[stable32] 32.0.13 RC1

[nextcloud-bot]

Nextcloud 32.0.13

server

• [stable32] fix(sharing): Align userid config key in UserPlugin with Manager #58988
• [stable32] fix: fix LazyUserFolder::getMountPoint #59653
• [stable32] fix(files_sharing): Drop trailing '?' from public download redirect URL #59884
• [stable32] occ commands for listing and refreshing mounts #59890
• [stable32] Quota wrapper fixes #60130
• [stable32] fix(files): use displayname rather than basename to use progress #60623
• [stable32] fix: use card interface instead of object #61250
• [stable32] fix(files_sharing): Hide incompatible actions in shares #61436
• [stable32] chore(deps): Bump dompurify from 3.4.8 to 3.4.10 #61464
• [stable32] chore(deps-dev): Bump sass from 1.100.0 to 1.101.0 #61465
• [stable32] chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 #61466
• [stable32] fix(files_sharing): remove filename's leading slash on unshare toast #61526
• [stable32] perf: block more properties from using the custom properties backend #61542
• [stable32] fix(settings): correct heading order in account management sidebar #61545
• [stable32] fix: Make the IProvideUserSecretBackend usable #61548
• [stable32] fix(Collaborators): Fix matching emails to remote users if no remote results are present #61569
• [stable32] fix(user_status): stabilise the user_status #61618
• [stable32] fix(dav): Load ProfilerPlugin only when profiler is enabled #61643
• [stable32] fix(config): Decrypt sensitive appconfigs when requested #61667
• [stable32] build(deps): Composer audit updates #61699
• [stable32] fix(settings): display birthday correctly regardless of browsers timezone #61713
• [stable32] fix(settings): in absence form avoid shifting dates to browsers timezone #61744
• [stable32] chore(deps): bump libphonenumber-js from 1.13.6 to 1.13.7 #61791
• [stable32] chore(deps): bump dompurify from 3.4.10 to 3.4.11 #61792
• [stable32] chore(deps): bump query-string from 9.4.0 to 9.4.1 #61793
• [stable32] chore(deps-dev): bump tar from 7.5.16 to 7.5.19 #61794
• [stable32] fix: don't return cache entries with null paths #61836
• [stable32] fix(Sharing): Don't break cache entry by setting path to null #61844
• [stable32] Fix the ScanFiles job to not trigger scans of root directory for every single user  #61860
• [stable32] fix(DeclarativeManager): Fix admin delegation #61874
• [stable32] fix(CalDav): Force trashbin deletion when re-creating item with same UID #61890
• [stable32] fix: hide scroll bar in unified search when not needed #61911
• [stable32] fix(files): distinguish between files and folders for validation messages #61921
• [stable32] feat: Disable callable serialization in sabre/xml #61926
• [stable32] test: fix HEIC tests #61927
• [stable32] feat: Fetch groups in batch in getUserGroups #61934
• [stable32] fix(Storage): use proxyexclude parameter in DAV client #61967
• [stable32] feat(login): clean remember me tokens #61970
• [stable32] chore(deps): bump phpunit/phpunit from 10.5.63 to 10.5.64 in /vendor-bin/phpunit #62001
• [stable32] chore(deps-dev): bump @vitest/coverage-v8 from 3.2.6 to 3.2.7 #62008
• [stable32] chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 #62014
• [stable32] [master] fix(security): Update code signing revocation list #62042
• [stable32] [master] fix(security): Update code signing revocation list #62048
• [stable32] perf(workflow): Implement result cache for IP checks #62055
• [stable32] fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID #62067
• [stable32] fix(caldav): url-encode owner/user in activity event links #62073
• [stable32] fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin #62101
• [stable32] fix(UserPlugin): Don't return mail matches on user id search #62111
• [stable32] fix(UserPlugin): Don't return disabled users on user ID and mail match #62117
• [stable32] ci: migrate from buildjet to cache action #62123
• [stable32] rate limiting for creating federated shares #62131
• [stable32] fix(files): fix custom client-side error messages on move/copy actions #62133
• [stable32] fix: Disable imagick preview providers #62149
• [stable32] fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled #62152
• [stable32] fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage #62158
• [stable32] fix(preview): properly handle encoded content #62175
• [stable32] fix(s3): trim multiple spaces to single space in original path header #62181
• [stable32] [master] fix(security): Update code signing revocation list #62186
• [stable32] Show group display name when the group object is not loaded yet #62194
• [stable32] fix(cache): make clear() redis cluster compatible #62203
• [stable32] Revert group display name fix #62206
• [stable32] fix(dav): release part-file lock when an upload fails #62214

3rdparty

• [stable32] build(deps): Composer audit updates 3rdparty#2500
• [stable32] feat: Disable callable serialization in sabre/xml 3rdparty#2514

activity

• [stable32] Update nextcloud/ocp dependency activity#2672
• [stable32] Update nextcloud/ocp dependency activity#2719
• chore(deps): update github actions (stable32) activity#2770
• chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (stable32) activity#2783
• [stable32] Update nextcloud/ocp dependency activity#2786

app_api

• chore(deps): Bump @nextcloud/moment from 1.3.1 to 1.3.5 app_api#915
• chore(deps): Bump marked from 14.1.1 to 14.1.4 app_api#916
• chore(deps-dev): Bump @nextcloud/eslint-config from 8.4.1 to 8.4.2 app_api#917
• chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1 app_api#918
• chore(deps): Bump @nextcloud/files from 3.9.0 to 3.9.2 app_api#919
• [stable32] feat: add release relay gh workflow app_api#922
• ci: Add terser-webpack-plugin to the dev dependency definition app_api#932

bruteforcesettings

• [stable32] Fix npm audit bruteforcesettings#1125
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1156
• [stable32] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1162
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 bruteforcesettings#1181

circles

• [stable32] ci(actions): Update workflow templates from organization template repository circles#2499
• [stable32] Update nextcloud/ocp dependency circles#2546
• fix: update stubs with provokateurin/php-stubs-updater circles#2563
• [stable32] fix(permission): get permissions for user from inherited when not direct member circles#2574
• [stable32] Update nextcloud/ocp dependency circles#2581
• chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 circles#2586
• chore(deps-dev): bump vue-tsc from 3.0.5 to 3.0.11 circles#2588
• chore(deps): bump @nextcloud/axios from 2.5.1 to 2.5.2 circles#2591
• chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 circles#2593
• chore(deps): bump @nextcloud/dialogs from 7.0.0-rc.1 to 7.0.1 circles#2596
• chore(deps-dev): bump vite from 7.3.1 to 7.3.6 circles#2599
• chore(deps): bump @nextcloud/logger from 3.0.2 to 3.0.3 circles#2600
• chore(deps): bump @nextcloud/vue from 9.0.0-rc.6 to 9.0.1 circles#2601
• [stable32] fix(workflow): switch from node.yml to npm-build.yml circles#2612
• chore(reuse): add missing BSD-3-Clause.txt license circles#2613
• [stable32] ci(actions): Update workflow templates from organization template repository circles#2627
• [stable32] fix: refresh user mounts when removed from a group or circle that has associated team folders circles#2638

files_downloadlimit

• [stable32] Fix npm audit files_downloadlimit#624
• chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 files_downloadlimit#711
• chore(deps-dev): Bump eslint from 9.39.2 to 9.39.4 files_downloadlimit#737
• chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 files_downloadlimit#788
• [stable32] Fix npm audit files_downloadlimit#862

files_pdfviewer

• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 files_pdfviewer#1461
• chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 files_pdfviewer#1469

firstrunwizard

• [stable32] Fix npm audit firstrunwizard#2086
• chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 firstrunwizard#2109
• [stable32] Update nextcloud/ocp dependency firstrunwizard#2119
• chore(deps): Bump vue from 3.5.34 to 3.5.39 firstrunwizard#2136
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 firstrunwizard#2151

logreader

• [stable32] Update nextcloud/ocp dependency logreader#2070
• [stable32] Fix npm audit logreader#2074
• [stable32] Update nextcloud/ocp dependency logreader#2089
• chore(deps-dev): bump @nextcloud/browserslist-config from 3.1.0 to 3.1.2 logreader#2095
• chore(deps-dev): bump vite from 7.3.5 to 7.3.6 logreader#2098
• chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 logreader#2108
• [stable32] Fix npm audit logreader#2114

nextcloud_announcements

• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#652
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#658
• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#664
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#665
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#671

notifications

• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3127
• [stable32] Fix npm audit notifications#3132
• [stable32] test: Push notification payload notifications#3146
• [stable32] Update nextcloud/ocp dependency notifications#3153
• [stable32] feat: Show request time to the push proxy notifications#3156
• [stable32] build(deps): Bump vue from 3.5.35 to 3.5.38 notifications#3163
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3167
• [stable32] Fix npm audit notifications#3172
• [stable32] build(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 notifications#3177
• [stable32] build(deps): Bump vue from 3.5.38 to 3.5.39 notifications#3180
• [stable32] build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 notifications#3188
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3194
• [stable32] Update nextcloud/ocp dependency notifications#3204

password_policy

• Chore(deps): Bump @nextcloud/dialogs from 6.3.1 to 6.4.2 password_policy#862
• Chore(deps-dev): Bump vite from 6.3.5 to 6.4.2 password_policy#942
• Chore(deps): Bump @nextcloud/vue from 8.35.0 to 8.39.0 password_policy#949
• Chore(deps-dev): Bump sass from 1.97.3 to 1.99.0 password_policy#955
• Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 password_policy#983

photos

• [stable32] Chore(deps-dev): Bump typescript from 5.8.3 to 5.9.3 photos#3430
• [stable32] Chore(deps): Bump axios from 1.16.0 to 1.18.1 photos#3439
• [stable32] ci(actions): Update workflow templates from organization template repository photos#3510
• [stable32] ci(actions): Update workflow templates from organization template repository photos#3599
• [stable32] Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.4 to 3.2.6 photos#3619
• [stable32] Chore(deps): Bump qs from 6.14.2 to 6.15.2 photos#3622
• [stable32] Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 photos#3644
• [stable32] Chore(deps-dev): Bump postcss from 8.5.13 to 8.5.16 photos#3654

privacy

• [stable32] ci(actions): Update workflow templates from organization template repository privacy#1360
• [stable32] Fix npm audit privacy#1361
• [stable32] chore: Add update-stable-titles workflow privacy#1385
• [stable32] Fix npm audit privacy#1396

recommendations

• [stable32] Fix npm audit recommendations#1061
• [stable32] ci(actions): Update workflow templates from organization template repository recommendations#1128

serverinfo

• [stable32] ci(actions): Update workflow templates from organization template repository serverinfo#1029
• [stable32] Update nextcloud/ocp dependency serverinfo#1038

survey_client

• [stable32] Update nextcloud/ocp dependency survey_client#444

text

• [stable32] fix(SessionService): sanitize displayName to utf8 encoding text#8405
• chore(deps): update dependency vite to ^7.3.6 (stable32) text#8731
• chore(deps): update vitest monorepo to ^3.2.6 (stable32) text#8732
• [stable32] Update nextcloud/ocp dependency text#8737
• [stable32] Fix npm audit text#8742
• [stable32] fix(editorApi): use onMentionSearch callback if provided text#8784
• [stable32] Update nextcloud/ocp dependency text#8814
• [stable32] Fix npm audit text#8819
• chore(deps): update vitest monorepo to ^3.2.7 (stable32) text#8838
• [stable32] fix(ImageView): use a element for clickable items text#8841
• [stable32] fix(links): scroll to anchor links directly text#8868
• [stable32] fix(share): detect if documentId is outside of share early text#8882

twofactor_nextcloud_notification

• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1384
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1385
• [stable32] Fix npm audit twofactor_nextcloud_notification#1390
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1400
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1403
• [stable32] Fix npm audit twofactor_nextcloud_notification#1407
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1417

twofactor_totp

• [stable32] Fix npm audit twofactor_totp#1765
• [stable32] ci: update codecov action to v7 twofactor_totp#1787
• [stable32] ci: drop unused app publish workflow twofactor_totp#1836

Pending PRs:

• @CarlSchwan
  • [stable32] fix(Propagator): rollback transaction if it fails #58131 ✅
• @nfebe
  • [stable32] fix(share): Set expiration time to end of day (23:59:59) #58709 ✅
• @DerDreschner
  • [stable32] fix(DnsPinning): Ensure to always lookup based on FQDN #59158 🔁
• @icewind1991
  • [stable32] fix: allow renaming files with just update permissions #59242 🔁
• @backportbot
  • [stable32] fix: duplicate dashboard widget #59411 ✅
• @CarlSchwan
  • [stable32] perf: Don't fetch full group object in AuthorizedGroupMapper #61850 ✅
• @solracsf
  • [stable32] fix: do not fail moves when the old location cannot be resolved activity#2796 ✅
• @ArtificialOwl
  • [stable32] avoid desync with memberships circles#2364 ✅
• @miaulalala
  • [stable32] fix(comments): mark comments as read and dismiss notifications in Activity sidebar #60622 ✅
• (generated)
  • [stable32] chore(deps): Bump handlebars from 4.7.8 to 4.7.9 #59287 ✅
  • [stable32] chore(deps-dev): bump webpack from 5.107.2 to 5.108.3 #61795 ✅
  • [stable32] chore(deps-dev): bump webpack from 5.107.2 to 5.108.4 #62010 ✅
  • [stable32] 32.0.13 RC1 #62115
  • [stable32] Fix npm audit activity#2540 ✅
  • fix(deps): update dependency vue to ^3.5.39 (stable32) activity#2774 ✅
  • chore(deps): update dependency vite to ^7.3.6 (stable32) activity#2778 ✅
  • [stable32] Fix npm audit photos#3512 ✅
  • [stable32] Update nextcloud/ocp dependency photos#3605 ✅
  • [stable32] Chore(deps): Bump webdav from 5.9.0 to 5.10.0 photos#3636 ✅
  • [stable32] Chore(deps-dev): Bump cypress-split from 1.24.28 to 1.25.0 photos#3640 ✅
  • [stable32] Chore(deps-dev): Bump autoprefixer from 10.4.24 to 10.5.2 photos#3642 ✅
  • [stable32] Chore(deps): Bump @nextcloud/vue from 8.38.0 to 8.39.0 photos#3652 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested