[stable32] 32.0.9 RC1

[nextcloud-bot]

Nextcloud 32.0.9

server

• [stable32] fix: generate favourite icon without imagick svg support #58224
• [stable32] fix(sharing): do not notify remote if owner and sharee are local users #58720
• [stable32] feat: Add memcache_customprefix #58812
• [stable32] Fix federated reshares #58900
• [stable32] chore(deps-dev): Bump cypress-split from 1.24.28 to 1.24.31 #59132
• [stable32] chore(deps-dev): Bump dockerode and @types/dockerode #59133
• [stable32] chore(deps): Bump moment-timezone from 0.6.0 to 0.6.1 #59137
• [stable32] fix(oauth2): Do not store the code in throttle metadata #59154
• [stable32] fix: Fix user in Tags class, do not depend upon session #59237
• [stable32] chore(deps-dev): Bump tar from 7.5.11 to 7.5.13 #59286
• [stable32] fix(chunkedUploads): Ensure max parallel count is at least 1 #59301
• [stable32] fix: use unjailed source path when moving jailed files #59309
• [stable32] fix: cache validation of system keys #59315
• [stable32] fix(weather_status): add all missing met.no symbol codes to weatherOptions #59347
• [stable32] fix(filesDrop): drag-and-drop folder upload #59367
• [stable32] fix(zip): Fix warning when downloading Zip file #59384
• [stable32] fix: update email button text to 'Open shared item' #59395
• [stable32] fix(lib): templates core path detection #59400
• [stable32] docs(webhook_listeners): adapt codeowners #59405
• [stable32] fix(file-search): use default limit to search query if not provided on request body #59408
• [stable32] fix(settings): do not show admin section container if empty #59428
• [stable32] chore(deps): Bump lodash from 4.17.23 to 4.18.1 #59445
• chore(deps): Bump libphonenumber-js from 1.12.40 to 1.12.41 #59446
• [stable32] chore(deps-dev): Bump @zip.js/zip.js from 2.8.23 to 2.8.26 #59447
• [stable32] chore(deps-dev): Bump sass from 1.98.0 to 1.99.0 #59448
• [stable32] feat(talk): Allow to create conversations that are meetings #59478
• [stable32] fix(theming): Fix favicon and touchicon ratios #59480
• [stable32] chore: Remove incorrect resource typing in ILDAPProvider #59485
• [stable32] fix(settings): hide list of webauthn devices if empty #59490
• [stable32] fix(files): properly handle dropped files on subfolders #59509
• [stable32] fix(trashbin): keep cache and db consistent #59513
• [stable32] fix(updater): Make "maintenance mode kept active" more obvious #59523
• [stable32] build(deps): bump phpseclib/phpseclib from 2.0.47 to 2.0.52 #59527
• [stable32] Only mask the permissions for the users home directory for public shares #59553
• [stable32] build(deps): bump aws/aws-sdk-php to 3.376 #59560
• [stable32] docs(workflowengine): Remove reference of removed method #59567
• chore(deps-dev): Bump webpack from 5.105.4 to 5.106.1 #59583
• [stable32] chore(deps): Bump browserslist-useragent-regexp from 4.1.3 to 4.1.4 #59584
• [stable32] chore(deps-dev): Bump msw from 2.12.13 to 2.13.2 #59585
• [stable32] test: Add integration test to confirm a user can not add themselves t… #59603
• [stable32] fix(apppasswords): Require password also on delete and update #59607
• [stable32] fix(sharing): Don't give a reason when share from disabled user is no… #59611
• [stable32] fix(notifications): Require absolute links for support of desktop and mobile clients #59614
• [stable32] feat(settings): Log AI config changes to audit log #59620
• [stable32] chore: update haze to 2.2.1 #59621
• [stable32] test(integration): Add integration test for accept share #59637
• [stable32] fix(Util): getScripts also need to reorder core translations #59641
• [stable32] fix(files_external): ignore unsatisfied optional dependencies #59642
• [stable32] perf: don't fetch child mounts when getting node parent #59644
• [stable32] fix(files): remove error message when closing the "Open locally" dialog #59658
• [stable32] feat(recent-files): allow configuring image grouping #59666
• [stable32] fix(files): add missing table header for actions column #59675
• [stable32] Restore missing apps on upgrade #59685
• [stable32] build(deps): bump phpseclib/phpseclib to 2.0.53 #59689
• [stable32] chore(deps): Bump @nextcloud/auth from 2.5.3 to 2.6.0 #59705
• [stable32] chore(deps-dev): Bump @cypress/webpack-preprocessor from 7.0.2 to 7.1.0 #59706
• [stable32] chore(deps-dev): Bump webpack from 5.106.1 to 5.106.2 #59707
• [stable32] chore(deps): Bump dompurify from 3.3.3 to 3.4.0 #59708
• chore(deps-dev): Bump puppeteer from 24.39.1 to 24.41.0 #59709
• [stable32] chore(deps-dev): Bump msw from 2.13.3 to 2.13.4 #59710
• [stable32] fix(DB): Ignore intentionally missing fs_storage_path_prefix index on PostgreSQL #59724
• [stable32] fix(profile): normalize profile visibility #59733
• [stable32] Fix app name not translated in the title of public pages #59755
• [stable32] fix(oauth2): Add missing urlencode for failure redirection #59771
• [stable32] fix: Reduce the mixups between apptokens and session ids #59774
• [stable32] fix: Add missing PasswordConfirmationRequired attributes #59788
• [stable32] hide share token if share has more permissions than the current user #59794
• [stable32] fix(security): Update code signing revocation list #59819
• [stable32] fix(s3): ignore prefixes with repeating delimiters #59828
• [stable32] chore: Improve SVG handling in link previews #59837
• [stable32] fix(ImipService): Refactor IMipService to improve performance #59846
• [stable32] fix(dav): unify content disposition header escaping #59851
• [stable32] fix(dav): do not list intermediate files #59853

3rdparty

• [stable32] build(deps): bump phpseclib/phpseclib from 2.0.47 to 2.0.52 3rdparty#2362
• [stable32] build(deps): bump aws/aws-sdk-php to 3.376 3rdparty#2371
• [stable32] build(deps): bump phpseclib/phpseclib to 2.0.53 3rdparty#2385

activity

• [stable32] Fix npm audit activity#2440
• [stable32] fix: only write activites for actual public uploads activity#2459
• [stable32] Update nextcloud/ocp dependency activity#2475
• [stable32] Update nextcloud/ocp dependency activity#2505
• [stable32] Fix npm audit activity#2507
• [stable32] Update nextcloud/ocp dependency activity#2518
• [stable32] Update nextcloud/ocp dependency activity#2526
• [stable32] Fix npm audit activity#2529

bruteforcesettings

• [stable32] Fix npm audit bruteforcesettings#1021
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0-rc.9 bruteforcesettings#1050
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1054
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.5 to 6.0.6 bruteforcesettings#1059
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1062

circles

• [stable32] Update nextcloud/ocp dependency circles#2414
• [stable32] fix(mail): send internal link circles#2441
• [stable32] Update nextcloud/ocp dependency circles#2447

files_pdfviewer

• [stable32] Fix npm audit files_pdfviewer#1394
• [stable32] Fix handling of "enableScripting" data attribute files_pdfviewer#1397
• [stable32] Allow PDF Forms calculations files_pdfviewer#1410
• chore(deps-dev): Bump adm-zip from 0.5.16 to 0.5.17 files_pdfviewer#1415

logreader

• [stable32] Update nextcloud/ocp dependency logreader#1963
• [stable32] Fix npm audit logreader#1966
• [stable32] Update nextcloud/ocp dependency logreader#1989
• [stable32] Fix npm audit logreader#2000

nextcloud_announcements

• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#601
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#605
• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#609
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#611

notifications

• [stable32] Fix npm audit notifications#2873
• [stable32] build(deps): Bump vue from 3.5.30 to 3.5.31 notifications#2882
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#2885
• [stable32] build(deps): Bump vue from 3.5.31 to 3.5.32 notifications#2891
• [stable32] Fix npm audit notifications#2894
• [stable32] build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0-rc.9 notifications#2899
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#2904
• [stable32] Update nextcloud/ocp dependency notifications#2909
• [stable32] Update nextcloud/ocp dependency notifications#2912
• [stable32] Update nextcloud/ocp dependency notifications#2918
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#2924
• [stable32] fix(mail): Only render links when they are absolute urls notifications#2931
• [stable32] fix(push): Limit user output notifications#2933
• [stable32] Update nextcloud/ocp dependency notifications#2939

password_policy

• [stable32] fix: Check cookie logged in event password_policy#932

photos

• [stable32] Update nextcloud/ocp dependency photos#3453
• [stable32] Update nextcloud/ocp dependency photos#3469

privacy

• Chore(deps): Bump @nextcloud/vue from 8.35.3 to 8.37.0 privacy#1284
• Chore(deps-dev): Bump phpunit/phpunit from 9.6.19 to 9.6.34 privacy#1308
• [stable32] ci(actions): Update workflow templates from organization template repository privacy#1314
• [stable32] ci(actions): Update workflow templates from organization template repository privacy#1318

serverinfo

• [stable32] Update nextcloud/ocp dependency serverinfo#962

survey_client

• [stable32] Update nextcloud/ocp dependency survey_client#386
• [stable32] [master] Update nextcloud/ocp dependency survey_client#396
• [stable32] ci(workflows): Update workflows and add couple of new standard ones survey_client#398
• [stable32] Chore(deps-dev): Bump nextcloud/coding-standard from 1.3.2 to 1.4.0 survey_client#399
• [stable32] ci(actions): Update workflow templates from organization template repository survey_client#405

text

• [stable32] Update nextcloud/ocp dependency text#8397
• chore(deps): update dependency rollup-plugin-webpack-stats to ^2.1.11 (stable32) text#8414
• [stable32] fix(checklist): don't cross out checked list items text#8425
• [stable32] Optimize cleanup job text#8444
• chore(deps): update dependency vite to ^7.3.2 (stable32) text#8458
• fix(deps): update dependency @nextcloud/vue to ^8.37.0 (stable32) text#8459
• fix(deps): update dependency markdown-it to ^14.1.1 (stable32) text#8460
• fix(deps): update dependency yjs to ^13.6.30 (stable32) - autoclosed text#8461
• [stable32] Update nextcloud/ocp dependency text#8462
• [stable32] fix(menubar): lower z-index: on top of document content, but below modals text#8470
• [stable32] Update nextcloud/ocp dependency text#8488
• [stable32] fix(deps): bump phpunit and php-cs-fixer text#8495
• [stable32] fix: always validate share token if provided text#8501

twofactor_nextcloud_notification

• [stable32] Fix npm audit twofactor_nextcloud_notification#1256
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1263
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1274
• [stable32] Fix npm audit twofactor_nextcloud_notification#1280
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1285
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1286
• [stable32] Fix npm audit twofactor_nextcloud_notification#1290

updater

• [stable32] fix: verify integrity with URL override but allow to disable if needed updater#725
• [stable32] fix: broken upgrade via --url flag updater#743
• [stable32] feat(signature): allow to provide custom signature updater#747

viewer

• [stable32] fix: Try fixing too late handler registration for file actions viewer#3130
• chore(deps): update dependency dompurify to v3.4.0 [security] (stable32) viewer#3143
• [stable32] ci(actions): Update workflow templates from organization template repository viewer#3144
• [stable32] fix(ImageEditor): urldecode source name viewer#3160

Pending PRs:

• @CarlSchwan
  • [stable32] fix(Propagator): rollback transaction if it fails #58131 ✅
• @nfebe
  • [stable32] fix(share): Set expiration time to end of day (23:59:59) #58709 ✅
  • [stable32] fix(sharing): Align userid config key in UserPlugin with Manager #58988 ✅
• @DerDreschner
  • [stable32] fix(DnsPinning): Ensure to always lookup based on FQDN #59158 🔁
• @icewind1991
  • [stable32] fix: allow renaming files with just update permissions #59242 🔁
• @backportbot
  • [stable32] dav: Fix fatal error when ORGANIZER is missing in CalDAV schedule #59349
  • [stable32] fix: duplicate dashboard widget #59411 ✅
• @icewind1991
  • [stable32] fix: fix LazyUserFolder::getMountPoint #59653
• @benjaminfrueh
  • [stable32] fix(files): only disable template creation when both skeleton directories are empty #59750 ✅
• @hamza221
  • [stable32] test(integration): add tests for calendar delegation #59762 ✅
  • [stable32] fix(encryption): limit oprhaned keys scan to one user #59810 ✅
• @kesselb
  • [stable32] Avoid undefined array key sharing request #59833
• @ArtificialOwl
  • [stable32] avoid desync with memberships circles#2364 ✅
• @skjnldsv
  • [stable32] fix: secondary owncloud custom group admin permissions not migrated circles#2426 ✅
• @marcelklehr
  • [stable32] feat(user_ldap): Add config for partial search compatibility with ActiveDirectory #58280
• @susnux
  • [stable32] fix(files): do not show convert-file action in view-only shares #59872 ✅
• (generated)
  • [stable32] chore(deps): Bump handlebars from 4.7.8 to 4.7.9 #59287 ✅
  • [stable32] 32.0.9 RC1 #59730

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested

[Altahrim]

Required PRs:

• [stable32] chore: Improve SVG handling in link previews #59837
• [stable32] fix: always validate share token if provided text#8501
• [stable32] fix(dav): unify content disposition header escaping #59851
• [stable32] Avoid undefined array key sharing request #59833
• [stable32] fix(files): do not show convert-file action in view-only shares #59872
• [stable32] fix: update shares handling circles#2455

Nice to have PRs:

• [stable32] test(integration): add tests for calendar delegation #59762
• [stable32] fix(sharing): do not notify remote if owner and sharee are local users #58720
• [stable32] fix(encryption): limit oprhaned keys scan to one user #59810