v2.2.0

Release v2.2.0 of the Notes app for ownCloud 11 (11.0.0). The attached notes.tar.gz is G2 code-signed (ocsign) and verified with occ integrity:check-app on a stable-channel ownCloud 11 instance.

Added

• Show an empty-state placeholder in the content pane when no note is selected, instead of a blank white area.
• Full translation backfill across all supported languages (#561).

Changed

• Retire the Transifex sync; translations are now maintained in-repo (#558).

Fixed

• Unfavoriting a note no longer returns HTTP 500. When a note had no tags left after removing the favorite, getTagsForObjects() returns no entry for the note id, so in_array() was called with null and threw a TypeError. Guard the lookup with array_key_exists(), matching the pattern already used elsewhere in NotesService.
• Restore the empty AngularJS hash prefix so clicking a note in the sidebar opens it again. The AngularJS 1.8 upgrade changed the default hash prefix to !, which broke the #/notes/{id} sidebar links so only the first note (or the last-viewed note) could be opened.
• Render fenced code blocks with a background box for readability (#560).
• Correct zh-Hans "Favorite"/"New note" and unify Mongolian note terminology (#559).
• Remove duplicate de/de_DE empty-state translation keys (#562).

Security

• Upgrade vendored JS libraries to patched versions, resolving Trivy findings:
  • underscore 1.7.0 → 1.13.8 (CVE-2021-23358 critical, CVE-2026-27601 high)
  • angular 1.4.14 → 1.8.3 (CVE-2019-10768 high)
  • prism 1.0.1 → 1.30.0 (CVE-2021-23341, CVE-2021-32723 high)

Full changelog: https://github.com/owncloud/notes/compare/v2.1.2..v2.2.0