5.0.0 - 2026-01-26
❤️ Thanks to all contributors! ❤️
@ScharfViktor, @butonic, @dragonchaser, @flimmy, @fschade, @micbar, @rhafer, @saw-jan, @JammingBen, @kulmann, @michaelstingl, @tammi-23, @aduffeck
Opencloud:
💥 Breaking changes
- merge ocdav into frontend [#1958]
✅ Tests
- [test-only] replace exception to assertions [#2196]
- test(api): auto-generate test virus files before test run [#2191]
- test(api): remove accountsHashDifficulty test suite [#2190]
- test(api): update without-remotephp expected-failures list [#2184]
- [full-ci] test: use single command to run the containers and the API tests [#2169]
- [tests-only] test: setup for running wopi API tests locally [#2139]
- fix flaky #2145 [#2161]
- Run wopi validator tests localy [#2151]
- ci: fix unwanted workflow skip in the cron pipelines [#2117]
- [POC] ci: skip previously passed workflows on pipeline restart [#2099]
- [tests-only] test: wait post-processing to finish for MKCOL requests [#2092]
- [tests-only] test: fix API tests [#2087]
- [full-ci] use graph api in the enforcePasswordPublicLink.feature [#2050]
- [full-ci][tests-only] test: check last email content with retries as emails can be delayed [#2038]
- skip collaborativePosix tests in CI [#2039]
📚 Documentation
- Update release template [#2182]
- Clarify what the two requests are used for [#2179]
- fix: markdown links formatting [#2143]
🐛 Bug Fixes
- fix: Show username in unprivileged search results [#2104]
- fix(thumbnailer): missing font panic [#2097]
- Remove sub-service binary entrypoints and fix antivirus only server cmd [#2043]
- fix(thumbnailer): respect image boundaries and text wrappings [#2062]
- fix: cobra viper flags and env [#2047]
- fix service name in suture logs [#2052]
📈 Enhancement
- benchmark client enhancements [#1856]
- allow http2 connections to proxy [#2040]
- migrate from urfave/cli to spf13/cobra [#1954]
📦️ Dependencies
- reva-bump-2.42.0 [#2215]
- build(deps): bump github.com/olekukonko/tablewriter from 1.1.2 to 1.1.3 [#2186]
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.4 to 2.27.5 [#2204]
- build(deps): bump github.com/go-resty/resty/v2 from 2.7.0 to 2.17.1 [#2197]
- build(deps): bump github.com/open-policy-agent/opa from 1.11.1 to 1.12.3 [#2166]
- build(deps): bump github.com/kovidgoyal/imaging from 1.8.18 to 1.8.19 [#2167]
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.3 to 2.27.4 [#2164]
- build(deps): bump github.com/sirupsen/logrus from 1.9.4-0.20230606125235-dd1b4c2e81af to 1.9.4 [#2163]
- build(deps): bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 [#2162]
- build(deps): bump go.opentelemetry.io/contrib/zpages from 0.63.0 to 0.64.0 [#2158]
- build(deps): bump github.com/blevesearch/bleve/v2 from 2.5.5 to 2.5.7 [#2157]
- build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.38.0 to 1.39.0 [#2154]
- build(deps): bump golang.org/x/image from 0.34.0 to 0.35.0 [#2153]
- build(deps): bump github.com/nats-io/nats.go from 1.47.0 to 1.48.0 [#2147]
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.5 [#2148]
- build(deps): bump github.com/olekukonko/tablewriter from 1.1.1 to 1.1.2 [#2144]
- build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 [#2141]
- build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 [#2140]
- build(deps): bump github.com/onsi/gomega from 1.38.2 to 1.39.0 [#2133]
- build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 [#2132]
- build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.63.0 to 0.64.0 [#2109]
- build(deps): bump github.com/kovidgoyal/imaging from 1.8.17 to 1.8.18 [#2107]
- build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 [#2106]
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 [#2069]
- build(deps): bump github.com/opensearch-project/opensearch-go/v4 from 4.5.0 to 4.6.0 [#2068]
- build(deps): bump github.com/testcontainers/testcontainers-go/modules/opensearch from 0.39.0 to 0.40.0 [#1967]
- build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 [#2061]
- build(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.11.0 [#1930]
Web:
💥 Breaking changes
🔒 Security
- fix(deps): update dependency lodash-es to v4.17.23 [security] #2 [#1859]
- chore(deps): bump preact to v10.28.2 [security] [#1814]
📈 Enhancement
- feat: clarify error text on 412 error in editor [#1850]
- Mail: Mail compose as Widget #1609 [#1687]
- feat: allow .readme.md filename for top level readme [#1769]
🐛 Bug Fixes
- fix: add missing low opacity for cut resources in tiles view [#1852]
- fix: delete action showing without any selected file in trash bin [#1853]
- fix: embed actions filename input and confirm button name [#1849]
- fix: prevent sort options in trash overview from disappearing [#1851]
- fix: break long resource names in right sidebar [#1836]
- fix: context menu for shares on search result page [#1835]
- fix: text editor app entry for light users [#1837]
- fix: resource delete action visibility [#1832]
- fix(calendar): use type="a" for external documentation link [#1801]
- fix(design-system): checkbox label vertical alignment [#1773]
✅ Tests
- enforce password for writable public links [#1779]
📦️ Dependencies
- chore(deps): update devdependencies (non-major) [#1861]
- fix(deps): update dependency lodash-es to v4.17.23 [security] [#1857]
- chore(deps): update typescript-eslint monorepo to v8.53.1 [#1846]
- chore(deps): update dependency happy-dom to v20.3.4 [#1847]
- chore(deps): update pnpm to v10.28.1 [#1844]
- chore(deps): update devdependencies (non-major) [#1842]
- fix(deps): update dependency @sentry/vue to v10.35.0 [#1845]
- fix(deps): update vue monorepo to v3.5.27 [#1843]
- fix(deps): update dependency @casl/ability to v6.8.0 [#1840]
- chore(deps): update dependency @casl/vue to v2.2.6 [#1839]
- chore(deps): update dependency happy-dom to v20.3.3 [#1841]
- chore(deps): update dependency eslint-plugin-vue to v10.7.0 [#1838]
- chore(deps): update dependency happy-dom to v20.3.1 [#1834]
- chore(deps): update dependency ejs to v4 [#1828]
- chore(deps): update traefik docker tag to v3.6.7 [#1825]
- fix(deps): update dependency @sentry/vue to v10.34.0 - autoclosed [#1827]
- chore(deps): update devdependencies (non-major) [#1826]
- chore(deps): update dependency @babel/eslint-parser to v7.28.6 [#1815]
- fix(deps): update dependency @sentry/vue to v10.33.0 [#1812]
- chore(deps): update typescript-eslint monorepo to v8.53.0 [#1816]
- chore(deps): update dependency @codemirror/view to v6.39.11 [#1820]
- chore(deps): update node.js to v24.13.0 [#1821]
- chore(deps): update dependency eslint-plugin-n to v17.23.2 [#1822]
- chore(deps): update devdependencies (non-major) to v7.28.6 [#1823]
- chore(deps): update devdependencies (non-major) [#1783]
- chore(deps): update collabora/code docker tag to v25.04.8.1.1 [#1761]
- fix(deps): update dependency globals to v17 [#1811]
- chore(deps): update dependency md-editor-v3 to v6.3.1 [#1794]
- chore(deps): update typescript-eslint monorepo to v8.52.0 [#1786]
- fix(deps): update dependency @casl/ability to v6.7.5 [#1782]
- chore(deps): update traefik docker tag to v3.6.6 [#1798]
- fix(deps): update dependency p-queue to v9.1.0 [#1809]
- fix(deps): update dependency zod to v4.3.5 [#1810]
- chore(deps): update dependency @codemirror/view to v6.39.9 [#1785]
- Update dependency @casl/vue to v2.2.5 [#1807]
- Update dependency focus-trap to v7.8.0 [#1784]
- Update pnpm to v10.28.0 [#1790]
- Update dependency qs to v6.14.1 [SECURITY] [#1803]
- fix(deps): update dependency @sentry/vue to v10.32.1 [#1777]
- chore(deps): update devdependencies (non-major) [#1775]
- chore(deps): update pnpm to v10.26.1 [#1778]
- fix(deps): update dependency lodash-es to v4.17.22 [#1764]
- fix(deps): update dependency @sentry/vue to v10.31.0 [#1766]
- chore(deps): update devdependencies (non-major) to v4.0.16 - autoclosed [#1762]
- chore(deps): update traefik docker tag to v3.6.5 [#1763]
- chore(deps): update pnpm to v10.26.0 [#1753]
- chore(deps): update typescript-eslint monorepo to v8.50.0 [#1755]
- fix(deps): update dependency zod to v4.2.1 [#1750]
- [full-ci] bump-opencloud-4.1.0. run all tests [#1754]
Reva
🐛 Bug Fixes
- Handle files still being processed during download/copy [#507]
- Reduce CPU and memory usage [#490]
- fix(watchfs): Don't cache old id if a copy is detected [#491]
- log correct line in tus log wrapper [#460]
- skip assimilations if root is reached [#463]
📈 Enhancement
- add tls support for nats connections [#466]
📦️ Dependencies
- chore(deps): bump github.com/segmentio/kafka-go from 0.4.49 to 0.4.50 [#500]
- chore(deps): bump github.com/prometheus/alertmanager from 0.30.0 to 0.30.1 [#499]
- chore(deps): bump github.com/minio/minio-go/v7 from 7.0.97 to 7.0.98 [#498]
- chore(deps): bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 [#496]
- chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 [#494]
- chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 [#492]
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5 [#493]
- chore(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 [#488]
- chore(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 [#489]
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 [#486]
- chore(deps): bump github.com/nats-io/nats.go from 1.47.0 to 1.48.0 [#485]
- chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 [#484]
- chore(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 [#483]
- chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 [#480]
- chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 [#481]
- chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 [#478]
- chore(deps): bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.3 [#479]
- chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.39.0 [#476]
- chore(deps): bump github.com/ceph/go-ceph from 0.36.0 to 0.37.0 [#475]
- chore(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.63.0 to 0.64.0 [#474]
- chore(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 [#473]
- chore(deps): bump github.com/go-playground/validator/v10 from 10.28.0 to 10.30.0 [#469]
- chore(deps): bump github.com/prometheus/alertmanager from 0.29.0 to 0.30.0 [#468]
- chore(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 [#467]
- chore(deps): bump go.etcd.io/etcd/client/v3 from 3.6.6 to 3.6.7 [#464]
- chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 [#453]
- chore(deps): bump go.opentelemetry.io/otel/trace from 1.38.0 to 1.39.0 [#452]