v27.1.9rc1

What's Changed

• [stable27] fix(security): Update expiration date in security.txt by @backportbot in #44536
• [stable27] Add retry logic to cover deadlock situations during move operations by @backportbot in #44550
• [stable27] fix(tests): Fix tests when daytime saving time change happened recently by @backportbot in #44614
• [stable27] handle more exceptions in AmazonS3::fopen by @backportbot in #44508
• [stable27] fix(files_sharing): Create passwords when enforced for mail shares by @susnux in #44569
• [stable27] feat(trashbin): Show original location of deleted file by @backportbot in #44602
• [stable27] fix(encryption): Clicking default module in UI sets bogus value by @backportbot in #44632
• [stable27] fix(dav): Fix quota check for chunk upload by @backportbot in #44656
• [stable27] fix(deps): Update phpseclib from 2.0.45 to 2.0.47 by @backportbot in #44673
• [stable27] fix(3rdparty): Add a CI job to check 3rdparty integrity by @backportbot in #44690
• [stable27] enh: Send empty expireDate when not expireDate set by @backportbot in #44491
• [stable27] fix: Fix avatar images by @Pytal in #44739
• [stable27] fix: use proper jailed patch in watcher by @backportbot in #44749
• [stable27] perf: Avoid updating the folder size if we know the size difference by @backportbot in #44680
• [stable27] fix(LDAP): escape DN on check-user by @backportbot in #44766
• [stable27] Fix opening "Remote shares" dialog even if Notifications is available by @danxuliu in #44823
• [stable27] fix(files): Allow to pick directories using the file reference picker by @susnux in #44803
• [stable27] fix(share): Send correct share attributes upon share creation by @backportbot in #44499
• [stable27] Fix/caldav/eventcomparisionservice uses wrong array comparison by @backportbot in #44472
• [stable27] fix(files): Also skip cross storage move with access control by @backportbot in #44892
• [stable27] disable the internal s3sdk multi part copy logic by @backportbot in #44052
• [stable27] fix(files): Also restore shares after ownership transfer for object storage by @backportbot in #44920
• 27.1.9 RC1 by @Altahrim in #44875

Full Changelog: v27.1.8...v27.1.9rc1

v29.0.0rc4

What's Changed

• [stable29] fix(AppFramework): Fix error message about 204 not allowing custom headers by @backportbot in #44729
• [stable29] feat(core): Include core capabilities in OpenAPI by @backportbot in #44732
• [stable29] fix(LDAP): escape DN on check-user by @backportbot in #44765
• [stable29] fix(breadcrumbs): improved rendering of breadcrumb progress bar by @backportbot in #44760
• [stable29] fix: use proper jailed patch in watcher by @backportbot in #44748
• [stable29] Call davGetFavoritesReport after the registration of propfind properties by @backportbot in #44735
• [stable29] fix(oc-dialog): Get rid of the overlay by @backportbot in #44725
• [stable29] fix(federation): give some time to prepare both servers by @backportbot in #44778
• [stable29] fix(appconfig): compare with original value by @backportbot in #44645

Full Changelog: v29.0.0rc3...v29.0.0rc4

v29.0.0rc3

What's Changed

• [stable29] fix(deps): Update phpseclib from 2.0.45 to 2.0.47 by @backportbot in #44671
• [stable29] fix(deps): Update doctrine/dbal to 3.8.3 by @susnux in #44686
• [stable29] fix(3rdparty): Add a CI job to check 3rdparty integrity by @backportbot in #44692

Full Changelog: v29.0.0rc2...v29.0.0rc3

v29.0.0rc2

What's Changed

• [stable29] fix(files): Fix translation of "Delete file" by @backportbot in #44553
• [stable29] fix(federation): ICloudId->getRemote() should contain the protocol by @backportbot in #44626
• [stable29] feat(trashbin): Show original location of deleted file by @backportbot in #44584
• [stable29] fix(dav): Fix quota check for chunk upload by @backportbot in #44624
• [stable29] fix(files_sharing): Disable autocomplete for share label and password by @backportbot in #44617
• [stable29] fix(encryption): Clicking default module in UI sets bogus value by @backportbot in #44634
• [stable29] fix(SetupChecks): Add hint about dns/firewall if mjs check can't run by @backportbot in #44628
• [stable29] build(deps): bump nextcloud/coding-standard from 1.1.1 to 1.2.1 in /vendor-bin/cs-fixer by @backportbot in #44622
• [stable29] fix(files): breadcrumbs drag-and-drop & unifying methods by @backportbot in #44653
• [stable29] fix(files_sharing): Create passwords when enforced for mail shares by @backportbot in #44591
• 29.0.0 RC2 by @blizzz in #44647

Full Changelog: v29.0.0rc1...v29.0.0rc2

v29.0.0rc1

v29.0.0rc1

v28.0.4

What's changed

• Add "-i" to sendmail's pipe (server#43788)
• Add some recursive detection/prevention (server#44320)
• Bring back test failing due to server issue (text#5494)
• Bug fix: Select the correct table based on CALENDAR_TYPE_CALENDAR (server#43800)
• Chore(CI): Adjust testing matrix for Nextcloud 28 on stable28 (related_resources#323)
• Chore(ci): Update workflows from main branch (text#5428)
• Cleanup versions entities in versions:clean command (server#44037)
• Collaboration, MailPlugin: Protect access to a potentially missing array component by ??. (server#43900)
• Deprecated sysconfig 'enable_file_metadata' (server#44124)
• Disable the internal s3sdk multi part copy logic (server#44053)
• Do not create a new version for empty files (server#43929)
• Docs(config.sample.php): Warn that updatedirectory will break updates if set to a value within the installation folder (server#44168)
• Feat: Restore unified search filtering in files view (server#44024)
• Feat(share): save date and time for expiration (server#43833)
• Fix CSP for script-src with nonce on edge (server#44088)
• Fix data type in FilesMetadata::setIntList() (server#43801)
• Fix xml ocs response for serializable objects (server#44265)
• Fix: Allow to disable multipart copy on external s3 storage (server#43816)
• Fix: Avoid clear cache with prefix (server#44080)
• Fix: Avoid race condition that may initialize a document twice on the clients (text#5478)
• Fix: avoid scanning a non existing directory (server#44208)
• Fix: Catch exception from LogIteratorFactory, throw a clean error when log_type is not file (logreader#1197)
• Fix: changed login-page to reflect correct LDAP settings (server#44111)
• Fix: changed text alignment and icon logic (server#43916)
• Fix: Display "+New" while files page loads instead of "+Add". (server#43858)
• Fix: Ensure correct stacking context for right click menu (server#44212)
• Fix: ensure nested mount points are handled in the correct order (server#44285)
• Fix: fallback from guessing the owner from path in versioning (server#44248)
• Fix: Fetch custom app store url without internet connection (server#43985)
• Fix: filerobot-image-editor (viewer#2249)
• Fix: List specific share permissions as subline (server#44251)
• Fix: merge conflict dialog added when overwriting files on move-file action (server#43811)
• Fix: No password set for new mail shares (server#44194)
• Fix: support 28 Files (recommendations#709)
• Fix: Throw instead of yielding nothing when listing local directories (server#43828)
• Fix(ActionInsertLink): Sync NcActionInput value property (text#5425)
• Fix(admin role): fix old and wrong way to determine whether user is admin (server#43817)
• Fix(api): Ignore "parsed" link and icon urls when deleting (notifications#1859)
• Fix(attachments): Don't use currentSession for fetching attachments (text#5486)
• Fix(backend): Accept pushs with only step1 messages by read-only clients (text#5471)
• Fix(caldav): add EXDATE and EXRULE to confidential object (server#44386)
• Fix(CI): Correctly test against stable28 again (activity#1565)
• Fix(config): Make sure user keys are strings (server#44336)
• Fix(core): Convert text to path in f-droid banner SVG (server#43864)
• Fix(dav): ACLs for shared addressbooks (server#44377)
• Fix(dav): fallback realm for HTTP authentication (server#43796)
• Fix(db): db-convert supports disabled apps but not removed ones (server#44065)
• Fix(federatedfilesharing): Use correct language file to render notifi… (server#44313)
• Fix(files_sharing): ShareesAPI - Return empty response when user is not allowed to share (server#44228)
• Fix(files): Adjust dropservice to work with Blink engine (server#44273)
• Fix(files): Adjust sidebar - remove deprecated function calls and add aria label for favorite icon (server#43994)
• Fix(files): fix html structure on the profile page (server#43909)
• Fix(files): Open new file when created from template (server#44019)
• Fix(files): page h1 heading (server#43795)
• Fix(files): Right click menu offset and list scrolled glitch (server#44174)
• Fix(IUrlGenerator): Add throws documentation for imagePath function (server#43978)
• Fix(JSResourceLocator): Consider configured app roots for files (server#44050)
• Fix(LinkPicker): Don't open link picker inside code blocks (text#5492)
• Fix(mail): Use parsed action label in email notification (notifications#1843)
• Fix(MarkdownContentEditor): Respect onLoaded callback passed via API (text#5526)
• Fix(provisioning_api): Fix AppInfo schema for OpenAPI (server#44192)
• Fix(session): Fix setting a guest name (text#5475)
• Fix(settings): posix_getpwuid can return false which should not be accessed like an array (server#44182)
• Fix(settings): Disable app again if it breaks the files app (server#44021)
• Fix(settings): Fix always empty disabled users list for subadmins (server#44150)
• Fix(settings): Split group lists (server#44047)
• Fix(share): use share owner to get ownership (server#44347)
• Fix(Tables): require at least one cell in the header (text#5465)
• Fix(updatenotification): a11y of channel menu and new icons (server#43785)
• Fix(UpdateNotifications): Handle numeric user ids (server#44095)
• Fix(user_ldap): Early failure for empty password login attempt (server#44056)
• Fix(user_ldap): Ignore unserialize error in group membership migration (server#44030)
• Fix(user_status): Fix status update request not being sent (server#43813)
• Fix(workflowengine): Use correct event names to make search for groups work again (server#44382)
• Fixes for getting the filename in the FileInfo class (server#44201)
• Forbid tagging readonly files (server#44298)
• Improve files version listing (server#43981)
• Log error when default getWrapperStorage would return null (server#44420)
• MailQueueHandler: Log errors (activity#1605)
• Only cleanup orphaned shared daily (server#43835)
• [Tests(dav): Add unit test f...

v27.1.8

What's changed

• Add "-i" to sendmail's pipe (server#43789)
• Add pick plain text files string to be translated (text#5534)
• Add some recrusive detection/prevention (server#44321)
• Circles' activity (circles#1523)
• Cleanup versions entities in versions:clean command (server#44036)
• Collaboration, MailPlugin: Protect access to a potentially missing array component by ??. (server#43901)
• Do not create a new version for empty files (server#43931)
• Docs(config.sample.php): Warn that updatedirectory will break updates if set to a value within the installation folder (server#44167)
• Feat(share): save date and time for expiration (server#43832)
• Fix: Allow to disable multipart copy on external s3 storage (server#43815)
• Fix: Avoid clear cache with prefix (server#44079)
• Fix: Avoid race condition that may initialize a document twice on the clients (text#5479)
• Fix: avoid scanning a non existing directory (server#44206)
• Fix: cypress (viewer#2221)
• Fix: don't return null for SharedStorage::getWrapperStorage with share recursion (server#44415)
• Fix: ensure nested mount points are handled in the correct order (server#44284)
• Fix: fallback from guessing the owner from path in versioning (server#44247)
• Fix: Fetch custom app store url without internet connection (server#43986)
• Fix: filerobot-image-editor (viewer#2250)
• Fix: No password set for new mail shares (server#44193)
• Fix: select the correct table based on CALENDAR_TYPE_CALENDAR (server#43799)
• Fix: Throw instead of yielding nothing when listing local directories (server#43830)
• Fix(ActionInsertLink): Sync NcActionInput value property (text#5426)
• Fix(api): Ignore "parsed" link and icon urls when deleting (notifications#1860)
• Fix(attachments): Don't use currentSession for fetching attachments (text#5485)
• Fix(backend): Accept pushs with only step1 messages by read-only clients (text#5472)
• Fix(caldav): add EXDATE and EXRULE to confidential object (server#44385)
• Fix(comments): move new comment instructions placeholder to description (server#44171)
• Fix(config): Make sure user keys are strings (server#44337)
• Fix(core): Convert text to path in f-droid banner SVG (server#43863)
• Fix(cypress): introduce cypress-split (viewer#2220)
• Fix(cypress): sharing download test (viewer#2224)
• Fix(dav): ACLs for shared addressbooks (server#44378)
• Fix(dav): fallback realm for HTTP authentication (server#43798)
• Fix(federatedfilesharing): Use correct language file to render notifi… (server#44312)
• Fix(files_sharing): ShareesAPI - Return empty response when user is not allowed to share (server#44229)
• Fix(IUrlGenerator): Add throws documentation for imagePath function (server#43977)
• Fix(LinkPicker): Don't open link picker inside code blocks (text#5493)
• Fix(mail): Use parsed action label in email notification (notifications#1842)
• Fix(MarkdownContentEditor): Respect onLoaded callback passed via API (text#5525)
• Fix(session): Fix setting a guest name (text#5474)
• Fix(settings): posix_getpwuid can return false which should not be accessed like an array (server#44181)
• Fix(share): use share owner to get ownership (server#44349)
• Fix(Tables): require at least one cell in the header (text#5467)
• Fix(UpdateNotifications): Handle numeric user ids (server#44101)
• Fix(user_ldap): Early failure for empty password login attempt (server#44055)
• Fix(workflowengine): Use correct event names to make search for groups work again (server#44383)
• Fixes for getting the filename in the FileInfo class (server#44200)
• Forbid tagging readonly files (server#44299)
• Improve files version listing (server#43980)
• Log error when default getWrapperStorage would return null (server#44419)
• MailQueueHandler: Don't flood logs with useless messages (activity#1604)
• Only cleanup orphaned shared daily (server#43837)
• Tests(dav): Add unit test for no calendars/subscription limit (server#44155)
• Use table prefix in metadata migration (server#43971)
• Use the proper path to check if a file needs to be copied/moved to the actual target storage (server#44084)

v26.0.13

🪦 26 is now EOL

What's changed

• Circles' activity (circles#1524)
• Cleanup versions entities in versions:clean command (server#44035)
• Collaboration, MailPlugin: Protect access to a potentially missing array component by ??. (server#43902)
• Docs(config.sample.php): Warn that updatedirectory will break updates if set to a value within the installation folder (server#44166)
• Feat(share): save date and time for expiration (server#43831)
• Fix: Avoid clear cache with prefix (server#44078)
• Fix: ensure nested mount points are handled in the correct order (server#44283)
• Fix: Throw instead of yielding nothing when listing local directories (server#43829)
• Fix(api): Ignore "parsed" link and icon urls when deleting (notifications#1861)
• Fix(caldav): add EXDATE and EXRULE to confidential object (server#44384)
• Fix(config): Make sure user keys are strings (server#44338)
• Fix(mail): Use parsed action label in email notification (notifications#1841)
• Fix(settings): posix_getpwuid can return false which should not be accessed like an array (server#44180)
• Fix(share): use share owner to get ownership (server#44348)
• Fix(Tables): require at least one cell in the header (text#5468)
• Fix(UpdateNotifications): Handle numeric user ids (server#44100)
• Fix(user_ldap): Early failure for empty password login attempt (server#44054)
• Fix(workflowengine): Use correct event names to make search for groups work again (server#44387)
• Fixes for getting the filename in the FileInfo class (server#44199)
• Forbid tagging readonly files (server#44308)
• Improve files version listing (server#44006)
• Only cleanup orphaned shared daily (server#43836)
• Tests(dav): Add unit test for no calendars/subscription limit (server#44156)🪦

v29.0.0beta6

What's Changed

• fix(JSRecourceLocator): Add missing slash after server root by @susnux in #44408
• fix(logging): Restore the option to log with debug level by @nickvergessen in #44400
• fix(files): Do not escape file names in the file picker by @susnux in #44407
• Check permissions of all accessible file for versions by @artonge in #44362
• log error when default getWrapperStorage would return null by @icewind1991 in #44357
• fix(files): Only add copy suffix before file extension for files (not folders) by @susnux in #44417
• build(deps): bump libphonenumber-js from 1.10.57 to 1.10.58 by @dependabot in #44423
• build(deps-dev): bump webpack-dev-middleware from 5.3.3 to 5.3.4 by @dependabot in #44436
• build(deps): bump dompurify from 3.0.9 to 3.0.11 by @dependabot in #44426
• build(deps-dev): bump phpunit/phpunit from 9.6.17 to 9.6.18 in /build/integration by @dependabot in #44432
• build(deps): bump core-js from 3.36.0 to 3.36.1 by @dependabot in #44430
• build(deps-dev): bump cypress-split from 1.20.1 to 1.21.0 by @dependabot in #44427
• build(deps-dev): bump cypress from 13.7.0 to 13.7.1 by @dependabot in #44428
• build(deps): bump @nextcloud/vue from 8.11.0 to 8.11.1 by @dependabot in #44431
• build(deps-dev): bump tar from 6.2.0 to 6.2.1 by @dependabot in #44429
• build(deps-dev): bump webpack from 5.90.3 to 5.91.0 by @dependabot in #44424
• build(deps): bump @nextcloud/router from 2.2.1 to 3.0.0 by @dependabot in #44425
• fix(AppStore\Fetcher): Ensure get returns an array by @susnux in #44410
• Get access list share by email recipients by @ASerbinski in #32631
• fix(typo): Fix typo in docs by @nickvergessen in #44456
• fix(federation): Fix creating local cloudIds with http:// protocol by @nickvergessen in #44453
• feat: add interface for lower level filecache acess without having to do direct db queries by @icewind1991 in #44458
• fix(DB): Sanitize host parameter for postgres databases when IPv6 address is passed by @susnux in #44394
• feat(login): Clear login form (password) after IDLE timeout by @susnux in #44438
• config: fix correctness issues in reading by @pulsejet in #44230
• chore(ci): update block merge EOL workflow by @Altahrim in #44388
• Fix/caldav/eventcomparisionservice uses wrong array comparison by @rcwschaller in #44017
• fix(setupcheck): Catch Throwables from setup checks and show them to the admin by @come-nc in #44270
• fix(S3): Adjust typing for 32bit compatibility by @susnux in #44462
• fix(preview): webp preview format by @st3iny in #44474
• enh: Send empty expireDate when not expireDate set by @fenn-cs in #44291
• fix(personal-files): correctly filters groupfolders now by @emoral435 in #44455
• fix: always add user to group cache by @hrenard in #42931
• fix(CSP): Add CSP nonce by default and convert browserSupportsCspV3 to blacklist by @susnux in #44412
• fix(dns): detect disabled IPv6 support in DNS pinning by @Altahrim in #44475
• fix(settings): Also verify that trusted_proxies only contains IP addresses (with range) by @susnux in #44483
• Add listener and interfaces to allow versions migration across storage by @artonge in #44187
• fix(contactsinteraction): Allow vCard download by @ChristophWurst in #44457
• fix: Allow using replica config with split databases by @juliushaertl in #44470
• 29.0.0 beta 6 by @Altahrim in #44449

New Contributors

• @ASerbinski made their first contribution in #32631
• @rcwschaller made their first contribution in #44017
• @hrenard made their first contribution in #42931

Full Changelog: v29.0.0beta5...v29.0.0beta6

v29.0.0beta5

What's Changed

• fix(db): remove redundant index in cards by @kesselb in #44333
• fix(config): Make sure user keys are strings by @ChristophWurst in #44276
• fix(share): use share owner to get ownership by @ArtificialOwl in #44339
• fix(dav): adjust usages of webdav.customRequest by @st3iny in #44344
• Forbid tagging readonly files by @come-nc in #44297
• Allow injecting the user temporarily for direct editing by @juliushaertl in #44295
• Rename MetadataFileEvents to VersionAuthorListener by @artonge in #44363
• fix(dav): ACLs for shared addressbooks by @ChristophWurst in #44376
• fix(caldav): add EXDATE and EXRULE to confidential object by @miaulalala in #44360
• feat: Limit email input to 255 chars by @fenn-cs in #44218
• fix(workflowengine): Use correct event names to make search for groups work again by @susnux in #44381
• feat: Add new mdi New file menu icons by @Pytal in #44368
• feat(ObjectStore): Make the S3 concurrency option configurable by @susnux in #44252
• fix(dav): Add retention time to sync token cleanup by @ChristophWurst in #44075
• 29.0.0 beta 5 by @Altahrim in #44361

Full Changelog: v29.0.0beta4...v29.0.0beta5