v32.0.13

Nextcloud 32.0.13

server

• Fix(sharing): Align userid config key in UserPlugin with Manager (server#58988)
• Fix: fix LazyUserFolder::getMountPoint (server#59653)
• Fix(files_sharing): Drop trailing '?' from public download redirect URL (server#59884)
• Occ commands for listing and refreshing mounts (server#59890)
• Quota wrapper fixes (server#60130)
• Fix(files): use displayname rather than basename to use progress (server#60623)
• Fix: use card interface instead of object (server#61250)
• Fix(files_sharing): Hide incompatible actions in shares (server#61436)
• Fix(files_sharing): remove filename's leading slash on unshare toast (server#61526)
• Perf: block more properties from using the custom properties backend (server#61542)
• Fix(settings): correct heading order in account management sidebar (server#61545)
• Fix: Make the IProvideUserSecretBackend usable (server#61548)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61569)
• Fix(user_status): stabilise the user_status (server#61618)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61643)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61667)
• Build(deps): Composer audit updates (server#61699)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61713)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61744)
• Fix: don't return cache entries with null paths (server#61836)
• Fix(Sharing): Don't break cache entry by setting path to null (server#61844)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61860)
• Fix(DeclarativeManager): Fix admin delegation (server#61874)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61890)
• Fix: hide scroll bar in unified search when not needed (server#61911)
• Fix(files): distinguish between files and folders for validation messages (server#61921)
• Feat: Disable callable serialization in sabre/xml (server#61926)
• Test: fix HEIC tests (server#61927)
• Feat: Fetch groups in batch in getUserGroups (server#61934)
• Fix(Storage): use `proxyexclude` parameter in DAV client (server#61967)
• Feat(login): clean remember me tokens (server#61970)
• Master] fix(security): Update code signing revocation list (server#62042)
• Master] fix(security): Update code signing revocation list (server#62048)
• Perf(workflow): Implement result cache for IP checks (server#62055)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62067)
• Fix(caldav): url-encode owner/user in activity event links (server#62073)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62101)
• Fix(UserPlugin): Don't return mail matches on user id search (server#62111)
• Fix(UserPlugin): Don't return disabled users on user ID and mail match (server#62117)
• Ci: migrate from buildjet to cache action (server#62123)
• Rate limiting for creating federated shares (server#62131)
• Fix(files): fix custom client-side error messages on move/copy actions (server#62133)
• Fix: Disable imagick preview providers (server#62149)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62152)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62158)
• Fix(preview): properly handle encoded content (server#62175)
• Fix(s3): trim multiple spaces to single space in original path header (server#62181)
• Master] fix(security): Update code signing revocation list (server#62186)
• Show group display name when the group object is not loaded yet (server#62194)
• Fix(cache): make clear() redis cluster compatible (server#62203)
• Revert group display name fix (server#62206)
• Fix(dav): release part-file lock when an upload fails (server#62214)
• Fix(CleanupLoginTokens): Specify the table (server#62411)
• Master] fix(security): Update CA certificate bundle (server#62440)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2500)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2514)

app_api

• Feat: add release relay gh workflow (app_api#922)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#932)

circles

• Fix: update stubs with provokateurin/php-stubs-updater (circles#2563)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2574)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2612)
• Chore(reuse): add missing BSD-3-Clause.txt license (circles#2613)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2638)

notifications

• Test: Push notification payload (notifications#3146)
• Feat: Show request time to the push proxy (notifications#3156)

privacy

• Chore: Add `update-stable-titles` workflow (privacy#1385)

text

• Fix(SessionService): sanitize displayName to utf8 encoding (text#8405)
• Fix(editorApi): use onMentionSearch callback if provided (text#8784)
• Fix(ImageView): use `a` element for clickable items (text#8841)
• Fix(links): scroll to anchor links directly (text#8868)
• Fix(share): detect if documentId is outside of share early (text#8882)

twofactor_totp

• Ci: update codecov action to v7 (twofactor_totp#1787)
• Ci: drop unused app publish workflow (twofactor_totp#1836)

viewer

• Chore: replace node.yml workflow with npm-build.yml (viewer#3280)