Security
- Validate certificate signatures before letting people register public certificates. This would only allow developers to claim apps if they knew the public certificate. App uploads however were impossible without knowing the signature.
Added
- Added new Nextcloud version fixtures
- Added support for several new XML elements in schema
- Added support to switch between language comments
- Added support to easily post ratings in multiple languages
- Added support for running New Relic on servers
- Added ability to transfer app ownership
- Added commands to update tokens, set a default password for an admin user for development and verify an email address
Fixed
- Replace _ with - in app ids to match Discourse links
- Remove duplicate entries for languages in comments
- Fix layout issues in list view if app names were longer than expected
- Return proper 400 codes in case certificate validation fails
- API: Do not return duplicate releases for apps
Changed
- Migrated frontend code to Typescript + Webpack
- Require bug tracker to present in info.xml
- Require max-version to be present for Nextcloud versions
- Extracted api and account settings into a separate app
- Moved app schema to a different path, make sure to adjust your webserver config
- Migrated to yarn as package manager
- The update script now stops and restarts the apache server during the update
Removed
- Dropped Python 3.4 support
- Dropped app ownership table