upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-20 22:19:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
88377 commits 1013 branches 1224 tags 9.7 GiB
Commit graph

88377 commits

This branch
This branch
All branches
Author SHA1 Message Date
github-actions[bot]
5c19d24e76
Merge pull request #61396 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/vite-7.3.5 
chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 in /build/frontend-legacy
 2026-06-18 09:55:38 +00:00
dependabot[bot]
685fd8f614 chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 in /build/frontend-legacy 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 11:37:18 +02:00
Andy Scherzinger
4c6244d997
Merge pull request #61397 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/launch-editor-2.14.1 
chore(deps-dev): Bump launch-editor from 2.11.1 to 2.14.1 in /build/frontend-legacy
 2026-06-18 11:36:14 +02:00
Micke Nordin
a88fdcbed5
Merge pull request #57234 from enriquepablo/master 
Implement token exchange from OCM
 2026-06-18 11:33:24 +02:00
Andy Scherzinger
ef96615351
Merge pull request #61395 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/form-data-4.0.6 
chore(deps): Bump form-data from 4.0.5 to 4.0.6 in /build/frontend-legacy
 2026-06-18 11:32:45 +02:00
Peter R.
48613dfa51
Merge pull request #60986 from nextcloud/fix/account-dialog-loading-feedback 
fix(settings): add loading feedback to account create/edit dialogs
 2026-06-18 11:25:37 +02:00
dependabot[bot]
ab5d573753 chore(deps): Bump form-data in /build/frontend-legacy 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 11:15:32 +02:00
dependabot[bot]
3b67f550a3
chore(deps-dev): Bump launch-editor in /build/frontend-legacy 
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.11.1 to 2.14.1.
- [Commits](https://github.com/vitejs/launch-editor/compare/v2.11.1...v2.14.1)

---
updated-dependencies:
- dependency-name: launch-editor
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 09:05:13 +00:00
Andy Scherzinger
26e83c35c8
Merge pull request #61314 from nextcloud/dependabot/npm_and_yarn/js-yaml-4.2.0 
chore(deps): Bump js-yaml from 4.1.1 to 4.2.0
 2026-06-18 11:02:30 +02:00
github-actions[bot]
108b61868d
Merge pull request #61316 from nextcloud/dependabot/npm_and_yarn/dompurify-3.4.10
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details 
chore(deps): Bump dompurify from 3.4.7 to 3.4.10
 2026-06-18 08:51:55 +00:00
nextcloud-command
18853caf72 chore(assets): Recompile assets 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-06-18 08:28:18 +00:00
dependabot[bot]
96ffda4f97 chore(deps): Bump dompurify from 3.4.7 to 3.4.10 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.7 to 3.4.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.7...3.4.10)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 10:18:17 +02:00
Andy Scherzinger
1676851dd3
Merge pull request #61393 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/webpack-dev-server-5.2.5 
chore(deps-dev): Bump webpack-dev-server from 5.2.4 to 5.2.5 in /build/frontend-legacy
 2026-06-18 10:17:15 +02:00
Peter Ringelmann
c3dcffda09 fix(settings): add loading feedback to account create/edit dialogs 
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-06-18 10:00:28 +02:00
github-actions[bot]
d5fd99c788
Merge pull request #61315 from nextcloud/dependabot/npm_and_yarn/form-data-4.0.6 
chore(deps): Bump form-data from 4.0.5 to 4.0.6
 2026-06-18 06:24:25 +00:00
nextcloud-command
639066dd21 chore(assets): Recompile assets 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-06-18 06:04:10 +00:00
dependabot[bot]
6efdc6a40e chore(deps): Bump form-data from 4.0.5 to 4.0.6 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 07:54:57 +02:00
dependabot[bot]
a090560c84
chore(deps-dev): Bump webpack-dev-server in /build/frontend-legacy 
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5.
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.4...v5.2.5)

---
updated-dependencies:
- dependency-name: webpack-dev-server
  dependency-version: 5.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 03:28:28 +00:00
Nextcloud bot
dad4644546
fix(l10n): Update translations from Transifex
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2026-06-18 00:22:59 +00:00
F. E Noel Nfebe
13adaf91ff
Merge pull request #60151 from nextcloud/fix/pending-shares-hide-incompatible-actions 
fix(files_sharing): Hide incompatible actions in shares
 2026-06-17 18:26:17 +01:00
Benjamin Gaussorgues
3048d95615
Merge pull request #61368 from nextcloud/chore/prevent_subadmin_edit
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Psalm static code analysis / changes (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
Details 
fix: prevent editing delegated admins
 2026-06-17 16:02:11 +02:00
Christoph Wurst
e9c95a0055
Merge pull request #61293 from nextcloud/fix/federation-settings-calendar 
fix(caldav): respect federation settings
 2026-06-17 14:43:10 +02:00
Benjamin Gaussorgues
ede0284e3b
Merge pull request #61168 from nextcloud/fix/memcached_ci 
Fix Memcached CI job
 2026-06-17 14:17:48 +02:00
nextcloud-command
be3e1c8955 chore(assets): Recompile assets 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-06-17 11:49:27 +00:00
nfebe
0632913527 fix(files_sharing): Drop permissions on unmounted pending and deleted shares 
Pending and deleted shares are not mounted into the user's filesystem, so
generic file operations like delete or download produced a misleading
"file is not available" error.

These shares now carry no permissions, so every permission-aware action
hides itself automatically, without the files app having to special-case
each view. Conversion additionally requires read permission, matching the
server-side readability check.

Signed-off-by: nfebe <fenn25.fn@gmail.com>
 2026-06-17 12:37:26 +01:00
Robin Appelman
61037332f0
Merge pull request #60988 from nextcloud/search-operator-params 
chore: fix SearchBinaryOperator constructor type hint
 2026-06-17 13:16:24 +02:00
Micke Nordin
4d5841761f
fix(cloud_federation_api): accept multi-protocol share envelopes 
Shares using the OCM multi-protocol envelope (name multi, with the secret carried in a sibling protocol entry such as webdav) were rejected with Missing sharedSecret in protocol. Scan every protocol entry for the shared secret during validation, resolve the secret from the matching entry, and let the files provider serve the webdav entry of a multi envelope. Covers the file and folder resource types.

Signed-off-by: Micke Nordin <kano@sunet.se>
 2026-06-17 11:01:19 +02:00
Enrique Pérez Arnaud
3d3b49ce63
chore: regenerate autoloaders and update psalm baseline 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:18 +02:00
Enrique Pérez Arnaud
3616212ba2
feat(files_sharing): store and refresh OCM access tokens for external shares 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:16 +02:00
Enrique Pérez Arnaud
fc31f97018
feat(federatedfilesharing): create refresh tokens and sign token exchange 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:15 +02:00
Enrique Pérez Arnaud
4d56c74ba7
feat(ocm): advertise exchange-token capability and token endpoint 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:14 +02:00
Enrique Pérez Arnaud
3956c4e9be
feat(cloud_federation_api): accept new protocol envelope and delegate validation 
Accept both the legacy options.sharedSecret envelope and the new
protocol[name].sharedSecret form. Preserve the original cloud ID so the
factory can discover capabilities, then reset shareWith to the local
username for user lookup.

Delegate per-protocol validation to providers via the new
IValidationAwareCloudFederationProvider interface, with split exception
handling: BadRequestException -> 400, ProviderCouldNotAddShareException
-> the exception's own HTTP status (501 fallback).

In the notification handler, fall back to looking up the refresh token
via OcmTokenMapMapper when the access token cannot identify the federation.

Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:13 +02:00
Enrique Pérez Arnaud
789ff6a8a3
feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 11:01:11 +02:00
Enrique Pérez Arnaud
2c54011789
feat(dav): accept bearer access tokens on webdav endpoints 
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 10:44:53 +02:00
Enrique Pérez Arnaud
ac2f9816a6
feat(auth): support permanent OCM refresh tokens and bearer login 
Co-authored-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Micke Nordin <kano@sunet.se>
Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>
 2026-06-17 10:44:51 +02:00
Andy Scherzinger
9af6fe9500
Merge pull request #61053 from bygadd/fix/taskprocessing-worker-atomic-claim
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Psalm static code analysis / changes (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
Details 
fix(taskprocessing): claim tasks atomically so parallel workers don't duplicate
 2026-06-17 10:21:33 +02:00
Benjamin Gaussorgues
ab29b132e5
fix: prevent editing delegated admins 
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
 2026-06-17 10:18:54 +02:00
Andy Scherzinger
f985b90a77
Merge pull request #61332 from nextcloud/fix/string-expected-int-given 
fix: ensure file names are string-typed
 2026-06-17 07:25:09 +02:00
Yoan Bozhilov
80f72a86e7 fix(taskprocessing): @since 35.0.0 for claimNextScheduledTask 
The new public IManager::claimNextScheduledTask lands in master (35.0.0),
not 34.0.0. Addresses review feedback.

Signed-off-by: Yoan Bozhilov <bygadd@gmail.com>
Assisted-by: Claude Code:claude-opus-4-8
 2026-06-17 07:45:49 +03:00
Nextcloud bot
188006bc95
fix(l10n): Update translations from Transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2026-06-17 00:22:57 +00:00
Andy Scherzinger
4863ee63b0
Merge pull request #61317 from nextcloud/dependabot/npm_and_yarn/vite-7.3.5
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Psalm static code analysis / changes (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
Details 
chore(deps-dev): Bump vite from 7.3.2 to 7.3.5
 2026-06-16 21:11:50 +02:00
Andy Scherzinger
51a7ee1d0f
Merge pull request #61310 from nextcloud/fix/noid/ocm-add-share-validation 
fix(ocm-add-share): adjust domain validation
 2026-06-16 20:34:03 +02:00
Andy Scherzinger
d6086c2325
Merge pull request #61308 from nextcloud/fix/noid/team-manager-resources 
fix(team-manager): ensure team resources are only retrived for members
 2026-06-16 20:33:49 +02:00
nextcloud-command
67c42c20f1 chore(assets): Recompile assets 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
 2026-06-16 18:32:30 +00:00
dependabot[bot]
50a0a3541c chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 20:23:54 +02:00
Andy Scherzinger
c409abfc63
Merge pull request #61322 from nextcloud/fix/improve-password-confirmation-middleware 
fix: Do not set last-password-confirm for apptoken sessions
 2026-06-16 19:49:28 +02:00
Hamza
6280efcf23 fix(caldav): respect federation settings 
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
 2026-06-16 16:45:56 +02:00
Stephan Orbaugh
03077b52f9
Merge pull request #60587 from nextcloud/fix/99281/lookup-duplicates
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
Details
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Details
Psalm static code analysis / changes (push) Waiting to run
Details
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Details
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
Details 
fix: trim duplicate search results for external share
 2026-06-16 16:10:49 +02:00
Micke Nordin
ebc6ef64a0
Merge pull request #61126 from nextcloud/kano-fix-ocm-discovery 
fix(ocm): merge resource types by name in discovery
 2026-06-16 15:43:18 +02:00
Côme Chilliet
e1dd3da78a
chore: Adapt integration test to API change 
Trying to create an auth token from an authtoken
 returns 403 now, not 503 (which is more correct)

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
 2026-06-16 15:21:37 +02:00