[nextcloud-bot]

Nextcloud 33.0.11

server

• [stable33] chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.1 #62311
• [stable33] chore(deps): bump @nextcloud/vue from 9.9.0 to 9.12.0 #64052
• [stable33] build(deps): bump @nextcloud/dialogs from 7.4.1 to 7.5.0 #64058
• [stable33] chore(deps): bump @nextcloud/dialogs from 7.4.1 to 7.5.0 in /build/frontend-legacy #64069
• [stable33] chore(deps): bump @nextcloud/vue from 8.40.0 to 8.41.0 in /build/frontend-legacy #64075
• [stable33] Use strict comparaison #64326
• [stable33] test: enable filecache partitioning for one mysql test #65130
• [stable33] fix(backupcodes): Dismiss notification on disabled provider #65316
• [stable33] fix(admin-audit): Log when BFP was bypassed #65329
• [stable33] chore(deps-dev): bump eslint from 10.11.0 to 10.12.0 #65371
• [stable33] chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0 #65372
• [stable33] chore(deps): bump @nextcloud/vue from 9.9.0 to 9.13.1 #65374
• [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.18.2 to 2.23.0 #65376
• [stable33] chore(deps-dev): bump sass from 1.105.0 to 1.105.1 #65377
• [stable33] chore(deps): bump moment-timezone from 0.6.4 to 0.6.5 in /build/frontend-legacy #65380
• [stable33] chore(deps-dev): bump sass from 1.105.0 to 1.105.1 in /build/frontend-legacy #65381
• [stable33] chore(deps): bump handlebars from 4.7.9 to 4.7.10 in /build/frontend-legacy #65384
• [stable33] fix(files_sharing): preserve share expiration time #65405
• [stable33] chore: Add testing:prepare-ci command #65419
• [stable33] chore: Skip transaction when no preview exists #65447
• [stable33] fix(encryption): use the block size of the file encoding when fixing sizes #65458
• [stable33] perf: Partition preview migration job #65466
• [stable33] fix(migration): check if deleted_by column exists before trying to add it to files_trash table #65516
• [stable33] fix(dav): adjust password session check on legacy dav auth #65539
• [stable33] fix(files_sharing): show the owner avatar for received shares #65559
• [stable33] fix(files): normalize Unicode in node paths #65564
• [stable33] fix(DefaultShareProvider): Set missing attributes when user manually accepts or rejects a share #65570
• [stable33] fix(dav): resolve users before intersecting shares #65582
• chore(deps-dev): bump vite from 7.3.6 to 7.3.7 #65626
• chore(deps-dev): bump @types/dockerode from 4.0.1 to 4.0.2 #65629
• [stable33] chore(deps): bump @nextcloud/password-confirmation from 6.1.0 to 6.2.1 #65630
• chore(deps-dev): bump @playwright/test from 1.63.0 to 1.64.0 #65632
• chore(deps-dev): bump concurrently from 9.2.4 to 9.2.5 #65634
• [stable33] chore(deps-dev): bump vite from 7.3.6 to 7.3.7 in /build/frontend-legacy #65635
• [stable33] chore(deps-dev): bump phpunit/phpunit from 11.5.56 to 11.5.57 in /vendor-bin/behat #65637
• [stable33] chore(deps-dev): bump mime from 4.1.0 to 4.1.1 in /build/frontend-legacy #65640
• [stable33] chore(deps): bump phpunit/phpunit from 11.5.56 to 11.5.57 in /vendor-bin/phpunit #65641
• [stable33] chore(deps): bump @nextcloud/password-confirmation from 6.1.0 to 6.2.0 in /build/frontend-legacy #65644
• [stable33] fix(chunkingUpload): sliding expiration based on upload activity #65655
• [stable33] chore: Update setup-php to 2.40.0 #65665
• [stable33] fix: Playwright concurrency #65671
• [stable33] fix: don't try to load keys for empty path for groupfolder versions #65674
• [stable33] fix(ui): Consider typing and scrolling as activity for auto logout #65689
• [stable33] fix(dav): remove CalDAV availability when all working-hour slots are cleared #65693
• [stable33] fix(encryption): Remember the recalculated unencrypted size as int #65699
• [stable33] fix: Remove auto increment migration on share_external #65709
• [stable33] fix(DisableSystemAddressBook): Fix notification by providing an object id #65732
• [stable33] chore(deps-dev): bump @zip.js/zip.js from 2.23.0 to 2.24.0 #65842
• [stable33] chore(deps-dev): bump sass from 1.105.1 to 1.105.2 #65844
• [stable33] chore(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 #65846
• [stable33] chore(deps-dev): bump eslint from 10.12.0 to 10.13.0 #65847
• [stable33] chore(deps): bump vue from 3.5.43 to 3.5.44 #65849
• [stable33] chore(deps): bump libphonenumber-js from 1.13.14 to 1.13.15 in /build/frontend-legacy #65853
• [stable33] chore(deps-dev): bump sass from 1.105.1 to 1.105.2 in /build/frontend-legacy #65855
• [stable33] chore(deps): bump core-js from 3.50.0 to 3.51.0 in /build/frontend-legacy #65857
• [stable33] chore(deps): bump p-queue from 9.3.3 to 9.3.5 in /build/frontend-legacy #65859
• [stable33] chore(deps-dev): bump @nextcloud/webpack-vue-config from 7.0.4 to 7.1.0 in /build/frontend-legacy #65861
• [stable33] chore(deps): bump dompurify from 3.4.16 to 3.4.17 in /build/frontend-legacy #65863
• [stable33] chore(deps-dev): bump webpack from 5.111.1 to 5.112.0 in /build/frontend-legacy #65865
• [stable33] fix(ci): clone vendored test apps from the matching stable branch #65873
• [stable33] fix(files): skip quota check when opening files for reading #65878
• [stable33] chore(deps-dev): bump sass from 1.105.2 to 1.106.0 #65895
• [stable33] chore(deps-dev): bump sass from 1.105.2 to 1.106.0 in /build/frontend-legacy #65898
• [stable33] chore(deps-dev): bump @testing-library/user-event from 14.6.7 to 14.6.8 in /build/frontend-legacy #65899
• [stable33] chore(deps): bump vue-material-design-icons from 5.3.1 to 5.4.0 in /build/frontend-legacy #65900
• [stable33] chore(deps): bump @nextcloud/password-confirmation from 6.2.0 to 6.2.1 in /build/frontend-legacy #65903
• [stable33] chore: flake update #65906
• [stable33] fix(files_sharing): public share popover jumps on options toggle #65911
• [stable33] fix(security): Update CA certificate bundle #65917
• [stable33] fix: move/rename of part file in masked dir/storage #65932
• [stable33] fix(provisioning_api): filter users by enabled state on the server #65946
• [stable33] ci: sync workflows with .github #65964
• [stable33] fix(kerberos): Allow again to specify empty url #65980
• [stable33] fix(appstore): do not wrap app store screenshots in the proxy twice #65992
• [stable33] fix(dav): detect truncated CardDAV sync results on all databases #66010
• [stable33] fix(versions): empty array for external shares #66027
• [stable33] build(deps): bump the symfony group across 1 directory with 9 updates #66032
• [stable33] fix(dav): align public request path handling #66040
• [stable33] fix: unique custom tokens for share links #66042
• [stable33] chore(deps-dev): bump sass from 1.106.0 to 1.106.1 #66080
• [stable33] chore(deps): bump @nextcloud/files from 4.1.0 to 4.1.1 #66081
• [stable33] chore(deps-dev): bump sass from 1.106.0 to 1.106.1 in /build/frontend-legacy #66082
• [stable33] chore(deps): bump @nextcloud/vue from 8.41.0 to 8.42.0 in /build/frontend-legacy #66083
• [stable33] chore(deps): bump @nextcloud/files from 4.1.0 to 4.1.1 in /build/frontend-legacy #66086
• [stable33] chore(deps-dev): bump webpack from 5.112.0 to 5.112.2 in /build/frontend-legacy #66088
• [stable33] build(deps): Bump Symfony packages #66135
• [stable33] fix: properly handle webdav pagination headers #66154
• [stable33] fix(external-share): move ExternalShareScanJob creation deeper #66159
• [stable33] fix: improve live-photo handling #66188
• [stable33] fix(CalDAV): extract data from occurance exemptions #66192
• [stable33] fix(user_ldap): Fix variable name conflict for cache key #66198
• [stable33] fix(dav): bind public share session authentication to the password hash #66202
• [stable33] fix(user_ldap): do not cache unknown names in the local mapping cache #66207
• [stable33] ci: drop cat of Imagick policy #66222
• [stable33] fix(systemtags): properly handle object ids #66227
• [stable33] fix(dav): do not grant write-properties to read-only calendar delegates #66235
• [stable33] fix: Reject login with NUL bytes rather than converting #66240
• [stable33] fix: BearerAuth should not check for already loggedin user #66243
• [stable33] fix(provisioning_api): group admins can't add all users to groups #66263
• [stable33] fix(share-folder): use it on federated share #66277

3rdparty

• [stable33] build(deps): bump the symfony group across 1 directory with 9 updates 3rdparty#2587
• [stable33] build(deps): bump the symfony group across 1 directory with 6 updates 3rdparty#2681
• [stable33] ci(actions): Sync workflows from master 3rdparty#2684

activity

• [stable33] fix(notifications): Require absolute links for support of desktop and mobile clients activity#2829
• [stable33] fix(activity): reset the current user and release the teams session activity#2926
• [stable33] perf(activity): reintroduce activity_object index activity#3023
• [stable33] Update nextcloud/ocp dependency activity#3027
• fix(deps): update dependency happy-dom to v21 (stable33) activity#3060
• [stable33] fix(files): do not publish incompletely built activity events activity#3063
• [stable33] fix(tests): Remove broken toast closing & remove use of query method activity#3066
• [stable33] [stable34] chore: Set specific PHP platform to fix psalm CI activity#3067
• [stable33] fix(api): fall back to MIME icon when preview generation fails activity#3068

app_api

• [stable33] refactor(harp): compare the HaRP shared key with hash_equals app_api#1116
• [stable33] fix(deploy): round the memory and CPU limits to whole numbers app_api#1120
• [stable33] fix(daemon): stop prefilling the daemon key in the templates app_api#1131
• [stable33] fix(docker): no PHP warning for a HaRP daemon without a key app_api#1134
• [stable33] fix(harp): send the route verb to HaRP app_api#1139
• [stable33] fix(proxy): match the route verb like HaRP app_api#1147
• [stable33] fix(harp): require HaRP 0.4.8 in the version check app_api#1152
• [stable33] fix(proxy): refuse dot segments resolved after the route check app_api#1166
• [stable33] fix(proxy): refuse the ExApp lifecycle endpoints like HaRP app_api#1171
• [stable33] fix(proxy): check routes on each reading of the path like HaRP app_api#1185

bruteforcesettings

• Chore(deps): Bump vue from 3.5.42 to 3.5.43 bruteforcesettings#1321
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1325
• [stable33] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1331
• [stable33] Fix npm audit bruteforcesettings#1333
• Chore(deps): Bump vue from 3.5.43 to 3.5.44 bruteforcesettings#1344
• Chore(deps): Bump vue-material-design-icons from 5.3.1 to 5.3.2 bruteforcesettings#1345
• Chore(deps-dev): Bump @vitejs/plugin-vue from 6.0.9 to 6.0.10 bruteforcesettings#1347
• [stable33] Fix npm audit bruteforcesettings#1360
• [stable33] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1365
• [stable33] Update nextcloud/ocp dependency bruteforcesettings#1376
• [stable33] Fix npm audit bruteforcesettings#1378
• [stable33] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1383

circles

• [stable33] feat(command): add --delete option to circles:remote circles#3043
• [stable33] fix(notifications): dismiss join request notification once processed circles#3046
• [stable33] fix: only show shared resources that are still acessible circles#3052
• chore(deps-dev): bump vite from 7.3.6 to 7.3.7 circles#3062
• [stable33] fix: resolve share mount for remote circle members circles#3098
• [stable33] fix(shares): keep circle context when share is resolved via circle circles#3128
• [stable33] fix(notification): Make relative action links absolute when preparing circles#3133

files_downloadlimit

• chore(deps): Bump @nextcloud/vue from 9.13.0 to 9.13.1 files_downloadlimit#1035
• chore(deps-dev): Bump vite from 7.3.6 to 7.3.7 files_downloadlimit#1052
• chore(deps): Bump vue from 3.5.43 to 3.5.44 files_downloadlimit#1068
• [stable33] fix: disable props not supported with download limit files_downloadlimit#1078
• [stable33] ci: Add release relay job files_downloadlimit#1084
• [stable33] Fix npm audit files_downloadlimit#932
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.1 files_downloadlimit#952

files_pdfviewer

• [stable33] ci(actions): Update workflow templates from organization template repository files_pdfviewer#1552
• [stable33] Fix npm audit files_pdfviewer#1555
• chore(deps-dev): Bump vitest from 5.0.1 to 5.0.5 files_pdfviewer#1601
• [stable33] Fix npm audit files_pdfviewer#1611

logreader

• [stable33] Update nextcloud/ocp dependency logreader#2278
• chore(deps-dev): bump vite from 7.3.6 to 7.3.7 logreader#2285
• [stable33] ci(actions): Update workflow templates from organization template repository logreader#2288
• [stable33] chore(deps-dev): bump @vue/test-utils from 2.4.11 to 2.5.1 logreader#2294
• [stable33] chore(deps-dev): bump happy-dom from 20.8.9 to 20.14.5 logreader#2296
• [stable33] chore(deps-dev): bump @vue/tsconfig from 0.8.1 to 0.9.1 logreader#2300
• [stable33] chore(deps): bump highlight.js from 11.11.2 to 11.12.0 logreader#2306
• [stable33] chore(deps): bump @nextcloud/vue from 9.4.0 to 9.13.1 logreader#2308
• [stable33] chore(deps): bump @nextcloud/axios from 2.5.2 to 2.6.0 logreader#2310
• [stable33] chore(deps): bump @nextcloud/router from 3.1.0 to 3.2.0 logreader#2312
• chore(deps-dev): bump browserslist from 4.28.9 to 4.29.3 logreader#2313
• [stable33] feat(search): replace search popover with inline search field logreader#2315
• [stable33] Fix npm audit logreader#2319
• [stable33] ci(actions): Update workflow templates from organization template repository logreader#2323
• [stable33] perf(LogIterator): Read long lines in linear time logreader#2330
• [stable33] chore(deps): bump vue-material-design-icons from 5.3.1 to 5.4.0 logreader#2339
• [stable33] chore(deps-dev): bump happy-dom from 20.14.5 to 20.14.6 logreader#2341
• [stable33] chore(deps): bump vue from 3.5.43 to 3.5.44 logreader#2343
• [stable33] Fix npm audit logreader#2354
• [stable33] ci(actions): Update workflow templates from organization template repository logreader#2357
• [stable33] fix(LogTable): load entries until screen is filled logreader#2361
• [stable33] chore(deps-dev): bump browserslist from 4.29.3 to 4.29.4 logreader#2377
• [stable33] Update nextcloud/ocp dependency logreader#2381
• [stable33] Fix npm audit logreader#2384
• [stable33] ci(actions): Update workflow templates from organization template repository logreader#2390

nextcloud_announcements

• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#732
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#736
• [stable33] Update nextcloud/ocp dependency nextcloud_announcements#753
• [stable33] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#757

notifications

• [stable33] build(deps-dev): Bump behat/behat from 3.33.0 to 4.0.0 in /tests/Integration notifications#3470
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3475
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3486
• [stable33] ci(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 notifications#3498
• [stable33] ci(performance): Update actions notifications#3505
• [stable33] build(deps): Bump vue from 3.5.43 to 3.5.44 notifications#3521
• [stable33] build(deps): Bump vue-material-design-icons from 5.3.1 to 5.3.2 notifications#3522
• [stable33] Fix npm audit notifications#3529
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3533
• [stable33] Update nextcloud/ocp dependency notifications#3555
• [stable33] ci(actions): Update workflow templates from organization template repository notifications#3567

password_policy

• [stable33] Chore(deps-dev): Bump sass from 1.105.0 to 1.106.0 password_policy#1072

photos

• [stable33] fix(tags): read the tag id from the node instead of its attributes photos#3872
• [stable33] ci(actions): Update workflow templates from organization template repository photos#3959
• [stable33] Update nextcloud/ocp dependency photos#3962
• [stable33] Chore(deps-dev): Bump stylelint from 17.15.0 to 17.16.0 photos#3977
• [stable33] Chore(deps-dev): Bump vite from 7.3.6 to 7.3.7 photos#3978
• [stable33] Chore(deps-dev): Bump postcss from 8.5.26 to 8.5.29 photos#3984
• [stable33] chore: Patch cypress workflow photos#3987
• [stable33] ci(actions): Update workflow templates from organization template repository photos#3995
• [stable33] Chore(deps-dev): Bump postcss from 8.5.29 to 8.5.30 photos#4007
• [stable33] Chore(deps): Bump vue-material-design-icons from 5.3.1 to 5.4.0 photos#4010
• [stable33] Chore(deps-dev): Bump happy-dom from 20.14.0 to 20.14.6 photos#4013
• [stable33] chore: workflow templates and psalm stub fix photos#4031
• [stable33] fix(filters): respect share download permission in filtered albums photos#4036
• [stable33] Update nextcloud/ocp dependency photos#4055

privacy

• [stable33] Chore(deps-dev): Bump phpunit/phpunit from 9.6.36 to 9.6.38 privacy#1496
• [stable33] chore(deps): combine pending dependency updates privacy#1508
• [stable33] Fix npm audit privacy#1522

recommendations

• [stable33] ci: workflow templates and npm audit fix recommendations#1200
• [stable33] chore(deps): bump npm dependencies recommendations#1204
• [stable33] Fix npm audit recommendations#1214

related_resources

• [stable33] Update nextcloud/ocp dependency related_resources#1161

serverinfo

• [stable33]: feat: Show all users who logged at least once serverinfo#1254

text

• [stable33] Update nextcloud/ocp dependency text#9368
• [stable33] Fix npm audit text#9371
• [stable33] fix(files): edited files marked locked in files list after close text#9376
• [stable33] fix(attachments): rewrite attachment file ids when copying folders text#9389
• [stable33] fix(attachments): normalize attachment names to Unicode NFC text#9394
• [stable33] fix(math): import katex css from component text#9399
• [stable33] fix(migration): quote identifiers in oracle index creation text#9408
• [stable33] Fix npm audit text#9424
• [stable33] Fix npm audit text#9463
• [stable33] fix(migration): create text_steps index ascending on oracle text#9470
• [stable33] fix(menu): make component actions work from the remaining actions menu text#9475
• [stable33] Fix misc flaky tests text#9481
• chore(deps): update dependency cypress-split to ^1.25.0 (stable33) text#9499
• chore(deps): update dependency cypress-vite to ^1.10.2 (stable33) text#9500
• [stable33] Update nextcloud/ocp dependency text#9501
• [stable33] Fix npm audit text#9505
• [stable33] fix(cron): stop attachment cleanup from failing on every run text#9517
• [stable33] fix(sessions): only use share node matching the session document text#9522
• [stable33] fix(editor): do not force save when clicking the save indicator text#9526

twofactor_nextcloud_notification

• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1573
• [stable33] Fix npm audit twofactor_nextcloud_notification#1575
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1582
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1586
• [stable33] Fix npm audit twofactor_nextcloud_notification#1591
• [stable33] build(deps): Bump vue from 3.5.43 to 3.5.44 twofactor_nextcloud_notification#1596
• [stable33] Fix npm audit twofactor_nextcloud_notification#1606
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1608
• [stable33] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1618
• [stable33] Fix npm audit twofactor_nextcloud_notification#1622
• [stable33] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1628

viewer

• [stable33] fix(files): don't expose WebDAV XML-attribute artifacts as DOM attributes viewer#3289
• [stable33] fix: properly handle e2ee support viewer#3367
• [stable33] ci(actions): Update workflow templates from organization template repository viewer#3404
• [stable33] Update nextcloud/ocp dependency viewer#3405
• [stable33] Fix npm audit viewer#3408
• [stable33] fix(viewer): register handlers not yet in the lookup table when opening a file viewer#3421
• [stable33] test(e2e): skip the Ogg/Theora video specs on Chromium viewer#3452
• [stable33] fix(viewer): skip duplicate handlers on init viewer#3458
• [stable33] build(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 viewer#3463
• [stable33] build(deps): Bump react-konva from 18.2.10 to 18.2.16 viewer#3466
• [stable33] build(deps): Bump vue-material-design-icons from 5.3.1 to 5.3.2 viewer#3467
• [stable33] build(deps): Bump @fontsource/roboto from 5.2.6 to 5.2.10 viewer#3469
• [stable33] build(deps-dev): Bump vite from 7.3.6 to 7.3.7 viewer#3472
• [stable33] build(deps-dev): Bump typescript from 5.9.2 to 5.9.3 viewer#3473
• [stable33] Update nextcloud/ocp dependency viewer#3476
• [stable33] ci(actions): Update workflow templates from organization template repository viewer#3477
• [stable33] Fix npm audit viewer#3481
• [stable33] Update nextcloud/ocp dependency viewer#3484
• [stable33] Fix npm audit viewer#3488

Pending PRs:

• @SebastianKrupinski
  • [stable33] fix: generate favourite icon without imagick svg support #58225
• @DerDreschner
  • [stable33] fix(DnsPinning): Ensure to always lookup based on FQDN #59157 🔁
• @kristian-zendato
  • [stable33] fix(files_external): Allow editing auth mechanism on saved mounts #61514 ✅
• @CarlSchwan
  • [stable33] fix(preview): First cleanup from filecache and then from preview table #63006 ✅
• @joshtrichards
  • [stable33] test(carddav): refactor testSearch to use clearer assertions and unique UIDs #63403
• @CarlSchwan
  • [stable33] feat: Add more debug output when checkTokenCredentials fails #63429 ✅
  • [stable33] fix(dav): Handle correctly not found while streaming output #63532
• @backportbot
  • [stable33] fix(files): keep reactivity when destructuring the store in grid view #63848
• @kristian-zendato
  • [stable33] fix(files_sharing): name the parent folder in inherited unshare actions #64351 ✅
• @backportbot
  • [stable33] fix(files_sharing): keep matching bundles for shares carrying the federation SHARE permission #64400
  • [stable33] fix(previews): set Content-Type header for Imaginary requests #64429 ✅
• @hamza221
  • [stable33] fix(files): validate dropped filenames before upload #64504 ⚠
• @icewind1991
  • [stable33] Take mount name into account when searching by filename. #64666 🔁
• @joshtrichards
  • [stable33] feat(app): allow removing installed-but-disabled apps; improve help & logging #64673
• @CarlSchwan
  • [stable33] Improve performance of snowflake ids in cron jobs #65423 ✅
• @skjnldsv
  • [stable33] fix(files_reminders): keep folder preload for folders over 512 entries #65474
• @CarlSchwan
  • [stable33] perf(preview): only autorotate with Imaginary when needed #65487 ✅
• @skjnldsv
  • [stable33] fix(files): keep the view when reloading a file opened outside the files view #65545
• @nickvergessen
  • [stable33] fix(favorite): Limit tagging to favorite #66231 ✅
• @grnd-alt
  • [stable33] fix(dav): register missing app config keys in the config lexicon #66283
• @CarlSchwan
  • [stable33] fix: Use POST instead of GET for multi-file downloads #66287
• @DerDreschner
  • [stable33] fix(encryption): Don't use ChunkingV2Plugin when server-side encryption is enabled #66288
  • [stable33] fix(files): Continue scanning after StorageInvalidException #66293
• @susnux
  • [stable33] fix(theming): only accept canonical svg paths for themed icons #66312
  • [stable33] fix(files): check that the source properly between storages #66317
• @solracsf
  • [stable33] fix(mail): escape rich object links and skip unsendable digest users activity#2929 ✅
• @mejo-
  • [stable33] perf(editor): only serialize markdown on update when it is read text#9544 ✅
• @come-nc
  • [stable33] fix: Fix explode calls for path parsing updater#762 ✅
• @CarlSchwan
  • [stable33] chore: Update 3rdparty repo with new sabre version #62395 ⚠
• @icewind1991
  • [stable33] fix: skip copying skeleton if the user has 0 quota #64398
  • [stable33] Quota wrapper fixes + Allow quota write streams with unknown free space #64432 ⚠
• (generated)
  • [stable33] chore(deps): bump @nextcloud/dialogs from 7.5.0 to 7.6.0 #66079 🔁
  • [stable33] chore(deps): bump @nextcloud/dialogs from 7.5.0 to 7.6.0 in /build/frontend-legacy #66084 🔁

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested

[blizzz]

Required PRS

• backport of fix(quota): Calculate used quota for foreign users the correct way #64872
• [stable33] fix(files): Continue scanning after StorageInvalidException #66293
• [stable33] fix(encryption): Don't use ChunkingV2Plugin when server-side encryption is enabled #66288
• [stable33] fix(session): Prevent stale requests from replacing a regenerated session #66325
• backport of refactor(session): use ITimeFactory for superseded session markers #66323

Nice to have

• [stable33] perf(editor): only serialize markdown on update when it is read text#9544