[stable34] 34.0.2 RC1

[nextcloud-bot]

Nextcloud 34.0.2

server

• chore(deps): bump @vueuse/integrations from 14.1.0 to 14.3.0 #60428
• [stable34] chore(deps): bump @vueuse/core from 14.1.0 to 14.3.0 #60679
• [stable34] chore(deps): Bump p-queue from 9.2.0 to 9.3.0 #60681
• [stable34] chore(deps): Bump focus-trap from 8.0.1 to 8.2.1 in /build/frontend-legacy #60684
• [stable34] chore(deps): Bump @simplewebauthn/browser from 13.2.2 to 13.3.0 in /build/frontend-legacy #60686
• [stable34] chore(deps): Bump p-queue from 9.1.0 to 9.3.0 in /build/frontend-legacy #60687
• [stable34] fix(cypress): disable unsupported-browser redirect in test container #60807
• [stable34] feat(UserManager): Add getters for avatar URLs #60811
• [stable34] chore(deps): Bump vue2-teleport from 1.1.4 to 1.2.2 in /build/frontend-legacy #61036
• [stable34] fix(core): public share download icon color and theme filter scope #61211
• [stable34] fix: use card interface instead of object #61252
• [stable34] chore(deps-dev): Bump the vitest group across 2 directories with 2 updates #61454
• [stable34] chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 #61455
• [stable34] chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 #61456
• [stable34] chore(deps-dev): Bump nextcloud/rector from 0.5.1 to 0.5.2 in /vendor-bin/rector #61457
• chore(deps-dev): bump cypress-vite from 1.10.0 to 1.10.2 #61458
• [stable34] chore(deps-dev): Bump rector/rector from 2.4.5 to 2.4.6 in /vendor-bin/rector #61459
• [stable34] chore(deps-dev): Bump stylelint from 17.12.0 to 17.13.0 #61460
• [stable34] chore(deps-dev): Bump cypress-split from 1.24.31 to 1.25.0 #61461
• [stable34] chore(deps): Bump @nextcloud/vue from 9.8.1 to 9.8.2 #61462
• [stable34] chore(deps): Bump vue from 3.5.35 to 3.5.38 #61463
• [stable34] docs(config): clarify metadata and conversion file size limits #61482
• [stable34] fix: properly mark CleanupShareTarget as expensive #61498
• [stable34] fix: update cached mounts when moving share in repair step #61500
• [stable34] fix(files_trashbin): create folder if missing when expiring trash #61523
• [stable34] fix(files_sharing): remove filename's leading slash on unshare toast #61528
• [stable34] fix: stop calling DI container in SharedStorage #61529
• [stable34] fix(preview): First cleanup from filecache and then from preview table #61531
• [stable34] perf(View): don't sort twice the same array #61535
• [stable34] perf: block more properties from using the custom properties backend #61540
• [stable34] fix(settings): correct heading order in account management sidebar #61546
• [stable34] fix: Make the IProvideUserSecretBackend usable #61550
• [stable34] fix: track time spent in recursive markOrRun calls #61553
• [stable34] perf(log): normalize log data only when logging #61557
• [stable34] perf: avoid DIing IRootFolder at every shared storage init #61558
• [stable34] fix(Collaborators): Fix matching emails to remote users if no remote results are present #61571
• [stable34] fix(appstore): only show appstore entries if actual from appstore #61592
• [stable34] fix(dav): Handle GenericFileException when reading default contact file #61596
• [stable34] fix(a11y): label account QR code button #61601
• [stable34] fix(files): Open the sidebar for the current folder, not a stale child #61606
• [stable34] fix(maintenance): allow AppAPI to serve requests during maintenance mode #61613
• [stable34] fix(user_status): stabilise the user_status #61617
• [stable34] fix: Add plural form for translations #61626
• [stable34] fix(core): use proper API routes for recommended apps #61633
• [stable34] fix(dav): Load ProfilerPlugin only when profiler is enabled #61645
• [stable34] fix(config): Decrypt sensitive appconfigs when requested #61662
• [stable34] fix(updatenotification): use correct appstore route #61664
• [stable34] fix(LoginForm): improve login throttle warning wording #61671
• [stable34] fix(files_sharing): reject custom share tokens longer than the db column #61676
• [stable34] fix(files_external): ignore deprecated backends #61691
• [stable34] build(deps): Composer audit updates #61697
• [stable34] perf: Only sort wrappers when adding them #61700
• [stable34] fix(files_external): properly apply default mount options #61702
• [stable34] fix(settings): in absence form avoid shifting dates to browsers timezone #61712
• [stable34] fix(l10n): Fix plural #61734
• [stable34] fix(settings): display birthday correctly regardless of browsers timezone #61737
• [stable34] fix(dav): Always show example content section  #61742
• [stable34] fix(core): resolve some edge cases with recommended apps #61747
• [stable34] fix(db): align preview migration annotations with created tables #61749
• [stable34] chore(deps-dev): bump the vite group across 2 directories with 1 update #61756
• [stable34] chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 #61768
• chore(deps-dev): bump cypress from 15.17.0 to 15.18.0 #61769
• [stable34] chore(deps-dev): bump concurrently from 9.2.1 to 9.2.3 #61770
• chore(deps-dev): bump sass from 1.100.0 to 1.101.0 #61771
• [stable34] chore(deps-dev): bump stylelint from 17.13.0 to 17.14.0 #61772
• [stable34] chore(deps): bump vue from 3.5.38 to 3.5.39 #61774
• chore(deps-dev): bump eslint-plugin-cypress from 6.4.1 to 6.4.2 #61775
• [stable34] chore(deps): bump dompurify from 3.4.8 to 3.4.11 in /build/frontend-legacy #61776
• [stable34] chore(deps): bump query-string from 9.3.1 to 9.4.1 in /build/frontend-legacy #61777
• [stable34] chore(deps): bump libphonenumber-js from 1.13.4 to 1.13.7 in /build/frontend-legacy #61778
• [stable34] chore(deps-dev): bump sass from 1.100.0 to 1.101.0 in /build/frontend-legacy #61781
• [stable34] fix(files_external): prevent dropdown entries from shrinking #61797
• [stable34] chore(deps): Bump form-data from 4.0.5 to 4.0.6 #61802
• [stable34] chore: run npm audit #61804
• [stable34] chore(deps): Bump axios from 1.15.0 to 1.16.1 in /build/frontend-legacy #61805
• [stable34] fix(Sharing): Don't break cache entry by setting path to null #61842
• [stable34] perf: Don't fetch full group object in AuthorizedGroupMapper #61852
• [stable34] Fix the ScanFiles job to not trigger scans of root directory for every single user  #61862
• [stable34] feat(OCP): Add Interaction API #61867
• [stable34] test: fix HEIC tests #61873
• [stable34] fix(DeclarativeManager): Fix admin delegation #61876
• [stable34] fix: adjust file picker for background image to allow folder navigation #61878
• [stable34] fix(bruteforce): Don't throttle requests with failing CSRF #61886
• [stable34] fix(core): Throttle lost-password reset form when link is disabled #61888
• [stable34] fix(CalDav): Force trashbin deletion when re-creating item with same UID #61892
• [stable34] fix: hide scroll bar in unified search when not needed #61909
• [stable34] fix(appstore): use proper app icon or adjust color if needed #61918
• [stable34] fix(files): distinguish between files and folders for validation messages #61919
• [stable34] feat: Disable callable serialization in sabre/xml #61923
• [stable34] fix(files): proper accessible row name and title for overflow #61930
• [stable34] Show group display name when the group object is not loaded yet #61932
• [stable34] feat: Fetch groups in batch in getUserGroups #61936
• [stable34] fix(files_sharing): Fail on sharing file with create or delete permission before failing on increased permissions #61939
• [stable34] fix: webhook payload for system tag events #61943
• [stable34] chore(jobs): write proper documentation for job:history #61945
• [stable34] refactor(Interaction): Allow multiple resources and receivers in a single event #61956
• [stable34] fix(systemtags): remove duplicates, cleanup existing tags #61965
• [stable34] fix: Catch expected NotFoundException #61968
• [stable34] feat(login): clean remember me tokens #61972
• [stable34] fix(files_external): S3 folder mtime updated on every read-only access #61977
• [stable34] chore(deps-dev): bump the vitest group across 2 directories with 2 updates #61992
• [stable34] chore(deps): bump p-queue from 9.3.0 to 9.3.1 #61993
• [stable34] chore(deps-dev): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/behat #61994
• [stable34] chore(deps-dev): bump @nextcloud/e2e-test-server from 0.4.0 to 0.5.0 #61995
• [stable34] chore(deps): bump phpunit/phpunit from 11.5.55 to 11.5.56 in /vendor-bin/phpunit #61996
• [stable34] chore(deps-dev): bump webpack from 5.107.2 to 5.108.4 in /build/frontend-legacy #61997
• [stable34] chore(deps): bump libphonenumber-js from 1.13.7 to 1.13.8 in /build/frontend-legacy #61998
• [stable34] [master] fix(security): Update code signing revocation list #62040
• [stable34] [master] fix(security): Update code signing revocation list #62046
• [stable34] perf(carddav): reduce disk usage of photocache #62054
• [stable34] perf(workflow): Implement result cache for IP checks #62057
• [stable34] ci: migrate from buildjet to cache action #62061
• [stable34] fix(dav): return RFC 4791 no-uid-conflict on duplicate calendar UID #62069
• [stable34] feat: KV cache based on predis #62070
• [stable34] fix(caldav): url-encode owner/user in activity event links #62075
• [stable34] fix(AppSearch): Always sort apps first for search #62085
• [stable34] fix(UserPlugin): Don't search for displayname when restricted #62096
• [stable34] fix(dav): Do not respond version/trashbin download requests with 404 due to ChunkingV2Plugin #62103
• [stable34] fix(UserPlugin): Don't return mail matches on user id search #62109
• [stable34] fix(UserPlugin): Don't return disabled users on user ID and mail match #62119
• [stable34] fix(FilesWidget): allow to resize widget vertically #62125
• [stable34] rate limiting for creating federated shares #62130
• [stable34] feat(share): add public share-review API under OCP\Share\ShareReview #62132
• [stable34] fix: Disable imagick preview providers #62147
• [stable34] fix(files_sharing): Allow access to shares by disabled users if hide_disabled_user_shares is enabled #62150
• [stable34] fix(ViewOnlyPlugin): Allow COPY and MOVE operations within the same storage #62160
• [stable34] fix(preview): properly handle encoded content #62173
• [stable34] fix(cache): make clear() redis cluster compatible #62177
• [stable34] perf: Don't fetch all the trash items when deleting a single item  #62180
• [stable34] fix(s3): trim multiple spaces to single space in original path header #62183
• [stable34] [master] fix(security): Update code signing revocation list #62184
• [stable34] feat(files_sharing): schedule external share scan job when accepted #62197
• [stable34] fix: don't return cache entries with null paths #62199
• [stable34] chore(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /build/frontend-legacy #62210
• [stable34] fix(dav): release part-file lock when an upload fails #62216
• [stable34] fix(files_sharing): preserve unmasked permissions as scan_permissions #62218
• [stable34] perf(dav): Stream PROPFIND output #62224
• [stable34] fix: don't die if we can't encode file metadata on upload #62226

3rdparty

• [stable34] build(deps): Composer audit updates 3rdparty#2498
• [stable34] feat: Disable callable serialization in sabre/xml 3rdparty#2513
• [stable34] feat: add predis as a dependency for Valkey cluster support 3rdparty#2518

activity

• [stable34] Fix npm audit activity#2620
• [stable34] feat: make amount of items sent on email configurable via occ activity#2708
• fix(deps): update dependency vite to v7.3.5 (stable34) activity#2734
• chore(deps): update dependency @nextcloud/stylelint-config to ^3.2.2 (stable34) activity#2735
• chore(deps): update dependency @vue/test-utils to ^2.4.11 (stable34) activity#2737
• chore(deps): update dependency bamarni/composer-bin-plugin to ^1.9.1 (stable34) activity#2738
• chore(deps): update dependency dockerode to ^5.0.1 (stable34) activity#2739
• chore(deps): update dependency eslint-plugin-cypress to ^6.4.2 (stable34) activity#2740
• chore(deps): update dependency phpunit/phpunit to ^11.5.56 (stable34) activity#2741
• chore(deps): update dependency vimeo/psalm to ^6.16.1 (stable34) activity#2742
• chore(deps): update dependency wait-on to ^9.0.10 (stable34) activity#2743
• chore(deps): update github actions (stable34) activity#2744
• chore(deps): update vitest monorepo to ^4.1.9 (stable34) activity#2745
• fix(deps): update dependency @nextcloud/vue to ^9.8.2 (stable34) activity#2746
• fix(deps): update dependency @vueuse/core to ^14.3.0 (stable34) activity#2747
• chore(deps): update dependency vite to ^7.3.6 (stable34) activity#2776
• [stable34] fix(listener): Catch when trying to set up a settings that doesn't exists activity#2793

app_api

• [stable34] fix(maintenance-mode): keep only HaRP and ExApp survival routes available in maintenance mode app_api#903
• [stable34] chore(deps): Bump dompurify from 3.4.0 to 3.4.11 app_api#912
• [stable34] chore(deps-dev): Bump js-yaml from 4.1.1 to 4.2.0 app_api#913
• [stable34] feat: add release relay gh workflow app_api#924
• [stable34] chore(deps): Bump undici from 7.24.1 to 7.28.0 app_api#925
• [stable34] chore(deps-dev): Bump launch-editor from 2.12.0 to 2.14.1 app_api#926
• ci: Add terser-webpack-plugin to the dev dependency definition app_api#930
• [stable34] Fix npm audit app_api#933

bruteforcesettings

• [stable34] Fix npm audit bruteforcesettings#1115
• Chore(deps): Bump vue from 3.5.34 to 3.5.35 bruteforcesettings#1151
• [stable34] Update nextcloud/ocp dependency bruteforcesettings#1158
• [stable34] ci(actions): Update workflow templates from organization template repository bruteforcesettings#1160
• Chore(deps-dev): Bump vitest from 4.1.8 to 4.1.9 bruteforcesettings#1164
• Chore(deps-dev): Bump @vitest/coverage-v8 from 4.1.8 to 4.1.9 bruteforcesettings#1165
• Chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 bruteforcesettings#1178
• [stable34] Update nextcloud/ocp dependency bruteforcesettings#1182

circles

• [stable34] Update nextcloud/ocp dependency circles#2490
• [stable34] ci(actions): Update workflow templates from organization template repository circles#2501
• [stable34] fix(permission): get permissions for user from inherited when not direct member circles#2577
• [stable34] chore(deps): bump fast-xml-parser and webdav circles#2582
• chore(deps-dev): bump vue-tsc from 3.1.1 to 3.1.8 circles#2584
• chore(deps): bump @nextcloud/password-confirmation from 6.0.2 to 6.0.3 circles#2587
• chore(deps-dev): bump eslint from 9.39.1 to 9.39.4 circles#2590
• chore(deps-dev): bump vite from 7.1.11 to 7.1.12 circles#2594
• [stable34] chore(deps): bump dompurify from 3.3.1 to 3.4.11 circles#2604
• [stable34] chore(deps): bump qs from 6.14.2 to 6.15.2 circles#2605
• [stable34] chore(deps): bump picomatch from 2.3.1 to 2.3.2 circles#2607
• [stable34] chore(deps): bump bn.js circles#2608
• [stable34] chore(deps): bump rollup from 4.46.3 to 4.62.2 circles#2609
• [stable34] fix(workflow): switch from node.yml to npm-build.yml circles#2610
• [stable34] ci(actions): Update workflow templates from organization template repository circles#2626
• [stable34] fix: refresh user mounts when removed from a group or circle that has associated team folders circles#2634

files_downloadlimit

• [stable34] chore(CI): Adjust testing matrix for Nextcloud 34 on stable34 files_downloadlimit#805
• chore(deps-dev): Bump @vue/tsconfig from 0.8.1 to 0.9.1 files_downloadlimit#809
• chore(deps): Bump @nextcloud/sharing from 0.3.0 to 0.4.0 files_downloadlimit#819
• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.5 to 9.0.0 files_downloadlimit#822
• chore(deps-dev): Bump @nextcloud/browserslist-config from 3.1.1 to 3.1.2 files_downloadlimit#826
• chore(deps): Bump vue from 3.5.22 to 3.5.35 files_downloadlimit#840
• [stable34] chore: update Node version and align with stable34 files_downloadlimit#849
• chore(deps): Bump vue from 3.5.35 to 3.5.38 files_downloadlimit#857
• [stable34] Fix npm audit files_downloadlimit#864
• chore(deps): Bump vue from 3.5.38 to 3.5.39 files_downloadlimit#869

files_lock

• ci(litmus): change server-version to stable34 files_lock#1126
• [stable34] Fix npm audit files_lock#1129
• ci(tools): Update dev dependencies files_lock#1132
• chore(deps): Bump @rollup/rollup-linux-x64-gnu from 4.62.0 to 4.62.2 files_lock#1136
• chore(deps): Bump vue from 3.5.35 to 3.5.38 files_lock#1138
• [stable34] chore(deps): Bump form-data from 4.0.5 to 4.0.6 files_lock#1148
• [stable34] chore(deps): Bump dompurify from 3.4.10 to 3.4.11 files_lock#1149
• chore(deps-dev): Bump prettier from 3.8.4 to 3.8.5 files_lock#1153
• chore(deps): Bump vue from 3.5.38 to 3.5.39 files_lock#1157
• chore(deps-dev): Bump @playwright/test from 1.61.0 to 1.61.1 files_lock#1164
• [stable34] Update nextcloud/ocp dependency files_lock#1165
• [stable34] enh: allow file owner to unlock TYPE_TOKEN locks files_lock#1169
• chore(release): bump version to 34.0.1 files_lock#1178

files_pdfviewer

• chore(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 files_pdfviewer#1463
• [stable34] chore(deps): Bump dompurify from 3.3.3 to 3.4.11 files_pdfviewer#1465
• [stable34] chore(deps): Bump form-data from 4.0.5 to 4.0.6 files_pdfviewer#1468
• chore(deps-dev): Bump adm-zip from 0.5.17 to 0.5.18 files_pdfviewer#1471

firstrunwizard

• [stable34] Update nextcloud/ocp dependency firstrunwizard#2103
• [stable34] Fix npm audit firstrunwizard#2104
• chore(deps): Bump @nextcloud/vue from 9.8.0 to 9.8.2 firstrunwizard#2115
• chore(deps-dev): Bump vite from 7.3.3 to 7.3.6 firstrunwizard#2117
• chore(deps): Bump vue from 3.5.28 to 3.5.39 firstrunwizard#2137
• [stable34] chore(deps-dev): Bump js-yaml from 4.1.1 to 4.3.0 firstrunwizard#2139
• [stable34] chore(deps): Bump dompurify from 3.4.2 to 3.4.11 firstrunwizard#2140
• [stable34] chore(deps): Bump form-data from 4.0.5 to 4.0.6 firstrunwizard#2141

logreader

• [stable34] Fix npm audit logreader#2075
• chore: bump PHP version to 8.2 logreader#2081
• [stable34] Update nextcloud/ocp dependency logreader#2083
• [stable34] Fix npm audit logreader#2093
• chore(deps-dev): bump browserslist from 4.28.2 to 4.28.4 logreader#2096
• chore(deps-dev): bump @vue/test-utils from 2.4.6 to 2.4.11 logreader#2097
• chore(deps): bump vue from 3.5.28 to 3.5.39 logreader#2100
• chore(deps-dev): bump vitest from 4.1.5 to 4.1.9 logreader#2101
• chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 logreader#2110
• [stable34] Update nextcloud/ocp dependency logreader#2112

nextcloud_announcements

• [stable34] Update nextcloud/ocp dependency nextcloud_announcements#653
• [stable34] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#659
• [stable34] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#668
• [stable34] Update nextcloud/ocp dependency nextcloud_announcements#669
• [stable34] ci(actions): Update workflow templates from organization template repository nextcloud_announcements#673

notifications

• [stable34] ci(actions): Update workflow templates from organization template repository notifications#3128
• [stable34] Fix npm audit notifications#3133
• [stable34] test: Push notification payload notifications#3145
• [stable34] Update nextcloud/ocp dependency notifications#3151
• [stable34] build(deps): Bump vue from 3.5.35 to 3.5.38 notifications#3165
• [stable34] ci(actions): Update workflow templates from organization template repository notifications#3168
• [stable34] Fix npm audit notifications#3171
• [stable34] build(deps): Bump vue from 3.5.38 to 3.5.39 notifications#3178
• [stable34] fix(Makefile): Add missing composer setup for dev-setups and building… notifications#3181
• [stable34] build(deps): Apply composer audit fixes notifications#3182
• [stable34] Update nextcloud/ocp dependency notifications#3183
• [stable34] build(deps-dev): Bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 notifications#3191
• [stable34] Update nextcloud/ocp dependency notifications#3192
• [stable34] ci(actions): Update workflow templates from organization template repository notifications#3195
• [stable34] Update nextcloud/ocp dependency notifications#3198
• [stable34] Update nextcloud/ocp dependency notifications#3203

office

• [stable34] Fix npm audit office#42

password_policy

• [stable34] Chore(deps): Bump @nextcloud/vue from 8.29.1 to 8.29.2 password_policy#939
• [stable34] Chore(deps): Bump @nextcloud/capabilities from 1.2.0 to 1.2.1 password_policy#943
• [stable34] Chore(deps-dev): Bump sass from 1.97.1 to 1.97.3 password_policy#946
• [stable34] Fix npm audit password_policy#956
• [stable34] Chore(deps-dev): Bump vite from 7.3.2 to 7.3.5 password_policy#959
• [stable34] feat: Add login output when password policy fails password_policy#966
• [stable34] Chore(deps): Bump dompurify from 3.4.0 to 3.4.11 password_policy#969
• [stable34] Chore(deps): Bump form-data from 4.0.5 to 4.0.6 password_policy#970
• [stable34] Chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 password_policy#971
• [stable34] Chore(deps-dev): Bump qs from 6.14.2 to 6.15.2 password_policy#973
• [stable34] Fix npm audit password_policy#975

photos

• [stable34] Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.1.0 to 3.1.1 photos#3521
• [stable34] Chore(deps-dev): Bump wait-on from 8.0.3 to 8.0.5 photos#3522
• Chore(deps): Bump @nextcloud/sharing from 0.2.4 to 0.2.5 photos#3527
• [stable34] Fix: faces actions and add recognize e2e tests photos#3577
• [stable34] build(deps): Unblock dependency updates by allowing to update vite again photos#3587
• [stable34] Fix npm audit photos#3589
• [stable34] ci(actions): Update workflow templates from organization template repository photos#3600
• [stable34] Fix npm audit photos#3607
• [stable34] Chore(deps): Bump axios from 1.16.0 to 1.16.1 photos#3612
• [stable34] Chore(deps-dev): Bump autoprefixer from 10.4.21 to 10.4.27 photos#3613
• [stable34] Chore(deps-dev): Bump cypress-split from 1.24.14 to 1.24.31 photos#3614
• [stable34] Chore(deps-dev): Bump eslint-plugin-cypress from 5.1.0 to 5.1.1 photos#3615
• [stable34] Chore(deps-dev): Bump vue-tsc from 2.2.10 to 2.2.12 photos#3616
• [stable34] ci(actions): Update workflow templates from organization template repository photos#3627
• [stable34] Chore(deps-dev): Bump bamarni/composer-bin-plugin from 1.8.2 to 1.8.3 photos#3633
• [stable34] Chore(deps): Bump woltlab/webp-exif from 0.1.2 to 0.1.4 photos#3634

privacy

• [stable34] Chore(deps-dev): Bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2 privacy#1356
• [stable34] ci(actions): Update workflow templates from organization template repository privacy#1358
• [stable34] Fix npm audit privacy#1362
• Chore(deps): Bump @nextcloud/dialogs from 7.3.0 to 7.4.0 privacy#1370
• Chore(deps): Bump vue from 3.5.34 to 3.5.38 privacy#1373
• [stable34] chore: Add update-stable-titles workflow privacy#1383
• [stable34] ci(actions): Update workflow templates from organization template repository privacy#1392
• [stable34] Fix npm audit privacy#1397

recommendations

• [stable34] Fix npm audit recommendations#1062
• fix(deps): bump @nextcloud/vue from 8.39.0 to ^8.39.0 (stable34) recommendations#1107
• [stable34] ci(actions): Update workflow templates from organization template repository recommendations#1129

related_resources

• [stable34] chore(deps): bump dompurify from 3.2.6 to 3.4.11 related_resources#1028

serverinfo

• [stable34] ci(actions): Update workflow templates from organization template repository serverinfo#1028
• [stable34] Update nextcloud/ocp dependency serverinfo#1035
• [stable34] Use a parameterized translation for CPU thread count serverinfo#1039
• [stable34] Update nextcloud/ocp dependency serverinfo#1046

survey_client

• [stable34] Update nextcloud/ocp dependency survey_client#443

suspicious_login

• [stable34] fix(autoload): load rubix free functions despite Composer files dedupe suspicious_login#1129

text

• [stable34] Fix npm audit text#8739
• [stable34] Update nextcloud/ocp dependency text#8770
• [stable34] fix(autofocus): persist cursor positions in localStorage text#8778
• [stable34] fix(SessionService): sanitize displayName to utf8 encoding text#8780
• [stable34] fix(editor): preserve leading newlines in plain text editor text#8788
• [stable34] fix(ActionInsertLink): allow to get title from link picker text#8791
• [stable34] fix(markdown): preserve horizontal rule markup text#8792
• [stable34] preserve Markdown reference links text#8811
• [stable34] Fix npm audit text#8817
• chore(deps): update dependency cypress-vite to ^1.10.2 (stable34) text#8830
• chore(deps): update dependency vite to ^7.3.6 (stable34) text#8831
• chore(deps): update vitest monorepo to ^4.1.9 (stable34) text#8832
• fix(deps): update dependency prosemirror-markdown to ^1.13.5 (stable34) text#8833
• fix(deps): update dependency uuid to ^14.0.1 (stable34) text#8834
• [stable34] fix(ImageView): use a element for clickable items text#8843
• [stable34] ci(playwright): fix installing pinned NPM version text#8845
• chore(deps): update vitest monorepo to ^4.1.10 (stable34) text#8849
• [stable34] Update nextcloud/ocp dependency text#8853
• [stable34] fix(links): scroll to anchor links directly text#8861
• [stable34] fix(FloatingButtons): in headings, leave space for the anchor icon text#8863
• [stable34] chore(playwright): use list reporter when run locally text#8865
• [stable34] fix(BulletList): remove preserveWhitespace: true parseHTML override text#8866
• [stable34] chore(deps): bump @nextcloud/vue to 8.40.0 text#8872
• [stable34] fix(Table): allow changing list indention inside tables text#8878
• [stable34] fix(share): detect if documentId is outside of share early text#8880

twofactor_nextcloud_notification

• [stable34] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1383
• [stable34] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1387
• [stable34] Fix npm audit twofactor_nextcloud_notification#1392
• [stable34] build(deps): Bump vue from 3.5.35 to 3.5.38 twofactor_nextcloud_notification#1397
• [stable34] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1402
• [stable34] Fix npm audit twofactor_nextcloud_notification#1409
• [stable34] build(deps): Bump vue from 3.5.38 to 3.5.39 twofactor_nextcloud_notification#1411
• [stable34] Update nextcloud/ocp dependency twofactor_nextcloud_notification#1414
• [stable34] ci(actions): Update workflow templates from organization template repository twofactor_nextcloud_notification#1415

twofactor_totp

• [stable34] Fix npm audit twofactor_totp#1777
• [stable34] ci: update codecov action to v7 twofactor_totp#1789
• [stable34] ci: drop unused app publish workflow twofactor_totp#1838

viewer

• [stable34] fix(composer): Remove trailing comma breaking composer.json parsing viewer#3228
• fix(deps): update dependency @fontsource/roboto to ^5.2.10 (stable34) viewer#3243
• [stable34] chore(deps): update dependency dompurify to v3.4.11 [security] viewer#3268

Pending PRs:

• @Abijeet
  • Add feature to view admin_audit log files logreader#476 ⚠
• @ArtificialOwl
  • enable multiple table/fields comparaison when using queryHelper circles#1089 ⚠
  • cleaning and fixing  circles#1090 ⚠
  • shorten id on occ circles#1148 ⚠
  • emulate entity on Admin OCS API circles#1214 🔁
  • runAsAdmin() circles#1217 ⚠
  • update single display-name circles#1394 ⚠
  • share with group members only circles#891 ⚠
  • +runAsSuperSession circles#980
• @CarlSchwan
  • [stable34] perf: Replace more calls from getUserGroups to getUserGroupIds #62223 ✅
• @solracsf
  • [stable34] perf(files): compute move/rename activity settings once activity#2794 ✅
  • [stable34] fix: do not fail moves when the old location cannot be resolved activity#2798
• @backportbot
  • [stable34] chore(deps): Bump postcss and vue-loader files_pdfviewer#1464
  • [stable34] chore(deps-dev): Bump axios from 1.13.6 to 1.17.0 files_pdfviewer#1466 ⚠
• @copilot-swe-agent
  • Add Playwright e2e tests for PDF viewer files_pdfviewer#1395 🔁
  • feat(e2e): add Playwright e2e tests for first-run wizard and settings page firstrunwizard#2017 ⚠
• @danxuliu
  • Do not load PDF viewer if public share has a download limit files_pdfviewer#654 ⚠
• @david-brauer
  • Add option to show original image in viewer instead of showing a preview viewer#3118
• @fgsl
  • Enable audit by configuration #163 circles#226 ⚠
  • New circles are treated as an "all user" activity - but no option for this being on/off #204 circles#229 ⚠
• @karlitschek
  • feat(admin): add database panel with size on disk and retention sugge… activity#2549 ⚠
  • fix(security): escape link URLs in activity email templates activity#2551
• @lobermann
  • Fix viewing of file versions files_pdfviewer#1270
• @onny
  • Send notification mail for circle invitation circles#1349 🔁
• @rotdrop
  • Use $group->getDisplayName() instead of just the GID for the display … circles#1297 ✅
• @skjnldsv
  • fix: support multiple handlers viewer#2939 ⚠
• @susnux
  • feat: Allow to show logs of all logging types by proxying messages logreader#1041 ⚠
• @tortuetorche
  • Better application registering and events dispatching circles#392 ⚠
  • You can now add members to your own personal circles circles#395 ⚠
  • Add allow_adding_any_group_members option circles#398 ⚠
  • Add allow_listed_circles option circles#399 ⚠
  • Add allow_files_filtered_by_circles option circles#400 ⚠
  • Add group_backend option to mirroring the circle as a group circles#401 ⚠
• (generated)
  • [stable34] chore(deps-dev): bump @nextcloud/eslint-config from 9.0.0-rc.9 to 9.0.0 #61773 ✅
  • [stable34] 34.0.2 RC1 #62120
  • [stable34] Update nextcloud/ocp dependency activity#2618 ✅
  • chore(deps): update dependency @nextcloud/vite-config to ^2.5.4 (stable34) activity#2736 ✅
  • fix(deps): update dependency vue to ^3.5.39 (stable34) activity#2748 ✅

---

• ⚠: conflicts detected
• ✅: approved
• 🔁: changes requested

[AndyScherzinger]

must-have

• [stable34] feat(share): add public share-review API under OCP\Share\ShareReview #62132
• [stable34] docs(events): Add ShareReviewAccessCheckEvent documentation#15309
• [stable34] fix(autoload): load rubix free functions despite Composer files dedupe suspicious_login#1129
• [stable34] fix(preview): properly handle encoded content #62173
• [stable34] feat: KV cache based on predis #62070
• [stable34] fix: don't return cache entries with null paths #62199 (already merged to 32/33, originally targeting 34 but merged after the stable34 branch-off, hence landed in 35!)

nice-to-have

• [stable34] fix(core): resolve some edge cases with recommended apps #61747