github owncloud/ocis v8.0.0-rc.1
8.0.0-rc.1

pre-release19 hours ago

Table of Contents

  • Changelog for 8.0.0-rc.1

Changes in 8.0.0-rc.1

Summary

  • Bugfix - Fix user light creation: #11765
  • Bugfix - OCM Specification Compliance: #11773
  • Bugfix - Remove leading dot before checking disabled extension: #11814
  • Bugfix - Support pointer types in config environment variable decoding: #11815
  • Bugfix - Replace obsolete docker image in the deployment example: #11828
  • Bugfix - Fix error code when a user can't disable a space: #11845
  • Bugfix - Fix Sharingroles: #11898
  • Bugfix - Fix the error handling for empty name on space update: #11933
  • Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942
  • Enhancement - Bump Reva: #460
  • Enhancement - Set Referrer-Policy to no-referrer: #11722
  • Enhancement - Bump Reva: #11748
  • Enhancement - Support disabling editors by extensions: #11750
  • Enhancement - Add CLI to move stuck uploads: #11762
  • Enhancement - Use externalID in Provisioning API: #11799
  • Enhancement - Add CLI to clean orphned grants: #11804
  • Enhancement - Bump Reva: #11808
  • Enhancement - Bump Web to v12.2.0: #11834
  • Enhancement - Introduce claims for multi-instance-ocis: #11848
  • Enhancement - Update the ocis_full deployment example images: #11860
  • Enhancement - Implement brute force protection for public links: #11864
  • Enhancement - Update the ocis_full deployment example traefik image: #11867
  • Enhancement - Added a graph endpoint alias: #11871
  • Enhancement - Force Strict-Transport-Security: #11880
  • Enhancement - Relocate Transifex resources: #11889
  • Enhancement - Update the ocis_full deployment example images: #11890
  • Enhancement - Allow sharing between instances: #11893
  • Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912
  • Enhancement - Update the traefik image for some deployment examples: #11915
  • Enhancement - Add users instances: #11925
  • Enhancement - Introduce external shares permission: #11931
  • Enhancement - Bump Web to 12.3.0: #13519

Details

  • Bugfix - Fix user light creation: #11765

    When trying to switch a user to user light before they logged in for the first
    time, an error would occur. The server now correctly handles this case and
    allows switching to user light even before the first login.

    #11765

  • Bugfix - OCM Specification Compliance: #11773

    OCM Specification Compliance

    #11773

  • Bugfix - Remove leading dot before checking disabled extension: #11814

    We have fixed a bug where the leading dot was not removed before checking if an
    extension is disabled. The original behavior would have caused the
    COLLABORATION_WOPI_DISABLED_EXTENSIONS config to be ignored.

    #11814

  • Bugfix - Support pointer types in config environment variable decoding: #11815

    Added support for decoding pointer types (*bool, *int, *string, etc.) in the
    envdecode package, allowing configuration fields to distinguish between unset
    (nil) and explicitly set values. Changed WEB_OPTION_EMBED_ENABLED from string
    to *bool type to enable explicit false values.

    #11815

  • Bugfix - Replace obsolete docker image in the deployment example: #11828

    In the ocis_ldap deployment example, we were using the bitnami/openldap docker
    image. This image isn't available any longer, so the example couldn't be
    deployed as intended.

    We've replaced the docker image with the osixia/openldap image and we've
    adjusted some of the configuration of the openldap image.

    #11828

  • Bugfix - Fix error code when a user can't disable a space: #11845

    Previously, if the user couldn't disable a space due to wrong permissions, the
    request returned a 404 error code, as if the space wasn't found even though the
    space was visible. Now it will return the expected 403 error code.

    #11845

  • Bugfix - Fix Sharingroles: #11898

    Sharing roles were inconsistent, now they are fixed.

    #11898

  • Bugfix - Fix the error handling for empty name on space update: #11933

    Fix the error handling for empty name on space update.

    #11887
    #11933

  • Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942

    Deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS environment variable was removed from
    frontend service config. Use OCIS_USER_SEARCH_DISPLAYED_ATTRIBUTES instead to
    control which user attributes are displayed in search results.

    #11942

  • Enhancement - Bump Reva: #460

    This updates the ownCloud Reva dependency to include brute force protection for
    public links. The feature implements rate-limiting that blocks access to
    password-protected public shares after exceeding a configurable maximum number
    of failed authentication attempts within a time window.

    owncloud/reva#460

  • Enhancement - Set Referrer-Policy to no-referrer: #11722

    Change the Referrer-Policy from 'strict-origin-when-cross-origin' to
    'no-referrer' to enhance user privacy and security.

    Previously, the origin was sent on cross-origin requests. This change completely
    removes the Referrer header from all outgoing requests, preventing any potential
    leakage of browsing information to third parties. This is a more robust approach
    to protecting user privacy.

    #11722

  • Enhancement - Bump Reva: #11748

    This updates the ownCloud Reva dependency to commit
    82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45. Changelog:
    owncloud/reva@cb98fe5...82c22e9

    #11748

  • Enhancement - Support disabling editors by extensions: #11750

    We have extended the configuration of collaboration service to support disabling
    editors for specific file extensions.

    #11750

  • Enhancement - Add CLI to move stuck uploads: #11762

    In some cases of saturated disk usage ocis metadata may get stuck. This command
    relieves this case.

    #11762

  • Enhancement - Use externalID in Provisioning API: #11799

    This PR adds the externalID as optional parameter to the Provisioning API that
    can be used as the primary identifier. It also contains a switch to enable this
    setting.

    #11799

  • Enhancement - Add CLI to clean orphned grants: #11804

    Add CLI ocis shares clean-orphaned-grants to find and optionally remove
    storage grants without corresponding share-manager entries.

    #11804

  • Enhancement - Bump Reva: #11808

    This updates the ownCloud Reva dependency to commit
    a122a9538794530267743edfd5dc67b48aa90325. Changelog:
    owncloud/reva@751223b...a122a95

    #11808

  • Enhancement - Bump Web to v12.2.0: #11834

    #11834
    https://github.com/owncloud/web/releases/tag/v12.2.0

  • Enhancement - Introduce claims for multi-instance-ocis: #11848

    Reads claims from the oidc token to add users to ocis with specific roles.

    #11848

  • Enhancement - Update the ocis_full deployment example images: #11860

    • Traefik 3.6.2
    • Collabora 27.4.7.3
    • OnlyOffice 9.2.0
    • Mailpit 1.28.0

    #11860

  • Enhancement - Implement brute force protection for public links: #11864

    Public links will be protected by default, allowing up to 5 wrong password
    attempts per hour. If such rate is exceeded, the link will be blocked for all
    the users until the failure rate goes below the configured threshold (5 failures
    per hour by default, as said).

    The failure rate is configurable, so it can be 10 failures each 2 hours or 3
    failures per minute.

    #11864
    owncloud/reva#460

  • Enhancement - Update the ocis_full deployment example traefik image: #11867

    • Traefik: 3.6.4
    • Traefik fix for Collabora

    #11867

  • Enhancement - Added a graph endpoint alias: #11871

    We added a graph endpoint alias that uses the unified roles instead of cs3 roles

    #11871

  • Enhancement - Force Strict-Transport-Security: #11880

    Added PROXY_FORCE_STRICT_TRANSPORT_SECURITY environment variable to force
    emission of Strict-Transport-Security header on all responses, including plain
    HTTP requests when TLS is terminated upstream. Useful when oCIS is deployed
    behind a proxy.

    #11880

  • Enhancement - Relocate Transifex resources: #11889

    The resources for services with translations are relocated in Transifex from
    owncloud to owncloud-web. Now all ocis related resources are in one project.

    #11889

  • Enhancement - Update the ocis_full deployment example images: #11890

    • Traefic: v3.6.6
    • Collabora: 25.04.8.1.1
    • Onlyoffice: 9.2.1.1

    #11890

  • Enhancement - Allow sharing between instances: #11893

    In Multi-Instance ocis it is now possible to share between instances.

    #11893

  • Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912

    We've added support for photo metadata fields in the Bleve search index and
    WebDAV REPORT responses. This enables photo gallery applications to efficiently
    query photos by their EXIF metadata and display camera information.

    The following photo metadata fields are now indexed and searchable: -
    photo.takenDateTime - When the photo was taken (supports date range queries) -
    photo.cameraMake - Camera manufacturer (e.g., Canon, Nikon, Samsung) -
    photo.cameraModel - Camera model name - photo.fNumber - Aperture f-stop
    value - photo.focalLength - Focal length in millimeters - photo.iso - ISO
    sensitivity - photo.orientation - Image orientation -
    photo.exposureNumerator - Exposure time numerator (for shutter speed
    calculation) - photo.exposureDenominator - Exposure time denominator (for
    shutter speed calculation)

    GPS location data is also included when available: - photo.location.latitude -
    GPS latitude - photo.location.longitude - GPS longitude -
    photo.location.altitude - GPS altitude

    These fields are returned in WebDAV search results using the oc:photo-*
    property namespace, allowing web extensions to build photo timeline views,
    filter by camera, or show photos on a map.

    #11912

  • Enhancement - Update the traefik image for some deployment examples: #11915

    • Traefik: 3.6.6 --> 3.6.7

    #11915

  • Enhancement - Add users instances: #11925

    The user endpoint now returns the instances that the user is either a member or
    a guest of and the cross instance reference.

    #11925

  • Enhancement - Introduce external shares permission: #11931

    Introduces a permission allowing to share between instances in multi-instance
    ocis. This permission is by default added to the admin and space-admin role.

    #11931

  • Enhancement - Bump Web to 12.3.0: #13519

    Bugfix owncloud/web#13406: Prevent
    overlapping search content Bugfix
    owncloud/web#13415 Filter only
    personal trashed spaces Enhancement
    owncloud/web#5847 Dynamic
    theme-color meta tag based on loaded theme Enhancement
    owncloud/web#13412 Use beta
    endpoint for single drive operations Enhancement
    owncloud/web#13426 Add crash page
    Enhancement
    owncloud/web#13426Catch spaces
    loading error Enhancement
    owncloud/web#13485Drop custom
    share filters Enhancement
    owncloud/web#13499Add
    cross-instance reference Enhancement
    owncloud/web#13500Add instance
    switcher

    owncloud/web#13519
    https://github.com/owncloud/web/releases/tag/v12.3.0

Don't miss a new ocis release

NewReleases is sending notifications on new releases.