nextcloud-releases/server v34.0.1

on GitHub

Nextcloud 34.0.1

server

• Fix: folder tree selection after any action in main content (server#60478)
• Test: replace checkbox assertions with DoesNotPerformAssertions (middleware) (server#60759)
• Test: replace checkbox assertions with real assertions or DoesNotPerformAssertions (server#60785)
• Fix(files): show proper information when a move will override the target (server#60963)
• Perf(user_ldap): chunk oracle queries for lower bind cost (server#60978)
• Fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization (server#60983)
• Fix(theming): read cachebuster as int in manifest endpoint (server#61010)
• Fix(dav): finalize upload metadata before post-write hooks (server#61072)
• Fix(comments): load comments styles when the comments app is loaded (server#61076)
• Fix(dav): properly handle files metadata (server#61078)
• Fix(settings): Fix appstore icon color in settings menu (server#61093)
• Fix(comments): Use capped memory cache for comments (server#61097)
• Fix(security): don't propagate ValueError from Crypto::decrypt() fallback (server#61105)
• Fix(files): make sure nested changes are propagated to sidebar tabs (server#61106)
• Fix: Correctly detect appid for dist css files (server#61113)
• Fix: use correct permissions mask for non-home storage public links (server#61118)
• Fix(settings): Show loading spinner while searching accounts (server#61122)
• Build(deps): bump the symfony group across 1 directory with 9 updates (server#61129)
• Master] fix(security): Update code signing revocation list (server#61133)
• Feat(file-search): add property to SearchQuery and check select fields to decide wheter to join extended cache (server#61157)
• Fix(core): keep app menu settings icon legible on light backgrounds (server#61161)
• Build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 (server#61178)
• Fix(previews): ffprobe hangs (server#61182)
• Test(settings): reduce flakiness of authorized group integration assertions (server#61185)
• Fix(files_versions): guard null path in event listeners (server#61189)
• Fix(repair): restrict unserialize() in RemoveBrokenProperties (server#61203)
• Fix(appstore): bring back "update all" button (server#61212)
• Fix(settings): clear NcAppNavigation toggle overhang (server#61234)
• Master] fix(security): Update code signing revocation list (server#61239)
• Feat(settings): Require 8.3 for 35 (server#61241)
• Fix(encryption): Fix endpoint /ajax/userSetRecovery to support boolean (server#61243)
• Job run history cleanup (server#61249)
• Fix: Fix PHP Warning foreach() argument must be of type array|object, null given (server#61258)
• Master] fix(security): Update code signing revocation list (server#61283)
• Fix(twofactor_backupcodes): Add a clean helper to set code as used (server#61296)
• Fix(theming): preserve uploaded favicon and touch icon (server#61302)
• Fix: Use token expiration for ephemeral sessions (server#61305)
• Feat(oauth2): Add commands for adding and deleting clients (server#61309)
• Fix(user_ldap): Escape filter part when searching for group members (server#61325)
• Chore: Reduce PHPUnit test matrix on stable34 and remove coverage (server#61331)
• Chore(ci): Remove code coverage from stable branches (server#61335)
• Add OCM Notification Received Event (server#61337)
• Fix: trim duplicate search results for external share (server#61340)
• Speedup tests execution (server#61341)
• Fix: Do not set last-password-confirm for apptoken sessions (server#61342)
• Fix(team-manager): ensure team resources are only retrived for members (server#61351)
• Fix(ocm-add-share): adjust domain validation (server#61357)
• Fix: ensure file names are string-typed (server#61361)
• Test: fix admin E2E selectors for Vue 3 NcSelect (server#61365)
• Fix(taskprocessing): claim tasks atomically so parallel workers don't duplicate (server#61367)
• Fix: prevent editing delegated admins (server#61369)
• Fix Memcached CI job (server#61378)
• Fix(caldav): respect federation settings (server#61381)
• Fix(files_sharing): Hide incompatible actions in shares (server#61386)
• Fix(files_versions): avoid version snapshot races during cross-storage renames (server#61403)
• Fix: Fix alignment issues of app password form (server#61404)
• Fix(settings): show app menu current-app button on settings pages (server#61410)
• Test(ldap): align expectation for unset `ldapUserDisplayName2` with implementation to avoid PHP 8.5 warning (server#61412)
• Master] fix(security): Update code signing revocation list (server#61429)
• Fix(onetime-qrcode): Remove password confirmation attribute (server#61502)

activity

• Refactor(types): add native parameter and return types to UserSettings (activity#2614)
• Perf(mailqueue): cover `amq_latest_send` in the affecteduser index (activity#2636)

circles

• Fix(local-controller): dont show full config int of circle for non-members (circles#2528)
• Fix(local-controller): validate params set on team creation (circles#2534)
• Adjust local controller to better handle permission checks (circles#2538)
• Fix(local-controller): include CFG_OPEN in config mask for visible circles (circles#2557)

files_lock

• Perf: Avoir calling Server::get for each share mounts (files_lock#1123)

notifications

• Fix(webpush): recover gracefully from corrupted or mismatched VAPID keys (notifications#3070)
• Chore: extend testing of `encryptAndSign` and make the methods discoverable by psalm (notifications#3076)
• Docs(webpush): Document knowledge and trust models of webpush flow (notifications#3077)
• Build(deps): Bump guzzlehttp/psr7 from 2.8.0 to 2.11.0 (notifications#3087)
• Fix(webpush): Don't reuse query object for second query (notifications#3089)
• Fix(email): Correctly initialize next_send_time field (notifications#3120)

recommendations

• Chore(CI): Adjust testing matrix for Nextcloud 34 (recommendations#1038)

serverinfo

• Ci(actions): Update workflows (serverinfo#1014)
• Chore: Require PHP 8.2 (serverinfo#1020)

survey_client

• Fix(report): Fix sending huge reports (survey_client#439)

suspicious_login

• Fix(notifier): Fix label length limited to 32 characters (suspicious_login#1117)

text

• Chore(github): update workflows (text#8714)
• Fix(math): fix lost content after math node (text#8722)
• Fix(editorApi): allow to disable image lazy-loading (text#8728)
• Fix permission change in text doc (text#8751)
• Fix: show Assistant icon if only translation provider available (text#8760)
• Performance: Only check permissions when changing content (text#8764)
• Ci: remove compile command, as it happens after merge. Then, also run reuse (text#8767)

twofactor_totp

• Fix(migration): preserve state=2 secrets when cleaning up unverified … (twofactor_totp#1776)

viewer

• Fix(plyr): the speed settings button should not be cut (viewer#3199)
• Fix(plyr): add l10n to components (viewer#3203)
• Fix(plyr): the speed selection should not go out of the viewport (viewer#3206)
• Fix(plyr): add l10n to speed selections (viewer#3216)