nextcloud/server v28.0.0beta1 on GitHub

What's Changed

bump @typescript-eslint/parser from 5.59.2 to 5.59.5 by @dependabot in #38235
Use the color-primary-element* variables by @szaimen in #38223
fix: Wrap filesystem LockedExceptions for holding the readable path by @juliushaertl in #37621
fix: Check for wrapped retriable exceptions to handle deadlocks by @juliushaertl in #37709
Update icewind/streams to 0.7.7 in files_external by @come-nc in #38195
fix: Do not attempt to use l10n files as sources for combined js files by @juliushaertl in #38237
Add an occ command to scan files for legacy file key in use and get rid of those by @come-nc in #38080
Check if version has entity before trying to access it by @solracsf in #38224
Make it easier to debug issue #32304 by @CarlSchwan in #32961
Fix incosistent scrolling in Firefox by @szaimen in #38242
bump tar from 6.1.13 to 6.1.14 by @dependabot in #38231
fix(carddav): Mark system address book as read-only by @ChristophWurst in #38247
Get rid of more int casts in file size manipulations by @come-nc in #38196
[user_status] Improve user online status modal by @susnux in #38127
Adjust file custom picker component padding by @julien-nc in #38256
check the username when doing external storage session auth by @icewind1991 in #38265
Convert Add group link to button by @Fenn-CS in #38202
disable pull-down-to-refresh for mobile by @szaimen in #38225
fix(lostpassword): Also rate limit the setPassword endpoint by @nickvergessen in #38267
fix(settings): Fix UserList styles set to css but scss is used by @susnux in #38293
fix(middleware): Also abort the request when reaching max delay in af… by @nickvergessen in #38274
fix(mimetype): Fix returning value when finding existing mimetype in MimeType Loader by @tcitworld in #38065
fix(dav): Run system address book create-if-not-exists in transaction by @ChristophWurst in #37965
Fix generated avatars cache by @provokateurin in #38143
Wrapper method to easily retry deadlock exceptions by @juliushaertl in #38030
Add css variables for info colors (--color-info) by @susnux in #38205
feat(CardDAV): Add Sabre\DAV\IMoveTarget support to OCA\DAV\CardDAV\AddressBook by @tcitworld in #37326
Rename numericStorageId to numericExternalStorageId in PersonalMount.php by @DerGenaue in #38115
fix(search): fix load more by @skjnldsv in #38303
Fix : Share Expire After N Days width by @Jerome-Herbinet in #38101
fix(workflowengine): Remove unused property track-by by @nickvergessen in #38310
docs: add dbtableprefix to sample config by @pulsejet in #38321
Fixed 'overwritewebroot' not work with 'overwritecondaddr'. by @takahiro-blab in #31001
fix(login): Make login form and footer look like a dashboard panel by @susnux in #38131
fix(preview-generator): Throw exception before dividing by zero when generating previews by @tcitworld in #36692
chore(deps): Bump @nextcloud/vue from 7.11.4 to 7.11.6 by @Pytal in #38316
chore(deps): Bump webdav from 5.0.0-r3 to 5.0.0 by @Pytal in #38295
dashboard: Adjust border radius of panels to match main content container by @susnux in #38327
Fix codeowners named Χριστόφορος by @Pytal in #38328
disable contacts menu features that regularly fail on drone by @szaimen in #38337
Master is now 28 by @nickvergessen in #38336
Adjust style of passwordless login by @susnux in #38330
chore(deps-dev): Bump guzzlehttp/guzzle from 7.5.1 to 7.6.1 in /build/integration by @dependabot in #38346
Remove focus-visible polyfill by @pulsejet in #38323
chore(deps-dev): Bump phpunit/phpunit from 9.6.7 to 9.6.8 in /build/integration by @dependabot in #38234
chore(deps-dev): Bump cypress from 12.11.0 to 12.12.0 by @dependabot in #38232
Use aria-expanded correctly on toggle user actions by @Fenn-CS in #38294
38340 fix add group broken by @Fenn-CS in #38344
migrate a few components to NcSelect by @szaimen in #38306
Mark comments as read by @Pytal in #32775
Remove some dead code in files app by @pulsejet in #38332
redis: use atomic operations everywhere by @pulsejet in #37758
Make unsupported browser check asynchronous by @pulsejet in #38354
chore(deps-dev): Bump tar from 6.1.14 to 6.1.15 by @dependabot in #38372
Allow enforcing share passwords only when already asking for a password by @danxuliu in #38227
Show pending popover menu when password is enabled by default by @danxuliu in #38164
[master] Update psalm-baseline.xml by @nextcloud-command in #38162
fix loading custom logo image by @icewind1991 in #38291
reload filelist when adding or removing shares by @icewind1991 in #38259
add imaginary_key by @JanisPlayer in #38365
Remove deprecated OC.appSettings API by @susnux in #38400
bug-report-template - move Official All-in-One appliance to the bottom by @szaimen in #38393
fix(carddav): Check if SERVER variables are set before accessing them by @miaulalala in #38308
Add label to "default quota" multiselect by @JuliaKirschenheuter in #38075
fix(SAB): Save avatar to SAB by @JohannesGGE in #38413
Refactors Command/Encryption/Enable.php to improve code readability. by @fsamapoor in #37665
Log to error_log in fatal case by @R0Wi in #36316
Optimize webpack chunking by @pulsejet in #38329
Avoid db connections when logging db connection errors by @Fenn-CS in #37458
don't always check if we need to setup the object store root by @icewind1991 in #38415
webpack: add nonce to unsupported-browser-redirect chunk by @pulsejet in #38374
Add OpenAPI specs by @provokateurin in #38438
fix(files): make open folder a default action by @skjnldsv in #38441
fix(carddav): Check enumeration settings for all SAB methods by @ChristophWurst in #38423
Revert "Fix table view" by @JuliaKirschenheuter in #38458
fix(carddav): Make system contact phone number RFC compliant by @GretaD in #38454
fix(carddav): Don't show system address book cards to guests by @ChristophWurst in #38448
Increase from 100000 to 600000 iterations for hash_pbkdf2 by @come-nc in #38206
adjust active element visibility in the usermenu by @szaimen in #38459
adjust active element visibility in the sidebar by @szaimen in #38460
fix: better error message on missing user files dir by @skjnldsv in #38300
Fix deletion of User when system link are used in him user folder by @tanganellilore in #38429
Add fallback when a there is no preview for a version by @artonge in #38467
fix(dav): Fix avatar size in system address book by @nickvergessen in #38481
weather_status: Improve contrast of favorite icon by @susnux in #38333
chore(deps-dev): Bump puppeteer from 19.10.1 to 20.4.0 by @dependabot in #38492
fix: catch errors in id3parser library by @kesselb in #38496
Fix initialisation of versions in the DB by @artonge in #38469
Improved display of app links by @Jerome-Herbinet in #38520
ci: Use conventional commits for CA bundle updates by @ChristophWurst in #38537
[master] Update ca-cert bundle by @nextcloud-command in #38534
fix(docs): Fix language and copy-paste class name in docs of CSP by @nickvergessen in #38513
chore(deps): Drop swiftmailer/swiftmailer by @ChristophWurst in #38516
log failures to read certificates during listing by @icewind1991 in #38468
chore!: Drop \OC_App::isEnabled by @ChristophWurst in #38551
chore!: Drop \OC_Defaults::getLogoClaim by @ChristophWurst in #38552
chore(libphonenumber): Bump giggsey/libphonenumber-for-php to giggsey… by @nickvergessen in #38514
Fix app menu flicker by @ZetaTom in #38549
chore: Drop app code checker test data by @ChristophWurst in #38550
fix(trashbin): Truncate long filenames by @Pytal in #38355
fix(caldav): Ignore invalid events for reminder generation by @ChristophWurst in #38301
Drop \OC_App methods deprecated in Nextcloud 14 by @ChristophWurst in #38566
fix(ocp): Mark IMessage::attachInline as @SInCE 27 by @ChristophWurst in #38586
Remove deprecated legacy loader from OC by @susnux in #38567
redis: Do not try to authenticate with non-string password/user by @rawtaz in #38568
Refactors "strpos" calls in lib/private to improve code readability. by @fsamapoor in #38261
fix(CI): Temporary workaround - Run Psalm CI with 1 thread only so it… by @nickvergessen in #38597
chore: update workflows from templates by @skjnldsv in #38486
feat(ocp): Allow sending emails with subject and body by @ChristophWurst in #38585
fix(dispatcher): Migrate to OCP event dispatcher before symfony/event… by @nickvergessen in #38545
chore(ocp)!: Drop \OCP\Util::linkToPublic by @ChristophWurst in #38593
chore: remove check for suhosin.executor.func.blacklist by @kesselb in #38595
[master] Fix npm audit by @nextcloud-command in #38497
refactor: migrate OC_EventSource to dependency injection by @kesselb in #38386
Refactors "strpos" calls in /core to improve code readability. by @fsamapoor in #38602
openapi: Fix wrapping OCS responses that are not DataResponse by @provokateurin in #38640
Refactors "strpos" calls in /apps/user_ldap by @fsamapoor in #38608
Refactors "strpos" calls in /apps/files_sharing by @fsamapoor in #38620
bump marked from 4.3.0 to 5.0.4 by @dependabot in #38627
Refactors "strpos" calls in lib/public to improve code readability. by @fsamapoor in #38260
Refactors "strpos" calls in /apps/theming by @fsamapoor in #38611
chore(app): Do not clear unused cache key by @ChristophWurst in #38524
feat: remove check for OpenSSL 1.0.1d and 1.0.2b by @kesselb in #38635
[master] fix: Catch Deadlock properly as execute throws Doctrine exceptions not our wrapped ones by @backportbot-nextcloud in #38478
Fix OpenAPI core paths by @provokateurin in #38656
fix: Throw early when a service cannot be found in the app container by @juliushaertl in #38322
fix(caldav): Close DB cursor in reminder index background job by @ChristophWurst in #38649
Fix contrast for inactive elements of the main navigation by @JuliaKirschenheuter in #38519
chore: Drop dead private methods in /lib by @ChristophWurst in #38652
Adjust files favorite marker to fulfill A11Y contrast requirements by @susnux in #38370
chore: Do not sass-compile external apps by @ChristophWurst in #38590
fix(caldav): Cast calendar objects id to int when building index by @ChristophWurst in #38648
Improve oauth2 database migration from ownCloud by @julien-nc in #38577
feat: set background = backgroundColor via occ by @kesselb in #38631
enh(theming): RGBY contrast by @Pytal in #38211
fix(systemtags): Incorrect tags shown temporarily by @Pytal in #38655
Disable background color on group-header line (on hover, focus, active) by @Jerome-Herbinet in #38662
Store encrypted OAuth2 client secrets by @julien-nc in #38398
fix(apache): Serve mjs (module javascript) as static files by @susnux in #38688
fix(weather_status): Always show all favorite locations by @susnux in #38664
fix(actions): cypress by @skjnldsv in #38694
chore(deps-dev): Bump tslib from 2.5.0 to 2.5.3 by @dependabot in #38696
chore(deps-dev): Bump css-loader from 6.7.3 to 6.8.1 by @dependabot in #38695
Update bug report issue template by @solracsf in #38700
Fix oauth2 tests by @julien-nc in #38701
fix wrong link in issue template by @szaimen in #38710
chore(deps): Bump @nextcloud/vue from 7.11.6 to 7.12.0 by @Pytal in #38715
Do not cast sizes to int in Trashbin class by @come-nc in #38703
Avoid requests to opengraph image if no host detected by @julien-nc in #38645
add utility command for object store objects by @icewind1991 in #38226
chore(deps-dev): Bump dms/phpunit-arraysubset-asserts from 0.4.0 to 0.5.0 in /build/integration by @dependabot in #38733
chore(deps): Bump @nextcloud/event-bus from 3.0.2 to 3.1.0 by @dependabot in #38734
Uses "Null Coalescing Operator" to improve code readability. by @fsamapoor in #38543
Refactors "strpos" calls in /apps/files_external by @fsamapoor in #38619
Drop meta robots header by @solracsf in #38725
[1/3] Refactors /core controllers using constructor property promotion. by @fsamapoor in #38636
allow to specify upgrade.cli-upgrade-link in order to link to the correct documentation by @szaimen in #38735
fix(caching): Avoid checking existence before fetching by @ChristophWurst in #38591
chore(appframework)!: Drop \OCP\AppFramework\Http\EmptyContentSecurityPolicy::allowInlineScript by @ChristophWurst in #38642
Add a Dependabot configuration to autoupdate GitHub action versions by @kurtmckee in #38737
chore(deps): Bump skjnldsv/read-package-engines-version-actions from 1.1 to 2.2 by @dependabot in #38785
chore(deps): Bump actions/upload-artifact from 2 to 3 by @dependabot in #38788
chore(deps): Bump peter-evans/create-or-update-comment from 2 to 3 by @dependabot in #38786
chore(deps): Bump actions/setup-node from 2 to 3 by @dependabot in #38787
ci: pin setup-php to avoid a regression by @blizzz in #38781
Add config variable for curl timeout by @dfuchss in #38292
fix(carddav): Make SystemAddressBook::__construct $groupManager argument nullable by @ChristophWurst in #38777
Allow stdClass in XML responses by @provokateurin in #38745
Enable version features again with S3 versioning by @bensmrs in #38794
Bump @nextcloud/auth @nextcloud/axios @nextcloud/calendar-availability-vue @nextcloud/dialogs @nextcloud/files and @nextcloud/router by @skjnldsv in #38803
emit an event when a message is logged by @icewind1991 in #38490
make sure to show download button only one time by @szaimen in #38804
[master] Fix npm audit by @nextcloud-command in #38742
Specify the parameters of FederatedFileSharing controllers by @nickvergessen in #36214
Make oauth2 client secret column larger by @julien-nc in #38770
[master] Update psalm-baseline.xml by @nextcloud-command in #38827
Fix files API route names by @provokateurin in #38830
fix: Removed invalid user from CODEOWNERS file by @ChristophWurst in #38841
align subadmins css class name by @Jenandra in #38793
generate user themed favicon and touchicon by @szaimen in #38823
fix type in BeforeMessageLoggedEvent by @icewind1991 in #38843
fix(core): Do not invert app menu text color by @Hephi2 in #38776
Cleanup controller service aliases by @provokateurin in #38878
fix confusion around mail settings and improve layout a bit by @szaimen in #38868
[2/3] Refactors /core controllers using constructor property promotion. by @fsamapoor in #38637
Add bruteforce protection in OauthApiController by @julien-nc in #38773
bump @nextcloud/files from 3.0.0-beta.9 to 3.0.0-beta.10 by @dependabot in #38865
Uses PHP8's constructor property promotion in core/Command/User classes. by @fsamapoor in #38766
Uses PHP8's constructor property promotion in core/Command/Db classes. by @fsamapoor in #38764
Uses PHP8's constructor property promotion in core/Command/Maintenance by @fsamapoor in #38767
style(config): alphabetise preview providers by @SimJoSt in #38876
Uses PHP8's constructor property promotion core/Command/App,/Background, and /Broadcast by @fsamapoor in #38769
use source cache when listing folder during recursive copy by @juliushaertl in #38890
Don't disable actions when saving share permissions by @artonge in #38888
Uses PHP8's constructor property promotion in core/Command/Log, /Security, and /SystemTag by @fsamapoor in #38774
Cleanup comments code by @CarlSchwan in #35424
[3/3] Refactors /core controllers using constructor property promotion. by @fsamapoor in #38638
Bugfix/36644 pruneOutdatedSyncTokens deletes all entries by @charno in #38639
Uses PHP8's constructor property promotion in core/Command/Config and Group by @fsamapoor in #38768
Uses PHP8's constructor property promotion in core/Command/Encryption by @fsamapoor in #38762
adjust admin setup check to increase warning to configure https by @szaimen in #38915
Add files actions testing + code coverage by @skjnldsv in #38806
chore: Adjust editorconfig for package.json and package-lock.json by @nickvergessen in #38927
chore: update node engines to next LTS by @nextcloud-command in #38924
enh(a11y): New user modal by @Pytal in #38826
perf: skip request without write permission by @kesselb in #38747
fix(l10n): Fix plural issue with different locale and language by @nickvergessen in #38917
fix(systemtags): Add missing systemtags index by @marcelklehr in #38928
fix(sab): put location in proper address field by @JohannesGGE in #38856
Uses PHP8's constructor property promotion core/Command/Info, /Integrity, and /Preview by @fsamapoor in #38771
implement optimized getDirectoryContent for DAV by @icewind1991 in #38945
Use default page size for jumping to desired offset by @come-nc in #38457
[f2v] Rename, favorite and edit locally actions by @skjnldsv in #38939
chore(deps): Bump fast-xml-parser and webdav by @dependabot in #38951
fix: Avoid failing to update the current version entry if there is none by @juliushaertl in #38800
Align collaborative tags differently by @Jerome-Herbinet in #38948
dav: clean path before putting it in the statcache by @icewind1991 in #38965
fix: expect interface, not a specific implementation by @blizzz in #38625
Move deprecation warnings to debug by @szaimen in #38852
feat: add detected mime type to exception by @kesselb in #38844
[master] Fix npm audit by @nextcloud-command in #38869
Refactors lib/private/Contacts. by @fsamapoor in #38986
fix(weather_status): Pass address as param to OSM API by @susnux in #38665
fix: restore AppsSlideToggle feature by @skjnldsv in #38988
Refactors lib/private/Mail. by @fsamapoor in #38987
use getsystemvalue-functions in Mailer.php by @szaimen in #38958
Uses PHP8's constructor property promotion in core/Command and / by @fsamapoor in #38775
feat: add width, height, crop and mode to BeforePreviewFetchedEvent by @kesselb in #38679
file scanner performance improvements by @icewind1991 in #38858
Fix user log.condition feature by @come-nc in #38881
Add "button" class to the QR code link by @Jerome-Herbinet in #39015
fix(dav): Catch SAB sync errors during upgrade by @ChristophWurst in #39005
Refactor lib/private/Calendar by @fsamapoor in #38990
Adds same object return annotations to lib/private/Mail classes by @fsamapoor in #39020
chore: upgrade typescript, eslint and fix lint by @skjnldsv in #39029
use more efficient tag retrieval on DAV report request by @blizzz in #37969
Migrate deprecated vue property by @susnux in #39038
feat(HTTPClient): Provide wrapped access to Guzzle's asyncRequest() by @nickvergessen in #38613
Replace id3parser with mp3info by @kesselb in #38498
Adjust saving of status messages by @Antreesy in #38832
fix(ocp): TimedJob can't have a more specific argument than Job by @ChristophWurst in #39042
Replace plain input fields with NcTextField fields and NcMultiSelect … by @JuliaKirschenheuter in #38839
Fix creating events with old (< unix time) lastoccurence by @tcitworld in #31790
Refactors "strpos" calls in /apps/comments by @fsamapoor in #38605
display displayname on federated shares by @ArtificialOwl in #35915
Migrate federation application to LoggerInterface by @come-nc in #39018
Add getDocBaseUrl on theming app by @tanganellilore in #38900
fix(cypress): branch definition and update from template by @skjnldsv in #39076
chore(deps): Bump cypress-io/github-action from 5.8.1 to 5.8.3 by @dependabot in #38863
Add types to responses by @provokateurin in #38802
fix(files): Only render the menu if there are actions to show by @juliushaertl in #39025
Update aria-expanded attribute for sidebar apps-slide-toggles by @Fenn-CS in #39049
Reduce load of files versions preview loading by @artonge in #38905
fix(settings): Migrate away from deprecated NcPopoverMenu by @susnux in #39073
Silent imagecreatefromstring() errors by @solracsf in #39093
fix(settings): Migrate away from NcAppNavigationCounter by @susnux in #39102
Add IProvideEnabledStateBackend interface by @come-nc in #34443
[master] Update psalm-baseline.xml by @nextcloud-command in #39096
files_sharing: Remove orphaned file with deprecated imports by @susnux in #39103
feat(ocp): More specific type for ICapabilities::getCapabilities by @ChristophWurst in #39057
psalm: Disable cache by @provokateurin in #39120
Fix event names of 2FA related typed events by @nickvergessen in #39089
Bump sabre/http to 5.1.7 in master by @come-nc in #39070
enh(sab): Add profileUrl to SAB by @JohannesGGE in #38969
psalm: Enable more/less specific errors by @provokateurin in #39116
Fix password confirmation master by @marcelklehr in #39127
Uses PHP8's constructor property promotion in core/Migrations by @fsamapoor in #38974
Uses PHP8's constructor property promotion in remaining /core classes by @fsamapoor in #38975
fix(sse): don't update uncached files by @st3iny in #39115
Cast string type for trim() by @dartcafe in #38910
[2/3] Refactors lib/private/Security by @fsamapoor in #39012
feat(admin_audit): Migrate to non-deprecated IEventDispatcher by @nickvergessen in #39086
fix(ocp): Fix reference of dashboard IAPIWidget::getItems from WidgetItem by @ChristophWurst in #39043
fix(eventdispatcher): Don't use all evaluating "or" by @nickvergessen in #38955
fix(TagSearchProvider): Short circuit if no tag matches the query by @marcelklehr in #39062
Refactors lib/private/Accounts classes by @fsamapoor in #38978
Admin audit app: optimization according to PHP 8 by @danialRahimy in #38176
[f2v] Favorites view by @skjnldsv in #38950
Add OCSPreconditionFailedException by @artonge in #39164
Enable all files_versions features when groupfolders is enabled by @artonge in #39165
chore: Replace \OC::$server->query with \OCP\Server::get in /lib by @ChristophWurst in #38663
fix: Cleanup unused imports and some type deprecations by @nickvergessen in #39189
fix: Remove deprecation warning for already removed API by @susnux in #39200
fix(cypress): revert only toggle by @skjnldsv in #39203
docs(dav): remove outdated comment by @blizzz in #39204
user_status: Add OpenAPI spec by @provokateurin in #39133
fix(files_sharing): hide download permission for circle shares by @st3iny in #39146
comments: Add OpenAPI spec by @provokateurin in #39257
add command do delete orphan shares by @icewind1991 in #39170
Add IgnoreOpenAPI attribute by @provokateurin in #39263
weather_status: Add OpenAPI spec by @provokateurin in #39274
preload custom properties when propfinding folders by @icewind1991 in #39248
settings: Add OpenAPI spec by @provokateurin in #39284
theming: Add OpenAPI spec by @provokateurin in #39287
sharebymail: Add OpenAPI spec by @provokateurin in #39272
fix(dav): Move DAV app to non deprecated event dispatcher by @nickvergessen in #39190
dashboard: Add OpenAPI spec by @provokateurin in #39286
Migrate federated file sharing to PSR LoggerInterface by @Altahrim in #39160
Migrate files sharing to PSR LoggerInterface by @Altahrim in #39169
feat(request): Allow to match the client version with the IRequest::U… by @nickvergessen in #38561
federation: Add OpenAPI spec by @provokateurin in #39280
chore(deps): Bump semver from 5.7.1 to 5.7.2 by @dependabot in #39296
feat(sharing): add sharing overview view by @skjnldsv in #39196
Set double outline to buttons in focus state by @JuliaKirschenheuter in #39277
updatenotification: Add OpenAPI spec by @provokateurin in #39312
dav: Add OpenAPI spec by @provokateurin in #39315
[master] Fix npm audit by @nextcloud-command in #39104
fix(flow): Revert invalid rename of check class for RequestTime by @juliushaertl in #39268
ci(32bit): fix failing test setup by @blizzz in #39324
files: Add OpenAPI spec by @provokateurin in #39327
add commands to copy/move files by @icewind1991 in #38366
chore(deps-dev): Bump @pinia/testing from 0.0.16 to 0.1.2 by @dependabot in #39336
fix: Avoid failing with duplicate checks by @juliushaertl in #36830
fix(workflowengine): Migrate from deprecated NcMultiselect to NcSelect by @susnux in #39337
fix(dav): close cursor when fetching max id by @st3iny in #39297
files_trashbin: Add OpenAPI spec by @provokateurin in #39320
enh(a11y): Users table by @Pytal in #39050
cloud_federation_api: Add OpenAPI spec by @provokateurin in #39318
fix(updatenotification): Remove deprecated NcPopoverMenu and use NcActions instead by @susnux in #39106
files_versions: Add OpenAPI spec by @provokateurin in #39319
federatedfilesharing: Add OpenAPI spec by @provokateurin in #39328
oauth2: Add OpenAPI spec by @provokateurin in #39316
cloud_federation_api: Fix OpenAPI spec by @provokateurin in #39341
chore(CI): Sign .drone.yml file by @nickvergessen in #39343
files_external: getStorage before remove by @ArtificialOwl in #39323
Remove jQuery from main entry point where not needed by @susnux in #39210
core: Add OpenAPI spec by @provokateurin in #39331
files_external: Add OpenAPI spec by @provokateurin in #39321
fix(node): non-existing folder is not searchable by @blizzz in #39339
fix: also run phpunit on apps/theming/css modified files by @skjnldsv in #39329
fix(db): no hardcoded table prefix is expected by @blizzz in #39380
feat: Add public event for missing indices by @juliushaertl in #39389
fix(CardDAV): catch right exception when checking for federated app classes by @miaulalala in #39132
fix(i18n) Changed grammar related to "login" by @rakekniven in #39401
fix(core): Add password confirmation requirement for getapppassword by @nickvergessen in #39416
fix(profile): fix getUID on nullable user variable by @tcitworld in #39309
fix: check that object store backend supports multi part uploads by @kesselb in #39432
chore(deps): Bump dompurify from 2.4.5 to 3.0.5 by @dependabot in #39405
chore(deps-dev): Bump phpunit/phpunit from 9.6.8 to 9.6.10 in /build/integration by @dependabot in #39403
fix: Always apply fullscreen styling to sidebar by @juliushaertl in #39378
chore: update codeowners for 2fa by @kesselb in #39442
Fix: ContactManager search with fullmatch by @JohannesGGE in #38907
Fix sharing of encrypted files by @come-nc in #39447
feat(dav): Emit a typed event to deprecate OCA\DAV\Connector\Sabre::addPlugin by @nickvergessen in #39305
chore(3rdparty): update symfony/process to 5.4.24 by @kesselb in #39441
enh(contacts): show/hide addressbooks for all by @JohannesGGE in #38397
fix: Correctly add module content type to script tags with versions by @susnux in #39456
fix(l10n): User manager by @Pytal in #39444
fix(files): default emptycontent message by @skjnldsv in #39229
chore(3rdparty): update symfony/console to 5.4.24 by @kesselb in #39455
fix(comments): Emit CommentsEntityEvent as typed event by @nickvergessen in #39304
Migrate more apps to IEventDispatcher by @nickvergessen in #39222
chore(3rdparty): update symfony http-foundation, routing and translat… by @kesselb in #39477
fix(s3): Pass SSE-C parameters for multipart upload by @juliushaertl in #38934
fix(apps): Fix loading info.xml file by @nickvergessen in #39490
Bugfix/bulk upload empty files by @mgallien in #39221
add summary of detected changes to files:scan output by @icewind1991 in #38860
clean failed upload chunks by @icewind1991 in #38930
Add optional to add backtrace to log items by @icewind1991 in #39275
handle more exceptions in AmazonS3::fopen by @icewind1991 in #39367
fix(caldav): Assign initial value to typed CalendarQuery properties by @ChristophWurst in #39504
enh(a11y): Add aria-modal to dialogs by @Pytal in #39382
Add more space below item preview explanation by @JuliaKirschenheuter in #39460
Remove opacity on federation control action buttons by @JuliaKirschenheuter in #39476
Add instance category while checking new updates by @Altahrim in #39264
Introduce LanguageModel/TextProcessing OCP API by @marcelklehr in #38854
switch to bootstrap font-stack by @szaimen in #39008
Only show weather credits if necessary by @julien-nc in #39527
enh(a11y): User management settings dialog by @Pytal in #39402
Refactors "strpos" calls in /apps/settings by @fsamapoor in #38606
feat(db): Ensure that index names are unique across the database by @nickvergessen in #39506
Change color for primary element on hover by @JuliaKirschenheuter in #39317
Typed events for db:add-missing-… by @nickvergessen in #39487
fix(dispatcher): Move remaining simple cases in apps/ folder to IEven… by @nickvergessen in #39485
fix(files): Adjust files favorite marker for vue file list being cropped by @susnux in #39483
chore(3rdparty): update punic to 3.8.1 by @kesselb in #39486
fix(SystemTagManager): Use truncated tagName in getTag and updateTag by @marcelklehr in #38667
Move lib/ events to IEventDispatcher where possible by @nickvergessen in #39571
/ocs/v1.php/cloud/groups UPDATE method - correct status when group not found by @bigcat88 in #39537
[master] Fix npm audit by @nextcloud-command in #39409
fix!: Remove symfony EventDispatcherInterface from OC\User and OC\Group by @nickvergessen in #39595
fix: log fopen calls when stream isn't available by @miaulalala in #37624
fix(IParallelAwareJob): Check for other reserved jobs before setting new ones as reserved by @marcelklehr in #39473
fix share roots always being marked as writable by @icewind1991 in #38179
fix(i18n) Fixed grammar by @rakekniven in #39474
provisioning_api: Add OpenAPI spec by @provokateurin in #39223
feat(settings): Show supported apps on app settings if subscribed by @susnux in #39586
core: Document text processing API by @provokateurin in #39634
user_ldap: Add OpenAPI spec by @provokateurin in #39313
fix(s3): add SSE-C parameters to headObject call by @ir0nhide in #39629
fix(files): url used to retrive storage stats by @max-nextcloud in #39588
fix(storage): fallback to copy and unlink when rename fails by @kesselb in #38623
fix: correct hint for missing posix extension by @kesselb in #38581
fix(files_sharing): String translations by @Pytal in #39649
files_sharing: Add OpenAPI spec by @provokateurin in #39330
ci(checkers): Require composer autoloaders for all shipped apps by @ChristophWurst in #37481
Fixes in update-3rdparty command by @come-nc in #39652
Bump deepdiver1975/tarstreamer to 2.1.0 in master by @come-nc in #39587
Migrate files external to PSR LoggerInterface by @Altahrim in #39480
fix(i18n) Changed case of "Files" by @rakekniven in #39400
[f2v] feat(files_external): migrate to vue by @skjnldsv in #39577
fix(i18n) Fixed grammar by @rakekniven in #39475
fix(files): Remove duplicated outline on file name of vue file list by @susnux in #39609
feat(files): migrate recent view by @skjnldsv in #39613
fix(dav): use quota of destination in s3 chunk upload by @max-nextcloud in #39672
AI admin settings by @marcelklehr in #39567
Update to nextcloud-vue 8 (beta) by @susnux in #39540
Refactors files app commands by @fsamapoor in #39150
[master] Update psalm-baseline.xml by @nextcloud-command in #39219
[master] fix(files): fix extension with custom displayName by @skjnldsv in #39656
Fix OpenAPI specs by @provokateurin in #39641
feat(theming): add mime accept in Theming image file picker by @skjnldsv in #39673
fix: missing argument for TextProcessing Manager by @kesselb in #39684
chore: add pr-feedback workflow by @kesselb in #39696
Changed mapping to font by @Dany1718 in #34419
feat: File reminders backend by @Pytal in #39651
fix(notifications): Remove share notification when the node is deleted by @nickvergessen in #39689
fix!: Final round of moving to IEventDispatcher by @nickvergessen in #39605
fix: adjust test for font icon by @kesselb in #39705
chore(3rdparty): update symfony/mailer to 5.4.22 by @kesselb in #39662
[master] Update psalm-baseline.xml by @nextcloud-command in #39708
Catch more invalid cache source storage paths by @joshtrichards in #39698
Refactors "strpos" calls in /apps/workflowengine by @fsamapoor in #38604
files_external: Fix OpenAPI by @provokateurin in #39717
bump oc_version to 28.0.0.1 by @hamza221 in #39660
New OCS endpoint to list text processing tasks by @julien-nc in #39680
Avoid adding (attribute=) part to filter which will confuse LDAP servers by @come-nc in #39058
Update blog URL (formerly "/news") by @Jerome-Herbinet in #39715
expose gps data via webdav by @tobiasKaminsky in #39694
Migrate away from ILogger in encryption by @come-nc in #39065
Support opening and comparing versions in viewer by @artonge in #39171
fix(cypress): Flaky tests by @Pytal in #39682
feat(caldav): linkify location in scheduling mails by @st3iny in #39753
optimize calendar search query by @jmcclelland in #39741
feat: Set file reminders by @Pytal in #39685
test: remove broken steps from files acceptance test by @kesselb in #39778
fix(deps)!: Upgrade symfony/event-dispatcher to supported version 5.4.26 by @nickvergessen in #38546
fix: Pass proper viewer filename by @juliushaertl in #39789
log imaginary errors as info to not spam the server logs by @szaimen in #39780
docs: remove superfluous phpdocs by @kesselb in #39449
Refactor user_ldap group membership cache and add check-group command by @come-nc in #39446
chore: remove version check for apc extension by @kesselb in #39723
AppEcosystem Authentification by @bigcat88 in #39655
enh(files_reminders): Adjust reminder options by @Pytal in #39798
Fix text processing OpenAPI by @provokateurin in #39809
Add OpenAPI CI by @provokateurin in #39716
Allow "wasm-unsafe-eval" in CSP by @danxuliu in #38082
"Allow untested app" wording by @Jerome-Herbinet in #39575
fix: close cursor after reading the invitation by @kesselb in #39700
fix(updatenotification): Skip update check by @Pytal in #39806
chore(deps-dev): Bump eslint-plugin-cypress from 2.13.3 to 2.14.0 by @dependabot in #39834
chore(deps-dev): Bump @babel/node from 7.22.6 to 7.22.10 by @dependabot in #39836
Wrap long productName on login form by @Fenn-CS in #39848
Remove check for very old PGsql version by @solracsf in #39846
Migrate parts of files app away from depecrated Ilogger by @Fenn-CS in #39218
Add l10n for files_reminders by @Pytal in #39820
Calendar optimizations by @icewind1991 in #39568
Code simplification using null coalescing by @solracsf in #39850
fix: copy-and-delete fallback should use unlink by @kesselb in #39644
Remove query builder reuse in files_external by @icewind1991 in #39868
select the fileid first when looking for incomplete files by @icewind1991 in #38714
fix: Also cleanup version metadata if expiring by @juliushaertl in #39786
Fix php 8.3 support in tests by @come-nc in #39866
Bump Hub 5 -> Hub 6 by @AndyScherzinger in #39885
Fix various file reminders bugs by @Pytal in #39876
fix(CardDAV): set owner-principal, displayname properties for SAB by @miaulalala in #39525
fix(core): Modernize JS for mimetype handling by @susnux in #39686
adjust add button by @szaimen in #39884
don't preload metadata for the sub-childen by @icewind1991 in #39860
Set double outline on checked state for radio buttons by @JuliaKirschenheuter in #39332
Rewrite OCS CSRF check to be readable by @provokateurin in #39125
try to fix regression with public file upload button by @szaimen in #39916
fix(settings): focus lost on selects in users settings by @ShGKme in #39909
chore(deps-dev): Bump puppeteer from 20.9.0 to 21.0.3 by @dependabot in #39833
chore(deps): Bump skjnldsv/read-package-engines-version-actions from 2.1 to 2.2 by @dependabot in #39095
Prevent PHP warning when CacheEntry extension keys are not set by @susnux in #39906
fix: don't emit Hooks when hookpaths are empty by @miaulalala in #39481
A better design for update channel selector by @Jerome-Herbinet in #39927
fix(l10n): Password column header by @Pytal in #39599
feat(f2v): migrate Files by @skjnldsv in #39808
fix(memcache): Fix comparison of Memcache configs to classes by @nickvergessen in #39910
fix: always use display name from correct backend by @max-nextcloud in #39770
don't bother checking dav acl's in files by @icewind1991 in #39903
Add a separate event for login page rendering by @icewind1991 in #39867
chore(deps): Bump libphonenumber-js from 1.10.38 to 1.10.41 by @dependabot in #39938
chore(deps): Bump marked from 5.1.2 to 7.0.3 by @dependabot in #39922
Reduce the number of container queries by @icewind1991 in #39888
fix(CS): Use the naming pattern for the URL scheme by @nickvergessen in #39961
"Download and enable all" instead of "Enable all" only by @Jerome-Herbinet in #39754
fix: Set X-Requested-With header on all requests to avoid browser auth dialogs by @juliushaertl in #39924
chore(deps-dev): Bump sass from 1.64.2 to 1.66.1 by @dependabot in #39967
chore(deps): Bump actions/github-script from 5 to 6 by @dependabot in #39975
chore(deps): Bump actions/stale from 5 to 8 by @dependabot in #39976
chore(deps): Bump nextcloud-vue-collections from 0.10.0 to 0.11.1 by @dependabot in #39968
[master] Update psalm-baseline.xml by @nextcloud-command in #39727
Change color of error and success by @JuliaKirschenheuter in #39391
fix(CS): Ignore apps*/ directories which are gitignored by @nickvergessen in #39989
chore(deps-dev): Bump cypress from 12.17.3 to 12.17.4 by @dependabot in #39965
fix(settings): User management app navigation styles by @Pytal in #39943
feat(security): Add a bruteforce protection backend base on memcache by @nickvergessen in #39870
feat(dashboard): implement widget item api v2 by @st3iny in #39937
Improve upload progress visualization by @susnux in #39912
Fix predefined status buttons by @JuliaKirschenheuter in #39987
fix(middleware): Fix header injection for bruteforce middleware by @nickvergessen in #39996
fix: Avoid throwing on folder previews as there are none by @juliushaertl in #39950
files_reminders: Add OpenAPI spec by @provokateurin in #39984
[master] Fix npm audit by @nextcloud-command in #39979
improve performance of calculating dav permissions by @icewind1991 in #39958
Fix OpenAPI capabilities by @provokateurin in #40001
[master] fix(security): Update CA certificate bundle by @nextcloud-command in #40005
chore(deps): upgrade @nextcloud/webpack-vue-config and typescript by @skjnldsv in #39999
chore: use Navigation and Actions from @nextcloud/files by @skjnldsv in #39955
fix(tests): Specify all positional parameters again to fix tests by @nickvergessen in #40012
fix(a11y): Add always visible label when setting weather address by @Pytal in #39971
Do not log passwords in debug mode by @miaulalala in #40013
Remove padding for longer wordings (like the future French one) by @Jerome-Herbinet in #39713
fix(utility): De- deprecate getDateTime and getTime as now() only returns DateTimeImmutable by @miaulalala in #39511
fix: encode basename in restore action by @kesselb in #39842
chore(deps-dev): Bump @babel/preset-typescript from 7.22.5 to 7.22.11 by @dependabot in #40055
chore(deps-dev): Bump babel-jest from 29.6.2 to 29.6.4 by @dependabot in #40057
Add Altahrïm as code owner for login routes and sharebymail app by @Altahrim in #40044
feat: Add new Vue FilePicker from @nextcloud/dialogs and use it by default by @susnux in #39792
fix(CardDAV): only run upgrade sync if 1000 users or less by @miaulalala in #39911
pass the share to the cache instead of having to ask the storage by @icewind1991 in #39944
fix: make cancelOperation public by @kesselb in #40067
feat: Add occ user:user:sync-account-data for updating oc_accounts information from user backends by @juliushaertl in #38298
Hide shares by disabled users by @come-nc in #39699
fix(CalDAV): Check if the vObject exists before attempting any operations by @miaulalala in #39083
fix(cache): Remove displayname cache entry on delete by @nickvergessen in #40077
techdebt(DI): Use public IThrottler interface which exists since 25 by @nickvergessen in #40079
feat: Add auth token list and delete commands by @lhsazevedo in #40026
Refactor contactsinteraction app by @shdehnavi in #39243
(config sample) Remove defunct trystack.org url by @joshtrichards in #39978
Bump @nextcloud/vue to v8 beta 5 + add some visible labels by @Pytal in #40084
feat: add switch to disable dns pinning by @kesselb in #40108
fix(CI): Update .drone.yml signature by @nickvergessen in #40159
Improve sharing flow by @Fenn-CS in #39472
Replace custom input field with NcTextField by @JuliaKirschenheuter in #40043
Replace custom input field with NcTextField by @JuliaKirschenheuter in #40102
sharebymail: remove ILogger and upgrade to PHP 8 syntax by @Altahrim in #39897
Adjust input field for "rename group" by @JuliaKirschenheuter in #40087
Replace custom input field with NcTextField by @JuliaKirschenheuter in #40100
fix(s3): fix handling verify_bucket_exists parameter by @tcitworld in #39017
extend fix-key-location to handle cases from broken cross-storage moves by @icewind1991 in #36068
feat(files): add uploader by @skjnldsv in #39945
fix(CardDAV): allow disabling of the system address book by @miaulalala in #39925
remove old fileUploadSpec jsunit test and fix flaky cypress files test by @skjnldsv in #40199
chore(deps-dev): Bump guzzlehttp/guzzle from 7.6.1 to 7.8.0 in /build/integration by @dependabot in #40214
Imaginary WebP support by @JanisPlayer in #38032
Fix share creation insert and get by @skjnldsv in #26716
fix(API): Fix parameter name to match interface by @nickvergessen in #40075
ProfileApi: Fix typo by @provokateurin in #40224
fix: prevent sharing permissions on user root folder by @skjnldsv in #40195
[master] Update psalm-baseline.xml by @nextcloud-command in #40189
Allow ext storage Local to go unavailable by @PVince81 in #39707
move share permission logic to storage wrapper by @icewind1991 in #39863
change proftpd ci image by @icewind1991 in #40201
reuse l10n and request in dav folder listing by @icewind1991 in #39864
enh: skip processing for empty response by @kesselb in #40234
test(sharebymail): Improve tests by @Altahrim in #40182
feat(files): add sharing icon in header by @skjnldsv in #40192
make Node::getParent lazy by @icewind1991 in #38150
Cleanup psalm issues in DB/ContactsManager and Console by @CarlSchwan in #35539
comments: Ignore endpoints in OpenAPI by @provokateurin in #40257
feat(files): add folder icon overlay by @skjnldsv in #40209
admin have no special rights on users' entries by @ArtificialOwl in #39895
re-enable download configuration on circles shares by @ArtificialOwl in #39693
fix(files_sharing): select sharing in sidebar breaks Viewer focus trap by @ShGKme in #40273
Create right table view by @JuliaKirschenheuter in #40014
chore(deps): Bump webdav from 5.2.3 to 5.3.0 by @dependabot in #40211
fix(10n): Fixed grammar by @rakekniven in #40217
feat: Add events for version restore by @juliushaertl in #40184
fix(ratelimit): Only use memory cache backend for redis by @miaulalala in #40293
fix(CalDAV): check birthday calendar owner by @miaulalala in #40292
Fix issues where unencrypted_size was being falsely used for non-encrypted home folders by @juliushaertl in #38808
change order of keyboard shortcuts settings to be at the end by @szaimen in #40275
Create right list view for app store view by @JuliaKirschenheuter in #40198
Rename AppEcosystemV2 to AppAPI by @bigcat88 in #40295
Print log message when version could not be got from updater server by @danxuliu in #40216
40172 Polish new sharing flow : accesibility, expand bahavior, click outside behaviour by @Fenn-CS in #40266
Detect aborted connection in OC\Files\View and stop writing data to t… by @Altahrim in #40285
theming: Revert broken SVG optimization in default-source.svg by @provokateurin in #40329
Enable new versions feature for groupfolders by @artonge in #40296
enh(a11y): Add search contacts label by @Pytal in #40314
feat: Add dedicated method to load init scripts by @juliushaertl in #40323
Remove quotation marks by @Valdnet in #40306
Fix access to fileInfo in VersionTab.vue by @artonge in #40340
fix: Hide set reminder action on public shares by @Pytal in #40341
fix(autoloader): no apcu no side effects by @blizzz in #40349
Convert isset ternary to null coalescing operator by @shdehnavi in #39226
Add return types by @shdehnavi in #39211
Add batch methods in user backends by @CarlSchwan in #32912
Fix Admin AI settings javascript error by @marcelklehr in #40328
fix: Update file list headers on breadcrumb navigation by @juliushaertl in #40345
fix(ldap): avatar is not being fetched by @blizzz in #39128
chore(deps): Bump @vueuse/components from 10.3.0 to 10.4.1 by @dependabot in #40354
chore(deps): Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #40356
[master] Fix npm audit by @nextcloud-command in #40360
feat(testing): Add fake providers for translations and text processing by @juliushaertl in #39856
test: add tests for dns pin middleware by @kesselb in #40376
add plus icon to new user button by @szaimen in #40378
40172 polish sharing flow bugs by @Fenn-CS in #40372
Enable caldav push notifications by default by @hamza221 in #40103
[f2v] Render inline system tags using new DAV properties API by @lhsazevedo in #40284
fix: Pass parent to NonExistingFile instances by @juliushaertl in #40312
fix(caldav): add webroot to objectid for activities by @kesselb in #40301
Display user status by the side in sharing flow by @Fenn-CS in #40393
Ellipsize user status in sharing entry by @Fenn-CS in #40404
fix(settings): Undefined user count error by @Pytal in #40391
Hide additional content when share details is open by @artonge in #40365
Fix invite guest for new sharing flow by @Fenn-CS in #40389
fix: use faster method to fetch user count by @kesselb in #40416
Use t and n for translation by @artonge in #40411
Multiple bug fix in users list by @artonge in #40428
Correctly switch/revert from custom to bundled perms by @Fenn-CS in #40434
Consider link shares in removeShare method in SharingTab by @Fenn-CS in #40440
fix: don't use davtags for tag search by @kesselb in #40418
refactor(f2v): Migrate unread comments action to the new FileAction API by @lhsazevedo in #40409
fix(mimetype): Fix aborted transaction on PostgreSQL when storing mimetype by @lhsazevedo in #40203
Refactors "strpos" calls in /apps/dav by @fsamapoor in #38610
core: Fix OpenAPI for reference API by @provokateurin in #40421
provisioning_api: Fix quota constants in OpenAPI by @provokateurin in #40426
[master] Update psalm-baseline.xml by @nextcloud-command in #40358
Remove deprecated at matcher in tests/lib/InstallerTest.php by @come-nc in #40419
Remove last at matcher call in dav application tests by @come-nc in #40424
Refactors lib/private/Log by @fsamapoor in #39039
Remove last calls to deprecated at matcher in tests/Core by @come-nc in #40420
Let occ trashbin:restore restore also from groupfolders and add filters by @R0Wi in #39818
fix(dav): report status by @skjnldsv in #40474
fix(files): CustomElementRender $el replacement bug by @skjnldsv in #40465
fixes Dashboard icon rendering in darkmode by @privatemaker in #40480
SFTP improvements by @icewind1991 in #40183
chore(deps): Bump actions/checkout from 3 to 4 by @dependabot in #40357
fix(dav): fix report tests by @skjnldsv in #40485
kerberos sso ci fix by @icewind1991 in #39531
feat(files): add systemtags view by @skjnldsv in #40475
Bump phpseclib/phpseclib to 2.0.45 in master by @come-nc in #40470
chore(deps-dev): Bump phpunit/phpunit from 9.6.10 to 9.6.12 in /build/integration by @dependabot in #40455
chore(deps): Bump peter-evans/create-pull-request from 3 to 5 by @dependabot in #39972
chore(deps): Bump actions/setup-node from 3.6.0 to 3.8.1 by @dependabot in #39974
chore(deps-dev): Bump phpunit/phpunit from 9.6.10 to 9.6.11 in /build/integration by @dependabot in #40052
chore(deps): Bump cypress-io/github-action from 5.8.3 to 6.5.0 by @dependabot in #40355
chore(deps-dev): Bump @cypress/webpack-preprocessor from 5.17.1 to 6.0.0 by @dependabot in #40210
chore(deps-dev): Bump symfony/event-dispatcher from 5.4.22 to 5.4.26 in /build/integration by @dependabot in #39720
enh(db): provide database providers via IDB API by @miaulalala in #40423
fix(comments): Use provided offset in best effort when loading comments by @nickvergessen in #40488
chore(deps): Bump camelcase from 6.3.0 to 8.0.0 by @dependabot in #39964
fix: content info footer on guest pages by @st3iny in #40481
Remove deprectated ILogger uses from user_ldap application by @come-nc in #40504
chore(deps): Bump @nextcloud/browserslist-config from 2.3.0 to 3.0.0 by @dependabot in #40213
Remove litmus locks tests by @provokateurin in #39626
feat(files): add files_sharing indicator by @skjnldsv in #40517
Enable litmus largefile tests by @provokateurin in #39628
OCM Services by @ArtificialOwl in #39574
Remove 'Working with ... code' sections from README.md by @privatemaker in #40516
Refactors dav app commands. by @fsamapoor in #39166
Fix dashboard widgets api by @provokateurin in #40511
Refactors lib/private/Avatar. by @fsamapoor in #38989
Consider share type for enforced share expiry dates by @Fenn-CS in #40500
Add label for input field and select and adjust styles by @JuliaKirschenheuter in #40548
Migrate applications away from deprecated ILogger by @come-nc in #40508
Refactors files version app commands. by @fsamapoor in #39695
use multipart copy for s3 by @icewind1991 in #40531
test: add test for cache mount provider by @kesselb in #38633
Refactor "substr" calls in lib/private to improve code readability by @shdehnavi in #39216
fix: avoid side-effect imports and actions title support by @skjnldsv in #40551
add wrapper for external storage to ensure we don't get an mtime that is lower than we know it is by @icewind1991 in #40499
feat(appframework): Expose programmatic rate limiter by @ChristophWurst in #40288
feat(CI): Allow apps to test with PHPUnit10 by @nickvergessen in #40574
Refactors lib/private/Profile. by @fsamapoor in #39075
[3/3] Refactors lib/private/Security by @fsamapoor in #39013
[1/2] Refactors lib/private/Collaboration by @fsamapoor in #39113
ci: skip cypress install by @kesselb in #40589
core: Fix OCM OpenAPI by @provokateurin in #40575
chore(deps): Bump jquery from 3.6.4 to 3.7.0 by @dependabot in #40054
chore(deps): Bump @nextcloud/dialogs from 5.0.0-beta.2 to 5.0.0-beta.4 by @dependabot in #40452
chore(deps): Bump marked from 7.0.3 to 9.0.3 by @dependabot in #40598
Add labels for input fields by @JuliaKirschenheuter in #40552
chore(3rdparty): remove opis/closure by @kesselb in #40505
style: Fix editorconfig indent for config/*config.php by @ChristophWurst in #40562
Store size in int|float for 32bit support by @come-nc in #40501
chore(deps-dev): Bump @vue/vue2-jest from 29.2.4 to 29.2.5 by @dependabot in #39835
chore(deps-dev): Bump @vue/vue2-jest from 29.2.4 to 29.2.6 by @dependabot in #40496
feat(phonenumber): Add OCP wrapper for PhoneNumber utils library by @nickvergessen in #40620
Auto set password for new email shares by @Fenn-CS in #40533
fix(build): Ignore default-source.svg from image optimization by @nickvergessen in #40622
fix(dav): expand recurrences when searching by @st3iny in #40541
Remove unneeded opacity for action button by @JuliaKirschenheuter in #40613
Remove deprecated methods Util::writeLog and DIContainer::log by @come-nc in #40565
Use proper app id in Version.vue by @artonge in #40619
Correct value for device name input field by @JuliaKirschenheuter in #40584
fix(userstatus): Sync migration version number with app version by @ChristophWurst in #40614
Refactors lib/private/Lock by @fsamapoor in #39108
chore: Drop vendored Composer v2.4.1 by @ChristophWurst in #40639
feat(files): add drag and drop support by @skjnldsv in #39998
Refactors tests/app.php to improve code readability. by @fsamapoor in #36742
fix(files): do not load legacy files app js by @max-nextcloud in #40065
fix(files): open folder fileid while navigating without opening the sidebar by @skjnldsv in #40604
Add single status code descriptions for OpenAPI by @provokateurin in #40502
Fix OCS-APIRequest header for OpenAPI by @provokateurin in #40649
refactor: Use DBAL's executeQuery instead of query (deprecated) by @ChristophWurst in #40651
use square bracket syntax to modify array by @shdehnavi in #39175
Refactor "strpos" and "substr" calls in federatedfilesharing app to improve code readability by @shdehnavi in #39213
Refactor comments app by @shdehnavi in #39236
[1/3] Refactors lib/private/Security by @fsamapoor in #39011
Read apporder from configuration value by @come-nc in #40617
feat(files): properly format buttons, align mtime to the left and apply opacity based on file last modification by @skjnldsv in #40583
Convert isset ternary to null coalescing operator by @shdehnavi in #39225
enh(a11y): Add label to share note textbox by @Pytal in #40430
Refactors files_external app commands by @fsamapoor in #39131
fix(files): pass WCAG AA for hover rows by @skjnldsv in #40677
fix(unifiedsearch): Allow searching for "0" by @ChristophWurst in #40675
Convert isset ternary to null coalescing operator by @shdehnavi in #39224
fix: encode uri for delete, restore and favorite by @kesselb in #40644
Split list to navigation for the left sidebar by @JuliaKirschenheuter in #40576
fix(systemreport): Mask onlyoffice secret as sensitive by @nickvergessen in #40714
fix(userstatus): Track message timestamp too by @ChristophWurst in #40564
LDAP: Increase profile picture limit to 512 by @marcelklehr in #40709
Allow PHP 8.3 by @come-nc in #40630
chore: rename serializedClosure to argument to align with parent class by @kesselb in #40734
Fix: Escape group names for LDAP by @AaronDewes in #37201
feat(backgroundjob): Schedule job after by @ChristophWurst in #40656
Remove unneeded class by @JuliaKirschenheuter in #40738
test(cypress): only use the cypress cloud on pull requests by @max-nextcloud in #40736
chore: Install phpunit via vendor bin by @ChristophWurst in #40678
Updates to new sharing flow by @Fenn-CS in #40629
chore(deps): remove @nextcloud/vue-dashboard by @ShGKme in #40748
chore(deps): Bump core-js from 3.32.0 to 3.33.0 by @dependabot in #40751
[2/2] Refactors lib/private/Collaboration by @fsamapoor in #39114
Show loading icon in 'save share' button when creating a share by @julien-nc in #40752
fix(files): encoded source path on actions requests by @skjnldsv in #40756
Make logo in header clickable in the shared file view by @Koc in #40439
fix(autocomplete): Fix missing user status on autocomplete endpoint by @nickvergessen in #40660
fix(files): disallow illegal characters by @skjnldsv in #40585
fix: redirect to proper directory if file not found by @skjnldsv in #40515
Correct aria-label on action input and text field by @JuliaKirschenheuter in #40662
fix(dashboard): remove duplicated IDs on the dashboard page by @ShGKme in #40768
fix(files): migrate to NcIconSvgWrapper by @ShGKme in #40771
fix ocm-provider rewrite rules by @ArtificialOwl in #40745
chore: Do not lint external apps by @ChristophWurst in #40764
Make OAuth2 authorization code expire by @julien-nc in #40766
enh(settings): Semantic user table markup by @Pytal in #40719
fix(user): Log affected user of app token login name mismatch by @ChristophWurst in #40795
Update crl after revoke mfazones.csr by @mgallien in #40563
chore(deps): Bump doctrine/dbal to 3.7.x by @nickvergessen in #38556
chore: Bump @nextcloud/vue + @nextcloud/dialogs + @nextcloud/calendar-availability-vue by @Pytal in #40692
fix(comments): move new comment instructions placeholder to description by @ShGKme in #40294
fix(twofactor): avoid DB error on Twofactor (en/dis)abled event by @Altahrim in #40472
chore(deps-dev): Bump @types/dockerode from 3.3.19 to 3.3.20 by @dependabot in #40805
Generate all preview sizes for Imaginary by @enoch85 in #40731
fix(cypress): empty group, tag and ci-build-id when not using cypress cloud by @max-nextcloud in #40770
added CORS skip if session was created by AppAPI by @bigcat88 in #40737
Fix Dynamic property timeFactory in ClientFlowLoginControllerTest by @come-nc in #40829
fix(CI): Fix server setup in cypress by overwriting all files in shal… by @nickvergessen in #40181
Move inline docs to online documentation by @szaimen in #40784
Talk federation authentication by @nickvergessen in #33105
adjust color of focus-visible to be better visible by @szaimen in #40783
Fixed mixed translations in sharing details by @Fenn-CS in #40825
fix text on default background image button by @szaimen in #40804
fix: Log critical session renewal and logout paths by @ChristophWurst in #40785
chore(deps-dev): Bump cypress and @nextcloud/cypress by @dependabot in #40720
chore(deps-dev): Bump cypress-wait-until from 1.7.2 to 2.0.1 by @dependabot in #40722
Add endpoint for getting disabled user list by @come-nc in #39756
fix(files_external): basic auth user storage trigger by @skjnldsv in #40782
chore(deps-dev): Bump workbox-webpack-plugin from 6.6.0 to 7.0.0 by @dependabot in #40724
feat: allow external drop and add dropzone by @skjnldsv in #40674
chore(deps): Bump actions/checkout from 3 to 4 by @dependabot in #40595
chore(deps-dev): Bump @jest/globals from 29.6.2 to 29.7.0 by @dependabot in #40721
remove leading slash by @ArtificialOwl in #40843
chore: Drop unused \OC\Memcache\Factory::createLowLatency by @ChristophWurst in #40861
Pass IConfig by constructor to Group_LDAP by @blizzz in #40839
Correct typos and add quotation marks by @Valdnet in #40698
fix: Scope app nav caption styles by @Pytal in #40858
enh(settings): Add and remove groups accessibly by @Pytal in #40110
Add in:users as a search filter to limit searches to users by @sorbaugh in #40413
fix(ldap): store last known user groups by @blizzz in #40443
fix(session): Log when crypto session data is lost by @ChristophWurst in #40879
fix(federation): Use sharing.federation.allowSelfSignedCertificates config for all OCM requests by @nickvergessen in #40864
Fix my-apps view on mobile by @szaimen in #40871
chore(deps): Bump @nextcloud/password-confirmation from 4.0.1 to 5.0.0 by @ShGKme in #40874
fix(cypress): User groups test by @Pytal in #40894
Fix OCM provider public API and handling to allow apps to register by @nickvergessen in #40885
feat: Add factory method for in-memory caches by @ChristophWurst in #40868
fix several admin settings problems by @szaimen in #40887
enh(files): Add accessible sort direction by @Pytal in #40893
chore(deps-dev): Bump ts-loader from 9.4.4 to 9.5.0 by @dependabot in #40910
[Devcontainer] move git setup to postStartCommand by @R0Wi in #40068
fix(docs): Fix parameter types in docs by @nickvergessen in #40900
Fix version number in ITimeFactory after it was delayed by @nickvergessen in #40865
Fire group membership events from LDAP at login by @come-nc in #40367
Only add x-requested-with header in requests to Nextcloud by @julien-nc in #40471
Allow share expiry dates lower than enforced limits by @Fenn-CS in #40927
Fix unit tests on PHP 8.3 by @nickvergessen in #40931
fix(search): Close unified search at the second ctrl+f by @ChristophWurst in #40890
chore: Add the talk team as codeowners for things Talk heavily relies on by @nickvergessen in #40934
refactor: Contacts menu to Vue by @ChristophWurst in #40749
enh(a11y): Add accessible user menu semantics by @Pytal in #40168
Append to body all selects inside of user table by @JuliaKirschenheuter in #40902
feat(files): migrate template picker by @skjnldsv in #40854
feat(files): grid view by @skjnldsv in #40917
fix several personal settings problems by @szaimen in #40907
Set visible label for input field by @JuliaKirschenheuter in #40643
fix(files): fix new folder encoding by @skjnldsv in #40948
Change width for input field by @JuliaKirschenheuter in #40872
fix profile visibility settings being too wide by @szaimen in #40932
fix(xhr-request): Make sure to also allow strings as url by @susnux in #40951
Reduce left margin of files list header by @JuliaKirschenheuter in #40905
fix(theming): Add aria-pressed attribute to active background by @susnux in #40950
Stop sending deprecated Pragma header by @solracsf in #39852
chore(deps): Bump @babel/traverse from 7.22.8 to 7.23.2 by @dependabot in #40941
chore(deps): Bump @mdi/svg from 7.2.96 to 7.3.67 by @dependabot in #40912
fix(L10N): Support "Accept-Language: zh-Hans-CN" and alike by @c39cfbb3 in #40808
config.sample.php: fix incorrect theme name + add a missing ones by @joshtrichards in #40926
chore(deps): Bump @nextcloud/dialogs to v5-beta.6 by @Pytal in #40956
Fix width of input on contacts menu by @JuliaKirschenheuter in #40873
add method to create a node from cache entry + mountpoint by @icewind1991 in #40478
fix(dbal): Fix types in query builder methods for parameters by @nickvergessen in #40959
chore(deps): Bump dompurify from 3.0.5 to 3.0.6 by @dependabot in #40914
chore(deps-dev): Bump dockerode from 3.3.5 to 4.0.0 by @dependabot in #40913
[master] Fix npm audit by @nextcloud-command in #40923
fix(federation): Fix type and docs on ICloudFederationNotification in… by @nickvergessen in #40965
files-list: performance optimizations by @pulsejet in #40958
Fix return type annotation of IShare::getExpirationDate by @pulsejet in #40969
Fix background theming deletion and cypress admin theming tests by @skjnldsv in #35728
Add api to register setup checks by @CarlSchwan in #32550
Update version.php to owncloud 10.13 by @Rello in #40977
Reduce width of sharing entry by @JuliaKirschenheuter in #40963
Shortcut Ctrl+F for different keyboard layouts by @AIlkiv in #40924
fix(weather_status): remove li wrapper by @ShGKme in #40992
fix(cypress): Replace flaky password-confirmation hack by @susnux in #40961
feat: Allow to configure the app menu order in the frontend by @susnux in #40844
HTML Validation: replace non standard autocorrect with spellcheck by @ShGKme in #40978
Fix placement of actions within unified search by @JuliaKirschenheuter in #40979
fix(cypress): Also sync 3rdparty directory for local cypress tests by @susnux in #41000
files: fix virtual list will-change value (60fps superpowers) by @pulsejet in #40999
fix(user_menu): pass only actual prop to user menu entries by @ShGKme in #40994
Fix trusted server input field by @JuliaKirschenheuter in #41008
fix(files): disable size containment on headers by @pulsejet in #41018
refactor: remove remaining usage of OC::getCapabilities by @pulsejet in #40993
HTML Validation: Personal settings by @ShGKme in #40983
fix(l10n): invalid translation of a number by @skjnldsv in #41036
chore(deps-dev): Bump eslint-plugin-cypress from 2.14.0 to 2.15.1 by @dependabot in #41030
chore(deps): Bump peter-evans/create-or-update-comment from 3.0.2 to 3.1.0 by @dependabot in #41026
chore(deps): Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #41027
chore(deps-dev): Bump @types/dockerode from 3.3.20 to 3.3.21 by @dependabot in #41028
chore(deps): Bump @nextcloud/calendar-availability-vue from 2.0.0-beta.2 to 2.0.0-beta.3 by @dependabot in #41029
fix(files): correct item height by @pulsejet in #41019
chore(deps-dev): Bump typescript from 5.1.6 to 5.2.2 by @dependabot in #41032
theming: Allow to reset custom app order and keep focus when reordering by @susnux in #41024
feat(cypress): Always run cypress CI in parallel by @susnux in #41039
Add "no public GH Issues please" request, past advisories link, bounty mention, scope link to security.md by @joshtrichards in #40966
Check expiry enforcement for all share types by @Fenn-CS in #40933
fix(provisioning_api): Fix quota fields in OpenAPI by @provokateurin in #41045
feat(profile): Add public interface for profile manager so apps can check config by @nickvergessen in #41055
fix(settings): users page html validation by @ShGKme in #41034
Move IToken and IProvider::getToken to OCP by @come-nc in #41017
HTML Validation: remove unnecessary roles by @ShGKme in #40980
fix(dashboard): html validation by @ShGKme in #41063
fix(sharing): set name to target name in sharing cache by @max-nextcloud in #40495
Remove opacity on table header by @JuliaKirschenheuter in #41064
fix(isLegitimatedForUserId): Setup mountpoints to check file access by @mejo- in #40482
chore: Bump @nextcloud/vue to v8-beta.9 by @Pytal in #41070
fix(settings): Account property scope actions by @Pytal in #40938
chore(tests): Migrate login acceptance tests from behat to Cypress by @susnux in #41033
fix(update): Allow updating from 27.1 to 28 by @nickvergessen in #41079
fix(3rdparty): Don't use indirect dependency "Safe/" for functions by @nickvergessen in #41061
fix(settings): apps list html validation and loading icon by @ShGKme in #41035
fix(user_status): separate user menu and dashboard status layout for HTML validation by @ShGKme in #41068
Fix root mounts not being setup in some cases by @icewind1991 in #39044
Return correct status if touch failed by @artonge in #41062
Fix: duplicating contacts with the Recently contacted feature by @hamza221 in #41046
fix(dav): Remove usage of indirect thecodingmachine/safe dependency by @Pytal in #41094
Change styles on active, hover and focus state for background buttons by @JuliaKirschenheuter in #41080
fix(tests): Move leftover acceptance tests for users from drone to Cypress by @susnux in #41021
fix(workflowengine): Add an empty content when no flows are installed or configured by @susnux in #41089
fix(cypress): Fix selector for the user menu button by @susnux in #41110
Remove unneeded tabindex="0" from sidebar and app content by @JuliaKirschenheuter in #41108
fix(files): let popper overflow in header by @pulsejet in #41093
fix(external): Get storage before update it by @nickvergessen in #41123
fix: don't pass invalid streams to Imaginary by @solracsf in #41120
Don't duplicate notification warning by @nickvergessen in #41133
Implement TextToImage OCP API by @marcelklehr in #40326
fix(cypress): Fix linter errors on Cypress chains and refactor wait-until checker functions by @susnux in #41115
fix(login): Fix JS error on login grant page by @callmemagnus in #41117
Check for more php modules by @come-nc in #40889
chore(codecov): Do not run project status check by @susnux in #41140
enh(a11y): Separate profile and user status user menu entries by @Pytal in #41122
fix: Don't try to access null array by @solracsf in #39743
fix(cypress): Also clone 3rdparty submodule to keep in sync for cypress tests by @susnux in #41135
chore(deps): bump browserify-sign from 4.2.1 to 4.2.2 by @dependabot in #41148
Create semantically right table for the "OAuth 2.0 clients" by @JuliaKirschenheuter in #41142
#37978: Remove duplicate dependency by @JL102 in #41101
fix(tests): Only run tests on CI that are needed by @susnux in #40986
fix(theming): Ensure all text colors have enough contrast for accessibility by @susnux in #40773
chore(deps-dev): bump jest-environment-jsdom from 29.6.2 to 29.7.0 by @dependabot in #41165
chore(deps): bump actions/checkout from 3.6.0 to 4.1.1 by @dependabot in #41169
chore(deps): bump actions/setup-node from 3.8.1 to 4.0.0 by @dependabot in #41168
chore(deps-dev): bump puppeteer from 21.0.3 to 21.4.1 by @dependabot in #41164
chore(deps-dev): bump @testing-library/jest-dom from 5.17.0 to 6.1.4 by @dependabot in #41163
feat(dav): implement personal absence settings backend by @st3iny in #41051
Reset BFP for sudo action by @SystemKeeper in #41177
ci: Turn off builds for pushes and merges to master/stable* and cancel parallel executions by @nickvergessen in #41193
chore(deps): bump p-queue from 7.3.4 to 7.4.1 by @dependabot in #41166
Add custom apps translation scripts and image path for consistency by @akhil1508 in #40898
Talk now uses the "main" branch by @nickvergessen in #41200
fix(theming): Ensure focus is kept on the button when reordering by @susnux in #41197
load script and styles on setup page by @icewind1991 in #40494
add index for classification by @tcitworld in #41111
fix(files_external): on case insensitive system, block case change by @Altahrim in #41053
fix(a11y): Increase contrast of contacts menu actions by @Pytal in #41207
fix(theming): Add accessible information to app order settings by @susnux in #41199
feat(contactsmenu): Show user status by @ChristophWurst in #40852
chore(deps-dev): Bump @babel/preset-typescript from 7.22.11 to 7.23.2 by @dependabot in #40909
chore(deps-dev): Bump tar from 6.1.15 to 6.2.0 by @dependabot in #40911
ci: skip puppeteer chrome download by @kesselb in #40733
Catch Imaginary processing errors by @solracsf in #40819
fix: add index on migration only if needed by @solracsf in #41230
refactor: Unify running a dev server (for automated testing) by @ChristophWurst in #40899
feat(ocp): Add types and strict typing to \OCP\Group\IGroup by @ChristophWurst in #38425
fix(session): Log why session renewal failed by @ChristophWurst in #40859
feat(events): Add typed event for filtering autocompletion sugges… by @nickvergessen in #41218
fix(dav): Reduce CalDAV backend memory footprint by @ChristophWurst in #40665
chore: 28.0.0 beta 1 by @skjnldsv in #41228
fix(upgrade): files_rightclick is deprecated by @blizzz in #41246

New Contributors

@DerGenaue made their first contribution in #38115
@takahiro-blab made their first contribution in #31001
@JanisPlayer made their first contribution in #38365
@fsamapoor made their first contribution in #37665
@ZetaTom made their first contribution in #38549
@kurtmckee made their first contribution in #38737
@dfuchss made their first contribution in #38292
@bensmrs made their first contribution in #38794
@Jenandra made their first contribution in #38793
@SimJoSt made their first contribution in #38876
@charno made their first contribution in #38639
@danialRahimy made their first contribution in #38176
@ir0nhide made their first contribution in #39629
@Dany1718 made their first contribution in #34419
@jmcclelland made their first contribution in #39741
@lhsazevedo made their first contribution in #40026
@shdehnavi made their first contribution in #39243
@privatemaker made their first contribution in #40480
@Koc made their first contribution in #40439
@sorbaugh made their first contribution in #40413
@c39cfbb3 made their first contribution in #40808
@AIlkiv made their first contribution in #40924
@callmemagnus made their first contribution in #41117

Full Changelog: v27.0.0beta2...v28.0.0beta1