29.0.8 RC1

[Altahrim]

• [stable29] fix(caldav): Do not load IMipPlugin before user auth and session is c… #47790
• [stable29] fix(files): Check if target path is a descendant of the shared folder #47795
• [stable29] fix: Fix inaccessible content on public pages due to overlapping footer #47812
• [stable29] fix: Run migration sql as statement so that the primary db node is used #47840
• [stable29] fix(files_sharing): password checkbox and labels in link share #47850
• [stable29] fix: Only write once to template instead of create/copy #47862
• [stable29] fix(preview): gracefully handle file not being opened in ProviderV2 #47867
• [stable29] fix(appstore): return if appstore is manually disabled #47871
• [stable29] fix: make swift connect exception message more informative #47873
• [stable29] fix(files): Reset context menu position on close #47877
• [stable29] fix: Display 'Leave share' instead of 'Delete' #47895
• [stable29] fix(settings): Add back create group icon #47903
• [stable29] fix(LDAP): check index before accessing it #47918
• [stable29] fix(files_external): Handling in SFTP UI for custom ports #47922
• [stable29] fix(appstore): Ensure returned apps from AppStore are valid #47936
• [stable29] fix(config): Throw PreconditionException always when it didn't match #47941
• [stable29] fix(files_external): broken credentials dialog #47953
• [stable29] fix(files): Adjust Cache::searchQuery() parameter name to match interface #47958
• [stable29] fix(files_external): Check key exists before accessing it #47975
• [stable29] fix: Do not try to set HTTP response code on already closed connection #47980
• [stable29] fix(a11y): Update OpenDyslexic from 0.920 to 2.001 #47983
• [stable29] Update psalm-baseline.xml #47987
• [stable29] feat: Reset route if neither the Viewer of the Sidebar is open #48001
• [stable29] fix(Storage\Local): Do not call getSourcePath() on SplFileInfo #48020
• [stable29] fix(Comment): Initialize childrenCount as integer #48024
• [stable29] fix(Tags): Return boolean for userHasTags() #48026
• [stable29] fix(BaseResponse): Cast XML element values to string #48033
• [stable29] fix(S3ConfigTrait): Allow proxy field to take false #48034
• [stable29] fix(dav): set string type for sanitizeMtime #48052
• [stable29] fix(dav): imip service test expects integers for last occurence #48055
• [stable29] Update psalm-baseline.xml #48057
• [stable29] fix(filesreport): cast fileId to integer #48067
• [stable29] fix(dav): cast parameters to string #48068
• [stable29] test: cast node name and data to string #48070
• [stable29] fix(weather_status): Fix search address errors when offline #48075
• [stable29] fix(Entity): Fix magic setter call for custom strong typed setters #48087
• [stable29] fix: Prevent crash when refreshing metadata for files without an owner #48092
• [stable29] 🥅 — Catch MaxInstancesExceededException on calendar events #48096
• [stable29] fix(config): Add missing handling for envCache in getKeys() #48100
• [stable29] Ensure that the hash method does not return null #48104
• [stable29] fix(settings): disable Discover when appstore is disabled #48119
• [stable29] fix(appstoreFetcher): get list from a custom store and remove unnecessary warning #48165
• [stable29] Ci fixes #48214
• [stable29] fix(FileList): Show correct avatar for federated share owner #48227
• [stable29] Update psalm-baseline.xml #48228
• [stable29] fix(psalm): Enable findUnusedBaselineEntry #48280
• [stable29] fix: Don't crash if disabled user is missing in the database #48284
• [stable29] chore: add .git-blame-ignore-revs #48293
• [stable29] fix: skip the integrity check for nextcloud-init-sync.lock #48301
• [stable29] Add bidirectional text support - Backend #48309
• [stable29] fix: Ensure app discover section is returned as list #48313
• [stable29] refactor(AccountIcon): Remove needless console.log #48315
• [stable29] chore(deps): Bump aws/aws-sdk-php from 3.240.8 to 3.322.4 #48326
• [stable29] fix(security): Update CA certificate bundle #48336
• [stable29] fix(files): Fix having to resolve conflicts twice when dropping files #48351
• [stable29] fix(files_external): Catch correct exception #48364
• [stable29] fix: Show storage full warning when storage is actually full #48368
• [stable29] feat(share): ensure unique share tokens with dynamic length adjustment #48380
• [stable29] fix: Use placeholder for external storage password #48387
• [stable29] Skip future shipped apps from updatenotification check #48393
• [stable29] fix(files_sharing): Parse OCM share permissions from OCM and not OCS prop #48400
• [stable29] Fix file item display for users with numerical user IDs #48417
• [stable29] fix: gracefully parse non-standard trusted certificates #48444
• [stable29] fix: correctly count disabled users for subadmins #48449
• [stable29] fix(Auth): ignore missing token when trying to set password-unconfirm… #48491
• [stable29] fix(config): Suppress config.php fopen error at install time #48502
• [stable29] fix: make federation address book sync work with allow_local_remote_servers = false #48507
• [stable29] fix(caldav): add missing handlers #48509
• [stable29] chore(deps): Bump aws/aws-sdk-php from 3.240.8 to 3.322.4 3rdparty#1945
• [stable29] Remove requiring PNG for iOS activity#1795
• [stable29] Fix npm audit bruteforcesettings#647
• Chore(deps): Bump @nextcloud/axios from 2.5.0 to 2.5.1 bruteforcesettings#660
• [stable29] Fix npm audit bruteforcesettings#665
• [stable29] fix(CoreQueryBuilder): Use shorter prefixes to stay below 30 characters for Oracle <12.2 circles#1701
• [stable29] Fix npm audit files_downloadlimit#357
• [stable29] Update nextcloud/ocp dependency files_downloadlimit#369
• [stable29] Update nextcloud/ocp dependency files_downloadlimit#383
• [stable29] Fix npm audit files_pdfviewer#1046
• chore(deps-dev): Bump axios from 1.7.6 to 1.7.7 files_pdfviewer#1049
• chore(deps): Bump @nextcloud/axios from 2.5.0 to 2.5.1 files_pdfviewer#1057
• [stable29] Fix npm audit files_pdfviewer#1062
• Chore(deps-dev): Bump vite from 5.4.2 to 5.4.3 firstrunwizard#1346
• [stable29] Update nextcloud/ocp dependency firstrunwizard#1352
• Chore(deps-dev): Bump vite from 5.4.3 to 5.4.5 firstrunwizard#1358
• Chore(deps-dev): Bump vite from 5.4.5 to 5.4.7 firstrunwizard#1368
• Chore(deps): Bump @nextcloud/axios from 2.5.0 to 2.5.1 firstrunwizard#1369
• [stable29] Update nextcloud/ocp dependency firstrunwizard#1378
• chore(deps-dev): bump vite from 5.4.7 to 5.4.8 firstrunwizard#1384
• [stable29] Fix npm audit firstrunwizard#1390
• [stable29] Update nextcloud/ocp dependency nextcloud_announcements#386
• [stable29] Update nextcloud/ocp dependency notifications#2034
• [stable29] Create block-merge-eol.yml notifications#2040
• [stable29] Update nextcloud/ocp dependency notifications#2056
• Chore(deps-dev): Bump postcss from 8.4.39 to 8.4.47 photos#2652
• [stable29] feat: Check upload directory share state photos#2660
• [stable29] fix: Use user uid to compare in PhotosPicker photos#2664
• Chore(deps): Bump webdav from 4.11.3 to 4.11.4 photos#2670
• [stable29] Update nextcloud/ocp dependency serverinfo#687
• [stable29] fix: failure when using sqlite3 survey_client#319
• [stable29] fix: notifications link for mobile / desktop error generating errors in v30 survey_client#323
• [stable29] fix: clarify language for removing previously sent report data survey_client#325
• [stable29] Update nextcloud/ocp dependency text#6336
• [stable29] Fix npm audit text#6337
• [stable29] fix(TaskList): Add class name to rendered HTML text#6341
• [stable29] ci: Fix selector for viewer modal name text#6343
• [stable29] fix: Reset session if file rename changes mimetype from/to markdown text#6347
• [stable29] fix(CodeBlock): Fix visibleFocus and pasting in code blocks text#6351
• fix(deps): update dependency debounce to ^2.1.1 (stable29) text#6381
• fix(deps): update dependency y-prosemirror to ^1.2.12 (stable29) text#6382
• fix(deps): update dependency yjs to ^13.6.19 (stable29) text#6383
• chore(deps): update dependency cypress-visual-regression to ^5.2.1 (stable29) text#6385
• chore(deps): update dependency vite to ^5.4.5 (stable29) text#6389
• fix(deps): update dependency @nextcloud/auth to ^2.4.0 (stable29) text#6390
• fix(deps): update dependency @nextcloud/files to ^3.9.0 (stable29) text#6391
• fix(deps): update dependency @nextcloud/vue to ^8.18.0 (stable29) text#6392
• chore(deps): update dependency vite to v5.4.6 [security] (stable29) text#6419
• [stable29] fix(paragraph): migrate preview options to decorations text#6430
• [stable29] Update nextcloud/ocp dependency text#6445
• [stable29] fix(codeblock): Add border radius text#6457
• [stable29] fix(tasklist): Correct indention text#6458
• [stable29] perf: optimize WorkspaceService::getFile text#6461
• [stable29] fix(sync): Disable browser broadcast text#6482
• [stable29] fix: Apply checks on shares in the middleware text#6488
• [stable29] Check link protocol text#6492
• [stable29] fix(sync): handle 502 (Bad Gateway) gracefully text#6495
• [stable29] Fix npm audit twofactor_totp#1554
• chore(deps): update typescript (stable29) viewer#2473
• chore(deps): update dependency vite to ^5.4.5 (stable29) viewer#2474
• fix(deps): update dependency webdav to ^5.7.1 (stable29) viewer#2478
• [stable29] chore(deps): cypress workflow update viewer#2499
• [stable29] Update cypress snapshots viewer#2501
• chore(deps): update nextcloud (stable29) viewer#2529
• [stable29] fix: Only remove openfile from route when closing the viewer viewer#2539

Pending PRs:

• @backportbot
  • [stable29] ci: fail psalm when baseline update required #48471

[Altahrim]

Required PRs

• *none*

Nice to have

• [stable29] fix(Auth): ignore missing token when trying to set password-unconfirm… #48491 (already in 28)