existence outside specific user backends (server#62917)
• Fix: require admin permissions for all systemtag updates (server#62924)
• Fix(files_sharing): skip unresolvable share recipients (server#62928)
• Feat(lookup): search for local account only via lookupserver (server#62934)
• Fix(sharing): properly handle verification of copy/move actions (server#62937)
• Feat: allow specifying applicable users and groups in the files_external:create command (server#62949)
• Fix(setup): make sure CAN_INSTALL error page is shown (server#62953)
• Fix(trashbin): properly show deleted by for federated shares (server#62965)
• Fix(auth): log invalid token during password reset (server#62970)
• Fix(PublicPreview): Call getMimetype() on File objects (server#62976)
• Fix: Handle 2fa enforcement earlier (server#62983)
• Fix(ObjectStore): reset multipart upload byte counter on retry (server#62994)
• Fix(console): write app command loading errors to stderr (server#62998)
• Fix(files): do not let a failing move hook break the move or hide files (server#63001)
• Fix(settings): missing end of html tag (server#63016)
• Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#63020)
• Fix(files): remove leading slash from destination in copy/move toast (server#63039)
• Fix: improve logging when failing to get newly created user (server#63075)
• Fix(lookup-server): accept self-signed lus on globalscale (server#63076)
• Fix(files_trashbin): cleanup trash metadata after failed cross-user moves (server#63088)
• Fix: throw better error message if a user doesn’t have a key even though it should have (server#63093)
• Fix(CalDAV): Check for user status before serving public calendars (server#63105)
• Feat(federation): Add accept/decline mechanism for federated calendars (server#63113)

activity

• Refactor(tests): migrate e2e test suite from Cypress to Playwright (activity#2633)
• Fix(deps): pin nextcloud/ocp to dev-stable34 in psalm vendor-bin (activity#2790)
• Perf(files): compute move/rename activity settings once (activity#2794)
• Fix: do not fail moves when the old location cannot be resolved (activity#2798)
• Fix(expire): delete conditions for activity_expire_exclude_users (activity#2806)
• Feat: adding an option to exclude users from the acitivity log (activity#2808)
• Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2830)

app_api

• Ci(tests-deploy): wait until Nextcloud is installed before enabling AppAPI (app_api#955)

circles

• Avoid duplicate purge on inheritance (circles#2689)
• Fix(local-controller): validate when trying adding member of type contact (circles#2703)
• Fix: Use global members limit as default for circle (circles#2706)
• Fix: add promoteToOwner method (circles#2715)
• Fix(circles): preserve group display names when creating circles (circles#2724)

files_downloadlimit

• Fix: allow higher download limits than 500 (files_downloadlimit#907)

files_pdfviewer

• Fix: Add explicit dependency for vue-loader@legacy (files_pdfviewer#1498)
• Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1505)
• Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1513)

notifications

• Fix(push): Fix undefined index when accessing token age (notifications#3225)
• Build(deps): Bump guzzlehttp/guzzle (notifications#3240)
• Perf(push): Send push notifications async to proxies (notifications#3246)
• Fix(webpush): Skip browsers when disabled (notifications#3248)

photos

• Chore: adjust PHP dependencies (photos#3706)
• Fix(dav): properly handle metadata (photos#3714)

related_resources

• Ci(psalm): Fix nextcloud/ocp update (related_resources#1047)

serverinfo

• Fix: Mark update storage stats as time insensitive (serverinfo#1087)

text

• Fix: add file-access check (text#8918)
• Fix: Pasting from excel inserts an image instead of a formatted table (text#8920)
• Fix(collaboration): ellipsise user caret labels (text#8926)
• Fix/autosave timer (text#8928)
• Fix: update ShowImageModal to use fullUrl for show original image instead of preview (text#8946)
• Fix(editor): fix viewer header overlaying page content on mobile (text#8953)
• Fix(DirectEditing): check if user is enabled (text#8959)
• Fix(sync): reset #sending flag when no active connection on sendStepsNow (text#8965)
• Fix(attachments): check documentId matches (text#8967)
• Chore(test): direct editing permissions (text#8975)
• Test(playwright): don’t set `webServer.url` parameter (text#8976)
• Fix: guard access to unavailable extensions when rich editing is off (text#8981)
• Fix(editor): set `translate=yes` for read-only editor (text#8982)
• Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9024)
• Fix(LinkPicker): improve suggestions order and rename ‘Files’ (text#9025)

viewer

• Test: migrate e2e tests from Cypress to Playwright (viewer#3275)
• Chore: replace node.yml workflow with npm-build.yml (viewer#3282)

Nextcloud 33.0.8rc1

server

• Fix(files_sharing): preserve unmasked permissions as scan_permissions (server#62217)
• Perf: Replace more calls from getUserGroups to getUserGroupIds (server#62222)
• Improve logout url generation (server#62235)
• Fix: Output shape validation will delete keys when there is a list of files (server#62238)
• Fix(files_external/SMB): Use ‘null’ explicitly for no workgroup (server#62280)
• Fix(files): properly handle folders without permissions (server#62319)
• Fix(files): preserve encryptedVersion when copying cache entries (server#62338)
• Fix(files_sharing): Use share id in file actions (server#62402)
• Fix(CleanupLoginTokens): Specify the table (server#62410)
• Fix(AmazonS3): pass S3 error messages through to the frontend (server#62419)
• Master] fix(security): Update CA certificate bundle (server#62436)
• Fix(SetupChecks): Link to task processing worker docs (server#62442)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62448)
• Fix: Don’t add empty and broken ExternalShareScanJob on upgrade (server#62452)
• Fix(background-jobs): preserve Snowflake IDs as strings (server#62456)
• Fix: harden object store against copying a file to itself (server#62462)
• Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62583)
• Perf(preview): Optimize retriving all previews from oc_filecache (server#62603)
• Fix(unified-search): catch errors in response (server#62614)
• Chore(previews): add file signature check before opening files (server#62619)
• Test(version-check): Fix flaky test (server#62622)
• Master] fix(security): Update code signing revocation list (server#62653)
• Fix(search): Add end date for last 7 and last 30 days (server#62684)
• Fix(caldav): Expand recurring events for principal calendar search (server#62692)
• Expend a bit OCP\GlobalScale\IConfig (server#62701)
• Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62703)
• Fix(imip): add context to imip log messages (server#62721)
• Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62732)
• Perf(user-display-name): Check memory cache before trying redis (server#62777)
• Fix(encryption): Correctly report size for zero-byte encrypted files (server#62779)
• More logging around partfile rename failures (server#62783)
• Fix(provisioning_api): read newUser.sendEmail as a boolean (server#62785)
• Fix(encryption): handle decryption exception with outdated passwords (server#62787)
• Test(TestCase): restore unregistered services correctly (server#62789)
• Fix(imip): don’t report success when a calendar cannot process iMip (server#62793)
• Fix(systemTags): setObjectIdsForTag() dispatches once (server#62800)
• Fix: handle sftp private key as password (server#62823)
• Host/ip validator hardenings (server#62828)
• Fix: disable direct link if link shares are disabled (server#62831)
• Check free space in the proper folder when restoring from trash (server#62836)
• Fix: clear key password after loading key (server#62849)
• Fix(direct editing): cleanup tokens on user deletion (server#62863)
• Fix(dav): properly finalize with MOVE only (server#62875)
• Fix(share): do not re-accept rejected shares (server#62890)
• Fix: throw better error message if a user doesn’t have a key even though it should have (server#62892)
• Fix(preview): Handle unique constraints violation exception (server#62893)
• Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62907)
• Fix(share): Prevent type error caused by non-existing user (server#62911)
• Feat: Allow to check user existence outside specific user backends (server#62916)
• Fix: require admin permissions for all systemtag updates (server#62923)
• Fix(files_sharing): skip unresolvable share recipients (server#62927)
• Feat(lookup): search for local account only via lookupserver (server#62935)
• Fix(sharing): properly handle verification of copy/move actions (server#62938)
• Feat: allow specifying applicable users and groups in the files_external:create command (server#62948)
• Fix: Use PHP_AUTH_PW for strict password confirmation (server#62956)
• Fix(share): Avoid crash when share owner is not found (server#62960)
• Fix(trashbin): properly show deleted by for federated shares (server#62966)
• Fix(auth): log invalid token during password reset (server#62969)
• Fix(PublicPreview): Call getMimetype() on File objects (server#62977)
• Fix: Handle 2fa enforcement earlier (server#62984)
• Fix(ObjectStore): reset multipart upload byte counter on retry (server#62995)
• Fix(console): write app command loading errors to stderr (server#62997)
• Fix(files): do not let a failing move hook break the move or hide files (server#63000)
• Fix(settings): missing end of html tag (server#63015)
• Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#63019)
• Fix(files): remove leading slash from destination in copy/move toast (server#63038)
• Fix: improve logging when failing to get newly created user (server#63074)
• Fix(lookup-server): accept self-signed lus on globalscale (server#63081)
• Chore(deps): bump @vueuse/integrations from 14.3.0 to 14.4.0 (server#63087)
• Fix(CalDAV): Check for user status before serving public calendars (server#63107)
• Feat(federation): Add accept/decline mechanism for federated calendars (server#63115)

activity

• Fix(expire): delete conditions for activity_expire_exclude_users (activity#2807)
• Feat: adding an option to exclude users from the acitivity log (activity#2809)
• Chore: run composer cs:fix to satisfy php-cs (activity#2832)
• Refactor(tests): migrate e2e test suite from Cypress to Playwright (activity#2833)

circles

• Avoid duplicate purge on inheritance (circles#2688)
• Fix(local-controller): validate when trying adding member of type contact (circles#2702)
• Fix: Use global members limit as default for circle (circles#2705)
• Fix: add promoteToOwner method (circles#2714)
• Fix(circles): preserve group display names when creating circles (circles#2723)

files_pdfviewer

• Ci: Bump vimeo/psalm from 5.25.0 to 6.16.1 in /vendor-bin/psalm (files_pdfviewer#1447)
• Fix: Add explicit dependency for vue-loader@legacy (files_pdfviewer#1497)
• Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1504)
• Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1512)

photos

• Chore resolve dependency issues (photos#3707)
• Fix(dav): properly handle metadata (photos#3713)

related_resources

• Build: Fix required PHP version and missing nextcloud/ocp updates (related_resources#1036)

serverinfo

• Fix: Mark update storage stats as time insensitive (serverinfo#1086)

text

• Fix: Pasting from excel inserts an image instead of a formatted table (text#8921)
• Fix(collaboration): ellipsise user caret labels (text#8925)
• Fix: update ShowImageModal to use fullUrl for show original image instead of preview (text#8947)
• Fix(editor): fix viewer header overlaying page content on mobile (text#8954)
• Fix(DirectEditing): check if user is enabled (text#8960)
• Fix(sync): reset #sending flag when no active connection on sendStepsNow (text#8964)
• Fix(attachments): check documentId matches (text#8971)
• Chore(test): direct editing permissions (text#8974)
• Fix: guard access to unavailable extensions when rich editing is off (text#8983)
• Fix(editor): set `translate=yes` for read-only editor (text#8984)
• Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9023)
• Fix(LinkPicker): improve suggestions order and rename ‘Files’ (text#9026)

viewer

• Chore: replace node.yml workflow with npm-build.yml (viewer#3281)

Nextcloud 32.0.14rc1

server

• Perf: Don’t fetch full group object in AuthorizedGroupMapper (server#61850)
• Fix: Output shape validation will delete keys when there is a list of files (server#62239)
• Fix(files): preserve encryptedVersion when copying cache entries (server#62339)
• Perf(carddav): reduce disk usage of photocache (server#62342)
• Fix(CleanupLoginTokens): Specify the table (server#62411)
• Fix(AmazonS3): pass S3 error messages through to the frontend (server#62420)
• Master] fix(security): Update CA certificate bundle (server#62440)
• Fix(SetupChecks): Link to task processing worker docs (server#62441)
• Fix: harden object store against copying a file to itself (server#62463)
• Perf: Replace more calls from getUserGroups to getUserGroupIds (server#62467)
• Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62582)
• Fix(unified-search): catch errors in response (server#62615)
• Chore(previews): add file signature check before opening files (server#62618)
• Test(version-check): Fix flaky test (server#62621)
• Master] fix(security): Update code signing revocation list (server#62654)
• Fix(caldav): Expand recurring events for principal calendar search (server#62691)
• Fix(search): Add end date for last 7 and last 30 days (server#62696)
• Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62704)
• Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62731)
• Expend a bit OCP\GlobalScale\IConfig (server#62799)
• Fix: handle sftp private key as password (server#62822)
• Host/ip validator hardenings (server#62827)
• Fix: disable direct link if link shares are disabled (server#62830)
• Check free space in the proper folder when restoring from trash (server#62835)
• Fix: clear key password after loading key (server#62848)
• Fix(direct editing): cleanup tokens on user deletion (server#62864)
• Fix(dav): properly finalize with MOVE only (server#62874)
• Fix(share): do not re-accept rejected shares (server#62889)
• Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62906)
• Feat: Allow to check user existence outside specific user backends (server#62915)
• Fix: require admin permissions for all systemtag updates (server#62922)
• Fix(sharing): properly handle verification of copy/move actions (server#62939)
• Fix: Use PHP_AUTH_PW for strict password confirmation (server#62955)
• Fix(auth): log invalid token during password reset (server#62968)
• Fix(PublicPreview): Call getMimetype() on File objects (server#62979)
• Fix: Handle 2fa enforcement earlier (server#62985)
• Fix(console): write app command loading errors to stderr (server#62996)
• Fix(settings): missing end of html tag (server#63014)
• Fix(files): remove leading slash from destination in copy/move toast (server#63037)
• Fix: improve logging when failing to get newly created user (server#63073)
• Fix(lookup-server): accept self-signed lus on globalscale (server#63082)
• Fix: throw better error message if a user doesn’t have a key even though it should have (server#63092)
• Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#63098)
• Fix(files): do not let a failing move hook break the move or hide files (server#63103)
• Fix(CalDAV): Check for user status before serving public calendars (server#63110)
• Feat(federation): Add accept/decline mechanism for federated calendars (server#63116)

activity

• Fix: do not fail moves when the old location cannot be resolved (activity#2796)
• Fix(build): exclude iOS Safari < 12 from browserslist targets (activity#2827)
• Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2828)
• Chore: run composer cs:fix to satisfy php-cs (activity#2831)

circles

• Fix: Use global members limit as default for circle (circles#2704)
• Fix: add promoteToOwner method (circles#2713)
• Fix(local-controller): validate when trying adding member of type contact (circles#2720)
• Fix(circles): preserve group display names when creating circles (circles#2725)

files_pdfviewer

• Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1503)
• Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1511)

photos

• Fix(dav): properly handle metadata (photos#3712)

related_resources

• Ci(psalm): Fix nextcloud/ocp update (related_resources#1046)

text

• Fix: ActionInsertLink): allow to get title from link picker (text#8929)
• Fix: update ShowImageModal to use fullUrl for show original image instead of preview (text#8949)
• Fix(editor): fix viewer header overlaying page content on mobile (text#8955)
• Fix(DirectEditing): check if user is enabled (text#8961)
• Fix(attachments): check documentId matches (text#8972)
• Chore(test): direct editing permissions (text#8973)
• Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9022)

viewer

• Chore: replace node.yml workflow with npm-build.yml (viewer#3280)