[stable34] 34.0.3 RC1

[nextcloud-bot]

Nextcloud 34.0.3

server

• [stable34] perf: Replace more calls from getUserGroups to getUserGroupIds #62223
• [stable34] Improve logout url generation #62234
• [stable34] fix: Output shape validation will delete keys when there is a list of files #62237
• [stable34] chore: undeprecate the redis cache backend #62266
• [stable34] fix(jobs): resolve portability issues with background job cleanup #62279
• [stable34] fix(files_external/SMB): Use 'null' explicitly for no workgroup #62281
• [stable34] chore(deps-dev): bump concurrently from 9.2.3 to 9.2.4 #62295
• [stable34] chore(deps-dev): bump msw from 2.14.6 to 2.15.0 #62296
• [stable34] chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 #62297
• [stable34] chore(deps): bump @nextcloud/vue from 9.8.2 to 9.9.0 #62298
• chore(deps-dev): bump cypress from 15.18.0 to 15.18.1 #62299
• chore(deps-dev): bump @zip.js/zip.js from 2.8.26 to 2.8.31 #62300
• [stable34] chore(deps-dev): bump msw from 2.14.6 to 2.15.0 in /build/frontend-legacy #62301
• [stable34] fix(files): preserve encryptedVersion when copying cache entries #62337
• [stable34] fix(preview): Handle unique constraints violation exception #62363
• [stable34] fix(AmazonS3): pass S3 error messages through to the frontend #62418
• [stable34] fix(SetupChecks): Link to task processing worker docs #62443
• [stable34] fix: Don't add empty and broken ExternalShareScanJob on upgrade #62451
• [stable34] fix(background-jobs): preserve Snowflake IDs as strings #62457
• [stable34] fix: harden object store against copying a file to itself #62461
• [stable34] chore(deps-dev): bump @zip.js/zip.js from 2.8.31 to 2.8.33 #62503
• chore(deps-dev): bump sass from 1.101.0 to 1.101.3 #62504
• chore(deps): bump vue-router from 5.1.0 to 5.2.0 #62505
• [stable34] chore(deps-dev): bump stylelint from 17.14.0 to 17.14.1 #62506
• [stable34] chore(deps): bump @nextcloud/dialogs from 7.4.0 to 7.4.1 #62507
• [stable34] chore(deps): bump p-queue from 9.3.1 to 9.3.2 #62508
• [stable34] chore(deps-dev): bump eslint-plugin-cypress from 6.4.2 to 6.4.3 #62509
• [stable34] chore(deps): bump vue from 3.5.39 to 3.5.40 #62510
• chore(deps): bump moment-timezone from 0.6.2 to 0.6.3 in /build/frontend-legacy #62511
• [stable34] chore(deps-dev): bump sass from 1.101.0 to 1.101.3 in /build/frontend-legacy #62512
• [stable34] chore(deps): bump libphonenumber-js from 1.13.8 to 1.13.9 in /build/frontend-legacy #62513
• [stable34] chore(deps): bump @nextcloud/dialogs from 7.4.0 to 7.4.1 in /build/frontend-legacy #62514
• [stable34] chore(deps): bump p-queue from 9.3.1 to 9.3.2 in /build/frontend-legacy #62515
• [stable34] chore(deps): bump p-limit from 7.3.0 to 7.3.1 in /build/frontend-legacy #62516
• [stable34] fix: Use PHP_AUTH_PW for strict password confirmation #62537
• [stable34] Fix npm audit #62553
• [stable34] chore(deps): bump p-queue from 9.3.2 to 9.3.3 #62567
• chore(deps-dev): bump sass from 1.101.3 to 1.101.7 #62569
• [stable34] chore(deps-dev): bump @zip.js/zip.js from 2.8.33 to 2.8.34 #62571
• [stable34] chore(deps-dev): bump cypress from 15.18.1 to 15.19.0 #62574
• [stable34] chore(deps-dev): bump sass from 1.101.3 to 1.101.6 in /build/frontend-legacy #62578
• [stable34] chore(deps): bump p-queue from 9.3.2 to 9.3.3 in /build/frontend-legacy #62579
• [stable34] build(deps): bump guzzlehttp/guzzle to 7.15.2 #62584
• [stable34] perf: Use hash map to check if path was already checked #62588
• [stable34] fix(TaskProcessing): Claim tasks atomically in both SynchronousBackgr… #62608
• [stable34] perf(preview): Optimize retriving all previews from oc_filecache #62611
• [stable34] fix(unified-search): catch errors in response #62616
• [stable34] chore(previews): add file signature check before opening files #62620
• [stable34] test(version-check): Fix flaky test #62623
• [stable34] [master] fix(security): Update code signing revocation list #62652
• [stable34] fix(search): Add end date for last 7 and last 30 days #62685
• [stable34] fix(caldav): Expand recurring events for principal calendar search #62693
• [stable34] Optimize propagator #62699
• [stable34] Expend a bit OCP\GlobalScale\IConfig #62700
• [stable34] fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable #62702
• [stable34] fix(Database): Use real idle-timer to prevent lastInsertId being reset on MariaDB/MySQL #62714
• [stable34] fix(imip): add context to imip log messages #62723
• [stable34] fix(share-api-controller): add sanity check on canAccessShare for circle share types #62733
• [stable34] chore(deps-dev): bump sass from 1.101.7 to 1.102.0 #62747
• [stable34] chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 #62748
• [stable34] chore(deps-dev): bump sass from 1.101.6 to 1.102.0 in /build/frontend-legacy #62749
• [stable34] fix(jobs): compute memory usage after clean-up #62768
• [stable34] fix(metadata): bind chunked file ids #62771
• [stable34] perf(user-display-name): Check memory cache before trying redis #62778
• [stable34] fix(encryption): Correctly report size for zero-byte encrypted files #62780
• [stable34] More logging around partfile rename failures #62782
• [stable34] fix(provisioning_api): read newUser.sendEmail as a boolean #62784
• [stable34] fix(encryption): handle decryption exception with outdated passwords #62788
• [stable34] test(TestCase): restore unregistered services correctly #62790
• [stable34] fix(imip): don't report success when a calendar cannot process iMip #62792
• [stable34] fix(share): Avoid crash when share owner is not found #62798
• [stable34] fix(systemTags): setObjectIdsForTag() dispatches once #62801
• [stable34] test: migrate to Playwright #62803
• [stable34] fix: handle sftp private key as password #62824
• [stable34] Host/ip validator hardenings #62829
• [stable34] fix: disable direct link if link shares are disabled #62832
• [stable34] check free space in the proper folder when restoring from trash #62837
• [stable34] fix: clear key password after loading key #62850
• [stable34] fix(direct editing): cleanup tokens on user deletion #62862
• [stable34] fix(dav): properly finalize with MOVE only #62876
• [stable34] fix(appstore): initialize the exApps store when enabled #62881
• [stable34] fix(share): do not re-accept rejected shares #62891
• [stable34] Hide personal settings of apps not enabled for the user #62901
• [stable34] feat: Add setting to bypass password confirmation on a selected ip ranges #62908
• [stable34] fix(share): Prevent type error caused by non-existing user #62912
• [stable34] feat: Allow to check user existence outside specific user backends #62917
• [stable34] fix: require admin permissions for all systemtag updates #62924
• [stable34] fix(files_sharing): skip unresolvable share recipients #62928
• [stable34] feat(lookup): search for local account only via lookupserver #62934
• [stable34] fix(sharing): properly handle verification of copy/move actions #62937
• [stable34] feat: allow specifying applicable users and groups in the files_external:create command #62949
• [stable34] fix(setup): make sure CAN_INSTALL error page is shown #62953
• [stable34] fix(trashbin): properly show deleted by for federated shares #62965
• [stable34] fix(auth): log invalid token during password reset #62970
• [stable34] fix(PublicPreview): Call getMimetype() on File objects #62976
• [stable34] fix: Handle 2fa enforcement earlier #62983
• [stable34] Fix npm audit #62990
• [stable34] fix(ObjectStore): reset multipart upload byte counter on retry #62994
• [stable34] fix(console): write app command loading errors to stderr #62998
• [stable34] fix(files): do not let a failing move hook break the move or hide files #63001
• [stable34] fix(settings): missing end of html tag #63016
• [stable34] fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage #63020
• [stable34] fix(files): remove leading slash from destination in copy/move toast #63039
• [stable34] chore(deps): bump @vueuse/core from 14.3.0 to 14.4.0 #63051
• [stable34] chore(deps-dev): bump @nextcloud/e2e-test-server from 0.5.0 to 0.5.1 #63052
• [stable34] chore(deps): bump @vueuse/integrations from 14.3.0 to 14.4.0 #63053
• [stable34] chore(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 in /build/frontend-legacy #63054
• [stable34] chore(deps-dev): bump webpack from 5.108.4 to 5.109.2 in /build/frontend-legacy #63055
• [stable34] chore(deps): bump libphonenumber-js from 1.13.9 to 1.13.10 in /build/frontend-legacy #63056
• [stable34] chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /build/frontend-legacy #63057
• [stable34] fix: improve logging when failing to get newly created user #63075
• [stable34] fix(lookup-server): accept self-signed lus on globalscale #63076
• [stable34] fix(files_trashbin): cleanup trash metadata after failed cross-user moves #63088
• [stable34] Fix npm audit #63089
• [stable34] fix: throw better error message if a user doesn't have a key even though it should have #63093
• [stable34] fix(CalDAV): Check for user status before serving public calendars #63105
• [stable34] feat(federation): Add accept/decline mechanism for federated calendars #63113

3rdparty

• [stable34] build(deps): bump guzzlehttp/guzzle to 7.15.2 3rdparty#2521

activity

• [stable34] Update nextcloud/ocp dependency activity#2618
• [stable34] refactor(tests): migrate e2e test suite from Cypress to Playwright activity#2633
• chore(deps): update dependency @nextcloud/vite-config to ^2.5.4 (stable34) activity#2736
• [stable34] fix(deps): pin nextcloud/ocp to dev-stable34 in psalm vendor-bin activity#2790
• [stable34] perf(files): compute move/rename activity settings once activity#2794
• [stable34] fix: do not fail moves when the old location cannot be resolved activity#2798
• [stable34] fix(expire): delete conditions for activity_expire_exclude_users activity#2806
• [stable34] feat: adding an option to exclude users from the acitivity log activity#2808
• [stable34] fix(notifications): Require absolute links for support of desktop and mobile clients activity#2830
• [stable34] Fix npm audit activity#2844
• [stable34] Update nextcloud/ocp dependency activity#2853

app_api

• [stable34] Fix npm audit app_api#944
• [stable34] ci(tests-deploy): wait until Nextcloud is installed before enabling AppAPI app_api#955

bruteforcesettings

• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 bruteforcesettings#1188
• Chore(deps-dev): Bump vitest from 4.1.9 to 4.1.10 bruteforcesettings#1190
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 bruteforcesettings#1191
• [stable34] Update nextcloud/ocp dependency bruteforcesettings#1196
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.7 to 6.0.8 bruteforcesettings#1205
• [stable34] Update nextcloud/ocp dependency bruteforcesettings#1216
• [stable34] Update nextcloud/ocp dependency bruteforcesettings#1224

circles

• chore(deps-dev): bump eslint from 9.39.4 to 9.39.5 circles#2678
• [stable34] ci(actions): Update workflow templates from organization template repository circles#2680
• [stable34] avoid duplicate purge on inheritance circles#2689
• [stable34] fix(local-controller): validate when trying adding member of type contact circles#2703
• [stable34] fix: Use global members limit as default for circle circles#2706
• [stable34] fix: add promoteToOwner method circles#2715
• [stable34] fix(circles): preserve group display names when creating circles circles#2724

files_downloadlimit

• [stable34] Fix npm audit files_downloadlimit#875
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 files_downloadlimit#880
• chore(deps): Bump @nextcloud/vue from 9.8.2 to 9.9.0 files_downloadlimit#898
• chore(deps-dev): Bump eslint from 10.6.0 to 10.7.0 files_downloadlimit#899
• [stable34] fix: allow higher download limits than 500 files_downloadlimit#907
• chore(deps): Bump @nextcloud/dialogs from 7.4.0 to 7.4.1 files_downloadlimit#912
• chore(deps): Bump vue from 3.5.39 to 3.5.40 files_downloadlimit#914
• [stable34] Fix npm audit files_downloadlimit#919
• chore(deps-dev): Bump eslint from 10.7.0 to 10.8.0 files_downloadlimit#925

files_pdfviewer

• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0 to 9.0.1 files_pdfviewer#1479
• [stable34] ci(actions): Update workflow templates from organization template repository files_pdfviewer#1494
• [stable34] fix: Add explicit dependency for vue-loader@legacy files_pdfviewer#1498
• [stable34] Fix npm audit files_pdfviewer#1501
• [stable34] chore: Add explicit dependency for terser-webpack-plugin files_pdfviewer#1505
• [stable34] chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 files_pdfviewer#1513

logreader

• chore(deps-dev): bump browserslist from 4.28.4 to 4.28.5 logreader#2125
• [stable34] Update nextcloud/ocp dependency logreader#2132
• chore(deps-dev): bump browserslist from 4.28.5 to 4.28.6 logreader#2144
• [stable34] Fix npm audit logreader#2147
• chore(deps-dev): bump browserslist from 4.28.6 to 4.28.7 logreader#2154
• chore(deps): bump vue from 3.5.39 to 3.5.40 logreader#2157
• [stable34] Update nextcloud/ocp dependency logreader#2160
• [stable34] Fix npm audit logreader#2163
• [stable34] Update nextcloud/ocp dependency logreader#2169

nextcloud_announcements

• [stable34] Update nextcloud/ocp dependency nextcloud_announcements#676
• [stable34] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#683
• [stable34] Update nextcloud/ocp dependency nextcloud_announcements#687

notifications

• [stable34] fix(push): Fix undefined index when accessing token age notifications#3225
• [stable34] ci(actions): Update workflow templates from organization template repository notifications#3230
• [stable34] Fix npm audit notifications#3237
• [stable34] build(deps): Bump guzzlehttp/guzzle notifications#3240
• [stable34] Update nextcloud/ocp dependency notifications#3241
• [stable34] perf(push): Send push notifications async to proxies notifications#3246
• [stable34] fix(webpush): Skip browsers when disabled notifications#3248
• [stable34] build(deps): Bump vue from 3.5.39 to 3.5.40 notifications#3255
• [stable34] Update nextcloud/ocp dependency notifications#3256
• [stable34] Fix npm audit notifications#3259
• [stable34] Update nextcloud/ocp dependency notifications#3267
• [stable34] Update nextcloud/ocp dependency notifications#3268
• [stable34] Update nextcloud/ocp dependency notifications#3273
• [stable34] Fix npm audit notifications#3284

photos

• [stable34] Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 photos#3675
• [stable34] Chore(deps-dev): Bump vitest from 3.2.6 to 3.2.7 photos#3676
• [stable34] Fix npm audit photos#3683
• [stable34] ci(actions): Update workflow templates from organization template repository photos#3691
• [stable34] Chore(deps): Bump woltlab/webp-exif from 0.1.4 to 0.1.5 photos#3701
• [stable34] chore: adjust PHP dependencies photos#3706
• [stable34] fix(dav): properly handle metadata photos#3714
• [stable34] Update nextcloud/ocp dependency photos#3725
• [stable34] Fix npm audit photos#3727

recommendations

• [stable34] Fix npm audit recommendations#1138
• [stable34] ci(actions): Update workflow templates from organization template repository recommendations#1143
• [stable34] Fix npm audit recommendations#1155

related_resources

• [stable34] ci(psalm): Fix nextcloud/ocp update related_resources#1047
• [stable34] ci(actions): Update workflow templates from organization template repository related_resources#1051
• [stable34] Update nextcloud/ocp dependency related_resources#1077
• [stable34] Update nextcloud/ocp dependency related_resources#1083

serverinfo

• [stable34] ci(actions): Update workflow templates from organization template repository serverinfo#1050
• [stable34] Update nextcloud/ocp dependency serverinfo#1052
• [stable34] Update nextcloud/ocp dependency serverinfo#1064
• [stable34] Update nextcloud/ocp dependency serverinfo#1080
• [stable34] fix: Mark update storage stats as time insensitive serverinfo#1087

survey_client

• [stable34] Update nextcloud/ocp dependency survey_client#455
• [stable34] Update nextcloud/ocp dependency survey_client#464
• [stable34] Update nextcloud/ocp dependency survey_client#467

text

• [stable34] Fix npm audit text#8895
• [stable34] fix: add file-access check text#8918
• [stable34] Fix: Pasting from excel inserts an image instead of a formatted table text#8920
• [stable34] fix(collaboration): ellipsise user caret labels text#8926
• [stable34] fix/autosave timer text#8928
• [stable34] Update nextcloud/ocp dependency text#8937
• [stable34] Fix npm audit text#8941
• [stable34] fix: update ShowImageModal to use fullUrl for show original image instead of preview text#8946
• [stable34] fix(editor): fix viewer header overlaying page content on mobile text#8953
• [stable34] fix(DirectEditing): check if user is enabled text#8959
• [stable34] fix(sync): reset #sending flag when no active connection on sendStepsNow text#8965
• [stable34] fix(attachments): check documentId matches text#8967
• [stable34] chore(test): direct editing permissions text#8975
• [stable34] test(playwright): don't set webServer.url parameter text#8976
• [stable34] fix: guard access to unavailable extensions when rich editing is off text#8981
• [stable34] fix(editor): set translate=yes for read-only editor text#8982
• fix(deps): update dependency yjs to ^13.6.32 (stable34) text#8999
• chore(deps): update dependency cypress to ^15.20.0 (stable34) text#9008
• [stable34] Update nextcloud/ocp dependency text#9009
• [stable34] Fix npm audit text#9014
• fix(deps): update dependency mermaid to ^11.16.1 (stable34) text#9017
• [stable34] fix(lists): no margin-bottom for nested lists to prevent ugly gap text#9024
• [stable34] Fix(LinkPicker): improve suggestions order and rename 'Files' text#9025

twofactor_nextcloud_notification

• [stable34] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1422
• [stable34] Fix npm audit twofactor_nextcloud_notification#1426
• [stable34] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1442
• [stable34] build(deps): Bump vue from 3.5.39 to 3.5.40 twofactor_nextcloud_notification#1444
• [stable34] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1447
• [stable34] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1456

twofactor_totp

• [stable34] Fix npm audit twofactor_totp#1840

Pending PRs:

• @Abijeet
  • Add feature to view admin_audit log files logreader#476 ⚠
• @ArtificialOwl
  • enable multiple table/fields comparaison when using queryHelper circles#1089 ⚠
  • cleaning and fixing  circles#1090 ⚠
  • shorten id on occ circles#1148 ⚠
  • emulate entity on Admin OCS API circles#1214 🔁
  • runAsAdmin() circles#1217 ⚠
  • update single display-name circles#1394 ⚠
  • share with group members only circles#891 ⚠
  • +runAsSuperSession circles#980
• @blizzz
  • [stable34] fix(files_version): mtime confusion on milliseconds #62372 ✅
• @provokateurin
  • [stable34] fix(files_sharing): Use share id in file actions #62403 🔁
• @icewind1991
  • [stable34] Don't fill the pagination cache if there are no extra items #63119 ✅
• @backportbot
  • [stable34] chore(deps): Bump postcss and vue-loader files_pdfviewer#1464 ⚠
  • [stable34] chore(deps-dev): Bump axios from 1.13.6 to 1.17.0 files_pdfviewer#1466 ⚠
  • [stable34] Chore(deps): Bump @nextcloud/dialogs from 6.4.2 to 7.4.0 photos#3667 ✅
• @leftybournes
  • [stable34] fix: urlencode file source based on resource url viewer#3325 ✅
• @copilot-swe-agent
  • feat(e2e): add Playwright e2e tests for first-run wizard and settings page firstrunwizard#2017 ⚠
• @david-brauer
  • Add option to show original image in viewer instead of showing a preview viewer#3118
• @fgsl
  • Enable audit by configuration #163 circles#226 ⚠
  • New circles are treated as an "all user" activity - but no option for this being on/off #204 circles#229 ⚠
• @lobermann
  • Fix viewing of file versions files_pdfviewer#1270
• @miaulalala
  • refactor: extract email batch-time logic into UserSettings::getEmailBatchTimeSetting() activity#2570
  • refactor: deduplicate getHTMLSubject() via HTMLSubjectFormatter activity#2571
• @onny
  • Send notification mail for circle invitation circles#1349 🔁
• @rotdrop
  • Use $group->getDisplayName() instead of just the GID for the display … circles#1297 ✅
• @susnux
  • feat: Allow to show logs of all logging types by proxying messages logreader#1041 ⚠
• @tortuetorche
  • Better application registering and events dispatching circles#392 ⚠
  • You can now add members to your own personal circles circles#395 ⚠
  • Add allow_adding_any_group_members option circles#398 ⚠
  • Add allow_listed_circles option circles#399 ⚠
  • Add allow_files_filtered_by_circles option circles#400 ⚠
  • Add group_backend option to mirroring the circle as a group circles#401 ⚠
• (generated)
  • [stable34] build(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.1 #61773 ✅
  • [stable34] chore(deps-dev): bump @vue/tsconfig from 0.5.1 to 0.8.1 in /build/frontend-legacy #62302 ✅
  • [stable34] 34.0.3 RC1 #63111
  • fix(deps): update dependency vue to ^3.5.42 (stable34) activity#2748 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested