33.0.0 beta 5 - #57651

Nextcloud 33

server

• fix: support longer index and table names #51593
• fix: update unified search folder picker text #54234
• docs(settings): Removing the developerDocsUrl #56794
• chore: Update minimum supported desktop version to 3.1.50 #57082
• chore: Change preview image in README.md #57164
• feat(files_sharing): implement partial mount providers #57292
• fix(FilesAppSettings): Add icons to default view #57296
• build(deps): bump the github-actions group across 1 directory with 11 updates #57303
• fix(files): properly handle currently active node and files action hotkeys #57352
• fix(files): properly handle viewer integration of sidebar #57393
• fix(psalm): Fix static analysis issues in apps/*/tests #57404
• feat(profile): show Teams memberships on account details #57439
• build(deps-dev): bump the vite group across 2 directories with 1 update #57466
• build(deps-dev): bump eslint-plugin-cypress from 5.2.0 to 5.2.1 #57467
• build(deps-dev): bump sass from 1.97.1 to 1.97.2 #57469
• build(deps-dev): bump msw from 2.12.6 to 2.12.7 in /build/frontend-legacy #57472
• build(deps-dev): bump sass from 1.97.1 to 1.97.2 in /build/frontend-legacy #57473
• perf(UserMountCache): Optimize loop #57525
• perf(View): Optimize getDirectoryContent hot-loop #57549
• refactor(core): migrate web updater to Vue #57556
• ci(phpunit): thin out testing matrix #57561
• feat(files_sharing): Support multiples users in UserShareAccessUpdatedEvent #57564
• ci(lint): Lint multiple files at once when possible #57566
• refactor(core): migrate public share authentication to Vue #57571
• fix: dont error on missing path_hash/checksum CacheEntry fields #57576
• refactor(core): migrate OCP.AppConfig from jQuery to axios #57584
• chore(i18n): Improved grammar #57585
• chore: update @nextcloud/files to v4.0.0-rc.0 #57586
• refactor: migrate OC.*QueryString from jQuery #57587
• refactor(QueryException): Remove most usage of QueryException #57591
• refactor(core): migrate OC.msg away from jQuery #57592
• refactor(core): migrate OCP.Comments away from jQuery #57594
• build(deps-dev): bump rector/rector from 2.3.0 to 2.3.1 in /vendor-bin/rector #57600
• build(deps-dev): bump the vitest group across 2 directories with 3 updates #57601
• build(deps-dev): bump cypress from 15.8.1 to 15.9.0 #57602
• build(deps-dev): bump @types/dockerode from 3.3.47 to 4.0.0 #57605
• build(deps-dev): bump @zip.js/zip.js from 2.8.14 to 2.8.15 #57606
• build(deps-dev): bump @babel/plugin-transform-private-methods from 7.27.1 to 7.28.6 in /build/frontend-legacy #57607
• build(deps): bump @nextcloud/vue from 8.35.0 to 8.35.2 in /build/frontend-legacy #57608
• chore(version): Hub 25 Autumn -> Hub 26 Winter #57629
• build(deps-dev): bump @nextcloud/stylelint-config from 3.1.1 to 3.2.0 #57634
• build(deps): bump p-queue from 9.0.1 to 9.1.0 in /build/frontend-legacy #57635
• build(deps-dev): bump @babel/node from 7.28.0 to 7.28.6 in /build/frontend-legacy #57636
• build(deps): bump @nextcloud/dialogs from 7.1.0 to 7.2.0 in /build/frontend-legacy #57637
• build(deps): bump libphonenumber-js from 1.12.31 to 1.12.34 in /build/frontend-legacy #57638
• build(deps): bump the github-actions group with 3 updates #57639
• fix(TaskProcessing): Fix occ commands to cast strings to integer #57641
• chore: drop duplicated legacy Ajax error handling #57642
• refactor(core): migrate OC.EventSource from jQuery to native API #57644
• fix(theming): Fix favicon and touchicon ratios #57653
• fix(apps): Enable TwoFactor TOTP by default #57658

3rdparty

• ci(lint): Lint multiple files at once when possible 3rdparty#2259

activity

• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.0.16 to 4.0.17 activity#2312
• Chore(deps-dev): Bump happy-dom from 20.0.11 to 20.3.1 activity#2314
• ci(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 in /.github/workflows activity#2316
• [master] Update nextcloud/ocp dependency activity#2318

app_api

• fix(manual-install): prevent duplicate port in ExApp URLs app_api#750
• fix(setup-check): change missing daemon from error to info app_api#751
• chore(readme-description): update app description and README.md app_api#753

bruteforcesettings

• [master] Update nextcloud/ocp dependency bruteforcesettings#930

circles

• fix(population): exclude nested circles from population counts circles#2300
• [master] Update nextcloud/ocp dependency circles#2301
• perf: use getExistingUser for getUsersForShare circles#2307

logreader

• chore(deps-dev): bump @vitest/coverage-istanbul from 4.0.16 to 4.0.17 logreader#1876
• chore(deps-dev): bump happy-dom from 20.1.0 to 20.3.1 logreader#1877
• [master] Update nextcloud/ocp dependency logreader#1878

nextcloud_announcements

• [master] Update nextcloud/ocp dependency nextcloud_announcements#562
• fix(crawler): Skip notifications code completely in first run nextcloud_announcements#563

notifications

• [master] Update nextcloud/ocp dependency notifications#2729
• build(deps): Bump ua-parser-js from 2.0.7 to 2.0.8 notifications#2731
• build(deps-dev): Bump rector/rector from 2.3.0 to 2.3.1 in /vendor-bin/rector notifications#2732
• fix: Make app version stable notifications#2734

photos

• feat(preview): Improve preview management photos#3370

related_resources

• chore(deps): bump actions/setup-node from 6.0.0 to 6.2.0 related_resources#810

serverinfo

• [master] Update nextcloud/ocp dependency serverinfo#931
• chore(ci): update workflows serverinfo#932

suspicious_login

• chore(deps): update dependency php-cs-fixer/shim to ^3.92.5 (master) suspicious_login#1060

text

• [main] Update nextcloud/ocp dependency text#8157
• chore(deps): update vitest monorepo to ^4.0.17 (main) text#8163
• chore(deps): update dependency cypress to ^15.9.0 (main) text#8164
• [main] Update nextcloud/ocp dependency text#8167
• [main] Fix npm audit text#8168
• chore(test): use retrying assertion text#8170
• feat(tables): enable text alignment rendering in HTML output text#8171

twofactor_nextcloud_notification

• [main] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1166
• fix: Make app version stable twofactor_nextcloud_notification#1168

viewer

• fix: correctly handle files sidebar integration viewer#3047

Pending PRs:

