v33.0.7

Nextcloud 33.0.7

server

• Fix(files_sharing): Drop trailing '?' from public download redirect URL (server#59885)
• Fix(settings): sort app list by app name instead of app objects (server#59992)
• Fix(cypress): disable unsupported-browser redirect in test container (server#60805)
• Fix(core): public share download icon color and theme filter scope (server#61210)
• Test(ldap): align expectation for unset `ldapUserDisplayName2` with implementation to avoid PHP 8.5 warning (server#61411)
• Fix: update cached mounts when moving share in repair step (server#61499)
• Fix(files_sharing): remove filename's leading slash on unshare toast (server#61527)
• Perf: block more properties from using the custom properties backend (server#61541)
• Fix(settings): correct heading order in account management sidebar (server#61547)
• Fix: Make the IProvideUserSecretBackend usable (server#61549)
• Perf(log): normalize log data only when logging (server#61556)
• Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61570)
• Fix(dav): Handle GenericFileException when reading default contact file (server#61595)
• Fix(a11y): label account QR code button (server#61603)
• Fix(files): Open the sidebar for the current folder, not a stale child (server#61605)
• Fix(user_status): stabilise the user_status (server#61619)
• Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61644)
• Fix(config): Decrypt sensitive appconfigs when requested (server#61661)
• Fix(files_external): ignore deprecated backends (server#61692)
• Build(deps): Composer audit updates (server#61698)
• Fix(files_external): properly apply default mount options (server#61701)
• Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61711)
• Fix(settings): display birthday correctly regardless of browsers timezone (server#61714)
• Perf: Only sort wrappers when adding them (server#61718)
• Fix(dav): Always show example content section (server#61741)
• Fix(db): align preview migration annotations with created tables (server#61750)
• Fix(files_external): prevent dropdown entries from shrinking (server#61796)
• Fix: don't return cache entries with null paths (server#61835)
• Test(settings): fix E2E selector for out of office replacement element (server#61839)
• Fix(Sharing): Don't break cache entry by setting path to null (server#61843)
• Perf: Don't fetch full group object in AuthorizedGroupMapper (server#61851)
• Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61861)
• Fix(DeclarativeManager): Fix admin delegation (server#61875)
• Fix: adjust file picker for background image to allow folder navigation (server#61879)
• Fix(bruteforce): Don't throttle requests with failing CSRF (server#61885)
• Fix(core): Throttle lost-password reset form when link is disabled (server#61887)
• Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61891)
• Test: fix HEIC tests (server#61893)
• Fix: hide scroll bar in unified search when not needed (server#61910)
• Fix(files): distinguish between files and folders for validation messages (server#61920)
• Feat: Disable callable serialization in sabre/xml (server#61924)
• Feat: Fetch groups in batch in getUserGroups (server#61935)
• Fix: webhook payload for system tag events (server#61942)
• Show group display name when the group object is not loaded yet (server#61954)
• Fix: Catch expected NotFoundException (server#61969)
• Feat(login): clean remember me tokens (server#61971)
• Fix(files_external): S3 folder mtime updated on every read-only access (server#61978)
• Master] fix(security): Update code signing revocation list (server#62041)
• Master] fix(security): Update code signing revocation list (server#62047)
• Perf(carddav): reduce disk usage of photocache (server#62053)
• Perf(workflow): Implement result cache for IP checks (server#62056)
• Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62068)
• Fix(caldav): url-encode owner/user in activity event links (server#62074)
• Fix(UserPlugin): Don't search for displayname when restricted (server#62097)
• Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62102)
• Fix(UserPlugin): Don't return mail matches on user id search (server#62110)
• Fix(UserPlugin): Don't return disabled users on user ID and mail match (server#62118)
• Ci: migrate from buildjet to cache action (server#62124)
• Fix(FilesWidget): allow to resize widget vertically (server#62126)
• Rate limiting for creating federated shares (server#62129)
• Fix: Disable imagick preview providers (server#62148)
• Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62151)
• Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62159)
• Fix(preview): properly handle encoded content (server#62174)
• Fix(cache): make clear() redis cluster compatible (server#62176)
• Perf: Don't fetch all the trash items when deleting a single item (server#62179)
• Fix(s3): trim multiple spaces to single space in original path header (server#62182)
• Master] fix(security): Update code signing revocation list (server#62185)
• Feat(files_sharing): schedule external share scan job when accepted (server#62198)
• Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62211)
• Revert - Merge pull request #61954 (server#62212)
• Fix(dav): release part-file lock when an upload fails (server#62215)
• Perf(dav): Stream PROPFIND output (server#62225)
• Fix: don't die if we can't encode file metadata on upload (server#62227)
• Fix(CleanupLoginTokens): Specify the table (server#62410)
• Master] fix(security): Update CA certificate bundle (server#62436)
• Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62448)

3rdparty

• Build(deps): Composer audit updates (3rdparty#2499)
• Feat: Disable callable serialization in sabre/xml (3rdparty#2512)

activity

• Feat: make amount of items sent on email configurable via occ (activity#2709)
• Fix(deps): pin nextcloud/ocp to dev-stable33 in psalm vendor-bin (activity#2789)
• Fix(listener): Catch when trying to set up a settings that doesn't exists (activity#2792)
• Perf(files): compute move/rename activity settings once (activity#2795)
• Fix: do not fail moves when the old location cannot be resolved (activity#2797)

app_api

• Feat: add release relay gh workflow (app_api#923)
• Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#931)

circles

• Fix: update stubs to avoid psalm errors (circles#2560)
• Fix(permission): get permissions for user from inherited when not direct member (circles#2576)
• Fix(workflow): switch from node.yml to npm-build.yml (circles#2611)
• Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2635)

files_downloadlimit

• Fix: don't apply limit if it's disabled (files_downloadlimit#866)

logreader

• Chore: bump PHP version to 8.2 (logreader#2082)

notifications

• Test: Push notification payload (notifications#3139)
• Feat: Show request time to the push proxy (notifications#3155)

password_policy

• Feat: Add login output when password policy fails (password_policy#967)

photos

• Build(deps): Unblock dependency updates by allowing to update vite again (photos#3588)
• Chore(test): Migrate to @nc/e2e-test-server (photos#3645)

privacy

• Chore: Add `update-stable-titles` workflow (privacy#1384)

related_resources

• Build: Fix required PHP version and missing nextcloud/ocp updates (related_resources#1036)
• Chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 (related_resources#846)

serverinfo

• Use a parameterized translation for CPU thread count (serverinfo#1040)

suspicious_login

• Chore(psalm): Update to psalm 6 (suspicious_login#1069)
• Fix(autoload): load rubix free functions despite Composer files dedupe (suspicious_login#1130)

text

• Fix(autofocus): persist cursor positions in localStorage (text#8777)
• Fix(SessionService): sanitize displayName to utf8 encoding (text#8781)
• Fix(ActionInsertLink): allow to get title from link picker (text#8790)
• Fix(markdown): preserve horizontal rule markup (text#8793)
• Fix(ImageView): use `a` element for clickable items (text#8842)
• Ci(playwright): fix installing pinned NPM version (text#8846)
• Fix(links): scroll to anchor links directly (text#8862)
• Fix(FloatingButtons): in headings, leave space for the anchor icon (text#8864)
• Fix(BulletList): remove `preserveWhitespace: true` parseHTML override (text#8867)
• Chore(deps): bump @nextcloud/vue to 8.40.0 (text#8873)
• Fix(Table): allow changing list indention inside tables (text#8877)
• Fix(share): detect if documentId is outside of share early (text#8881)

twofactor_totp

• Ci: update codecov action to v7 (twofactor_totp#1788)
• Ci: drop unused app publish workflow (twofactor_totp#1837)

viewer

• Chore: replace node.yml workflow with npm-build.yml (viewer#3281)