v28.0.8rc1

What's Changed

• [stable28] chore(deps): Bump deepdiver/zipstreamer by @susnux in #45896
• [stable28] fix(files): Properly handle denied ownership transfers by @backportbot in #45905
• [stable28] fix(files_versions): renaming file version when its not a string by @susnux in #46092
• [stable28] fix(security): Update code signing revocation list by @nextcloud-command in #46155
• [stable28] fix(caldav): When message is a reply compare the message sender not the recipient by @backportbot in #46145
• [stable28] fix(openapi): Regenerate OpenAPI after server changes by @nickvergessen in #46164
• [stable28] fix: avoid duplicate tag inserts by checking if the mapping exists already in db by @backportbot in #45994
• [stable28] Update favorites navigation list on folder renames by @backportbot in #46138
• [stable28] fix(files_sharing): Also set the expiration date timezone during validation by @backportbot in #46141
• [stable28] fix: getMountsForFileId may return an unordered list by @backportbot in #46214
• [stable28] feat(files): increase max copy-move concurrency to 5 by @backportbot in #46129
• [stable28] Don't trigger action when renaming by @backportbot in #46019
• [stable28] Rename openFileInfo to fileInfo by @backportbot in #45987
• build(deps-dev): Bump karma-coverage from 2.2.0 to 2.2.1 by @dependabot in #46241
• build(deps-dev): Bump @types/dockerode from 3.3.28 to 3.3.29 by @dependabot in #46243
• build(deps-dev): Bump cypress from 13.7.2 to 13.7.3 by @dependabot in #46245
• [stable28] fix(setupchecks): skip check when disk_free_space is disabled by @backportbot in #46223
• [stable28] fix(security): Update CA certificate bundle by @nextcloud-command in #46265
• [stable28] chore: upgrade @nextcloud/files and @nextcloud/sharing by @skjnldsv in #46236
• [stable28] fix(ExternalSharing): Handle template shares from external sources by @backportbot in #46280
• [stable28] fix(DAV): offset not applied by @blizzz in #46221
• [stable28] fix(settings): Use axios directly for health check to preven URL sanitizing by @backportbot in #45770
• [stable28] build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0 by @dependabot in #46239
• chore(deps-dev): bump jsdoc from 4.0.2 to 4.0.3 by @dependabot in #46336
• chore(deps-dev): bump ts-jest from 29.1.2 to 29.1.5 by @dependabot in #46338
• chore(deps-dev): bump mime from 4.0.1 to 4.0.4 by @dependabot in #46337
• chore(deps): bump dompurify from 3.1.4 to 3.1.6 by @dependabot in #46335
• [stable28] chore(mp3info): apply upstream patch for invalid array access by @backportbot in #46341
• [stable28] fix(FilesView): Update files view upon share creation/delete by @backportbot in #46118
• [stable28] fix(s3): Don't wait indefinitely for S3 to return by @backportbot in #46366
• [stable28] fix(SharingDetailsView): Prevent illegal unselection of read permissions by @backportbot in #46364
• [stable28] fix(SetupCheck): jsm test shall not give up with first no-response by @blizzz in #46302
• [stable28] fix(IntegrityCheck): Ensure the check is run if no results are available by @backportbot in #46297
• [stable28] fix(cron): Log long running jobs by @backportbot in #46191
• [stable28] sidebar: allow turning off tags view by default by @solracsf in #46316
• build(deps): Bump @nextcloud/calendar-availability-vue from 2.2.0 to 2.2.2 by @dependabot in #46238
• [stable28] fix(carddav): limit vcard size by @backportbot in #46313
• [stable28] fix(caldav): encode calendar URIs with umlauts for activities by @backportbot in #46011
• [stable28] delete background jobs by id when cleaning up by @backportbot in #45920
• [stable28] fix: don't use custom certificate bundle if no customer certificates are configured by @backportbot in #46067
• [stable28] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root by @backportbot in #45955
• [stable28] fix(files_trashbin): Make files view registering an init script by @susnux in #46417
• [stable28] fix(workflows): Fix file systemtag cache by @backportbot in #46411
• [stable28] Fix npm audit by @nextcloud-command in #45891
• [stable28] perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP by @backportbot in #46394
• [stable28] test: run tests in child process by @kesselb in #46430
• [stable28] fix(caldav): limit vevent size by @backportbot in #46421
• [stable28] fix(theming): Don't reset the cachebuster value when we reset theming by @backportbot in #46433
• [stable28] fix(Session): avoid race conditions on clustered setups by @backportbot in #46436
• [stable28] fix: Update Nextcloud libraries by @backportbot in #46422
• [stable28] fix: Do not log an error when connecting to SFTP without a logged in user by @backportbot in #46060
• [stable28] feat: don't count failed CSRF as failed login attempt by @backportbot in #46442
• [stable28] fix: allows admin to edit global credentials by @backportbot in #46090
• [stable28] fix: don't return null for SharedStorage::getWrapperStorage with share recursion by @backportbot in #44323
• [stable28] fix(theming): Conitionally disable blur filter for performance by @backportbot in #46431
• 28.0.8 RC1 by @Altahrim in #46390

Full Changelog: v28.0.7...v28.0.8rc1

v29.0.3

What's Changed

• [stable29] fix(theming): replace standard generic package icon by material design by @backportbot in #45577
• [stable29] fix(caldav): automatically delete outdated scheduling objects by @backportbot in #45641
• [stable29] fix(session): Do not update authtoken last_check for passwordless by @backportbot in #45602
• [stable29] fix(INavigationManager): Fix psalm alias not set in the right place by @backportbot in #45645
• [stable29] fix(core): Add missing null value possibility to Resource and Reference richObject by @backportbot in #45644
• [stable29] fix(files_sharing): usage of NcTextField in SelectShareFolderDialogue by @backportbot in #45690
• [stable29] Avoid updating the same oc_authtoken row twice by @backportbot in #45348
• [stable29] fix: Update @nextcloud/files to fix public link shares by @backportbot in #45601
• [stable29] fix(core): unsupported browser redirect url by @backportbot in #45621
• [stable29] fix(federatedfilesharing): import external federated share script by @backportbot in #45675
• [stable29] fix(appconfig): format app values by @backportbot in #44894
• [stable29] fix(files): Display selected files count by @backportbot in #44909
• [stable29] feat: Add legal notice and privacy policy links to help page by @backportbot in #44988
• [stable29] fix: regression with updating read-only config by @backportbot in #44927
• [stable29] fix(files): Don't fail if dir exists by @backportbot in #45590
• [stable29] fix: register DI alias for IFileAccess by @backportbot in #45476
• [stable29] feat: Add forbidden_filename_characters to JSConfig for use in frontend libraries by @backportbot in #45379
• [stable29] fix(files): Only execute default action if there is an action to perform by @backportbot in #45662
• [stable29] fix(files): Close sidebar and update fileid when current node is deleted by @backportbot in #45659
• [stable29] CalDAV fix search with limit and time range by @backportbot in #45566
• [stable29] fix(settings): show warning for indexToReplace as part of missing indices by @backportbot in #44675
• [stable29] fix(dav): Rate limit address book creation by @backportbot in #45543
• [stable29] unmark deleted users if their last login date is more recent than deleted date by @backportbot in #45587
• [stable29] fix(files): Ensure active file list entry is highlighted by @backportbot in #45597
• [stable29] fix(files): Make sure files are opened when using open-in-files action(s) or at lease are scrolled into view by @backportbot in #45728
• [stable29] ci(eol): update workflow from template by @st3iny in #45734
• [stable29] fix(dav): Don't log access control as error by @backportbot in #45756
• fix(settings): Use axios directly for health check to preven URL sanitizing by @susnux in #45765
• [stable29] fix: Autodetect legacy filekey instead of trusting the header for legacy header by @backportbot in #45778
• [stable29] fix(Mailer): Allow to enforce strict email format by @backportbot in #45660
• [stable29] fix(search): tags redirect route by @backportbot in #45791
• [stable29] fix: Only list remnants as disabled if option is enabled by @backportbot in #45773
• [stable29] fix(files): reset menu pos when opening in grid mode by @backportbot in #45666
• [stable29] fix(caldav): event links in shared calendar notifications by @backportbot in #45800
• [stable29] fix(files): handling numbered type owner name & id by @sanskar-soni-9 in #45764
• [stable29] fix(Session): avoid password confirmation on SSO by @backportbot in #45705
• [stable29] fix(cron): Log long running jobs by @backportbot in #45813
• [stable29] Use isRetryable to catch retryable exceptions by @backportbot in #45808
• [stable29] fix(files_sharing): fix parsing of remote shares by @backportbot in #45816
• [stable29] fix(files): also trigger new tab on file name middle click by @backportbot in #45826
• [stable29] fix(Token): make new scope future compatible by @blizzz in #45809
• [stable29] test: add tests for ProfilePageController by @backportbot in #45821
• [stable29] fix(auth): Keep redirect URL during 2FA setup and challenge by @backportbot in #44977
• [stable29] fix(files): do not rely on unique fileid by @backportbot in #45837
• [stable29] fix(ObjectStore): Fix regression when hostname is empty by @backportbot in #45840
• [stable29] get child ids for folder in a separate query during move by @backportbot in #45851
• [stable29] 44032 fix show new shares without refresh by @backportbot in #45304
• [stable29] feat: add option to disable scanner transactions by @backportbot in #45856
• [stable29] fix(files): Ignore right click for default action by @backportbot in #45862
• [stable29] Show non writable folders during move or copy by @backportbot in #45864
• [stable29] fix(comments): Use proper icon components instead of icon classes to fix dark mode by @backportbot in #45871
• 29.0.3 RC1 by @blizzz in #45795
• [stable29] fix(deleteAction): Bump up delete requests concurrency to 5 by @backportbot in #45907
• [stable29] ci: use precise ref for 3rdparty check by @backportbot in #45928
• 29.0.3 RC2 by @blizzz in #45913
• [stable29] fix(files): correctly import WebDAV client in files store by @backportbot in #45942
• [stable29] fix(dav): Limit number of UPDATES for sync token created_at by @backportbot in #45991
• 29.0.3 RC3 by @skjnldsv in #46008
• [stable29] fix: move repair mimetype repair step to the expensive steps by @backportbot in #45966
• [stable29] fix(theming): also apply enforced theme for guests by @backportbot in #45904
• 29.0.3 RC4 by @blizzz in #46032
• [stable29] fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION by @blizzz in #46075
• 29.0.3 by @blizzz in #46063

Full Changelog: v29.0.2...v29.0.3

v28.0.7

What's Changed

• [stable28] fix(contactsinteraction): Allow vCard download by @backportbot in #45286
• [stable28] feat: Add back searching in disabled user list by @backportbot in #45478
• [stable28] fix(files): properly reset preview component by @backportbot in #45432
• [stable28] fix(files): Implement SortingService to fix sorting of files by @backportbot in #45533
• [stable28] fix(contactsmenu): empty content margin by @backportbot in #45426
• [stable28] feat: Limit email input to 255 chars by @backportbot in #45289
• [stable28] fix: Mark more configs as sensitive by @backportbot in #45442
• [stable28] Fix header menu icon color by @backportbot in #45552
• [stable28] fix(session): Do not update authtoken last_check for passwordless by @backportbot in #45063
• [stable28] fix(userstatus): catch unique constrain violation on revert by @backportbot in #45205
• [stable28] perf(db): Sort data for IN before chunking by @backportbot in #45214
• [stable28] fix(theming): replace standard generic package icon by material design by @backportbot in #45578
• [stable28] fix(files): Don't fail if dir exists by @backportbot in #45591
• [stable28] fix(groups): allows to save group names with more than 64 characters by @backportbot in #45368
• [stable28] fix(files): Ensure active file list entry is highlighted by @backportbot in #45598
• [stable28] fix(theming): replace standard generic package icon by material design by @backportbot in #45610
• [stable28] Expose subscription calendars by @backportbot in #45225
• [stable28] fix: Refresh file picker on folder creation by @Pytal in #45575
• [stable28] fix: Update @nextcloud/files to fix public link shares by @backportbot in #45600
• [stable28] Avoid updating the same oc_authtoken row twice by @backportbot in #45349
• [stable28] fix(memcache): remove double $$ to fix error by @backportbot in #44980
• [stable28] unmark deleted users if their last login date is more recent than deleted date by @backportbot in #45588
• [stable28] fix(dav): Add occ command to fix missing caldav sync tokens by @backportbot in #44197
• [stable28] fix: delete user credentials stored in storages_credentials when user gets deleted by @backportbot in #45362
• [stable28] CalDAV fix search with limit and time range by @backportbot in #45567
• [stable28] feat: support "s3-accelerate" endpoint by @backportbot in #45059
• [stable28] fix(caldav): automatically delete outdated scheduling objects by @backportbot in #45640
• [stable28] fix(core): unsupported browser redirect url by @backportbot in #45622
• [stable28] fix(CalDAV): remove UNKNOWN from room / resource consideration by @backportbot in #45052
• [stable28] fix(files): Only execute default action if there is an action to perform by @backportbot in #45663
• [stable28] fix(INavigationManager): Fix psalm alias not set in the right place by @backportbot in #45646
• [stable28] fix(core): Add missing null value possibility to Resource and Reference richObject by @backportbot in #45643
• [stable28] fix(dav): Add retention time to sync token cleanup by @backportbot in #44398
• [stable28] fix(files_sharing): usage of NcTextField in SelectShareFolderDialogue by @backportbot in #45689
• [stable28] fix(federatedfilesharing): import external federated share script by @backportbot in #45674
• [stable28] fix(files): Display selected files count by @backportbot in #44908
• [stable28] fix: Fix truncation on public page by @backportbot in #44990
• [stable28] fix(unifiedSearch): Prevent broken avatars for federated users by @backportbot in #45028
• [stable28] feat: add request id as comment to all queries by @backportbot in #44958
• [stable28] fix: forbid moving a folder into a subfolder of itself by @backportbot in #45528
• [stable28] fix(files): Fix ownership transfer encrypted files detection by @backportbot in #45110
• [stable28] fix(OC_Image): Set correct return type for exif_imagetype stub by @backportbot in #45198
• [stable28] fix(sharing): Avoid (dead)locking during orphan deletion by @backportbot in #44010
• [stable28] fix: regression with updating read-only config by @backportbot in #44926
• [stable28] fix: consider all paths the user has for a share source when considering max permissions by @backportbot in #45294
• [stable28] fix(dav): Rate limit address book creation by @backportbot in #45542
• [stable28] fix(files): Make sure files are opened when using open-in-files action(s) or at lease are scrolled into view by @backportbot in #45727
• [stable28] ci(eol): update workflow from template by @st3iny in #45735
• [stable28] fix(dav): Don't log access control as error by @backportbot in #45758
• [stable28] fix(files): Close sidebar and update fileid when current node is deleted by @backportbot in #45658
• [stable28] fix: avoid douple expireDate parsing by @backportbot in #44912
• [stable28] fix: Autodetect legacy filekey instead of trusting the header for legacy header by @backportbot in #45777
• [stable28] Update psalm-baseline.xml by @nextcloud-command in #45719
• [stable28] fix(search): tags redirect route by @backportbot in #45790
• [stable28] fix(Mailer): Allow to enforce strict email format by @backportbot in #45793
• [stable28] fix(caldav): event links in shared calendar notifications by @backportbot in #45799
• [stable28] fix(files): reset menu pos when opening in grid mode by @backportbot in #45665
• [stable28] fix(files): handling numbered type owner name & id by @backportbot in #45803
• [stable28] fix(Session): avoid password confirmation on SSO by @backportbot in #45704
• [stable28] fix(files_sharing): fix parsing of remote shares by @backportbot in #45817
• [stable28] fix(files): also trigger new tab on file name middle click by @backportbot in #45825
• [stable28] fix: Only list remnants as disabled if option is enabled by @backportbot in #45774
• [stable28] test: add tests for ProfilePageController by @backportbot in #45823
• [stable28] 44032 fix show new shares without refresh by @backportbot in #45303
• [stable28] fix(files): do not rely on unique fileid by @backportbot in #45836
• [stable28] Use isRetryable to catch retryable exceptions by @backportbot in #45807
• [stable28] get child ids for folder in a separate query during move by @backportbot in #45850
• [stable28] feat: add option to disable scanner transactions by @backportbot in #45857
• [stable28] fix(ObjectStore): Fix regression when hostname is empty by @backportbot in #45839
• [stable28] Respect empty expiryDate value in server by @backportbot in #45604
• [stable28] fix(files): Ignore right click for default action by @backportbot in #45863
• [stable28] fix(files_sharing): Add one string for every share type + fix(sharingDetails): Show correct share target by @fenn-cs in #45024
• [stable28] Show non writable folders during move or copy by @backportbot in #45865
• 28.0.7 RC1 by @blizzz in #45796
• [stable28] fix(comments): Use proper icon components instead of icon classes to fix dark mode by ...

v27.1.11

What's Changed

• fix: Return a file element even if the rendered list does not contained one by @juliushaertl in #45121
• [stable27] feat: Limit email input to 255 chars by @backportbot in #45290
• [stable27] Expose subscription calendars by @backportbot in #45232
• [stable27] fix(dav): Add occ command to fix missing caldav sync tokens by @backportbot in #44196
• [stable27] CalDAV fix search with limit and time range by @backportbot in #45568
• [stable27] fix(session): Do not update authtoken last_check for passwordless by @backportbot in #45062
• [stable27] fix(contactsinteraction): Allow vCard download by @backportbot in #45444
• [stable27] fix(groups): allows to save group names with more than 64 characters by @backportbot in #45369
• [stable27] Avoid updating the same oc_authtoken row twice by @backportbot in #45351
• [stable27] perf(db): Sort data for IN before chunking by @backportbot in #45213
• [stable27] fix(core): unsupported browser redirect url by @backportbot in #45624
• [stable27] fix(dialogs): Make sure conflict dialog is loaded before adding conflicts by @mejo- in #45664
• [stable27] fix(dav): Add retention time to sync token cleanup by @backportbot in #44397
• [stable27] fix: Mark more configs as sensitive by @backportbot in #45441
• [stable27] feat: add request id as comment to all queries by @backportbot in #44957
• [stable27] fix(sharing): Avoid (dead)locking during orphan deletion by @backportbot in #44009
• [stable27] fix(caldav): automatically delete outdated scheduling objects by @backportbot in #45639
• [stable27] unmark deleted users if their last login date is more recent than deleted date by @backportbot in #45589
• [stable27] fix: forbid moving a folder into a subfolder of itself by @backportbot in #45527
• [stable27] fix: Fix truncation on public page by @backportbot in #44991
• [stable27] fix(dav): Rate limit address book creation by @backportbot in #45544
• [stable27] fix(dav): Don't log access control as error by @backportbot in #45757
• [stable27] ci(eol): update workflow from template by @st3iny in #45736
• [stable27] fix: Autodetect legacy filekey instead of trusting the header for legacy header by @backportbot in #45776
• [stable27] fix: failing tests for setup check by @miaulalala in #45762
• Manual/backport/44910/stable27 by @fenn-cs in #45749
• [stable27] Update psalm-baseline.xml by @nextcloud-command in #43776
• [stable27] fix(caldav): event links in shared calendar notifications by @backportbot in #45798
• fix(ShareEntryLinkedList): Correctly propagate share data by @fenn-cs in #45828
• [stable27] fix(Session): avoid password confirmation on SSO by @backportbot in #45703
• [stable27] Use isRetryable to catch retryable exceptions by @backportbot in #45806
• [stable27] fix(ObjectStore): Fix regression when hostname is empty by @backportbot in #45838
• [stable27] test: add tests for ProfilePageController by @backportbot in #45824
• [stable27] get child ids for folder in a separate query during move by @backportbot in #45849
• [stable27] fix(cron): Log long running jobs by @backportbot in #45855
• [27] feat: add option to disable scanner transactions by @icewind1991 in #45681
• [stable27] Fix npm audit by @nextcloud-command in #45732
• 27.1.11 RC1 by @blizzz in #45797
• [stable27] fix(deleteAction): Bump up delete requests concurrency to 5 by @SystemKeeper in #45908
• 27.1.11 RC2 by @blizzz in #45915
• [stable27] ci: use precise ref for 3rdparty check by @backportbot in #45926
• [stable27] fix(dav): Limit number of UPDATES for sync token created_at by @backportbot in #45989
• 27.1.11 RC3 by @skjnldsv in #46005
• [stable27] fix(Token): add FILESYSTEM scope with SCOPE_SKIP_PASSWORD_VALIDATION by @backportbot in #46087
• 27.1.11 by @blizzz in #46065

Full Changelog: v27.1.10...v27.1.11

v29.0.3rc4

What's Changed

• [stable29] fix: move repair mimetype repair step to the expensive steps by @backportbot in #45966
• [stable29] fix(theming): also apply enforced theme for guests by @backportbot in #45904
• 29.0.3 RC4 by @blizzz in #46032

Full Changelog: v29.0.3rc3...v29.0.3rc4

v28.0.7rc4

What's Changed

• [stable28] fix: move repair mimetype repair step to the expensive steps by @backportbot in #46031
• [stable28] fix(theming): also apply enforced theme for guests by @backportbot in #45903
• 28.0.7 RC4 by @blizzz in #46033

Full Changelog: v28.0.7rc3...v28.0.7rc4

v29.0.3rc3

• [stable29] fix(files): correctly import WebDAV client in files store #45942
• [stable29] fix(dav): Limit number of UPDATES for sync token created_at #45991

v28.0.7rc3

• [stable28] fix(dav): Limit number of UPDATES for sync token created_at #45990

v27.1.11rc3

• [stable27] ci: use precise ref for 3rdparty check #45926
• [stable27] fix(dav): Limit number of UPDATES for sync token created_at #45989

v29.0.3rc2

What's Changed

• [stable29] fix(deleteAction): Bump up delete requests concurrency to 5 by @backportbot in #45907
• [stable29] ci: use precise ref for 3rdparty check by @backportbot in #45928
• 29.0.3 RC2 by @blizzz in #45913

Full Changelog: v29.0.3rc1...v29.0.3rc2