- Update to 28.1.8
  - No changelog from upstream at this time.

• Files Changed
• Browse Source

- Update to 26.0.12
  - Buffer chunked requests (server#43127)
  - Check share status when touching versions (server#43739)
  - Continue background scanning different storages if one fails (server#43419)
  - Fix #745 ValueError: random_int(): Argument #1 ($min) must be less than or equal to argument #2 ($max) (suspicious_login#849)
  - Fix for previews not being generated sometimes (server#43039)
  - Fix: Add bruteforce protection to email endpoint (server#43599)
  - Fix: Add bruteforce protection to federation endpoint (server#43714)
  - Fix(dav): Rate limit calendar/subscription creation (server#43753)
  - Fix(files): Don’t attempt to format a partial cache entry (server#43389)
  - Fix(sync): push local changes on reconnect (text#5286)
  - Handle storage not available when expiring versions (server#43124)
  - Improve path resolution in files_version hooks (server#42937)
  - Perf: skip request without read permission (server#43723)
  - SMB: allow to list root directory when using case-insensitive option (server#43521)
  - Stop the auto-logout loop after redirecting to the logout page (server#43711)
- Changes from 26.0.11
  - Fix semaphore unguarding (server#41290)
  - Fix(dav): allow multiple organizers if possible (server#42376)
  - Update crl after revoke rides.csr (server#42398)
  - Fix(LDAP): ensure stored groups are formatted as simple list (server#42448)
  - Restore shared lock ttl to previous value when releasing (server#42548)
  - Perf: Use more performant way to obtain and check the email as a login name with token login (server#42653)
  - Actually throttle restore (server#42740)
  - Fix: handle exif metadata read errors gracefully (server#42775)
  - Fix(share): use user timezone to parse share expiration date (server#42808)
  - Fix(appstore): Only send subscription keys to valid appstores (server#42830)
  - Fix(manifest): Check if app exists instead of accessing null as an array (server#42866)
  - Fix(systemreport): Mark more configs as sensitive (server#42872)
  - Update crl after revoke integration_homeassistant.csr (server#42876)

• Files Changed
• Browse Source

  - Fix root mounts not being setup in some cases (server#41090)
  - Fix: Delete ghost versions of non-existing files (server#41296)
  - Fix(scheduling): don’t send iMIP emails to rooms / resources (server#41315)
  - Fix(backupcodes): Remove old notifications before creating a new remi… (server#41451)
  - Reuse sharing disabled state when listing folder content (server#41462)
  - Serve .flac audio files (server#41557)
  - Do not write htaccess file if disk space is too low (server#41608)
  - Fix: Fix linkToOCSRouteAbsolute() without index.php and with subfolder (server#41626)
  - Fix: Avoid triggering a defered sidebar open if openFile is already handling that (server#41636)
  - Fix: Also cleanup orphaned shares user cannot be found anymore (server#41643)
  - Fix: lower threshold for system address book sync (server#41671)
  - Fix(dav): Avoid date diffing if PHP is buggy (server#41730)
  - Nextcloud 27 : Replace “Update” with “Edit” in share dialog (server#41734)
  - Fix(files_sharing): fix sharing tab translations (server#41736)
  - Fix(files_versions): Check for user and owner before call getUserFolder (server#41786)
  - Fix(ui): Do not close all menus on right click (server#41812)
  - Feat(LDAP): implement IIsAdmin interface (server#41813)
  - Improve share logic for enforced password & expiry date (server#41936)
  - Fix: Show error message when CSRF check fails at login (server#41970)
  - Fix/text processing types covariant stable27 (server#41997)
  - Fix(TemplateManager): Bail early if templatedirectory is empty (server#42002)
  - Fix(security): Update expiration date in security.txt (server#42004)
  - Fix: Update `@nextcloud/dialogs` to 4.2.2 to fix translations of FilePicker (server#42034)
  - Fix AppSettingsController.php overwriting currentLanguage (server#42063)
  - Fix: Properly fetch version from shared files by accessing the owner storage version (server#42075)
  - Fix(updatecheck): Don’t wait 120s for a response of updater.nextcloud… (server#42078)
  - Fix(systemreport): Mask onlyoffice secret as sensitive (server#42081)
  - Fix(bruteforce-protection): Don’t throw a 500 when MaxDelayReached is… (server#42083)
  - Fix(security): Handle idn_to_utf8 returning false (server#42085)
  - Fix(dist): assets were not compiled (server#42091)

• Files Changed
• Browse Source

- Update to 27.1.5
  - No changelog from upstream at this time.

- Update to 27.1.4
  - Fix/admin ai settings (server#40916)
  - LDAP: Increase profile picture limit to 512 (server#40918)
  - Allow share expiry dates lower than enforced limits (server#40928)
  - Fix version number in ITimeFactory after it was delayed (server#40929)
  - Fix(sharing): set name to target name in sharing cache (server#41069)
  - Fix(isLegitimatedForUserId): Setup mountpoints to check file access (server#41082)
  - Fix: duplicating contacts with the Recently contacted feature (server#41096)
  - Fix(ldap): store last known user groups (server#41106)
  - Fix(login): Fix JS error on login grant page (server#41138)
  - Fix: Don’t try to access null array (server#41147)
  - Fix(OCM): Make the public API only rely on OCP (server#41150)
  - Chore(deps): bump davclient.js from 0.2.1 to 0.2.2 (server#41161)
  - Fix: encode uri for trashbin delete (the second one) (server#41176)
  - Don’t pass invalid streams to Imaginary (server#41186)
  - Fix(files): race condition on web files view change (server#41206)
  - Fix(twofactor): avoid DB error on Twofactor (en/dis)abled event (server#41212)
  - Fix(install): Make installing more verbose (server#41215)
  - Fix(files_external): on case insensitive system, block case change (server#41219)
  - Catch Imaginary processing errors (server#41231)
  - Fix: add index on migration only if needed (server#41232)
  - Return correct status if touch failed (server#41236)
  - Fix(session): Log why session renewal failed (server#41238)
  - Fix(dav): Reduce CalDAV backend memory footprint (server#41245)
  - Fix semaphore unguarding (server#41289)
  - Optimize cache jail creation (server#41324)
  - Get children from dav node when preloading system tags (server#41347)

• Browse Source