# RCs of 35.0.3, 34.0.6, 33.0.11

**URL:** <https://help.nextcloud.com/t/rcs-of-35-0-3-34-0-6-33-0-11/251717>\
**Category:** 🎁 Releases\
**Tags:** nc34, external\_storage, nc35, app\_api, groupfolders-app, nc33, webdav\
**Created:** [November 5, 2026, 5:25pm UTC](https://help.nextcloud.com/t/rcs-of-35-0-3-34-0-6-33-0-11/251717 "2026-11-05T17:25:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![blizzz](https://help.nextcloud.com/user_avatar/help.nextcloud.com/blizzz/32/133_2.png) [@blizzz](https://help.nextcloud.com/u/blizzz)\
**Post date:** [November 5, 2026, 5:25pm UTC](https://help.nextcloud.com/t/rcs-of-35-0-3-34-0-6-33-0-11/251717/1 "2026-11-05T17:25:50Z")

</div>

The first release candidates for our next maintenance updates are here: Nextcloud 35.0.3, 34.0.6, and 33.0.11! 📦

Your testing helps us catch issues before the final releases, so don’t hesitate to try them out!  
If something doesn’t behave as expected, please let us know on the appropriate GitHub repository! 🔍

The final releases are planned for next week, on November 12, 2026.

# Downloads

- [Nextcloud Server `35.0.3 RC1` on GitHub](https://github.com/nextcloud-releases/server/releases/v35.0.3rc1)
- [Nextcloud Server `34.0.6 RC1` on GitHub](https://github.com/nextcloud-releases/server/releases/v34.0.6rc1)
- [Nextcloud Server `33.0.11 RC1` on GitHub](https://github.com/nextcloud-releases/server/releases/v33.0.11rc1)

# Changelog

## Nextcloud 35.0.3rc1

### [server](https://github.com/nextcloud/server)

- [Fix(sharing): hide external sharing section when link sharing disabled (server#64335)](https://github.com/nextcloud/server/pull/64335)
- [Fix(files\_sharing): limit the share token input to the maximum token length (server#64710)](https://github.com/nextcloud/server/pull/64710)
- [Fix(settings): prevent user list crash when password changes are disabled (server#64912)](https://github.com/nextcloud/server/pull/64912)
- [Fix(globalscale): ignore lookupserver if empty config (server#65185)](https://github.com/nextcloud/server/pull/65185)
- [Fix(backupcodes): Dismiss notification on disabled provider (server#65318)](https://github.com/nextcloud/server/pull/65318)
- [Fix(admin-audit): Log when BFP was bypassed (server#65327)](https://github.com/nextcloud/server/pull/65327)
- [Fix(files\_sharing): preserve share expiration time (server#65403)](https://github.com/nextcloud/server/pull/65403)
- [Fix: add files\_metadata\_index to the filecache partition (server#65414)](https://github.com/nextcloud/server/pull/65414)
- [Fix(settings): add select event to AppNavigationGroupList and clear s… (server#65418)](https://github.com/nextcloud/server/pull/65418)
- [Chore: Add `testing:prepare-ci` command (server#65421)](https://github.com/nextcloud/server/pull/65421)
- [Improve performance of snowflake ids in cron jobs (server#65425)](https://github.com/nextcloud/server/pull/65425)
- [Fix(mail): embed image logo only when using useTemplate (server#65428)](https://github.com/nextcloud/server/pull/65428)
- [Fix: Remove unused $allStorages array in files\_external (server#65440)](https://github.com/nextcloud/server/pull/65440)
- [Fix/objectstore fopen basename ext (server#65441)](https://github.com/nextcloud/server/pull/65441)
- [Chore: Skip transaction when no preview exists (server#65446)](https://github.com/nextcloud/server/pull/65446)
- [Perf(files): cache the mimetype table (server#65448)](https://github.com/nextcloud/server/pull/65448)
- [Perf(app): cache the parsed app info as array (server#65449)](https://github.com/nextcloud/server/pull/65449)
- [Perf: Improve preview cold generation (server#65451)](https://github.com/nextcloud/server/pull/65451)
- [Chore: update code owners (server#65455)](https://github.com/nextcloud/server/pull/65455)
- [Fix(encryption): use the block size of the file encoding when fixing sizes (server#65460)](https://github.com/nextcloud/server/pull/65460)
- [Perf: Partition preview migration job (server#65464)](https://github.com/nextcloud/server/pull/65464)
- [Perf(preview): only autorotate with Imaginary when needed (server#65485)](https://github.com/nextcloud/server/pull/65485)
- [Fix(dav): handle 4-byte text consistently in calendar indexes (server#65488)](https://github.com/nextcloud/server/pull/65488)
- [Fix(appstore): only ask once for password confirmation (server#65496)](https://github.com/nextcloud/server/pull/65496)
- [Fix(user\_ldap): Use proper function builder instead of hardcoded COUNT (server#65501)](https://github.com/nextcloud/server/pull/65501)
- [Fix(migration): check if deleted\_by column exists before trying to add it to files\_trash table (server#65518)](https://github.com/nextcloud/server/pull/65518)
- [Fix(dav): adjust password session check on legacy dav auth (server#65541)](https://github.com/nextcloud/server/pull/65541)
- [Ci: run the guests integration tests against guests stable-4.10 (server#65554)](https://github.com/nextcloud/server/pull/65554)
- [Fix(files\_sharing): show the owner avatar for received shares (server#65560)](https://github.com/nextcloud/server/pull/65560)
- [Fix(files): normalize Unicode in node paths (server#65566)](https://github.com/nextcloud/server/pull/65566)
- [Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65572)](https://github.com/nextcloud/server/pull/65572)
- [Fix(sharebymail): Send readable password by mail instead of hash (server#65578)](https://github.com/nextcloud/server/pull/65578)
- [Fix(dav): resolve users before intersecting shares (server#65584)](https://github.com/nextcloud/server/pull/65584)
- [Chore: Update setup-php to 2.40.0 (server#65661)](https://github.com/nextcloud/server/pull/65661)
- [Fix: Playwright concurrency (server#65673)](https://github.com/nextcloud/server/pull/65673)
- [Fix: don’t try to load keys for empty path for groupfolder versions (server#65676)](https://github.com/nextcloud/server/pull/65676)
- [Fix(ui): Consider typing and scrolling as activity for auto logout (server#65691)](https://github.com/nextcloud/server/pull/65691)
- [Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65695)](https://github.com/nextcloud/server/pull/65695)
- [Fix(encryption): Remember the recalculated unencrypted size as int (server#65701)](https://github.com/nextcloud/server/pull/65701)
- [Fix: Remove auto increment migration on share\_external (server#65711)](https://github.com/nextcloud/server/pull/65711)
- [Fix(user\_ldap): remove leftover debug log in getUserFromCustomAttribute (server#65713)](https://github.com/nextcloud/server/pull/65713)
- [Fix: move column drop in to separate migration (server#65719)](https://github.com/nextcloud/server/pull/65719)
- [Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65734)](https://github.com/nextcloud/server/pull/65734)
- [Fix(dav): compare sync token retention against an absolute cutoff (server#65757)](https://github.com/nextcloud/server/pull/65757)
- [Perf(sharing): skip resolving group shares when there are none (server#65786)](https://github.com/nextcloud/server/pull/65786)
- [Hash validate legacy (server#65787)](https://github.com/nextcloud/server/pull/65787)
- [Feat: allow passing a cache entry to getMetadataForNode (server#65803)](https://github.com/nextcloud/server/pull/65803)
- [Fix(ci): clone vendored test apps from the matching stable branch (server#65875)](https://github.com/nextcloud/server/pull/65875)
- [Fix(files): skip quota check when opening files for reading (server#65880)](https://github.com/nextcloud/server/pull/65880)
- [Chore: flake update (server#65908)](https://github.com/nextcloud/server/pull/65908)
- [Fix(files\_sharing): public share popover jumps on options toggle (server#65913)](https://github.com/nextcloud/server/pull/65913)
- [Feat(Sharing): Allow remote owners and initiators (server#65915)](https://github.com/nextcloud/server/pull/65915)
- [Fix(since): Ensure provided since version is from the current branch (server#65924)](https://github.com/nextcloud/server/pull/65924)
- [Fix(files): upload files with empty mime type (server#65927)](https://github.com/nextcloud/server/pull/65927)
- [Fix(provisioning\_api): filter users by enabled state on the server (server#65929)](https://github.com/nextcloud/server/pull/65929)
- [Fix: move/rename of part file in masked dir/storage (server#65934)](https://github.com/nextcloud/server/pull/65934)
- [Fix: Remove avatar and credentials only after user removal (server#65948)](https://github.com/nextcloud/server/pull/65948)
- [Fix(core): use %n in the integrity check plural to avoid a crash in L10N (server#65958)](https://github.com/nextcloud/server/pull/65958)
- [Ci: sync workflows with .github (server#65961)](https://github.com/nextcloud/server/pull/65961)
- [Refactor: store state enums in unified sharing as ints (server#65966)](https://github.com/nextcloud/server/pull/65966)
- [Ci: bump dorny/paths-filter to v4.0.3 (server#65967)](https://github.com/nextcloud/server/pull/65967)
- [Fix(files\_sharing): Make sure mount events are dispatched for share recipients (server#65988)](https://github.com/nextcloud/server/pull/65988)
- [Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65991)](https://github.com/nextcloud/server/pull/65991)
- [Fix(versions): empty array for external shares (server#66005)](https://github.com/nextcloud/server/pull/66005)
- [Fix(dav): detect truncated CardDAV sync results on all databases (server#66012)](https://github.com/nextcloud/server/pull/66012)
- [Fix(dav): pair changed iTip instances by UID/RECURRENCE-ID instead of… (server#66015)](https://github.com/nextcloud/server/pull/66015)
- [Test(avatar): Check the guest avatar independent of the font renderer (server#66017)](https://github.com/nextcloud/server/pull/66017)
- [Build(deps): bump the symfony group across 1 directory with 10 updates (server#66030)](https://github.com/nextcloud/server/pull/66030)
- [Fix(dav): align public request path handling (server#66038)](https://github.com/nextcloud/server/pull/66038)
- [Fix: unique custom tokens for share links (server#66044)](https://github.com/nextcloud/server/pull/66044)
- [Fix(Security\Hasher): Guard PASSWORD\_ARGON2 constants with defined() check (server#66047)](https://github.com/nextcloud/server/pull/66047)
- [Build(deps): Bump Symfony packages (server#66133)](https://github.com/nextcloud/server/pull/66133)
- [Refactor: map sharing instances to ints, and add instance to indices (server#66145)](https://github.com/nextcloud/server/pull/66145)
- [Fix: properly handle webdav pagination headers (server#66156)](https://github.com/nextcloud/server/pull/66156)
- [Fix(external-share): move ExternalShareScanJob creation deeper (server#66157)](https://github.com/nextcloud/server/pull/66157)
- [Fix(avatar): add timeout and size limit when fetching remote avatars (server#66162)](https://github.com/nextcloud/server/pull/66162)
- [Fix(files\_external): reset EOF when seeking in SFTPReadStream (server#66166)](https://github.com/nextcloud/server/pull/66166)
- [Fix(log): Avoid crashes when building exception trace with a ghost (server#66172)](https://github.com/nextcloud/server/pull/66172)
- [Feat(files): expose forbidden filename capabilities publicly (server#66182)](https://github.com/nextcloud/server/pull/66182)
- [Fix: improve live-photo handling (server#66190)](https://github.com/nextcloud/server/pull/66190)
- [Fix(user\_ldap): Fix variable name conflict for cache key (server#66196)](https://github.com/nextcloud/server/pull/66196)
- [Fix(dav): bind public share session authentication to the password hash (server#66204)](https://github.com/nextcloud/server/pull/66204)
- [Feat(LocalStorage): add config option to configure min\_free\_space (server#66205)](https://github.com/nextcloud/server/pull/66205)
- [Fix(user\_ldap): do not cache unknown names in the local mapping cache (server#66209)](https://github.com/nextcloud/server/pull/66209)
- [Ci: drop cat of Imagick policy (server#66220)](https://github.com/nextcloud/server/pull/66220)
- [Fix(systemtags): properly handle object ids (server#66229)](https://github.com/nextcloud/server/pull/66229)
- [Fix(favorite): Limit tagging to favorite (server#66232)](https://github.com/nextcloud/server/pull/66232)
- [Fix(dav): do not grant write-properties to read-only calendar delegates (server#66237)](https://github.com/nextcloud/server/pull/66237)
- [Fix: Reject login with NUL bytes rather than converting (server#66242)](https://github.com/nextcloud/server/pull/66242)
- [Fix(provisioning\_api): group admins can’t add all users to groups (server#66265)](https://github.com/nextcloud/server/pull/66265)
- [Fix(share-folder): use it on federated share (server#66278)](https://github.com/nextcloud/server/pull/66278)
- [Fix(dav): register missing app config keys in the config lexicon (server#66281)](https://github.com/nextcloud/server/pull/66281)
- [Fix(encryption): Don’t use ChunkingV2Plugin when server-side encryption is enabled (server#66290)](https://github.com/nextcloud/server/pull/66290)
- [Fix(files): Continue scanning after StorageInvalidException (server#66291)](https://github.com/nextcloud/server/pull/66291)
- [Fix(session): Prevent stale requests from replacing a regenerated session (server#66295)](https://github.com/nextcloud/server/pull/66295)
- [Feat(federation): ignore remote contacts (server#66307)](https://github.com/nextcloud/server/pull/66307)
- [Fix(theming): only accept canonical svg paths for themed icons (server#66310)](https://github.com/nextcloud/server/pull/66310)
- [Fix(files): check that the source properly between storages (server#66315)](https://github.com/nextcloud/server/pull/66315)
- [Fix(dav): allow moves within own share when sharing is disabled (server#66331)](https://github.com/nextcloud/server/pull/66331)
- [Fix(quota): Calculate used quota for foreign users the correct way (server#66332)](https://github.com/nextcloud/server/pull/66332)
- [Fix(webhook\_listeners): Change Exception type (server#66343)](https://github.com/nextcloud/server/pull/66343)
- [Fix(tags): display selected tag in settings (server#66346)](https://github.com/nextcloud/server/pull/66346)
- [Refactor(session): use ITimeFactory for superseded session markers (server#66350)](https://github.com/nextcloud/server/pull/66350)
- [Ci(psalm): run taint analysis with all available threads (server#66356)](https://github.com/nextcloud/server/pull/66356)
- [Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66365)](https://github.com/nextcloud/server/pull/66365)
- [Fix(federatedfilesharing): match reshares by node, not by name (server#66373)](https://github.com/nextcloud/server/pull/66373)

### [activity](https://github.com/nextcloud/activity)

- [Correctly apply groupfolders acl (activity#3020)](https://github.com/nextcloud/activity/pull/3020)
- [Perf(activity): reintroduce activity\_object index (activity#3021)](https://github.com/nextcloud/activity/pull/3021)
- [Fix(api): fall back to MIME icon when preview generation fails (activity#3070)](https://github.com/nextcloud/activity/pull/3070)

### [app\_api](https://github.com/nextcloud/app_api)

- [Refactor(harp): compare the HaRP shared key with hash\_equals (app\_api#1118)](https://github.com/nextcloud/app_api/pull/1118)
- [Fix(deploy): round the memory and CPU limits to whole numbers (app\_api#1122)](https://github.com/nextcloud/app_api/pull/1122)
- [Fix(docker): no PHP warning for a HaRP daemon without a key (app\_api#1137)](https://github.com/nextcloud/app_api/pull/1137)
- [Fix(harp): send the route verb to HaRP (app\_api#1142)](https://github.com/nextcloud/app_api/pull/1142)
- [Fix(proxy): match the route verb like HaRP (app\_api#1145)](https://github.com/nextcloud/app_api/pull/1145)
- [Fix(harp): require HaRP 0.4.8 in the version check (app\_api#1150)](https://github.com/nextcloud/app_api/pull/1150)
- [Fix(proxy): refuse dot segments resolved after the route check (app\_api#1164)](https://github.com/nextcloud/app_api/pull/1164)
- [Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app\_api#1169)](https://github.com/nextcloud/app_api/pull/1169)
- [Fix(proxy): check routes on each reading of the path like HaRP (app\_api#1183)](https://github.com/nextcloud/app_api/pull/1183)

### [circles](https://github.com/nextcloud/circles)

- [Feature/implement default quota for groups (circles#2907)](https://github.com/nextcloud/circles/pull/2907)
- [Fix(teams): fix team folder ‘View in Files’ header link (circles#2943)](https://github.com/nextcloud/circles/pull/2943)
- [Fix(federation): fix shares and mount rename (circles#3026)](https://github.com/nextcloud/circles/pull/3026)
- [Revert #2454 (circles#3037)](https://github.com/nextcloud/circles/pull/3037)
- [Feat(command): add --delete option to circles:remote (circles#3045)](https://github.com/nextcloud/circles/pull/3045)
- [Fix(notifications): dismiss join request notification once processed (circles#3048)](https://github.com/nextcloud/circles/pull/3048)
- [Fix: only show shared resources that are still acessible (circles#3054)](https://github.com/nextcloud/circles/pull/3054)
- [Fix(mount-provider): Pass the recipient to the federated share storage (circles#3073)](https://github.com/nextcloud/circles/pull/3073)
- [Enh(performance): query memberships breadth first to reduce query count (circles#3080)](https://github.com/nextcloud/circles/pull/3080)
- [Add title html attr to team card display names (circles#3100)](https://github.com/nextcloud/circles/pull/3100)
- [Fix: Teams Pages editor doesn’t load (circles#3121)](https://github.com/nextcloud/circles/pull/3121)
- [Fix(shares): keep circle context when share is resolved via circle (circles#3126)](https://github.com/nextcloud/circles/pull/3126)
- [Fix(share): use setPasswordHash instead of setPassword when retrieving share (circles#3130)](https://github.com/nextcloud/circles/pull/3130)
- [Fix(notification): Make relative action links absolute when preparing (circles#3135)](https://github.com/nextcloud/circles/pull/3135)

### [files\_downloadlimit](https://github.com/nextcloud/files_downloadlimit)

- [Fix: disable props not supported with download limit (files\_downloadlimit#1080)](https://github.com/nextcloud/files_downloadlimit/pull/1080)
- [Ci: Add release relay job (files\_downloadlimit#1086)](https://github.com/nextcloud/files_downloadlimit/pull/1086)
- [Fix: count legacy share downloads only once (files\_downloadlimit#1089)](https://github.com/nextcloud/files_downloadlimit/pull/1089)

### [files\_lock](https://github.com/nextcloud/files_lock)

- [Fix: Bump version to 35.0.1 to execute migrations (files\_lock#1345)](https://github.com/nextcloud/files_lock/pull/1345)
- [Fix: allow force unlock without access of the lock owner (files\_lock#1363)](https://github.com/nextcloud/files_lock/pull/1363)
- [Fix(dav): extend the lock expiry on a WebDAV LOCK refresh (files\_lock#1366)](https://github.com/nextcloud/files_lock/pull/1366)
- [Feat(lock): remove locks of disabled or deleted users and on unshare (files\_lock#1391)](https://github.com/nextcloud/files_lock/pull/1391)
- [Fix(lock): only return string app names from getAppName (files\_lock#1398)](https://github.com/nextcloud/files_lock/pull/1398)

### [logreader](https://github.com/nextcloud/logreader)

- [Feat(search): replace search popover with inline search field (logreader#2317)](https://github.com/nextcloud/logreader/pull/2317)
- [Perf(LogIterator): Read long lines in linear time (logreader#2328)](https://github.com/nextcloud/logreader/pull/2328)
- [Fix(LogTable): load entries until screen is filled (logreader#2363)](https://github.com/nextcloud/logreader/pull/2363)

### [notifications](https://github.com/nextcloud/notifications)

- [Chore: Fix composer.lock hash (notifications#3463)](https://github.com/nextcloud/notifications/pull/3463)
- [Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3472)](https://github.com/nextcloud/notifications/pull/3472)
- [Feat: open the target when a background push notification is clicked (notifications#3480)](https://github.com/nextcloud/notifications/pull/3480)
- [Ci(performance): Update actions (notifications#3503)](https://github.com/nextcloud/notifications/pull/3503)
- [Fix(web-notifications): open notification link in a new tab (notifications#3538)](https://github.com/nextcloud/notifications/pull/3538)
- [Apply hardenings found by automated scanner (notifications#3541)](https://github.com/nextcloud/notifications/pull/3541)
- [Fix(web-push): improve fetching notifications with web-push (notifications#3550)](https://github.com/nextcloud/notifications/pull/3550)

### [photos](https://github.com/nextcloud/photos)

- [Fix(tags): read the tag id from the node instead of its attributes (photos#3871)](https://github.com/nextcloud/photos/pull/3871)
- [Fix(viewer): forward live photo metadata (photos#4005)](https://github.com/nextcloud/photos/pull/4005)
- [Chore(deps): combine pending dependency updates (photos#4029)](https://github.com/nextcloud/photos/pull/4029)
- [Fix(faces): Fix assigning unassigned faces to a person (photos#4032)](https://github.com/nextcloud/photos/pull/4032)
- [Honor EXIF OffsetTimeOriginal (photos#4039)](https://github.com/nextcloud/photos/pull/4039)
- [Fix(filters): respect share download permission in filtered albums (photos#4040)](https://github.com/nextcloud/photos/pull/4040)
- [Fix: proper component names (photos#4064)](https://github.com/nextcloud/photos/pull/4064)

### [privacy](https://github.com/nextcloud/privacy)

- [Chore(deps): combine pending dependency updates (privacy#1506)](https://github.com/nextcloud/privacy/pull/1506)

### [recommendations](https://github.com/nextcloud/recommendations)

- [Chore(deps): bump npm dependencies (recommendations#1202)](https://github.com/nextcloud/recommendations/pull/1202)

### [serverinfo](https://github.com/nextcloud/serverinfo)

- [Fix(linux): hide /boot and /boot/efi from disk list (serverinfo#1191)](https://github.com/nextcloud/serverinfo/pull/1191)
- [Feat: Show all users who logged at least once (serverinfo#1250)](https://github.com/nextcloud/serverinfo/pull/1250)
- [Fix(database): drop the join-without-index rules (serverinfo#1258)](https://github.com/nextcloud/serverinfo/pull/1258)
- [Use subscription count when support app is enabled (serverinfo#1267)](https://github.com/nextcloud/serverinfo/pull/1267)

### [text](https://github.com/nextcloud/text)

- [Fix(files): edited files marked locked in files list after close (text#9378)](https://github.com/nextcloud/text/pull/9378)
- [Tables: typescript and heading cell fixes (text#9384)](https://github.com/nextcloud/text/pull/9384)
- [Refactor version comparison (text#9386)](https://github.com/nextcloud/text/pull/9386)
- [Fix(attachments): rewrite attachment file ids when copying folders (text#9391)](https://github.com/nextcloud/text/pull/9391)
- [Fix(attachments): normalize attachment names to Unicode NFC (text#9396)](https://github.com/nextcloud/text/pull/9396)
- [Fix(migration): quote identifiers in oracle index creation (text#9397)](https://github.com/nextcloud/text/pull/9397)
- [Fix(math): import katex css from component (text#9401)](https://github.com/nextcloud/text/pull/9401)
- [Fix(notifications): notify mentioned users about mentions by guests (text#9402)](https://github.com/nextcloud/text/pull/9402)
- [Fix(table): paste copied table cells into target cells (text#9409)](https://github.com/nextcloud/text/pull/9409)
- [Test(comparison): destroy all editor views in decorations spec (text#9430)](https://github.com/nextcloud/text/pull/9430)
- [Fix(session): skip session lookup without session params (text#9443)](https://github.com/nextcloud/text/pull/9443)
- [Check permission (text#9445)](https://github.com/nextcloud/text/pull/9445)
- [Fix(migration): create text\_steps index ascending on oracle (text#9472)](https://github.com/nextcloud/text/pull/9472)
- [Fix(menu): make component actions work from the remaining actions menu (text#9473)](https://github.com/nextcloud/text/pull/9473)
- [Fix misc flaky tests (text#9479)](https://github.com/nextcloud/text/pull/9479)
- [Fix(session): close null user (text#9510)](https://github.com/nextcloud/text/pull/9510)
- [Perf(cleanup): Optimize cleanup job (text#9515)](https://github.com/nextcloud/text/pull/9515)
- [Fix(editor): do not force save when clicking the save indicator (text#9528)](https://github.com/nextcloud/text/pull/9528)
- [Perf(editor): only serialize markdown on update when it is read (text#9529)](https://github.com/nextcloud/text/pull/9529)
- [Fix: don’t silently drop outside changes (e.g. from external storage) (text#9530)](https://github.com/nextcloud/text/pull/9530)
- [Fix(FileContext): fix typo `computeChecksum()` -\> `computeCheckSum()` (text#9538)](https://github.com/nextcloud/text/pull/9538)
- [Fix(sync): improve situation around false conflicts (text#9547)](https://github.com/nextcloud/text/pull/9547)
- [Chore(dev-deps): pin rector to 2.8.1 and phpstan to 2.3.3 (text#9549)](https://github.com/nextcloud/text/pull/9549)
- [Fix: improve gap cursor usage (text#9554)](https://github.com/nextcloud/text/pull/9554)

### [twofactor\_nextcloud\_notification](https://github.com/nextcloud/twofactor_nextcloud_notification)

- [Ci(reuse): Fix reuse (twofactor\_nextcloud\_notification#1578)](https://github.com/nextcloud/twofactor_nextcloud_notification/pull/1578)

### [viewer](https://github.com/nextcloud/viewer)

- [Fix/noid/no drag cursor without zoom compiled (viewer#3361)](https://github.com/nextcloud/viewer/pull/3361)
- [Fix(viewer): register handlers not yet in the lookup table when opening a file (viewer#3423)](https://github.com/nextcloud/viewer/pull/3423)
- [Fix: only call the legacy files sidebar methods when they exist (viewer#3448)](https://github.com/nextcloud/viewer/pull/3448)
- [Fix(editor): save a JPEG with an uppercase extension as a JPEG (viewer#3450)](https://github.com/nextcloud/viewer/pull/3450)
- [Chore(deps): update stylelint to 17 (viewer#3454)](https://github.com/nextcloud/viewer/pull/3454)
- [Fix(viewer): skip duplicate handlers on init (viewer#3457)](https://github.com/nextcloud/viewer/pull/3457)
- [Fix(viewer): handle public shares on delete (viewer#3460)](https://github.com/nextcloud/viewer/pull/3460)
- [Fix(videos): use live photo metadata for poster (viewer#3461)](https://github.com/nextcloud/viewer/pull/3461)

## Nextcloud 34.0.6rc1

### [server](https://github.com/nextcloud/server)

- [Fix(files\_sharing): Use share id in file actions (server#62403)](https://github.com/nextcloud/server/pull/62403)
- [Chore: Improve phpunit performance (server#63398)](https://github.com/nextcloud/server/pull/63398)
- [Fix(chunkingUpload): sliding expiration based on upload activity (server#64026)](https://github.com/nextcloud/server/pull/64026)
- [Fix(files\_sharing): name the parent folder in inherited unshare actions (server#64350)](https://github.com/nextcloud/server/pull/64350)
- [Fix: Forward not found error in sabre (server#64940)](https://github.com/nextcloud/server/pull/64940)
- [Fix: Remove unused $allStorages array in files\_external (server#64988)](https://github.com/nextcloud/server/pull/64988)
- [Fix(kerberos): Allow again to specify empty url (server#64989)](https://github.com/nextcloud/server/pull/64989)
- [Test: enable filecache partitioning for one mysql test (server#65129)](https://github.com/nextcloud/server/pull/65129)
- [Fix(globalscale): ignore lookupserver if empty config (server#65184)](https://github.com/nextcloud/server/pull/65184)
- [Fix(backupcodes): Dismiss notification on disabled provider (server#65317)](https://github.com/nextcloud/server/pull/65317)
- [Fix(admin-audit): Log when BFP was bypassed (server#65328)](https://github.com/nextcloud/server/pull/65328)
- [Fix(files\_sharing): preserve share expiration time (server#65404)](https://github.com/nextcloud/server/pull/65404)
- [Fix: add files\_metadata\_index to the filecache partition (server#65413)](https://github.com/nextcloud/server/pull/65413)
- [Fix(settings): add select event to AppNavigationGroupList and clear s… (server#65417)](https://github.com/nextcloud/server/pull/65417)
- [Chore: Add `testing:prepare-ci` command (server#65420)](https://github.com/nextcloud/server/pull/65420)
- [Fix(mail): embed image logo only when using useTemplate (server#65427)](https://github.com/nextcloud/server/pull/65427)
- [Chore: Skip transaction when no preview exists (server#65445)](https://github.com/nextcloud/server/pull/65445)
- [Chore: update code owners (server#65456)](https://github.com/nextcloud/server/pull/65456)
- [Fix(encryption): use the block size of the file encoding when fixing sizes (server#65459)](https://github.com/nextcloud/server/pull/65459)
- [Perf: Partition preview migration job (server#65465)](https://github.com/nextcloud/server/pull/65465)
- [Perf(preview): only autorotate with Imaginary when needed (server#65486)](https://github.com/nextcloud/server/pull/65486)
- [Fix(appstore): only ask once for password confirmation (server#65495)](https://github.com/nextcloud/server/pull/65495)
- [Fix(user\_ldap): Use proper function builder instead of hardcoded COUNT (server#65502)](https://github.com/nextcloud/server/pull/65502)
- [Fix(migration): check if deleted\_by column exists before trying to add it to files\_trash table (server#65517)](https://github.com/nextcloud/server/pull/65517)
- [Fix(dav): adjust password session check on legacy dav auth (server#65540)](https://github.com/nextcloud/server/pull/65540)
- [Fix: Store login name and not uid in session when login with webauthn (server#65548)](https://github.com/nextcloud/server/pull/65548)
- [Ci: run the guests integration tests against guests stable-4.10 (server#65553)](https://github.com/nextcloud/server/pull/65553)
- [Fix(files\_sharing): show the owner avatar for received shares (server#65561)](https://github.com/nextcloud/server/pull/65561)
- [Fix(files): normalize Unicode in node paths (server#65565)](https://github.com/nextcloud/server/pull/65565)
- [Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65571)](https://github.com/nextcloud/server/pull/65571)
- [Fix(dav): resolve users before intersecting shares (server#65583)](https://github.com/nextcloud/server/pull/65583)
- [Chore: Update setup-php to 2.40.0 (server#65664)](https://github.com/nextcloud/server/pull/65664)
- [Fix: Playwright concurrency (server#65672)](https://github.com/nextcloud/server/pull/65672)
- [Fix: don’t try to load keys for empty path for groupfolder versions (server#65675)](https://github.com/nextcloud/server/pull/65675)
- [Fix(ui): Consider typing and scrolling as activity for auto logout (server#65690)](https://github.com/nextcloud/server/pull/65690)
- [Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65694)](https://github.com/nextcloud/server/pull/65694)
- [Fix(encryption): Remember the recalculated unencrypted size as int (server#65700)](https://github.com/nextcloud/server/pull/65700)
- [Fix: Remove auto increment migration on share\_external (server#65710)](https://github.com/nextcloud/server/pull/65710)
- [Fix(user\_ldap): remove leftover debug log in getUserFromCustomAttribute (server#65712)](https://github.com/nextcloud/server/pull/65712)
- [Fix: move column drop in to separate migration (server#65718)](https://github.com/nextcloud/server/pull/65718)
- [Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65733)](https://github.com/nextcloud/server/pull/65733)
- [Fix(ci): clone vendored test apps from the matching stable branch (server#65874)](https://github.com/nextcloud/server/pull/65874)
- [Fix(files): skip quota check when opening files for reading (server#65879)](https://github.com/nextcloud/server/pull/65879)
- [Chore: flake update (server#65907)](https://github.com/nextcloud/server/pull/65907)
- [Fix(files\_sharing): public share popover jumps on options toggle (server#65912)](https://github.com/nextcloud/server/pull/65912)
- [Fix(security): Update CA certificate bundle (server#65916)](https://github.com/nextcloud/server/pull/65916)
- [Fix: move/rename of part file in masked dir/storage (server#65933)](https://github.com/nextcloud/server/pull/65933)
- [Fix(provisioning\_api): filter users by enabled state on the server (server#65947)](https://github.com/nextcloud/server/pull/65947)
- [Fix: Remove avatar and credentials only after user removal (server#65952)](https://github.com/nextcloud/server/pull/65952)
- [Fix(core): use %n in the integrity check plural to avoid a crash in L10N (server#65957)](https://github.com/nextcloud/server/pull/65957)
- [Ci: sync workflows with .github (server#65963)](https://github.com/nextcloud/server/pull/65963)
- [Fix(files\_sharing): Make sure mount events are dispatched for share recipients (server#65989)](https://github.com/nextcloud/server/pull/65989)
- [Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65990)](https://github.com/nextcloud/server/pull/65990)
- [Fix(versions): empty array for external shares (server#66004)](https://github.com/nextcloud/server/pull/66004)
- [Fix(dav): detect truncated CardDAV sync results on all databases (server#66011)](https://github.com/nextcloud/server/pull/66011)
- [Fix(since): Ensure provided since version is from the current branch (server#66021)](https://github.com/nextcloud/server/pull/66021)
- [Build(deps): bump the symfony group across 1 directory with 9 updates (server#66031)](https://github.com/nextcloud/server/pull/66031)
- [Fix(dav): align public request path handling (server#66039)](https://github.com/nextcloud/server/pull/66039)
- [Fix: unique custom tokens for share links (server#66043)](https://github.com/nextcloud/server/pull/66043)
- [Build(deps): Bump Symfony packages (server#66134)](https://github.com/nextcloud/server/pull/66134)
- [Fix: properly handle webdav pagination headers (server#66155)](https://github.com/nextcloud/server/pull/66155)
- [Fix(external-share): move ExternalShareScanJob creation deeper. (server#66158)](https://github.com/nextcloud/server/pull/66158)
- [Fix(tags): display selected tag in settings (server#66163)](https://github.com/nextcloud/server/pull/66163)
- [Fix(log): Avoid crashes when building exception trace with a ghost (server#66173)](https://github.com/nextcloud/server/pull/66173)
- [Fix: improve live-photo handling (server#66189)](https://github.com/nextcloud/server/pull/66189)
- [Fix(CalDAV): extract data from occurance exemptions (server#66191)](https://github.com/nextcloud/server/pull/66191)
- [Fix: BearerAuth should not check for already loggedin user (server#66194)](https://github.com/nextcloud/server/pull/66194)
- [Fix(user\_ldap): Fix variable name conflict for cache key (server#66197)](https://github.com/nextcloud/server/pull/66197)
- [Fix(dav): bind public share session authentication to the password hash (server#66203)](https://github.com/nextcloud/server/pull/66203)
- [Fix(user\_ldap): do not cache unknown names in the local mapping cache (server#66208)](https://github.com/nextcloud/server/pull/66208)
- [Ci: drop cat of Imagick policy (server#66221)](https://github.com/nextcloud/server/pull/66221)
- [Fix(systemtags): properly handle object ids (server#66228)](https://github.com/nextcloud/server/pull/66228)
- [Fix(favorite): Limit tagging to favorite (server#66230)](https://github.com/nextcloud/server/pull/66230)
- [Fix(dav): do not grant write-properties to read-only calendar delegates (server#66236)](https://github.com/nextcloud/server/pull/66236)
- [Fix: Reject login with NUL bytes rather than converting (server#66241)](https://github.com/nextcloud/server/pull/66241)
- [Fix(provisioning\_api): group admins can’t add all users to groups (server#66264)](https://github.com/nextcloud/server/pull/66264)
- [Fix(share-folder): use it on federated share (server#66279)](https://github.com/nextcloud/server/pull/66279)
- [Fix(dav): register missing app config keys in the config lexicon (server#66282)](https://github.com/nextcloud/server/pull/66282)
- [Fix(encryption): Don’t use ChunkingV2Plugin when server-side encryption is enabled (server#66289)](https://github.com/nextcloud/server/pull/66289)
- [Fix(files): Continue scanning after StorageInvalidException (server#66292)](https://github.com/nextcloud/server/pull/66292)
- [Fix: Use strict in\_array in ApplicableHelper (server#66294)](https://github.com/nextcloud/server/pull/66294)
- [Feat(federation): ignore remote contacts (server#66306)](https://github.com/nextcloud/server/pull/66306)
- [Fix(theming): only accept canonical svg paths for themed icons (server#66311)](https://github.com/nextcloud/server/pull/66311)
- [Fix(files): check that the source properly between storages (server#66316)](https://github.com/nextcloud/server/pull/66316)
- [Fix(session): Prevent stale requests from replacing a regenerated session (server#66324)](https://github.com/nextcloud/server/pull/66324)
- [Fix(dav): allow moves within own share when sharing is disabled (server#66330)](https://github.com/nextcloud/server/pull/66330)
- [Fix(quota): Calculate used quota for foreign users the correct way (server#66333)](https://github.com/nextcloud/server/pull/66333)
- [Fix(webhook\_listeners): Change Exception type (server#66342)](https://github.com/nextcloud/server/pull/66342)
- [Refactor(session): use ITimeFactory for superseded session markers (server#66351)](https://github.com/nextcloud/server/pull/66351)
- [Ci(psalm): run taint analysis with all available threads (server#66357)](https://github.com/nextcloud/server/pull/66357)
- [Fix(core): await enabling recommended apps before collecting results (server#66362)](https://github.com/nextcloud/server/pull/66362)
- [Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66366)](https://github.com/nextcloud/server/pull/66366)
- [Fix(federatedfilesharing): match reshares by node, not by name (server#66372)](https://github.com/nextcloud/server/pull/66372)

### [activity](https://github.com/nextcloud/activity)

- [Fix(activity): reset the current user and release the teams session (activity#2925)](https://github.com/nextcloud/activity/pull/2925)
- [Perf(activity): reintroduce activity\_object index (activity#3022)](https://github.com/nextcloud/activity/pull/3022)
- [Fix(files): do not publish incompletely built activity events (activity#3062)](https://github.com/nextcloud/activity/pull/3062)
- [Chore: Set specific PHP platform to fix psalm CI (activity#3064)](https://github.com/nextcloud/activity/pull/3064)
- [Fix(tests): Remove broken toast closing & remove use of query method (activity#3065)](https://github.com/nextcloud/activity/pull/3065)
- [Fix(api): fall back to MIME icon when preview generation fails (activity#3069)](https://github.com/nextcloud/activity/pull/3069)

### [app\_api](https://github.com/nextcloud/app_api)

- [Refactor(harp): compare the HaRP shared key with hash\_equals (app\_api#1115)](https://github.com/nextcloud/app_api/pull/1115)
- [Fix(deploy): round the memory and CPU limits to whole numbers (app\_api#1121)](https://github.com/nextcloud/app_api/pull/1121)
- [Fix(docker): no PHP warning for a HaRP daemon without a key (app\_api#1136)](https://github.com/nextcloud/app_api/pull/1136)
- [Fix(harp): send the route verb to HaRP (app\_api#1141)](https://github.com/nextcloud/app_api/pull/1141)
- [Fix(proxy): match the route verb like HaRP (app\_api#1146)](https://github.com/nextcloud/app_api/pull/1146)
- [Fix(harp): require HaRP 0.4.8 in the version check (app\_api#1151)](https://github.com/nextcloud/app_api/pull/1151)
- [Fix(proxy): refuse dot segments resolved after the route check (app\_api#1165)](https://github.com/nextcloud/app_api/pull/1165)
- [Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app\_api#1170)](https://github.com/nextcloud/app_api/pull/1170)
- [Fix(proxy): check routes on each reading of the path like HaRP (app\_api#1184)](https://github.com/nextcloud/app_api/pull/1184)

### [circles](https://github.com/nextcloud/circles)

- [Fix(federation): fix shares and mount rename (circles#3025)](https://github.com/nextcloud/circles/pull/3025)
- [Revert #2454 (circles#3038)](https://github.com/nextcloud/circles/pull/3038)
- [Feat(command): add --delete option to circles:remote (circles#3044)](https://github.com/nextcloud/circles/pull/3044)
- [Fix(notifications): dismiss join request notification once processed (circles#3047)](https://github.com/nextcloud/circles/pull/3047)
- [Fix: only show shared resources that are still acessible (circles#3053)](https://github.com/nextcloud/circles/pull/3053)
- [Fix(mount-provider): Pass the recipient to the federated share storage (circles#3074)](https://github.com/nextcloud/circles/pull/3074)
- [Enh(performance): query memberships breadth first to reduce query count (circles#3081)](https://github.com/nextcloud/circles/pull/3081)
- [Fix(shares): keep circle context when share is resolved via circle (circles#3127)](https://github.com/nextcloud/circles/pull/3127)
- [Fix(notification): Make relative action links absolute when preparing (circles#3134)](https://github.com/nextcloud/circles/pull/3134)

### [files\_downloadlimit](https://github.com/nextcloud/files_downloadlimit)

- [Fix: disable props not supported with download limit (files\_downloadlimit#1079)](https://github.com/nextcloud/files_downloadlimit/pull/1079)
- [Ci: Add release relay job (files\_downloadlimit#1085)](https://github.com/nextcloud/files_downloadlimit/pull/1085)
- [Fix: count legacy share downloads only once (files\_downloadlimit#1088)](https://github.com/nextcloud/files_downloadlimit/pull/1088)

### [files\_lock](https://github.com/nextcloud/files_lock)

- [Fix: allow force unlock without access of the lock owner (files\_lock#1364)](https://github.com/nextcloud/files_lock/pull/1364)
- [Fix(lock): only return string app names from getAppName (files\_lock#1396)](https://github.com/nextcloud/files_lock/pull/1396)

### [files\_pdfviewer](https://github.com/nextcloud/files_pdfviewer)

- [Chore: Bump version (files\_pdfviewer#1591)](https://github.com/nextcloud/files_pdfviewer/pull/1591)

### [logreader](https://github.com/nextcloud/logreader)

- [Feat(search): replace search popover with inline search field (logreader#2316)](https://github.com/nextcloud/logreader/pull/2316)
- [Perf(LogIterator): Read long lines in linear time (logreader#2329)](https://github.com/nextcloud/logreader/pull/2329)
- [Fix(LogTable): load entries until screen is filled (logreader#2362)](https://github.com/nextcloud/logreader/pull/2362)

### [notifications](https://github.com/nextcloud/notifications)

- [Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3471)](https://github.com/nextcloud/notifications/pull/3471)
- [Ci(performance): Update actions (notifications#3504)](https://github.com/nextcloud/notifications/pull/3504)
- [Fix(webpush): Correctly hide already read notifications from webpush (notifications#3545)](https://github.com/nextcloud/notifications/pull/3545)
- [Feat: open the target when a background push notification is clicked (notifications#3546)](https://github.com/nextcloud/notifications/pull/3546)
- [Fix(web-notifications): open notification link in a new tab (notifications#3547)](https://github.com/nextcloud/notifications/pull/3547)
- [Apply hardenings found by automated scanner (notifications#3548)](https://github.com/nextcloud/notifications/pull/3548)
- [Fix(web-push): improve fetching notifications with web-push (notifications#3551)](https://github.com/nextcloud/notifications/pull/3551)

### [photos](https://github.com/nextcloud/photos)

- [Fix(tags): read the tag id from the node instead of its attributes (photos#3873)](https://github.com/nextcloud/photos/pull/3873)
- [Chore(deps): combine pending dependency updates (photos#4030)](https://github.com/nextcloud/photos/pull/4030)
- [Fix(filters): respect share download permission in filtered albums (photos#4035)](https://github.com/nextcloud/photos/pull/4035)
- [Honor EXIF OffsetTimeOriginal (photos#4038)](https://github.com/nextcloud/photos/pull/4038)

### [privacy](https://github.com/nextcloud/privacy)

- [Chore(deps): combine pending dependency updates (privacy#1507)](https://github.com/nextcloud/privacy/pull/1507)

### [recommendations](https://github.com/nextcloud/recommendations)

- [Ci: workflow templates and npm audit fix (recommendations#1199)](https://github.com/nextcloud/recommendations/pull/1199)
- [Chore(deps): bump npm dependencies (recommendations#1203)](https://github.com/nextcloud/recommendations/pull/1203)

### [serverinfo](https://github.com/nextcloud/serverinfo)

- [Feat: Show all users who logged at least once (serverinfo#1251)](https://github.com/nextcloud/serverinfo/pull/1251)

### [text](https://github.com/nextcloud/text)

- [Fix(files): edited files marked locked in files list after close (text#9377)](https://github.com/nextcloud/text/pull/9377)
- [Fix(Table): return Tab and Shift-Tab handler results to mark the even… (text#9379)](https://github.com/nextcloud/text/pull/9379)
- [Fix(attachments): rewrite attachment file ids when copying folders (text#9390)](https://github.com/nextcloud/text/pull/9390)
- [Fix(attachments): normalize attachment names to Unicode NFC (text#9395)](https://github.com/nextcloud/text/pull/9395)
- [Fix(math): import katex css from component (text#9400)](https://github.com/nextcloud/text/pull/9400)
- [Fix(notifications): notify mentioned users about mentions by guests (text#9403)](https://github.com/nextcloud/text/pull/9403)
- [Fix(migration): quote identifiers in oracle index creation (text#9407)](https://github.com/nextcloud/text/pull/9407)
- [Fix(migration): create text\_steps index ascending on oracle (text#9471)](https://github.com/nextcloud/text/pull/9471)
- [Fix(menu): make component actions work from the remaining actions menu (text#9474)](https://github.com/nextcloud/text/pull/9474)
- [Fix misc flaky tests (text#9480)](https://github.com/nextcloud/text/pull/9480)
- [Perf(cleanup): Optimize cleanup job (text#9516)](https://github.com/nextcloud/text/pull/9516)
- [Fix(sessions): only use share node matching the session document (text#9521)](https://github.com/nextcloud/text/pull/9521)
- [Fix(editor): do not force save when clicking the save indicator (text#9527)](https://github.com/nextcloud/text/pull/9527)
- [Fix: don’t silently drop outside changes (e.g. from external storage) (text#9539)](https://github.com/nextcloud/text/pull/9539)
- [Perf(editor): only serialize markdown on update when it is read (text#9543)](https://github.com/nextcloud/text/pull/9543)
- [Fix(sync): improve situation around false conflicts (text#9551)](https://github.com/nextcloud/text/pull/9551)
- [Fix: improve gap cursor usage (text#9553)](https://github.com/nextcloud/text/pull/9553)

### [viewer](https://github.com/nextcloud/viewer)

- [Fix: properly handle e2ee support (viewer#3368)](https://github.com/nextcloud/viewer/pull/3368)
- [Fix(viewer): register handlers not yet in the lookup table when opening a file (viewer#3422)](https://github.com/nextcloud/viewer/pull/3422)
- [Chore(deps): update vite to 7 and stylelint to 17 (viewer#3453)](https://github.com/nextcloud/viewer/pull/3453)
- [Fix(viewer): skip duplicate handlers on init (viewer#3459)](https://github.com/nextcloud/viewer/pull/3459)

---

<div class="post-metadata">

**Author:** ![blizzz](https://help.nextcloud.com/user_avatar/help.nextcloud.com/blizzz/32/133_2.png) [@blizzz](https://help.nextcloud.com/u/blizzz)\
**Post date:** [November 5, 2026, 5:26pm UTC](https://help.nextcloud.com/t/rcs-of-35-0-3-34-0-6-33-0-11/251717/2 "2026-11-05T17:26:01Z")

</div>

## Nextcloud 33.0.11rc1

### [server](https://github.com/nextcloud/server)

- [Use strict comparaison (server#64326)](https://github.com/nextcloud/server/pull/64326)
- [Fix(files\_sharing): name the parent folder in inherited unshare actions (server#64351)](https://github.com/nextcloud/server/pull/64351)
- [Test: enable filecache partitioning for one mysql test (server#65130)](https://github.com/nextcloud/server/pull/65130)
- [Fix(backupcodes): Dismiss notification on disabled provider (server#65316)](https://github.com/nextcloud/server/pull/65316)
- [Fix(admin-audit): Log when BFP was bypassed (server#65329)](https://github.com/nextcloud/server/pull/65329)
- [Fix(files\_sharing): preserve share expiration time (server#65405)](https://github.com/nextcloud/server/pull/65405)
- [Chore: Add `testing:prepare-ci` command (server#65419)](https://github.com/nextcloud/server/pull/65419)
- [Chore: Skip transaction when no preview exists (server#65447)](https://github.com/nextcloud/server/pull/65447)
- [Chore: update code owners (server#65457)](https://github.com/nextcloud/server/pull/65457)
- [Fix(encryption): use the block size of the file encoding when fixing sizes (server#65458)](https://github.com/nextcloud/server/pull/65458)
- [Perf: Partition preview migration job (server#65466)](https://github.com/nextcloud/server/pull/65466)
- [Perf(preview): only autorotate with Imaginary when needed (server#65487)](https://github.com/nextcloud/server/pull/65487)
- [Fix(migration): check if deleted\_by column exists before trying to add it to files\_trash table (server#65516)](https://github.com/nextcloud/server/pull/65516)
- [Fix(dav): adjust password session check on legacy dav auth (server#65539)](https://github.com/nextcloud/server/pull/65539)
- [Fix(files\_sharing): show the owner avatar for received shares (server#65559)](https://github.com/nextcloud/server/pull/65559)
- [Fix(files): normalize Unicode in node paths (server#65564)](https://github.com/nextcloud/server/pull/65564)
- [Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65570)](https://github.com/nextcloud/server/pull/65570)
- [Fix(dav): resolve users before intersecting shares (server#65582)](https://github.com/nextcloud/server/pull/65582)
- [Fix(chunkingUpload): sliding expiration based on upload activity (server#65655)](https://github.com/nextcloud/server/pull/65655)
- [Chore: Update setup-php to 2.40.0 (server#65665)](https://github.com/nextcloud/server/pull/65665)
- [Fix: Playwright concurrency (server#65671)](https://github.com/nextcloud/server/pull/65671)
- [Fix: don’t try to load keys for empty path for groupfolder versions (server#65674)](https://github.com/nextcloud/server/pull/65674)
- [Fix(ui): Consider typing and scrolling as activity for auto logout (server#65689)](https://github.com/nextcloud/server/pull/65689)
- [Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65693)](https://github.com/nextcloud/server/pull/65693)
- [Fix(encryption): Remember the recalculated unencrypted size as int (server#65699)](https://github.com/nextcloud/server/pull/65699)
- [Fix: Remove auto increment migration on share\_external (server#65709)](https://github.com/nextcloud/server/pull/65709)
- [Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65732)](https://github.com/nextcloud/server/pull/65732)
- [Fix(ci): clone vendored test apps from the matching stable branch (server#65873)](https://github.com/nextcloud/server/pull/65873)
- [Fix(files): skip quota check when opening files for reading (server#65878)](https://github.com/nextcloud/server/pull/65878)
- [Chore: flake update (server#65906)](https://github.com/nextcloud/server/pull/65906)
- [Fix(files\_sharing): public share popover jumps on options toggle (server#65911)](https://github.com/nextcloud/server/pull/65911)
- [Fix(security): Update CA certificate bundle (server#65917)](https://github.com/nextcloud/server/pull/65917)
- [Fix: move/rename of part file in masked dir/storage (server#65932)](https://github.com/nextcloud/server/pull/65932)
- [Fix(provisioning\_api): filter users by enabled state on the server (server#65946)](https://github.com/nextcloud/server/pull/65946)
- [Ci: sync workflows with .github (server#65964)](https://github.com/nextcloud/server/pull/65964)
- [Fix(kerberos): Allow again to specify empty url (server#65980)](https://github.com/nextcloud/server/pull/65980)
- [Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65992)](https://github.com/nextcloud/server/pull/65992)
- [Fix(dav): detect truncated CardDAV sync results on all databases (server#66010)](https://github.com/nextcloud/server/pull/66010)
- [Fix(versions): empty array for external shares (server#66027)](https://github.com/nextcloud/server/pull/66027)
- [Build(deps): bump the symfony group across 1 directory with 9 updates (server#66032)](https://github.com/nextcloud/server/pull/66032)
- [Fix(dav): align public request path handling (server#66040)](https://github.com/nextcloud/server/pull/66040)
- [Fix: unique custom tokens for share links (server#66042)](https://github.com/nextcloud/server/pull/66042)
- [Build(deps): Bump Symfony packages (server#66135)](https://github.com/nextcloud/server/pull/66135)
- [Fix: properly handle webdav pagination headers (server#66154)](https://github.com/nextcloud/server/pull/66154)
- [Fix(external-share): move ExternalShareScanJob creation deeper (server#66159)](https://github.com/nextcloud/server/pull/66159)
- [Fix: improve live-photo handling (server#66188)](https://github.com/nextcloud/server/pull/66188)
- [Fix(CalDAV): extract data from occurance exemptions (server#66192)](https://github.com/nextcloud/server/pull/66192)
- [Fix(user\_ldap): Fix variable name conflict for cache key (server#66198)](https://github.com/nextcloud/server/pull/66198)
- [Fix(dav): bind public share session authentication to the password hash (server#66202)](https://github.com/nextcloud/server/pull/66202)
- [Fix(user\_ldap): do not cache unknown names in the local mapping cache (server#66207)](https://github.com/nextcloud/server/pull/66207)
- [Ci: drop cat of Imagick policy (server#66222)](https://github.com/nextcloud/server/pull/66222)
- [Fix(systemtags): properly handle object ids (server#66227)](https://github.com/nextcloud/server/pull/66227)
- [Fix(favorite): Limit tagging to favorite (server#66231)](https://github.com/nextcloud/server/pull/66231)
- [Fix(dav): do not grant write-properties to read-only calendar delegates (server#66235)](https://github.com/nextcloud/server/pull/66235)
- [Fix: Reject login with NUL bytes rather than converting (server#66240)](https://github.com/nextcloud/server/pull/66240)
- [Fix: BearerAuth should not check for already loggedin user (server#66243)](https://github.com/nextcloud/server/pull/66243)
- [Fix(provisioning\_api): group admins can’t add all users to groups (server#66263)](https://github.com/nextcloud/server/pull/66263)
- [Fix(share-folder): use it on federated share (server#66277)](https://github.com/nextcloud/server/pull/66277)
- [Fix(dav): register missing app config keys in the config lexicon (server#66283)](https://github.com/nextcloud/server/pull/66283)
- [Fix(encryption): Don’t use ChunkingV2Plugin when server-side encryption is enabled (server#66288)](https://github.com/nextcloud/server/pull/66288)
- [Fix(files): Continue scanning after StorageInvalidException (server#66293)](https://github.com/nextcloud/server/pull/66293)
- [Fix(theming): only accept canonical svg paths for themed icons (server#66312)](https://github.com/nextcloud/server/pull/66312)
- [Fix(files): check that the source properly between storages (server#66317)](https://github.com/nextcloud/server/pull/66317)
- [Fix(session): Prevent stale requests from replacing a regenerated session (server#66325)](https://github.com/nextcloud/server/pull/66325)
- [Fix(dav): allow moves within own share when sharing is disabled (server#66329)](https://github.com/nextcloud/server/pull/66329)
- [Fix(quota): Calculate used quota for foreign users the correct way (server#66334)](https://github.com/nextcloud/server/pull/66334)
- [Fix(webhook\_listeners): Change Exception type (server#66341)](https://github.com/nextcloud/server/pull/66341)
- [Refactor(session): use ITimeFactory for superseded session markers (server#66352)](https://github.com/nextcloud/server/pull/66352)
- [Ci(psalm): run taint analysis with all available threads (server#66358)](https://github.com/nextcloud/server/pull/66358)
- [Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66367)](https://github.com/nextcloud/server/pull/66367)
- [Fix(federatedfilesharing): match reshares by node, not by name (server#66371)](https://github.com/nextcloud/server/pull/66371)

### [activity](https://github.com/nextcloud/activity)

- [Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2829)](https://github.com/nextcloud/activity/pull/2829)
- [Fix(activity): reset the current user and release the teams session (activity#2926)](https://github.com/nextcloud/activity/pull/2926)
- [Perf(activity): reintroduce activity\_object index (activity#3023)](https://github.com/nextcloud/activity/pull/3023)
- [Fix(files): do not publish incompletely built activity events (activity#3063)](https://github.com/nextcloud/activity/pull/3063)
- [Fix(tests): Remove broken toast closing & remove use of query method (activity#3066)](https://github.com/nextcloud/activity/pull/3066)
- [Stable34] chore: Set specific PHP platform to fix psalm CI (activity#3067)](https://github.com/nextcloud/activity/pull/3067)
- [Fix(api): fall back to MIME icon when preview generation fails (activity#3068)](https://github.com/nextcloud/activity/pull/3068)

### [app\_api](https://github.com/nextcloud/app_api)

- [Fix: hide environment variables in the container create debug log (app\_api#1112)](https://github.com/nextcloud/app_api/pull/1112)
- [Refactor(harp): compare the HaRP shared key with hash\_equals (app\_api#1116)](https://github.com/nextcloud/app_api/pull/1116)
- [Fix(deploy): round the memory and CPU limits to whole numbers (app\_api#1120)](https://github.com/nextcloud/app_api/pull/1120)
- [Fix(daemon): stop prefilling the daemon key in the templates (app\_api#1131)](https://github.com/nextcloud/app_api/pull/1131)
- [Fix(docker): no PHP warning for a HaRP daemon without a key (app\_api#1134)](https://github.com/nextcloud/app_api/pull/1134)
- [Fix(harp): send the route verb to HaRP (app\_api#1139)](https://github.com/nextcloud/app_api/pull/1139)
- [Fix(proxy): match the route verb like HaRP (app\_api#1147)](https://github.com/nextcloud/app_api/pull/1147)
- [Fix(harp): require HaRP 0.4.8 in the version check (app\_api#1152)](https://github.com/nextcloud/app_api/pull/1152)
- [Fix(proxy): refuse dot segments resolved after the route check (app\_api#1166)](https://github.com/nextcloud/app_api/pull/1166)
- [Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app\_api#1171)](https://github.com/nextcloud/app_api/pull/1171)
- [Fix(proxy): check routes on each reading of the path like HaRP (app\_api#1185)](https://github.com/nextcloud/app_api/pull/1185)

### [circles](https://github.com/nextcloud/circles)

- [Fix(federation): fix shares and mount rename (circles#3024)](https://github.com/nextcloud/circles/pull/3024)
- [Revert #2454 (circles#3039)](https://github.com/nextcloud/circles/pull/3039)
- [Feat(command): add --delete option to circles:remote (circles#3043)](https://github.com/nextcloud/circles/pull/3043)
- [Fix(notifications): dismiss join request notification once processed (circles#3046)](https://github.com/nextcloud/circles/pull/3046)
- [Fix: only show shared resources that are still acessible (circles#3052)](https://github.com/nextcloud/circles/pull/3052)
- [Fix: resolve share mount for remote circle members (circles#3098)](https://github.com/nextcloud/circles/pull/3098)
- [Fix(shares): keep circle context when share is resolved via circle (circles#3128)](https://github.com/nextcloud/circles/pull/3128)
- [Fix(notification): Make relative action links absolute when preparing (circles#3133)](https://github.com/nextcloud/circles/pull/3133)

### [files\_downloadlimit](https://github.com/nextcloud/files_downloadlimit)

- [Fix: disable props not supported with download limit (files\_downloadlimit#1078)](https://github.com/nextcloud/files_downloadlimit/pull/1078)
- [Ci: Add release relay job (files\_downloadlimit#1084)](https://github.com/nextcloud/files_downloadlimit/pull/1084)

### [logreader](https://github.com/nextcloud/logreader)

- [Feat(search): replace search popover with inline search field (logreader#2315)](https://github.com/nextcloud/logreader/pull/2315)
- [Perf(LogIterator): Read long lines in linear time (logreader#2330)](https://github.com/nextcloud/logreader/pull/2330)
- [Fix(LogTable): load entries until screen is filled (logreader#2361)](https://github.com/nextcloud/logreader/pull/2361)

### [notifications](https://github.com/nextcloud/notifications)

- [Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3470)](https://github.com/nextcloud/notifications/pull/3470)
- [Ci(performance): Update actions (notifications#3505)](https://github.com/nextcloud/notifications/pull/3505)

### [photos](https://github.com/nextcloud/photos)

- [Fix(tags): read the tag id from the node instead of its attributes (photos#3872)](https://github.com/nextcloud/photos/pull/3872)
- [Chore: Patch cypress workflow (photos#3987)](https://github.com/nextcloud/photos/pull/3987)
- [Chore: workflow templates and psalm stub fix (photos#4031)](https://github.com/nextcloud/photos/pull/4031)
- [Fix(filters): respect share download permission in filtered albums (photos#4036)](https://github.com/nextcloud/photos/pull/4036)

### [privacy](https://github.com/nextcloud/privacy)

- [Chore(deps): combine pending dependency updates (privacy#1508)](https://github.com/nextcloud/privacy/pull/1508)

### [recommendations](https://github.com/nextcloud/recommendations)

- [Ci: workflow templates and npm audit fix (recommendations#1200)](https://github.com/nextcloud/recommendations/pull/1200)
- [Chore(deps): bump npm dependencies (recommendations#1204)](https://github.com/nextcloud/recommendations/pull/1204)

### [serverinfo](https://github.com/nextcloud/serverinfo)

- [Feat: Show all users who logged at least once (serverinfo#1254)](https://github.com/nextcloud/serverinfo/pull/1254)

### [text](https://github.com/nextcloud/text)

- [Fix(files): edited files marked locked in files list after close (text#9376)](https://github.com/nextcloud/text/pull/9376)
- [Fix(attachments): rewrite attachment file ids when copying folders (text#9389)](https://github.com/nextcloud/text/pull/9389)
- [Fix(attachments): normalize attachment names to Unicode NFC (text#9394)](https://github.com/nextcloud/text/pull/9394)
- [Fix(math): import katex css from component (text#9399)](https://github.com/nextcloud/text/pull/9399)
- [Fix(migration): quote identifiers in oracle index creation (text#9408)](https://github.com/nextcloud/text/pull/9408)
- [Fix(migration): create text\_steps index ascending on oracle (text#9470)](https://github.com/nextcloud/text/pull/9470)
- [Fix(menu): make component actions work from the remaining actions menu (text#9475)](https://github.com/nextcloud/text/pull/9475)
- [Fix misc flaky tests (text#9481)](https://github.com/nextcloud/text/pull/9481)
- [Fix(cron): stop attachment cleanup from failing on every run (text#9517)](https://github.com/nextcloud/text/pull/9517)
- [Fix(sessions): only use share node matching the session document (text#9522)](https://github.com/nextcloud/text/pull/9522)
- [Fix(editor): do not force save when clicking the save indicator (text#9526)](https://github.com/nextcloud/text/pull/9526)
- [Perf(editor): only serialize markdown on update when it is read (text#9544)](https://github.com/nextcloud/text/pull/9544)

### [viewer](https://github.com/nextcloud/viewer)

- [Fix(files): don’t expose WebDAV XML-attribute artifacts as DOM attributes (viewer#3289)](https://github.com/nextcloud/viewer/pull/3289)
- [Fix: properly handle e2ee support (viewer#3367)](https://github.com/nextcloud/viewer/pull/3367)
- [Fix(viewer): register handlers not yet in the lookup table when opening a file (viewer#3421)](https://github.com/nextcloud/viewer/pull/3421)
- [Test(e2e): skip the Ogg/Theora video specs on Chromium (viewer#3452)](https://github.com/nextcloud/viewer/pull/3452)
- [Fix(viewer): skip duplicate handlers on init (viewer#3458)](https://github.com/nextcloud/viewer/pull/3458)

---

<div class="post-metadata">

**Author:** ![system](https://help.nextcloud.com/user_avatar/help.nextcloud.com/system/32/29333_2.png) [@system](https://help.nextcloud.com/u/system)\
**Post date:** [November 8, 2026, 5:26pm UTC](https://help.nextcloud.com/t/rcs-of-35-0-3-34-0-6-33-0-11/251717/3 "2026-11-08T17:26:28Z")

</div>

This topic was automatically closed after 3 days. New replies are no longer allowed.