[stable33] 33.0.8 RC1

[nextcloud-bot]

Nextcloud 33.0.8

server

• [stable33] Fix npm audit #57976
• [stable33] chore(deps-dev): bump @nextcloud/vite-config from 2.5.2 to 2.5.4 #61999
• [stable33] fix(files_sharing): preserve unmasked permissions as scan_permissions #62217
• [stable33] perf: Replace more calls from getUserGroups to getUserGroupIds #62222
• [stable33] Improve logout url generation #62235
• [stable33] fix: Output shape validation will delete keys when there is a list of files #62238
• [stable33] fix(files_external/SMB): Use 'null' explicitly for no workgroup #62280
• chore(deps-dev): bump cypress from 15.18.0 to 15.18.1 #62304
• [stable33] chore(deps-dev): bump msw from 2.14.6 to 2.15.0 #62306
• [stable33] chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 #62307
• [stable33] chore(deps-dev): bump concurrently from 9.2.3 to 9.2.4 #62309
• [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.8.26 to 2.8.29 #62312
• [stable33] chore(deps): bump @nextcloud/vue from 9.8.2 to 9.9.0 #62314
• [stable33] chore(deps): bump @nextcloud/vue from 8.39.0 to 8.40.0 in /build/frontend-legacy #62315
• [stable33] chore(deps): bump dompurify from 3.4.11 to 3.4.12 in /build/frontend-legacy #62316
• [stable33] chore(deps-dev): bump msw from 2.14.6 to 2.15.0 in /build/frontend-legacy #62317
• [stable33] fix(files): properly handle folders without permissions #62319
• [stable33] fix(files): preserve encryptedVersion when copying cache entries #62338
• [stable33] fix(files_sharing): Use share id in file actions #62402
• [stable33] fix(AmazonS3): pass S3 error messages through to the frontend #62419
• [stable33] fix(SetupChecks): Link to task processing worker docs #62442
• [stable33] fix: Don't add empty and broken ExternalShareScanJob on upgrade #62452
• [stable33] fix(background-jobs): preserve Snowflake IDs as strings #62456
• [stable33] fix: harden object store against copying a file to itself #62462
• [stable33] chore(deps): bump vue from 3.5.39 to 3.5.40 #62520
• [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.8.29 to 2.8.33 #62523
• [stable33] chore(deps-dev): bump eslint-plugin-cypress from 6.4.2 to 6.4.3 #62525
• [stable33] chore(deps): bump @nextcloud/dialogs from 7.4.0 to 7.4.1 #62526
• [stable33] chore(deps-dev): bump stylelint from 17.14.0 to 17.14.1 #62527
• [stable33] chore(deps-dev): bump sass from 1.101.0 to 1.101.3 #62528
• [stable33] chore(deps): bump moment-timezone from 0.6.2 to 0.6.3 in /build/frontend-legacy #62529
• [stable33] chore(deps): bump p-queue from 9.3.1 to 9.3.2 in /build/frontend-legacy #62530
• [stable33] chore(deps): bump @nextcloud/dialogs from 7.4.0 to 7.4.1 in /build/frontend-legacy #62531
• [stable33] chore(deps-dev): bump sass from 1.101.0 to 1.101.3 in /build/frontend-legacy #62532
• [stable33] chore(deps): bump libphonenumber-js from 1.13.8 to 1.13.9 in /build/frontend-legacy #62533
• [stable33] chore(deps): bump p-limit from 7.3.0 to 7.3.1 in /build/frontend-legacy #62534
• [stable33] build(deps): bump guzzlehttp/guzzle to 7.15.2 #62583
• [stable33] perf(preview): Optimize retriving all previews from oc_filecache #62603
• [stable33] fix(unified-search): catch errors in response #62614
• [stable33] chore(previews): add file signature check before opening files #62619
• [stable33] test(version-check): Fix flaky test #62622
• [stable33] [master] fix(security): Update code signing revocation list #62653
• [stable33] fix(search): Add end date for last 7 and last 30 days #62684
• [stable33] fix(caldav): Expand recurring events for principal calendar search #62692
• [stable33] Expend a bit OCP\GlobalScale\IConfig #62701
• [stable33] fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable #62703
• [stable33] fix(imip): add context to imip log messages #62721
• [stable33] fix(share-api-controller): add sanity check on canAccessShare for circle share types #62732
• [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.8.33 to 2.8.34 #62754
• chore(deps-dev): bump sass from 1.101.3 to 1.102.0 #62755
• [stable33] chore(deps-dev): bump cypress from 15.18.1 to 15.19.0 #62756
• [stable33] chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 #62757
• [stable33] chore(deps-dev): bump sass from 1.101.3 to 1.102.0 in /build/frontend-legacy #62758
• [stable33] chore(deps): bump p-queue from 9.3.2 to 9.3.3 in /build/frontend-legacy #62759
• [stable33] perf(user-display-name): Check memory cache before trying redis #62777
• [stable33] fix(encryption): Correctly report size for zero-byte encrypted files #62779
• [stable33] More logging around partfile rename failures #62783
• [stable33] fix(provisioning_api): read newUser.sendEmail as a boolean #62785
• [stable33] fix(encryption): handle decryption exception with outdated passwords #62787
• [stable33] test(TestCase): restore unregistered services correctly #62789
• [stable33] fix(imip): don't report success when a calendar cannot process iMip #62793
• [stable33] fix(systemTags): setObjectIdsForTag() dispatches once #62800
• [stable33] fix: handle sftp private key as password #62823
• [stable33] Host/ip validator hardenings #62828
• [stable33] fix: disable direct link if link shares are disabled #62831
• [stable33] check free space in the proper folder when restoring from trash #62836
• [stable33] fix: clear key password after loading key #62849
• [stable33] fix(direct editing): cleanup tokens on user deletion #62863
• [stable33] fix(dav): properly finalize with MOVE only #62875
• [stable33] fix(share): do not re-accept rejected shares #62890
• [stable33] fix: throw better error message if a user doesn't have a key even though it should have #62892
• [stable33] fix(preview): Handle unique constraints violation exception #62893
• [stable33] feat: Add setting to bypass password confirmation on a selected ip ranges #62907
• [stable33] fix(share): Prevent type error caused by non-existing user #62911
• [stable33] feat: Allow to check user existence outside specific user backends #62916
• [stable33] fix: require admin permissions for all systemtag updates #62923
• [stable33] fix(files_sharing): skip unresolvable share recipients #62927
• [stable33] feat(lookup): search for local account only via lookupserver #62935
• [stable33] fix(sharing): properly handle verification of copy/move actions #62938
• [stable33] feat: allow specifying applicable users and groups in the files_external:create command #62948
• [stable33] fix: Use PHP_AUTH_PW for strict password confirmation #62956
• [stable33] fix(share): Avoid crash when share owner is not found #62960
• [stable33] fix(trashbin): properly show deleted by for federated shares #62966
• [stable33] fix(auth): log invalid token during password reset #62969
• [stable33] fix(PublicPreview): Call getMimetype() on File objects #62977
• [stable33] fix: Handle 2fa enforcement earlier #62984
• [stable33] Fix npm audit #62992
• [stable33] fix(ObjectStore): reset multipart upload byte counter on retry #62995
• [stable33] fix(console): write app command loading errors to stderr #62997
• [stable33] fix(files): do not let a failing move hook break the move or hide files #63000
• [stable33] fix(settings): missing end of html tag #63015
• [stable33] fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage #63019
• [stable33] fix(files): remove leading slash from destination in copy/move toast #63038
• [stable33] chore(deps): bump @vueuse/core from 14.3.0 to 14.4.0 #63063
• [stable33] chore(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 in /build/frontend-legacy #63065
• [stable33] chore(deps-dev): bump webpack from 5.106.2 to 5.109.2 in /build/frontend-legacy #63066
• [stable33] chore(deps): bump libphonenumber-js from 1.13.9 to 1.13.10 in /build/frontend-legacy #63067
• [stable33] chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /build/frontend-legacy #63068
• [stable33] fix: improve logging when failing to get newly created user #63074
• [stable33] fix(lookup-server): accept self-signed lus on globalscale #63081
• [stable33] chore(deps): bump @vueuse/integrations from 14.3.0 to 14.4.0 #63087
• [stable33] Fix npm audit #63091

3rdparty

• [stable33] build(deps): bump guzzlehttp/guzzle to 7.15.2 3rdparty#2522

activity

• [stable33] Update nextcloud/ocp dependency activity#2803
• [stable33] fix(expire): delete conditions for activity_expire_exclude_users activity#2807
• [stable33] feat: adding an option to exclude users from the acitivity log activity#2809
• chore: run composer cs:fix to satisfy php-cs (stable33) activity#2832
• [stable33] refactor(tests): migrate e2e test suite from Cypress to Playwright activity#2833
• [stable33] Update nextcloud/ocp dependency activity#2842
• [stable33] Fix npm audit activity#2843
• [stable33] Update nextcloud/ocp dependency activity#2852

app_api

• [stable33] Fix npm audit app_api#945

bruteforcesettings

• Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 bruteforcesettings#1187
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 bruteforcesettings#1189
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1195
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.7 to 6.0.8 bruteforcesettings#1207
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1217
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1223

circles

• chore(deps-dev): bump eslint from 9.39.4 to 9.39.5 circles#2677
• [stable33] ci(actions): Update workflow templates from organization template repository circles#2685
• [stable33] avoid duplicate purge on inheritance circles#2688
• [stable33] fix(local-controller): validate when trying adding member of type contact circles#2702
• [stable33] fix: Use global members limit as default for circle circles#2705
• [stable33] fix: add promoteToOwner method circles#2714
• [stable33] fix(circles): preserve group display names when creating circles circles#2723

files_downloadlimit

• [stable33] Fix npm audit files_downloadlimit#874
• chore(deps): Bump @nextcloud/vue from 9.8.2 to 9.9.0 files_downloadlimit#895
• chore(deps-dev): Bump eslint from 9.39.4 to 9.39.5 files_downloadlimit#897
• chore(deps): Bump vue from 3.5.39 to 3.5.40 files_downloadlimit#911
• chore(deps): Bump @nextcloud/dialogs from 7.4.0 to 7.4.1 files_downloadlimit#913
• [stable33] Fix npm audit files_downloadlimit#920

files_pdfviewer

• [stable33] ci: Bump vimeo/psalm from 5.25.0 to 6.16.1 in /vendor-bin/psalm files_pdfviewer#1447
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 files_pdfviewer#1477
• [stable33] ci(actions): Update workflow templates from organization template repository files_pdfviewer#1492
• [stable33] fix: Add explicit dependency for vue-loader@legacy files_pdfviewer#1497
• [stable33] chore: Add explicit dependency for terser-webpack-plugin files_pdfviewer#1504
• [stable33] Fix npm audit files_pdfviewer#1509
• [stable33] ci(actions): Update workflow templates from organization template repository files_pdfviewer#1510
• [stable33] chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 files_pdfviewer#1512

firstrunwizard

• chore(deps-dev): Bump sass from 1.101.0 to 1.101.3 firstrunwizard#2185
• chore(deps-dev): Bump stylelint from 17.14.0 to 17.14.1 firstrunwizard#2194

logreader

• chore(deps-dev): bump browserslist from 4.28.4 to 4.28.5 logreader#2122
• [stable33] Update nextcloud/ocp dependency logreader#2131
• chore(deps-dev): bump browserslist from 4.28.5 to 4.28.6 logreader#2143
• [stable33] Fix npm audit logreader#2150
• chore(deps): bump vue from 3.5.39 to 3.5.40 logreader#2155
• chore(deps-dev): bump browserslist from 4.28.6 to 4.28.7 logreader#2156
• [stable33] Update nextcloud/ocp dependency logreader#2158
• [stable33] Fix npm audit logreader#2164
• [stable33] Update nextcloud/ocp dependency logreader#2168

nextcloud_announcements

• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#678
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#685
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#688

notifications

• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3232
• [stable33] Fix npm audit notifications#3238
• [stable33] Update nextcloud/ocp dependency notifications#3242
• [stable33] build(deps): Bump vue from 3.5.39 to 3.5.40 notifications#3254
• [stable33] Update nextcloud/ocp dependency notifications#3257
• [stable33] Fix npm audit notifications#3260
• [stable33] Update nextcloud/ocp dependency notifications#3269
• [stable33] Update nextcloud/ocp dependency notifications#3274
• [stable33] Update nextcloud/ocp dependency notifications#3282

password_policy

• [stable33] Chore(deps-dev): Bump sass from 1.101.0 to 1.101.3 password_policy#1005
• [stable33] Chore(deps-dev): Bump sass from 1.101.3 to 1.102.0 password_policy#1010

photos

• [stable33] Update nextcloud/ocp dependency photos#3393
• [stable33] Chore(deps): Bump woltlab/webp-exif from 0.1.4 to 0.1.5 photos#3700
• [stable33] chore resolve dependency issues  photos#3707
• [stable33] fix(dav): properly handle metadata photos#3713

recommendations

• [stable33] ci(actions): Update workflow templates from organization template repository recommendations#1134
• [stable33] Fix npm audit recommendations#1139
• [stable33] Fix npm audit recommendations#1154

related_resources

• [stable33] ci(actions): Update workflow templates from organization template repository related_resources#1053
• [stable33] Update nextcloud/ocp dependency related_resources#1075
• [stable33] Update nextcloud/ocp dependency related_resources#1081

serverinfo

• [stable33] ci(actions): Update workflow templates from organization template repository serverinfo#1047
• [stable33] Update nextcloud/ocp dependency serverinfo#1055
• [stable33] Update nextcloud/ocp dependency serverinfo#1065
• [stable33] Update nextcloud/ocp dependency serverinfo#1078
• [stable33] fix: Mark update storage stats as time insensitive serverinfo#1086

text

• [stable33] Fix npm audit text#8894
• [stable33] Fix: Pasting from excel inserts an image instead of a formatted table text#8921
• [stable33] fix(collaboration): ellipsise user caret labels text#8925
• [stable33] Update nextcloud/ocp dependency text#8938
• [stable33] Fix npm audit text#8940
• [stable33] fix: update ShowImageModal to use fullUrl for show original image instead of preview text#8947
• [stable33] fix(editor): fix viewer header overlaying page content on mobile text#8954
• [stable33] fix(DirectEditing): check if user is enabled text#8960
• [stable33] fix(sync): reset #sending flag when no active connection on sendStepsNow text#8964
• [stable33] fix(attachments): check documentId matches text#8971
• [stable33] chore(test): direct editing permissions text#8974
• [stable33] fix: guard access to unavailable extensions when rich editing is off text#8983
• [stable33] fix(editor): set translate=yes for read-only editor text#8984
• fix(deps): update dependency yjs to ^13.6.32 (stable33) text#9000
• [stable33] Update nextcloud/ocp dependency text#9012
• [stable33] Fix npm audit text#9016
• fix(deps): update dependency mermaid to ^11.16.1 (stable33) text#9019
• [stable33] fix(lists): no margin-bottom for nested lists to prevent ugly gap text#9023

twofactor_nextcloud_notification

• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1423
• [stable33] Fix npm audit twofactor_nextcloud_notification#1427
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1441
• [stable33] build(deps): Bump vue from 3.5.39 to 3.5.40 twofactor_nextcloud_notification#1443
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1446
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1454

twofactor_totp

• [stable33] Fix npm audit twofactor_totp#1841

Pending PRs:

• @SebastianKrupinski
  • [stable33] fix: generate favourite icon without imagick svg support #58225
• @DerDreschner
  • [stable33] fix(DnsPinning): Ensure to always lookup based on FQDN #59157 🔁
• @blizzz
  • [stable33] fix(files_version): mtime confusion on milliseconds #62371 ✅
• @DerDreschner
  • [stable33] fix(Database): Use real idle-timer to prevent lastInsertId being reset on MariaDB/MySQL #62713 ✅
• @miaulalala
  • [stable33] fix(notifications): Require absolute links for support of desktop and mobile clients activity#2829
• @marcelklehr
  • [stable33] Fix: faces actions and add recognize e2e tests photos#3578 ✅
• @come-nc
  • [stable33] fix: Fix explode calls for path parsing updater#762 ✅
• @DerDreschner
  • [stable33] test(cypress): Improve stability of cypress test suite by fixing several issues #63097
• (generated)
  • [stable33] chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.1 #62311 ✅
  • [stable33] chore(deps-dev): bump @nextcloud/e2e-test-server from 0.5.0 to 0.5.1 #63064 ✅
  • [stable33] Fix npm audit app_api#958
  • [stable33] Chore(deps-dev): Bump eslint-plugin-cypress from 5.1.0 to 5.3.0 photos#3617 ✅
  • Chore(deps-dev): Bump @nextcloud/babel-config from 1.2.0 to 1.3.0 photos#3631 ✅
  • [stable33] Chore(deps-dev): Bump autoprefixer from 10.4.21 to 10.5.2 photos#3632 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested