v33.0.11

Nextcloud 33.0.11

server

• Use strict comparaison (server#64326)
• Fix(files_sharing): name the parent folder in inherited unshare actions (server#64351)
• Test: enable filecache partitioning for one mysql test (server#65130)
• Fix(backupcodes): Dismiss notification on disabled provider (server#65316)
• Fix(admin-audit): Log when BFP was bypassed (server#65329)
• Fix(files_sharing): preserve share expiration time (server#65405)
• Chore: Add `testing:prepare-ci` command (server#65419)
• Chore: Skip transaction when no preview exists (server#65447)
• Fix(encryption): use the block size of the file encoding when fixing sizes (server#65458)
• Perf: Partition preview migration job (server#65466)
• Perf(preview): only autorotate with Imaginary when needed (server#65487)
• Fix(migration): check if deleted_by column exists before trying to add it to files_trash table (server#65516)
• Fix(dav): adjust password session check on legacy dav auth (server#65539)
• Fix(files_sharing): show the owner avatar for received shares (server#65559)
• Fix(files): normalize Unicode in node paths (server#65564)
• Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65570)
• Fix(dav): resolve users before intersecting shares (server#65582)
• Fix(chunkingUpload): sliding expiration based on upload activity (server#65655)
•  chore: Update setup-php to 2.40.0 (server#65665)
• Fix: Playwright concurrency (server#65671)
• Fix: don't try to load keys for empty path for groupfolder versions (server#65674)
• Fix(ui): Consider typing and scrolling as activity for auto logout (server#65689)
• Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65693)
• Fix(encryption): Remember the recalculated unencrypted size as int (server#65699)
• Fix: Remove auto increment migration on share_external (server#65709)
• Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65732)
• Fix(ci): clone vendored test apps from the matching stable branch (server#65873)
• Fix(files): skip quota check when opening files for reading (server#65878)
• Chore: flake update (server#65906)
• Fix(files_sharing): public share popover jumps on options toggle (server#65911)
• Fix(security): Update CA certificate bundle (server#65917)
• Fix: move/rename of part file in masked dir/storage (server#65932)
• Fix(provisioning_api): filter users by enabled state on the server (server#65946)
• Ci: sync workflows with .github (server#65964)
• Fix(kerberos): Allow again to specify empty url (server#65980)
• Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65992)
• Fix(dav): detect truncated CardDAV sync results on all databases (server#66010)
• Fix(versions): empty array for external shares (server#66027)
• Build(deps): bump the symfony group across 1 directory with 9 updates (server#66032)
• Fix(dav): align public request path handling (server#66040)
• Fix: unique custom tokens for share links (server#66042)
• Build(deps): Bump Symfony packages (server#66135)
• Fix: properly handle webdav pagination headers (server#66154)
• Fix(external-share): move ExternalShareScanJob creation deeper (server#66159)
• Fix: improve live-photo handling (server#66188)
• Fix(CalDAV): extract data from occurance exemptions (server#66192)
• Fix(user_ldap): Fix variable name conflict for cache key (server#66198)
• Fix(dav): bind public share session authentication to the password hash (server#66202)
• Fix(user_ldap): do not cache unknown names in the local mapping cache (server#66207)
• Ci: drop cat of Imagick policy (server#66222)
• Fix(systemtags): properly handle object ids (server#66227)
• Fix(favorite): Limit tagging to favorite (server#66231)
• Fix(dav): do not grant write-properties to read-only calendar delegates (server#66235)
• Fix: Reject login with NUL bytes rather than converting (server#66240)
• Fix: BearerAuth should not check for already loggedin user (server#66243)
• Fix(provisioning_api): group admins can't add all users to groups (server#66263)
• Fix(share-folder): use it on federated share (server#66277)
• Fix(dav): register missing app config keys in the config lexicon (server#66283)
• Fix(encryption): Don't use ChunkingV2Plugin when server-side encryption is enabled (server#66288)
• Fix(files): Continue scanning after StorageInvalidException (server#66293)
• Fix(theming): only accept canonical svg paths for themed icons (server#66312)
• Fix(files): check that the source properly between storages (server#66317)
• Fix(session): Prevent stale requests from replacing a regenerated session (server#66325)
• Fix(dav): allow moves within own share when sharing is disabled (server#66329)
• Fix(quota): Calculate used quota for foreign users the correct way (server#66334)
• Fix(webhook_listeners): Change Exception type (server#66341)
• Refactor(session): use ITimeFactory for superseded session markers (server#66352)
• Ci(psalm): run taint analysis with all available threads (server#66358)
• Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66367)
• Fix(federatedfilesharing): match reshares by node, not by name (server#66371)

activity

• Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2829)
• Fix(activity): reset the current user and release the teams session (activity#2926)
• Perf(activity): reintroduce activity_object index (activity#3023)
• Fix(files): do not publish incompletely built activity events (activity#3063)
• Fix(tests): Remove broken toast closing & remove use of query method (activity#3066)
• Chore: Set specific PHP platform to fix psalm CI (activity#3067)
• Fix(api): fall back to MIME icon when preview generation fails (activity#3068)

app_api

• Refactor(harp): compare the HaRP shared key with hash_equals (app_api#1116)
• Fix(deploy): round the memory and CPU limits to whole numbers (app_api#1120)
• Fix(daemon): stop prefilling the daemon key in the templates (app_api#1131)
• Fix(docker): no PHP warning for a HaRP daemon without a key (app_api#1134)
• Fix(harp): send the route verb to HaRP (app_api#1139)
• Fix(proxy): match the route verb like HaRP (app_api#1147)
• Fix(harp): require HaRP 0.4.8 in the version check (app_api#1152)
• Fix(proxy): refuse dot segments resolved after the route check (app_api#1166)
• Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app_api#1171)
• Fix(proxy): check routes on each reading of the path like HaRP (app_api#1185)

bruteforcesettings

• Ci: Add release relay job (bruteforcesettings#1395)

circles

• Feat(command): add --delete option to circles:remote (circles#3043)
• Fix(notifications): dismiss join request notification once processed (circles#3046)
• Fix: only show shared resources that are still acessible (circles#3052)
• Fix: resolve share mount for remote circle members (circles#3098)
• Fix(shares): keep circle context when share is resolved via circle (circles#3128)
• Fix(notification): Make relative action links absolute when preparing (circles#3133)
• Fix: use strict in_array (circles#3141)

files_downloadlimit

• Fix: disable props not supported with download limit (files_downloadlimit#1078)
• Ci: Add release relay job (files_downloadlimit#1084)

logreader

• Feat(search): replace search popover with inline search field (logreader#2315)
• Perf(LogIterator): Read long lines in linear time (logreader#2330)
• Fix(LogTable): load entries until screen is filled (logreader#2361)

notifications

• Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3470)
• Ci(performance): Update actions (notifications#3505)

photos

• Fix(tags): read the tag id from the node instead of its attributes (photos#3872)
• Chore: Patch cypress workflow (photos#3987)
• Chore: workflow templates and psalm stub fix (photos#4031)
• Fix(filters): respect share download permission in filtered albums (photos#4036)

privacy

• Chore(deps): combine pending dependency updates (privacy#1508)

recommendations

• Ci: workflow templates and npm audit fix (recommendations#1200)
• Chore(deps): bump npm dependencies (recommendations#1204)

related_resources

• Ci: Add release relay job (related_resources#1177)

serverinfo

• Feat: Show all users who logged at least once (serverinfo#1254)

text

• Fix(files): edited files marked locked in files list after close (text#9376)
• Fix(attachments): rewrite attachment file ids when copying folders (text#9389)
• Fix(attachments): normalize attachment names to Unicode NFC (text#9394)
• Fix(math): import katex css from component (text#9399)
• Fix(migration): quote identifiers in oracle index creation (text#9408)
• Fix(migration): create text_steps index ascending on oracle (text#9470)
• Fix(menu): make component actions work from the remaining actions menu (text#9475)
• Fix misc flaky tests (text#9481)
• Fix(cron): stop attachment cleanup from failing on every run (text#9517)
• Fix(sessions): only use share node matching the session document (text#9522)
• Fix(editor): do not force save when clicking the save indicator (text#9526)
• Perf(editor): only serialize markdown on update when it is read (text#9544)

viewer

• Fix(files): don't expose WebDAV XML-attribute artifacts as DOM attributes (viewer#3289)
• Fix: properly handle e2ee support (viewer#3367)
• Fix(viewer): register handlers not yet in the lookup table when opening a file (viewer#3421)
• Test(e2e): skip the Ogg/Theora video specs on Chromium (viewer#3452)
• Fix(viewer): skip duplicate handlers on init (viewer#3458)