Nextcloud 34.0.6
server
- Chore: Improve phpunit performance (server#63398)
- Fix(chunkingUpload): sliding expiration based on upload activity (server#64026)
- Fix(files_sharing): name the parent folder in inherited unshare actions (server#64350)
- Fix: Forward not found error in sabre (server#64940)
- Fix: Remove unused $allStorages array in files_external (server#64988)
- Fix(kerberos): Allow again to specify empty url (server#64989)
- Test: enable filecache partitioning for one mysql test (server#65129)
- Fix(globalscale): ignore lookupserver if empty config (server#65184)
- Fix(backupcodes): Dismiss notification on disabled provider (server#65317)
- Fix(admin-audit): Log when BFP was bypassed (server#65328)
- Fix(files_sharing): preserve share expiration time (server#65404)
- Fix: add files_metadata_index to the filecache partition (server#65413)
- Fix(settings): add select event to AppNavigationGroupList and clear s… (server#65417)
- Chore: Add `testing:prepare-ci` command (server#65420)
- Fix(mail): embed image logo only when using useTemplate (server#65427)
- Chore: Skip transaction when no preview exists (server#65445)
- Fix(encryption): use the block size of the file encoding when fixing sizes (server#65459)
- Perf: Partition preview migration job (server#65465)
- Perf(preview): only autorotate with Imaginary when needed (server#65486)
- Fix(appstore): only ask once for password confirmation (server#65495)
- Fix(user_ldap): Use proper function builder instead of hardcoded COUNT (server#65502)
- Fix(migration): check if deleted_by column exists before trying to add it to files_trash table (server#65517)
- Fix(dav): adjust password session check on legacy dav auth (server#65540)
- Fix: Store login name and not uid in session when login with webauthn (server#65548)
- Ci: run the guests integration tests against guests stable-4.10 (server#65553)
- Fix(files_sharing): show the owner avatar for received shares (server#65561)
- Fix(files): normalize Unicode in node paths (server#65565)
- Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65571)
- Fix(dav): resolve users before intersecting shares (server#65583)
- Chore: Update setup-php to 2.40.0 (server#65664)
- Fix: Playwright concurrency (server#65672)
- Fix: don't try to load keys for empty path for groupfolder versions (server#65675)
- Fix(ui): Consider typing and scrolling as activity for auto logout (server#65690)
- Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65694)
- Fix(encryption): Remember the recalculated unencrypted size as int (server#65700)
- Fix: Remove auto increment migration on share_external (server#65710)
- Fix(user_ldap): remove leftover debug log in getUserFromCustomAttribute (server#65712)
- Fix: move column drop in to separate migration (server#65718)
- Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65733)
- Fix(ci): clone vendored test apps from the matching stable branch (server#65874)
- Fix(files): skip quota check when opening files for reading (server#65879)
- Chore: flake update (server#65907)
- Fix(files_sharing): public share popover jumps on options toggle (server#65912)
- Fix(security): Update CA certificate bundle (server#65916)
- Fix: move/rename of part file in masked dir/storage (server#65933)
- Fix(provisioning_api): filter users by enabled state on the server (server#65947)
- Fix: Remove avatar and credentials only after user removal (server#65952)
- Fix(core): use %n in the integrity check plural to avoid a crash in L10N (server#65957)
- Ci: sync workflows with .github (server#65963)
- Fix(files_sharing): Make sure mount events are dispatched for share recipients (server#65989)
- Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65990)
- Fix(versions): empty array for external shares (server#66004)
- Fix(dav): detect truncated CardDAV sync results on all databases (server#66011)
- Fix(since): Ensure provided since version is from the current branch (server#66021)
- Build(deps): bump the symfony group across 1 directory with 9 updates (server#66031)
- Fix(dav): align public request path handling (server#66039)
- Fix: unique custom tokens for share links (server#66043)
- Build(deps): Bump Symfony packages (server#66134)
- Fix: properly handle webdav pagination headers (server#66155)
- Fix(external-share): move ExternalShareScanJob creation deeper. (server#66158)
- Fix(tags): display selected tag in settings (server#66163)
- Fix(log): Avoid crashes when building exception trace with a ghost (server#66173)
- Fix: improve live-photo handling (server#66189)
- Fix(CalDAV): extract data from occurance exemptions (server#66191)
- Fix: BearerAuth should not check for already loggedin user (server#66194)
- Fix(user_ldap): Fix variable name conflict for cache key (server#66197)
- Fix(dav): bind public share session authentication to the password hash (server#66203)
- Fix(user_ldap): do not cache unknown names in the local mapping cache (server#66208)
- Ci: drop cat of Imagick policy (server#66221)
- Fix(systemtags): properly handle object ids (server#66228)
- Fix(favorite): Limit tagging to favorite (server#66230)
- Fix(dav): do not grant write-properties to read-only calendar delegates (server#66236)
- Fix: Reject login with NUL bytes rather than converting (server#66241)
- Fix(provisioning_api): group admins can't add all users to groups (server#66264)
- Fix(share-folder): use it on federated share (server#66279)
- Fix(dav): register missing app config keys in the config lexicon (server#66282)
- Fix(encryption): Don't use ChunkingV2Plugin when server-side encryption is enabled (server#66289)
- Fix(files): Continue scanning after StorageInvalidException (server#66292)
- Fix: Use strict in_array in ApplicableHelper (server#66294)
- Feat(federation): ignore remote contacts (server#66306)
- Fix(theming): only accept canonical svg paths for themed icons (server#66311)
- Fix(files): check that the source properly between storages (server#66316)
- Fix(session): Prevent stale requests from replacing a regenerated session (server#66324)
- Fix(dav): allow moves within own share when sharing is disabled (server#66330)
- Fix(quota): Calculate used quota for foreign users the correct way (server#66333)
- Fix(webhook_listeners): Change Exception type (server#66342)
- Refactor(session): use ITimeFactory for superseded session markers (server#66351)
- Ci(psalm): run taint analysis with all available threads (server#66357)
- Fix(core): await enabling recommended apps before collecting results (server#66362)
- Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66366)
- Ci(dav): run CalDAVTester in a Python 2.7 container (server#66369)
- Fix(federatedfilesharing): match reshares by node, not by name (server#66372)
activity
- Fix(activity): reset the current user and release the teams session (activity#2925)
- Perf(activity): reintroduce activity_object index (activity#3022)
- Fix(files): do not publish incompletely built activity events (activity#3062)
- Chore: Set specific PHP platform to fix psalm CI (activity#3064)
- Fix(tests): Remove broken toast closing & remove use of query method (activity#3065)
- Fix(api): fall back to MIME icon when preview generation fails (activity#3069)
app_api
- Refactor(harp): compare the HaRP shared key with hash_equals (app_api#1115)
- Fix(deploy): round the memory and CPU limits to whole numbers (app_api#1121)
- Fix(docker): no PHP warning for a HaRP daemon without a key (app_api#1136)
- Fix(harp): send the route verb to HaRP (app_api#1141)
- Fix(proxy): match the route verb like HaRP (app_api#1146)
- Fix(harp): require HaRP 0.4.8 in the version check (app_api#1151)
- Fix(proxy): refuse dot segments resolved after the route check (app_api#1165)
- Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app_api#1170)
- Fix(proxy): check routes on each reading of the path like HaRP (app_api#1184)
bruteforcesettings
circles
- Feat(command): add --delete option to circles:remote (circles#3044)
- Fix(notifications): dismiss join request notification once processed (circles#3047)
- Fix: only show shared resources that are still acessible (circles#3053)
- Fix(mount-provider): Pass the recipient to the federated share storage (circles#3074)
- Enh(performance): query memberships breadth first to reduce query count (circles#3081)
- Fix(shares): keep circle context when share is resolved via circle (circles#3127)
- Fix(notification): Make relative action links absolute when preparing (circles#3134)
- Fix: use strict in_array (circles#3137)
files_downloadlimit
- Fix: disable props not supported with download limit (files_downloadlimit#1079)
- Ci: Add release relay job (files_downloadlimit#1085)
- Fix: count legacy share downloads only once (files_downloadlimit#1088)
files_lock
- Fix: widen lock identifiers and durations to bigint (files_lock#1320)
- Fix: allow force unlock without access of the lock owner (files_lock#1364)
- Fix(lock): only return string app names from getAppName (files_lock#1396)
- Ci: Add release relay job (files_lock#1415)
files_pdfviewer
logreader
- Feat(search): replace search popover with inline search field (logreader#2316)
- Perf(LogIterator): Read long lines in linear time (logreader#2329)
- Fix(LogTable): load entries until screen is filled (logreader#2362)
notifications
- Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3471)
- Ci(performance): Update actions (notifications#3504)
- Fix(webpush): Correctly hide already read notifications from webpush (notifications#3545)
- Feat: open the target when a background push notification is clicked (notifications#3546)
- Fix(web-notifications): open notification link in a new tab (notifications#3547)
- Apply hardenings found by automated scanner (notifications#3548)
- Fix(web-push): improve fetching notifications with web-push (notifications#3551)
photos
- Fix(tags): read the tag id from the node instead of its attributes (photos#3873)
- Chore(deps): combine pending dependency updates (photos#4030)
- Fix(filters): respect share download permission in filtered albums (photos#4035)
- Honor EXIF OffsetTimeOriginal (photos#4038)
privacy
recommendations
- Ci: workflow templates and npm audit fix (recommendations#1199)
- Chore(deps): bump npm dependencies (recommendations#1203)
related_resources
serverinfo
text
- Fix(files): edited files marked locked in files list after close (text#9377)
- Fix(Table): return Tab and Shift-Tab handler results to mark the even… (text#9379)
- Fix(attachments): rewrite attachment file ids when copying folders (text#9390)
- Fix(attachments): normalize attachment names to Unicode NFC (text#9395)
- Fix(math): import katex css from component (text#9400)
- Fix(notifications): notify mentioned users about mentions by guests (text#9403)
- Fix(migration): quote identifiers in oracle index creation (text#9407)
- Fix(migration): create text_steps index ascending on oracle (text#9471)
- Fix(menu): make component actions work from the remaining actions menu (text#9474)
- Fix misc flaky tests (text#9480)
- Perf(cleanup): Optimize cleanup job (text#9516)
- Fix(sessions): only use share node matching the session document (text#9521)
- Fix(editor): do not force save when clicking the save indicator (text#9527)
- Fix: don't silently drop outside changes (e.g. from external storage) (text#9539)
- Perf(editor): only serialize markdown on update when it is read (text#9543)
- Fix(sync): improve situation around false conflicts (text#9551)
- Fix: improve gap cursor usage (text#9553)