• @a-bran
  • [Fix] Abort Streamer-processing when user-connection aborted #42352
• @abhinavohri
  • enhancement(files): remove redundant success toast on file rename #57168
  • feat(sharebymail): Use initiator's email as sender if mail providers enabled #57080
• @Abijeet
  • Add feature to view admin_audit log files logreader#476 ⚠
• @AIlkiv
  • feature(files): add support for viewing public links in widget #52478
• @arc64
  • fix(settings): show active forced locale or language instead of 'No locale set' (#41543) #53364
• @ArtificialOwl
  • ConfigLexicon to update lazy status #52671
  • update single display-name circles#1394 ⚠
  • +runAsSuperSession circles#980
  • runAsAdmin() circles#1217 ⚠
  • emulate entity on Admin OCS API circles#1214 🔁
  • share with group members only circles#891 ⚠
  • fix(lexicon): using userconfig on value set in lexicon #56670
  • shorten id on occ circles#1148 ⚠
  • cleaning and fixing circles#1090 ⚠
  • enable multiple table/fields comparaison when using queryHelper circles#1089 ⚠
  • fix(sharing): ignore inexisting memberships during reshare check #52217
• @artonge
  • fix(Scanner): Use time based limit for the transaction #56290
  • feat: Implement custom Updater for object store storage #53423
  • [local] fix(settings): Improve sharing form labels #57490
• @blizzz
  • fix(Files): use prepare statement for path_hash in propagator #49469
  • fix(LDAP): unblock a cached id from a deleted user or group #56292
  • turn LDAP's treat remnants as disabled feature config-independent #46992
• @bromiesTM
  • Add Tests for files UserConfig service #50050
• @byt3sage
  • fix(oauth): instance name encoding on oauth app in admin #49804
• @CarlSchwan
  • refactor(trash): Port deletion code of Trashbin to node based API #54278
  • feat(preview): On demand preview migration #55649
  • refactor: Commands and background jobs for the trashbin #54876
  • Add some missing attributes #55474
  • feat(filecache): Scale DB query created when deleting file from filecache #54277 🔁
  • perf(normalization): Optimize path normalization #57570
  • Run rector on lib/private #56496
• @castillo92
  • fix(settings): Improve sharing form labels #57327
• @cherti
  • Change default profile visibility to logged-in users only #47170
• @come-nc
  • fix(files_sharing): Fix BeforeZipCreatedListener path handling #57573
  • fix(settings): Initialize group display names from store #56509
• @Cybso
  • #41935 smtp: allow self-signed certificates on localhost #46957
• @danxuliu
  • fix: Fix handling of deleting share from self activity#2319
  • Add integration tests for renaming a share by a user with stale shares #50229
  • Do not load PDF viewer if public share has a download limit files_pdfviewer#654 ⚠
• @djon2003
  • Ensure no description changes are lost #41370
• @dpschen
  • fix(settings): hide up-to-date message during load #45030 ✅
• @edward-ly
  • chore: adjust code owner files for app maintainers #50959
• @FedericoHeichou
  • Reducing queries in ScanFiles.php #40019
• @fgsl
  • New circles are treated as an "all user" activity - but no option for this being on/off #204 circles#229 ⚠
  • Enable audit by configuration #163 circles#226 ⚠
• @fitrahmunir
  • feat(UserMenu): add target property to usermenu component #41659
• @GVodyanov
  • fix(Dav): make absenceform textarea not overlap #56055
• @haffmans
  • Fix: Match token login name by UID or e-mail address #50254
• @hardviper
  • feat(oauth2): simple userinfo endpoint #43684
• @haslersn
  • Revert "Do not do redirect handling when loggin out" #40407
• @iasdeoupxe
  • feat(mimetypes): Add mimetype aliases/mapping/names for .toml and .ovpn #57480
• @icewind1991
  • Authoritative setup improvements #57578
  • fix: give target file all permissions on copy #53733
  • fix: allow renaming files with just update permissions #57374
  • fix: pass parent id to correctParentStorageMtime when known #53464
  • debug: throw a proper error when directory content has a null path #56291
  • fix: remove use of depricated insertIfNotExist from Files\Cache\Storage #43851
  • feat: move file cache from view to node api #52000
  • fix: handle shares for which the source is deleted when checking if rename target is shared #52098
  • Log app version #53736 ✅
• @iLinaza
  • fix(usergroups): clear cached user groups on pre hooks #45036
• @JanisPlayer
  • Add AVIF Thumbnail Generation #40048
• @jlehtoranta
  • fix(2fa): Handle twofactor_enforced configuration parameter as boolean #44090
• @jmechnich
  • fix: make trusted_domains and overwrite.cli.url sensitive config values #45085
• @joshtrichards
  • refactor(installer): reduce deep nesting in installShippedApps() #57307
  • chore(Log): remove unused getEntries method #53682
  • refactor(core): enhance BeforeMessageLoggedEventListener robustness and clarity #57281
  • docs: Add README for core/shipped apps #57306
  • feat(app): allow removing installed-but-disabled apps; improve help & logging #56720
  • fix(setup): normalize canonical webroot consistently #56853
  • refactor(setup): improve htaccess update handling and code clarity #56857
  • docs(api): clarify getNumericStorageId return value in IMountPoint interface #57110
  • chore(files): drop unused list.php #57333
  • chore: remove always_populate_raw_post_data #53583 ✅
  • fix(HttpClient): let local curl set encoding based what it is built with #53605
  • fix(db): make sure getTables filter only accepts matches #56174
  • fix(DAV): Clean-up remote + handle application/xml properly #53703
  • test(TestCase): '.ocdata' -> '.ncdata' in knownEntries #56920
  • fix(db): make sure PgSqlTools filter only accepts actual matches #56173
  • fix(settings): Change "setup warnings" -> "setup checks" in Overview [redo] #53717
  • docs: add grapheme note to shortenMultibyteString function #56169
  • fix(Comments): sort by id (not type+id) in getMentions #56162
  • fix(storage/local): stop deleting prior to forbidden items check #57421
  • test(User): register Backend+DB users for proper cleanup #57438
  • fix(preview/bundled): copy content not resource id and improve error handling #56068
  • feat(settings): Check for unused data directory #53980
  • fix(auth): Correct max password length in config.sample.php #54091 🔁
  • fix: avoid outer "uncaught exception" for ServerMaintenanceMode #55969
  • fix(auth): remove legacy session credential fallbacks and improve code clarity #55722
  • feat(setupChecks): Enhance output for SecurityHeaders #55641
  • fix(setup-check): clarify server connectivity help text and improve trait docblocks #55640
  • refactor(auth): Use $request->getCookie() instead of $_COOKIE #57287
  • fix(settings): Don't permit duplicate groups in occ admin-delegation:add #46617
  • feat: Run setup checks by category or class #49978
  • fix(files_external): Drop deprecated BinaryFinder for smbclient #46516
  • fix(SetupChecks): Validate URL before parsing #49379
  • fix(files): files:scan error ouput when user_id is not found + return correct exit status on error #49412
  • fix(Security): Don't attempt empty secret fallback on >=v3 ciphertext #46176
  • fix(mail): Log hint when mail_from_address may be wrong #46040
  • fix(SetupChecks): Add reasoning/clarity to outdated PHP check #45261
  • fix: detect inadvertent overlapping config files that break things #49956
  • meta(ISSUE_TEMPLATE): Search both open and closed issues #44322
  • fix(DnsPinMiddleware): Don't log misleading port value / log request port instead #50583
  • feat(core): add support for NoTwoFactorRequired attribute in TwoFactorMiddleware #57301
  • fix(apps): Remove jobs when an app gets disabled #50707
  • fix: Add NoTwoFactorRequired attribute to poll method twofactor_nextcloud_notification#1151
• @jplitza
  • fix(files_external): ignore unsatisfied optional dependencies #54048
• @jpsn123
  • movie preview bug fix, in some case stream reading functions may block indefinitely #43226
• @julien-nc
  • Do not declare the id column type in the oauth2 app #57446
• @juliusknorr
  • feat: Add office switcher with feature comparison #57555
• @kesselb
  • fix: use insert ignore for filecache_extended #48564
• @killianeletellier
  • Sort events by descending date #46549
• @klondi
  • Fix sharing and around three errors related to Undefined array key "CLOUD" #40208
• @Koc
  • feat: Store user which has downloaded file in activity feed #46305
• @kra-mo
  • fix(l10n): Nicer capitalization for generic messages #56283
  • chore(img): Update mobile app store badges #57130
• @LakshayaTohan
  • Add feature to view admin_audit log files logreader#857 ⚠
• @leftybournes
  • refactor(provisioning_api): check user membership if non-admin #55459
• @LexioJ
  • feat: Support URL extraction from markdown link syntax #55850
• @lobermann
  • Fix viewing of file versions files_pdfviewer#1270
• @lufer22
  • fix(caldav): Add default reminder to attendees of scheduling messages #48226
• @lwenderoth
  • Fix: Update ConvertType.php to read correct DB params #46908
• @madmas
  • add debug output and missing exception handlers to fix #459 activity#460 🔁
• @matthias480
  • fix(BackgroundJob): Add time leeway in start condition in TimedJob #50868
  • Fix/calendar reminders #50867
• @mayonnaisehypernova
  • add .HIF file support #49243
• @miaulalala
  • fix(caldav): explicitly check from component types #48131
  • fix(activity): allow string types for snowflake IDs #57655
• @mrvahedi68
  • Distinguish 'done' from 'configuring' in 2FA #39411
• @ncheng89
  • fix(preview): ffmpeg gets stuck when getting video cover #49684
• @nfebe
  • fix: Send password to owner when password sending fails, regardless of enforcement #50517
• @nickvergessen
  • chore: Add parameter type hints to parameters #48195
  • test(theming): Add unit test to check database query in theming backgroundjob #53778
  • perf: Log excessive memory usage on normal requests #49913
  • perf: Prepend the app as a whole #56559
  • PHP 8.4 external storages support #49151
• @onny
  • Send notification mail for circle invitation circles#1349 🔁
• @p1gp1g
  • Back/webpush notifications#2662 🔁
• @pboguslawski
  • Added parameter to disable web UI integration with local client #50280
• @pointhi
  • Allow non Same-Site Cookies set on first request #44574
• @printminion-co
  • feat(files_sharing): confirm share deletion #47063
• @provokateurin
  • fix(IURLGenerator): Allow markdown parenthesis in URL_REGEX_NO_MODIFIERS #49334
  • perf(UserMountCache): Start transaction earlier to prevent unnecessary queries #57117
  • feat(preview): Expire previews #55632
  • Fix handling of additional config files #49926
  • refactor: Migrate away from \OCP\IDBConnection::insertIfNotExist #57124
  • Add configs for strict PHP checks #56522
  • build: Add OpenAPI fuzzer script #54619
• @R0Wi
  • fix: restrict mime type list depending on check operator #50259
• @redblom
  • Block sharing with selected groups. #49897
• @remicollet
  • fix(argon2): respect max value for hashingThreads #45027
• @RonaldBarnes
  • Bash completion #35451
• @rotdrop
  • fix: permissions when copying from readonly storage #53726
  • Use $group->getDisplayName() instead of just the GID for the display ... circles#1297 ✅
• @schaarsc
  • feat(SystemTags) add option to only list tags not used by files #48582
• @Schnoop
  • Add rel attribute for fediverse link to make verification possible. #43364
• @SebastianKrupinski
  • fix(CalDAV): iTipBroker message generation and testing #50843
  • feat: use task processing to send emails #55968
  • feat: improve calendar migrator #57112
  • feat: allow dates before 1970 #57018
• @simonspa
  • Add maintenance:repair step for file size of unencrypted files #36220
• @skazi0
  • fix(files): Don't try to use missing cache entries #46840
• @skjnldsv
  • feat: provide etag recommendations#905 ⚠
  • fix: secondary owncloud custom group admin permissions not migrated circles#2176
  • fix: support multiple handlers viewer#2939 ⚠
  • fix(setup): hide config section if autoconfig is valid #56231
  • fix(systemtags): remove duplicates, cleanup existing tags #56079
  • Added parameter to disable web UI integration with local client #54191 🔁
• @smarinier
  • Allow LDAP search users with *term* #45555
• @solracsf
  • fix(Teams): Use string team IDs on teams iteration #57146
  • fix(files_versions): Return if version entity is not found #55024
  • feat(workflows): auto-lock closed issues and PRs older than X days #49033
  • feat(occ): Better handling of disabled or unreacheable App store #49697
  • refactor(encoding): Check if strings are valid ASCII #50526
  • fix(session): Update last_seen when user session is validated #50835
  • Make container view looks proportional on viewport activity#1700 🔁
  • feat(occ): print storage values human-friendly #48952
  • feat(updater): Allow to define locked apps to (not) be updated #55113
  • fix(PublicPreview): Call getMimetype() on File objects #56196
• @stellarpower
  • Add occ command for getting User ID(s) for a given email addr... #44334
  • Add occ command for checking the password for a given user ID. #44335
• @summersab
  • Clean up PHPDoc params and return values #40046
• @susnux
  • ci: add timeout for PHP setup #57598
  • feat: add setup check for request buffering on FPM #54912
  • refactor(account-management): Separate group views from internal views #51465
  • feat(theming): add option for reduce animation #55406
  • chore(files): add missing component import #57643
  • fix(files_sharing): make legacy downloadShare endpoint compatible with legacy behavior #56967
  • feat: Allow to show logs of all logging types by proxying messages logreader#1041 ⚠
  • fix(files): Add proper visual loading feedback for image preview #45431
• @SystemKeeper
  • feat: Show request time to the push proxy notifications#2721
• @szaimen
  • fix: log memory usage for requests based on configured memory limit #57590
  • fix: add properties files to htaccess rewrite condition #48692
• @taminob
  • Preserve symbolic links from sync clients #41321
• @tcitworld
  • Certificate manager fallback #42763
  • feat(contactsinteraction): allow users to disable contacts interaction addressbook #39372
  • feat(caldav): add repair steps in sabre calendarobject change hook #42347
  • fix(dav): fix event birthday alarms not being updated #39977
  • feat(dav): expose Nextcloud groups to Contact's system addressbook contacts #40997
  • Extract caldav sharing stuff from publishing stuff #34873
  • refactor(federatedfilesharing): remove use of IAppContainer in favor of ContainerInterface #56249
  • feat(http-client): add option to add instance URL to HTTP client user-agent #57376
  • fix(metadata): properly handle casting non-numeric values in search operations with custom metadata #55184
  • feat(dav): add custom classification levels for events in public calendars #53073
  • fix(account menu): avoid having duplicate IDs for account menu entries without href links #55330
  • fix(theme): fix looking for core template in themes #56094
• @theronakpatel
  • VerificationToken - Expiration time added in argument #42356
• @tobiasKaminsky
  • expose remoteId via share api #50870
• @tortuetorche
  • You can now add members to your own personal circles circles#395 ⚠
  • Add allow_adding_any_group_members option circles#398 ⚠
  • Better application registering and events dispatching circles#392 ⚠
  • Add group_backend option to mirroring the circle as a group circles#401 ⚠
  • Add allow_files_filtered_by_circles option circles#400 ⚠
  • Add allow_listed_circles option circles#399 ⚠
• @waazdakka
  • Update index.php to allow users to just copy paste the line on the co... updater#592 🔁
• @yrlchn
  • fix(lib):When performing a fresh installation, the version files under /core/Migrations/ cannot be loaded, resulting in the inability to install properly. #44997
• @zak39
  • feat(command): Print a success message with the add/remove use occ command #44392
• (generated)
  • chore(deps): bump qs from 6.14.2 to 6.15.2 circles#2276

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested