f09de1f2c5
fix: Fix test by scanning group before using it
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-02-27 15:35:22 +07:00
a8f664c58e
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2025-02-26 02:31:06 +07:00
5e2b8c22fa
ci(autochecks): Run some autochecks also on non-PHP files
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-02-21 12:04:34 +07:00
851355c34c
build(deps): Bump phpseclib/phpseclib from 2.0.47 to 2.0.48
...
| Production Changes | From | To | Compare |
|---------------------|--------|--------|-----------------------------------------------------------------------|
| phpseclib/phpseclib | 2.0.47 | 2.0.48 | [...](https://github.com/phpseclib/phpseclib/compare/2.0.47...2.0.48 ) |
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-11 08:53:20 +07:00
63d9a11575
fix: make sure we process mime extensions as string
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-02-09 21:09:12 +07:00
2c03bc74fa
fix(provisioning_api): Correct limit for `editUser`
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-06 15:46:15 +07:00
e550ad7bbe
fix(FediverseAction): Ensure valid fediverse links are generated
...
Harden also for existing values of the profile.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-06 15:46:15 +07:00
8fc1b6f1cd
fix(sharing): Ensure download restrictions are not dropped
...
When a user receives a share with share-permissions but also with
download restrictions (hide download or the modern download permission attribute),
then re-shares of that share must always also include those restrictions.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-02-04 15:06:11 +07:00
c99c135520
Merge pull request #50508 from nextcloud/backport/50436/stable31
...
[stable31] fix: Harden files scanner for invalid null access
2025-01-28 23:52:39 +07:00
a2470db709
Merge pull request #50505 from nextcloud/backport/50270/stable31
...
[stable31] fix(files_sharing): Respect permissions passed when creating link shares
2025-01-28 23:04:39 +07:00
26c93519f2
fix: Harden files scanner for invalid null access
...
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 19:49:03 +07:00
124db6147d
test: Reset sharing app config after test
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 17:26:28 +07:00
2926fe270a
fix(files_sharing): Respect permissions passed when creating link shares
...
Given:
User creates a link or email share with permissions=4 (create only = file drop).
Problem:
Currently the permissions are automatically extended to permissions = 5
(READ + CREATE). Work around was to create the share and directly update
it.
Solution:
Respect what the user is requesting, create a file drop share.
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 17:26:28 +07:00
ce0dfc9bb8
build(deps): Bump doctrine/dbal from 3.9.1 to 3.9.4
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-28 16:21:02 +07:00
7b3daafad3
Merge pull request #50482 from nextcloud/backport/50221/stable31
...
[stable31] Add integration tests for moving a file from and to a shared folder
2025-01-27 18:15:44 +07:00
bf45ce843c
test: Add integration tests for moving a file from and to a shared folder
...
Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>
2025-01-27 17:01:14 +07:00
77fddb8f23
fix(ratelimit): Allow to bypass rate-limit from bruteforce allowlist
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-01-27 13:21:36 +07:00
99e76d7a99
fix(TemplateLayout): `core` is not an app but the server itself
...
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-01-24 18:12:18 +07:00
cc9f1e00dd
fix(dav): default calendar and address book not created on first login
...
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-01-23 22:54:02 +07:00
e11adbd09d
build: Adjust checkout branch script
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-01-23 10:32:24 +07:00
abd3cb60fc
fix(files): more conversion tests and translate error messages
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-01-17 18:22:58 +07:00
2de855f0bc
Merge pull request #50162 from nextcloud/fix/improve-ldap-avatar-handling
...
Improve ldap avatar handling
2025-01-16 21:43:29 +07:00
19ce362896
chore: add file conversion integration tests
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-01-16 18:55:44 +07:00
a741c6cfa1
chore(psalm): Update baseline to remove fixed errors
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2025-01-13 17:34:11 +07:00
669e6cadd6
chore(federation): cleanup SettingsController and legacy AddServerMiddleware
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-01-09 15:39:01 +07:00
b434750cb2
chore(federation): add trusted server auto accept integration tests
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-01-09 12:54:51 +07:00
b64b106c13
Merge pull request #49966 from nextcloud/block-dav-move-parent
...
fix: block moving files to it's own parent with dav
2025-01-07 10:24:06 +07:00
8953f44534
Merge pull request #50035 from nextcloud/fix/http/jsonresponse-data-type
...
fix(HTTP): Adjust JSONResponse data type
2025-01-07 06:39:14 +07:00
757076af29
fix: explicitly ignore nested mounts when transfering ownership
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-01-06 14:45:35 +07:00
3624923af2
fix(HTTP): Adjust JSONResponse data type
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2025-01-04 00:58:54 +07:00
9193cd664e
fix: block moving files to it's own parent with dav
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-01-03 15:30:20 +07:00
63f3309993
fix(logger): Prevent infinite recursion with log.condition => matches
...
When we need to check the log condition for a user matches,
there is a risk that something on the way checks the log level
and would result in an infinite loop.
So we simply check if it's a nested call and use the default
warning level in that case.
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-01-03 10:04:51 +07:00
ec26a4449c
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2025-01-01 02:33:07 +07:00
7bc8eb3007
chore: update baseline
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2024-12-27 15:18:09 +07:00
22051a73c1
feat(login): add origin check at login
...
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
2024-12-05 09:51:53 +07:00
f08d053290
fix(ocm): switching to IdentityProof
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-12-04 09:30:55 +07:00
4591430c9c
feat(ocm): signing ocm requests
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-12-04 09:30:55 +07:00
dd3fa88b36
chore: check enums for since and experimental comments
...
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2024-12-02 14:30:18 +07:00
bcb8b85fc6
Merge pull request #49224 from nextcloud/build/psalm/unstable-namespace
2024-11-29 12:01:07 +07:00
dd101dd0f7
Merge pull request #49515 from nextcloud/bugfix/noid/boolean-false-in-multipart-form-data
...
fix(controller): Fix false booleans in multipart/form-data
2024-11-28 14:46:16 +07:00
2b6da9eaee
ci: Remove obsolete baseline entry
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2024-11-28 13:57:24 +07:00
d6fa2100e1
test(ExternalStorage): Send basic auth during integrations tests
...
Signed-off-by: Louis Chemineau <louis@chmn.me>
2024-11-28 11:12:29 +07:00
6822cf9731
fix(security): Update CA certificate bundle
...
Signed-off-by: GitHub <noreply@github.com>
2024-11-27 02:34:37 +07:00
6b383faf41
Revert "fix(dav): Always respond custom error page on exceptions"
...
This reverts commit 9992e7d439
2024-11-22 11:55:25 +07:00
65e24f7def
feat(user-prefs): IUserPreferences
...
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
2024-11-18 20:11:31 +07:00
9e327a5890
fix(apps-store): Remove apps from force-enabled state when uninstalled
...
If an app is force-enabled and then uninstalled the force-enabled state was kept.
This is now removed, so when the app should be re-installed the compatibility should be reevaluated.
Co-authored-by: Ferdinand Thiessen <opensource@fthiessen.de>
Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2024-11-18 14:09:54 +07:00
c179e78aeb
refactor(user_ldap): Remove Application::registerRoutes() usage
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2024-11-14 11:43:46 +07:00
95766246ea
Merge pull request #49244 from nextcloud/feat/profile-app
2024-11-14 11:07:06 +07:00
158299b3d7
fix(profile): make sure the app cannot be disabled as it was in core
...
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2024-11-14 10:25:10 +07:00
fc0c61458e
test(integration): Correctly cleanup logs
...
Signed-off-by: provokateurin <kate@provokateurin.de>
2024-11-14 08:12:20 +07:00
Côme Chilliet
nextcloud-command
Joas Schilling
Ferdinand Thiessen
skjnldsv
Andy Scherzinger
Daniel Calviño Sánchez
Richard Steinmetz
Arthur Schiwon
Stephan Orbaugh
Joas Schilling
Robin Appelman
provokateurin
Benjamin Gaussorgues
Maxence Lange
Daniel Kesselberg
Kate
Louis Chemineau