Ctrl K
ComunidadGuías…

CHANGELOG.md

Rama master · réplica de lectura del repositorio original.

Archivo original ↗Preguntar a KiBot
# Table of Contents

* [Changelog for unreleased](#changelog-for-unreleased-unreleased)
* [Changelog for 8.0.0](#changelog-for-800-2026-02-13)
* [Changelog for 7.3.1](#changelog-for-731-2025-11-24)
* [Changelog for 7.3.0](#changelog-for-730-2025-10-13)
* [Changelog for 7.2.0](#changelog-for-720-2025-07-14)
* [Changelog for 7.1.3](#changelog-for-713-2025-05-27)
* [Changelog for 7.1.2](#changelog-for-712-2025-03-28)
* [Changelog for 7.1.1](#changelog-for-711-2025-03-14)
* [Changelog for 7.1.0](#changelog-for-710-2025-03-06)
* [Changelog for 7.0.0](#changelog-for-700-2024-12-17)
* [Changelog for 5.0.9](#changelog-for-509-2024-11-14)
* [Changelog for 6.6.1](#changelog-for-661-2024-10-24)
* [Changelog for 6.6.0](#changelog-for-660-2024-10-21)
* [Changelog for 6.5.0](#changelog-for-650-2024-10-01)
* [Changelog for 5.0.8](#changelog-for-508-2024-09-30)
* [Changelog for 6.4.0](#changelog-for-640-2024-09-12)
* [Changelog for 5.0.7](#changelog-for-507-2024-09-04)
* [Changelog for 6.3.0](#changelog-for-630-2024-08-20)
* [Changelog for 6.2.0](#changelog-for-620-2024-07-30)
* [Changelog for 5.0.6](#changelog-for-506-2024-07-17)
* [Changelog for 6.1.0](#changelog-for-610-2024-07-08)
* [Changelog for 6.0.0](#changelog-for-600-2024-06-19)
* [Changelog for 5.0.5](#changelog-for-505-2024-05-22)
* [Changelog for 5.0.4](#changelog-for-504-2024-05-13)
* [Changelog for 5.0.3](#changelog-for-503-2024-05-02)
* [Changelog for 5.0.2](#changelog-for-502-2024-04-17)
* [Changelog for 5.0.1](#changelog-for-501-2024-04-10)
* [Changelog for 4.0.7](#changelog-for-407-2024-03-27)
* [Changelog for 5.0.0](#changelog-for-500-2024-03-18)
* [Changelog for 4.0.6](#changelog-for-406-2024-02-07)
* [Changelog for 4.0.5](#changelog-for-405-2023-12-21)
* [Changelog for 4.0.4](#changelog-for-404-2023-12-07)
* [Changelog for 4.0.3](#changelog-for-403-2023-11-24)
* [Changelog for 4.0.2](#changelog-for-402-2023-09-28)
* [Changelog for 4.0.1](#changelog-for-401-2023-09-01)
* [Changelog for 4.0.0](#changelog-for-400-2023-08-21)
* [Changelog for 3.0.0](#changelog-for-300-2023-06-06)
* [Changelog for 2.0.0](#changelog-for-200-2022-11-30)
* [Changelog for 1.20.0](#changelog-for-1200-2022-04-13)
* [Changelog for 1.19.1](#changelog-for-1191-2022-03-29)
* [Changelog for 1.19.0](#changelog-for-1190-2022-03-29)
* [Changelog for 1.18.0](#changelog-for-1180-2022-03-03)
* [Changelog for 1.17.0](#changelog-for-1170-2022-02-16)
* [Changelog for 1.16.0](#changelog-for-1160-2021-12-10)
* [Changelog for 1.15.0](#changelog-for-1150-2021-11-19)
* [Changelog for 1.14.0](#changelog-for-1140-2021-10-27)
* [Changelog for 1.13.0](#changelog-for-1130-2021-10-13)
* [Changelog for 1.12.0](#changelog-for-1120-2021-09-14)
* [Changelog for 1.11.0](#changelog-for-1110-2021-08-24)
* [Changelog for 1.10.0](#changelog-for-1100-2021-08-06)
* [Changelog for 1.9.0](#changelog-for-190-2021-07-13)
* [Changelog for 1.8.0](#changelog-for-180-2021-06-28)
* [Changelog for 1.7.0](#changelog-for-170-2021-06-04)
* [Changelog for 1.6.0](#changelog-for-160-2021-05-12)
* [Changelog for 1.5.0](#changelog-for-150-2021-04-21)
* [Changelog for 1.4.0](#changelog-for-140-2021-03-30)
* [Changelog for 1.3.0](#changelog-for-130-2021-03-09)
* [Changelog for 1.2.0](#changelog-for-120-2021-02-17)
* [Changelog for 1.1.0](#changelog-for-110-2021-01-22)
* [Changelog for 1.0.0](#changelog-for-100-2020-12-17)

# Changelog for [unreleased] (UNRELEASED)

The following sections list the changes for unreleased.

[unreleased]: https://github.com/owncloud/ocis/compare/v8.0.0...master

## Summary

* Security - Add X-XSS-Protection header: [#12092](https://github.com/owncloud/ocis/pull/12092)
* Bugfix - Fix postprocessing resume command --restart flag: [#11692](https://github.com/owncloud/ocis/issues/11692)
* Bugfix - Don't use hardcoded groupOfNames in group creation: [#11776](https://github.com/owncloud/ocis/pull/11776)
* Bugfix - Translation for some email notifications: [#11979](https://github.com/owncloud/ocis/pull/11979)
* Bugfix - Rework monitoring in the ocis_full deployment example: [#11995](https://github.com/owncloud/ocis/pull/11995)
* Bugfix - Extract metadata from oversized files and fix ISO field: [#12000](https://github.com/owncloud/ocis/pull/12000)
* Bugfix - Make tag unassignment idempotent and handle publish failures: [#12001](https://github.com/owncloud/ocis/pull/12001)
* Bugfix - Expose the signature-auth attribute: [#12016](https://github.com/owncloud/ocis/pull/12016)
* Bugfix - Fix CSP blocking bundled KaTeX font: [#12070](https://github.com/owncloud/ocis/pull/12070)
* Bugfix - Fix case-sensitive photo metadata search: [#12078](https://github.com/owncloud/ocis/pull/12078)
* Bugfix - Prevent incomplete Tika extractions from permanently blocking re-index: [#12095](https://github.com/owncloud/ocis/pull/12095)
* Bugfix - Use O(1) document lookup instead of full search during reindexing: [#12096](https://github.com/owncloud/ocis/pull/12096)
* Bugfix - Fix IDP build on FreeBSD by disabling absolute Babel runtime: [#12114](https://github.com/owncloud/ocis/pull/12114)
* Bugfix - Don't index failed uploads: [#12121](https://github.com/owncloud/ocis/pull/12121)
* Enhancement - Add web extensions deployment configuration: [#11940](https://github.com/owncloud/ocis/pull/11940)
* Enhancement - Add AI-assisted development guide: [#11941](https://github.com/owncloud/ocis/pull/11941)
* Enhancement - Bump Web to 12.3.1: [#12015](https://github.com/owncloud/ocis/pull/12015)
* Enhancement - Add space ID to incoming shares: [#12024](https://github.com/owncloud/ocis/pull/12024)
* Enhancement - Add spaceid to REPORT: [#12028](https://github.com/owncloud/ocis/pull/12028)
* Enhancement - Bump Reva version: [#12051](https://github.com/owncloud/ocis/pull/12051)
* Enhancement - Add ResourceID field to UploadReady event: [#12060](https://github.com/owncloud/ocis/pull/12060)
* Enhancement - Support numeric range queries in KQL: [#12094](https://github.com/owncloud/ocis/pull/12094)
* Enhancement - Add blobstore CLI commands to storage-users service: [#12102](https://github.com/owncloud/ocis/pull/12102)
* Enhancement - Optimize search index after bulk reindexing: [#12104](https://github.com/owncloud/ocis/pull/12104)
* Enhancement - Update images in the ocis_full deployment example: [#12123](https://github.com/owncloud/ocis/pull/12123)

## Details

* Security - Add X-XSS-Protection header: [#12092](https://github.com/owncloud/ocis/pull/12092)

   Added the X-XSS-Protection header set to "0" to explicitly disable the
   deprecated browser XSS filter, which can introduce side-channel vulnerabilities.
   Modern XSS protection is provided through the Content-Security-Policy header.

   This change addresses security audit findings requiring explicit configuration
   of HTTP security headers per OWASP recommendations.

   https://github.com/owncloud/ocis/pull/12092

* Bugfix - Fix postprocessing resume command --restart flag: [#11692](https://github.com/owncloud/ocis/issues/11692)

   The `--restart` / `-r` flag for `ocis postprocessing resume` was broken due to a
   flag name mismatch (`retrigger` vs `restart`) and silently did nothing. This has
   been fixed and the command now prints a confirmation message on success.

   https://github.com/owncloud/ocis/issues/11692
   https://github.com/owncloud/ocis/pull/12002

* Bugfix - Don't use hardcoded groupOfNames in group creation: [#11776](https://github.com/owncloud/ocis/pull/11776)

   Formerly, when creating a group with a different objectClass, it will always use
   groupOfNames instead of the one provided in the config. Now, the server creates
   groups using the objectClass defined in the config.

   https://github.com/owncloud/ocis/pull/11776

* Bugfix - Translation for some email notifications: [#11979](https://github.com/owncloud/ocis/pull/11979)

   Some email notifications showed a wrong translated message that shouldn't
   appear. It's fixed so that message won't appear anymore.

   https://github.com/owncloud/ocis/pull/11979

* Bugfix - Rework monitoring in the ocis_full deployment example: [#11995](https://github.com/owncloud/ocis/pull/11995)

   The ocis_full deployment example has been basically reworked for how to provide
   monitoring.

   We now have: - a singe place for the definition of the tracing envvars for all
   ocis related container services - an easy and modular setup defining which
   sources should be inlcuded in monitoring via .env - comments describing the
   setup for the ease extending it - the monitoring definition in .env has been
   moved to the bottom and the compose_file assembly has monitoring as last entry
   now to guarantee nothing gets overwritten by accident

   https://github.com/owncloud/ocis/pull/11995

* Bugfix - Extract metadata from oversized files and fix ISO field: [#12000](https://github.com/owncloud/ocis/pull/12000)

   Two issues were found in the Tika content extractor:

   1. Files exceeding `SEARCH_CONTENT_EXTRACTION_SIZE_LIMIT` (default 20MB) were
   skipped entirely — no EXIF, no photo metadata, no image dimensions were
   extracted. This particularly affected Pixel Motion Photos (`.MP.jpg`) which
   embed an MP4 video making them 3-9MB. Since EXIF metadata lives in the JPEG
   header (first few KB), a truncated stream is sufficient. The extractor now wraps
   the download in `io.LimitReader` instead of skipping Tika, sending only the
   first N bytes for metadata extraction.

   2. The ISO speed field was read from `"Base ISO"`, a Canon-specific Tika field
   (sensor base sensitivity). Most cameras — Pixel, iPhone, Samsung — provide
   ISO via the standard `"exif:IsoSpeedRatings"` field. The extractor now checks
   `exif:IsoSpeedRatings` first and falls back to `Base ISO` for Canon
   compatibility.

   https://github.com/owncloud/ocis/pull/12000

* Bugfix - Make tag unassignment idempotent and handle publish failures: [#12001](https://github.com/owncloud/ocis/pull/12001)

   The DELETE tags endpoint now returns success when the requested tag is already
   absent from the file's metadata, instead of returning HTTP 400 with a misleading
   error message. The TagsRemoved event is always published so the search index
   stays in sync even when file metadata and the search index are out of sync. If
   event publishing fails, the metadata change is rolled back and HTTP 500 is
   returned to avoid leaving the system in an inconsistent state.

   https://github.com/owncloud/ocis/pull/12001

* Bugfix - Expose the signature-auth attribute: [#12016](https://github.com/owncloud/ocis/pull/12016)

   Expose the "oc:signature-auth" attribute for the subfolders in the public link
   propfinds. This is a necessary change to be able to support archive downloads in
   password protected public links.

   https://github.com/owncloud/ocis/pull/12016

* Bugfix - Fix CSP blocking bundled KaTeX font: [#12070](https://github.com/owncloud/ocis/pull/12070)

   The default Content Security Policy blocked the bundled KaTeX math font (used by
   the md-editor) because it is inlined as a `data:` URI in the Web UI CSS. Added
   `data:` to the `font-src` directive to resolve the console error on every page
   load. Users with custom CSP files (`PROXY_CSP_CONFIG_FILE_LOCATION`) will need
   to add `data:` to their `font-src` directive manually.

   https://github.com/owncloud/ocis/pull/12070

* Bugfix - Fix case-sensitive photo metadata search: [#12078](https://github.com/owncloud/ocis/pull/12078)

   Searching for photo metadata fields like camera make/model was case-sensitive,
   so searching for "google" would not match a camera make stored as "Google".
   Changed the photo string field analyzer from `keyword` to `lowercaseKeyword` so
   both indexed values and search terms are lowercased. Existing Bleve indexes need
   to be rebuilt after this change.

   https://github.com/owncloud/ocis/pull/12078

* Bugfix - Prevent incomplete Tika extractions from permanently blocking re-index: [#12095](https://github.com/owncloud/ocis/pull/12095)

   When Tika returned HTTP 200 but its child processes (OCR, ImageMagick) failed
   due to resource limits, the search index received metadata but no content. The
   document was written to Bleve with the correct mtime, and subsequent reindexes
   skipped it because the id+mtime check passed. This left files permanently stuck
   as "indexed" with no searchable content.

   Two fixes are applied:

   1. Validate Tika responses: if `MetaRecursive()` returns an empty metadata list,
   it is now treated as an extraction error so the document is not written to the
   index.

   2. Add an `Extracted` field to indexed resources. It is set to `true` only after
   successful extraction. The reindex skip check now requires `Extracted:true`, so
   incompletely indexed documents are automatically re-processed on the next
   reindex run.

   Note: existing search indexes will trigger a full re-extraction on the next
   reindex because documents written before this change lack the `Extracted` field.

   https://github.com/owncloud/ocis/issues/12093
   https://github.com/owncloud/ocis/pull/12095

* Bugfix - Use O(1) document lookup instead of full search during reindexing: [#12096](https://github.com/owncloud/ocis/pull/12096)

   The `IndexSpace` bulk reindexer was using a full KQL search query per file to
   check whether re-extraction was needed. On large indexes this query took
   600–950ms each, making a 61,000-file space take ~13.5 hours just to walk.
   Replaced the per-file `Search()` call with an O(1) `Lookup()` using Bleve's
   `DocIDQuery`, then comparing mtime and extraction status in memory. This reduces
   per-file check time from ~800ms to <1ms.

   https://github.com/owncloud/ocis/issues/12093
   https://github.com/owncloud/ocis/pull/12096

* Bugfix - Fix IDP build on FreeBSD by disabling absolute Babel runtime: [#12114](https://github.com/owncloud/ocis/pull/12114)

   The `babel-preset-react-app` preset defaults to `absoluteRuntime: true`, which
   hardcodes absolute paths to `@babel/runtime` helpers. These paths fail to
   resolve on non-Linux platforms like FreeBSD. Setting `absoluteRuntime: false`
   makes Babel resolve the runtime relative to the source file, which works across
   all platforms.

   https://github.com/owncloud/ocis/issues/12065
   https://github.com/owncloud/ocis/pull/12114

* Bugfix - Don't index failed uploads: [#12121](https://github.com/owncloud/ocis/pull/12121)

   The search service was indexing uploads even when they failed. This caused
   unnecessary index operations for incomplete or errored file transfers. The fix
   skips indexing when the UploadReady event indicates the upload has failed.

   https://github.com/owncloud/ocis/pull/12121

* Enhancement - Add web extensions deployment configuration: [#11940](https://github.com/owncloud/ocis/pull/11940)

   We added deployment configuration for the photo-addon and advanced-search web
   extensions to the ocis_full example. This includes Docker compose files for both
   extensions and CSP configuration for OpenStreetMap tiles required by the
   photo-addon map feature.

   https://github.com/owncloud/ocis/pull/11940

* Enhancement - Add AI-assisted development guide: [#11941](https://github.com/owncloud/ocis/pull/11941)

   A new guide has been added to the oCIS documentation demonstrating how to build
   web extensions using AI-assisted development with Claude AI. The guide covers
   MCP connector setup, a five-phase development workflow, debugging techniques,
   and contribution workflows.

   This approach has been validated through real contributions including PR #11912
   (photo metadata search backend) and web extensions PRs #305 and #306.

   https://github.com/owncloud/ocis/pull/11941

* Enhancement - Bump Web to 12.3.1: [#12015](https://github.com/owncloud/ocis/pull/12015)

   Bugfix [owncloud/web#13553](https://github.com/owncloud/web/pull/13553): Search
   Text Overalps With Search Icon In The Search Bar

   https://github.com/owncloud/ocis/pull/12015
   https://github.com/owncloud/web/releases/tag/v12.3.1

* Enhancement - Add space ID to incoming shares: [#12024](https://github.com/owncloud/ocis/pull/12024)

   Added the `spaceId` to the incoming shares. This is aligning the graph API with
   the WebDAV API where the clients can use `spaceid` property. This change allows
   clients to get the space ID directly instead of having to parse the resource ID.

   https://github.com/owncloud/ocis/pull/12024

* Enhancement - Add spaceid to REPORT: [#12028](https://github.com/owncloud/ocis/pull/12028)

   Added the `spaceid` to the REPORT responses. This is aligning the `REPORT`
   method with the `PROPFIND` method.

   https://github.com/owncloud/ocis/pull/12028

* Enhancement - Bump Reva version: [#12051](https://github.com/owncloud/ocis/pull/12051)

   Bumped reva version

   https://github.com/owncloud/ocis/pull/12051
   https://github.com/owncloud/ocis/pull/12087

* Enhancement - Add ResourceID field to UploadReady event: [#12060](https://github.com/owncloud/ocis/pull/12060)

   The UploadReady NATS event now includes a `ResourceID` field containing the
   file's actual resource identifier (with the correct node OpaqueId). Previously,
   only `FileRef` was available, whose `ResourceId.OpaqueId` is set to the space
   root ID (required for CS3 gateway path resolution). Consumers that need the
   file's unique identifier for Graph API or WebDAV operations can now use
   `ResourceID.OpaqueId` directly.

   https://github.com/owncloud/ocis/issues/12056
   https://github.com/owncloud/ocis/pull/12060
   https://github.com/owncloud/reva/pull/547
   https://github.com/owncloud/reva/pull/560

* Enhancement - Support numeric range queries in KQL: [#12094](https://github.com/owncloud/ocis/pull/12094)

   The KQL parser now supports numeric range queries using comparison operators
   (>=, <=, >, <) on numeric fields. Previously, range operators only worked with
   DateTime values, causing queries like `size>=1048576` or `photo.iso>=100` to
   silently fail by falling through to free-text search.

   Affected numeric fields: Size, photo.iso, photo.fNumber, photo.focalLength,
   photo.orientation.

   https://github.com/owncloud/ocis/issues/12093
   https://github.com/owncloud/ocis/pull/12094

* Enhancement - Add blobstore CLI commands to storage-users service: [#12102](https://github.com/owncloud/ocis/pull/12102)

   Added two new CLI commands under `ocis storage-users blobstore` to help
   operators verify and inspect the configured blobstore without needing direct
   access to the underlying storage system.

   `blobstore check` performs a full upload/download/delete round-trip using a
   random payload. The payload size is configurable via `--blob-size` and accepts
   human-readable values such as `64`, `1KB` or `4MiB` (default: 64 bytes).

   `blobstore get` downloads a specific blob by its ID to verify it is readable.
   The blob can be identified either with `--blob-id` and `--space-id`, or by
   passing the raw blob path from a log line directly via `--path`. Both the s3ng
   key format (`<spaceID>/<pathified_blobID>`) and the ocis filesystem path format
   (`…/spaces/<pathified_spaceID>/blobs/<pathified_blobID>`) are accepted. When
   using the s3ng driver without a known blob size, an automatic retry with the
   actual size is performed on a size mismatch.

   Both commands read the existing service configuration, so they always target the
   same blobstore as the running service. Only the `ocis` and `s3ng` storage
   drivers are supported.

   https://github.com/owncloud/ocis/pull/12102

* Enhancement - Optimize search index after bulk reindexing: [#12104](https://github.com/owncloud/ocis/pull/12104)

   After an `IndexSpace` walk completes, the search engine now triggers a segment
   merge (compaction) on the bleve index. Over time, writes create multiple index
   segments that degrade query performance. The new `Optimize()` method calls
   bleve's `ForceMerge` to consolidate all segments into one, improving subsequent
   search and lookup speed. This is especially beneficial after bulk reindexing
   large spaces.

   https://github.com/owncloud/ocis/issues/12093
   https://github.com/owncloud/ocis/pull/12104

* Enhancement - Update images in the ocis_full deployment example: [#12123](https://github.com/owncloud/ocis/pull/12123)

   - Update the docker images for core services and web-extensions - Moving all
   default image definitions (latest) into the .env file for consistency

   https://github.com/owncloud/ocis/pull/12123

# Changelog for [8.0.0] (2026-02-13)

The following sections list the changes for 8.0.0.

[8.0.0]: https://github.com/owncloud/ocis/compare/v7.3.1...v8.0.0

## Summary

* Bugfix - Fix user light creation: [#11765](https://github.com/owncloud/ocis/pull/11765)
* Bugfix - OCM Specification Compliance: [#11773](https://github.com/owncloud/ocis/pull/11773)
* Bugfix - Remove leading dot before checking disabled extension: [#11814](https://github.com/owncloud/ocis/pull/11814)
* Bugfix - Support pointer types in config environment variable decoding: [#11815](https://github.com/owncloud/ocis/pull/11815)
* Bugfix - Replace obsolete docker image in the deployment example: [#11828](https://github.com/owncloud/ocis/pull/11828)
* Bugfix - Fix error code when a user can't disable a space: [#11845](https://github.com/owncloud/ocis/pull/11845)
* Bugfix - Fix Sharingroles: [#11898](https://github.com/owncloud/ocis/pull/11898)
* Bugfix - Fix the error handling for empty name on space update: [#11933](https://github.com/owncloud/ocis/pull/11933)
* Bugfix - Fix group creation in ocis-multi example: [#12019](https://github.com/owncloud/ocis/pull/12019)
* Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: [#11942](https://github.com/owncloud/ocis/pull/11942)
* Enhancement - Bump Reva: [#460](https://github.com/owncloud/reva/pull/460)
* Enhancement - Set Referrer-Policy to no-referrer: [#11722](https://github.com/owncloud/ocis/pull/11722)
* Enhancement - Bump Reva: [#11748](https://github.com/owncloud/ocis/pull/11748)
* Enhancement - Support disabling editors by extensions: [#11750](https://github.com/owncloud/ocis/pull/11750)
* Enhancement - Add CLI to move stuck uploads: [#11762](https://github.com/owncloud/ocis/pull/11762)
* Enhancement - Use externalID in Provisioning API: [#11799](https://github.com/owncloud/ocis/pull/11799)
* Enhancement - Add CLI to clean orphned grants: [#11804](https://github.com/owncloud/ocis/pull/11804)
* Enhancement - Bump Reva: [#11808](https://github.com/owncloud/ocis/pull/11808)
* Enhancement - Bump Web to v12.2.0: [#11834](https://github.com/owncloud/ocis/pull/11834)
* Enhancement - Introduce claims for multi-instance-ocis: [#11848](https://github.com/owncloud/ocis/pull/11848)
* Enhancement - Update the ocis_full deployment example images: [#11860](https://github.com/owncloud/ocis/pull/11860)
* Enhancement - Implement brute force protection for public links: [#11864](https://github.com/owncloud/ocis/pull/11864)
* Enhancement - Update the ocis_full deployment example traefik image: [#11867](https://github.com/owncloud/ocis/pull/11867)
* Enhancement - Added a graph endpoint alias: [#11871](https://github.com/owncloud/ocis/pull/11871)
* Enhancement - Force Strict-Transport-Security: [#11880](https://github.com/owncloud/ocis/pull/11880)
* Enhancement - Relocate Transifex resources: [#11889](https://github.com/owncloud/ocis/pull/11889)
* Enhancement - Update the ocis_full deployment example images: [#11890](https://github.com/owncloud/ocis/pull/11890)
* Enhancement - Allow sharing between instances: [#11893](https://github.com/owncloud/ocis/pull/11893)
* Enhancement - Add photo EXIF metadata to search index and WebDAV results: [#11912](https://github.com/owncloud/ocis/pull/11912)
* Enhancement - Update the traefik image for some deployment examples: [#11915](https://github.com/owncloud/ocis/pull/11915)
* Enhancement - Add users instances: [#11925](https://github.com/owncloud/ocis/pull/11925)
* Enhancement - Introduce external shares permission: [#11931](https://github.com/owncloud/ocis/pull/11931)
* Enhancement - Update to go 1.25: [#12011](https://github.com/owncloud/ocis/pull/12011)
* Enhancement - Bump Web to 12.3.1: [#12016](https://github.com/owncloud/ocis/pull/12016)
* Enhancement - Bump Web to 12.3.0: [#13519](https://github.com/owncloud/web/pull/13519)

## Details

* Bugfix - Fix user light creation: [#11765](https://github.com/owncloud/ocis/pull/11765)

   When trying to switch a user to user light before they logged in for the first
   time, an error would occur. The server now correctly handles this case and
   allows switching to user light even before the first login.

   https://github.com/owncloud/ocis/pull/11765

* Bugfix - OCM Specification Compliance: [#11773](https://github.com/owncloud/ocis/pull/11773)

   OCM Specification Compliance

   https://github.com/owncloud/ocis/pull/11773

* Bugfix - Remove leading dot before checking disabled extension: [#11814](https://github.com/owncloud/ocis/pull/11814)

   We have fixed a bug where the leading dot was not removed before checking if an
   extension is disabled. The original behavior would have caused the
   `COLLABORATION_WOPI_DISABLED_EXTENSIONS` config to be ignored.

   https://github.com/owncloud/ocis/pull/11814

* Bugfix - Support pointer types in config environment variable decoding: [#11815](https://github.com/owncloud/ocis/pull/11815)

   Added support for decoding pointer types (*bool, *int, *string, etc.) in the
   envdecode package, allowing configuration fields to distinguish between unset
   (nil) and explicitly set values. Changed `WEB_OPTION_EMBED_ENABLED` from string
   to *bool type to enable explicit false values.

   https://github.com/owncloud/ocis/pull/11815

* Bugfix - Replace obsolete docker image in the deployment example: [#11828](https://github.com/owncloud/ocis/pull/11828)

   In the ocis_ldap deployment example, we were using the bitnami/openldap docker
   image. This image isn't available any longer, so the example couldn't be
   deployed as intended.

   We've replaced the docker image with the osixia/openldap image and we've
   adjusted some of the configuration of the openldap image.

   https://github.com/owncloud/ocis/pull/11828

* Bugfix - Fix error code when a user can't disable a space: [#11845](https://github.com/owncloud/ocis/pull/11845)

   Previously, if the user couldn't disable a space due to wrong permissions, the
   request returned a 404 error code, as if the space wasn't found even though the
   space was visible. Now it will return the expected 403 error code.

   https://github.com/owncloud/ocis/pull/11845

* Bugfix - Fix Sharingroles: [#11898](https://github.com/owncloud/ocis/pull/11898)

   Sharing roles were inconsistent, now they are fixed.

   https://github.com/owncloud/ocis/pull/11898

* Bugfix - Fix the error handling for empty name on space update: [#11933](https://github.com/owncloud/ocis/pull/11933)

   Fix the error handling for empty name on space update.

   https://github.com/owncloud/ocis/issues/11887
   https://github.com/owncloud/ocis/pull/11933

* Bugfix - Fix group creation in ocis-multi example: [#12019](https://github.com/owncloud/ocis/pull/12019)

   Group creation was not working in ocis.ocm instance

   https://github.com/owncloud/ocis/pull/12019

* Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: [#11942](https://github.com/owncloud/ocis/pull/11942)

   Deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS environment variable was removed from
   frontend service config. Use OCIS_USER_SEARCH_DISPLAYED_ATTRIBUTES instead to
   control which user attributes are displayed in search results.

   https://github.com/owncloud/ocis/pull/11942

* Enhancement - Bump Reva: [#460](https://github.com/owncloud/reva/pull/460)

   This updates the ownCloud Reva dependency to include brute force protection for
   public links. The feature implements rate-limiting that blocks access to
   password-protected public shares after exceeding a configurable maximum number
   of failed authentication attempts within a time window.

   https://github.com/owncloud/reva/pull/460

* Enhancement - Set Referrer-Policy to no-referrer: [#11722](https://github.com/owncloud/ocis/pull/11722)

   Change the Referrer-Policy from 'strict-origin-when-cross-origin' to
   'no-referrer' to enhance user privacy and security.

   Previously, the origin was sent on cross-origin requests. This change completely
   removes the Referrer header from all outgoing requests, preventing any potential
   leakage of browsing information to third parties. This is a more robust approach
   to protecting user privacy.

   https://github.com/owncloud/ocis/pull/11722

* Enhancement - Bump Reva: [#11748](https://github.com/owncloud/ocis/pull/11748)

   This updates the ownCloud Reva dependency to commit
   `82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45`. Changelog:
   https://github.com/owncloud/reva/compare/cb98fe521deb55ae339d6ddc4a4b60d6d4da9e14...82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45

   https://github.com/owncloud/ocis/pull/11748

* Enhancement - Support disabling editors by extensions: [#11750](https://github.com/owncloud/ocis/pull/11750)

   We have extended the configuration of collaboration service to support disabling
   editors for specific file extensions.

   https://github.com/owncloud/ocis/pull/11750

* Enhancement - Add CLI to move stuck uploads: [#11762](https://github.com/owncloud/ocis/pull/11762)

   In some cases of saturated disk usage ocis metadata may get stuck. This command
   relieves this case.

   https://github.com/owncloud/ocis/pull/11762

* Enhancement - Use externalID in Provisioning API: [#11799](https://github.com/owncloud/ocis/pull/11799)

   This PR adds the externalID as optional parameter to the Provisioning API that
   can be used as the primary identifier. It also contains a switch to enable this
   setting.

   https://github.com/owncloud/ocis/pull/11799

* Enhancement - Add CLI to clean orphned grants: [#11804](https://github.com/owncloud/ocis/pull/11804)

   Add CLI `ocis shares clean-orphaned-grants` to find and optionally remove
   storage grants without corresponding share-manager entries.

   https://github.com/owncloud/ocis/pull/11804

* Enhancement - Bump Reva: [#11808](https://github.com/owncloud/ocis/pull/11808)

   This updates the ownCloud Reva dependency to commit
   `a122a9538794530267743edfd5dc67b48aa90325`. Changelog:
   https://github.com/owncloud/reva/compare/751223b32d4852c73a43388f6f55308c2065afeb...a122a9538794530267743edfd5dc67b48aa90325

   https://github.com/owncloud/ocis/pull/11808

* Enhancement - Bump Web to v12.2.0: [#11834](https://github.com/owncloud/ocis/pull/11834)

   - Bugfix [owncloud/web#13177](https://github.com/owncloud/web/pull/13177): Fix
   copying public link and password on Safari - Bugfix
   [owncloud/web#13198](https://github.com/owncloud/web/pull/13198): Fix incorrect
   translations - Bugfix
   [owncloud/web#13203](https://github.com/owncloud/web/pull/13203): Remove
   duplicate resource links - Bugfix
   [owncloud/web#13213](https://github.com/owncloud/web/pull/13213): Do not disable
   sharing of resources when managing spaces via claims - Bugfix
   [owncloud/web#13223](https://github.com/owncloud/web/pull/13223): Fix spinner
   loading continuously when resource is deleted - Bugfix
   [owncloud/web#13233](https://github.com/owncloud/web/pull/13233): Include Ubuntu
   font - Bugfix [owncloud/web#13253](https://github.com/owncloud/web/pull/13253):
   External share ID fallback - Bugfix
   [owncloud/web#13274](https://github.com/owncloud/web/pull/13274): Handle file
   loading error - Bugfix
   [owncloud/web#13329](https://github.com/owncloud/web/pull/13329): Use sticky
   header composable in deleted files - Enhancement
   [owncloud/web#13168](https://github.com/owncloud/web/pull/13168): Hide trashed
   spaces - Enhancement
   [owncloud/web#13169](https://github.com/owncloud/web/pull/13169): Drop beta
   badge from GeoGebra pinboards - Enhancement
   [owncloud/web#13172](https://github.com/owncloud/web/pull/13172): Add Excalidraw
   file icon - Enhancement
   [owncloud/web#13197](https://github.com/owncloud/web/pull/13197): Add Visio file
   icons - Enhancement
   [owncloud/web#13224](https://github.com/owncloud/web/pull/13224): Add table
   caption - Enhancement
   [owncloud/web#13235](https://github.com/owncloud/web/pull/13235): Use API groups
   search in admin settings - Enhancement
   [owncloud/web#13296](https://github.com/owncloud/web/pull/13296): Embed mode
   share links with password

   https://github.com/owncloud/ocis/pull/11834
   https://github.com/owncloud/web/releases/tag/v12.2.0

* Enhancement - Introduce claims for multi-instance-ocis: [#11848](https://github.com/owncloud/ocis/pull/11848)

   Reads claims from the oidc token to add users to ocis with specific roles.

   https://github.com/owncloud/ocis/pull/11848

* Enhancement - Update the ocis_full deployment example images: [#11860](https://github.com/owncloud/ocis/pull/11860)

  * Traefik    3.6.2
  * Collabora  27.4.7.3
  * OnlyOffice 9.2.0
  * Mailpit    1.28.0

   https://github.com/owncloud/ocis/pull/11860

* Enhancement - Implement brute force protection for public links: [#11864](https://github.com/owncloud/ocis/pull/11864)

   Public links will be protected by default, allowing up to 5 wrong password
   attempts per hour. If such rate is exceeded, the link will be blocked for all
   the users until the failure rate goes below the configured threshold (5 failures
   per hour by default, as said).

   The failure rate is configurable, so it can be 10 failures each 2 hours or 3
   failures per minute.

   https://github.com/owncloud/ocis/pull/11864
   https://github.com/owncloud/reva/pull/460

* Enhancement - Update the ocis_full deployment example traefik image: [#11867](https://github.com/owncloud/ocis/pull/11867)

  * Traefik: 3.6.4
  * Traefik fix for Collabora

   https://github.com/owncloud/ocis/pull/11867

* Enhancement - Added a graph endpoint alias: [#11871](https://github.com/owncloud/ocis/pull/11871)

   We added a graph endpoint alias that uses the unified roles instead of cs3 roles

   https://github.com/owncloud/ocis/pull/11871

* Enhancement - Force Strict-Transport-Security: [#11880](https://github.com/owncloud/ocis/pull/11880)

   Added `PROXY_FORCE_STRICT_TRANSPORT_SECURITY` environment variable to force
   emission of `Strict-Transport-Security` header on all responses, including plain
   HTTP requests when TLS is terminated upstream. Useful when oCIS is deployed
   behind a proxy.

   https://github.com/owncloud/ocis/pull/11880

* Enhancement - Relocate Transifex resources: [#11889](https://github.com/owncloud/ocis/pull/11889)

   The resources for services with translations are relocated in Transifex from
   owncloud to owncloud-web. Now all ocis related resources are in one project.

   https://github.com/owncloud/ocis/pull/11889

* Enhancement - Update the ocis_full deployment example images: [#11890](https://github.com/owncloud/ocis/pull/11890)

  * Traefic:   v3.6.6
  * Collabora: 25.04.8.1.1
  * Onlyoffice: 9.2.1.1

   https://github.com/owncloud/ocis/pull/11890

* Enhancement - Allow sharing between instances: [#11893](https://github.com/owncloud/ocis/pull/11893)

   In Multi-Instance ocis it is now possible to share between instances.

   https://github.com/owncloud/ocis/pull/11893

* Enhancement - Add photo EXIF metadata to search index and WebDAV results: [#11912](https://github.com/owncloud/ocis/pull/11912)

   We've added support for photo metadata fields in the Bleve search index and
   WebDAV REPORT responses. This enables photo gallery applications to efficiently
   query photos by their EXIF metadata and display camera information.

   The following photo metadata fields are now indexed and searchable: -
   `photo.takenDateTime` - When the photo was taken (supports date range queries) -
   `photo.cameraMake` - Camera manufacturer (e.g., Canon, Nikon, Samsung) -
   `photo.cameraModel` - Camera model name - `photo.fNumber` - Aperture f-stop
   value - `photo.focalLength` - Focal length in millimeters - `photo.iso` - ISO
   sensitivity - `photo.orientation` - Image orientation -
   `photo.exposureNumerator` - Exposure time numerator (for shutter speed
   calculation) - `photo.exposureDenominator` - Exposure time denominator (for
   shutter speed calculation)

   GPS location data is also included when available: - `photo.location.latitude` -
   GPS latitude - `photo.location.longitude` - GPS longitude -
   `photo.location.altitude` - GPS altitude

   These fields are returned in WebDAV search results using the `oc:photo-*`
   property namespace, allowing web extensions to build photo timeline views,
   filter by camera, or show photos on a map.

   https://github.com/owncloud/ocis/pull/11912

* Enhancement - Update the traefik image for some deployment examples: [#11915](https://github.com/owncloud/ocis/pull/11915)

  * Traefik: 3.6.6 --> 3.6.7

   https://github.com/owncloud/ocis/pull/11915

* Enhancement - Add users instances: [#11925](https://github.com/owncloud/ocis/pull/11925)

   The user endpoint now returns the instances that the user is either a member or
   a guest of and the cross instance reference.

   https://github.com/owncloud/ocis/pull/11925

* Enhancement - Introduce external shares permission: [#11931](https://github.com/owncloud/ocis/pull/11931)

   Introduces a permission allowing to share between instances in multi-instance
   ocis. This permission is by default added to the admin and space-admin role.

   https://github.com/owncloud/ocis/pull/11931

* Enhancement - Update to go 1.25: [#12011](https://github.com/owncloud/ocis/pull/12011)

   We have updated go to version 1.25 and alpine to version 3.23.3

   https://github.com/owncloud/ocis/pull/12011
   https://github.com/owncloud/ocis/pull/12004

* Enhancement - Bump Web to 12.3.1: [#12016](https://github.com/owncloud/ocis/pull/12016)

   Bugfix [owncloud/web#13553](https://github.com/owncloud/web/pull/13553): Search
   Text Overalps With Search Icon In The Search Bar

   https://github.com/owncloud/ocis/pull/12016
   https://github.com/owncloud/web/releases/tag/v12.3.1

* Enhancement - Bump Web to 12.3.0: [#13519](https://github.com/owncloud/web/pull/13519)

   Bugfix [owncloud/web#13406](https://github.com/owncloud/web/pull/13406): Prevent
   overlapping search content Bugfix
   [owncloud/web#13415](https://github.com/owncloud/web/pull/13415) Filter only
   personal trashed spaces Enhancement
   [owncloud/web#5847](https://github.com/owncloud/web/pull/5847) Dynamic
   theme-color meta tag based on loaded theme Enhancement
   [owncloud/web#13412](https://github.com/owncloud/web/pull/13412) Use beta
   endpoint for single drive operations Enhancement
   [owncloud/web#13426](https://github.com/owncloud/web/pull/13426) Add crash page
   Enhancement
   [owncloud/web#13426](https://github.com/owncloud/web/pull/13426)Catch spaces
   loading error Enhancement
   [owncloud/web#13485](https://github.com/owncloud/web/pull/13485)Drop custom
   share filters Enhancement
   [owncloud/web#13499](https://github.com/owncloud/web/pull/13499)Add
   cross-instance reference Enhancement
   [owncloud/web#13500](https://github.com/owncloud/web/pull/13500)Add instance
   switcher

   https://github.com/owncloud/web/pull/13519
   https://github.com/owncloud/web/releases/tag/v12.3.0

# Changelog for [7.3.1] (2025-11-24)

The following sections list the changes for 7.3.1.

[7.3.1]: https://github.com/owncloud/ocis/compare/v7.3.0...v7.3.1

## Summary

* Enhancement - Bump Web to 12.1.1: [#11726](https://github.com/owncloud/ocis/pull/11726)
* Enhancement - Bump Web to v12.1.2: [#11836](https://github.com/owncloud/ocis/pull/11836)

## Details

* Enhancement - Bump Web to 12.1.1: [#11726](https://github.com/owncloud/ocis/pull/11726)

   This version contains only updated translations.

   https://github.com/owncloud/ocis/pull/11726
   https://github.com/owncloud/web/releases/tag/v12.1.1

* Enhancement - Bump Web to v12.1.2: [#11836](https://github.com/owncloud/ocis/pull/11836)

   - Bugfix [owncloud/web#13213](https://github.com/owncloud/web/pull/13213): Do
   not disable sharing of resources when managing spaces via claims

   https://github.com/owncloud/ocis/pull/11836
   https://github.com/owncloud/web/releases/tag/v12.1.2

# Changelog for [7.3.0] (2025-10-13)

The following sections list the changes for 7.3.0.

