654dd66515
build(deps-dev): bump behat/behat in /build/integration
...
Bumps [behat/behat](https://github.com/Behat/Behat ) from 3.19.0 to 3.20.0.
- [Release notes](https://github.com/Behat/Behat/releases )
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Behat/Behat/compare/v3.19.0...v3.20.0 )
---
updated-dependencies:
- dependency-name: behat/behat
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-02 18:10:42 +07:00
f8a45703d7
chore: remove scrutinizer
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-04-02 15:27:26 +07:00
97ad171d32
refactor(IMimeTypeDetector): use consistent capitalization
...
- use consistantly `mimeType` as it is called MIME type
- fix issues where implementation and interface had different parameter
names (this is an issue since PHP has named parameters).
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-04-02 13:22:16 +07:00
ed6d76ec8d
fix(notifications): Change notification app orders
...
The notification manager always calls notify() of the 'main' notifications app
before other notify apps, and calls other functions for other notifications apps
before the 'main' notification app
Signed-off-by: gavine99 <github@xymail.tk>
2025-04-01 12:27:24 +07:00
e9ec5d12c1
chore(deps-dev): bump guzzlehttp/guzzle in /build/integration
...
Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle ) from 7.9.2 to 7.9.3.
- [Release notes](https://github.com/guzzle/guzzle/releases )
- [Changelog](https://github.com/guzzle/guzzle/blob/7.9/CHANGELOG.md )
- [Commits](https://github.com/guzzle/guzzle/compare/7.9.2...7.9.3 )
---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-29 02:41:52 +07:00
da9b6e376d
fix(tests): Sort activities by id to get the last one
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-25 15:43:09 +07:00
140aba1f16
feat: Add context and test steps for activity in sharing
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-25 15:43:09 +07:00
a57f694e8d
feat: add integration test for sharing activity
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-25 15:43:09 +07:00
95df189595
feat(openapi): Generate merged spec for all apps
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-24 16:38:17 +07:00
3732be59fd
fix(build): Also fail OpenAPI generation for untracked specs
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-24 16:18:02 +07:00
5ed5bef1ba
chore: Update OCP baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-20 10:54:50 +07:00
92795b2091
chore(test): use consistent tabs for indention in behat tests
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-19 20:59:08 +07:00
4df9ab4033
Merge pull request #51403 from nextcloud/chore/drop-jsdoc
...
chore(dev-deps): Drop dependency on jsdoc
2025-03-12 08:48:25 +07:00
251a19d6ea
chore(dev-deps): Drop dependency on jsdoc
...
It is not used anymore and it yields not usable documentation anymore.
This is a leftover from like 11 years ago.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-11 18:36:41 +07:00
00d08a4f69
fix(lookup-server): disable lookup server for non-global scale setups
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-03-11 14:26:47 +07:00
253628ad5a
fix: Fix psalm issues and add missing methods to ITemplate interface
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-06 15:49:25 +07:00
71dc34c03c
fix: Deprecate OC_Template, add proper template manager instead
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-03-06 15:49:25 +07:00
c2f2f21673
feat: Support deleting metadata from WebDAV
...
The `$value` will be `null` if the update is wrapped inside a `<d:remove>...</d:remove>` block.
Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-03-04 12:34:11 +07:00
3bc3d03048
Merge pull request #51000 from nextcloud/fix/federatedfilesharing/group-cleanup
...
fix(FederatedShareProvider): Delete external shares when groups are deleted or users removed from a group
2025-03-03 16:29:10 +07:00
a9a839c40f
Merge pull request #51194 from nextcloud/refactor/tempmanager
...
refactor(TempManager): Simplify and unify implementations and remove legacy behavior
2025-03-03 16:17:34 +07:00
eaa1b54d98
build(integration): Disable password_policy app
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 12:51:39 +07:00
dd47daa4a8
fix(Share20): Convert broken hooks to IEventListener
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 12:49:01 +07:00
8acfc0f0f2
refactor(TempManager): Simplify and unify implementations and remove legacy behavior
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-03-03 11:11:12 +07:00
c82337f3b9
fix: incorrect types detected by updated stubs
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-27 19:07:39 +07:00
0be4239c41
chore: Update php intl stub for PHP 8.0+
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-27 19:06:44 +07:00
485f3f495e
fix: Fix test by scanning group before using it
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-27 12:39:15 +07:00
11d36e7607
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2025-02-26 02:31:09 +07:00
0fc355aa1e
ci(autochecks): Run some autochecks also on non-PHP files
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-02-21 12:12:29 +07:00
eb3c639c6b
bump behat/behat from 3.18.1 to 3.19.0 in /build/integration
...
---
updated-dependencies:
- dependency-name: behat/behat
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-18 14:31:46 +07:00
e757b649b7
fix: Fix psalm taint false-positives by small refactorings
...
Mostly make it clear that we trust admin input or that we correctly
escape strings.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 18:08:23 +07:00
640dbd0b5e
fix: Fix false-positive psalm taint errors when outputting plain text
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:26:23 +07:00
7c907223d2
fix: Fix psalm taint false-positive by escaping trusted input
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:26:22 +07:00
fa108d5b54
fix: Correctly tag json encoding in BaseResponse to fix false-positive
...
…in psalm taint analysis
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:26:22 +07:00
aac79bad9b
fix: Move config.php taint trust upstream directly in OC\Config class
...
This solves some false-positive psalm taint errors
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:26:20 +07:00
25f38883f1
fix: Work around false-positive psalm taint error calling print_r in admin_audit
...
Same issue as var_export, print_r is listed as sink but it’s not when
using return:true. Anyway, using the logger context feature is better.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:24:08 +07:00
fec865cc29
chore: Correctly flag json encoding methods as escaping html and quotes
...
Especially with JSON_HEX_TAG it’s perfectly fine to echo JSON, and we
only use it in JSON output anyway.
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-17 15:24:07 +07:00
964bc960f8
chore: Update psalm-baseline-security.xml
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-13 16:27:13 +07:00
007335dadf
chore(rector): Enable Nextcloud 25 set for the apps folder
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-13 11:45:39 +07:00
ee48cafd20
Merge pull request #50689 from nextcloud/fix/migrate-dav-to-events
...
fix(dav): Migrate from hooks to user events
2025-02-13 10:24:05 +07:00
747bf1a241
fix(transifex): Adjust check for translation of apps
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-02-11 07:19:46 +07:00
a4d7623ed7
chore: Update psalm baseline
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-10 14:52:18 +07:00
93c72f5675
Merge pull request #50660 from nextcloud/fix/mime-int
...
fix: make sure we process mime extensions as string
2025-02-06 16:13:27 +07:00
2a0f81da53
fix(provisioning_api): Correct limit for `editUser`
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-06 11:58:24 +07:00
729cdf6818
fix(FediverseAction): Ensure valid fediverse links are generated
...
Harden also for existing values of the profile.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-06 11:58:24 +07:00
6baafd82b6
fix: make sure we process mime extensions as string
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-02-05 12:35:41 +07:00
73dc0f0f19
fix(sharing): Ensure download restrictions are not dropped
...
When a user receives a share with share-permissions but also with
download restrictions (hide download or the modern download permission attribute),
then re-shares of that share must always also include those restrictions.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-04 15:39:14 +07:00
8ad7350a6b
Merge pull request #50137 from nextcloud/dependabot/composer/build/integration/behat/behat-3.18.1
2025-01-30 00:11:21 +07:00
b48ee2e924
fix: Harden files scanner for invalid null access
...
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 20:08:46 +07:00
0baab8fd98
test: Reset sharing app config after test
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 16:40:50 +07:00
253f4345f1
fix(files_sharing): Respect permissions passed when creating link shares
...
Given:
User creates a link or email share with permissions=4 (create only = file drop).
Problem:
Currently the permissions are automatically extended to permissions = 5
(READ + CREATE). Work around was to create the share and directly update
it.
Solution:
Respect what the user is requesting, create a file drop share.
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 16:40:50 +07:00
dependabot[bot]
Daniel Kesselberg
Ferdinand Thiessen
gavine99
Côme Chilliet
provokateurin
John Molakvoæ
Louis Chemineau
Stephan Orbaugh
Kate
nextcloud-command
Joas Schilling
Côme Chilliet
skjnldsv