nextcloud-releases/server v32.0.12

on GitHub

Nextcloud 32.0.12

server

• Dav: Fix fatal error when ORGANIZER is missing in CalDAV schedule (server#59349)
• Feat(files_external): convert to delegated settings (server#59869)
• Fix: correct typo 'occured' to 'occurred' in SetupCheckManager (server#60209)
• Fix since checker (server#60242)
• Fix(caldav): grant sharee Acls to the delegate (server#60645)
• Fix(template): add import map for JS module entry points (server#60659)
• Fix(http): avoid iconv for header ascii fallback (server#60721)
• Fix(appconfig,userconfig): restore pre-migration fallback for ownCloud migration (server#60818)
• Fix(files): Chromium-based browsers drag-and-drop (server#60901)
• Chore(deps): Update flake to NixOS 26.05 (server#60911)
• Fix(files_sharing): clear the password after saving (server#60950)
• Fix: access shared and delegated trashbin objects (server#60966)
• Fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization (server#60985)
• Master] fix(security): Update code signing revocation list (server#61003)
• Fix(theming): read cachebuster as int in manifest endpoint (server#61009)
• Fix(dav): properly handle files metadata (server#61080)
• Fix(security): don't propagate ValueError from Crypto::decrypt() fallback (server#61103)
• Fix: use correct permissions mask for non-home storage public links (server#61116)
• Build(deps): bump the symfony group across 1 directory with 9 updates (server#61131)
• Master] fix(security): Update code signing revocation list (server#61135)
• Feat(file-search): add property to SearchQuery and check select fields to decide wheter to join extended cache (server#61155)
• Build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 (server#61180)
• Fix(previews): ffprobe hangs (server#61184)
• Fix(files_versions): guard null path in event listeners (server#61187)
• Fix(search-query): fix psalm type error (server#61198)
• Master] fix(security): Update code signing revocation list (server#61237)
• Fix(theming): preserve uploaded favicon and touch icon (server#61255)
• Master] fix(security): Update code signing revocation list (server#61285)
• Fix(twofactor_backupcodes): Add a clean helper to set code as used (server#61298)
• Chore: Increase page load timeout for oracle setup tests (server#61304)
• Fix: Use token expiration for ephemeral sessions (server#61307)
• Fix(user_ldap): Escape filter part when searching for group members (server#61327)
• Fix: trim duplicate search results for external share (server#61338)
• Fix: Do not set last-password-confirm for apptoken sessions (server#61344)
• Fix(team-manager): ensure team resources are only retrived for members (server#61349)
• Fix(ocm-add-share): adjust domain validation (server#61355)
• Fix: ensure file names are string-typed (server#61359)
• Feat(oauth2): Add commands for adding and deleting clients (server#61363)
• Fix: prevent editing delegated admins (server#61371)
• Fix(caldav): respect federation settings (server#61379)
• Fix(files): drag n drop (server#61401)
• Master] fix(security): Update code signing revocation list (server#61431)

activity

• Perf(mailqueue): cover `amq_latest_send` in the affecteduser index (activity#2638)

bruteforcesettings

• Fix: fix toggle the allow list option (bruteforcesettings#1104)

circles

• Fix: secondary owncloud custom group admin permissions not migrated (circles#2426)
• Build: add .nextcloudignore for release builds (circles#2509)
• Fix(local-controller): dont show full config int of circle for non-members (circles#2526)
• Fix(local-controller): validate params set on team creation (circles#2532)
• Adjust local controller to better handle permission checks (circles#2536)
• Fix(local-controller): include CFG_OPEN in config mask for visible circles (circles#2555)

notifications

• Chore: extend testing of `encryptAndSign` and make the methods discoverable by psalm (notifications#3101)
• Fix(email): Correctly initialize next_send_time field (notifications#3118)
• Fix: Subject in encrypt method (notifications#3138)

survey_client

• Fix(report): Fix sending huge reports (survey_client#440)

suspicious_login

• Fix(notifier): Fix label length limited to 32 characters (suspicious_login#1115)

text

• Fix(mediaHandler): strip relevant bidi chars in filenames (text#8691)
• Fix(Editor): emit modified fileNode size on save (text#8694)
• Chore(github): update workflows (text#8716)
• Fix(editorApi): allow to disable image lazy-loading (text#8726)
• Fix(editor): pass missing noLazyImages props (text#8729)
• Fix permission change in text doc (text#8749)
• Performance: Only check permissions when changing content (text#8766)

viewer

• Fix(plyr): the speed settings button should not be cut (viewer#3197)
• Fix(plyr): add l10n to components (viewer#3201)
• Fix(plyr): the speed selection should not go out of the viewport (viewer#3204)
• Fix(plyr): add l10n to speed selections (viewer#3214)