Table of Contents
- Changelog for 8.0.0-rc.1
Changes in 8.0.0-rc.1
Summary
- Bugfix - Fix user light creation: #11765
- Bugfix - OCM Specification Compliance: #11773
- Bugfix - Remove leading dot before checking disabled extension: #11814
- Bugfix - Support pointer types in config environment variable decoding: #11815
- Bugfix - Replace obsolete docker image in the deployment example: #11828
- Bugfix - Fix error code when a user can't disable a space: #11845
- Bugfix - Fix Sharingroles: #11898
- Bugfix - Fix the error handling for empty name on space update: #11933
- Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942
- Enhancement - Bump Reva: #460
- Enhancement - Set Referrer-Policy to no-referrer: #11722
- Enhancement - Bump Reva: #11748
- Enhancement - Support disabling editors by extensions: #11750
- Enhancement - Add CLI to move stuck uploads: #11762
- Enhancement - Use externalID in Provisioning API: #11799
- Enhancement - Add CLI to clean orphned grants: #11804
- Enhancement - Bump Reva: #11808
- Enhancement - Bump Web to v12.2.0: #11834
- Enhancement - Introduce claims for multi-instance-ocis: #11848
- Enhancement - Update the ocis_full deployment example images: #11860
- Enhancement - Implement brute force protection for public links: #11864
- Enhancement - Update the ocis_full deployment example traefik image: #11867
- Enhancement - Added a graph endpoint alias: #11871
- Enhancement - Force Strict-Transport-Security: #11880
- Enhancement - Relocate Transifex resources: #11889
- Enhancement - Update the ocis_full deployment example images: #11890
- Enhancement - Allow sharing between instances: #11893
- Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912
- Enhancement - Update the traefik image for some deployment examples: #11915
- Enhancement - Add users instances: #11925
- Enhancement - Introduce external shares permission: #11931
- Enhancement - Bump Web to 12.3.0: #13519
Details
-
Bugfix - Fix user light creation: #11765
When trying to switch a user to user light before they logged in for the first
time, an error would occur. The server now correctly handles this case and
allows switching to user light even before the first login. -
Bugfix - OCM Specification Compliance: #11773
OCM Specification Compliance
-
Bugfix - Remove leading dot before checking disabled extension: #11814
We have fixed a bug where the leading dot was not removed before checking if an
extension is disabled. The original behavior would have caused the
COLLABORATION_WOPI_DISABLED_EXTENSIONSconfig to be ignored. -
Bugfix - Support pointer types in config environment variable decoding: #11815
Added support for decoding pointer types (*bool, *int, *string, etc.) in the
envdecode package, allowing configuration fields to distinguish between unset
(nil) and explicitly set values. ChangedWEB_OPTION_EMBED_ENABLEDfrom string
to *bool type to enable explicit false values. -
Bugfix - Replace obsolete docker image in the deployment example: #11828
In the ocis_ldap deployment example, we were using the bitnami/openldap docker
image. This image isn't available any longer, so the example couldn't be
deployed as intended.We've replaced the docker image with the osixia/openldap image and we've
adjusted some of the configuration of the openldap image. -
Bugfix - Fix error code when a user can't disable a space: #11845
Previously, if the user couldn't disable a space due to wrong permissions, the
request returned a 404 error code, as if the space wasn't found even though the
space was visible. Now it will return the expected 403 error code. -
Bugfix - Fix Sharingroles: #11898
Sharing roles were inconsistent, now they are fixed.
-
Bugfix - Fix the error handling for empty name on space update: #11933
Fix the error handling for empty name on space update.
-
Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942
Deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS environment variable was removed from
frontend service config. Use OCIS_USER_SEARCH_DISPLAYED_ATTRIBUTES instead to
control which user attributes are displayed in search results. -
Enhancement - Bump Reva: #460
This updates the ownCloud Reva dependency to include brute force protection for
public links. The feature implements rate-limiting that blocks access to
password-protected public shares after exceeding a configurable maximum number
of failed authentication attempts within a time window. -
Enhancement - Set Referrer-Policy to no-referrer: #11722
Change the Referrer-Policy from 'strict-origin-when-cross-origin' to
'no-referrer' to enhance user privacy and security.Previously, the origin was sent on cross-origin requests. This change completely
removes the Referrer header from all outgoing requests, preventing any potential
leakage of browsing information to third parties. This is a more robust approach
to protecting user privacy. -
Enhancement - Bump Reva: #11748
This updates the ownCloud Reva dependency to commit
82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45. Changelog:
owncloud/reva@cb98fe5...82c22e9 -
Enhancement - Support disabling editors by extensions: #11750
We have extended the configuration of collaboration service to support disabling
editors for specific file extensions. -
Enhancement - Add CLI to move stuck uploads: #11762
In some cases of saturated disk usage ocis metadata may get stuck. This command
relieves this case. -
Enhancement - Use externalID in Provisioning API: #11799
This PR adds the externalID as optional parameter to the Provisioning API that
can be used as the primary identifier. It also contains a switch to enable this
setting. -
Enhancement - Add CLI to clean orphned grants: #11804
Add CLI
ocis shares clean-orphaned-grantsto find and optionally remove
storage grants without corresponding share-manager entries. -
Enhancement - Bump Reva: #11808
This updates the ownCloud Reva dependency to commit
a122a9538794530267743edfd5dc67b48aa90325. Changelog:
owncloud/reva@751223b...a122a95 -
Enhancement - Bump Web to v12.2.0: #11834
- Bugfix owncloud/web#13177: Fix
copying public link and password on Safari - Bugfix
owncloud/web#13198: Fix incorrect
translations - Bugfix
owncloud/web#13203: Remove
duplicate resource links - Bugfix
owncloud/web#13213: Do not disable
sharing of resources when managing spaces via claims - Bugfix
owncloud/web#13223: Fix spinner
loading continuously when resource is deleted - Bugfix
owncloud/web#13233: Include Ubuntu
font - Bugfix owncloud/web#13253:
External share ID fallback - Bugfix
owncloud/web#13274: Handle file
loading error - Bugfix
owncloud/web#13329: Use sticky
header composable in deleted files - Enhancement
owncloud/web#13168: Hide trashed
spaces - Enhancement
owncloud/web#13169: Drop beta
badge from GeoGebra pinboards - Enhancement
owncloud/web#13172: Add Excalidraw
file icon - Enhancement
owncloud/web#13197: Add Visio file
icons - Enhancement
owncloud/web#13224: Add table
caption - Enhancement
owncloud/web#13235: Use API groups
search in admin settings - Enhancement
owncloud/web#13296: Embed mode
share links with password
- Bugfix owncloud/web#13177: Fix
-
Enhancement - Introduce claims for multi-instance-ocis: #11848
Reads claims from the oidc token to add users to ocis with specific roles.
-
Enhancement - Update the ocis_full deployment example images: #11860
- Traefik 3.6.2
- Collabora 27.4.7.3
- OnlyOffice 9.2.0
- Mailpit 1.28.0
-
Enhancement - Implement brute force protection for public links: #11864
Public links will be protected by default, allowing up to 5 wrong password
attempts per hour. If such rate is exceeded, the link will be blocked for all
the users until the failure rate goes below the configured threshold (5 failures
per hour by default, as said).The failure rate is configurable, so it can be 10 failures each 2 hours or 3
failures per minute. -
Enhancement - Update the ocis_full deployment example traefik image: #11867
- Traefik: 3.6.4
- Traefik fix for Collabora
-
Enhancement - Added a graph endpoint alias: #11871
We added a graph endpoint alias that uses the unified roles instead of cs3 roles
-
Enhancement - Force Strict-Transport-Security: #11880
Added
PROXY_FORCE_STRICT_TRANSPORT_SECURITYenvironment variable to force
emission ofStrict-Transport-Securityheader on all responses, including plain
HTTP requests when TLS is terminated upstream. Useful when oCIS is deployed
behind a proxy. -
Enhancement - Relocate Transifex resources: #11889
The resources for services with translations are relocated in Transifex from
owncloud to owncloud-web. Now all ocis related resources are in one project. -
Enhancement - Update the ocis_full deployment example images: #11890
- Traefic: v3.6.6
- Collabora: 25.04.8.1.1
- Onlyoffice: 9.2.1.1
-
Enhancement - Allow sharing between instances: #11893
In Multi-Instance ocis it is now possible to share between instances.
-
Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912
We've added support for photo metadata fields in the Bleve search index and
WebDAV REPORT responses. This enables photo gallery applications to efficiently
query photos by their EXIF metadata and display camera information.The following photo metadata fields are now indexed and searchable: -
photo.takenDateTime- When the photo was taken (supports date range queries) -
photo.cameraMake- Camera manufacturer (e.g., Canon, Nikon, Samsung) -
photo.cameraModel- Camera model name -photo.fNumber- Aperture f-stop
value -photo.focalLength- Focal length in millimeters -photo.iso- ISO
sensitivity -photo.orientation- Image orientation -
photo.exposureNumerator- Exposure time numerator (for shutter speed
calculation) -photo.exposureDenominator- Exposure time denominator (for
shutter speed calculation)GPS location data is also included when available: -
photo.location.latitude-
GPS latitude -photo.location.longitude- GPS longitude -
photo.location.altitude- GPS altitudeThese fields are returned in WebDAV search results using the
oc:photo-*
property namespace, allowing web extensions to build photo timeline views,
filter by camera, or show photos on a map. -
Enhancement - Update the traefik image for some deployment examples: #11915
- Traefik: 3.6.6 --> 3.6.7
-
Enhancement - Add users instances: #11925
The user endpoint now returns the instances that the user is either a member or
a guest of and the cross instance reference. -
Enhancement - Introduce external shares permission: #11931
Introduces a permission allowing to share between instances in multi-instance
ocis. This permission is by default added to the admin and space-admin role. -
Enhancement - Bump Web to 12.3.0: #13519
Bugfix owncloud/web#13406: Prevent
overlapping search content Bugfix
owncloud/web#13415 Filter only
personal trashed spaces Enhancement
owncloud/web#5847 Dynamic
theme-color meta tag based on loaded theme Enhancement
owncloud/web#13412 Use beta
endpoint for single drive operations Enhancement
owncloud/web#13426 Add crash page
Enhancement
owncloud/web#13426Catch spaces
loading error Enhancement
owncloud/web#13485Drop custom
share filters Enhancement
owncloud/web#13499Add
cross-instance reference Enhancement
owncloud/web#13500Add instance
switcherowncloud/web#13519
https://github.com/owncloud/web/releases/tag/v12.3.0