v34.0.6rc1

Nextcloud 34.0.6rc1

server

• Fix(files_sharing): Use share id in file actions (server#62403)
• Chore: Improve phpunit performance (server#63398)
• Fix(chunkingUpload): sliding expiration based on upload activity (server#64026)
• Fix(files_sharing): name the parent folder in inherited unshare actions (server#64350)
• Fix: Forward not found error in sabre (server#64940)
• Fix: Remove unused $allStorages array in files_external (server#64988)
• Fix(kerberos): Allow again to specify empty url (server#64989)
• Test: enable filecache partitioning for one mysql test (server#65129)
• Fix(globalscale): ignore lookupserver if empty config (server#65184)
• Fix(backupcodes): Dismiss notification on disabled provider (server#65317)
• Fix(admin-audit): Log when BFP was bypassed (server#65328)
• Fix(files_sharing): preserve share expiration time (server#65404)
• Fix: add files_metadata_index to the filecache partition (server#65413)
• Fix(settings): add select event to AppNavigationGroupList and clear s… (server#65417)
• Chore: Add `testing:prepare-ci` command (server#65420)
• Fix(mail): embed image logo only when using useTemplate (server#65427)
• Chore: Skip transaction when no preview exists (server#65445)
• Chore: update code owners (server#65456)
• Fix(encryption): use the block size of the file encoding when fixing sizes (server#65459)
• Perf: Partition preview migration job (server#65465)
• Perf(preview): only autorotate with Imaginary when needed (server#65486)
• Fix(appstore): only ask once for password confirmation (server#65495)
• Fix(user_ldap): Use proper function builder instead of hardcoded COUNT (server#65502)
• Fix(migration): check if deleted_by column exists before trying to add it to files_trash table (server#65517)
• Fix(dav): adjust password session check on legacy dav auth (server#65540)
• Fix: Store login name and not uid in session when login with webauthn (server#65548)
• Ci: run the guests integration tests against guests stable-4.10 (server#65553)
• Fix(files_sharing): show the owner avatar for received shares (server#65561)
• Fix(files): normalize Unicode in node paths (server#65565)
• Fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share (server#65571)
• Fix(dav): resolve users before intersecting shares (server#65583)
• Chore: Update setup-php to 2.40.0 (server#65664)
• Fix: Playwright concurrency (server#65672)
• Fix: don't try to load keys for empty path for groupfolder versions (server#65675)
• Fix(ui): Consider typing and scrolling as activity for auto logout (server#65690)
• Fix(dav): remove CalDAV availability when all working-hour slots are cleared (server#65694)
• Fix(encryption): Remember the recalculated unencrypted size as int (server#65700)
• Fix: Remove auto increment migration on share_external (server#65710)
• Fix(user_ldap): remove leftover debug log in getUserFromCustomAttribute (server#65712)
• Fix: move column drop in to separate migration (server#65718)
• Fix(DisableSystemAddressBook): Fix notification by providing an object id (server#65733)
• Fix(ci): clone vendored test apps from the matching stable branch (server#65874)
• Fix(files): skip quota check when opening files for reading (server#65879)
• Chore: flake update (server#65907)
• Fix(files_sharing): public share popover jumps on options toggle (server#65912)
• Fix(security): Update CA certificate bundle (server#65916)
• Fix: move/rename of part file in masked dir/storage (server#65933)
• Fix(provisioning_api): filter users by enabled state on the server (server#65947)
• Fix: Remove avatar and credentials only after user removal (server#65952)
• Fix(core): use %n in the integrity check plural to avoid a crash in L10N (server#65957)
• Ci: sync workflows with .github (server#65963)
• Fix(files_sharing): Make sure mount events are dispatched for share recipients (server#65989)
• Fix(appstore): do not wrap app store screenshots in the proxy twice (server#65990)
• Fix(versions): empty array for external shares (server#66004)
• Fix(dav): detect truncated CardDAV sync results on all databases (server#66011)
• Fix(since): Ensure provided since version is from the current branch (server#66021)
• Build(deps): bump the symfony group across 1 directory with 9 updates (server#66031)
• Fix(dav): align public request path handling (server#66039)
• Fix: unique custom tokens for share links (server#66043)
• Build(deps): Bump Symfony packages (server#66134)
• Fix: properly handle webdav pagination headers (server#66155)
• Fix(external-share): move ExternalShareScanJob creation deeper. (server#66158)
• Fix(tags): display selected tag in settings (server#66163)
• Fix(log): Avoid crashes when building exception trace with a ghost (server#66173)
• Fix: improve live-photo handling (server#66189)
• Fix(CalDAV): extract data from occurance exemptions (server#66191)
• Fix: BearerAuth should not check for already loggedin user (server#66194)
• Fix(user_ldap): Fix variable name conflict for cache key (server#66197)
• Fix(dav): bind public share session authentication to the password hash (server#66203)
• Fix(user_ldap): do not cache unknown names in the local mapping cache (server#66208)
• Ci: drop cat of Imagick policy (server#66221)
• Fix(systemtags): properly handle object ids (server#66228)
• Fix(favorite): Limit tagging to favorite (server#66230)
• Fix(dav): do not grant write-properties to read-only calendar delegates (server#66236)
• Fix: Reject login with NUL bytes rather than converting (server#66241)
• Fix(provisioning_api): group admins can't add all users to groups (server#66264)
• Fix(share-folder): use it on federated share (server#66279)
• Fix(dav): register missing app config keys in the config lexicon (server#66282)
• Fix(encryption): Don't use ChunkingV2Plugin when server-side encryption is enabled (server#66289)
• Fix(files): Continue scanning after StorageInvalidException (server#66292)
• Fix: Use strict in_array in ApplicableHelper (server#66294)
• Feat(federation): ignore remote contacts (server#66306)
• Fix(theming): only accept canonical svg paths for themed icons (server#66311)
• Fix(files): check that the source properly between storages (server#66316)
• Fix(session): Prevent stale requests from replacing a regenerated session (server#66324)
• Fix(dav): allow moves within own share when sharing is disabled (server#66330)
• Fix(quota): Calculate used quota for foreign users the correct way (server#66333)
• Fix(webhook_listeners): Change Exception type (server#66342)
• Refactor(session): use ITimeFactory for superseded session markers (server#66351)
• Ci(psalm): run taint analysis with all available threads (server#66357)
• Fix(core): await enabling recommended apps before collecting results (server#66362)
• Fix(lostpassword): Avoid having a different error message between expired and invalid (server#66366)
• Fix(federatedfilesharing): match reshares by node, not by name (server#66372)

activity

• Fix(activity): reset the current user and release the teams session (activity#2925)
• Perf(activity): reintroduce activity_object index (activity#3022)
• Fix(files): do not publish incompletely built activity events (activity#3062)
• Chore: Set specific PHP platform to fix psalm CI (activity#3064)
• Fix(tests): Remove broken toast closing & remove use of query method (activity#3065)
• Fix(api): fall back to MIME icon when preview generation fails (activity#3069)

app_api

• Refactor(harp): compare the HaRP shared key with hash_equals (app_api#1115)
• Fix(deploy): round the memory and CPU limits to whole numbers (app_api#1121)
• Fix(docker): no PHP warning for a HaRP daemon without a key (app_api#1136)
• Fix(harp): send the route verb to HaRP (app_api#1141)
• Fix(proxy): match the route verb like HaRP (app_api#1146)
• Fix(harp): require HaRP 0.4.8 in the version check (app_api#1151)
• Fix(proxy): refuse dot segments resolved after the route check (app_api#1165)
• Fix(proxy): refuse the ExApp lifecycle endpoints like HaRP (app_api#1170)
• Fix(proxy): check routes on each reading of the path like HaRP (app_api#1184)

circles

• Fix(federation): fix shares and mount rename (circles#3025)
• Revert #2454 (circles#3038)
• Feat(command): add --delete option to circles:remote (circles#3044)
• Fix(notifications): dismiss join request notification once processed (circles#3047)
• Fix: only show shared resources that are still acessible (circles#3053)
• Fix(mount-provider): Pass the recipient to the federated share storage (circles#3074)
• Enh(performance): query memberships breadth first to reduce query count (circles#3081)
• Fix(shares): keep circle context when share is resolved via circle (circles#3127)
• Fix(notification): Make relative action links absolute when preparing (circles#3134)

files_downloadlimit

• Fix: disable props not supported with download limit (files_downloadlimit#1079)
• Ci: Add release relay job (files_downloadlimit#1085)
• Fix: count legacy share downloads only once (files_downloadlimit#1088)

files_lock

• Fix: allow force unlock without access of the lock owner (files_lock#1364)
• Fix(lock): only return string app names from getAppName (files_lock#1396)

files_pdfviewer

• Chore: Bump version (files_pdfviewer#1591)

logreader

• Feat(search): replace search popover with inline search field (logreader#2316)
• Perf(LogIterator): Read long lines in linear time (logreader#2329)
• Fix(LogTable): load entries until screen is filled (logreader#2362)

notifications

• Build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration (notifications#3471)
• Ci(performance): Update actions (notifications#3504)
• Fix(webpush): Correctly hide already read notifications from webpush (notifications#3545)
• Feat: open the target when a background push notification is clicked (notifications#3546)
• Fix(web-notifications): open notification link in a new tab (notifications#3547)
• Apply hardenings found by automated scanner (notifications#3548)
• Fix(web-push): improve fetching notifications with web-push (notifications#3551)

photos

• Fix(tags): read the tag id from the node instead of its attributes (photos#3873)
• Chore(deps): combine pending dependency updates (photos#4030)
• Fix(filters): respect share download permission in filtered albums (photos#4035)
• Honor EXIF OffsetTimeOriginal (photos#4038)

privacy

• Chore(deps): combine pending dependency updates (privacy#1507)

recommendations

• Ci: workflow templates and npm audit fix (recommendations#1199)
• Chore(deps): bump npm dependencies (recommendations#1203)

serverinfo

• Feat: Show all users who logged at least once (serverinfo#1251)

text

• Fix(files): edited files marked locked in files list after close (text#9377)
• Fix(Table): return Tab and Shift-Tab handler results to mark the even… (text#9379)
• Fix(attachments): rewrite attachment file ids when copying folders (text#9390)
• Fix(attachments): normalize attachment names to Unicode NFC (text#9395)
• Fix(math): import katex css from component (text#9400)
• Fix(notifications): notify mentioned users about mentions by guests (text#9403)
• Fix(migration): quote identifiers in oracle index creation (text#9407)
• Fix(migration): create text_steps index ascending on oracle (text#9471)
• Fix(menu): make component actions work from the remaining actions menu (text#9474)
• Fix misc flaky tests (text#9480)
• Perf(cleanup): Optimize cleanup job (text#9516)
• Fix(sessions): only use share node matching the session document (text#9521)
• Fix(editor): do not force save when clicking the save indicator (text#9527)
• Fix: don't silently drop outside changes (e.g. from external storage) (text#9539)
• Perf(editor): only serialize markdown on update when it is read (text#9543)
• Fix(sync): improve situation around false conflicts (text#9551)
• Fix: improve gap cursor usage (text#9553)

viewer

• Fix: properly handle e2ee support (viewer#3368)
• Fix(viewer): register handlers not yet in the lookup table when opening a file (viewer#3422)
• Chore(deps): update vite to 7 and stylelint to 17 (viewer#3453)
• Fix(viewer): skip duplicate handlers on init (viewer#3459)