Security
- Validate certificate signatures before letting people register public certificates. This would only allow developers to claim apps if they knew the public certificate. App uploads however were impossible without knowing the signature.
Added
- Added new Nextcloud version fixtures
- Added support for several new XML elements in schema
- Added support to switch between language comments
- Added support to easily post ratings in multiple languages
- Added support for running New Relic on servers
- Added ability to transfer app ownership
- Added commands to update tokens, set a default password for an admin user for development and verify an email address
- Added Nextcloud 12 app template
- Added validation for database.xml files
- Added support for Apache 2.0 and MPL 2.0 licenses
Fixed
- Replace _ with - in app ids to match Discourse links
- Remove duplicate entries for languages in comments
- Fix layout issues in list view if app names were longer than expected
- Return proper 400 codes in case certificate validation fails
- API: Do not return duplicate releases for apps
- Do not show an error message when an unexpected content type is being returned when registering or uploading an app
Changed
- Migrated frontend code to Typescript + Webpack
- Require bug tracker to present in info.xml
- Require max-version to be present for Nextcloud versions
- Extracted api and account settings into a separate app
- Moved app schema to a different path, make sure to adjust your web-server config
- Migrated to yarn as package manager
- The update script now stops and restarts the apache server during the update
- MAX_DOWNLOAD_INFO_XML_SIZE setting has been renamed to MAX_DOWNLOAD_FILE_SIZE which defaults to 1Mb now instead of 512Kbs
- Another schema (database.xsd) needs to be added to your web-server config
Removed
- Dropped Python 3.4 support
- Dropped app ownership table