Version 31.0.9 September 11, 2025

Changes:
server

    Fix: rework UploadFolder implementation (server#51063)
    Fix(CardDAV): do not ignore move command object target uri (server#54201)
    Feat(cardav): support result truncation for addressbook federation (server#54276)
    Fix(trash): Fix order of metadata deletion (server#54320)
    Enh(unified-search): Smarter load more (server#54333)
    Fix(files): drop usage of FileInfoModel (server#54355)
    Fix(maintenance): refresh page when turned off (sometimes) (server#54359)
    Fix: increase how long we cache display names (server#54361)
    Fix(settings): add missing AI icon (server#54365)
    Fix(files_sharing): Implement conditional federation placeholder (server#54369)
    Fix(installer): ensure valid tempFile & extractDir (server#54373)
    Fix: Fix getting trusted server other than the first (server#54381)
    Fix(ZipFolderPlugin): set mtime of directories in archive (server#54412)
    Fix(search): Fix SearchComposer.php filtering logic (server#54423)
    Perf: ignore any custom property in the nc/oc namespace that isn’t explicitly allowed (server#54425)
    Perf(calendar): Disable custom properties for individual calendar events (server#54427)
    Fix: use double / in strings (server#54478)
    Fix(files_sharing): Also hide own reshares in shared with me section (server#54481)
    Fix(core): unified search is cut off on small window (server#54499)
    Fix(caldav): encode calendar URLs properly when formatting search results (server#54509)
    Feat(ocm): split ocm discovery and capabilities (server#54544)
    Change “core.ProfilePage.index” to lowercase (server#54547)
    Fix(AppManager): Argument must be of type array|object (server#54549)
    Fix(files_sharing): sharing status action permission and sidebar await (server#54555)
    Fix: Fix unique constraint violation in oc_vcategory migration (server#54572)
    Fix(files): filter non batch actions in header (server#54582)
    Fix: use appropriate user agent string when syncing Outlook calendar subscriptions (server#54585)
    Fix(sharing): fix json decoding the list of groups excluded from sharing (server#54596)
    Fix: Make some strings in CodeIntegrity.php translatable (server#54602)
    Chore(flake): Add haze (server#54604)
    Tests: Update testing certificates that expired after 10 years (server#54616)
    Fix(encryption): Fix TypeError when trying to decrypt unencrypted file (server#54628)
    Fix(files_sharing): Correctly reject pending remote shares (server#54635)
    Add commands to set/get/delete/clear the distributed memcache (server#54641)
    Fix(carddav): IAddressBook::getKey() should return a string (server#54652)
    Fix(2fa): Fix 2FA session setup when ephemeral session is used (server#54663)
    Do not always check password checkbox when sharing without password (server#54668)
    Fix(caldav): show confidential event if writable (server#54676)
    Restore “Others with access” section (server#54680)
    Fix(AppConfig#setTypedValue): Catch AppConfigUnknownKeyException (server#54686)
    Fix(TaskProcessingApiController): Don’t allow anonymous access anymore (server#54702)
    Fix(trashbin): Fix errors in the log on MOVE operations (server#54704)
    Feat: allow filtering sharing:delete-orphan-shares by share owner or target (server#54710)
    Fix(deps): Update @nextcloud/vue to v8.29.2 (server#54714)
    Fix(files_versions): retrieve all display names with one request (server#54720)
    Fix(files): verify files are still accessible before downloading (server#54724)
    Fix(files_versions): Use helper function to get versions folder (server#54726)
    Fix(theming): use IAppConfig instead of IConfig to set theming config (server#54740)
    Fix: cast fileid to string in getMountsForFileId (server#54744)
    Fix(files_versions): ensure IDs, Author and Label are strings (server#54767)
    Fix(status.php): Fix samesite cookies (server#54776)
    Fix: resolving conflict when uploading multiple files via drag&drop (server#54780)
    Chore(flake): update haze to 2.1.1 (server#54787)
    Fix: add missing listener (server#54808)
    Fix(dav): ensure moving or copying a file is possible (server#54815)
    Fix(dav): Mark removal of dav object properties as expensive (server#54824)
    Fix(comments): use showFile route to reference files with a matching … (server#54829)
    Fix(Filesystem): use FilenameValidator for `Filesystem::isFileBlacklisted` (server#54844)
    Fix dashboard icons (server#54845)
    Perf(users): Create lazy users in IUserManager::getSeenUsers (server#54849)
    Fix: the account files filter should also work in trashbin (server#54852)
    Fix(security): Update Expires time (server#54866)
    Fix(files_trashbin): Fix size propagation when moving file to trash (server#54971)
    Chore: Use new REUSE format (server#54979)
    Revert “fix(files_trashbin): Fix size propagation when moving file to trash” (server#54997)

activity

    Fix(dashboard): enable rounded icons (activity#2100)
    Perf: pass the node of shares around instead getting the path from id each time (activity#2101)

app_api

    Fix(Memcache-OccService): use “is_array” to support “false” from “cache->get” (app_api#634)

bruteforcesettings

    Ci(github): Update workflows (bruteforcesettings#786)

circles

    Fix(dashboard): enable rounded item icons (circles#2087)
    Fix(share): returns expiration date to front-end (circles#2091)
    Fix: ignore empty expiration date (circles#2095)
    Enh(loopback): ignore on occ (circles#2097)
    Fix(share): extract expiration from cached data (circles#2105)
    Fix federated teams with space-containing userid (circles#2114)
    Fix: feed array (circles#2123)

files_downloadlimit

    Fix: keep track of download count (files_downloadlimit#512)

files_pdfviewer

    Chore: Update GitHub workflows from templates (files_pdfviewer#1249)

firstrunwizard

    Fix: gracefully handle disabled autoplay policies (firstrunwizard#1667)
    Chore: adjust codeowners (firstrunwizard#1687)

password_policy

    Ci(github): Update workflows (password_policy#803)

photos

    Fix: Fallback to icon if collection cover fails to load (photos#3134)
    Fix(deps): Update @nextcloud/sharing to ^0.2.5 (photos#3142)

related_resources

    Fix: add check if app is enabled for RelatedService (related_resources#645)
    Chore(workflows): Update lint-php-cs workflow (related_resources#647)

suspicious_login

    Change attribute name “f1_score” to “f1 score” due to RubixML change (suspicious_login#1023)

text

    Chore(upgrade): mermaid and nextcloud/vue (text#7558)
    Fix(links): do not steal focus on initial loading (text#7602)

updater

    Feat: allow to provide manual URL (updater#643)
    Feat(download): allow to download archives from several URLs (updater#654)

viewer

    Fix: sorting to align with files list (viewer#2935)
    Backport/2946/stable31 (viewer#2948)
    Fix: viewer files router in standalone mode (viewer#2952)
    Feat: only provide fonts which are available (shipped by us) (viewer#2957)
    Feat: add API package to register handlers in init scripts (viewer#2958)

Version 31.0.8 August 14, 2025
Changes:

    server
        Refactor(files): remove custom page title handling (server#53601)
        Fix(settings): translate pronounce account property (server#53709)
        Fix TimedJob execution time to allow job execution exactly when scheduled (server#53790)
        Fix(profile): add max width for the user actions (server#53796)
        Fix: Correctly show free space if lower than quota in Files navigation (server#53813)
        Feat(settings): simplify OPcache checks (server#53817)
        Fix(files_trashbin): Expire trashbin items when space is needed (server#53837)
        Fix(imip): set charset for imip attachment (server#53838)
        Fix(settings): change Mastodon only URI to webfinger (server#53843)
        Fix(files_reminders): Don’t load if disabled for user (server#53854)
        Fix(federatedfilesharing): Fix external share being deleted when accepting share (server#53858)
        Fix(files): ensure proper headers lifecycle (server#53880)
        Fix(systemtags): case-insensitive search & prevent duplicates (server#53888)
        Fix: Fix theming for disabled accounts (server#53902)
        Fix: force lowercase emails (server#53907)
        Fix(Krb): switch away from deprecated and broken KerberosApacheAuth() (server#53912)
        Fix: hide rename action in trashbin (server#53916)
        Fix(theming): Correctly generate CSS for font themes (server#53921)
        Chore(deps): update `@nextcloud/vue` to v8.28.0 (server#53939)
        Fix(security): Update CA certificate bundle (server#53961)
        Fix(federation): respect sharing.federation.allowSelfSignedCertificat… (server#53973)
        Fix: Fix clearing unified search when modal is closed (server#53990)
        Fix(files_sharing): ensure share folder exists in the settings (server#53999)
        Feat(appconfig): add searchKeys() (server#54018)
        Fix(update): Correctly trigger update for auto-disabled local apps (server#54022)
        Update groupware code owners (server#54023)
        Fix(settings): verify source of app-discover media (server#54030)
        Feat(federated-share): forward notification only on remote reshare (server#54032)
        Fix(files): new folder icon color (server#54039)
        Fix(appconfig): mark searchKeys() as internal until 32 (server#54042)
        Fix(TaskProcessingApiController): Improve error handling (server#54046)
        Fix: group imip log messages by removing principal and uri (server#54053)
        Fix(files): sort favorites navigation alphabetically (server#54061)
        Fix(files_sharing): restore state when updating share failed (server#54066)
        Fix(ConnectionFactory): Apply Oracle connection fix to primary and replica params as well (server#54105)
        Fix(session): log when ephemeral sessions are closed (server#54106)
        Fix(cron): Fix infinite loop on ParallelAware blocked jobs (server#54108)
        Fix(provisioning_api): catch failed user creation (server#54110)
        Fix(caldav): don’t return cancelled events for upcoming events API (server#54113)
        Fix(files_sharing): fallback self.crypto.getRandomValues (server#54122)
        Fix: Use default share folder of the user on share accept (server#54130)
        Fix: Do not show password dialog when user can not validate password (server#54147)
        Show nice label when searching in root (server#54148)
        Feat(files_sharing): Toggle display for trusted server shares (server#54149)
        Feat(dav): add occ commands to get and set absences (server#54169)
        Fix: hide guests group from overall principals (server#54174)
        Chore: remove `nextcloud-vue-collections` and use `@nextcloud/vue` instead (server#54175)
        Fix: spelling mistake (server#54185)
        Fix: add missing color select to tags usage query (server#54190)
        Fix(AppMenu): ensure that aria attributes are set when needed (server#54199)
        Fix: don’t update cached mountpoints if the request doesn’t have filesystem access (server#54204)
        Chore(deps-dev): bump symfony/event-dispatcher from 6.4.13 to 6.4.24 in /build/integration (server#54216)
        Fix(files_sharing): ensure password or date is enabled by default to be enforced (server#54244)
        Fix: fix oci string length with empty strings (server#54252)
        Fix(logging): Fix query logging with DateTimeImmutable parameters (server#54254)
        31.0.8 RC1 (server#54256)
        Fix(caldav): get UID value (server#54259)
        Fix(encryption): Ignore shared files in encrypt-all command (server#54262)
        Cache IdentityProof keys (server#54265)
        Fix(core): ensure unique vcategory (server#54270)
        Fix(files_sharing): only show “shared with me” information if shared (server#54273)
        Fix(security): Update code signing revocation list (server#54288)
        Fix: handle smb timeouts as storage not available (server#54295)
        Fix: validate written size for s3 multipart uploads (server#54297)
        Fix: Fix button alignment for email templates in Outlook (server#54302)
        Fix(dav): calculate permissions based on addressbook principal (server#54308)
        Fix: use correct return value for `has-preview` dav property (server#54315)
        Feat: allow admins to configure additional sensitive config values (server#54322)
        31.0.8 (server#54416)
    3rdparty
        Build(deps): Bump icewind/streams from 0.7.7 to 0.7.8 (3rdparty#2037)
    activity
        Update nextcloud/ocp dependency (activity#2074)
        Update nextcloud/ocp dependency (activity#2088)
        Update nextcloud/ocp dependency (activity#2092)
    app_api
        Fix: streaming (app_api#611)
        Feat(new-route): added endpoint to call NC getAbsoluteURL (app_api#613)
        Fix(ocs-route): get absolute URL from overwrite.cli.url (app_api#617)
        Fix: for transfer encoding causing problems (app_api#622)
    bruteforcesettings
        Fix npm audit (bruteforcesettings#780)
    circles
        Fix(Command): Stop re-rendering tables for each row (circles#2062)
        Chore(dev-deps): Bump nextcloud/ocp package (circles#2065)
        Fix: translate name of dashboard widget (circles#2075)
    files_downloadlimit
        Fix npm audit (files_downloadlimit#465)
        Fix(public): use correct color for header text (files_downloadlimit#495)
        Update nextcloud/ocp dependency (files_downloadlimit#496)
        Update nextcloud/ocp dependency (files_downloadlimit#503)
        Update nextcloud/ocp dependency (files_downloadlimit#506)
    files_pdfviewer
        Fix npm audit (files_pdfviewer#1234)
    logreader
        Fix npm audit (logreader#1700)
        Update nextcloud/ocp dependency (logreader#1703)
        Update nextcloud/ocp dependency (logreader#1706)
    nextcloud_announcements
        Update nextcloud/ocp dependency (nextcloud_announcements#500)
        Update nextcloud/ocp dependency (nextcloud_announcements#505)
        Fix: ensure that Crawler does not run if no internet connection is disabled (nextcloud_announcements#508)
        Update nextcloud/ocp dependency (nextcloud_announcements#509)
    notifications
        Fix npm audit (notifications#2433)
        Update nextcloud/ocp dependency (notifications#2437)
        Fix npm audit (notifications#2440)
        Update nextcloud/ocp dependency (notifications#2447)
        Fix: no notifications icon in header when using locale en (notifications#2459)
    photos
        Update nextcloud/ocp dependency (photos#3103)
        Update nextcloud/ocp dependency (photos#3110)
        Fix: close sidebar on navigation change (photos#3114)
        Chore(workflows): add update-stable-titles (photos#3115)
    recommendations
        Fix npm audit (recommendations#897)
        Fix npm audit (recommendations#900)
        Fix npm audit (recommendations#904)
    serverinfo
        Update nextcloud/ocp dependency (serverinfo#849)
        Update nextcloud/ocp dependency (serverinfo#855)
        Update nextcloud/ocp dependency (serverinfo#858)
    survey_client
        Fix(report): Make the last_report lazy so we don’t load it on each request (survey_client#372)
    suspicious_login
        Fix(deps): bump amphp/parallel to v1.4.4. for PHP8.4 compatibility (suspicious_login#1015)
    text
        Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.0 (text#7400)
        Fix(deps): update dependency @nextcloud/sharing to ^0.2.5 (text#7401)
        Fix(deps): update dependency y-prosemirror to ^1.3.7 (text#7402)
        Fix(deps): update dependency @nextcloud/files to ^3.11.0 (text#7403)
        Fix(deps): update dependency mermaid to ^11.8.1 (text#7404)
        Fix(deps): update tiptap to ^2.26.1 (text#7405)
        Update nextcloud/ocp dependency (text#7408)
        Fix(files): workspace implementation (text#7421)
        Chore(deps): update dependency cypress-split to ^1.24.19 (text#7428)
        Fix(deps): update dependency @nextcloud/auth to ^2.5.2 (text#7429)
        Fix(deps): update dependency @nextcloud/l10n to ^3.4.0 (text#7430)
        Chore(deps): update dependency cypress-split to ^1.24.20 (text#7439)
        Fix(deps): update dependency @nextcloud/moment to ^1.3.5 (text#7440)
        Fix(workspace): fix race condition when loading (text#7449)
        Fix(richworkspace): load after mounted. (text#7451)
        Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.1 (text#7463)
        Fix(deps): update dependency lib0 to ^0.2.114 (text#7464)
        Fix(deps): update dependency @nextcloud/vue to ^8.28.0 (text#7465)
        Fix(deps): update dependency mermaid to ^11.9.0 (text#7466)
        Several link bubble/preview fixes (text#7476)
        Chore(deps): update form-data to 4.0.4 (text#7480)
        Chore(deps): update dependency @nextcloud/vite-config to ^1.6.0 (text#7486)
        Fix(deps): update dependency @nextcloud/files to ^3.12.0 (text#7487)
        Fix(keymap): Fix browser keybinding ctrl+del to delete word ahead (text#7492)
        Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.45.3 (text#7494)
        Fix(mermaid): Use dark theme if appropriate (text#7498)
        Update nextcloud/ocp dependency (text#7499)
        Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.46.0 (text#7503)
        Fix(workspace): toggle right away and only render if needed (text#7506)
        Fix(share): use relative path in share as davPath for attachments (text#7508)
        Fixes for TextDirection extension (text#7512)
        Further TextDirection improvements (text#7515)
        Fix(TextDirection): Ignore inputRule or collaboration transactions (text#7520)
        Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.46.2 (text#7527)
        Chore(deps): update dependency typescript to ^5.9.2 (text#7528)
        Update nextcloud/ocp dependency (text#7532)
        Fix npm audit (text#7534)
    twofactor_nextcloud_notification
        Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1028)
        Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1033)
        Update nextcloud/ocp dependency (twofactor_nextcloud_notification#1036)
    twofactor_totp
        Chore(CI): update workflows (twofactor_totp#1609)
    viewer
        Fix(deps): update dependency webdav to ^5.8.0 (viewer#2851)
        Fix: file list update (viewer#2907)
        Fix(image-editor): open newly created image when closing the image editor (viewer#2909)
        Fix: image editor dependencies