Peter Ringelmann
a070301443
fix(frontend): add strict password confirmation for sensitive admin actions
...
Register axios password confirmation interceptors in the apps
management, admin delegation, admin security, and OAuth2 settings
bundles, and pass PwdConfirmationMode.Strict on requests to endpoints
protected with #[PasswordConfirmationRequired(strict: true)], so that
the user password is verified via Basic auth on the request itself
rather than relying on the session timestamp.
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
2026-04-21 10:21:08 +02:00
Côme Chilliet
cfd5f04116
fix: Add missing PasswordConfirmationRequired attributes
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2026-04-21 10:21:07 +02:00
Hamza
0172b1dee8
Merge pull request #59693 from nextcloud/test/calendar-delegation
...
test(integration): add tests for calendar delegation
2026-04-21 09:58:52 +02:00
Joas Schilling
535b234cb2
Merge pull request #59639 from nextcloud/fix-app-name-not-translated-in-the-title-of-public-pages
...
Fix app name not translated in the title of public pages
2026-04-21 09:23:28 +02:00
Joas Schilling
c7c33001ae
fix: Limit the list of exposed apps to the used app
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-04-21 09:00:08 +02:00
github-actions[bot]
6c6c8dbbcc
Merge pull request #59745 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/libphonenumber-js-1.12.41
...
chore(deps): Bump libphonenumber-js from 1.12.40 to 1.12.41 in /build/frontend-legacy
2026-04-21 06:48:13 +00:00
nextcloud-command
3f8f8641ec
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-21 05:49:45 +00:00
dependabot[bot]
cf10bf60ff
chore(deps): Bump libphonenumber-js in /build/frontend-legacy
...
Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js ) from 1.12.40 to 1.12.41.
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md )
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.12.40...v1.12.41 )
---
updated-dependencies:
- dependency-name: libphonenumber-js
dependency-version: 1.12.41
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 07:41:50 +02:00
Nextcloud bot
24c7ee55ff
fix(l10n): Update translations from Transifex
...
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (master, main, 8.4, main, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, file_conversions) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, files_reminders) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, guests_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, routing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, theming_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, main, 8.4, main, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions
Psalm static code analysis / changes (push) Waiting to run
Psalm static code analysis / static-code-analysis (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-security (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ocp (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-ncu (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-strict (push) Blocked by required conditions
Psalm static code analysis / static-code-analysis-summary (push) Blocked by required conditions
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-04-21 00:18:36 +00:00
Ferdinand Thiessen
42dbb483c9
Merge pull request #59431 from nextcloud/chore/modernize-files-ownership
...
refactor(files): modernize transfer ownership settings
2026-04-21 00:36:21 +02:00
nextcloud-command
d361c78f63
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-20 21:54:54 +00:00
Ferdinand Thiessen
6e6c66047d
refactor(files): modernize transfer ownership settings
...
- related to https://github.com/nextcloud/server/issues/57008
Modernize the personal files settings for ownership transfer.
- Use the new `NcForm*` components.
- Use `NcSettingsSection` as root component
- Migrate to Typescript
- Migrate to script-setup
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 23:47:03 +02:00
github-actions[bot]
e49c54842b
Merge pull request #59741 from nextcloud/dependabot/npm_and_yarn/stylelint-17.8.0
...
chore(deps-dev): Bump stylelint from 17.5.0 to 17.8.0
2026-04-20 23:43:29 +02:00
dependabot[bot]
b6b4bd6036
chore(deps-dev): Bump stylelint from 17.5.0 to 17.8.0
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.5.0 to 17.8.0.
- [Release notes](https://github.com/stylelint/stylelint/releases )
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stylelint/stylelint/compare/17.5.0...17.8.0 )
---
updated-dependencies:
- dependency-name: stylelint
dependency-version: 17.8.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-20 20:43:56 +00:00
github-actions[bot]
aefcd5ffb5
Merge pull request #59121 from nextcloud/dependabot/npm_and_yarn/eslint-10.1.0
...
chore(deps-dev): Bump eslint from 9.39.2 to 10.1.0
2026-04-20 20:36:02 +00:00
Ferdinand Thiessen
5287da43e5
chore: compile assets
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 22:17:13 +02:00
Ferdinand Thiessen
0dc7add400
chore: fix ESLint issues reported because of config update
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 22:13:24 +02:00
Ferdinand Thiessen
6db75dca92
chore: fix ESLint issues for rules added in ESLint v10
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 22:13:24 +02:00
Ferdinand Thiessen
18c739be65
chore: align dependencies
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 22:13:23 +02:00
dependabot[bot]
b32412320a
chore(deps-dev): Bump eslint from 9.39.2 to 10.1.0
...
Bumps [eslint](https://github.com/eslint/eslint ) from 9.39.2 to 10.1.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v9.39.2...v10.1.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-version: 10.1.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-20 22:10:52 +02:00
Benjamin Gaussorgues
fca6085e0d
Merge pull request #59719 from nextcloud/fix/visibilityNormalization
2026-04-20 17:29:28 +02:00
Carl Schwan
5a728a4fb6
Merge pull request #59720 from nextcloud/feature/59718/appinfo-metrics
...
feat(openmetrics): expose app information per-app
2026-04-20 17:14:03 +02:00
Hamza
c9ec8528be
test(integration): add proper cleanup for caldav scenarios
...
Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>
2026-04-20 14:17:47 +02:00
Joas Schilling
63a1a083f8
Merge pull request #59721 from nextcloud/bugfix/noid/throttle-ocm-requests
...
fix(ocm): Correctly track OCM requests
2026-04-20 13:41:50 +02:00
Carl Schwan
c99fd12ce9
Merge pull request #59722 from nextcloud/bugfix/noid/still-sign-deprecated-ncu
...
fix(federation): Also sign requests with NCU providers
2026-04-20 13:21:29 +02:00
Kate
b23ab0ccb9
Merge pull request #58734 from nextcloud/fix/db/postgres-filecache-path-prefix-index
2026-04-20 13:01:37 +02:00
Joas Schilling
a51e58e800
fix(federation): Also sign requests with NCU providers
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-04-20 12:47:02 +02:00
Joas Schilling
f4f93ed281
fix(ocm): Correctly track OCM requests
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2026-04-20 11:52:17 +02:00
Jyrki Gadinger
3183aa0ad0
chore(openmetrics): rename app_info metric to app_enbled
...
Signed-off-by: Jyrki Gadinger <nilsding@nilsding.org>
2026-04-20 11:41:19 +02:00
Jyrki Gadinger
e7b1b69e66
chore(openmetrics): use "app_id" label instead of "app_name"
...
Signed-off-by: Jyrki Gadinger <nilsding@nilsding.org>
2026-04-20 11:38:44 +02:00
Jyrki Gadinger
3e5daac0c5
feat(openmetrics): expose app information per-app
...
Since exporting the app information that way makes the apps count metric
obsolete I removed it as well.
Resolves #59718
Signed-off-by: Jyrki Gadinger <nilsding@nilsding.org>
2026-04-20 11:27:55 +02:00
github-actions[bot]
27f1bb1599
Merge pull request #59437 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/focus-trap-8.0.1
...
chore(deps): Bump focus-trap from 8.0.0 to 8.0.1 in /build/frontend-legacy
2026-04-20 09:13:15 +00:00
Benjamin Gaussorgues
206ef497d5
fix(profile): normalize profile visibility
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2026-04-20 10:46:38 +02:00
Kostiantyn Miakshyn
80eadaf6ce
Merge pull request #56902 from nextcloud/bugfix/allow-max-buckets-to-be-equal-to-num-buckets
...
fix: Allow `num_buckets` to be equal as `min_bucket`
2026-04-20 10:27:45 +02:00
nextcloud-command
da9f48a13a
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-20 08:25:58 +00:00
dependabot[bot]
0e877b0ffd
chore(deps): Bump focus-trap in /build/frontend-legacy
...
Bumps [focus-trap](https://github.com/focus-trap/focus-trap ) from 7.8.0 to 8.0.1.
- [Release notes](https://github.com/focus-trap/focus-trap/releases )
- [Changelog](https://github.com/focus-trap/focus-trap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/focus-trap/focus-trap/compare/v7.8.0...v8.0.1 )
---
updated-dependencies:
- dependency-name: focus-trap
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-20 01:03:42 +00:00
github-actions[bot]
d8c33e4dcb
Merge pull request #59474 from nextcloud/dependabot/npm_and_yarn/vite-7.3.2
...
chore(deps-dev): Bump vite from 7.3.1 to 7.3.2
2026-04-20 00:59:56 +00:00
Ferdinand Thiessen
ae4eb602d9
chore: compile assets
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 02:20:44 +02:00
Ferdinand Thiessen
4a5f6fbbf6
test: try to fix unit tests with new vite version
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2026-04-20 02:20:44 +02:00
Nextcloud bot
726d0f9544
fix(l10n): Update translations from Transifex
...
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2026-04-20 00:18:51 +00:00
dependabot[bot]
0736c2e384
chore(deps-dev): Bump vite from 7.3.1 to 7.3.2
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 7.3.2
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-20 02:05:55 +02:00
github-actions[bot]
63a87ededf
Merge pull request #59434 from nextcloud/dependabot/npm_and_yarn/vue-3.5.32
...
chore(deps): Bump vue from 3.5.30 to 3.5.32
2026-04-19 20:57:16 +00:00
nextcloud-command
7e0db0938e
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-19 19:46:55 +00:00
dependabot[bot]
47c6a9da2b
chore(deps): Bump vue from 3.5.30 to 3.5.32
...
Bumps [vue](https://github.com/vuejs/core ) from 3.5.30 to 3.5.32.
- [Release notes](https://github.com/vuejs/core/releases )
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md )
- [Commits](https://github.com/vuejs/core/compare/v3.5.30...v3.5.32 )
---
updated-dependencies:
- dependency-name: vue
dependency-version: 3.5.32
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-19 21:39:01 +02:00
Kostiantyn Miakshyn
fcb10219d1
fix: Allow num_buckets to be equal as min_bucket
...
Signed-off-by: Kostiantyn Miakshyn <molodchick@gmail.com>
2026-04-19 18:28:12 +02:00
github-actions[bot]
e869744ee4
Merge pull request #59435 from nextcloud/dependabot/npm_and_yarn/zip.js/zip.js-2.8.26
...
chore(deps-dev): Bump @zip.js/zip.js from 2.8.23 to 2.8.26
2026-04-19 09:56:15 +00:00
dependabot[bot]
c51cdae516
chore(deps-dev): Bump @zip.js/zip.js from 2.8.23 to 2.8.26
...
Bumps [@zip.js/zip.js](https://github.com/gildas-lormeau/zip.js ) from 2.8.23 to 2.8.26.
- [Release notes](https://github.com/gildas-lormeau/zip.js/releases )
- [Commits](https://github.com/gildas-lormeau/zip.js/compare/v2.8.23...v2.8.26 )
---
updated-dependencies:
- dependency-name: "@zip.js/zip.js"
dependency-version: 2.8.26
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-19 09:38:03 +00:00
github-actions[bot]
76a812fbe8
Merge pull request #59648 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/follow-redirects-1.16.0
...
chore(deps): Bump follow-redirects from 1.15.11 to 1.16.0 in /build/frontend-legacy
2026-04-19 08:17:36 +00:00
github-actions[bot]
0ad607a782
Merge pull request #59682 from nextcloud/dependabot/npm_and_yarn/build/frontend-legacy/dompurify-3.4.0
...
chore(deps): Bump dompurify from 3.3.3 to 3.4.0 in /build/frontend-legacy
2026-04-19 08:15:52 +00:00
nextcloud-command
3d26f955b0
chore(assets): Recompile assets
...
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2026-04-19 06:51:00 +00:00
