87916 Commits (master)

 

All Branches   

Search

Author	SHA1	Message	Date
Nextcloud bot	f3ecb372e3	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	20 hours ago
Nextcloud bot	dbe23295e4	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	2 days ago
John Molakvoæ	d44790d10b	Merge pull request #61007 from nextcloud/fix/theming-cachebuster-type-conflict ... fix(theming): read cachebuster as int in manifest endpoint	2 days ago
Git'Fellow	17bbc56dab	fix(theming): read cachebuster as int in manifest endpoint ... Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>	2 days ago
John Molakvoæ	08c92e8488	Merge pull request #60948 from nextcloud/fix/ldap-profile-field-editing ... fix(user_ldap): allow editing profile fields not managed by LDAP	3 days ago
Joas Schilling	cbac607588	Merge pull request #60989 from nextcloud/bugfix/noid/fix-icon-colors ... fix(menu): Fix icon colors on waffle menu	3 days ago
Matthieu Gallien	98ff79abed	Merge pull request #60992 from nextcloud/automated/noid/master-update-code-signing-crl ... [master] fix(security): Update code signing revocation list	3 days ago
nextcloud-command	9d5eb3b8af	fix(security): Update code signing revocation list ... Signed-off-by: GitHub <noreply@github.com>	3 days ago
nextcloud-command	22c514d208	chore(assets): Recompile assets ... Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>	3 days ago
Joas Schilling	616eb27e21	fix(menu): Fix icon colors on waffle menu ... [skip ci] Signed-off-by: Joas Schilling <coding@schilljs.com>	3 days ago
Nextcloud bot	732c23401d	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	3 days ago
Côme Chilliet	d4c8781e82	Merge pull request #60481 from nextcloud/jtr/legacy-getTheme ... refactor(legacy): simplify getTheme and clarify legacy theme docs	3 days ago
Arthur Schiwon	232fb616ea	Merge pull request #60884 from XananasX7/security/taskprocessing-unserialize-allowed-classes ... fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization	3 days ago
Anna Larch	bbf05d3b8f	fix(user_ldap): allow editing profile fields not managed by LDAP ... canEditProperty() was returning true (editable) when an LDAP attribute was configured for a field, and false when no attribute was configured. This is inverted: a field with an LDAP attribute mapping is owned by LDAP and should not be user-editable, while a field with no mapping is not sourced from LDAP and the user should be free to set it themselves. Fixes profile fields being uneditable for all LDAP users whose admin has not configured attribute mappings for those fields. Assisted-by: ClaudeCode:claude-sonnet-4-6 Signed-off-by: Anna Larch <anna@nextcloud.com>	3 days ago
Louis	09f1bb216c	Merge pull request #60977 from nextcloud/fix/noid/remove-dead-remote-integration-tests ... fix(tests): remove integration tests that depend on deleted Remote API classes	3 days ago
Louis	e1dfbb20a9	Merge pull request #60930 from nextcloud/test/noid/user-ldap-large-annotation ... perf(user_ldap): chunk oracle queries for lower bind cost	3 days ago
Anna Larch	09ed12161d	fix(tests): remove integration tests that depend on deleted Remote API classes ... The Remote API classes (OC\Remote\* and OCP\Remote\*) were removed in #60953, but the remoteapi Behat integration suite was not updated. This caused fatal PHP errors when Behat tried to bootstrap RemoteContext, breaking the integration test run on master. Remove RemoteContext.php, remote.feature, and the remoteapi suite entry in behat.yml since there is nothing left to test. Assisted-by: ClaudeCode:claude-sonnet-4-6 Signed-off-by: Anna Larch <anna@nextcloud.com>	3 days ago
El Mehdi Abenhazou	e8c101fac8	fix(TaskProcessing): restrict allowed_classes in Manager cache deserialization ... The availableTaskTypes cache stores serialized arrays containing ShapeDescriptor objects, ShapeEnumValue objects, and EShapeType enum values. The unserialize() call did not restrict which classes could be instantiated. Restrict deserialization to the three known types: - OCP\TaskProcessing\ShapeDescriptor - OCP\TaskProcessing\ShapeEnumValue - OCP\TaskProcessing\EShapeType This prevents PHP Object Injection if an attacker gains write access to the distributed cache backend. Signed-off-by: El Mehdi Abenhazou <mehdiananas007@gmail.com>	3 days ago
XananasX7	d0cce3da70	fix(TaskProcessing): add allowed_classes to unserialize() in Manager cache ... The availableTaskTypes cache stores serialized arrays containing ShapeDescriptor objects, ShapeEnumValue objects, and EShapeType enum values. The unserialize() call did not restrict which classes could be instantiated. Restrict deserialization to the three known types: - OCP\TaskProcessing\ShapeDescriptor - OCP\TaskProcessing\ShapeEnumValue - OCP\TaskProcessing\EShapeType This prevents PHP Object Injection if an attacker gains write access to the distributed cache backend (e.g., a Redis instance without authentication or with weak ACLs), which is a known real-world attack vector in shared hosting and container environments.	3 days ago
Anna Larch	967d8de792	perf(user_ldap): chunk oracle queries for lower bind cost ... Oracle's OCI8 driver binds each named parameter individually via OCIBindByName, making queries with 65 000 parameters dramatically slower than on MySQL or PostgreSQL — slow enough to time out in CI and degrade production LDAP syncs on large installations. Lower maxSlices to 5 for Oracle (5 000 params/query) via a match expression alongside the existing SQLite special-case. SQLite and all other databases are unchanged. Assisted-by: ClaudeCode:claude-sonnet-4-6 Signed-off-by: Anna Larch <anna@nextcloud.com>	3 days ago
Nextcloud bot	b6d0e19876	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	4 days ago
Andy Scherzinger	12da6794a0	Merge pull request #60964 from nextcloud/ignore-agents-claude-for-release ... build: Dont include AGENTS.md and CLAUDE.md in release	4 days ago
Daphne Muller	faa78c8a6b	Merge pull request #60167 from nextcloud/enh/noid/allow-http-progressive-stream-response ... failing tests not related according to Julien	4 days ago
Christoph Wurst	a08fcaf808	Merge pull request #60648 from nextcloud/fix/caldav/trashbin-shared ... fix: access shared and delegated trashbin objects	4 days ago
Daniel Kesselberg	2f2b7d7c94	build: Dont include AGENTS.md and CLAUDE.md in release ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	4 days ago
Tobias Kaminsky	3279c40632	Merge pull request #60953 from nextcloud/carl/IInstanceFactory ... chore: Remove unused and long deprecated Remote components	4 days ago
Tobias Kaminsky	cfa3e1d900	Merge pull request #60954 from nextcloud/carl/IBroadcastEvent ... chore: Deprecate IBroadcastEvent	4 days ago
Louis	eda0d2c75b	Merge pull request #60631 from nextcloud/backport/60615/master ... fix(files): show proper information when a move will override the target	4 days ago
Stephan Orbaugh	50b67c1e28	Merge pull request #60458 from nextcloud/refactor/navigation-manager ... refactor(NavigationManager): move navigation definitions into apps	4 days ago
Julien Veyssier	04dc699a29	feat(guzzle): allow overriding the default curl handler when creating a new client ... Signed-off-by: Julien Veyssier <julien-nc@posteo.net>	4 days ago
Andy Scherzinger	0c3f22eb4b	Merge pull request #60959 from nextcloud/carl/files-checker-fix ... fix: Files checker	4 days ago
Carl Schwan	81728c66fe	fix: Build checker ... Add new files there Signed-off-by: Carl Schwan <carlschwan@kde.org>	4 days ago
Carl Schwan	4d74234f1e	chore: Deprecate IBroadcastEvent ... Not used in any of the repos in github nextcloud namespace. Signed-off-by: Carl Schwan <carlschwan@kde.org>	4 days ago
Ferdinand Thiessen	7e3847161c	chore: compile assets ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 days ago
Ferdinand Thiessen	511ad14338	fix(files): show proper notes about overwriting files when moving ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	4 days ago
Carl Schwan	8b56c4c93d	chore: Remove unused and long deprecated Remote components ... Signed-off-by: Carl Schwan <carlschwan@kde.org>	4 days ago
Kent Delante	2b3751a7e4	Merge pull request #60825 from nextcloud/leftybournes/fix/shares_public_password ... fix(files_sharing): clear the password after saving	4 days ago
Stephan Orbaugh	617bc97348	Merge pull request #60897 from nextcloud/fix/current-app-label-followups ... fix(core): restore app menu label, show "Settings" for sub-sections	5 days ago
Christoph Wurst	fe8cc61684	Merge pull request #60712 from nextcloud/fix/caldav-delegation/notifications ... fix(caldav-delegation): send notification to delegator	5 days ago
nextcloud-command	c653d613b3	chore(assets): Recompile assets ... Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>	5 days ago
Kent Delante	da448bfe03	fix(files_sharing): clear the password after saving ... Signed-off-by: Kent Delante <kent@delante.me>	5 days ago
Nextcloud bot	58be1732fe	fix(l10n): Update translations from Transifex ... Signed-off-by: Nextcloud bot <bot@nextcloud.com>	5 days ago
Andy Scherzinger	5c70f19783	Merge pull request #60922 from nextcloud/docs/noid/ai-policy ... docs: Add AI policy reference and starting point for agents.md	5 days ago
Ferdinand Thiessen	0abaf60352	fix: make sure the core app is loaded ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	5 days ago
Ferdinand Thiessen	0746f49dd1	fix(appstore): do not set wrong app as active ... Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	5 days ago
Ferdinand Thiessen	b27e4956d1	refactor(NavigationManager): move navigation definitions into apps ... The manager itself does not need to know what hardcoded-things an app provides, instead the apps itself should handle this. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>	5 days ago
Ferdinand Thiessen	ce3b3b7689	Merge pull request #60787 from nextcloud/jtr/fix-storage-dav-client-proxyexclude ... fix(Storage): use `proxyexclude` parameter in DAV client	5 days ago
Hamza	fc44e78c41	fix(caldav-delegation): send notification to delegator ... Signed-off-by: Hamza <hamzamahjoubi221@gmail.com>	5 days ago
Hamza	19acca6a7f	fix: access shared trashbin objects ... Signed-off-by: Hamza <hamzamahjoubi221@gmail.com> Assisted-by: claude:Opus 4.7 (1M context)	5 days ago
Carl Schwan	bbbdf47f36	Merge pull request #60881 from nextcloud/jtr/test-fix-cache-ordering-assumption ... test(cache): avoid ordering assumptions in testExtended	5 days ago