Nextcloud Native nightly-20260904-0632-run1699-e66d557f

Nextcloud Native nightly-20260904-0632-run1699-e66d557f

Quick downloads

Choose the installer for your platform. Read the known limitations below before installing this early test release.

Platform	Direct download
Android	APK
Linux	DEB / RPM
Windows	MSI (x86-64)
macOS preview	DMG (Intel)

Checksums and all release assets

This is an automated prerelease built from the exact main revision that passed the repository's build and test workflow. Nightlies are intended for testing and may include unfinished behavior. Keep a backup of important data.

Current development highlights

These curated notes cover the current unreleased development cycle. They are cumulative and are not limited to changes since the previous nightly.

Features

• [Android, Desktop] Adaptive app workspaces now provide native Chores navigation and write workflows, reusable roster presentation, labeled form choices, and smoother drag reordering across phone and desktop layouts (PR #363).
• [Android] Android share sheets can now stage files safely, choose a writable Nextcloud folder, resume large uploads in chunks, preserve recovery across restarts, and avoid overwriting existing names (issue #384).
• [Android] Android users can now review and explicitly trust one exact self-signed server certificate for one Nextcloud address, see its SHA-256 fingerprint and validity, and revoke that trust from Settings (issue #344, PR #396).
• [Android, Desktop] Dashboard, activity, and search links for the current Nextcloud account now open native files, folders, and app surfaces, while Android can receive explicit Nextcloud Native deep links from other apps (issue #183, PR #370).
• [Android, Desktop] Follow private support report statuses and messages in the app, receive an unread update indicator, and reply to Obiente Support without sharing the report capability (issue #351, PR #404).
• [Android, Desktop] Improve native collection creation, Contacts and Dashboard loading, and Office with native document selection, document-only Android editing, separate preview/edit actions, and server-advertised file types (PR #425).
• [Android] Large remote files can now open in or send a copy to another Android app through a seekable, version-pinned stream without first loading the whole file into memory (issue #368, PR #385).
• [Android, Desktop, Website] Nextcloud Native gains adaptive navigation, clearer File Sync and Calendar workspaces, shared controls, protected in-place editing, and desktop image zoom. The website improves layout, themed imagery and documentation navigation (PR #426).
• [Android, Linux, macOS, Website, Windows] Release notes, the README, and the website now provide clear per-platform downloads, stable Latest and Nightly URLs, and a live GitHub star link with a resilient fallback (PR #349).
• [Android, Desktop] Send a reviewed, privacy-filtered diagnostic report directly to Obiente Support while retaining the option to save a local copy (issue #351).
• [Android, Desktop] Servers reached over plain HTTP can now be connected only after a prominent warning and explicit consent, for trusted local-network or VPN deployments without TLS (PR #397).
• [Android, Desktop] Settings now has focused navigation on Android and desktop. Support separates requests, new reports, and privacy, and preserves reply recovery across restarts with explicit acknowledgement for uncertain delivery (PR #412).

Fixes

• [Android, Desktop] Adaptive app discovery now reports the current cache, server catalog, app definition, version verification, package acquisition, and workspace preparation phase instead of showing one indefinite loading message (issue #41).
• [Android, Desktop] Allow native Office previews and restored document selections as soon as the folder refresh completes, without waiting for slow editor discovery (PR #425).
• [Android] Android document rename, move, and delete actions now preserve edits retained for restart recovery instead of stranding them at an obsolete remote path (PR #435).
• [Android] Android folder sync now applies the selected device copy with a revision-guarded upload that works across supported Nextcloud servers (issue #115, PR #410).
• [Android] Android folder sync now waits for its normal periodic schedule after persisted item failures and bounds immediate retries when an entire background run fails (issue #126).
• [Android] Android now honors certificate authorities that the device owner explicitly installed, matching the trust used by the system browser for private Nextcloud servers (issue #360, PR #395).
• [Desktop] Choosing the device copy for a file conflict now publishes it with a revision-guarded WebDAV upload instead of depending on a server-specific staged MOVE replacement (issue #378).
• [Android, Desktop] Contacts now load large address books in bounded batches instead of failing when one server response exceeds the size limit (issue #416, PR #418).
• [Android, Linux, Windows] Desktop folder sync now rejects local selections over 100,000 entries before hashing and stops automatic retries after five failures. Support reports add bounded runtime memory, thread, GC, uptime, and diagnostic-history measurements (PR #413).
• [Linux] Direct Linux updates now use DNF for RPM packages and APT for DEB packages through normal system authorization instead of relying on a failing PackageKit transaction (issue #379, PR #408).
• [Android, Desktop] Dynamic Mail workspaces now provide mailbox search, continue loading messages as the mailbox is scrolled, and keep paging failures visible and retryable on phone and desktop layouts (issue #54).
• [Android, Desktop] Finish cancelling a private support report only after Obiente Support confirms that its upload key is terminally cancelled (issue #351, PR #386).
• [Android, Desktop] Fixed global file searches failing against Nextcloud servers that reject arbitrary wildcard MIME-type predicates (issue #331, PR #399).
• [Android, Desktop] Folder sync now verifies identical same-path files before raising conflicts, keeps unrelated mappings usable while work runs, and supports guarded batch conflict decisions with details for both copies (issue #373).
• [Linux] Initialize Compose desktop display scaling before Linux bootstrap work can enter Swing or AWT (PR #411).
• [Android, Desktop] Keep Android DocumentsProvider and desktop folder-sync credentials inside the configured Nextcloud account origin and base path. Follow only bounded, method-preserving DAV redirects whose targets pass the same account checks (issue #106, PR #428).
• [Android, Linux, Windows] Keep Home available when the optional Dashboard or widgets route is unavailable. Anonymized diagnostics distinguish missing HTTP and OCS routes from malformed data and other failures without recording response content or server URLs (issue #364).
• [Android, Desktop] Keep Office previews usable when editor discovery fails, clear task selection after its own list refreshes, distinguish duplicate menu announcements, and reject foreign API contracts that would target Nextcloud incorrectly (PR #425).
• [Desktop] Keep a conflict choice when its selected source receives a newer version, stop safely when the destination changes, and show the file type, size, and modification time for both copies (issue #378).
• [Android, Desktop] Keep browser sign-in active through temporary DNS failures, wait for Android network recovery before retrying, and allow anonymized login diagnostics to be exported before an account is connected (issue #348, PR #350).
• [Android, Desktop] Keep browser sign-in working through reverse proxies that require the entered server's explicit index.php Login Flow endpoint. Reject server addresses whose URL components would change the request (issue #405, PR #428).
• [Android, Desktop] Keep credentials for file exports and attachment downloads inside the configured Nextcloud account, including when the server redirects the download (issue #106, PR #432).
• [Desktop] Keep desktop chunk uploads inside the configured Nextcloud account when a server redirects DAV traffic. Preserve upload recovery when a mutation response is lost (issue #106, PR #428).
• [Android, Desktop] Keep direct update checks compatible with installed clients on Android, Linux, and Windows (issue #269, PR #407).
• [Android, Desktop] Keep healthy contacts visible when another contact disappears during a batch refresh, and prevent command verbs hidden inside operation names from becoming automatic read navigation (PR #425).
• [Android, Desktop] Keep long task details scrollable, allow edits and deletes for extensionless DAV objects, withhold command-like GET routes from automatic navigation, and preserve the declared scheme and port of host-templated API contracts (PR #425).
• [Android, Desktop] Keep private reply drafts out of saved UI state and prevent automatic replay of support message requests (issue #351).
• [Android] Keep queued background uploads intact when their encrypted recovery data cannot be decoded, instead of replacing the queue during a later update (PR #440).
• [Android, Desktop] Keep recurring task masters and exceptions separately selectable, and reject malformed recurrence IDs before they can break Android state restoration (PR #425).
• [Linux, Windows] Keep the complete Home overview scrollable within the desktop window (PR #392).
• [Android] Keep the last valid offline copy when older removal or download workers finish after the pin or refresh state changed (issue #116, PR #427).
• [Android] Keep the last valid offline generation when an older download finishes after a newer refresh supersedes it (issue #116, PR #427).
• [Website] Keep the repository star count current without a rebuild through a cached same-origin refresh, while retaining a validated bundled count during GitHub outages (issue #369, PR #371).
• [Android, Desktop] Large folder-sync uploads now use Nextcloud chunking v2 on Android and desktop, persist exact-generation progress after every accepted chunk, and safely resume after an interrupted client process without skipping file bytes (issue #113, PR #423).
• [Desktop] Let an explicitly launched Linux Nightly replace a stale background service from a development build so in-app updates use the installed release identity (PR #388).
• [Android, Linux, Windows] Let each account pin and unpin installed apps for Home shortcuts and desktop navigation (issue #183).
• [Linux] Linux DEB packages now install on Debian 12 and Debian 13 by accepting the library package names available on either release (issue #417, PR #419).
• [Desktop, Linux] Linux packages now install the Secret Service command-line tools required to store account credentials, and sign-in shows an actionable retryable error when secure storage is unavailable (issue #337, PR #362).
• [Desktop, Linux] Linux sign-in now falls back to the system URL opener when Java cannot browse. Failed handoffs remain retryable and appear in pre-login anonymized diagnostics without recording the login URL (issue #356, PR #357).
• [Android, Desktop] Load Dashboard widgets through the API version advertised by the server, keep other Home sections usable when one feed fails, and show the server's native empty-state guidance (issue #352, PR #353).
• [Android, Desktop] Mail now opens the preferred Inbox message collection directly, treats mailbox statistics as count enrichment instead of navigation, and opens the verified message body when a message is selected (issue #54).
• [Android, Desktop] Preserve unreadable Android Deck card drafts until explicit discard, and expose recovery controls for Desktop drafts retained during keyring failures (PR #442).
• [Android, Desktop] Recheck document identity and write permission before Office editing, handle invalid editor tokens safely, honor declared API versions, and keep task recovery locked while a request is in flight (PR #425).
• [Android, Desktop] Reject ambiguous task identities, keep command-like GETs out of child navigation, and withhold dynamic writes whose API routing or composed schema constraints cannot be verified (PR #425).
• [Android, Desktop] Reject oversized draft edits with a visible error, preserve task-description whitespace, reject unsafe task IDs, and stop Contacts and Tasks from multiplying requests after temporary server failures (PR #425).
• [Android, Desktop] Restore the Office folder and document selection safely after recreation, isolate its capability cache with account digests, preserve valid Notes ETags, and reject conflicting empty API server overrides (PR #425).
• [Android, Desktop] Show only update changes for the current platform and install only the release details that were just confirmed (issue #269).
• [macOS] Store desktop login credentials and Deck draft keys in macOS Keychain, migrate Secret Service values, and keep locked access and sign-out cleanup retryable. Preserve encrypted Deck drafts instead of replacing a missing key (issue #335, PR #430).
• [Android, Desktop] Streaming file sync, offline copies, uploads, Android share-sheet imports, virtual files, external handoffs, historical exports, and desktop audio playback no longer reject files at arbitrary application size limits (issue #373, PR #422).
• [Desktop] Superseded resumable uploads now retain durable size, content hash, and publication state during cleanup, so an ambiguous server result cannot mistake an already published directory replacement for an abandoned stage (issue #113, PR #431).
• [Android, Desktop] Use crash-safe recovery for collection header creates, preserve task selections after failed property reads, and prevent deleting sibling calendar components with a task (PR #425).
• [Website] Website pages now keep HTTPS redirects intact, load compressed assets, expose one clear document heading, and keep the internal visual QA catalog out of search results (issue #230).
• [Windows] Windows Cloud Files now keeps a failed automatic activation visible until the user retries instead of repeatedly inspecting the same damaged provider root (issue #333, PR #409).
• [Windows] Windows filesync can now recover a corrupt branded root when Windows returns the same registered path with different equivalent formatting (issue #341, PR #346).

Windows installation

The Windows MSI is currently unsigned. Windows may show a Microsoft Defender SmartScreen warning. After confirming that the download came from this release, choose More info > Run anyway to continue. Managed devices may block unsigned installers.

Verify build provenance with gh attestation verify <downloaded-msi> --repo Obiente/nc-native and compare the file with SHA256SUMS when it is available.

macOS limitations

The Intel DMG is an early packaging preview. Native Keychain credential storage is not implemented, so this package cannot be used to sign in to a Nextcloud account. It also has no direct update path; install a newer DMG manually when one is published.

Updating

Direct Android APK, Linux package, and Windows MSI installs can check the Nightly channel from Settings > App updates. Updates are never downloaded or installed silently. Store-managed installations continue to update through their store.

Build identity

• Source: e66d557f
• Tested by: Build and test workflow
• Update channel: Nightly
• Integrity: verify downloaded assets with SHA256SUMS when it is available