[stable33] 33.0.1 RC1

[skjnldsv]

Nextcloud 33.0.1

server

• [stable33] chore(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 #58247
• [stable33] chore(deps): Bump @vueuse/integrations from 14.2.0 to 14.2.1 #58248
• [stable33] chore(deps): Bump @vueuse/core from 14.2.0 to 14.2.1 #58249
• [stable33] chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 in /build/frontend-legacy #58253
• [stable33] chore(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 in /build/frontend-legacy #58254
• [stable33] fix(docs): Fix dead documentation link for Windows file names #58291
• [stable33] fix(comments): properly handle opening the sidebar when Activity integration is used #58294
• [stable33] chore(deps-dev): Bump phpunit/phpunit from 11.5.51 to 11.5.53 in /vendor-bin/behat #58295
• [stable33] chore(deps): Bump phpunit/phpunit from 11.5.51 to 11.5.53 in /vendor-bin/phpunit #58296
• [stable33] chore(deps-dev): Bump @zip.js/zip.js from 2.8.19 to 2.8.20 #58297
• [stable33] chore(deps): Bump sortablejs from 1.15.6 to 1.15.7 #58299
• [stable33] chore(deps): Bump marked from 17.0.1 to 17.0.2 in /build/frontend-legacy #58306
• [stable33] chore(deps-dev): Bump webpack from 5.105.1 to 5.105.2 in /build/frontend-legacy #58309
• [stable33] fix(theming): display error messages on image upload and delete previous image only after validation #58323
• [stable33] fix: don't try to create preview folder if it already exists #58328
• [stable33] fix: obey x-nc-scheduling flag on delete #58341
• [stable33] chore(deps-dev): Bump stylelint from 17.2.0 to 17.3.0 #58347
• [stable33] fix(sftp): Handle empty port parameter to allow host-defined ports #58358
• [stable33] feat: add upload_time support to file search and recent files #58374
• [stable33] fix(files): correctly sort views #58375
• [stable33] fix(cache): filter out invalid entries in OC\Files\Cache\Wrapper\CacheWrapper::getFolderContentsById #58378
• [stable33] fix(setup): add index properties_name_path_user by default on new installs #58418
• [stable33] fix(external_storage): hide local storage as an option for users #58424
• [stable33] fix(user_status): mount emoji picker outside of dialog #58429
• [stable33] fix(perf): use index when deleting old previews #58431
• [stable33] fix(Propagator): Skip groupfolders root entries #58433
• [stable33] Fix/more missing userid cases #58440
• [stable33] fix(files_sharing): ensure the server share API errors are shown #58441
• [stable33] fix(TransferOwnershipService): Remove groupfolders size #58449
• [stable33] fix(Propagator): Also skip groupfolders versions and trash entries #58450
• [stable33] fix(View): Handle ICacheEntry returned by FileInfo->getData() #58455
• [stable33] fix(files): fix tab navigation from select all checkbox to batch actions #58462
• [stable33] fix(files_sharing): make legacy downloadShare endpoint compatible with legacy behavior #58468
• [stable33] chore(deps-dev): Bump phpunit/phpunit from 11.5.53 to 11.5.55 in /vendor-bin/behat #58485
• [stable33] chore(deps): Bump phpunit/phpunit from 11.5.53 to 11.5.55 in /vendor-bin/phpunit #58486
• [stable33] chore(deps-dev): Bump rector/rector from 2.3.6 to 2.3.7 in /vendor-bin/rector #58487
• [stable33] chore(deps-dev): Bump eslint from 9.39.2 to 9.39.3 #58488
• [stable33] chore(deps): Bump @nextcloud/paths from 3.0.0 to 3.1.0 #58489
• [stable33] chore(deps-dev): Bump @zip.js/zip.js from 2.8.20 to 2.8.21 #58490
• [stable33] chore(deps): Bump @nextcloud/paths from 3.0.0 to 3.1.0 in /build/frontend-legacy #58491
• [stable33] chore(deps): Bump libphonenumber-js from 1.12.36 to 1.12.37 in /build/frontend-legacy #58493
• [stable33] chore(deps): Bump marked from 17.0.2 to 17.0.3 in /build/frontend-legacy #58494
• [stable33] chore(deps): Bump underscore from 1.13.7 to 1.13.8 in /build/frontend-legacy #58495
• [stable33] fix(dav): Use an exhaustive list for allowed serialized classes #58511
• [stable33] build: fix vite config for assets imported from node modules #58513
• [stable33] fix(Cron): Log WebCron access at INFO LEVEL #58517
• [stable33] fix(propagator): Don't run queries if no parents #58521
• [stable33] fix(core): Allow external sharing to plain http://localhost #58523
• [stable33] fix: remove user part only at the beginning of path #58527
• [stable33] fix(share): Set expiration time to end of day (23:59:59) #58536
• [stable33] build(deps): bump the symfony group across 1 directory #58546
• [stable33] fix: improve logging around automatic cache updated for dav downloads #58551
• [stable33] fix: correctly return false for filesize on non-existing file #58553
• [stable33] Avoid recomputing list of mounts by provider #58558
• [stable33] fix(snowflake_ids): allow multiple instances with same temp directory #58561
• [stable33] fix(L10N): stop stripping _ from language codes #58575
• [stable33] fix(notifications): Update notifier exception handling #58583
• [stable33] fix(files_external): ignore unsatisfied optional dependencies #58588
• [stable33] feat: calendar read and write federation #58590
• [stable33] fix: pass only object key to deleteObjects call #58605
• [stable33] fix(repair): Fix repair steps when files_sharing is disabled #58607
• [stable33] fix: Use configured loglevel even when log.condition matches is set #58612
• [stable33] chore(deps-dev): Bump rector/rector from 2.3.7 to 2.3.8 in /vendor-bin/rector #58628
• [stable33] chore(deps-dev): Bump stylelint from 17.3.0 to 17.4.0 #58629
• [stable33] chore(deps-dev): Bump cypress from 15.10.0 to 15.11.0 #58630
• [stable33] chore(deps): Bump vue from 3.5.28 to 3.5.29 #58631
• [stable33] chore(deps): Bump libphonenumber-js from 1.12.37 to 1.12.38 in /build/frontend-legacy #58632
• [stable33] chore(deps-dev): Bump webpack from 5.105.2 to 5.105.3 in /build/frontend-legacy #58633
• [stable33] chore(deps-dev): Bump babel-loader-exclude-node-modules-except from 1.2.1 to 1.2.4 in /build/frontend-legacy #58634
• [stable33] chore(deps): Bump the github-actions group with 5 updates #58650
• [stable33] perf(sharing): Avoid loading all shares from all users when unsharing #58658
• [stable33] fix(s3): prevent "0" path from being treated as root #58666
• [stable33] ci(performance): fix Unexpected input warning for profiler-branch #58668
• [stable33] fix: check source and target when emitting copy event #58673
• [stable33] fix: Set files app lexicon strictness to IGNORE #58683
• [stable33] fix(files_sharing): allow strict validation of shares #58688
• [stable33] fix(files_external): set default values for new configurations #58690
• [stable33] feat: set creation_time on file creation and render recently created icon #58694
• [stable33] fix(files): properly handle dropping files #58701
• [stable33] Remove external shares from share list #58717
• [stable33] fix updating cached mounts with multiple entries for root id #58733
• [stable33] handle case where we can't get the filesize after open in dav get #58736
• [stable33] chore(deps-dev): Bump eslint from 9.39.3 to 9.39.4 #58768
• [stable33] chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.0 #58769
• [stable33] chore(deps-dev): Bump @zip.js/zip.js from 2.8.21 to 2.8.23 #58770
• [stable33] chore(deps): Bump marked from 17.0.3 to 17.0.4 in /build/frontend-legacy #58771
• [stable33] chore(deps-dev): Bump webpack from 5.105.3 to 5.105.4 in /build/frontend-legacy #58772
• [stable33] chore(deps): Bump dompurify from 3.3.1 to 3.3.2 in /build/frontend-legacy #58774
• [stable33] feat: Add memcache_customprefix #58810
• [stable33] fix(preview): Validate preview MIME type #58814
• [stable33] fix: add fallback to raw path info #58831
• [stable33] feat(routing): add files_sharing_raw to rootUrlApps #58838
• [stable33] fix: give target file all permissions on copy #58846
• [stable33] chore(deps): Update haze to 2.2.0 #58850
• [stable33] fix:(dav): add note to example contact #58866
• [stable33] chore(metrics): harden Cached exporter #58876
• [stable33] fix(videoverification): Remove CSP wildcard for video verification #58877
• [stable33] tests - Fix Implicit conversion from float 500.5 to int loses precision in ViewTest #58878
• [stable33] fix(SecurityMiddleware): return header to distinguish error type #58880
• [stable33] fix: PostgreSQL transaction aborts when caching user mounts #58884
• [stable33] Stable33 authoritative share #58894
• [stable33] Fix federated reshares #58899
• [stable33] feat: improve calendar migrator #58907
• [stable33] fix: Remove deprecated RFC7231 constant to avoid warnings on PHP 8.5 #58911
• [stable33] chore(deps-dev): Bump the vitest group across 2 directories with 3 updates #58927
• [stable33] chore(deps-dev): Bump cypress from 15.11.0 to 15.12.0 #58928
• [stable33] chore(deps-dev): Bump sass from 1.97.3 to 1.98.0 #58929
• [stable33] chore(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 #58930
• [stable33] chore(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 #58931
• [stable33] chore(deps): Bump vue from 3.5.29 to 3.5.30 #58932
• [stable33] chore(deps): Bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 in /build/frontend-legacy #58933
• [stable33] chore(deps-dev): Bump sass from 1.97.3 to 1.98.0 in /build/frontend-legacy #58934
• [stable33] chore(deps): Bump @simplewebauthn/browser from 13.2.2 to 13.3.0 in /build/frontend-legacy #58935
• [stable33] chore(deps): Bump libphonenumber-js from 1.12.38 to 1.12.40 in /build/frontend-legacy #58936
• [stable33] chore(deps): Bump dompurify from 3.3.2 to 3.3.3 in /build/frontend-legacy #58937
• [stable33] chore(deps): Bump @nextcloud/vue from 8.36.0 to 8.37.0 in /build/frontend-legacy #58957
• [stable33] build(deps): bump nextcloud/lognormalizer from 3.0.0 to 3.0.1 #58968
• [stable33] chore: Fix SPDX header #58969
• [stable33] fix(apporder): Load custom app order before resolving closures #58972
• [stable33] fix(comments): Don't return mentions in markdown code (by default) #58981
• [stable33] chore(quota): hide available space from error #58994
• [stable33] fix(files): correctly handle nodes with snowflake ids #58999
• [stable33] chore(build): update list of ignored files #59007
• [stable33] fix(admin): use correct delegation class #59011
• [stable33] fix: Add missing Attribute and fix parameter type in renewpassword route #59014
• [stable33] fix(initializeSession): only log HMAC problem to critical logs if indeed critical #59016
• [stable33] fix: provide canDownload helper for shares and use it where appropriate #59021
• [stable33] fix(comments): Correctly treat end of message as end of code block/in… #59024
• [stable33] fix(LDAP): use displayname from DB, before reaching out to LDAP #59035
• [stable33] fix(files_external): properly handle API errors #59042
• [stable33] fix(files_sharing): respect config to skip certificate verification #59050
• [stable33] fix: Move hasAnnotationOrAttribute to the reflector #59057
• [stable33] fix(bg_jobs): store job argument as a text, increase length cap to 32000 #59067
• [stable33] feat(CalDAV): Add function to get the token of a publicly shared calendar #59080
• [stable33] fix(security): Update CA certificate bundle #59098

3rdparty

• build(deps): bump the symfony group across 1 directory 3rdparty#2324
• [stable33] build(deps): bump nextcloud/lognormalizer from 3.0.0 to 3.0.1 3rdparty#2354

activity

• [stable33] Update nextcloud/ocp dependency activity#2365
• [stable33] fix: Fix handling of deleting share from self activity#2385
• [stable33] perf: Replace getById call with getFirstNodeById activity#2388
• [stable33] notice on empty cachedPath activity#2390
• [stable33] Fix npm audit activity#2399
• [stable33] Fix npm audit activity#2413
• [stable33] fix(bulkactivity): bulk query user settings activity#2419
• [stable33] fix: array offset error if value is not set activity#2422
• [stable33] fix: don't resend failed emails activity#2429
• [stable33] fix(stream): add file path to tooltip activity#2433
• [stable33] Fix npm audit activity#2439
• [stable33] perf: add new index to serve a full WHERE clause activity#2447
• [stable33] fix: return type formatting for user paths activity#2449
• [stable33] Update nextcloud/ocp dependency activity#2454
• [stable33] fix: only write activites for actual public uploads activity#2458
• [stable33] fix(federation): check if app is enabled activity#2463
• [stable33] fix(accessibility): fix some accessibility issues activity#2465
• [stable33] fix: correct reshare notification path activity#2467

app_api

• [stable33] feat: make Docker API version configurable via app config app_api#798
• [stable33] fix(HaRP-AIO): add missing docker_socket_port to auto-registered daemon config app_api#801

bruteforcesettings

• [stable33] Fix npm audit bruteforcesettings#1007
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.4 to 6.0.5 bruteforcesettings#1015
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1018
• [stable33] chore(deps): update dependencies and audit bruteforcesettings#950
• Chore(deps): Bump vue from 3.5.28 to 3.5.29 bruteforcesettings#996

circles

• [stable33] fix: remove user part only at the beginning of path circles#2374
• [stable33] fix(loopback): circles:check always fails due to APCu race and missing CLI wrapper circles#2388
• [stable33] fix: Fix remote instance circles#2396
• [stable33] Fix: Fix adding circle member circles#2402

files_pdfviewer

• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0-rc.8 files_pdfviewer#1358
• chore(deps-dev): Bump axios from 1.13.2 to 1.13.6 files_pdfviewer#1379
• [stable33] Fix "allow view without download" option not being handled files_pdfviewer#1387
• [stable33] Update nextcloud/ocp to latest dev-stable33 files_pdfviewer#1389

firstrunwizard

• Chore(deps): Bump @nextcloud/dialogs from 7.2.0 to 7.3.0 firstrunwizard#1950
• [stable33] Update nextcloud/ocp dependency firstrunwizard#1953
• [stable33] Fix npm audit firstrunwizard#1957
• [stable33] Avoid cropping logo in About & New slideshow firstrunwizard#1964
• Chore(deps-dev): Bump stylelint from 17.3.0 to 17.4.0 firstrunwizard#1977
• chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.0 firstrunwizard#1988
• chore(deps-dev): Bump sass from 1.97.3 to 1.98.0 firstrunwizard#1997
• [stable33] Update nextcloud/ocp dependency firstrunwizard#2000

logreader

• [stable33] Fix npm audit logreader#1923
• [stable33] ci(psalm): Ignore psalm issues in vendor libs logreader#1925
• [stable33] chore: update workflows logreader#1947
• [stable33] Update nextcloud/ocp dependency logreader#1954
• [stable33] Fix npm audit logreader#1957

nextcloud_announcements

• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#586
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#592

notifications

• [stable33] ci(actions): Update workflows notifications#2808
• [stable33] build(deps): Bump vue from 3.5.27 to 3.5.28 notifications#2816
• [stable33] Fix npm audit notifications#2817
• [stable33] Fix npm audit notifications#2825
• [stable33] build(deps-dev): Bump babel-loader-exclude-node-modules-except from 1.2.1 to 1.2.4 notifications#2832
• [stable33] build(deps): Bump vue from 3.5.28 to 3.5.29 notifications#2833
• [stable33] Fix npm audit notifications#2841
• [stable33] build(deps): Bump vue from 3.5.29 to 3.5.30 notifications#2848
• [stable33] ci: update all workflow templates from organization template repository notifications#2853
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#2856
• [stable33] Fix npm audit notifications#2859
• [stable33] fix(notification): Fix color of notification icon in browser notifications notifications#2864

password_policy

• [stable33] feat(api): Add context parameter to generate and validate endpoints password_policy#900

photos

• [stable33] fix(faces): Retrieve recognize API key and send it along with DAV requests photos#3444

privacy

• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.1 privacy#1260
• [stable33] Fix - Replaced deprecated QueryBuilder execute() privacy#1268
• Chore(deps-dev): Bump babel-loader-exclude-node-modules-except from 1.2.1 to 1.2.4 privacy#1270

recommendations

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 recommendations#971
• [stable33] fix(deps): update minimatch recommendations#994

related_resources

• [stable33] improve frame limit related_resources#891

serverinfo

• [stable33] Update nextcloud/ocp dependency serverinfo#953

survey_client

• [stable33] fix(notification): Add option to never remind again survey_client#390

text

• [stable33] Fix npm audit text#8194
• chore(deps): update dependency cypress-split to ^1.24.28 (stable33) text#8246
• [stable33] Update nextcloud/ocp dependency text#8251
• chore(deps): update dependency markdown-it to v14.1.1 [security] (stable33) text#8267
• chore(deps): update dependency rollup-plugin-webpack-stats to ^2.1.11 (stable33) text#8275
• [stable33] fix(menu): fix labels for new file actions text#8296
• [stable33] fix(deps): update dependency @nextcloud/files to v4 (main) text#8299
• [stable33] fix: enable workspace header in "Personal files" text#8305
• [stable33] fix(css): always set highlighted background for inline code text#8308
• [stable33] fix(source-view): compute isEncrypted in ViewerComponent text#8316
• Debug flaky cypress test in stable33 text#8320
• [stable33] chore(test): fix race condition in attachments test text#8326
• [stable33] fix(search): also search for user mentions text#8327
• [stable33] Update nextcloud/ocp dependency text#8338
• [stable33] fix(attachments): adjust fileId in attachments folder+path on folder copy text#8339
• [stable33] fix(links): allow inline code within links text#8345
• [stable33] fix: sanitize name of attached file text#8347
• [stable33] Remove unneeded max-height from text-menubar which caused a bug text#8351
• [stable33] fix(editor): make editor container grow on empty/short content text#8355
• [stable33] fix: Exclude Readme.md files from file locking in the text app text#8363
• [stable33] chore(cleanup): replace markdownit-katex with @mdit/tex text#8367
• [stable33] fix(menubar): Allow to inject custom link action text#8369
• [stable33] fix(link): use folder icon for "Link to file or folder" action text#8374

twofactor_nextcloud_notification

• [stable33] Fix npm audit twofactor_nextcloud_notification#1211
• build(deps): Bump vue from 3.5.27 to 3.5.28 twofactor_nextcloud_notification#1216
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1218
• [stable33] Create update-stable-titles.yml twofactor_nextcloud_notification#1220
• [stable33] Fix npm audit twofactor_nextcloud_notification#1225
• [stable33] build(deps): Bump vue from 3.5.28 to 3.5.29 twofactor_nextcloud_notification#1235
• [stable33] Fix npm audit twofactor_nextcloud_notification#1239
• [stable33] build(deps): Bump vue from 3.5.29 to 3.5.30 twofactor_nextcloud_notification#1240
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1242
• [stable33] Fix npm audit twofactor_nextcloud_notification#1245

twofactor_totp

• chore(CI): Adjust testing matrix for Nextcloud 33 on stable33 twofactor_totp#1717
• [stable33] Fix npm audit twofactor_totp#1723
• [stable33] fix(deps): update minimatch twofactor_totp#1736

updater

• [stable33] fix(tests): check same code base fail if code contains "use " comment updater#714
• [stable33] chore(tests): master is now 34 updater#719

viewer

• [stable33] fix(ImageEditor): adjust line height to make filter names visible viewer#3078
• chore(deps): update dependency dompurify to v3.3.2 [security] (stable33) - abandoned viewer#3083
• fix(deps): update nextcloud (stable33) viewer#3086
• chore(deps): update dependency vite-plugin-static-copy to ^3.3.0 (stable33) viewer#3099

Pending PRs:

• @miaulalala
  • [stable33] perf(preview): bulk process preview regeneration #58796 🔁
• @nfebe
  • [stable33] fix(sharing): Align userid config key in UserPlugin with Manager #58989 ✅
• @backportbot
  • [stable33] feat(taskprocessing): add worker command for synchronous task processing #59082
  • [stable33] chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 related_resources#846
• @kesselb
  • [stable33] fix(sharing): do not notify remote if owner and sharee are local users #58719 ✅
• @salmart-dev
  • fix(files_reminders): reduce N+1 query issue for big folders #58288
• @skjnldsv
  • [stable33] 33.0.1 RC1 #59046 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested