31.0.5 RC1

[blizzz]

• [stable31] perf(files_reminders): Reduce db queries on propfind #51736
• build(deps-dev): bump mime from 4.0.6 to 4.0.7 #51963
• [stable31] fix(systemtags): emit assign and unassign bulk tagging events #51996
• [stable31] perf(files_sharing): do not emit second propfind for account filter #52001
• [stable31] fix: adjust webpack nonce generation #52003
• [stable31] perf(cloud_federation_api): only provide capabilities if needed #52030
• [stable31] fix: Proper order for checking path prefix for getting file by id from cache #52039
• [stable31] fix: fix preloading files with no custom properties #52101
• [stable31] Fix(TaskProcessing): for validation for taskprocessing EShapeType #52118
• Revert "[stable31] feat(bulk-upload): change the default to disabled as there are still some bugs present" #52138
• [stable31] fix: Transfer ownership with S3 as primary #52185
• [stable31] fix(files_sharing): file request pass empty string if password or expiration is disabled #52197
• [stable31] perf: Log requests using high amount of memory as warning #52219
• [stable31] fix(files_sharing): bring back handling of hide-download on public shares #52226
• [stable31] feat(security): add configurable IPv6 subnet for BFP and throttling #52233
• [stable31] fix: Check that user actually can validate password for js #52237
• [stable31] fix(mail): use matching text color for primary elements #52248
• [stable31] fix(Log): revert swich to ?? operator #52254
• [stable31] fix(usermanager): Don't throw when checking if a too long user id is an existing user #52256
• build(deps-dev): bump @types/dockerode from 3.3.37 to 3.3.38 #52270
• [stable31] fix(LDAP): inlcude ldapExpertUsernameAttr in general attribute list #52287
• [stable31] chore(dependencies): update @nextcloud/vue to v8.25.1 #52295
• [stable31] feat: add logging to preview generation #52300
• [stable31] fix(dav): allow uploading of files with long filenames #52302
• build(deps-dev): bump guzzlehttp/guzzle from 7.9.2 to 7.9.3 in /build/integration #52313
• build(deps-dev): bump phpunit/phpunit from 9.6.21 to 9.6.22 in /build/integration #52314
• build(deps-dev): bump cypress-if from 1.12.6 to 1.13.2 #52316
• build(deps): bump phpunit/phpunit from 9.6.19 to 9.6.22 in /vendor-bin/phpunit #52317
• build(deps): bump p-limit from 6.1.0 to 6.2.0 #52320
• build(deps): bump marked from 15.0.8 to 15.0.9 #52323
• build(deps-dev): bump jasmine-core from 2.5.2 to 2.99.1 #52326
• build(deps): bump @vueuse/integrations from 11.1.0 to 11.3.0 #52328
• build(deps): bump core-js from 3.40.0 to 3.41.0 #52332
• build(deps-dev): bump webpack from 5.94.0 to 5.99.6 #52336
• build(deps): bump @vueuse/components from 11.1.0 to 11.3.0 #52338
• build(deps-dev): bump @testing-library/user-event from 14.5.2 to 14.6.1 #52341
• build(deps-dev): bump sass from 1.81.1 to 1.87.0 #52343
• build(deps-dev): bump stylelint from 16.9.0 to 16.18.0 #52345
• build(deps-dev): bump cypress from 13.15.2 to 13.17.0 #52349
• build(deps-dev): bump @babel/node from 7.25.9 to 7.26.0 #52351
• build(deps-dev): bump @babel/preset-typescript from 7.26.0 to 7.27.0 #52354
• build(deps): bump libphonenumber-js from 1.11.20 to 1.12.7 #52356
• build(deps-dev): bump cypress-axe from 1.5.0 to 1.6.0 #52357
• [stable31] fix(files): prevent dragging preview when drag-drop #52363
• [stable31] chore(i18n): Use "name" instead of "nickname" #52371
• [stable31] feat(profile): Add an API to get the profile field data #52372
• [stable31] fix(objectstorage): add retry attempts to S3 connection #52382
• [stable31] fix(federation): allows equal signs in federation id #52387
• [stable31] fix(db): Create replacement index where original index is missing #52394
• [stable31] refactor: Thumbnail Generator logging and tests #52401
• [stable31] fix(updatenotification): Fix error handling when fetching applist for server update #52406
• [stable31] fix(files_sharing): Improve expiration date input change handling #52409
• [stable31] fix(files_versions): create version if previous does not exist #52411
• [stable31] perf(db): Extend index on cards_properties to cover name and value #52415
• [stable31] fix(previews): avoid large file downloads for remote movie storage #52418
• [stable31] test(cypress): rename select all clear #52422
• [stable31] fix(federation): Allow federation file sharing when federation app is… #52425
• [stable31] fix(config): Censor more app configs in system report #52433
• [stable31] fix(occ): Fix autocompletion of config:app:* commands #52435
• [stable31] fix(settings): Use axios directly for health check to preven URL sanitizing #52440
• build(deps-dev): bump dockerode from 4.0.5 to 4.0.6 #52447
• build(deps): bump @nextcloud/vue from 8.25.1 to 8.26.0 #52448
• build(deps-dev): bump @testing-library/jest-dom from 6.5.0 to 6.6.3 #52449
• build(deps-dev): bump webpack from 5.99.6 to 5.99.7 #52450
• build(deps): bump marked from 15.0.9 to 15.0.11 #52451
• build(deps-dev): bump typescript from 5.7.3 to 5.8.3 #52452
• build(deps-dev): bump puppeteer from 24.4.0 to 24.7.2 #52453
• build(deps-dev): bump stylelint from 16.18.0 to 16.19.1 #52454
• [stable31] fix(settings): only provide groups the subadmin has access to  #52486
• [stable31] fix(settings): allow to clear twitter and fediverse #52488
• [stable31] fix(files_sharing): Show remote shares as external #52498
• [stable31] fix: don't check node access again for listing reminders in dav #52504
• [stable31] fix(navigation): Fix default app entry registered as closure #52507
• [stable31] fix(32bit): use PHP_INT_MAX where needed #52512
• [stable31] fix(JSResourceLocator) fix incorrect parameter being used. #52520
• [stable31] fix(theming): remove scssphp and use just native nested CSS #52521
• [stable31] fix(WFE): properly set inital status #52527
• [stable31] fix(files_sharing): Prevent create/delete permissions on file shares #52531
• [stable31] perf(caldav): increase chunk size in RemoveOrphanEventsAndContacts repair step #52548
• [stable31] fix(dav): check the owner displayName scope before giving attribute #52554
• [stable31] fix(files_sharing): bring back owner and ownerDisplayName initial state #52555
• [stable31] fix(CalDAV): do not ignore move command object target uri #52562
• [stable31] fix: Forward attributes to the sidebar #52566
• [stable31] fix(WeatherStatus): Check if result is an array #52569
• [stable31] fix(notification): Notification in activity shows "Rich subject or a … #52576
• [stable31] fix: Flaky samba kerberos tests #52578
• build(deps-dev): bump @babel/node from 7.26.0 to 7.27.1 #52604
• build(deps): bump query-string from 9.1.1 to 9.1.2 #52606
• [stable31] fix(loginflow): Fix type error when password could not be decrypted #52625
• [stable31] fix(workflowengine): fix group not shown in Group membership check #52640
• [stable31] fix(files_external): Mark password fields for LoginCredentials and SessionCredentials as hidden and optional #52643
• [stable31] fix(apps): Sort names separately from active/update state #52653
• [stable31] fix(files): Fix non-string values for activity rich object strings #52658
• [stable31] fix(blurhash): Use preview API to generate the previews #52661
• [stable31] Update nextcloud/ocp dependency activity#1953
• [stable31] fix: don't setup the filesystem to check if a user is blocked by ACLs activity#1985
• [stable31] chore: Update workflows activity#1991
• [stable31] Fix multiple cypress issues activity#1994
• [stable31] fix(info.xml): correct developer docs link (typo) app_api#560
• [stable31] fix(exAppMapper): init missing headers_to_exclude app_api#564
• [stable31] fix(CI): disable RateLimiting for Nextcloud in the CI app_api#565
• [stable31] feat: lowercase headers to exclude in exapp proxy app_api#569
• [stable31] Fix task processing registration validation app_api#573
• [stable31] Fix npm audit bruteforcesettings#729
• [stable31] Fix npm audit bruteforcesettings#734
• [stable31] Fix npm audit bruteforcesettings#738
• [stable31] switch to probeCircles circles#1983
• [stable31] Fix npm audit files_pdfviewer#1184
• [stable31] Fix saving annotations in paths with special characters files_pdfviewer#1194
• [stable31] Fix npm audit files_pdfviewer#1200
• [stable31] fix: Open PDF file in "richdocuments" if it is not downloadable files_pdfviewer#1204
• [stable31] Remove custom handling for public share pages with single files files_pdfviewer#1206
• [stable31] Fix npm audit firstrunwizard#1559
• Chore(deps-dev): Bump @nextcloud/vite-config from 1.5.2 to 1.5.4 firstrunwizard#1601
• Chore(deps-dev): Bump vite from 5.4.18 to 5.4.19 firstrunwizard#1602
• [stable31] Update nextcloud/ocp dependency logreader#1610
• [stable31] Fix npm audit logreader#1612
• [stable31] fix(LogTable): implement virtual scrolling logreader#1616
• [stable31] Update nextcloud/ocp dependency logreader#1623
• [stable31] Fix npm audit logreader#1627
• [stable31] chore: update workflows logreader#1629
• [stable31] Fix npm audit logreader#1638
• [stable31] Update nextcloud/ocp dependency nextcloud_announcements#472
• [stable31] Update nextcloud/ocp dependency nextcloud_announcements#473
• [stable31] ci: Fix typo in performance integration test run notifications#2293
• [stable31] Update nextcloud/ocp dependency notifications#2301
• [stable31] Fix npm audit notifications#2303
• [stable31] fix(build): avoid double load of the app notifications#2309
• [stable31] Update nextcloud/ocp dependency notifications#2314
• [stable31] Fix npm audit notifications#2318
• build(deps-dev): Bump @nextcloud/vite-config from 1.5.3 to 1.5.4 notifications#2320
• [stable31] Fix npm audit notifications#2328
• Chore(deps-dev): Bump dockerode from 4.0.4 to 4.0.5 photos#2913
• [stable31] Fix npm audit photos#2921
• [stable31] Update nextcloud/ocp dependency photos#2939
• Chore(deps): Bump @nextcloud/sharing from 0.1.0 to 0.2.4 photos#2953
• Chore(deps): Bump @mdi/svg from 7.3.67 to 7.4.47 photos#2956
• Chore(deps-dev): Bump @nextcloud/eslint-config from 8.2.1 to 8.4.2 photos#2958
• Chore(deps-dev): Bump @nextcloud/babel-config from 1.0.0 to 1.2.0 photos#2961
• Chore(deps): Bump qs from 6.13.1 to 6.14.0 photos#2975
• Chore(deps-dev): Bump cypress-visual-regression from 5.2.2 to 5.3.0 photos#2977
• Chore(deps-dev): Bump @nextcloud/webpack-vue-config from 6.2.0 to 6.3.0 photos#2978
• [stable31] Update nextcloud/ocp dependency photos#2979
• [stable31] Fix npm audit photos#2982
• [stable31] fix(Places): Use event metadata to compute the place photos#2989
• Chore(deps): Bump @nextcloud/dialogs from 6.1.1 to 6.2.0 photos#2990
• Chore(deps-dev): Bump dockerode from 4.0.5 to 4.0.6 photos#2991
• [stable31] Update nextcloud/ocp dependency serverinfo#792
• [stable31] Update nextcloud/ocp dependency serverinfo#797
• [stable31] fix: try to avoid memory exhaustion suspicious_login#988
• [stable31] fix: exclude vendor-bin from release artifacts suspicious_login#989
• [stable31] chore: drop remaining files from webpack / jest text#7085
• fix(deps): update dependency y-prosemirror to ^1.3.3 (stable31) text#7138
• fix(deps): update dependency yjs to ^13.6.26 (stable31) text#7139
• fix(deps): update dependency y-prosemirror to ^1.3.4 (stable31) text#7150
• [stable31] Refactor document status and menubar padding text#7158
• chore(deps): update dependency @nextcloud/vite-config to ^1.5.4 (stable31) text#7168
• chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.40.1 (stable31) text#7169
• chore(deps): update dependency vite to ^5.4.19 (stable31) text#7170
• fix(deps): update dependency lib0 to ^0.2.105 (stable31) text#7171
• fix(deps): update tiptap to ^2.11.9 (stable31) text#7172
• fix(deps): update dependency @nextcloud/dialogs to ^6.2.0 (stable31) text#7173
• [stable31] fix(files): Remove obsolete loading code from old API, add public shared id to enabled view text#7181
• [stable31] chore(SessionList): Migrate to NcButton and MDI icon text#7186
• [stable31] fix: Adjust padding in table cell and header components text#7189
• [stable31] fix: submit button on file picker dialog text#7190
• [stable31] fix: Apply storage checks in addition to share text#7192
• [stable31] Fix npm audit twofactor_nextcloud_notification#951
• [stable31] Update nextcloud/ocp dependency twofactor_nextcloud_notification#979
• ci: Update github actions twofactor_nextcloud_notification#989
• [stable31] Update nextcloud/ocp dependency twofactor_nextcloud_notification#993
• chore(deps): update dependency vite to ^5.4.18 (stable31) viewer#2723
• chore(deps): update dockerode (stable31) viewer#2786
• [stable31] feat: handle hide-download DAV property viewer#2807

Pending PRs:

• @backportbot
  • [stable31] fix(singularandpluralfiles):implemented ternary operator to handle si… #51419
• @icewind1991
  • [stable31] fix: more optimized caching for share target verification #52071
• @edward-ly
  • [stable31] fix(TaskProcessing): increase task cleanup delay #52656
• @st3iny
  • [stable31] fix(dav): move orphan cleaning logic to a chunked background job #52663
• @juliusknorr
  • [stable31] fix: Do not update page title for single file public shares viewer#2793
• @kesselb
  • [stable31] ci(deps): update psalm serverinfo#784
• @susnux
  • [stable31] chore(deps): Bump laravel/serializable-closure from 1.3.5 to 1.3.7 #52399
• (generated)
  • build(deps): bump phpunit/phpunit from 9.6.22 to 9.6.23 in /vendor-bin/phpunit #52599
  • build(deps): bump @nextcloud/dialogs from 6.1.1 to 6.2.0 #52602
  • build(deps): bump core-js from 3.41.0 to 3.42.0 #52605

[blizzz]

Required PRs

• [stable31] fix(workflowengine): fix group not shown in Group membership check #52640
• [stable31] fix(files_external): Mark password fields for LoginCredentials and SessionCredentials as hidden and optional #52643
• back of feat(files_sharing): Add toggle to control display area for federated shares #52511
• [stable31] fix(files): Remove obsolete loading code from old API, add public shared id to enabled view text#7181
• [stable31] fix: Apply storage checks in addition to share text#7192

Nice to have PRs

• backport of fix(files_sharing): Filter own shares that are reshares #52503