Nextcloud Server 34.0.5 → 35.0.2
3 releases · 3 breaking changes · 18 security fixes · 0 advisories fixed
18security3breaking2deprecated48feature49fix
Breaking changes
- breaking Remove usage of static vars or properties (server#59002) in 35.0.0
- breaking Revert “fix(installer): re-enable version-incompatible apps after appstore update” (server#63773) in 35.0.0
- breaking [master] fix(composer): Remove trailing comma breaking composer.json parsing (viewer#3271) in 35.0.0
Security changes
- security [master] fix(security): Update code signing revocation list (server#60705) in 35.0.0
- security Fix(security): don’t propagate ValueError from Crypto::decrypt() fallback (server#60735) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#60992) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#61088) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#61227) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#61268) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#61423) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#61900) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#62019) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#62166) in 35.0.0
- security [master] fix(security): Update CA certificate bundle (server#62256) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#62632) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#62857) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#63142) in 35.0.0
- security [master] fix(security): Update CA certificate bundle (server#63231) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#63335) in 35.0.0
- security [master] fix(security): Update code signing revocation list (server#63485) in 35.0.0
- security Fix(security): Update code signing revocation list (server#64051) in 35.0.0
Deprecations
- deprecated Deprecate long, non-lazy app config and user config (server#65012) in 35.0.2
- deprecated Fix deprecations in tests (server#61140) in 35.0.0
Every release in between
fixFix(sharing): Use link_defaultExpDays for default expiration in web UI (server#64322)
fixFix(files_sharing): name the parent folder in inherited unshare actions (server#64349)
fixFix(files_sharing): cap share presets to the permissions the resharer (server#64482)
fixFix(encryption): keep version and size in sync for files not in the cache (server#64485)
featurePerf(setupchecks): Don’t load all tasks to calculate stats (server#64609)
fixFix: forbid newline characters in filenames (server#64613)
fixFix: correct cast ttl to int in KeyValueCache (server#64615)
featureAdd API to generate system report section (server#64631)
fixFix(auth): keep remember-me cookies pointing at a live session token (server#64649)
fixFix: never block simple renames in SharesPlugin (server#64681)
featureFeat(upgrade): localize app names if available on upgrade page (server#64693)
fixFix(files): keep deleting live photo peers after a missing one (server#64699)
fixFix(files_sharing): render share suggestion avatar when provided (server#64704)
fixFix(setupcheck): Print verbose info to allow finding out memory issues (server#64751)
featureFeat: add additional metadata to node webhooks (server#64847)
fixFix(EmojiHelper): exclude non-latin letters from EmojiHelper (server#64866)
featureFeat: make comment events webhook compatible (server#64868)
fixFix(Sharing): Fix recipient IDs on 32-bits (server#64870)
fixFix(files_external): preserve boolean mount options (server#64879)
fixFix(SchemaChecker): don’t block on unexpected-table finding (server#64891)
fixFix(adminaudit): Allow named placeholders via CriticalActionPerformedEvent (server#64895)
fixFix(cache): Check if $entry[‘fileid’] exists (server#64902)
fixFix(user_ldap): show %uid instead of %%uid in the login filter hint (server#64913)
fixFix: Make all app versions stable (server#64915)
featurePerf(files): Only match search results against caches of their storage (server#64916)
featureFeat(files-search): Add push down negation optimizer (server#64923)
featureFeat: Add code integrity background job (server#64974)
deprecatedDeprecate long, non-lazy app config and user config (server#65012)
featurePerf: Optimize deleting the list of invalid shares (server#65137)
featureFeat: Add IAccountScopedSearchProvider (server#65313)
featureFeat: Build js after merge (activity#2998)
featurePerf: Cache public share (activity#3004)
featurePerf: Use startActivityTransaction in a few more places (activity#3016)
featureFeat: Build js after merge (circles#2978)
featureFeat(workflow): Add fixup block (circles#2989)
featureFeat: Bump pdf js (files_pdfviewer#1567)
featureFeat: expose Nextcloud AIO version in info API (serverinfo#1189)
featurePerf: get all markdown files in one SQL query (text#9291)
featurePerf(session): fetch document only once in SessionMiddleware (text#9295)
featureFeat(edit): collaborate in other apps(deck) (text#9325)
+102 more items in the release notesfixFix(Sharing): Prevent truncation of node IDs (server#64140)
fixFix(trashbin): properly unpause trashbin on error (server#64177)
fixFix: update left padding of public shares (server#64213)
fixFix: update shared resource calendar icon for different theme (server#64288)
fixFix(i18n): Remove ellipsis from search strings (server#64323)
fixFix: preserve link shares on ownership transfer (server#64332)
featureAllow quota write streams with unknown free space (server#64341)
fixFix: remove nested items from favorites view on unfavorite (server#64344)
fixFix(Sharing): Hide non-matching recipients instead of only their secrets (server#64353)
fixFix(encryption): cap and invalidate key-cache (server#64356)
fixFix(files): Show confirmation dialog on delete hotkey press (server#64357)
fixFix(files_external): show that an unrestricted storage applies to all (server#64362)
fixFix(files_sharing): don’t crash CleanupShareTarget when mount info is missing (server#64367)
fixFix: improve form validation feedback for login, account creation, and sharing (server#64372)
fixFix: show custom permissions when share is removed from edit bundle (server#64375)
fixFix: logs can leak sensitive information.. (server#64386)
fixFix: skip copying skeleton if the user has 0 quota (server#64396)
fixFix(files): bring back ownership transfer of all files (server#64407)
fixFix: use correct mimetype for theming logo (server#64410)
fixFix(files_sharing): only offer folders in file-request which are shareable (server#64416)
fixFix: scope group share child permission updates to usergroup (server#64417)
fixFix(sharing): Hide Allow download and sync option for federated (server#64421)
fixFix: Send password to owner when password sending fails, regardless of enforcement (server#64425)
fixFix(previews): set Content-Type header for Imaginary requests (server#64431)
featureImplement recommended recipient api for unified sharing (server#64433)
fixFix(CalDAV): extract data from occurance exemptions (server#64438)
featureAdd files:list command and fix auto completion (server#64439)
fixFix(config): Don’t print sensitive config when setting them (server#64442)
featureFeat: Add more debug output when checkTokenCredentials fails (server#64472)
fixFix: keep share visible for share owner when iinitiator is deactivated (server#64477)
fixFix(filecache): announce every removed entry so metadata is cleaned up (server#64498)
fixFix(files): validate dropped filenames before upload (server#64502)
fixFix: remove dead hook listener and replace with event listener (server#64509)
fixFix(CalDAV): set significant change flag properly (server#64520)
featureFeat(files): bring back the Sidebar API (server#64581)
featurePerf: Improve token exchange (server#64597)
featureFeat: let apps define the actor of an activity via the activity manager (activity#2930)
featureAdd a vitest harness for the front-end (files_pdfviewer#1564)
featureFeat(api): Allow to filter the API by app and object (notifications#3389)
featureFeat(menu): add Mermaid diagram entry to Blocks menu (text#9204)
+34 more items in the release notesfeatureAdd rel attribute for fediverse link to make verification possible. (server#43364)
featureFeat(deps): Upgrade phpseclib to v3 (server#48183)
featureFeat(occ): Better handling of disabled or unreacheable App store (server#49697)
featureFeat: Run setup checks by category or class (server#49978)
featureAdded parameter to disable web UI integration with local client (server#54191)
featureFeat: OCS Calendar Import (server#55178)
featureFeat(theming): add option for reduce animation (server#55406)
featureFeat(entity): Provide a new API for entities (server#56199)
featureAdded a exclude disabled option to last seen (server#57081)
featureFeat (2fa): Add IStatelessProvider interface (server#57216)
featureImplement token exchange from OCM (server#57234)
featureMove invite-accepted capability and implementation to contacts app. (server#57853)
featureFeat: delay fetching the display name of a share recipient untill we need it (server#58335)
featureFeat: frankenphp (server#58541)
featureFeat(lookup): search for local account only via lookupserver (server#58567)
breakingRemove usage of static vars or properties (server#59002)
featureEnh(occ): make it possible to add an arbitrary number of users to a g… (server#59271)
featureFeat(files_versions): allow to block version creation using WFE (server#59610)
featureFeat: allow setting custom login-name for occ generated app password (server#59680)
security[master] fix(security): Update code signing revocation list (server#60705)
securityFix(security): don’t propagate ValueError from Crypto::decrypt() fallback (server#60735)
security[master] fix(security): Update code signing revocation list (server#60992)
security[master] fix(security): Update code signing revocation list (server#61088)
deprecatedFix deprecations in tests (server#61140)
security[master] fix(security): Update code signing revocation list (server#61227)
security[master] fix(security): Update code signing revocation list (server#61268)
security[master] fix(security): Update code signing revocation list (server#61423)
security[master] fix(security): Update code signing revocation list (server#61900)
security[master] fix(security): Update code signing revocation list (server#62019)
security[master] fix(security): Update code signing revocation list (server#62166)
security[master] fix(security): Update CA certificate bundle (server#62256)
security[master] fix(security): Update code signing revocation list (server#62632)
security[master] fix(security): Update code signing revocation list (server#62857)
security[master] fix(security): Update code signing revocation list (server#63142)
security[master] fix(security): Update CA certificate bundle (server#63231)
security[master] fix(security): Update code signing revocation list (server#63335)
security[master] fix(security): Update code signing revocation list (server#63485)
breakingRevert “fix(installer): re-enable version-incompatible apps after appstore update” (server#63773)
securityFix(security): Update code signing revocation list (server#64051)
breaking[master] fix(composer): Remove trailing comma breaking composer.json parsing (viewer#3271)
+2377 more items in the release notes