Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nextcloud for openSUSE:Factory checked in at 2026-08-15 22:41:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nextcloud (Old) and /work/SRC/openSUSE:Factory/.nextcloud.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nextcloud" Sat Aug 15 22:41:24 2026 rev:143 rq:1371302 version:34.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/nextcloud/nextcloud.changes 2026-07-24 00:18:43.091925616 +0200 +++ /work/SRC/openSUSE:Factory/.nextcloud.new.1258/nextcloud.changes 2026-08-15 22:41:54.887308020 +0200 @@ -1,0 +2,140 @@ +Sat Aug 15 10:45:38 UTC 2026 - ecsos <[email protected]> - 34.0.3 + +- Update to 34.0.3 + * server + - Perf: Replace more calls from getUserGroups to getUserGroupIds (server#62223) + - Improve logout url generation (server#62234) + - Fix: Output shape validation will delete keys when there is a list of files (server#62237) + - Chore: undeprecate the redis cache backend (server#62266) + - Fix(jobs): resolve portability issues with background job cleanup (server#62279) + - Fix(files_external/SMB): Use 'null' explicitly for no workgroup (server#62281) + - Fix(files): preserve encryptedVersion when copying cache entries (server#62337) + - Fix(preview): Handle unique constraints violation exception (server#62363) + - Fix(files_version): mtime confusion on milliseconds (server#62372) + - Fix(AmazonS3): pass S3 error messages through to the frontend (server#62418) + - Fix(SetupChecks): Link to task processing worker docs (server#62443) + - Fix: Don't add empty and broken ExternalShareScanJob on upgrade (server#62451) + - Fix(background-jobs): preserve Snowflake IDs as strings (server#62457) + - Fix: harden object store against copying a file to itself (server#62461) + - Fix: Use PHP_AUTH_PW for strict password confirmation (server#62537) + - Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62584) + - Perf: Use hash map to check if path was already checked (server#62588) + - Fix(TaskProcessing): Claim tasks atomically in both SynchronousBackgr… (server#62608) + - Perf(preview): Optimize retriving all previews from oc_filecache (server#62611) + - Fix(unified-search): catch errors in response (server#62616) + - Chore(previews): add file signature check before opening files (server#62620) + - Test(version-check): Fix flaky test (server#62623) + - Master] fix(security): Update code signing revocation list (server#62652) + - Fix(search): Add end date for last 7 and last 30 days (server#62685) + - Fix(caldav): Expand recurring events for principal calendar search (server#62693) + - Optimize propagator (server#62699) + - Expend a bit OCP\GlobalScale\IConfig (server#62700) + - Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62702) + - Fix(Database): Use real idle-timer to prevent `lastInsertId` being reset on MariaDB/MySQL (server#62714) + - Fix(imip): add context to imip log messages (server#62723) + - Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62733) + - Fix(jobs): compute memory usage after clean-up (server#62768) + - Fix(metadata): bind chunked file ids (server#62771) + - Perf(user-display-name): Check memory cache before trying redis (server#62778) + - Fix(encryption): Correctly report size for zero-byte encrypted files (server#62780) + - More logging around partfile rename failures (server#62782) + - Fix(provisioning_api): read newUser.sendEmail as a boolean (server#62784) + - Fix(encryption): handle decryption exception with outdated passwords (server#62788) + - Test(TestCase): restore unregistered services correctly (server#62790) + - Fix(imip): don't report success when a calendar cannot process iMip (server#62792) + - Fix(share): Avoid crash when share owner is not found (server#62798) + - Fix(systemTags): setObjectIdsForTag() dispatches once (server#62801) + - Test: migrate to Playwright (server#62803) + - Fix: handle sftp private key as password (server#62824) + - Host/ip validator hardenings (server#62829) + - Fix: disable direct link if link shares are disabled (server#62832) + - Check free space in the proper folder when restoring from trash (server#62837) + - Fix: clear key password after loading key (server#62850) + - Fix(direct editing): cleanup tokens on user deletion (server#62862) + - Fix(dav): properly finalize with MOVE only (server#62876) + - Fix(appstore): initialize the exApps store when enabled (server#62881) + - Fix(share): do not re-accept rejected shares (server#62891) + - Hide personal settings of apps not enabled for the user (server#62901) + - Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62908) + - Fix(share): Prevent type error caused by non-existing user (server#62912) + - Feat: Allow to check user existence outside specific user backends (server#62917) + - Fix: require admin permissions for all systemtag updates (server#62924) + - Fix(files_sharing): skip unresolvable share recipients (server#62928) + - Feat(lookup): search for local account only via lookupserver (server#62934) + - Fix(sharing): properly handle verification of copy/move actions (server#62937) + - Feat: allow specifying applicable users and groups in the files_external:create command (server#62949) + - Fix(setup): make sure CAN_INSTALL error page is shown (server#62953) + - Fix(trashbin): properly show deleted by for federated shares (server#62965) + - Fix(auth): log invalid token during password reset (server#62970) + - Fix(PublicPreview): Call getMimetype() on File objects (server#62976) + - Fix: Handle 2fa enforcement earlier (server#62983) + - Fix(ObjectStore): reset multipart upload byte counter on retry (server#62994) + - Fix(console): write app command loading errors to stderr (server#62998) + - Fix(files): do not let a failing move hook break the move or hide files (server#63001) + - Fix(settings): missing end of html tag (server#63016) + - Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#63020) + - Fix(files): remove leading slash from destination in copy/move toast (server#63039) + - Fix: improve logging when failing to get newly created user (server#63075) + - Fix(lookup-server): accept self-signed lus on globalscale (server#63076) + - Fix(files_trashbin): cleanup trash metadata after failed cross-user moves (server#63088) + - Fix: throw better error message if a user doesn't have a key even though it should have (server#63093) + - Fix(CalDAV): Check for user status before serving public calendars (server#63105) + - Feat(federation): Add accept/decline mechanism for federated calendars (server#63113) + - Backports ldap fixes (server#63125) + - Fix: bump dav version for to trigger migration (server#63135) + - Fix(files_versions): pass missing fileInfo properties to Viewer.compare (server#63153) + * activity + - Refactor(tests): migrate e2e test suite from Cypress to Playwright (activity#2633) + - Fix(deps): pin nextcloud/ocp to dev-stable34 in psalm vendor-bin (activity#2790) + - Perf(files): compute move/rename activity settings once (activity#2794) + - Fix: do not fail moves when the old location cannot be resolved (activity#2798) + - Fix(expire): delete conditions for activity_expire_exclude_users (activity#2806) + - Feat: adding an option to exclude users from the acitivity log (activity#2808) + - Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2830) + * app_api + - Ci(tests-deploy): wait until Nextcloud is installed before enabling AppAPI (app_api#955) + * circles + - Avoid duplicate purge on inheritance (circles#2689) + - Fix(local-controller): validate when trying adding member of type contact (circles#2703) + - Fix: Use global members limit as default for circle (circles#2706) + - Fix: add promoteToOwner method (circles#2715) + - Fix(circles): preserve group display names when creating circles (circles#2724) + * files_downloadlimit + - Fix: allow higher download limits than 500 (files_downloadlimit#907) + * files_pdfviewer + - Fix: Add explicit dependency for vue-loader@legacy (files_pdfviewer#1498) + - Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1505) + - Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1513) + * logreader + - [automated/noid/stable34-fix-npm-audit] fix(build): extract license information from .map files (logreader#2179) + * notifications + - Fix(push): Fix undefined index when accessing token age (notifications#3225) + - Build(deps): Bump guzzlehttp/guzzle (notifications#3240) + - Perf(push): Send push notifications async to proxies (notifications#3246) + - Fix(webpush): Skip browsers when disabled (notifications#3248) + * photos + - Fix: handling of directory names with special characters (photos#3665) + - Chore: adjust PHP dependencies (photos#3706) + - Fix(dav): properly handle metadata (photos#3714) + * related_resources + - Ci(psalm): Fix nextcloud/ocp update (related_resources#1047) + * serverinfo + - Fix: Mark update storage stats as time insensitive (serverinfo#1087) + * text + - Fix: add file-access check (text#8918) + - Fix: Pasting from excel inserts an image instead of a formatted table (text#8920) + - Fix(collaboration): ellipsise user caret labels (text#8926) + - Fix/autosave timer (text#8928) + - Fix: update ShowImageModal to use fullUrl for show original image instead of preview (text#8946) + - Fix(editor): fix viewer header overlaying page content on mobile (text#8953) + - Fix(DirectEditing): check if user is enabled (text#8959) + - Fix(sync): reset #sending flag when no active connection on sendStepsNow (text#8965) + - Fix(attachments): check documentId matches (text#8967) + - Chore(test): direct editing permissions (text#8975) + - Test(playwright): don't set `webServer.url` parameter (text#8976) + - Fix: guard access to unavailable extensions when rich editing is off (text#8981) + - Fix(editor): set `translate=yes` for read-only editor (text#8982) + - Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9024) + - Fix(LinkPicker): improve suggestions order and rename 'Files' (text#9025) + +------------------------------------------------------------------- @@ -5 +145,195 @@ - - No changelog from upstream at this time. + * server + - Fix(cypress): disable unsupported-browser redirect in test container (server#60807) + - Feat(UserManager): Add getters for avatar URLs (server#60811) + - Fix(core): public share download icon color and theme filter scope (server#61211) + - Fix: use card interface instead of object (server#61252) + - Docs(config): clarify metadata and conversion file size limits (server#61482) + - Fix: properly mark CleanupShareTarget as expensive (server#61498) + - Fix: update cached mounts when moving share in repair step (server#61500) + - Fix(files_trashbin): create folder if missing when expiring trash (server#61523) + - Fix(files_sharing): remove filename's leading slash on unshare toast (server#61528) + - Fix: stop calling DI container in SharedStorage (server#61529) + - Fix(preview): First cleanup from filecache and then from preview table (server#61531) + - Perf(View): don't sort twice the same array (server#61535) + - Perf: block more properties from using the custom properties backend (server#61540) + - Fix(settings): correct heading order in account management sidebar (server#61546) + - Fix: Make the IProvideUserSecretBackend usable (server#61550) + - Fix: track time spent in recursive markOrRun calls (server#61553) + - Perf(log): normalize log data only when logging (server#61557) + - Perf: avoid DIing IRootFolder at every shared storage init (server#61558) + - Fix(Collaborators): Fix matching emails to remote users if no remote results are present (server#61571) + - Fix(appstore): only show appstore entries if actual from appstore (server#61592) + - Fix(dav): Handle GenericFileException when reading default contact file (server#61596) + - Fix(a11y): label account QR code button (server#61601) + - Fix(files): Open the sidebar for the current folder, not a stale child (server#61606) + - Fix(maintenance): allow AppAPI to serve requests during maintenance mode (server#61613) + - Fix(user_status): stabilise the user_status (server#61617) + - Fix: Add plural form for translations (server#61626) + - Fix(core): use proper API routes for recommended apps (server#61633) + - Fix(dav): Load ProfilerPlugin only when profiler is enabled (server#61645) + - Fix(config): Decrypt sensitive appconfigs when requested (server#61662) + - Fix(updatenotification): use correct appstore route (server#61664) + - Fix(LoginForm): improve login throttle warning wording (server#61671) + - Fix(files_sharing): reject custom share tokens longer than the db column (server#61676) + - Fix(files_external): ignore deprecated backends (server#61691) + - Build(deps): Composer audit updates (server#61697) + - Perf: Only sort wrappers when adding them (server#61700) + - Fix(files_external): properly apply default mount options (server#61702) + - Fix(settings): in absence form avoid shifting dates to browsers timezone (server#61712) + - Fix(l10n): Fix plural (server#61734) + - Fix(settings): display birthday correctly regardless of browsers timezone (server#61737) + - Fix(dav): Always show example content section (server#61742) + - Fix(core): resolve some edge cases with recommended apps (server#61747) + - Fix(db): align preview migration annotations with created tables (server#61749) + - Fix(files_external): prevent dropdown entries from shrinking (server#61797) + - Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (server#61802) + - Chore: run `npm audit` (server#61804) + - Chore(deps): Bump axios from 1.15.0 to 1.16.1 in /build/frontend-legacy (server#61805) + - Fix(Sharing): Don't break cache entry by setting path to null (server#61842) + - Perf: Don't fetch full group object in AuthorizedGroupMapper (server#61852) + - Fix the ScanFiles job to not trigger scans of root directory for every single user (server#61862) + - Feat(OCP): Add Interaction API (server#61867) + - Test: fix HEIC tests (server#61873) + - Fix(DeclarativeManager): Fix admin delegation (server#61876) + - Fix: adjust file picker for background image to allow folder navigation (server#61878) + - Fix(bruteforce): Don't throttle requests with failing CSRF (server#61886) + - Fix(core): Throttle lost-password reset form when link is disabled (server#61888) + - Fix(CalDav): Force trashbin deletion when re-creating item with same UID (server#61892) + - Fix: hide scroll bar in unified search when not needed (server#61909) + - Fix(appstore): use proper app icon or adjust color if needed (server#61918) + - Fix(files): distinguish between files and folders for validation messages (server#61919) + - Feat: Disable callable serialization in sabre/xml (server#61923) + - Fix(files): proper accessible row name and title for overflow (server#61930) + - Show group display name when the group object is not loaded yet (server#61932) + - Feat: Fetch groups in batch in getUserGroups (server#61936) + - Fix(files_sharing): Fail on sharing file with create or delete permission before failing on increased permissions (server#61939) + - Fix: webhook payload for system tag events (server#61943) + - Chore(jobs): write proper documentation for job:history (server#61945) + - Refactor(Interaction): Allow multiple resources and receivers in a single event (server#61956) + - Fix(systemtags): remove duplicates, cleanup existing tags (server#61965) + - Fix: Catch expected NotFoundException (server#61968) + - Feat(login): clean remember me tokens (server#61972) + - Fix(files_external): S3 folder mtime updated on every read-only access (server#61977) + - Master] fix(security): Update code signing revocation list (server#62040) + - Master] fix(security): Update code signing revocation list (server#62046) + - Perf(carddav): reduce disk usage of photocache (server#62054) + - Perf(workflow): Implement result cache for IP checks (server#62057) + - Ci: migrate from buildjet to cache action (server#62061) + - Fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID (server#62069) + - Feat: KV cache based on predis (server#62070) + - Fix(caldav): url-encode owner/user in activity event links (server#62075) + - Fix(AppSearch): Always sort apps first for search (server#62085) + - Fix(UserPlugin): Don't search for displayname when restricted (server#62096) + - Fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin (server#62103) + - Fix(UserPlugin): Don't return mail matches on user id search (server#62109) + - Fix(UserPlugin): Don't return disabled users on user ID and mail match (server#62119) + - Fix(FilesWidget): allow to resize widget vertically (server#62125) + - Rate limiting for creating federated shares (server#62130) + - Feat(share): add public share-review API under OCP\Share\ShareReview (server#62132) + - Fix: Disable imagick preview providers (server#62147) + - Fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled (server#62150) + - Fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage (server#62160) + - Fix(preview): properly handle encoded content (server#62173) + - Fix(cache): make clear() redis cluster compatible (server#62177) + - Perf: Don't fetch all the trash items when deleting a single item (server#62180) + - Fix(s3): trim multiple spaces to single space in original path header (server#62183) + - Master] fix(security): Update code signing revocation list (server#62184) + - Feat(files_sharing): schedule external share scan job when accepted (server#62197) + - Fix: don't return cache entries with null paths (server#62199) + - Chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy (server#62210) + - Fix(dav): release part-file lock when an upload fails (server#62216) + - Fix(files_sharing): preserve unmasked permissions as scan_permissions (server#62218) + - Perf(dav): Stream PROPFIND output (server#62224) + - Fix: don't die if we can't encode file metadata on upload (server#62226) + - Fix(CleanupLoginTokens): Specify the table (server#62409) + - Master] fix(security): Update CA certificate bundle (server#62437) + - Fix(onetime-qrcode): Fix onetime QR code with 2FA enable (server#62449) + * 3rdparty + - Build(deps): Composer audit updates (3rdparty#2498) + - Feat: Disable callable serialization in sabre/xml (3rdparty#2513) + - Feat: add predis as a dependency for Valkey cluster support (3rdparty#2518) + * activity + - Feat: make amount of items sent on email configurable via occ (activity#2708) + - Fix(listener): Catch when trying to set up a settings that doesn't exists (activity#2793) + * app_api + - Fix(maintenance-mode): keep only HaRP and ExApp survival routes available in maintenance mode (app_api#903) + - Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 (app_api#912) + - Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 (app_api#913) + - Feat: add release relay gh workflow (app_api#924) + - Chore(deps): Bump undici from 7.24.1 to 7.28.0 (app_api#925) + - Chore(deps-dev): Bump launch-editor from 2.12.0 to 2.14.1 (app_api#926) + - Ci: Add terser-webpack-plugin to the dev dependency definition (app_api#930) + * circles + - Fix(permission): get permissions for user from inherited when not direct member (circles#2577) + - Chore(deps): bump fast-xml-parser and webdav (circles#2582) + - Chore(deps): bump dompurify from 3.3.1 to 3.4.11 (circles#2604) + - Chore(deps): bump qs from 6.14.2 to 6.15.2 (circles#2605) + - Chore(deps): bump picomatch from 2.3.1 to 2.3.2 (circles#2607) + - Chore(deps): bump bn.js (circles#2608) + - Chore(deps): bump rollup from 4.46.3 to 4.62.2 (circles#2609) + - Fix(workflow): switch from node.yml to npm-build.yml (circles#2610) + - Fix: refresh user mounts when removed from a group or circle that has associated team folders (circles#2634) + * files_downloadlimit + - Chore(CI): Adjust testing matrix for Nextcloud 34 on stable34 (files_downloadlimit#805) + - Chore: update Node version and align with stable34 (files_downloadlimit#849) + * files_lock + - Ci(litmus): change server-version to stable34 (files_lock#1126) + - Ci(tools): Update dev dependencies (files_lock#1132) + - Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_lock#1148) + - Chore(deps): Bump dompurify from 3.4.10 to 3.4.11 (files_lock#1149) + - Enh: allow file owner to unlock TYPE_TOKEN locks (files_lock#1169) + - Chore(release): bump version to 34.0.1 (files_lock#1178) + * files_pdfviewer + - Chore(deps): Bump dompurify from 3.3.3 to 3.4.11 (files_pdfviewer#1465) + - Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (files_pdfviewer#1468) + * firstrunwizard + - Chore(deps-dev): Bump js-yaml from 4.1.1 to 4.3.0 (firstrunwizard#2139) + - Chore(deps): Bump dompurify from 3.4.2 to 3.4.11 (firstrunwizard#2140) + - Chore(deps): Bump form-data from 4.0.5 to 4.0.6 (firstrunwizard#2141) + * logreader + - Chore: bump PHP version to 8.2 (logreader#2081) + * notifications + - Test: Push notification payload (notifications#3145) + - Fix(Makefile): Add missing composer setup for dev-setups and building… (notifications#3181) + - Build(deps): Apply composer audit fixes (notifications#3182) + * password_policy ++++ 40 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/nextcloud/nextcloud.changes ++++ and /work/SRC/openSUSE:Factory/.nextcloud.new.1258/nextcloud.changes Old: ---- nextcloud-34.0.2.tar.bz2 New: ---- nextcloud-34.0.3.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nextcloud.spec ++++++ --- /var/tmp/diff_new_pack.0Yn48f/_old 2026-08-15 22:42:03.439609063 +0200 +++ /var/tmp/diff_new_pack.0Yn48f/_new 2026-08-15 22:42:03.442609168 +0200 @@ -47,7 +47,7 @@ %endif Name: nextcloud -Version: 34.0.2 +Version: 34.0.3 Release: 0 Summary: File hosting service License: AGPL-3.0-only ++++++ nextcloud-34.0.2.tar.bz2 -> nextcloud-34.0.3.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/nextcloud/nextcloud-34.0.2.tar.bz2 /work/SRC/openSUSE:Factory/.nextcloud.new.1258/nextcloud-34.0.3.tar.bz2 differ: char 11, line 1
