[stable32] 32.0.12 RC1

[nextcloud-bot]

Nextcloud 32.0.12

server

• [stable32] dav: Fix fatal error when ORGANIZER is missing in CalDAV schedule #59349
• [stable32] feat(files_external): convert to delegated settings #59869
• [stable32] fix: correct typo 'occured' to 'occurred' in SetupCheckManager #60209
• [stable32] Fix since checker #60242
• [stable32] fix(caldav): grant sharee Acls to the delegate #60645
• [stable32] fix(template): add import map for JS module entry points #60659
• [stable32] chore(deps): Bump dompurify from 3.4.2 to 3.4.5 #60692
• [stable32] fix(http): avoid iconv for header ascii fallback #60721
• [stable32] fix(appconfig,userconfig): restore pre-migration fallback for ownCloud migration #60818
• [stable32] chore(deps-dev): Bump webpack from 5.106.2 to 5.107.2 #60870
• [stable32] chore(deps): Bump libphonenumber-js from 1.13.1 to 1.13.3 #60874
• [stable32] chore(deps-dev): Bump @babel/node from 7.29.0 to 7.29.7 #60876
• [stable32] chore(deps-dev): Bump sass from 1.99.0 to 1.100.0 #60877
• [stable32] chore(deps-dev): Bump @babel/preset-typescript from 7.28.5 to 7.29.7 #60878
• [stable32] chore(deps-dev): Bump @babel/plugin-transform-private-methods from 7.28.6 to 7.29.7 #60879
• [stable32] chore(deps-dev): Bump cypress-if from 1.13.2 to 1.16.1 #60880
• [stable32] fix(files): Chromium-based browsers drag-and-drop #60901
• [stable32] chore(deps): Update flake to NixOS 26.05 #60911
• [stable32] fix(files_sharing): clear the password after saving #60950
• [stable32] fix: access shared and delegated trashbin objects #60966
• [stable32] fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization #60985
• [stable32] [master] fix(security): Update code signing revocation list #61003
• [stable32] fix(theming): read cachebuster as int in manifest endpoint #61009
• [stable32] chore(deps-dev): Bump tar from 7.5.15 to 7.5.16 #61042
• [stable32] chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.4 to 3.2.6 #61044
• [stable32] chore(deps): Bump libphonenumber-js from 1.13.3 to 1.13.4 #61045
• [stable32] chore(deps): Bump query-string from 9.3.1 to 9.4.0 #61046
• [stable32] chore(deps-dev): Bump @cypress/webpack-preprocessor from 7.1.0 to 7.1.1 #61047
• [stable32] chore(deps): Bump dompurify from 3.4.5 to 3.4.7 #61048
• [stable32] fix(dav): properly handle files metadata #61080
• [stable32] fix(security): don't propagate ValueError from Crypto::decrypt() fallback #61103
• [stable32] fix: use correct permissions mask for non-home storage public links #61116
• [stable32] build(deps): bump the symfony group across 1 directory with 9 updates #61131
• [stable32] [master] fix(security): Update code signing revocation list #61135
• [stable32] feat(file-search): add property to SearchQuery and check select fields to decide wheter to join extended cache #61155
• [stable32] build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 #61180
• [stable32] fix(previews): ffprobe hangs #61184
• [stable32] fix(files_versions): guard null path in event listeners #61187
• [stable32] fix(search-query): fix psalm type error #61198
• [stable32] [master] fix(security): Update code signing revocation list #61237
• [stable32] fix(theming): preserve uploaded favicon and touch icon #61255
• [stable32] build(deps): bump dompurify from 3.4.7 to 3.4.8 #61266
• [stable32] build(deps): bump libphonenumber-js from 1.13.4 to 1.13.6 #61267
• [stable32] [master] fix(security): Update code signing revocation list #61285
• [stable32] fix(twofactor_backupcodes): Add a clean helper to set code as used #61298
• [stable32] chore: Increase page load timeout for oracle setup tests #61304
• [stable32] fix: Use token expiration for ephemeral sessions #61307
• [stable32] fix(user_ldap): Escape filter part when searching for group members #61327
• [stable32] fix: trim duplicate search results for external share #61338
• [stable32] fix: Do not set last-password-confirm for apptoken sessions #61344
• [stable32] fix(team-manager): ensure team resources are only retrived for members #61349
• [stable32] fix(ocm-add-share): adjust domain validation #61355
• [stable32] fix: ensure file names are string-typed #61359
• [stable32] feat(oauth2): Add commands for adding and deleting clients #61363
• [stable32] fix: prevent editing delegated admins #61371
• [stable32] fix(caldav): respect federation settings #61379
• [stable32] fix(files): drag n drop #61401

3rdparty

• build(deps): bump phpseclib/phpseclib from 2.0.53 to 2.0.54 3rdparty#2417
• build(deps): bump the symfony group across 1 directory with 9 updates 3rdparty#2456

activity

• [stable32] perf(mailqueue): cover amq_latest_send in the affecteduser index activity#2638
• [stable32] Update nextcloud/ocp dependency activity#2644

bruteforcesettings

• [stable32] fix: fix toggle the allow list option bruteforcesettings#1104
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1132
• Chore(deps-dev): Bump @vitest/coverage-v8 from 3.2.4 to 3.2.6 bruteforcesettings#1136
• [stable32] Update nextcloud/ocp dependency bruteforcesettings#1144
• Chore(deps): Bump @vue/test-utils from 2.4.10 to 2.4.11 bruteforcesettings#1148

circles

• [stable32] fix: secondary owncloud custom group admin permissions not migrated circles#2426
• [stable32] build: add .nextcloudignore for release builds circles#2509
• [stable32] Update nextcloud/ocp dependency circles#2514
• [stable32] Update nextcloud/ocp dependency circles#2516
• [stable32] fix(local-controller): dont show full config int of circle for non-members circles#2526
• [stable32] fix(local-controller): validate params set on team creation circles#2532
• [stable32] adjust local controller to better handle permission checks circles#2536

logreader

• [stable32] Fix npm audit logreader#2041
• [stable32] Update nextcloud/ocp dependency logreader#2050
• [stable32] Update nextcloud/ocp dependency logreader#2058
• [stable32] Fix npm audit logreader#2060

nextcloud_announcements

• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#638
• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#643
• [stable32] Update nextcloud/ocp dependency nextcloud_announcements#646
• [stable32] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#650

notifications

• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3025
• [stable32] Fix npm audit notifications#3048
• [stable32] Update nextcloud/ocp dependency notifications#3055
• [stable32] build(deps): Bump ua-parser-js from 2.0.9 to 2.0.10 notifications#3060
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3072
• [stable32] Update nextcloud/ocp dependency notifications#3084
• [stable32] build(deps): Bump vue from 3.5.34 to 3.5.35 notifications#3091
• [stable32] chore: extend testing of encryptAndSign and make the methods discoverable by psalm notifications#3101
• [stable32] ci(actions): Update workflow templates from organization template repository notifications#3105
• [stable32] Fix npm audit notifications#3107
• [stable32] fix(email): Correctly initialize next_send_time field notifications#3118
• [stable32] Update nextcloud/ocp dependency notifications#3121

photos

• [stable32] Update nextcloud/ocp dependency photos#3555

recommendations

• [stable32] Fix npm audit recommendations#1043

serverinfo

• [stable32] Update nextcloud/ocp dependency serverinfo#1011
• [stable32] Update nextcloud/ocp dependency serverinfo#1015

survey_client

• [stable32] ci(actions): Update workflow templates from organization template repository survey_client#421
• [stable32] Update nextcloud/ocp dependency survey_client#432
• [stable32] Update nextcloud/ocp dependency survey_client#437
• [stable32] fix(report): Fix sending huge reports survey_client#440

suspicious_login

• [stable32] fix(notifier): Fix label length limited to 32 characters suspicious_login#1115

text

• [stable32] fix(mediaHandler): strip relevant bidi chars in filenames text#8691
• [stable32] fix(Editor): emit modified fileNode size on save text#8694
• [stable32] Update nextcloud/ocp dependency text#8706
• [stable32] Fix npm audit text#8707
• [stable32] chore(github): update workflows text#8716
• [stable32] fix(editorApi): allow to disable image lazy-loading text#8726
• fix(editor): pass missing noLazyImages props text#8729
• [stable32] Fix permission change in text doc text#8749
• [stable32] Performance: Only check permissions when changing content text#8766

twofactor_nextcloud_notification

• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1346
• [stable32] Fix npm audit twofactor_nextcloud_notification#1350
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1360
• [stable32] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1365
• [stable32] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1369
• [stable32] Fix npm audit twofactor_nextcloud_notification#1376

viewer

• [stable32] fix(plyr): the speed settings button should not be cut viewer#3197
• [stable32] fix(plyr): add l10n to components viewer#3201
• [stable32] fix(plyr): the speed selection should not go out of the viewport viewer#3204
• [stable32] fix(plyr): add l10n to speed selections viewer#3214

Pending PRs:

• @CarlSchwan
  • [stable32] fix(Propagator): rollback transaction if it fails #58131 ✅
• @nfebe
  • [stable32] fix(share): Set expiration time to end of day (23:59:59) #58709 ✅
  • [stable32] fix(sharing): Align userid config key in UserPlugin with Manager #58988 ✅
• @DerDreschner
  • [stable32] fix(DnsPinning): Ensure to always lookup based on FQDN #59158 🔁
• @icewind1991
  • [stable32] fix: allow renaming files with just update permissions #59242 🔁
• @backportbot
  • [stable32] fix: duplicate dashboard widget #59411 ✅
• @icewind1991
  • [stable32] fix: fix LazyUserFolder::getMountPoint #59653 ✅
• @nfebe
  • [stable32] fix(files_sharing): Drop trailing '?' from public download redirect URL #59884 ✅
• @icewind1991
  • [stable32] occ commands for listing and refreshing mounts #59890 ✅
  • [stable32] Quota wrapper fixes #60130 🔁
• @susnux
  • [stable32] fix(files): use displayname rather than basename to use progress #60623 ✅
• @SebastianKrupinski
  • [stable32] fix: use card interface instead of object #61250 ✅
• @ArtificialOwl
  • [stable32] avoid desync with memberships circles#2364 ✅
• @miaulalala
  • [stable32] fix(comments): mark comments as read and dismiss notifications in Activity sidebar #60622 ✅
• (generated)
  • [stable32] chore(deps): Bump handlebars from 4.7.8 to 4.7.9 #59287 ✅
  • [stable32] 32.0.12 RC1 #61389

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested

[blizzz]

Required PRs

• [stable32] fix(files): drag n drop #61401