[stable32] 32.0.14 RC1

[nextcloud-bot]

Nextcloud 32.0.14

server

• [stable32] Fix npm audit #57975
• [stable32] perf: Don't fetch full group object in AuthorizedGroupMapper #61850
• [stable32] fix: Output shape validation will delete keys when there is a list of files #62239
• [stable32] chore(deps-dev): bump @zip.js/zip.js from 2.8.26 to 2.8.29 #62303
• [stable32] chore(deps-dev): bump tar from 7.5.19 to 7.5.20 #62305
• [stable32] chore(deps): bump @nextcloud/vue from 8.39.0 to 8.40.0 #62308
• [stable32] chore(deps-dev): bump msw from 2.14.6 to 2.15.0 #62310
• [stable32] chore(deps): bump dompurify from 3.4.11 to 3.4.12 #62313
• [stable32] fix(files): preserve encryptedVersion when copying cache entries #62339
• [stable32] perf(carddav): reduce disk usage of photocache #62342
• [stable32] fix(AmazonS3): pass S3 error messages through to the frontend #62420
• [stable32] fix(SetupChecks): Link to task processing worker docs #62441
• [stable32] fix: harden object store against copying a file to itself #62463
• [stable32] perf: Replace more calls from getUserGroups to getUserGroupIds #62467
• [stable32] chore(deps): bump @nextcloud/dialogs from 7.4.0 to 7.4.1 #62517
• [stable32] chore(deps): bump libphonenumber-js from 1.13.8 to 1.13.9 #62518
• chore(deps): bump moment-timezone from 0.6.2 to 0.6.3 #62519
• [stable32] chore(deps-dev): bump sass from 1.101.0 to 1.101.3 #62521
• [stable32] chore(deps): bump p-limit from 7.3.0 to 7.3.1 #62522
• [stable32] chore(deps-dev): bump @zip.js/zip.js from 2.8.29 to 2.8.33 #62524
• [stable32] build(deps): bump guzzlehttp/guzzle to 7.15.2 #62582
• [stable32] fix(unified-search): catch errors in response #62615
• [stable32] chore(previews): add file signature check before opening files #62618
• [stable32] test(version-check): Fix flaky test #62621
• [stable32] [master] fix(security): Update code signing revocation list #62654
• [stable32] fix(caldav): Expand recurring events for principal calendar search #62691
• [stable32] fix(search): Add end date for last 7 and last 30 days #62696
• [stable32] fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable #62704
• [stable32] fix(share-api-controller): add sanity check on canAccessShare for circle share types #62731
• [stable32] chore(deps-dev): bump @zip.js/zip.js from 2.8.33 to 2.8.34 #62751
• [stable32] chore(deps-dev): bump sass from 1.101.3 to 1.102.0 #62752
• [stable32] Expend a bit OCP\GlobalScale\IConfig #62799
• [stable32] fix: handle sftp private key as password #62822
• [stable32] Host/ip validator hardenings #62827
• [stable32] fix: disable direct link if link shares are disabled #62830
• [stable32] check free space in the proper folder when restoring from trash #62835
• [stable32] fix: clear key password after loading key #62848
• [stable32] fix(direct editing): cleanup tokens on user deletion #62864
• [stable32] fix(dav): properly finalize with MOVE only #62874
• [stable32] fix(share): do not re-accept rejected shares #62889
• [stable32] feat: Add setting to bypass password confirmation on a selected ip ranges #62906
• [stable32] feat: Allow to check user existence outside specific user backends #62915
• [stable32] fix: require admin permissions for all systemtag updates #62922
• [stable32] fix(sharing): properly handle verification of copy/move actions #62939
• [stable32] fix: Use PHP_AUTH_PW for strict password confirmation #62955
• [stable32] fix(auth): log invalid token during password reset #62968
• [stable32] fix(PublicPreview): Call getMimetype() on File objects #62979
• [stable32] fix: Handle 2fa enforcement earlier #62985
• [stable32] Fix npm audit #62993
• [stable32] fix(console): write app command loading errors to stderr #62996
• [stable32] fix(settings): missing end of html tag #63014
• [stable32] fix(files): remove leading slash from destination in copy/move toast #63037
• [stable32] chore(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 #63058
• [stable32] chore(deps): bump dompurify from 3.4.12 to 3.4.13 #63059
• [stable32] chore(deps-dev): bump webpack from 5.107.2 to 5.109.2 #63060
• [stable32] chore(deps): bump libphonenumber-js from 1.13.9 to 1.13.10 #63061
• [stable32] fix: improve logging when failing to get newly created user #63073
• [stable32] fix(lookup-server): accept self-signed lus on globalscale #63082
• [stable32] Fix npm audit #63090
• [stable32] fix: throw better error message if a user doesn't have a key even though it should have #63092
• [stable32] fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage #63098
• [stable32] fix(files): do not let a failing move hook break the move or hide files #63103
• [stable32] fix(CalDAV): Check for user status before serving public calendars #63110
• [stable32] feat(federation): Add accept/decline mechanism for federated calendars #63116

3rdparty

• [stable32] build(deps): bump guzzlehttp/guzzle to 7.15.2 3rdparty#2519

activity

• [stable32] Fix npm audit activity#2540
• [stable32] fix: do not fail moves when the old location cannot be resolved activity#2796
• [stable32] Update nextcloud/ocp dependency activity#2801
• fix(build): exclude iOS Safari < 12 from browserslist targets (stable32) activity#2827
• [stable32] fix(notifications): Require absolute links for support of desktop and mobile clients activity#2828
• chore: run composer cs:fix to satisfy php-cs (stable32) activity#2831
• [stable32] Update nextcloud/ocp dependency activity#2840

bruteforcesettings

• Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 bruteforcesettings#1192
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 bruteforcesettings#1193
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1194
• Chore(deps-dev): Bump @eslint/js from 9.39.4 to 9.39.5 bruteforcesettings#1206
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.7 to 6.0.8 bruteforcesettings#1208
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1225

circles

• [stable32] Update nextcloud/ocp dependency circles#2656
• [stable32] ci(actions): Update workflow templates from organization template repository circles#2684
• [stable32] fix: Use global members limit as default for circle circles#2704
• [stable32] fix: add promoteToOwner method circles#2713
• [stable32] fix(local-controller): validate when trying adding member of type contact circles#2720
• [stable32] fix(circles): preserve group display names when creating circles circles#2725
• [stable32] Update nextcloud/ocp dependency circles#2729

files_downloadlimit

• [stable32] Fix npm audit files_downloadlimit#885
• chore(deps): Bump @nextcloud/vue from 8.39.0 to 8.40.0 files_downloadlimit#894
• chore(deps-dev): Bump eslint from 9.39.4 to 9.39.5 files_downloadlimit#896
• [stable32] Fix npm audit files_downloadlimit#921

files_pdfviewer

• [stable32] Fix npm audit files_pdfviewer#1449
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 files_pdfviewer#1478
• [stable32] ci(actions): Update workflow templates from organization template repository files_pdfviewer#1495
• [stable32] chore: Add explicit dependency for terser-webpack-plugin files_pdfviewer#1503
• [stable32] Fix npm audit files_pdfviewer#1508
• [stable32] chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 files_pdfviewer#1511

logreader

• [stable32] Update nextcloud/ocp dependency logreader#2129
• [stable32] Fix npm audit logreader#2133
• [stable32] Fix npm audit logreader#2149
• [stable32] Fix npm audit logreader#2161
• [stable32] Update nextcloud/ocp dependency logreader#2170
• [stable32] Fix npm audit logreader#2173

nextcloud_announcements

• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#677
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#682
• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#689

notifications

• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3233
• [stable32] Fix npm audit notifications#3235
• [stable32] build(deps): Bump vue from 3.5.39 to 3.5.40 notifications#3253
• [stable32] Fix npm audit notifications#3258
• [stable32] Update nextcloud/ocp dependency notifications#3265
• [stable32] Update nextcloud/ocp dependency notifications#3270
• [stable32] Update nextcloud/ocp dependency notifications#3272
• [stable32] Fix npm audit notifications#3285

password_policy

• Chore(deps-dev): Bump sass from 1.101.0 to 1.101.3 password_policy#1004
• Chore(deps-dev): Bump sass from 1.101.3 to 1.102.0 password_policy#1008

photos

• [stable32] Chore(deps): Bump @nextcloud/vue from 8.38.0 to 8.39.0 photos#3652
• [stable32] fix(dav): properly handle metadata photos#3712

recommendations

• [stable32] ci(actions): Update workflow templates from organization template repository recommendations#1133
• [stable32] Fix npm audit recommendations#1140
• [stable32] Fix npm audit recommendations#1156

related_resources

• [stable32] ci(psalm): Fix nextcloud/ocp update related_resources#1046
• [stable32] ci(actions): Update workflow templates from organization template repository related_resources#1052
• [stable32] Update nextcloud/ocp dependency related_resources#1082
• [stable32] Fix npm audit related_resources#840

serverinfo

• [stable32] ci(actions): Update workflow templates from organization template repository serverinfo#1048
• [stable32] Update nextcloud/ocp dependency serverinfo#1054
• [stable32] Update nextcloud/ocp dependency serverinfo#1079

survey_client

• [stable32] Update nextcloud/ocp dependency survey_client#459
• [stable32] Update nextcloud/ocp dependency survey_client#468

text

• [stable32] Fix npm audit text#8893
• fix(deps): update dependency @nextcloud/vue to ^8.40.0 (stable32) text#8914
• [stable32] fix: ActionInsertLink): allow to get title from link picker text#8929
• [stable32] Fix npm audit text#8943
• [stable32] fix: update ShowImageModal to use fullUrl for show original image instead of preview text#8949
• [stable32] fix(editor): fix viewer header overlaying page content on mobile text#8955
• [stable32] fix(DirectEditing): check if user is enabled text#8961
• [stable32] fix(attachments): check documentId matches text#8972
• [stable32] chore(test): direct editing permissions text#8973
• fix(deps): update dependency yjs to ^13.6.32 (stable32) text#9001
• [stable32] Update nextcloud/ocp dependency text#9011
• [stable32] Fix npm audit text#9015
• fix(deps): update dependency mermaid to ^11.16.1 (stable32) text#9018
• [stable32] fix(lists): no margin-bottom for nested lists to prevent ugly gap text#9022

twofactor_nextcloud_notification

• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1424
• [stable32] Fix npm audit twofactor_nextcloud_notification#1428
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1439
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1453

Pending PRs:

• @nfebe
  • [stable32] fix(share): Set expiration time to end of day (23:59:59) #58709 ✅
• @DerDreschner
  • [stable32] fix(DnsPinning): Ensure to always lookup based on FQDN #59158 🔁
• @icewind1991
  • [stable32] fix: allow renaming files with just update permissions #59242 🔁
• @backportbot
  • [stable32] fix: duplicate dashboard widget #59411 ✅
• @DerDreschner
  • [stable32] fix(Database): Use real idle-timer to prevent lastInsertId being reset on MariaDB/MySQL #62712 ✅
• @CarlSchwan
  • [stable32] backports ldap fixes #63127
• @ArtificialOwl
  • [stable32] avoid desync with memberships circles#2364 ✅
• @Antreesy
  • [stable32] fix(build): extract license information from .map files logreader#2177
• @leftybournes
  • [stable32] fix: urlencode file source based on resource url viewer#3326 ✅
• @miaulalala
  • [stable32] fix(comments): mark comments as read and dismiss notifications in Activity sidebar #60622 ✅
• (generated)
  • [stable32] chore(deps): Bump handlebars from 4.7.8 to 4.7.9 #59287 ✅
  • [stable32] 32.0.14 RC1 #63106
  • [stable32] Fix npm audit photos#3512 ✅
  • [stable32] Update nextcloud/ocp dependency photos#3605 ✅
  • [stable32] Chore(deps): Bump webdav from 5.9.0 to 5.10.0 photos#3636 ✅
  • [stable32] Chore(deps-dev): Bump cypress-split from 1.24.28 to 1.25.0 photos#3640 ✅
  • [stable32] Chore(deps-dev): Bump autoprefixer from 10.4.24 to 10.5.2 photos#3642 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested