upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-05-28 04:32:30 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 26
86905 commits 985 branches 1211 tags 9.7 GiB
Commit graph

2251 commits

Author SHA1 Message Date
skjnldsv
3df063f673 fix(config): add null coalescing fallback in getValueBool before strtolower 
Followup to #59646: guard against null reaching strtolower() in both
AppConfig and UserConfig getValueBool(). Also aligns AppConfig with the
(string) cast added in UserConfig by the original PR.

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
 2026-05-26 07:33:07 +00:00
Ferdinand Thiessen
7a18c5993d
fix(OC_Helper): properly calculate quota of shared storages 
- resolves https://github.com/nextcloud/server/issues/55659

First we need to properly handle shared storages,
because there the quota is the quota of the user who owns the nodes,
not the user who shared the nodes.

Second if no user can be fetched then we cannot get the global storage
info, thus in this case (public share?) we need to safe-guard.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2026-05-19 19:03:09 +02:00
Daniel Calviño Sánchez
4f58d490d1 fix: Fix error when creating mail shares if custom tokens are enabled 
When a new share is saved it is first created in the backend and then
updated with some additional attributes set in the frontend. If custom
tokens are enabled the attributes to update also include the token.
However, for new shares the token is set by the backend when it is
created, it is not defined by the frontend, so the token returned by the
backend needs to be copied to the share data in the frontend. Otherwise
the update would fail because an empty token is sent.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
 2026-05-18 16:21:35 +02:00
nextcloud-command
c1c288812a fix(security): Update CA certificate bundle 
Signed-off-by: GitHub <noreply@github.com>
 2026-05-17 03:19:10 +00:00
Joas Schilling
889e32c7d8
Merge pull request #60333 from nextcloud/backport/59646/stable33
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Integration sqlite / changes (push) Waiting to run
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, --tags ~@large files_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, capabilities_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, collaboration_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, comments_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, dav_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, federation_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, file_conversions) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, files_reminders) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, filesdrop_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, ldap_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, openldap_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, openldap_numerical_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, remoteapi_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, routing_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, setup_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, sharees_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, sharing_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, theming_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, videoverification_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis-security (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis-ocp (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis-ncu (push) Waiting to run
Details 
[stable33] fix(UserConfig): cast getTypedValue() result to string in getValueBool()
 2026-05-15 15:59:05 +02:00
Robin Appelman
cfd63b8e41 test: adjust tests to unsorted folder listing 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2026-05-13 14:49:34 +00:00
dependabot[bot]
45b4b21992 chore(deps): Bump p-queue from 9.1.2 to 9.2.0 in /build/frontend-legacy 
Bumps [p-queue](https://github.com/sindresorhus/p-queue) from 9.1.2 to 9.2.0.
- [Release notes](https://github.com/sindresorhus/p-queue/releases)
- [Commits](https://github.com/sindresorhus/p-queue/compare/v9.1.2...v9.2.0)

---
updated-dependencies:
- dependency-name: p-queue
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 10:30:26 +02:00
There Is No TIme
e7ee810c0b fix(UserConfig): cast getTypedValue() result to string in getValueBool() 
PHP 8.4 made passing non-strings to strtolower() a fatal TypeError.
getTypedValue() can return a non-string under certain conditions, causing
the strtolower() call to throw. The (string) cast guards against this.

Signed-off-by: There Is No TIme <37583483+thereisnotime@users.noreply.github.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2026-05-12 16:25:06 +00:00
dependabot[bot]
c60e9f6b1e chore(deps): Bump dompurify in /build/frontend-legacy 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.1...3.4.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 07:40:40 +02:00
dependabot[bot]
7534beb481 chore(deps): Bump webdav from 5.9.0 to 5.10.0 in /build/frontend-legacy 
Bumps [webdav](https://github.com/perry-mitchell/webdav-client) from 5.9.0 to 5.10.0.
- [Changelog](https://github.com/perry-mitchell/webdav-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/perry-mitchell/webdav-client/compare/v5.9.0...v5.10.0)

---
updated-dependencies:
- dependency-name: webdav
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-09 21:55:40 +02:00
dependabot[bot]
98fa03db43 chore(deps-dev): Bump workbox-webpack-plugin in /build/frontend-legacy 
Bumps [workbox-webpack-plugin](https://github.com/googlechrome/workbox) from 7.4.0 to 7.4.1.
- [Release notes](https://github.com/googlechrome/workbox/releases)
- [Commits](https://github.com/googlechrome/workbox/compare/v7.4.0...v7.4.1)

---
updated-dependencies:
- dependency-name: workbox-webpack-plugin
  dependency-version: 7.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-09 09:52:40 +02:00
dependabot[bot]
a9a4d4b110
chore(deps-dev): Bump msw in /build/frontend-legacy 
Bumps [msw](https://github.com/mswjs/msw) from 2.13.6 to 2.14.3.
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mswjs/msw/compare/v2.13.6...v2.14.3)

---
updated-dependencies:
- dependency-name: msw
  dependency-version: 2.14.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-09 01:59:21 +00:00
Joas Schilling
29cc5dd32c
Merge pull request #60219 from nextcloud/backport/59940/stable33 
[stable33] Fix since checker
 2026-05-08 14:43:21 +02:00
Daniel Kesselberg
0e99f8c497
docs(ocp): Add since tag 
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2026-05-07 22:24:14 +02:00
Daniel Kesselberg
b323ea9994
fix(since): Ignore private methods in OCP 
fix(since): Ignore private methods in OCP

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[skip ci]
 2026-05-07 22:19:11 +02:00
Daniel Kesselberg
beef35d64e
fix(since): Import PhpParser classes 
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2026-05-07 22:19:10 +02:00
dependabot[bot]
47efd9c784 chore(deps): Bump @nextcloud/vue in /build/frontend-legacy 
Bumps [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue) from 8.37.0 to 8.38.0.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/v8.38.0/CHANGELOG.md)
- [Commits](https://github.com/nextcloud-libraries/nextcloud-vue/compare/v8.37.0...v8.38.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/vue"
  dependency-version: 8.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-07 10:09:57 +02:00
dependabot[bot]
5c9223ab8d chore(deps): Bump moment-timezone in /build/frontend-legacy 
Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](https://github.com/moment/moment-timezone/compare/0.6.1...0.6.2)

---
updated-dependencies:
- dependency-name: moment-timezone
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-07 09:18:34 +02:00
Louis Chmn
71e0a1c115 chore: Generate empty css entry points 
Signed-off-by: Louis Chmn <louis@chmn.me>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-05-05 12:27:09 +02:00
dependabot[bot]
9c9c260966 chore(deps): Bump dompurify in /build/frontend-legacy 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.1)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-03 10:20:54 +02:00
github-actions[bot]
a695205e67
Merge pull request #60051 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/stable33/libphonenumber-js-1.12.42 
[stable33] chore(deps): Bump libphonenumber-js from 1.12.41 to 1.12.42 in /build/frontend-legacy
 2026-05-02 11:24:55 +00:00
dependabot[bot]
23cd5964b6
chore(deps): Bump libphonenumber-js in /build/frontend-legacy 
Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) from 1.12.41 to 1.12.42.
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.12.41...v1.12.42)

---
updated-dependencies:
- dependency-name: libphonenumber-js
  dependency-version: 1.12.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-02 03:44:06 +00:00
dependabot[bot]
f388e91f21
chore(deps-dev): Bump msw in /build/frontend-legacy 
Bumps [msw](https://github.com/mswjs/msw) from 2.13.4 to 2.13.6.
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mswjs/msw/compare/v2.13.4...v2.13.6)

---
updated-dependencies:
- dependency-name: msw
  dependency-version: 2.13.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-02 03:42:38 +00:00
Louis
48e3e15c9f
Revert "[stable33] Revert "Stable33 authoritative share"" 
Signed-off-by: Louis <louis@chmn.me>
 2026-04-28 15:49:33 +02:00
Hamza
e7509150df test(integration): write integration tests for calendar delegation 
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
 2026-04-28 11:51:05 +00:00
Josh
8c9e4214ed
Merge pull request #59351 from nextcloud/backport/58970/stable33
Some checks failed
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Integration sqlite / changes (push) Waiting to run
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, --tags ~@large files_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, capabilities_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, collaboration_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, comments_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, dav_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, federation_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, file_conversions) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, files_reminders) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, filesdrop_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, ldap_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, openldap_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, openldap_numerical_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, remoteapi_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, routing_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, setup_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, sharees_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, sharing_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, theming_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite (stable33, 8.4, stable33, videoverification_features) (push) Blocked by required conditions
Details
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis (push) Has been cancelled
Details
Psalm static code analysis / static-code-analysis-security (push) Has been cancelled
Details
Psalm static code analysis / static-code-analysis-ocp (push) Has been cancelled
Details
Psalm static code analysis / static-code-analysis-ncu (push) Has been cancelled
Details 
[stable33] fix: manually set modified time to SFTP files after editing
 2026-04-24 11:17:07 -04:00
Benjamin Gaussorgues
2ab70ae1da
Merge pull request #59763 from nextcloud/backport/59693/stable33 2026-04-23 11:47:23 +02:00
Ferdinand Thiessen
0eb5ad76a4 fix(dav): do not list intermediate upload folders 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2026-04-22 15:48:59 +00:00
Ferdinand Thiessen
53e9fd95cf chore: update psalm baseline 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2026-04-21 13:42:15 -07:00
Robin Appelman
4b462896f5 test: add test for link reshares with more permissions being redacted 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2026-04-21 15:57:29 +00:00
Hamza
53823c5b1f test(integration): add proper cleanup for caldav scenarios 
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
 2026-04-21 07:59:42 +00:00
Hamza
b0e98995d6 test(integration): add tests for calendar delegation 
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
 2026-04-21 07:59:41 +00:00
Ferdinand Thiessen
d746b9f5bf
chore: fix ESLint issues reported because of config update 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2026-04-20 23:10:06 +02:00
Ferdinand Thiessen
4c92bb7526
test: try to fix unit tests with new vite version 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
 2026-04-20 20:59:42 +02:00
dependabot[bot]
5e7b9f575c
chore(deps-dev): Bump the vite group across 2 directories with 1 update 
Bumps the vite group with 1 update in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the vite group with 1 update in the /build/frontend-legacy directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).

Updates `vite` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

Updates `vite` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-20 20:30:59 +02:00
github-actions[bot]
a8720f8265
Merge pull request #59127 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/stable33/babel-plugin-module-resolver-5.0.3 
[stable33] chore(deps-dev): Bump babel-plugin-module-resolver from 5.0.2 to 5.0.3 in /build/frontend-legacy
 2026-04-20 17:33:43 +00:00
Josh
594665be45
Merge pull request #58989 from nextcloud/backport/58887/stable33 
[stable33] fix(sharing): Align userid config key in UserPlugin with Manager
 2026-04-20 11:47:23 -04:00
Joas Schilling
bd9dd5a63b fix(federation): Also sign requests with NCU providers 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2026-04-20 11:21:37 +00:00
dependabot[bot]
e437d68bb7 chore(deps): Bump core-js in /build/frontend-legacy 
Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.48.0 to 3.49.0.
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.49.0/packages/core-js)

---
updated-dependencies:
- dependency-name: core-js
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-20 08:27:43 +02:00
dependabot[bot]
7ef19a1385 chore(deps-dev): Bump babel-plugin-module-resolver 
Bumps [babel-plugin-module-resolver](https://github.com/tleunen/babel-plugin-module-resolver) from 5.0.2 to 5.0.3.
- [Changelog](https://github.com/tleunen/babel-plugin-module-resolver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tleunen/babel-plugin-module-resolver/compare/v5.0.2...v5.0.3)

---
updated-dependencies:
- dependency-name: babel-plugin-module-resolver
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-20 01:10:22 +02:00
dependabot[bot]
137ae840e2
chore(deps): Bump p-queue from 9.1.0 to 9.1.2 in /build/frontend-legacy 
Bumps [p-queue](https://github.com/sindresorhus/p-queue) from 9.1.0 to 9.1.2.
- [Release notes](https://github.com/sindresorhus/p-queue/releases)
- [Commits](https://github.com/sindresorhus/p-queue/compare/v9.1.0...v9.1.2)

---
updated-dependencies:
- dependency-name: p-queue
  dependency-version: 9.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-04-19 08:24:59 +00:00
dependabot[bot]
cb62c96af7 chore(deps): Bump dompurify in /build/frontend-legacy 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 22:39:19 +02:00
dependabot[bot]
0f3989f209 chore(deps): Bump @nextcloud/auth in /build/frontend-legacy 
Bumps [@nextcloud/auth](https://github.com/nextcloud-libraries/nextcloud-auth) from 2.5.3 to 2.6.0.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-auth/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-auth/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nextcloud-libraries/nextcloud-auth/compare/v2.5.3...v2.6.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/auth"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 21:12:41 +02:00
dependabot[bot]
d9b4335238 chore(deps-dev): Bump webpack in /build/frontend-legacy 
Bumps [webpack](https://github.com/webpack/webpack) from 5.105.4 to 5.106.2.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.105.4...v5.106.2)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.106.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 08:56:52 +02:00
dependabot[bot]
06920ab6c9
chore(deps): Bump browserslist-useragent-regexp 
Bumps [browserslist-useragent-regexp](https://github.com/browserslist/browserslist-useragent-regexp) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/browserslist/browserslist-useragent-regexp/releases)
- [Changelog](https://github.com/browserslist/browserslist-useragent-regexp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist-useragent-regexp/compare/v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: browserslist-useragent-regexp
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 02:06:34 +00:00
dependabot[bot]
06464dd915
chore(deps): Bump moment-timezone in /build/frontend-legacy 
Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](https://github.com/moment/moment-timezone/compare/0.6.0...0.6.1)

---
updated-dependencies:
- dependency-name: moment-timezone
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 19:38:48 +00:00
dependabot[bot]
8d8d3f34b5
chore(deps-dev): Bump msw in /build/frontend-legacy 
Bumps [msw](https://github.com/mswjs/msw) from 2.12.10 to 2.12.14.
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mswjs/msw/compare/v2.12.10...v2.12.14)

---
updated-dependencies:
- dependency-name: msw
  dependency-version: 2.12.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 19:08:28 +00:00
dependabot[bot]
9c7769de17 chore(deps): Bump handlebars in /build/frontend-legacy 
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-17 20:07:38 +02:00
dependabot[bot]
9b39d577b4 chore(deps): Bump lodash in /build/frontend-legacy 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 11:02:45 +02:00
github-actions[bot]
ed6d3fe0cd
Merge pull request #59577 from nextcloud/dependabot/npm_and_yarn/stable33/vitest-25f4c74c22 
[stable33] chore(deps-dev): Bump the vitest group across 2 directories with 3 updates
 2026-04-16 07:49:17 +00:00