[stable33] 33.0.4 RC1

[nextcloud-bot]

Nextcloud 33.0.4

server

• [stable33] fix(s3): ignore prefixes with repeating delimiters #59829
• [stable33] Fix removed address book items not being synced between federated instances #59894
• [stable33] fix(files): fix custom client-side error messages on move/copy actions #59954
• [stable33] chore: Generate empty css entry points #59983
• [stable33] Feat: Better reporting if something is wrong with taskprocessing #59991
• [stable33] fix: Harmonize login and passwordless login redirect behavior #60007
• [stable33] fix(core): provide valid initial state also on public templates #60015
• [stable33] test(cypress): clear state before user tests #60022
• [stable33] chore(deps-dev): Bump stylelint from 17.8.0 to 17.9.1 #60041
• [stable33] chore(deps-dev): Bump msw from 2.13.4 to 2.13.6 #60042
• [stable33] chore(deps-dev): Bump @vue/test-utils from 2.4.6 to 2.4.9 #60043
• [stable33] chore(deps): Bump vue from 3.5.32 to 3.5.33 #60044
• [stable33] chore(deps-dev): Bump cypress from 15.14.0 to 15.14.1 #60045
• chore(deps): Bump @nextcloud/vue from 8.37.0 to 8.38.0 in /build/frontend-legacy #60047
• [stable33] chore(deps-dev): Bump msw from 2.13.4 to 2.13.6 in /build/frontend-legacy #60048
• [stable33] chore(deps): Bump dompurify from 3.4.0 to 3.4.1 in /build/frontend-legacy #60049
• [stable33] chore(deps): Bump libphonenumber-js from 1.12.41 to 1.12.42 in /build/frontend-legacy #60051
• [stable33] chore(deps): Bump moment-timezone from 0.6.1 to 0.6.2 in /build/frontend-legacy #60052
• chore(deps): Bump p-queue from 9.1.2 to 9.2.0 in /build/frontend-legacy #60053
• [stable33] fix(navigation): Fix default app icon #60133
• [stable33] fix(files): escape html entities in dav search requests #60140
• [stable33] fix(LocalPreviewStorage): Use correct regex to detect files in nested directory format #60143
• [stable33] fix(comments): register event listener for typed comment events #60149
• [stable33] fix(core): use btoa() instead of window.Buffer.from() for base64 encoding #60157
• [stable33] fix(comments): Add an action to comment notification that dismisses it #60175
• [stable33] fix(core): prompt for password once when installing recommended apps #60184
• [stable33] build: Remove testing app during packaging #60196
• [stable33] feat(updatenotification): handle files_lock #60203
• [stable33] chore: Increase page load timeout for oracle setup tests #60206
• [stable33] fix(public.scss): increase footer width #60208
• [stable33] Fix since checker #60219
• [stable33] fix(settings): Fix admin delegation for hidden sections #60222
• [stable33] fix: Fix permission issue when uploading a chunked file #60240
• [stable33] chore(deps-dev): Bump @vue/test-utils from 2.4.9 to 2.4.10 #60263
• [stable33] chore(deps-dev): Bump msw from 2.13.6 to 2.14.3 #60264
• [stable33] chore(deps-dev): Bump eslint from 10.2.1 to 10.3.0 #60266
• [stable33] chore(deps-dev): Bump @testing-library/cypress from 10.1.0 to 10.1.3 #60267
• [stable33] chore(deps-dev): Bump cypress-vite from 1.8.0 to 1.9.1 #60269
• [stable33] chore(deps-dev): Bump cypress from 15.14.1 to 15.14.2 #60270
• chore(deps-dev): Bump eslint-plugin-cypress from 6.3.1 to 6.4.0 #60271
• [stable33] chore(deps-dev): Bump stylelint from 17.9.1 to 17.10.0 #60272
• [stable33] chore(deps-dev): Bump eslint-plugin-no-only-tests from 3.3.0 to 3.4.0 #60273
• [stable33] chore(deps): Bump webdav from 5.9.0 to 5.10.0 #60274
• [stable33] chore(deps-dev): Bump workbox-webpack-plugin from 7.4.0 to 7.4.1 in /build/frontend-legacy #60275
• [stable33] chore(deps): Bump dompurify from 3.4.1 to 3.4.2 in /build/frontend-legacy #60276
• [stable33] chore(deps-dev): Bump msw from 2.13.6 to 2.14.3 in /build/frontend-legacy #60277
• [stable33] chore(deps): Bump webdav from 5.9.0 to 5.10.0 in /build/frontend-legacy #60278
• [stable33] feat(app-licenses): Add further compatible licenses for apps to use #60296
• [stable33] test(cypress): Reduce flakiness #60302
• [stable33] fix(http-client): detect brotli support via libcurl, not PHP extension #60309
• [stable33] fix(s3): Add Content-MD5 header for DeleteObjects to fix AWS SDK v3.339.0+ compatibility #60322
• [stable33] test(cypress): restore dashboard after app-limit test #60327
• [stable33] fix(snowflake): fix wrong documentation about serverId #60328
• [stable33] fix(files_sharing): apply link share password on first save #60329
• [stable33] fix(UserConfig): cast getTypedValue() result to string in getValueBool() #60333
• [stable33] remove unneeded sort when listing mail/federated shares #60356
• [stable33] perf: remove unneeded sort in getFolderContentsById #60357
• [stable33] fix(security): Update code signing revocation list #60381
• [stable33] fix(security): Update Expires time #60396
• [stable33] chore(deps-dev): Bump cypress-vite from 1.9.1 to 1.10.0 #60398
• [stable33] chore(deps-dev): Bump msw from 2.14.3 to 2.14.6 #60399
• [stable33] chore(deps-dev): Bump stylelint from 17.10.0 to 17.11.0 #60404
• [stable33] chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 #60406
• chore(deps-dev): Bump vite from 7.3.2 to 7.3.3 #60409
• [stable33] chore(deps-dev): Bump eslint-plugin-cypress from 6.4.0 to 6.4.1 #60412
• [stable33] fix(windmill): Fix baseUrl in background job #60468
• [stable33] chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.4 to 4.1.6 #60472
• [stable33] chore(deps-dev): Bump vitest from 4.1.4 to 4.1.6 #60473
• [stable33] fix(security): Update CA certificate bundle #60486
• [stable33] Fix error when creating mail shares if custom tokens are enabled #60509

activity

• [stable33] Update nextcloud/ocp dependency activity#2538
• fix(cypress): improve e2e test stability on stable33 activity#2561
• [stable33] refactor: replace magic batch-time seconds with named constants activity#2575
• [stable33] refactor: clarify fileCreate() condition by making the specific case explicit activity#2576
• [stable33] refactor: flatten nesting with early returns activity#2579
• [stable33] refactor: flatten nesting with early returns in FilesHooks and ViewInfoCache activity#2581
• [stable33] Update nextcloud/ocp dependency activity#2599

app_api

• fix(filesplugin): file actions invisible on NC33+ (registry mismatch, stable33) app_api#856
• [stable33] refactor: simplify enabled-state check in validateExAppRequestToNC app_api#861
• [stable33] fix(proxy): validate request path before forwarding to ExApp app_api#868
• [stable33] fix: proxy route leading slash app_api#876
• [stable33] fix: normalize missing bruteforce_protection and headers_to_exclude on ExApp routes app_api#883

bruteforcesettings

• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1077
• chore(l10n): Fixed resource name bruteforcesettings#1087
• Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 bruteforcesettings#1093
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.6 to 6.0.7 bruteforcesettings#1110
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1114

circles

• [stable33] feat: add search and limit support for team members list circles#2460
• [stable33] Update nextcloud/ocp dependency circles#2469
• [stable33] Update nextcloud/ocp dependency circles#2472
• [stable33] Update nextcloud/ocp dependency circles#2481

files_pdfviewer

• [stable33] fix: 🐛 Update pdf save to use correct dav path and credentials files_pdfviewer#1440

firstrunwizard

• [stable33] Fix npm audit firstrunwizard#1972
• chore(deps): Bump @nextcloud/vue from 9.5.0 to 9.6.0 firstrunwizard#1996
• [stable33] Update nextcloud/ocp dependency firstrunwizard#2014
• chore(deps-dev): Bump stylelint from 17.5.0 to 17.6.0 firstrunwizard#2024
• chore(deps-dev): Bump @vue/tsconfig from 0.9.0 to 0.9.1 firstrunwizard#2025
• chore(deps): Bump vue from 3.5.28 to 3.5.32 firstrunwizard#2032
• chore(deps-dev): Bump sass from 1.98.0 to 1.99.0 firstrunwizard#2033
• chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 firstrunwizard#2078

logreader

• [stable33] Update nextcloud/ocp dependency logreader#1997
• [stable33] Fix npm audit logreader#2008
• [stable33] Update nextcloud/ocp dependency logreader#2015
• [stable33] Fix npm audit logreader#2016
• [stable33] Update nextcloud/ocp dependency logreader#2024
• [stable33] feat: Remove unnecessary whitespaces logreader#2027

nextcloud_announcements

• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#621
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#623
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#628
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#631

notifications

• [stable33] build(deps): Bump vue from 3.5.32 to 3.5.33 notifications#2945
• [stable33] Fix npm audit notifications#2953
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#2979
• [stable33] Fix npm audit notifications#2983
• [stable33] feat(push): Optionally use OAEP padding notifications#2986
• [stable33] build(deps): Bump vue from 3.5.33 to 3.5.34 notifications#2997
• [stable33] Update nextcloud/ocp dependency notifications#2998
• [stable33] Fix npm audit notifications#3000
• [stable33] Update nextcloud/ocp dependency notifications#3004
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3013
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3018

password_policy

• [stable33] Chore(deps-dev): Bump sass from 1.97.1 to 1.99.0 password_policy#948

recommendations

• fix: files v4 header registration recommendations#1024
• [stable33] Fix npm audit recommendations#1033
• [stable33] Fix npm audit recommendations#999

related_resources

• chore(deps-dev): bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 related_resources#962

serverinfo

• [stable33] fix(disk): ignore efivarfs pseudo-mount serverinfo#985
• [stable33] fix(php): include Zend extensions in loaded extensions list serverinfo#987
• [stable33] ci(deps-dev): bump psalm to 6.16.1 serverinfo#989
• [stable33] ci(actions): Update workflows serverinfo#991
• [stable33] Update nextcloud/ocp dependency serverinfo#992
• [stable33] Update nextcloud/ocp dependency serverinfo#995
• [stable33] Update nextcloud/ocp dependency serverinfo#999

text

• [stable33] perf(rich_workspace): only add property for parent text#8498
• [stable33] fix(workspace): reuse WorkspaceService file lookup in direct() text#8508
• [stable33] Update nextcloud/ocp dependency text#8511
• [stable33] Fix npm audit text#8513
• [stable33] fix(LinkBubble): don't display dismiss edit button when read-only text#8519
• [stable33] Center inserted images text#8529
• [stable33] build: do not include playwright folder in packaging text#8533
• [stable33] chore(performance): use async components properly text#8535
• [stable33] Update nextcloud/ocp dependency text#8551
• fix(deps): update dependency uuid to ^13.0.2 (stable33) text#8559
• chore(deps): update dependency vite to ^7.3.3 (stable33) text#8560
• fix(deps): update dependency @nextcloud/auth to ^2.6.0 (stable33) text#8563
• fix(deps): update dependency @nextcloud/vue to ^8.39.0 (stable33) text#8564
• [stable33] fix(lists): allow to toggle between all types of lists text#8567
• [stable33] fix(TaskItem): use div instead of label element as task item wrapper text#8572
• [stable33] fix(code): fix regex to not eat preceding character text#8575
• [stable33] feat: add support for wiki-style link and image Markdown syntax text#8576
• [stable33] fix(links): allow to transform inline links to previews text#8577
• [stable33] Security: Unbounded limit parameter in user search can be abused for resource exhaustion text#8580
• [stable33] fix(links): allow to pass custom link handler into editor and use it text#8581
• [stable33] fix(orderdList): preserve non-1 start numbers text#8589
• fix(deps): update dependency katex to ^0.16.47 (stable33) text#8603
• [stable33] Update nextcloud/ocp dependency text#8605
• [stable33] Fix npm audit text#8607
• fix(deps): update dependency mermaid to ^11.15.0 (stable33) text#8609
• [stable33] fix(code): don't apply inline code CSS rules to code blocks text#8613

twofactor_nextcloud_notification

• [stable33] Fix npm audit twofactor_nextcloud_notification#1299
• [stable33] build(deps): Bump vue from 3.5.32 to 3.5.33 twofactor_nextcloud_notification#1303
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1305
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1307
• [stable33] Fix npm audit twofactor_nextcloud_notification#1310
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1320
• [stable33] Fix npm audit twofactor_nextcloud_notification#1323
• [stable33] build(deps): Bump vue from 3.5.33 to 3.5.34 twofactor_nextcloud_notification#1325
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1328
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1331
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1334

Pending PRs:

• @DerDreschner
  • [stable33] fix(DnsPinning): Ensure to always lookup based on FQDN #59157 🔁
• @icewind1991
  • [stable33] fix: allow renaming files with just update permissions #59241 ✅
• @backportbot
  • [stable33] dav: Fix fatal error when ORGANIZER is missing in CalDAV schedule #59350 ✅
• @hamza221
  • [stable33] fix(encryption): limit oprhaned keys scan to one user #59808 ✅
• @nfebe
  • [stable33] fix(files_sharing): Drop trailing '?' from public download redirect URL #59885
• @solracsf
  • [stable33] fix(files,files_sharing): swallow redirected navigation errors #59887 ✅
• @CarlSchwan
  • [stable33] fix: Dispatch old comment events #60168 ✅
• @backportbot
  • [stable33] fix: correct typo 'occured' to 'occurred' in SetupCheckManager #60210 ✅
• @provokateurin
  • [stable33] fix(Setup): Ensure instanceid is generated during installation #60301 ✅
• @CarlSchwan
  • [stable33] perf(share): Remove useless order by id #60345 ✅
• @artonge
  • [stable33] feat(users): Check assertion when enabling user #60516 ✅
• @susnux
  • [stable33] fix(files): only show template picker menu entries if possible #60522 ✅
• @danxuliu
  • [stable33] Fix downloading files from public share photos#3506 ✅
• @backportbot
  • [stable33] chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 related_resources#846
• @salmart-dev
  • fix(files_reminders): reduce N+1 query issue for big folders #58288
• (generated)
  • [stable33] chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 #60046 ✅
  • [stable33] chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 in /build/frontend-legacy #60050 ✅
  • [stable33] chore(deps): Bump @vueuse/core from 14.2.1 to 14.3.0 #60265 ✅
  • [stable33] chore(deps): Bump @vueuse/integrations from 14.2.1 to 14.3.0 #60268 ✅
  • [stable33] chore(deps): Bump vue from 3.5.33 to 3.5.34 #60401 ✅
  • [stable33] chore(deps): Bump @nextcloud/vue from 9.6.0 to 9.8.0 #60446 ✅
  • [stable33] 33.0.4 RC1 #60529

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested

[AndyScherzinger]

must-have

• [stable33] fix: allow renaming files with just update permissions #59241