v35.0.2rc1

Nextcloud 35.0.2rc1

server

• Fix(sharing): Use link_defaultExpDays for default expiration in web UI (server#64322)
• Fix(files_sharing): name the parent folder in inherited unshare actions (server#64349)
• Fix(files_sharing): cap share presets to the permissions the resharer (server#64482)
• Fix(encryption): keep version and size in sync for files not in the cache (server#64485)
• Perf(setupchecks): Don't load all tasks to calculate stats (server#64609)
• Fix: forbid newline characters in filenames (server#64613)
• Fix: correct cast ttl to int in KeyValueCache (server#64615)
• Add API to generate system report section (server#64631)
• Fix(Sharing): Enforce source to be accessible by the owner (server#64644)
• Fix(auth): keep remember-me cookies pointing at a live session token (server#64649)
• Take mount name into account when searching by filename. (server#64664)
• Always make user in external share manager explicit (server#64669)
• Fix: never block simple renames in SharesPlugin (server#64681)
• Chore: drop DropFederatedInvitesTable (server#64689)
• Feat(upgrade): localize app names if available on upgrade page (server#64693)
• Fix(files): keep deleting live photo peers after a missing one (server#64699)
• Fix(files_sharing): render share suggestion avatar when provided (server#64704)
• Fix(setupcheck): Print verbose info to allow finding out memory issues (server#64751)
• Refactor(Sharing): Simplify sorting (server#64752)
• Bump Hub 26 Spring-> Hub 26 Summer (server#64758)
• Hide "Shared by link" when sharing by link is disabled (server#64768)
• Chore: Reduce ownership list (server#64837)
• Feat: add additional metadata to node webhooks (server#64847)
• Chore(i18n): Change error message for invalid circle to team (server#64848)
• Chore(i18n): Update error message for dot files restriction (server#64849)
• Chore(i18n): Fix typo in sanitized message for Windows support (server#64850)
• Fix(EmojiHelper): exclude non-latin letters from EmojiHelper (server#64866)
• Feat: make comment events webhook compatible (server#64868)
• Fix(Sharing): Fix recipient IDs on 32-bits (server#64870)
• Fix(files_external): preserve boolean mount options (server#64879)
• Ci(psalm): Fail taint analysis action when it had errors (server#64882)
• Fix(SchemaChecker): don't block on unexpected-table finding (server#64891)
• Preparations for Unified Sharing Legacy Sync (server#64892)
• Fix(adminaudit): Allow named placeholders via CriticalActionPerformedEvent (server#64895)
• Fix(cache): Check if $entry['fileid'] exists (server#64902)
• Fix(user_ldap): show %uid instead of %%uid in the login filter hint (server#64913)
• Fix: Make all app versions stable (server#64915)
• Perf(files): Only match search results against caches of their storage (server#64916)
• Unified sharing remote recipients (server#64919)
• Feat(files-search): Add push down negation optimizer (server#64923)
• Fix(session): only regenerate session id after valid remember-me cookie (server#64924)
• Fix(l10n): stop double-escaping the instance name in settings text (server#64933)
• Fix: Forward not found error in sabre (server#64939)
• Fix: allow copy or move on ownerless mounts when no new shares are added (server#64947)
• Bump 3rdparty to update aws sdk (server#64949)
• Fix(encryption): use the closest cached parent for the access list (server#64960)
• Fix(dav): stop recording no-op address book changes (server#64967)
• Feat: Add code integrity background job (server#64974)
• Fix(setup): only resolve MySQL SSL attributes when an option is set (server#64981)
• Fix(kerberos): Allow again to specify empty url (server#64990)
• Fix(ocp): Adjust since version to actual delivered versions (server#65002)
• Fix(theming): Fix imagick segmentation fault when rendering an app icon (server#65011)
• Deprecate long, non-lazy app config and user config (server#65012)
• Fix(db-usage): fix DB index usage query (server#65014)
• Fix(SchemaChecker): silence reports from db:add-missing-indices (server#65017)
• Fix(files_trashbin): make trashbin:expire continue on errors (server#65020)
• Fix(webhook-listeners): revert admin check and document delegation behaviour (server#65108)
• Fix: only use `unencrypted_size` if set to a value (server#65115)
• Fix(TaskProcessing): return the actual message in 412 responses (server#65119)
• Build(deps): bump phpseclib/phpseclib from 3.0.55 to 3.0.57 (server#65121)
• Test: enable filecache partitioning for one mysql test (server#65128)
• Fix(occ): dispatch password reset events for user:resetpassword (server#65133)
• Perf: Optimize deleting the list of invalid shares (server#65137)
• Fix(settings): let a failed app token creation surface to the user (server#65141)
• Test(integration): Use correct share type for file requests (server#65143)
• Fix(files_sharing): make send_password_by_talk reactive (server#65163)
• Fix(files): check internal path when rescanning after failed fopen (server#65170)
• Refactor(dav): replace sabre collection (server#65178)
• Fix(contactsmenu): remove scrollbars with dyslexia font (server#65190)
• Fix(encryption): ensure app is loaded on login (server#65211)
• Fix(auth): check reset link expiry against interactive login timestamp (server#65245)
• Ci(actions): Fix pinned versions (server#65247)
• Fix(dav): skip metadata handlers for non-updatable nodes (server#65252)
• Fix: use correct node when formatting share token (server#65259)
• Fix(unified-search): apply and close the custom date range dialog (server#65266)
• Test(admin_audit): improve event listener test coverage (server#65275)
• Chore: Update CODEOWNERS for IDP team (server#65284)
• Fix: Rely on isAdmin method to check if user is admin (server#65287)
• Fix(dav): restrict calendar and address book sharing to the owner (server#65300)

3rdparty

• Chore/aws sdk bump stable35 (3rdparty#2632)

activity

• Fix: Use strict comparaison (activity#2986)
• Feat: Build js after merge (activity#2998)
• Perf: Cache public share (activity#3004)
• Perf: Use startActivityTransaction in a few more places (activity#3016)

app_api

• Fix(k8s): apply daemon registry mappings (app_api#1076)
• Fix(daemon): stop prefilling the daemon key in the templates (app_api#1084)

bruteforcesettings

• Fix: Limit mask to 32 bits for IPv4 (bruteforcesettings#1280)
• Ci(actions): Remove no-op workflow (bruteforcesettings#1285)
• Chore: Adjust codeowners (bruteforcesettings#1299)

circles

• Fix: resolve share mount for remote circle members (circles#2836)
• Fix: Expose circle:report (circles#2935)
• Fix(teams): hide circles the user is not a member of (circles#2942)
• Fix: Team wording (circles#2949)
• Feat: Build js after merge (circles#2978)
• Feat(workflow): Add fixup block (circles#2989)
• Fix(teams): show email to tell apart members with the same name (circles#3005)
• Fix: Add a synchronous fallback when loopback doesn't work (circles#3007)
• Fix(share): Hide circle shares of files in the trashbin (circles#3014)

files_lock

• Fix: widen lock identifiers and durations to bigint (files_lock#1319)

notifications

• Fix(activities): Remove notifications from expired activities (notifications#3419)
• Fix(webpush): Correctly hide already read notifications from webpush (notifications#3451)

serverinfo

• Fix(database): skip the replica rule when no replication is configured (serverinfo#1159)
• Fix(database): gate the table open cache rule on uptime like its siblings (serverinfo#1168)
• Only report alerts and warnings as failing checks (serverinfo#1169)
• Feat: expose Nextcloud AIO version in info API (serverinfo#1189)

text

• Fix(Cron): tear down file system between attachment clean up runs (text#9232)
• Fix(links): open links on click and link bubble on hover (text#9233)
• Fix(ImageView): center blurhash placeholder like the loaded image (text#9241)
• Test(playwright): try to fix flakiness of conflict resolution tests (text#9245)
• Fix: search decoration (text#9248)
• Fix(details): use a single open flag (text#9249)
• Fix(callouts): fix long words overflowing the editor width (text#9256)
• Update tiptap to 3.31.3 (text#9281)
• Fix: comments follow-ups (text#9289)
• Fix(image): keep data: URI images on markdown round-trip (text#9290)
• Perf: get all markdown files in one SQL query (text#9291)
• Fix(comparison): make source line labels extractable (text#9292)
• Perf(session): fetch document only once in SessionMiddleware (text#9295)
• Fix(CodeBlock): make sure buttons don't overlay content (text#9305)
• Fix(TableOfContents): don't display toc container on mobile (text#9308)
• Test(vitest): move `vi.mock()` to top of file (text#9321)
• Feat(edit): collaborate in other apps(deck) (text#9325)
• Fix(autosave): only save after changes in the editor (text#9350)

twofactor_nextcloud_notification

• Chore: Adjust codeowners (twofactor_nextcloud_notification#1547)