[stable33] 33.0.0 RC2 - #57899

Nextcloud 33

server

• [stable33] build(deps-dev): bump phpunit/phpunit from 11.5.44 to 11.5.48 in /vendor-bin/behat #57691
• [stable33] build(deps): bump phpunit/phpunit from 11.5.42 to 11.5.48 in /vendor-bin/phpunit #57692
• [stable33] build(deps-dev): bump rector/rector from 2.3.1 to 2.3.4 in /vendor-bin/rector #57693
• [stable33] build(deps-dev): bump @types/dockerode from 4.0.0 to 4.0.1 #57694
• [stable33] build(deps): bump vue from 3.5.26 to 3.5.27 #57697
• [stable33] build(deps): bump @nextcloud/vue from 9.3.1 to 9.4.0 #57701
• [stable33] build(deps-dev): bump sass from 1.97.2 to 1.97.3 #57704
• [stable33] build(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.7 #57709
• [stable33] build(deps): bump lodash from 4.17.21 to 4.17.23 in /build/frontend-legacy #57711
• [stable33] build(deps): bump @nextcloud/vue from 8.35.2 to 8.35.3 in /build/frontend-legacy #57713
• [stable33] build(deps): bump libphonenumber-js from 1.12.34 to 1.12.35 in /build/frontend-legacy #57716
• [stable33] build(deps): bump core-js from 3.47.0 to 3.48.0 in /build/frontend-legacy #57720
• [stable33] build(deps-dev): bump sass from 1.97.2 to 1.97.3 in /build/frontend-legacy #57721
• [stable33] build(deps): bump focus-trap from 7.6.6 to 7.8.0 in /build/frontend-legacy #57722
• [stable33] feat(files): render file list filters in top bar and allow to collapse into overflow menu #57751
• [stable33] fix: add since param for activity manager #57754
• [stable33] fix(cache): Fix parsing cache entry from groupfolder #57755
• [stable33] fix(openmetrics): Multiple exporters per app #57768
• [stable33] fix(caldav): Enhance UID check for base component #57771
• [stable33] build(deps-dev): bump the vitest group across 2 directories with 3 updates #57778
• [stable33] feat: allow to filter contacts by team #57783
• [stable33] Fix npm audit #57788
• [stable33] feat(openmetrics): add log level #57792
• [stable33] stable33: perf(normalization): Optimize path normalization #57796
• [stable33] fix(openmetrics): Allow openmetrics in info.xml #57799
• [stable33] fix(ocm): manage 4xx on ocm requests #57801
• [stable33] feat(mimetypes): Add mimetype aliases/mapping/names for .toml and .ovpn #57803
• [stable33] feat(flake): Add reuse cli #57808
• [stable33] fix(openmetrics): fix label names and add test for them #57809
• [stable33] fix(apps): Update info.xsd with changes in appstore repository #57813
• [stable33] fix(Propagator): rollback transaction if it fails #57814
• [stable33] chore: remove X from social links #57819
• [stable33] fix: improve share mount conflict resolution logic #57822
• [stable33] fix(search): All elements are included regardless of their keys #57825
• [stable33] chore(img): Update mobile app store badges #57827
• [stable33] fix(composer): Set overwrite.cli.url in serve script #57832
• [stable33] fix: don't try to setup for a user when setting up / #57834
• [stable33] Calendar: Fix typos in import/export #57836
• [stable33] fix(openmetrics): remove superfluous empty lines #57845
• [stable33] fix(files): do not reset active tab when re-opening #57849
• [stable33] ci(actions): Satisfy zizmor #57852
• [stable33] Add repair step for share targets with excess (2) #57858
• [stable33] refactor(systemtags): migrate to Vue 3 and script setup #57865
• [stable33] test(preview): properly test postscript preview provider #57868
• [stable33] fix(user_ldap): Fix crash in some code path when a DN is longer that 64 #57870
• [stable33] Add InstallationCompletedEvent for post-installation actions #57871
• [stable33] fix: don't do full setup in setupForProvider if all requested providers are authoritative #57872
• [stable33] fix(files): use correct API for action displayName in batch actions #57880
• [stable33] fix: Add support for AscDesktopEditor browser user agent #57884
• [stable33] fix(core): adjust faulty migration version number #57887
• [stable33] On demand preview migration #57889
• [stable33] fix: log memory usage for requests based on configured memory limit #57897
• [stable33] perf(UserMountCache): Invert condition so that we avoid some SQL queries #57900
• [stable33] feat(external-storage): Implement IPartialMountPoint #57901
• [stable33] perf(MountManager): use binary search to find mount in path #57907
• [stable33] feat: optimize user mount cache #57912
• [stable33] [33] still setup for user when setting up root path with children #57913

app_api

• chore(CI): Adjust testing matrix for Nextcloud 34 on stable33 app_api#757
• [stable33] fix(HaRP-AIO): FRP should be always disabled for the HaRP AIO template app_api#761
• [stable33] fix CI after branch off app_api#762

bruteforcesettings

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 bruteforcesettings#932
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.7 bruteforcesettings#940
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#945

circles

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 circles#2313
• [stable33] allow admins to edit circle details circles#2314

firstrunwizard

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0-rc.7 firstrunwizard#1861
• Chore(deps): Bump vue from 3.5.22 to 3.5.27 firstrunwizard#1862
• Chore(deps-dev): Bump @nextcloud/event-bus from 3.3.2 to 3.3.3 firstrunwizard#1864
• Chore(deps-dev): Bump @nextcloud/vite-config from 2.5.0 to 2.5.2 firstrunwizard#1866
• [stable33] Update nextcloud/ocp dependency firstrunwizard#1870
• [stable33] Fix npm audit firstrunwizard#1871
• [stable33] fix: use correct prop to pass server URL firstrunwizard#1876
• Chore(deps-dev): Bump vite from 7.1.12 to 7.3.1 firstrunwizard#1877
• Chore(deps-dev): Bump sass from 1.96.0 to 1.97.3 firstrunwizard#1878
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.0 firstrunwizard#1879
• [stable33] fix: only run composer bin scripts in dev mode firstrunwizard#1881
• [stable33] fix: handle disabled auto-play in other browsers than Firefox firstrunwizard#1883

logreader

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 logreader#1884
• [stable33] Update nextcloud/ocp dependency logreader#1891

nextcloud_announcements

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 nextcloud_announcements#567
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#572

notifications

• [stable33] chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 notifications#2742
• [stable33] build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.7 notifications#2744
• [stable33] build(deps): Bump vue from 3.5.26 to 3.5.27 notifications#2746
• [stable33] Update nextcloud/ocp dependency notifications#2753

photos

• [stable33] chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 photos#3377

related_resources

• chore(deps-dev): bump @nextcloud/babel-config from 1.2.0 to 1.3.0 related_resources#826
• chore(deps): bump @nextcloud/axios from 2.5.1 to 2.5.2 related_resources#827
• chore(deps-dev): bump @nextcloud/webpack-vue-config from 6.3.0 to 6.3.2 related_resources#829
• chore(deps-dev): bump @nextcloud/browserslist-config from 3.0.1 to 3.1.2 related_resources#830

serverinfo

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 serverinfo#934
• [stable33] Update nextcloud/ocp dependency serverinfo#936

text

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 text#8180
• [stable33] Fix editor container height and document status style on mobile text#8182
• [stable33] ci(actions): Satisfy zizmor text#8201
• [stable33] perf: Decrease amount of filecache SQL call text#8206
• [stable33] chore(deps-dev): bump phpunit/phpunit from 9.6.29 to 9.6.33 text#8207
• [stable33] fix(test): fix reloadFileList cypress command text#8208
• [stable33] Revert "perf: Decrease amount of filecache SQL call" text#8211
• [stable33] fix(ci): needs.input.outputs.head_ref not defined text#8212

twofactor_nextcloud_notification

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 twofactor_nextcloud_notification#1171
• build(deps): bump vue from 3.5.24 to 3.5.27 twofactor_nextcloud_notification#1178

Pending PRs:

• @a-bran
  • [Fix] Abort Streamer-processing when user-connection aborted #42352
• @abhinavohri
  • feat(sharebymail): Use initiator's email as sender if mail providers enabled #57080
• @Abijeet
  • Add feature to view admin_audit log files logreader#476 ⚠
• @AIlkiv
  • feature(files): add support for viewing public links in widget #52478
• @arc64
  • fix(settings): show active forced locale or language instead of 'No locale set' (#41543) #53364
• @ArtificialOwl
  • update single display-name circles#1394 ⚠
  • +runAsSuperSession circles#980
  • share with group members only circles#891 ⚠
  • fix(lexicon): using userconfig on value set in lexicon #56670
  • runAsAdmin() circles#1217 ⚠
  • shorten id on occ circles#1148 ⚠
  • ConfigLexicon to update lazy status #52671 ✅
  • cleaning and fixing circles#1090 ⚠
  • feat(lexicon): validate value on set #57828
  • fix(sharing): ignore inexisting memberships during reshare check #52217
  • enable multiple table/fields comparaison when using queryHelper circles#1089 ⚠
  • emulate entity on Admin OCS API circles#1214 🔁
• @artonge
  • fix(Scanner): Use time based limit for the transaction #56290
  • feat: Implement custom Updater for object store storage #53423
• @miaulalala
  • [stable33] test: fix cypress file frontend test activity#2341 ✅
• @oleksandr-nc
  • [stable33] feat(HaRP): automatically register HaRP when it is installed app_api#768
• @CarlSchwan
  • [stable33] fix(oracle): Use function builder to create sum and count SQL function suspicious_login#1068 ✅
• @icewind1991
  • [stable33] feat: perform share mount validation on share instead of on mount #57727
• @biredel
  • fix(files_sharing): rate limit share creation 40 times per 10 minutes #57666
• @blizzz
  • fix(LDAP): unblock a cached id from a deleted user or group #56292
  • turn LDAP's treat remnants as disabled feature config-independent #46992
  • fix(Files): use prepare statement for path_hash in propagator #49469
• @bromiesTM
  • Add Tests for files UserConfig service #50050
• @byt3sage
  • fix(oauth): instance name encoding on oauth app in admin #49804
• @CarlSchwan
  • refactor(trash): Port deletion code of Trashbin to node based API #54278
  • Run rector on lib/private #56496
• @Cybso
  • #41935 smtp: allow self-signed certificates on localhost #46957
• @danxuliu
  • fix: Fix handling of deleting share from self activity#2319
  • Add integration tests for renaming a share by a user with stale shares #50229
  • Do not load PDF viewer if public share has a download limit files_pdfviewer#654 ⚠
• @djon2003
  • Ensure no description changes are lost #41370
• @dpschen
  • fix(settings): hide up-to-date message during load #45030 ✅
• @edward-ly
  • chore: adjust code owner files for app maintainers #50959
• @FedericoHeichou
  • Reducing queries in ScanFiles.php #40019
• @fgsl
  • Enable audit by configuration #163 circles#226 ⚠
  • New circles are treated as an "all user" activity - but no option for this being on/off #204 circles#229 ⚠
• @fitrahmunir
  • feat(UserMenu): add target property to usermenu component #41659
• @GVodyanov
  • fix(Dav): make absenceform textarea not overlap #56055
• @haffmans
  • Fix: Match token login name by UID or e-mail address #50254
• @hardviper
  • feat(oauth2): simple userinfo endpoint #43684
• @haslersn
  • Revert "Do not do redirect handling when loggin out" #40407
• @icewind1991
  • Log app version #53736 ✅
  • fix: give target file all permissions on copy #53733
  • fix: pass parent id to correctParentStorageMtime when known #53464
  • feat: move file cache from view to node api #52000
  • Authoritative setup improvements #57578
  • fix: handle shares for which the source is deleted when checking if rename target is shared #52098
  • fix: allow renaming files with just update permissions #57374
  • debug: throw a proper error when directory content has a null path #56291
  • fix: remove use of depricated insertIfNotExist from Files\Cache\Storage #43851
• @iLinaza
  • fix(usergroups): clear cached user groups on pre hooks #45036
• @JanisPlayer
  • Add AVIF Thumbnail Generation #40048
• @jlehtoranta
  • fix(2fa): Handle twofactor_enforced configuration parameter as boolean #44090
• @jmechnich
  • fix: make trusted_domains and overwrite.cli.url sensitive config values #45085
• @Joly0
  • [stable32] Allow PDF Forms calculations files_pdfviewer#1326
• @joshtrichards
  • docs(api): clarify getNumericStorageId return value in IMountPoint interface #57110
  • test(TestCase): '.ocdata' -> '.ncdata' in knownEntries #56920
  • refactor(setup): improve htaccess update handling and code clarity #56857
  • chore(files): drop unused list.php #57333
  • refactor(core): enhance BeforeMessageLoggedEventListener robustness and clarity #57281
  • chore: remove always_populate_raw_post_data #53583 ✅
  • refactor(auth): Use $request->getCookie() instead of $_COOKIE #57287
  • feat(core): add support for NoTwoFactorRequired attribute in TwoFactorMiddleware #57301
  • fix(HttpClient): let local curl set encoding based what it is built with #53605
  • chore(Log): remove unused getEntries method #53682
  • feat(setupChecks): Enhance output for SecurityHeaders #55641
  • fix(setup): normalize canonical webroot consistently #56853
  • fix(db): make sure PgSqlTools filter only accepts actual matches #56173
  • fix(auth): remove legacy session credential fallbacks and improve code clarity #55722
  • fix: avoid outer "uncaught exception" for ServerMaintenanceMode #55969
  • fix(preview/bundled): copy content not resource id and improve error handling #56068
  • test(Session): Fix CryptoWrappingTest to verify real session wrapping logic + expand tests #57794
  • fix(Comments): sort by id (not type+id) in getMentions #56162
  • docs: add grapheme note to shortenMultibyteString function #56169
  • fix(db): make sure getTables filter only accepts matches #56174
  • feat(app): allow removing installed-but-disabled apps; improve help & logging #56720
  • test(User): register Backend+DB users for proper cleanup #57438
  • fix(auth): Correct max password length in config.sample.php #54091 🔁
  • fix(storage/local): stop deleting prior to forbidden items check #57421
  • feat(settings): Check for unused data directory #53980
  • fix(settings): Change "setup warnings" -> "setup checks" in Overview [redo] #53717
  • fix(setup-check): clarify server connectivity help text and improve trait docblocks #55640
  • fix(DAV): Clean-up remote + handle application/xml properly #53703
  • docs: Add README for core/shipped apps #57306
  • feat: Run setup checks by category or class #49978
  • fix(mail): Log hint when mail_from_address may be wrong #46040
  • fix: Add NoTwoFactorRequired attribute to poll method twofactor_nextcloud_notification#1151
  • refactor(installer): reduce deep nesting in installShippedApps() #57307
  • fix(apps): Remove jobs when an app gets disabled #50707
  • fix(DnsPinMiddleware): Don't log misleading port value / log request port instead #50583
  • fix(Security): Don't attempt empty secret fallback on >=v3 ciphertext #46176
  • fix(settings): Don't permit duplicate groups in occ admin-delegation:add #46617
  • fix(SetupChecks): Validate URL before parsing #49379
  • fix(files): files:scan error ouput when user_id is not found + return correct exit status on error #49412
  • fix: detect inadvertent overlapping config files that break things #49956
  • meta(ISSUE_TEMPLATE): Search both open and closed issues #44322
  • fix(files_external): Drop deprecated BinaryFinder for smbclient #46516
  • fix(SetupChecks): Add reasoning/clarity to outdated PHP check #45261
• @jplitza
  • fix(files_external): ignore unsatisfied optional dependencies #54048
• @jpsn123
  • movie preview bug fix, in some case stream reading functions may block indefinitely #43226
• @julien-nc
  • Do not declare the id column type in the oauth2 app #57446
• @juliusknorr
  • feat: Add office switcher with feature comparison #57555
• @kesselb
  • fix: use insert ignore for filecache_extended #48564
• @killianeletellier
  • Sort events by descending date #46549
• @klondi
  • Fix sharing and around three errors related to Undefined array key "CLOUD" #40208
• @Koc
  • feat: Store user which has downloaded file in activity feed #46305
• @kra-mo
  • fix(l10n): Nicer capitalization for generic messages #56283
• @LakshayaTohan
  • Add feature to view admin_audit log files logreader#857 ⚠
• @leftybournes
  • refactor(provisioning_api): check user membership if non-admin #55459
• @LexioJ
  • feat: Support URL extraction from markdown link syntax #55850
• @lobermann
  • Fix viewing of file versions files_pdfviewer#1270
• @lufer22
  • fix(caldav): Add default reminder to attendees of scheduling messages #48226
• @lwenderoth
  • Fix: Update ConvertType.php to read correct DB params #46908
• @madmas
  • add debug output and missing exception handlers to fix #459 activity#460 🔁
• @matthias480
  • Fix/calendar reminders #50867
  • fix(BackgroundJob): Add time leeway in start condition in TimedJob #50868
• @mayonnaisehypernova
  • add .HIF file support #49243
• @miaulalala
  • fix(caldav): explicitly check from component types #48131
• @mrvahedi68
  • Distinguish 'done' from 'configuring' in 2FA #39411
• @ncheng89
  • fix(preview): ffmpeg gets stuck when getting video cover #49684
• @nfebe
  • fix: Send password to owner when password sending fails, regardless of enforcement #50517
• @nickvergessen
  • chore: Add parameter type hints to parameters #48195
  • perf: Prepend the app as a whole #56559
  • perf: Log excessive memory usage on normal requests #49913
  • PHP 8.4 external storages support #49151
  • test(theming): Add unit test to check database query in theming backgroundjob #53778
• @onny
  • Send notification mail for circle invitation circles#1349 🔁
• @p1gp1g
  • Back/webpush notifications#2662 🔁
• @pboguslawski
  • Added parameter to disable web UI integration with local client #50280
• @pointhi
  • Allow non Same-Site Cookies set on first request #44574
• @printminion-co
  • feat(files_sharing): confirm share deletion #47063
• @provokateurin
  • perf(UserMountCache): Start transaction earlier to prevent unnecessary queries #57117
  • fix(IURLGenerator): Allow markdown parenthesis in URL_REGEX_NO_MODIFIERS #49334
  • refactor: Migrate away from \OCP\IDBConnection::insertIfNotExist #57124
  • feat(preview): Expire previews #55632
  • Fix handling of additional config files #49926
  • build: Add OpenAPI fuzzer script #54619
• @R0Wi
  • fix: restrict mime type list depending on check operator #50259
• @redblom
  • Block sharing with selected groups. #49897
• @remicollet
  • fix(argon2): respect max value for hashingThreads #45027
• @RonaldBarnes
  • Bash completion #35451
• @rotdrop
  • fix: permissions when copying from readonly storage #53726
  • Use $group->getDisplayName() instead of just the GID for the display ... circles#1297 ✅
• @schaarsc
  • feat(SystemTags) add option to only list tags not used by files #48582
• @Schnoop
  • Add rel attribute for fediverse link to make verification possible. #43364
• @SebastianKrupinski
  • feat: allow dates before 1970 #57018
  • feat: use task processing to send emails #55968
  • feat: improve calendar migrator #57112
  • fix(CalDAV): iTipBroker message generation and testing #50843
• @simonspa
  • Add maintenance:repair step for file size of unencrypted files #36220
• @skazi0
  • fix(files): Don't try to use missing cache entries #46840
• @skjnldsv
  • fix: secondary owncloud custom group admin permissions not migrated circles#2176
  • feat: provide etag recommendations#905 ⚠
  • fix: support multiple handlers viewer#2939 ⚠
  • fix(setup): hide config section if autoconfig is valid #56231
  • fix(systemtags): remove duplicates, cleanup existing tags #56079
  • Added parameter to disable web UI integration with local client #54191 🔁
• @smarinier
  • Allow LDAP search users with *term* #45555
• @solracsf
  • fix(Teams): Use string team IDs on teams iteration #57146
  • feat(occ): print storage values human-friendly #48952
  • feat(occ): Better handling of disabled or unreacheable App store #49697
  • refactor(encoding): Check if strings are valid ASCII #50526
  • fix(session): Update last_seen when user session is validated #50835
  • fix(files_versions): Return if version entity is not found #55024
  • Make container view looks proportional on viewport activity#1700 🔁
  • feat(updater): Allow to define locked apps to (not) be updated #55113
  • fix(search): Better emptyContentMessage logic #57680
  • fix(PublicPreview): Call getMimetype() on File objects #56196
  • feat(workflows): auto-lock closed issues and PRs older than X days #49033
• @stellarpower
  • Add occ command for checking the password for a given user ID. #44335
  • Add occ command for getting User ID(s) for a given email addr... #44334
• @summersab
  • Clean up PHPDoc params and return values #40046
• @susnux
  • fix(files): Add proper visual loading feedback for image preview #45431
  • feat: add setup check for request buffering on FPM #54912
  • feat(theming): add option for reduce animation #55406
  • feat: Allow to show logs of all logging types by proxying messages logreader#1041 ⚠
  • refactor(account-management): Separate group views from internal views #51465
  • fix(files_sharing): make legacy downloadShare endpoint compatible with legacy behavior #56967
• @SystemKeeper
  • feat: Show request time to the push proxy notifications#2721
• @szaimen
  • fix: add properties files to htaccess rewrite condition #48692
• @taminob
  • Preserve symbolic links from sync clients #41321
• @tcitworld
  • Extract caldav sharing stuff from publishing stuff #34873
  • feat(dav): add custom classification levels for events in public calendars #53073
  • feat(contactsinteraction): allow users to disable contacts interaction addressbook #39372
  • fix(dav): fix event birthday alarms not being updated #39977
  • feat(http-client): add option to add instance URL to HTTP client user-agent #57376
  • refactor(federatedfilesharing): remove use of IAppContainer in favor of ContainerInterface #56249
  • feat(dav): expose Nextcloud groups to Contact's system addressbook contacts #40997
  • feat(caldav): add repair steps in sabre calendarobject change hook #42347
  • fix(theme): fix looking for core template in themes #56094
  • Certificate manager fallback #42763
  • fix(account menu): avoid having duplicate IDs for account menu entries without href links #55330
  • fix(metadata): properly handle casting non-numeric values in search operations with custom metadata #55184
• @theronakpatel
  • VerificationToken - Expiration time added in argument #42356
• @tobiasKaminsky
  • expose remoteId via share api #50870
• @tortuetorche
  • Add group_backend option to mirroring the circle as a group circles#401 ⚠
  • Add allow_files_filtered_by_circles option circles#400 ⚠
  • Add allow_listed_circles option circles#399 ⚠
  • Add allow_adding_any_group_members option circles#398 ⚠
  • You can now add members to your own personal circles circles#395 ⚠
  • Better application registering and events dispatching circles#392 ⚠
• @waazdakka
  • Update index.php to allow users to just copy paste the line on the co... updater#592 🔁
• @yrlchn
  • fix(lib):When performing a fresh installation, the version files under /core/Migrations/ cannot be loaded, resulting in the inability to install properly. #44997
• @zak39
  • feat(command): Print a success message with the add/remove use occ command #44392
• (generated)
  • chore(deps): bump qs from 6.14.2 to 6.15.2 circles#2276
  • [stable33] 33.0.0 RC2 #57899

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested