[stable33] 33.0.7 RC1

[nextcloud-bot]

Nextcloud 33.0.7

server

• [stable33] fix(settings): sort app list by app name instead of app objects #59992
• [stable33] chore(deps): Bump @nextcloud/axios from 2.5.2 to 2.6.0 #60046
• [stable33] chore(deps): Bump @vueuse/core from 14.2.1 to 14.3.0 #60265
• chore(deps): bump @vueuse/integrations from 14.2.1 to 14.3.0 #60268
• [stable33] fix(core): public share download icon color and theme filter scope #61210
• [stable33] test(ldap): align expectation for unset ldapUserDisplayName2 with implementation to avoid PHP 8.5 warning #61411
• [stable33] chore(deps): Bump vue from 3.5.35 to 3.5.38 #61467
• [stable33] chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 #61468
• [stable33] chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 #61470
• [stable33] chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 #61471
• [stable33] chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 #61472
• [stable33] chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 #61474
• [stable33] fix(files_sharing): remove filename's leading slash on unshare toast #61527
• [stable33] perf: block more properties from using the custom properties backend #61541
• [stable33] fix(settings): correct heading order in account management sidebar #61547
• [stable33] fix: Make the IProvideUserSecretBackend usable #61549
• [stable33] perf(log): normalize log data only when logging #61556
• [stable33] fix(Collaborators): Fix matching emails to remote users if no remote results are present #61570
• [stable33] fix(dav): Handle GenericFileException when reading default contact file #61595
• [stable33] fix(a11y): label account QR code button #61603
• [stable33] fix(files): Open the sidebar for the current folder, not a stale child #61605
• [stable33] fix(dav): Load ProfilerPlugin only when profiler is enabled #61644
• [stable33] fix(config): Decrypt sensitive appconfigs when requested #61661
• [stable33] fix(files_external): ignore deprecated backends #61692
• [stable33] build(deps): Composer audit updates #61698
• [stable33] fix(files_external): properly apply default mount options #61701
• [stable33] fix(settings): in absence form avoid shifting dates to browsers timezone #61711
• [stable33] fix(settings): display birthday correctly regardless of browsers timezone #61714
• [stable33] fix(db): align preview migration annotations with created tables #61750
• chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 #61782
• [stable33] chore(deps-dev): bump vite from 7.3.5 to 7.3.6 #61783
• [stable33] chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 #61784
• [stable33] chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 #61785
• [stable33] chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 #61786
• chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 #61787
• [stable33] chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 #61788
• [stable33] chore(deps): bump vue from 3.5.38 to 3.5.39 #61789
• [stable33] chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy #61807
• [stable33] chore(deps-dev): bump @babel/plugin-transform-private-methods from 7.28.6 to 7.29.7 in /build/frontend-legacy #61808
• [stable33] chore(deps): bump @nextcloud/vue from 8.38.0 to 8.39.0 in /build/frontend-legacy #61809
• [stable33] chore(deps-dev): bump @babel/preset-typescript from 7.28.5 to 7.29.7 in /build/frontend-legacy #61810
• chore(deps-dev): bump sass from 1.99.0 to 1.101.0 in /build/frontend-legacy #61812
• chore(deps-dev): bump vite from 7.3.2 to 7.3.6 in /build/frontend-legacy #61813
• [stable33] chore(deps-dev): bump @babel/node from 7.29.0 to 7.29.7 in /build/frontend-legacy #61814
• [stable33] chore(deps): bump libphonenumber-js from 1.12.42 to 1.13.7 in /build/frontend-legacy #61815
• [stable33] chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy #61816
• [stable33] chore(deps-dev): bump msw from 2.14.3 to 2.14.6 in /build/frontend-legacy #61817
• [stable33] chore(deps-dev): bump @vitest/coverage-v8 from 4.1.4 to 4.1.9 in /build/frontend-legacy #61818
• [stable33] chore(deps): bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy #61819
• [stable33] chore(deps-dev): bump vitest from 4.1.4 to 4.1.9 in /build/frontend-legacy #61820
• [stable33] test(settings): fix E2E selector for out of office replacement element #61839
• [stable33] fix(Sharing): Don't break cache entry by setting path to null #61843
• [stable33] fix(DeclarativeManager): Fix admin delegation #61875
• [stable33] fix: adjust file picker for background image to allow folder navigation #61879
• [stable33] fix(bruteforce): Don't throttle requests with failing CSRF #61885
• [stable33] fix(CalDav): Force trashbin deletion when re-creating item with same UID #61891
• [stable33] test: fix HEIC tests #61893
• [stable33] fix: hide scroll bar in unified search when not needed #61910
• [stable33] fix(files): distinguish between files and folders for validation messages #61920
• [stable33] feat: Disable callable serialization in sabre/xml #61924
• [stable33] fix: Catch expected NotFoundException #61969
• [stable33] chore(deps-dev): bump sass from 1.100.0 to 1.101.0 #62000
• [stable33] chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 #62002
• [stable33] chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 #62003
• [stable33] chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 #62004
• [stable33] chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat #62005
• [stable33] chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit #62006
• [stable33] chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /build/frontend-legacy #62007
• [stable33] chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10 in /build/frontend-legacy #62009
• [stable33] chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy #62011
• [stable33] chore(deps): bump p-queue from 9.3.0 to 9.3.1 in /build/frontend-legacy #62013
• [stable33] [master] fix(security): Update code signing revocation list #62041
• [stable33] [master] fix(security): Update code signing revocation list #62047
• [stable33] perf(carddav): reduce disk usage of photocache #62053
• [stable33] perf(workflow): Implement result cache for IP checks #62056

3rdparty

• [stable33] build(deps): Composer audit updates 3rdparty#2499
• [stable33] feat: Disable callable serialization in sabre/xml 3rdparty#2512

activity

• [stable33] Fix npm audit activity#2645
• [stable33] feat: make amount of items sent on email configurable via occ activity#2709
• fix(deps): update dependency phpunit/phpunit to v11.5.50 (stable33) activity#2749
• chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (stable33) activity#2751
• chore(deps): update github actions (stable33) activity#2757
• chore(deps): update nextcloud/pr-feedback-action digest to 4709fa5 (stable33) activity#2781
• chore(deps): update dependency phpunit/phpunit to ^11.5.55 (stable33) activity#2782

app_api

• [stable33] feat: add release relay gh workflow app_api#923
• ci: Add terser-webpack-plugin to the dev dependency definition app_api#931
• [stable33] Fix npm audit app_api#935

bruteforcesettings

• [stable33] Fix npm audit bruteforcesettings#1079
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1155
• [stable33] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1163
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 bruteforcesettings#1177

circles

• [stable33] ci(actions): Update workflow templates from organization template repository circles#2498
• fix: update stubs to avoid psalm errors circles#2560
• [stable33] fix(permission): get permissions for user from inherited when not direct member circles#2576
• chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 circles#2585
• chore(deps-dev): bump vite from 7.1.11 to 7.1.12 circles#2589
• chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 circles#2592
• chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 circles#2597
• chore(deps): bump @nextcloud/l10n from 3.4.0 to 3.4.1 circles#2598
• [stable33] fix(workflow): switch from node.yml to npm-build.yml circles#2611

files_downloadlimit

• chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 files_downloadlimit#704
• chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 files_downloadlimit#712
• chore(deps-dev): Bump eslint from 9.38.0 to 9.39.4 files_downloadlimit#738
• chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 files_downloadlimit#758
• chore(deps): Bump @nextcloud/auth from 2.5.3 to 2.6.0 files_downloadlimit#780
• chore(deps): Bump @nextcloud/dialogs from 7.1.0 to 7.4.0 files_downloadlimit#835
• chore(deps): Bump @nextcloud/vue from 9.1.0 to 9.8.2 files_downloadlimit#839
• chore(deps): Bump vue from 3.5.22 to 3.5.35 files_downloadlimit#841
• chore(deps-dev): Bump vite from 7.1.12 to 7.3.5 files_downloadlimit#842
• chore(deps): Bump vue from 3.5.35 to 3.5.38 files_downloadlimit#856
• [stable33] Fix npm audit files_downloadlimit#863
• chore(deps): Bump vue from 3.5.38 to 3.5.39 files_downloadlimit#868

files_pdfviewer

• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 files_pdfviewer#1462
• chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 files_pdfviewer#1470

firstrunwizard

• chore(deps-dev): Bump vite from 7.3.1 to 7.3.6 firstrunwizard#2082
• [stable33] Fix npm audit firstrunwizard#2087
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.8 to 9.0.0 firstrunwizard#2147
• chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 firstrunwizard#2148
• chore(deps-dev): Bump stylelint from 17.11.1 to 17.14.0 firstrunwizard#2149

logreader

• [stable33] Fix npm audit logreader#2076
• chore: bump PHP version to 8.2 logreader#2082
• [stable33] Update nextcloud/ocp dependency logreader#2084
• [stable33] Fix npm audit logreader#2092
• chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 logreader#2099
• chore(deps-dev): bump @vitest/coverage-istanbul from 4.1.8 to 4.1.9 logreader#2102
• chore(deps): bump vue from 3.5.26 to 3.5.39 logreader#2103
• chore(deps-dev): bump vitest from 4.1.8 to 4.1.9 logreader#2105
• chore(deps-dev): bump browserslist from 4.28.1 to 4.28.4 logreader#2106
• chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.6 to 9.0.0 logreader#2109

nextcloud_announcements

• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#654
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#657
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#666
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#672

notifications

• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3130
• [stable33] Fix npm audit notifications#3131
• [stable33] test: Push notification payload notifications#3139
• [stable33] Update nextcloud/ocp dependency notifications#3150
• [stable33] feat: Show request time to the push proxy notifications#3155
• [stable33] build(deps): Bump vue from 3.5.35 to 3.5.38 notifications#3164
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3169
• [stable33] Fix npm audit notifications#3173
• [stable33] build(deps): Bump vue from 3.5.38 to 3.5.39 notifications#3179
• [stable33] build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 notifications#3190
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3193

password_policy

• [stable33] Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 password_policy#876
• [stable33] Fix npm audit password_policy#883
• [stable33] Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.39.0 password_policy#944
• [stable33] Chore(deps-dev): Bump vite from 7.3.0 to 7.3.6 password_policy#950
• [stable33] Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.1 to 3.2.2 password_policy#954
• [stable33] feat: Add login output when password policy fails password_policy#967
• [stable33] Fix npm audit password_policy#976
• [stable33] Chore(deps-dev): Bump sass from 1.99.0 to 1.101.0 password_policy#986
• [stable33] Chore(deps-dev): Bump @vue/tsconfig from 0.5.1 to 0.9.1 password_policy#987

photos

• [stable33] ci(actions): Update workflow templates from organization template repository photos#3511
• [stable33] build(deps): Unblock dependency updates by allowing to update vite again photos#3588
• [stable33] Fix npm audit photos#3591
• [stable33] ci(actions): Update workflow templates from organization template repository photos#3598
• [stable33] Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.2.2 photos#3618
• [stable33] Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 photos#3635
• [stable33] Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 photos#3637
• [stable33] chore(test): Migrate to @nc/e2e-test-server photos#3645

privacy

• [stable33] ci(actions): Update workflow templates from organization template repository privacy#1359
• [stable33] chore: Add update-stable-titles workflow privacy#1384
• [stable33] ci(actions): Update workflow templates from organization template repository privacy#1394

recommendations

• [stable33] Fix npm audit recommendations#1063
• fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (stable33) recommendations#1121
• [stable33] ci(actions): Update workflow templates from organization template repository recommendations#1127

serverinfo

• [stable33] ci(actions): Update workflow templates from organization template repository serverinfo#1031
• [stable33] Update nextcloud/ocp dependency serverinfo#1034
• [stable33] Use a parameterized translation for CPU thread count serverinfo#1040

suspicious_login

• [stable33] chore(psalm): Update to psalm 6 suspicious_login#1069

text

• [stable33] Update nextcloud/ocp dependency text#8771
• [stable33] Fix npm audit text#8772
• [stable33] fix(autofocus): persist cursor positions in localStorage text#8777
• [stable33] fix(ActionInsertLink): allow to get title from link picker text#8790
• [stable33] fix(markdown): preserve horizontal rule markup text#8793
• [stable33] Fix npm audit text#8818
• chore(deps): update dependency vite to ^7.3.6 (stable33) text#8835
• chore(deps): update vitest monorepo to ^4.1.9 (stable33) text#8836
• fix(deps): update dependency prosemirror-markdown to ^1.13.5 (stable33) text#8837
• [stable33] fix(ImageView): use a element for clickable items text#8842
• [stable33] ci(playwright): fix installing pinned NPM version text#8846
• chore(deps): update vitest monorepo to ^4.1.10 (stable33) text#8850
• [stable33] fix(links): scroll to anchor links directly text#8862
• [stable33] fix(FloatingButtons): in headings, leave space for the anchor icon text#8864
• [stable33] fix(BulletList): remove preserveWhitespace: true parseHTML override text#8867
• [stable33] chore(deps): bump @nextcloud/vue to 8.40.0 text#8873

twofactor_nextcloud_notification

• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1381
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1388
• [stable33] Fix npm audit twofactor_nextcloud_notification#1391
• [stable33] build(deps): Bump vue from 3.5.35 to 3.5.38 twofactor_nextcloud_notification#1398
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1404
• [stable33] Fix npm audit twofactor_nextcloud_notification#1406
• [stable33] build(deps): Bump vue from 3.5.38 to 3.5.39 twofactor_nextcloud_notification#1412
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1416

twofactor_totp

• [stable33] Fix npm audit twofactor_totp#1756
• [stable33] ci: update codecov action to v7 twofactor_totp#1788
• [stable33] ci: drop unused app publish workflow twofactor_totp#1837

Pending PRs:

• @SebastianKrupinski
  • [stable33] fix: generate favourite icon without imagick svg support #58225
• @DerDreschner
  • [stable33] fix(DnsPinning): Ensure to always lookup based on FQDN #59157 🔁
• @nfebe
  • [stable33] fix(files_sharing): Drop trailing '?' from public download redirect URL #59885 ✅
• @icewind1991
  • [stable33] fix: update cached mounts when moving share in repair step #61499 ✅
• @miaulalala
  • [stable33] fix(user_status): stabilise the user_status #61619 ✅
• @CarlSchwan
  • [stable33] perf: Only sort wrappers when adding them #61718 ✅
• @kesselb
  • [stable33] fix(dav): Always show example content section  #61741 ✅
• @icewind1991
  • [stable33] fix: don't return cache entries with null paths #61835
• @CarlSchwan
  • [stable33] perf: Don't fetch full group object in AuthorizedGroupMapper #61851 ✅
• @backportbot
  • [stable33] Fix the ScanFiles job to not trigger scans of root directory for every single user  #61861
• @nfebe
  • [stable33] fix(core): Throttle lost-password reset form when link is disabled #61887
• @CarlSchwan
  • [stable33] feat: Fetch groups in batch in getUserGroups #61935 ✅
• @luka-nextcloud
  • [stable33] fix: webhook payload for system tag events #61942 ✅
• @Altahrim
  • [stable33] feat(login): clean remember me tokens #61971
• @SebastianKrupinski
  • [stable33] fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID #62068
  • [stable33] fix(caldav): url-encode owner/user in activity event links #62074 ✅
• @DerDreschner
  • [stable33] fix(UserPlugin): Don't search for displayname when restricted #62097
  • [stable33] fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin #62102
  • [stable33] fix(UserPlugin): Don't return mail matches on user id search #62110
• @icewind1991
  • [stable33] fix: don't apply limit if it's disabled files_downloadlimit#866
• @marcelklehr
  • [stable33] Fix: faces actions and add recognize e2e tests photos#3578 ✅
• @backportbot
  • [stable33] chore(deps-dev): bump phpunit/phpunit from 10.5.25 to 10.5.62 related_resources#846
  • [stable33] fix(SessionService): sanitize displayName to utf8 encoding text#8781
• @mejo-
  • [stable33] fix(Table): allow changing list indention inside tables text#8877 ✅
• @come-nc
  • [stable33] fix: Fix explode calls for path parsing updater#762 ✅
• @miaulalala
  • [stable33] fix(cypress): disable unsupported-browser redirect in test container #60805
• (generated)
  • [stable33] chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 #61790 ✅
  • chore(deps-dev): bump @nextcloud/vite-config from 2.5.2 to 2.5.4 #61999 ✅
  • [stable33] chore(deps-dev): bump webpack from 5.106.2 to 5.108.4 in /build/frontend-legacy #62012 ✅
  • fix(deps): update dependency vue to ^3.5.39 (stable33) activity#2758 ✅
  • [stable33] Update nextcloud/ocp dependency photos#3393 ✅
  • [stable33] Chore(deps-dev): Bump eslint-plugin-cypress from 5.1.0 to 5.3.0 photos#3617 ✅
  • Chore(deps-dev): Bump @nextcloud/babel-config from 1.2.0 to 1.3.0 photos#3631 ✅
  • [stable33] Chore(deps-dev): Bump autoprefixer from 10.4.21 to 10.5.2 photos#3632 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested