Releasenotes OpenCloud 4.0.0-rc.3

❤️ Thanks to all contributors! ❤️

@butonic, @rhafer, @aduffeck, @flimmy, @ScharfViktor, @micbar, @flimmy, @jnweiger, @fschade, @dragonchaser, @AlexAndBear, @Copilot, @JammingBen, @kulmann, @tammi-23

Opencloud

📚 Documentation

• Fix typos in antivirus README documentation [#1940]
• fix: add missing service README.md files with basic description [#1859]
• Fix README.md files which contain broken or missing links [#1854]

🐛 Bug Fixes

• introduce OC_EVENTS_TLS_INSECURE [#1936]
• kill unused env vars [#1888]
• rc-handling was only active for the dryrun, not the real build-and-push [#1919]
• handle objectguid endianess [#1901]
• fix: add update server to default csp rules [#1875]
• fix: add missing capability flag support-radicale [#1891]
• fix opensearch client certificate [#1890]
• Bump reva [#1882]
• load two yaml configs [#1617]
• make user cache tenant aware [#1732]
• fix: sanitise markdow code to make docusaurus happy [#1851]
• update launch.json [#1843]
• docs: Fix auth-app examples in README [#1844]
• fix: fix typo in treesize logging [#1826]
• fix: set global signing secret fallback correctly [#1781]

📈 Enhancement

• feat(ocm): add WAYF configuration for reva OCM service [#1714]
• log missing name or id attributes [#1914]
• collabora: Set IsAdminUser and IsAnonymousUser in CheckFileInfo [#1745]

✅ Tests

• [full-ci] disable running ci with watch fs when full-ci [#1902]
• api-tests: delete spaces before users [#1877]
• update tika version [#1872]
• add share sync to collaborativePosix suite [#1806]
• removed test virus files from repo [#1812]
• increase timeouts waiting for notification & search [#1802]
• Sync share before action [#1795]
• correct STORAGE_USERS_POSIX_WATCH_FS env typo in CI [#1746]

📦️ Dependencies

• [full-ci] revaBump-v2.40.1 [#1927]
• [full-ci] chore: bump web to v4.2.1 [#1938]
• build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 [#1923]
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.1 to 2.12.2 [#1922]
• build(deps): bump github.com/kovidgoyal/imaging from 1.7.2 to 1.8.17 [#1912]
• build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 [#1911]
• [decomposed]Update version 4.0.0 rc.2 [#1917]
• chore: bump web to v4.2.1-rc.1 [#1900]
• revaBump-getting#428 [#1887]
• build(deps): bump github.com/blevesearch/bleve/v2 from 2.5.4 to 2.5.5 [#1884]
• build(deps): bump github.com/olekukonko/tablewriter from 1.1.0 to 1.1.1 [#1869]
• build(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 [#1845]
• reva-bump-2.39.2. update opencloud 4.0.0-rc.1 [#1849]
• build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 [#1836]
• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 [#1828]
• build(deps): bump github.com/KimMachineGun/automemlimit from 0.7.4 to 0.7.5 [#1787]
• build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 [#1788]
• Bump reva [#1786]
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.10 to 1.4.11 [#1775]
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.0 to 2.12.1 [#1706]
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2 [#1754]

Web

🔒 Security

• [stable-4.2] chore: bump sub-dependencies that cause vulnerability alerts [#1657]

🐛 Bug Fixes

• [stable-4.2] fix: hide calendar when env var FRONTEND_DISABLE_RADICALE is set to true (#1660) [#1671]
• [stable-4.2] fix: move folder replace [#1662]
• [stable-4.2] fix: editing and loading tags for received shares [#1659]
• [stable-4.2] fix: catching errors in sse events [#1658]
• [stable-4.2] fix: embed actions z-index [#1626]
• [stable-4.2] fix: missing versions when closing and re-opening sidebar [#1629]
• [stable-4.2] fix: version downloads and remove downloadUrl dav property default [#1624]
• [stable-4.2] fix: endless propfind requests when opening public links authenticated [#1576]
• [stable-4.2] fix: copying created links in Safari [#1611]
• [stable-4.2] fix: initial default favicon [#1585]
• [stable-4.2] fix: prevent undo delete multiple times for same file [#1590]
• [stable-4.2] fix: add missing file list update after undo delete in space [#1582]
• [stable-4.2] fix: lazy loading indicator in condensed resource table [#1583]
• [stable-4.2] bug: hide addtional calendar data, if radicale is not set up [#1577]
• [stable-4.2] fix: archive download on password protected links [#1575]
• [stable-4.2] bug: allow clipboard access to collabora (#1569) [#1571]
• [stable-4.2] fix: only render drop content when opened [#1526]
• [stable-4.2] fix: remove horizontal scrollbar when opening upload menu [#1563]
• [stable-4.2] fix: space batch actions not loading in spaces table [#1520]
• [stable-4.2] fix: account perefences page, left sidebar won't be translated on language change (#1554) [#1556]
• [stable-4.2] fix: avoid flicker on CalDAV check (#1538) [#1550]
• [stable-4.2] fix: private link doesn't reliably open default app [#1530]
• [stable-4.2] fix: bottom drawer 'New'-menus appearance [#1519]
• Cherry-pick font revert from PR #1507 to stable-4.2 [#1509]
• [stable-4.2] fix: adjust headline sizes across the webui (#1504) [#1506]

✅ Tests

• [stable-4.2] check user avatar in the admin settings->users (#1510) [#1511]

Reva

🐛 Bug Fixes

• ocm fixes [#444]
• fix(ocm): Fix userids sent, when accepting an ocm invite [#442]
• Treesize propagation [#442]