[7.3.0]: https://github.com/owncloud/ocis/compare/v7.2.0...v7.3.0

## Summary

* Bugfix - Fix the expiration date response for links: [#11239](https://github.com/owncloud/ocis/pull/11239)
* Bugfix - Return translated role definitions: [#11466](https://github.com/owncloud/ocis/pull/11466)
* Bugfix - Tolerating the empty request body for WebDAV: [#11516](https://github.com/owncloud/ocis/pull/11516)
* Bugfix - Fix space root handling in a sharedByMe: [#11533](https://github.com/owncloud/ocis/pull/11533)
* Bugfix - Fix the create link endpoint: [#11542](https://github.com/owncloud/ocis/pull/11542)
* Bugfix - Limit search only when scope is passed: [#11664](https://github.com/owncloud/ocis/pull/11664)
* Bugfix - Add OCS v2 capabilities endpoint to public paths: [#11665](https://github.com/owncloud/ocis/pull/11665)
* Bugfix - Add webdav without trailing slash into proxy default config: [#11677](https://github.com/owncloud/ocis/pull/11677)
* Bugfix - Fix clean uploads command: [#11693](https://github.com/owncloud/ocis/pull/11693)
* Bugfix - Fix stale nodes command: [#11704](https://github.com/owncloud/ocis/pull/11704)
* Enhancement - Add GetPermission API: [#8616](https://github.com/owncloud/ocis/issues/8616)
* Enhancement - Bump importer app: [#10880](https://github.com/owncloud/ocis/pull/10880)
* Enhancement - Allow scaling the search service: [#11029](https://github.com/owncloud/ocis/pull/11029)
* Enhancement - Add Cli to delete personal spaces: [#11555](https://github.com/owncloud/ocis/pull/11555)
* Enhancement - Add custom labels for app tokens: [#11555](https://github.com/owncloud/ocis/pull/11555)
* Enhancement - HTTP Strict Transport Security: [#11568](https://github.com/owncloud/ocis/pull/11568)
* Enhancement - Allow markdown output for unified-roles-table: [#11581](https://github.com/owncloud/ocis/pull/11581)
* Enhancement - Added the OnlyOffice license support: [#11624](https://github.com/owncloud/ocis/pull/11624)
* Enhancement - Bump Web to 12.0.4: [#11625](https://github.com/owncloud/ocis/pull/11625)
* Enhancement - Update the ocis_full deployment example: [#11666](https://github.com/owncloud/ocis/pull/11666)
* Enhancement - Bump Reva version: [#11669](https://github.com/owncloud/ocis/pull/11669)
* Enhancement - Added user type upgrade/downgrade: [#11678](https://github.com/owncloud/ocis/pull/11678)
* Enhancement - Respect changed user type in OIDC claim: [#11684](https://github.com/owncloud/ocis/pull/11684)
* Enhancement - Drop remote.php prefix: [#11687](https://github.com/owncloud/ocis/pull/11687)
* Enhancement - Add configurable display attributes: [#11695](https://github.com/owncloud/ocis/pull/11695)
* Enhancement - Bump Web to 12.1.0: [#11710](https://github.com/owncloud/ocis/pull/11710)
* Enhancement - Bump Web to 12.1.1: [#11726](https://github.com/owncloud/ocis/pull/11726)

## Details

* Bugfix - Fix the expiration date response for links: [#11239](https://github.com/owncloud/ocis/pull/11239)

   We fixed the inconsistency in the expiration date response for links

   https://github.com/owncloud/ocis/issues/11232
   https://github.com/owncloud/ocis/pull/11239

* Bugfix - Return translated role definitions: [#11466](https://github.com/owncloud/ocis/pull/11466)

   Instead of always returning the role definitions in English, we now return the
   role definitions in the language set in the `Accept-Language` header if present.

   https://github.com/owncloud/ocis/pull/11466

* Bugfix - Tolerating the empty request body for WebDAV: [#11516](https://github.com/owncloud/ocis/pull/11516)

   Tolerating the empty request body for WebDAV operations like MKCOL, DELETE,
   MOVE, COPY.

   https://github.com/owncloud/ocis/issues/10809
   https://github.com/owncloud/ocis/pull/11516

* Bugfix - Fix space root handling in a sharedByMe: [#11533](https://github.com/owncloud/ocis/pull/11533)

   Fix space root handling in a graph sharedByMe

   https://github.com/owncloud/ocis/pull/11533

* Bugfix - Fix the create link endpoint: [#11542](https://github.com/owncloud/ocis/pull/11542)

   We fixed an issue when Shares drive can be shared via link share with Internal
   role using permissions endpoint

   https://github.com/owncloud/ocis/issues/11409
   https://github.com/owncloud/ocis/pull/11542

* Bugfix - Limit search only when scope is passed: [#11664](https://github.com/owncloud/ocis/pull/11664)

   Previously, the search service would limit the search to the according space
   when searching `/dav/spaces/`. This was not correct, as the search should be
   limited to the according space when a `scope` is passed in the search pattern
   instead.

   https://github.com/owncloud/ocis/pull/11664

* Bugfix - Add OCS v2 capabilities endpoint to public paths: [#11665](https://github.com/owncloud/ocis/pull/11665)

   Following the same behavior as OCS v1, we added the OCS v2 capabilities endpoint
   to the public paths.

   https://github.com/owncloud/ocis/pull/11665

* Bugfix - Add webdav without trailing slash into proxy default config: [#11677](https://github.com/owncloud/ocis/pull/11677)

   We've added the `/webdav` endpoint without a trailing slash into the proxy
   default config.

   https://github.com/owncloud/ocis/issues/10346
   https://github.com/owncloud/ocis/issues/10334
   https://github.com/owncloud/ocis/pull/11677

* Bugfix - Fix clean uploads command: [#11693](https://github.com/owncloud/ocis/pull/11693)

   When using --clean ongoing uploads would be purged but the nodes would not be
   reverted. This is now fixed.

   https://github.com/owncloud/ocis/pull/11693

* Bugfix - Fix stale nodes command: [#11704](https://github.com/owncloud/ocis/pull/11704)

   Fix delete-stale-nodes command to properly remove or roll-back nodes

   https://github.com/owncloud/ocis/pull/11704

* Enhancement - Add GetPermission API: [#8616](https://github.com/owncloud/ocis/issues/8616)

   Graph service: added GET
   /v1beta1/drives/{driveId}/items/{itemId}/permissions/{permissionId} (and
   space-root equivalent) so clients can retrieve a single permission instead of
   listing all.

   https://github.com/owncloud/ocis/issues/8616
   https://github.com/owncloud/ocis/pull/11477

* Enhancement - Bump importer app: [#10880](https://github.com/owncloud/ocis/pull/10880)

   The importer app in the ocis_full example has been updated. It's using the
   upstream Uppy Companion Docker image now.

   https://github.com/owncloud/ocis/pull/10880

* Enhancement - Allow scaling the search service: [#11029](https://github.com/owncloud/ocis/pull/11029)

   Previously, the search service locked the index for its whole lifetime, so any
   other search service wouldn't be able to access to the index. With this change,
   the search service can be configure to lock the index per operation, so other
   search services can access the index as long as there is no operation ongoing.

   https://github.com/owncloud/ocis/pull/11029

* Enhancement - Add Cli to delete personal spaces: [#11555](https://github.com/owncloud/ocis/pull/11555)

   Add Cli to delete the trashed personal spaces.

   https://github.com/owncloud/ocis/pull/11555

* Enhancement - Add custom labels for app tokens: [#11555](https://github.com/owncloud/ocis/pull/11555)

   The ability to set a custom label when creating an app token has been added.

   https://github.com/owncloud/ocis/pull/11555

* Enhancement - HTTP Strict Transport Security: [#11568](https://github.com/owncloud/ocis/pull/11568)

   Added Support for HTTP Strict Transport Security. It reduces surface for
   Man-in-the-Middle attacks or leakage of sensitive information.

   https://github.com/owncloud/ocis/pull/11568

* Enhancement - Allow markdown output for unified-roles-table: [#11581](https://github.com/owncloud/ocis/pull/11581)

   Allows rendering the `ocis graph list-unified-roles` command in markdown (or
   colorized)

   https://github.com/owncloud/ocis/pull/11581

* Enhancement - Added the OnlyOffice license support: [#11624](https://github.com/owncloud/ocis/pull/11624)

   Added the OnlyOffice ee license support to the ocis_full deployment.

   https://github.com/owncloud/ocis/pull/11624

* Enhancement - Bump Web to 12.0.4: [#11625](https://github.com/owncloud/ocis/pull/11625)

   - Bugfix [owncloud/web#12943](https://github.com/owncloud/web/pull/12943): Sign
   public link archiver download URL

   https://github.com/owncloud/ocis/pull/11625
   https://github.com/owncloud/web/releases/tag/v12.0.4

* Enhancement - Update the ocis_full deployment example: [#11666](https://github.com/owncloud/ocis/pull/11666)

   Fix description texts, move image versions from yaml to .env where applicapable

   https://github.com/owncloud/ocis/pull/11666

* Enhancement - Bump Reva version: [#11669](https://github.com/owncloud/ocis/pull/11669)

   Bumped reva version

   https://github.com/owncloud/ocis/pull/11669
   https://github.com/owncloud/ocis/pull/11693
   https://github.com/owncloud/ocis/pull/11704

* Enhancement - Added user type upgrade/downgrade: [#11678](https://github.com/owncloud/ocis/pull/11678)

   Added the mechanism to disable/enable personal spaces on user type
   upgrade/downgrade

   https://github.com/owncloud/ocis/pull/11678

* Enhancement - Respect changed user type in OIDC claim: [#11684](https://github.com/owncloud/ocis/pull/11684)

   Ensure that OIDC login correctly interprets user type changes to disable/enable
   personal spaces on user type upgrade/downgrade

   https://github.com/owncloud/ocis/pull/11684

* Enhancement - Drop remote.php prefix: [#11687](https://github.com/owncloud/ocis/pull/11687)

   The `remote.php` prefix is now fully optional in WebDAV endpoints and is never
   returned in responses.

   https://github.com/owncloud/ocis/pull/11687

* Enhancement - Add configurable display attributes: [#11695](https://github.com/owncloud/ocis/pull/11695)

   We added new configuration options `UserSearchDisplayedAttributes` which allows
   to configure the attributes that are displayed in the user search results. We
   are also deprecating the `ShowUserEmailInResults` configuration option.

   https://github.com/owncloud/ocis/pull/11695

* Enhancement - Bump Web to 12.1.0: [#11710](https://github.com/owncloud/ocis/pull/11710)

   - Bugfix [owncloud/web#12768](https://github.com/owncloud/web/pull/12768): Reset
   selection only when path changes - Bugfix
   [owncloud/web#12780](https://github.com/owncloud/web/pull/12780): Handle direct
   admin settings access - Bugfix
   [owncloud/web#12954](https://github.com/owncloud/web/pull/12954): Add clipboard
   permissions - Bugfix
   [owncloud/web#13075](https://github.com/owncloud/web/pull/13075): Set md-editor
   code block header to have z-index of 0 - Bugfix
   [owncloud/web#13126](https://github.com/owncloud/web/pull/13126): Make progress
   bar settings reactive - Bugfix
   [owncloud/web#13127](https://github.com/owncloud/web/pull/13127): Handle HTML
   upload error - Bugfix
   [owncloud/web#13136](https://github.com/owncloud/web/pull/13136): Disallow
   U+202E character in folder name - Bugfix
   [owncloud/web#13142](https://github.com/owncloud/web/pull/13142): Use correct
   color for universal icon - Enhancement
   [owncloud/web#12788](https://github.com/owncloud/web/pull/12788): Add markdown
   to PDF export - Enhancement
   [owncloud/web#12915](https://github.com/owncloud/web/pull/12915): Use switch for
   full text search filter - Enhancement
   [owncloud/web#12925](https://github.com/owncloud/web/pull/12925): Add MFA
   capability - Enhancement
   [owncloud/web#12933](https://github.com/owncloud/web/pull/12933): Add universal
   access - Enhancement
   [owncloud/web#12973](https://github.com/owncloud/web/pull/12973): Add GeoGebra
   pinboard icon - Enhancement
   [owncloud/web#12974](https://github.com/owncloud/web/pull/12974): Replace board
   icon - Enhancement
   [owncloud/web#13093](https://github.com/owncloud/web/pull/13093): Add
   OcResponsiveImage component - Enhancement
   [owncloud/web#13093](https://github.com/owncloud/web/pull/13093): Add topbar
   mobile logo theme option - Enhancement
   [owncloud/web#13110](https://github.com/owncloud/web/pull/13110): Add mobile to
   query param - Enhancement
   [owncloud/web#13111](https://github.com/owncloud/web/pull/13111): Use OCS v2 API
   - Enhancement [owncloud/web#13113](https://github.com/owncloud/web/pull/13113):
   Drop `remote.php` from WebDAV paths - Enhancement
   [owncloud/web#13144](https://github.com/owncloud/web/pull/13144): Display custom
   attributes in share autocomplete

   https://github.com/owncloud/ocis/pull/11710
   https://github.com/owncloud/web/releases/tag/v12.1.0

* Enhancement - Bump Web to 12.1.1: [#11726](https://github.com/owncloud/ocis/pull/11726)

   This version contains only updated translations.

   https://github.com/owncloud/ocis/pull/11726
   https://github.com/owncloud/web/releases/tag/v12.1.1

# Changelog for [7.2.0] (2025-07-14)

The following sections list the changes for 7.2.0.

[7.2.0]: https://github.com/owncloud/ocis/compare/v7.1.3...v7.2.0

## Summary

* Bugfix - Fix the OCM role editor: [#11071](https://github.com/owncloud/ocis/pull/11071)
* Bugfix - Fix the SpaceMembershipExpired event: [#11078](https://github.com/owncloud/ocis/pull/11078)
* Bugfix - Fix the OCM role file editor: [#11093](https://github.com/owncloud/ocis/pull/11093)
* Bugfix - Fix the parent-id for the share-jail root: [#11101](https://github.com/owncloud/ocis/pull/11101)
* Bugfix - Adjust the capabilities according to full text search config: [#11111](https://github.com/owncloud/ocis/pull/11111)
* Bugfix - Fix app-auth: [#11123](https://github.com/owncloud/ocis/pull/11123)
* Bugfix - Fix the SpaceMembershipExpired duplicate event: [#11127](https://github.com/owncloud/ocis/pull/11127)
* Bugfix - Fix migrate rebuild-jsoncs3-indexes cli: [#11145](https://github.com/owncloud/ocis/pull/11145)
* Bugfix - OCM Share Notifications: [#11162](https://github.com/owncloud/ocis/pull/11162)
* Bugfix - Fix pdf form creation: [#11163](https://github.com/owncloud/ocis/pull/11163)
* Bugfix - Fix app-auth, REST status code: [#11190](https://github.com/owncloud/ocis/pull/11190)
* Bugfix - Fix error on listing space members: [#11245](https://github.com/owncloud/ocis/pull/11245)
* Bugfix - Fix the graceful shutdown: [#11295](https://github.com/owncloud/ocis/pull/11295)
* Bugfix - Fix the reva log interceptor: [#11348](https://github.com/owncloud/ocis/pull/11348)
* Bugfix - Fix panic while traversing the service list: [#11390](https://github.com/owncloud/ocis/pull/11390)
* Bugfix - Clean up unified roles label: [#11464](https://github.com/owncloud/ocis/pull/11464)
* Bugfix - Fix the OCM role editor: [#11484](https://github.com/owncloud/ocis/pull/11484)
* Bugfix - Fix storage-users cli: [#11490](https://github.com/owncloud/ocis/pull/11490)
* Change - Remove deprecated FRONTEND_OCS_*: [#11333](https://github.com/owncloud/ocis/pull/11333)
* Change - Remove deprecated CLIENTLOG_REVA_GATEWAY: [#11372](https://github.com/owncloud/ocis/pull/11372)
* Enhancement - Update Mockery to 2.52.3: [#11070](https://github.com/owncloud/ocis/pull/11070)
* Enhancement - Improve postprocessing logs: [#11108](https://github.com/owncloud/ocis/pull/11108)
* Enhancement - Improve graph space management logs: [#11115](https://github.com/owncloud/ocis/pull/11115)
* Enhancement - Delete notification by ID: [#11203](https://github.com/owncloud/ocis/pull/11203)
* Enhancement - CLI, storage-users uploads delete-stale-nodes: [#11216](https://github.com/owncloud/ocis/pull/11216)
* Enhancement - Allow setting driveid through graph API: [#11256](https://github.com/owncloud/ocis/pull/11256)
* Enhancement - More secure Microsoft 365 collaboration: [#11276](https://github.com/owncloud/ocis/pull/11276)
* Enhancement - Claim managed spaces: [#11280](https://github.com/owncloud/ocis/pull/11280)
* Enhancement - Bump Reva: [#11283](https://github.com/owncloud/ocis/pull/11283)
* Enhancement - Update ocis_full deployment example images: [#11319](https://github.com/owncloud/ocis/pull/11319)
* Enhancement - Bump Web to 11.3.2: [#11330](https://github.com/owncloud/ocis/pull/11330)
* Enhancement - Add capability for server managed spaces: [#11332](https://github.com/owncloud/ocis/pull/11332)
* Enhancement - Harden office deployment process: [#11339](https://github.com/owncloud/ocis/pull/11339)
* Enhancement - Add SpaceEditorWithoutTrashbin Role: [#11391](https://github.com/owncloud/ocis/pull/11391)
* Enhancement - Improve cookies security: [#11413](https://github.com/owncloud/ocis/pull/11413)
* Enhancement - Bump Web to 12.0.0: [#11420](https://github.com/owncloud/ocis/pull/11420)
* Enhancement - Bump Web to 12.0.1: [#11420](https://github.com/owncloud/ocis/pull/11420)
* Enhancement - Remove deprecated envvars: [#11430](https://github.com/owncloud/ocis/pull/11430)
* Enhancement - Update Bleve to v2.5.2: [#11441](https://github.com/owncloud/ocis/pull/11441)
* Enhancement - Bump Web to 12.0.2: [#11444](https://github.com/owncloud/ocis/pull/11444)

## Details

* Bugfix - Fix the OCM role editor: [#11071](https://github.com/owncloud/ocis/pull/11071)

   Fix the OCM role editor permission set. The redundant permissions have been
   removed.

   https://github.com/owncloud/ocis/issues/11054
   https://github.com/owncloud/ocis/pull/11071

* Bugfix - Fix the SpaceMembershipExpired event: [#11078](https://github.com/owncloud/ocis/pull/11078)

   We fixed the SpaceMembershipExpired event emitting.

   https://github.com/owncloud/ocis/issues/10882
   https://github.com/owncloud/ocis/pull/11078

* Bugfix - Fix the OCM role file editor: [#11093](https://github.com/owncloud/ocis/pull/11093)

   Fix the OCM role file editor permission set. The redundant permissions have been
   removed.

   https://github.com/owncloud/ocis/issues/11054
   https://github.com/owncloud/ocis/pull/11093

* Bugfix - Fix the parent-id for the share-jail root: [#11101](https://github.com/owncloud/ocis/pull/11101)

   Fix the parent-id for the share-jail root.

   https://github.com/owncloud/ocis/issues/10917
   https://github.com/owncloud/ocis/pull/11101

* Bugfix - Adjust the capabilities according to full text search config: [#11111](https://github.com/owncloud/ocis/pull/11111)

   Adjust the capabilities according to full text search configurations.

   https://github.com/owncloud/ocis/issues/11059
   https://github.com/owncloud/ocis/pull/11111

* Bugfix - Fix app-auth: [#11123](https://github.com/owncloud/ocis/pull/11123)

   Allow the app-auth announce `www-authenticate: basic` header.

   https://github.com/owncloud/ocis/issues/11113
   https://github.com/owncloud/ocis/pull/11123

* Bugfix - Fix the SpaceMembershipExpired duplicate event: [#11127](https://github.com/owncloud/ocis/pull/11127)

   We fixed the SpaceMembershipExpired event duplication issue.

   https://github.com/owncloud/ocis/issues/10966
   https://github.com/owncloud/ocis/pull/11127

* Bugfix - Fix migrate rebuild-jsoncs3-indexes cli: [#11145](https://github.com/owncloud/ocis/pull/11145)

   Fix migrate rebuild-jsoncs3-indexes cli

   https://github.com/owncloud/ocis/issues/11145
   https://github.com/owncloud/ocis/pull/11145

* Bugfix - OCM Share Notifications: [#11162](https://github.com/owncloud/ocis/pull/11162)

   Fix no OCM sharing notifications, now share and unshare notifications are
   created

   https://github.com/owncloud/ocis/issues/11042
   https://github.com/owncloud/ocis/pull/11162

* Bugfix - Fix pdf form creation: [#11163](https://github.com/owncloud/ocis/pull/11163)

   Fix pdf form creation for Onlyoffice. Adjust the file extension for Form to be
   PDF instead of DOCXF

   https://github.com/owncloud/ocis/issues/11164
   https://github.com/owncloud/ocis/pull/11163

* Bugfix - Fix app-auth, REST status code: [#11190](https://github.com/owncloud/ocis/pull/11190)

   Now app-auth REST returns status code 404 when creating token for non-existent
   user (Impersonation)

   https://github.com/owncloud/ocis/issues/10815
   https://github.com/owncloud/ocis/pull/11190

* Bugfix - Fix error on listing space members: [#11245](https://github.com/owncloud/ocis/pull/11245)

   Now the members list will still show grantees even with there is any invalid
   share after the upgrade.

   https://github.com/owncloud/ocis/issues/11119
   https://github.com/owncloud/ocis/pull/11245

* Bugfix - Fix the graceful shutdown: [#11295](https://github.com/owncloud/ocis/pull/11295)

   Fix the graceful shutdown using the new ocis and reva runners.

   https://github.com/owncloud/ocis/issues/11170
   https://github.com/owncloud/ocis/pull/11295

* Bugfix - Fix the reva log interceptor: [#11348](https://github.com/owncloud/ocis/pull/11348)

   Fix the reva log interceptor. Implemented the Unwrap interface to allow TUS
   middleware to handle correctly SetReadDeadline and SetWriteDeadline functions
   and to avoid the error during the upload.

   https://github.com/owncloud/ocis/issues/10857
   https://github.com/owncloud/ocis/pull/11348

* Bugfix - Fix panic while traversing the service list: [#11390](https://github.com/owncloud/ocis/pull/11390)

   Fix the panic while traversing the service list

   https://github.com/owncloud/ocis/issues/11377
   https://github.com/owncloud/ocis/pull/11390

* Bugfix - Clean up unified roles label: [#11464](https://github.com/owncloud/ocis/pull/11464)

   Clean up the unified roles label

   https://github.com/owncloud/ocis/issues/11470
   https://github.com/owncloud/ocis/issues/11254
   https://github.com/owncloud/ocis/issues/10082
   https://github.com/owncloud/ocis/pull/11464

* Bugfix - Fix the OCM role editor: [#11484](https://github.com/owncloud/ocis/pull/11484)

   Fix the issue when the watermark is visible to user with a viewer role in
   Collabora

   https://github.com/owncloud/ocis/issues/11474
   https://github.com/owncloud/ocis/pull/11484

* Bugfix - Fix storage-users cli: [#11490](https://github.com/owncloud/ocis/pull/11490)

   Fix storage-users uploads --resume command.

   https://github.com/owncloud/ocis/issues/11290
   https://github.com/owncloud/ocis/pull/11490

* Change - Remove deprecated FRONTEND_OCS_*: [#11333](https://github.com/owncloud/ocis/pull/11333)

   Deprecated FRONTEND_OCS_* environment variable was removed from config.

   https://github.com/owncloud/ocis/issues/11314
   https://github.com/owncloud/ocis/pull/11333

* Change - Remove deprecated CLIENTLOG_REVA_GATEWAY: [#11372](https://github.com/owncloud/ocis/pull/11372)

   Deprecated CLIENTLOG_REVA_GATEWAY environment variable was removed from config.

   https://github.com/owncloud/ocis/issues/11314
   https://github.com/owncloud/ocis/pull/11372

* Enhancement - Update Mockery to 2.52.3: [#11070](https://github.com/owncloud/ocis/pull/11070)

   Without updating ocis will not build on go 1.24. This requires also updating the
   go version to 1.24

   https://github.com/owncloud/ocis/pull/11070

* Enhancement - Improve postprocessing logs: [#11108](https://github.com/owncloud/ocis/pull/11108)

   Improve postprocessing logs to easily trace successful and failing uploads/

   https://github.com/owncloud/ocis/issues/10998
   https://github.com/owncloud/ocis/pull/11108

* Enhancement - Improve graph space management logs: [#11115](https://github.com/owncloud/ocis/pull/11115)

   Improve graph space management logs to help troubleshooting user operations

   https://github.com/owncloud/ocis/issues/10989
   https://github.com/owncloud/ocis/pull/11115

* Enhancement - Delete notification by ID: [#11203](https://github.com/owncloud/ocis/pull/11203)

   It is now possible to delete a single notification by ID: DELETE
   /ocs/v2.php/apps/notifications/api/v1/notifications/:id

   https://github.com/owncloud/enterprise/issues/6307
   https://github.com/owncloud/ocis/pull/11203

* Enhancement - CLI, storage-users uploads delete-stale-nodes: [#11216](https://github.com/owncloud/ocis/pull/11216)

   An oCIS command that deletes stale nodes: in processing state wihout connected
   upload info.

   https://github.com/owncloud/enterprise/issues/7178
   https://github.com/owncloud/ocis/pull/11216

* Enhancement - Allow setting driveid through graph API: [#11256](https://github.com/owncloud/ocis/pull/11256)

   Allow setting the id through the graph API. This should always be a uuid to
   avoid clashes, but this is the responsibility of the API user.

   https://github.com/owncloud/ocis/pull/11256

* Enhancement - More secure Microsoft 365 collaboration: [#11276](https://github.com/owncloud/ocis/pull/11276)

   Security update to WOPI protocol token handling

   https://github.com/owncloud/ocis/pull/11276

* Enhancement - Claim managed spaces: [#11280](https://github.com/owncloud/ocis/pull/11280)

   Allow managing spaces from oidc claims

   https://github.com/owncloud/ocis/pull/11280
   https://github.com/owncloud/ocis/pull/11291

* Enhancement - Bump Reva: [#11283](https://github.com/owncloud/ocis/pull/11283)

   Bumps reva version

   https://github.com/owncloud/ocis/pull/11283

* Enhancement - Update ocis_full deployment example images: [#11319](https://github.com/owncloud/ocis/pull/11319)

   The ocis_full deployment example got updated images. Additionally a fix has been
   implemented for collabora.yml to be compliant with new releases.

   https://github.com/owncloud/ocis/pull/11319

* Enhancement - Bump Web to 11.3.2: [#11330](https://github.com/owncloud/ocis/pull/11330)

   - Bugfix [owncloud/web#12460](https://github.com/owncloud/web/pull/12460): Add
   missing dependencies to markdown editor - Bugfix
   [owncloud/web#12460](https://github.com/owncloud/web/pull/12460): Hide image
   upload in markdown editor - Bugfix
   [owncloud/web#12460](https://github.com/owncloud/web/pull/12460): Hide save in
   markdown editor

   https://github.com/owncloud/ocis/pull/11330
   https://github.com/owncloud/web/releases/tag/v11.3.2

* Enhancement - Add capability for server managed spaces: [#11332](https://github.com/owncloud/ocis/pull/11332)

   Adds the capability for server managed spaces, which will deactivate
   adding/removing users to/from spaces in the web UI.

   https://github.com/owncloud/ocis/pull/11332

* Enhancement - Harden office deployment process: [#11339](https://github.com/owncloud/ocis/pull/11339)

   Office deployment will use proof keys by default to ensure requests to the
   collaboration service come from a trusted source. In addition, OnlyOffice will
   use ip filters to ensure requests come from the collaboration service (with the
   exception of the editor). Lastly, the collaboration service won't be exposed to
   the outside and will remain in the docker network.

   https://github.com/owncloud/ocis/pull/11339

* Enhancement - Add SpaceEditorWithoutTrashbin Role: [#11391](https://github.com/owncloud/ocis/pull/11391)

   Added a new built-in role: `SpaceEditorWithoutTrashbin`. This role is a subset
   of the `SpaceEditor` role, but it does not have list/restore resources in
   trashbin permissions.

   https://github.com/owncloud/ocis/issues/11206
   https://github.com/owncloud/ocis/pull/11391

* Enhancement - Improve cookies security: [#11413](https://github.com/owncloud/ocis/pull/11413)

   Cookies now have securtiy flags set that remove angle for attacks like CSRF,
   MITM, XSS.

   https://github.com/owncloud/ocis/pull/11413

* Enhancement - Bump Web to 12.0.0: [#11420](https://github.com/owncloud/ocis/pull/11420)

   - Bugfix [owncloud/web#11960](https://github.com/owncloud/web/pull/11960):
   Preview app flat file lists - Bugfix
   [owncloud/web#11967](https://github.com/owncloud/web/pull/11967): Show progress
   bar when emptying trash bin - Bugfix
   [owncloud/web#12059](https://github.com/owncloud/web/pull/12059): Reload
   preloaded resource in sidebar - Bugfix
   [owncloud/web#12101](https://github.com/owncloud/web/pull/12101): Missing User
   Light translations - Bugfix
   [owncloud/web#12207](https://github.com/owncloud/web/pull/12207): Preserve
   current page when opening a file - Bugfix
   [owncloud/web#12227](https://github.com/owncloud/web/pull/12227): Make password
   protected folder tile clickable - Bugfix
   [owncloud/web#12228](https://github.com/owncloud/web/issues/12228): Allow email
   address as user name in the user creation form - Bugfix
   [owncloud/web#12236](https://github.com/owncloud/web/pull/12236): Sorting arrow
   misplaced - Bugfix
   [owncloud/web#12265](https://github.com/owncloud/web/pull/12265): Disable
   cutting and pasting into the same folder - Bugfix
   [owncloud/web#12266](https://github.com/owncloud/web/pull/12266): Generate
   public link password on click - Bugfix
   [owncloud/web#12328](https://github.com/owncloud/web/pull/12328): Disallow user
   from inviting themselves - Bugfix
   [owncloud/web#12329](https://github.com/owncloud/web/pull/12329): Delete .psec
   file - Bugfix [owncloud/web#12336](https://github.com/owncloud/web/pull/12336):
   Handle shares loading error - Bugfix
   [owncloud/web#12339](https://github.com/owncloud/web/pull/12339): Add domain to
   distinguish between external users - Bugfix
   [owncloud/web#12351](https://github.com/owncloud/web/pull/12351): Fix sorting in
   spaces view that may crash the application - Bugfix
   [owncloud/web#12356](https://github.com/owncloud/web/pull/12356): Show path
   tooltip on parent folder - Bugfix
   [owncloud/web#12357](https://github.com/owncloud/web/pull/12357): Handle changed
   public link password in file editors - Bugfix
   [owncloud/web#12368](https://github.com/owncloud/web/pull/12368): Space context
   menu is cropped with limited vertical screen space - Bugfix
   [owncloud/web#12373](https://github.com/owncloud/web/pull/12373): Add space not
   found message - Bugfix
   [owncloud/web#12377](https://github.com/owncloud/web/pull/12377): Mock services
   correctly in test file - Bugfix
   [owncloud/web#12385](https://github.com/owncloud/web/pull/12385): Use resource
   ID in share notifications - Bugfix
   [owncloud/web#12385](https://github.com/owncloud/web/pull/12385): Watch scroll
   target in shared list - Bugfix
   [owncloud/web#12406](https://github.com/owncloud/web/pull/12406): Download
   archives directly - Bugfix
   [owncloud/web#12406](https://github.com/owncloud/web/pull/12406): Request
   archive as blob - Bugfix
   [owncloud/web#12478](https://github.com/owncloud/web/pull/12478): Fix wrong HTML
   lang attribute - Bugfix
   [owncloud/web#12482](https://github.com/owncloud/web/pull/12482): Delete
   resource throws unknown error - Bugfix
   [owncloud/web#12487](https://github.com/owncloud/web/pull/12487): Application
   language and browser language do not match - Bugfix
   [owncloud/web#12606](https://github.com/owncloud/web/pull/12606): Access correct
   key when loading favorites - Bugfix
   [owncloud/web#12607](https://github.com/owncloud/web/pull/12607): Load ancestor
   space only when parent id is returned - Bugfix
   [owncloud/web#12608](https://github.com/owncloud/web/pull/12608): Do not crash
   when tus is unsupported - Bugfix
   [owncloud/web#12628](https://github.com/owncloud/web/pull/12628): Use
   capabilities store in preview service - Bugfix
   [owncloud/web#12646](https://github.com/owncloud/web/pull/12646): Add missing
   label to rename button - Change
   [owncloud/web#12567](https://github.com/owncloud/web/pull/12567): Remove CERN's
   collapsible table - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated applicationMenu - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated ApplicationQuickAction - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated client init method - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated isFileEditor - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated ocsUserContext and ocsPublicLinkContext - Change
   [owncloud/web#12686](https://github.com/owncloud/web/pull/12686): Remove
   deprecated type prop - Enhancement
   [owncloud/web#5379](https://github.com/owncloud/web/issues/5379): Accessibility
   improvements - Enhancement
   [owncloud/web#11849](https://github.com/owncloud/web/pull/11849): Create spaces
   via admin settings - Enhancement
   [owncloud/web#12110](https://github.com/owncloud/web/pull/12110): Hide active
   editor action - Enhancement
   [owncloud/web#12239](https://github.com/owncloud/web/pull/12239): Add
   maintenance banner - Enhancement
   [owncloud/web#12243](https://github.com/owncloud/web/pull/12243): Add new
   supported language to md-editor - Enhancement
   [owncloud/web#12355](https://github.com/owncloud/web/pull/12355): Rephrase
   invite users to invite users to federate - Enhancement
   [owncloud/web#12424](https://github.com/owncloud/web/pull/12424): Use custom
   password generator - Enhancement
   [owncloud/web#12488](https://github.com/owncloud/web/pull/12488): Add OCM
   explanatory tooltips - Enhancement
   [owncloud/web#12508](https://github.com/owncloud/web/pull/12508): Add duplicate
   action - Enhancement
   [owncloud/web#12509](https://github.com/owncloud/web/pull/12509): Add flat list
   view - Enhancement
   [owncloud/web#12513](https://github.com/owncloud/web/pull/12513): Add loading
   spinner to submit button - Enhancement
   [owncloud/web#12519](https://github.com/owncloud/web/pull/12519): Improve file
   drop view UI - Enhancement
   [owncloud/web#12578](https://github.com/owncloud/web/pull/12578): Add Catalan to
   list of supported languages - Enhancement
   [owncloud/web#12584](https://github.com/owncloud/web/pull/12584): Disable space
   membership management when it's server-managed - Enhancement
   [owncloud/web#12648](https://github.com/owncloud/web/pull/12648): Add login
   error

   https://github.com/owncloud/ocis/pull/11420
   https://github.com/owncloud/web/releases/tag/v12.0.0

* Enhancement - Bump Web to 12.0.1: [#11420](https://github.com/owncloud/ocis/pull/11420)

   - Bugfix [owncloud/web#12697](https://github.com/owncloud/web/pull/12697): Md
   Text Html Preview Text gets Clipped

   https://github.com/owncloud/ocis/pull/11420
   https://github.com/owncloud/web/releases/tag/v12.0.1

* Enhancement - Remove deprecated envvars: [#11430](https://github.com/owncloud/ocis/pull/11430)

   Remove envvars that where deprecated on previous versions

   https://github.com/owncloud/ocis/pull/11430

* Enhancement - Update Bleve to v2.5.2: [#11441](https://github.com/owncloud/ocis/pull/11441)

   Updated blevesearch dependency with minor improvements to the search quality.

   https://github.com/owncloud/ocis/pull/11441

* Enhancement - Bump Web to 12.0.2: [#11444](https://github.com/owncloud/ocis/pull/11444)

   - Bugfix [owncloud/web#12575](https://github.com/owncloud/web/pull/12575):
   Ensure uniform distribution when generating password

   https://github.com/owncloud/ocis/pull/11444
   https://github.com/owncloud/web/releases/tag/v12.0.2

# Changelog for [7.1.3] (2025-05-27)

The following sections list the changes for 7.1.3.

[7.1.3]: https://github.com/owncloud/ocis/compare/v7.1.2...v7.1.3

## Summary

* Bugfix - Fix Share roles translation: [#11241](https://github.com/owncloud/ocis/pull/11241)
* Bugfix - Fix collaboration service LastModifiedDate: [#11328](https://github.com/owncloud/ocis/pull/11328)
* Bugfix - Fix translations in Settings: [#11361](https://github.com/owncloud/ocis/pull/11361)
* Enhancement - Limit length of tags: [#11231](https://github.com/owncloud/ocis/pull/11231)
* Enhancement - Bump Web to 11.3.4: [#12605](https://github.com/owncloud/web/pull/12605)

## Details

* Bugfix - Fix Share roles translation: [#11241](https://github.com/owncloud/ocis/pull/11241)

   We fixed the issue when the Share roles show a wrong translation after the user
   location has changed back to English.

   https://github.com/owncloud/ocis/issues/11025
   https://github.com/owncloud/ocis/pull/11241

* Bugfix - Fix collaboration service LastModifiedDate: [#11328](https://github.com/owncloud/ocis/pull/11328)

   Collaboration service now returns correct LastModifiedDate.

   https://github.com/owncloud/ocis/pull/11328

* Bugfix - Fix translations in Settings: [#11361](https://github.com/owncloud/ocis/pull/11361)

   Notification option translation where missing one string. This is fixed.

   https://github.com/owncloud/ocis/pull/11361
   https://github.com/owncloud/ocis/pull/11364

* Enhancement - Limit length of tags: [#11231](https://github.com/owncloud/ocis/pull/11231)

   We limited the length of tags to avoid DOS attacks against the ocis server.

   https://github.com/owncloud/ocis/pull/11231

* Enhancement - Bump Web to 11.3.4: [#12605](https://github.com/owncloud/web/pull/12605)

   - Bugfix [owncloud/web#12598](https://github.com/owncloud/web/pull/12598): Add
   src attribute to external app iframe - Bugfix
   [owncloud/web#12474](https://github.com/owncloud/web/pull/12474): Add tag
   characters limit

   https://github.com/owncloud/web/pull/12605
   https://github.com/owncloud/web/releases/tag/v11.3.4

# Changelog for [7.1.2] (2025-03-28)

The following sections list the changes for 7.1.2.

[7.1.2]: https://github.com/owncloud/ocis/compare/v7.1.1...v7.1.2

## Summary

* Bugfix - Fix pdf form creation: [#11163](https://github.com/owncloud/ocis/pull/11163)

## Details

* Bugfix - Fix pdf form creation: [#11163](https://github.com/owncloud/ocis/pull/11163)

   Fix pdf form creation for Onlyoffice. Adjust the file extension for Form to be
   PDF instead of DOCXF

   https://github.com/owncloud/ocis/issues/11164
   https://github.com/owncloud/ocis/pull/11163

# Changelog for [7.1.1] (2025-03-14)

The following sections list the changes for 7.1.1.

[7.1.1]: https://github.com/owncloud/ocis/compare/v7.1.0...v7.1.1

## Summary

* Bugfix - Fix translations of editor roles: [#11116](https://github.com/owncloud/ocis/pull/11116)
* Enhancement - Update Web to v11.3.1: [#11131](https://github.com/owncloud/ocis/pull/11131)

## Details

* Bugfix - Fix translations of editor roles: [#11116](https://github.com/owncloud/ocis/pull/11116)

   Uses the correct translations strings for ocis roles

   https://github.com/owncloud/ocis/pull/11116

* Enhancement - Update Web to v11.3.1: [#11131](https://github.com/owncloud/ocis/pull/11131)

   - Bugfix [owncloud/web#12225](https://github.com/owncloud/web/pull/12225):
   Broken title for public files link - Bugfix
   [owncloud/web#12226](https://github.com/owncloud/web/pull/12226): Disable
   password protected folders creation inside public links - Bugfix
   [owncloud/web#12240](https://github.com/owncloud/web/pull/12240): Add password
   policies to password protected folders - Bugfix
   [owncloud/web#12241](https://github.com/owncloud/web/pull/12241): Revert
   password protected folder creation on error - Bugfix
   [owncloud/web#12270](https://github.com/owncloud/web/pull/12270): Add password
   generator into password protected folders - Bugfix
   [owncloud/web#12297](https://github.com/owncloud/web/pull/12297): Two spaces are
   created at the same time when user tries to create a space

   https://github.com/owncloud/ocis/pull/11131
   https://github.com/owncloud/web/releases/tag/v11.3.1

# Changelog for [7.1.0] (2025-03-06)

The following sections list the changes for 7.1.0.

[7.1.0]: https://github.com/owncloud/ocis/compare/v7.0.0...v7.1.0

## Summary

* Bugfix - Update govips to 2.16.0: [#10378](https://github.com/owncloud/ocis/issues/10378)
* Bugfix - Share creation date is missing in invite response: [#10781](https://github.com/owncloud/ocis/pull/10781)
* Bugfix - Bump some golang dependencies: [#10795](https://github.com/owncloud/ocis/pull/10795)
* Bugfix - Allow to accepted invite after it was once deleted: [#10834](https://github.com/owncloud/ocis/pull/10834)
* Bugfix - Fix the mail notifications for the user light: [#10865](https://github.com/owncloud/ocis/pull/10865)
* Bugfix - Fix filtering of PostprocessingStepFinished events: [#10868](https://github.com/owncloud/ocis/pull/10868)
* Bugfix - Prevent empty email body for grouped email notifications: [#10869](https://github.com/owncloud/ocis/pull/10869)
* Bugfix - Consistently name roles: [#10871](https://github.com/owncloud/ocis/pull/10871)
* Bugfix - Fix grouped email notifications store key: [#10873](https://github.com/owncloud/ocis/pull/10873)
* Bugfix - Fix missing newline in grouped email: [#10883](https://github.com/owncloud/ocis/pull/10883)
* Bugfix - Fix email templates white spaces & new lines: [#10884](https://github.com/owncloud/ocis/pull/10884)
* Bugfix - Fix the ocm gateway connection pool: [#10916](https://github.com/owncloud/ocis/pull/10916)
* Bugfix - Add fallback for folder names: [#10932](https://github.com/owncloud/ocis/pull/10932)
* Bugfix - Allow view ocm shares: [#10944](https://github.com/owncloud/ocis/pull/10944)
* Bugfix - Fix Collaboration file extension check: [#10947](https://github.com/owncloud/ocis/issues/10947)
* Bugfix - Add Identities to education user: [#11016](https://github.com/owncloud/ocis/pull/11016)
* Bugfix - Bump libregraph api: [#11021](https://github.com/owncloud/ocis/pull/11021)
* Bugfix - Fix OCM create share: [#11047](https://github.com/owncloud/ocis/pull/11047)
* Bugfix - Fix update grants for  the OCM share: [#11052](https://github.com/owncloud/ocis/pull/11052)
* Enhancement - Part I: The user settings are extended by notifications preferences: [#10706](https://github.com/owncloud/ocis/pull/10706)
* Enhancement - Part II: Filtering of in-app notifications: [#10779](https://github.com/owncloud/ocis/pull/10779)
* Enhancement - Part III: Filtering of mail notifications: [#10792](https://github.com/owncloud/ocis/pull/10792)
* Enhancement - Translate Notification Settings: [#10812](https://github.com/owncloud/ocis/pull/10812)
* Enhancement - Part IV: Grouping of mail notifications: [#10838](https://github.com/owncloud/ocis/pull/10838)
* Enhancement - Update web to v11.1.0: [#10853](https://github.com/owncloud/ocis/pull/10853)
* Enhancement - Add tests for grouped emails: [#10885](https://github.com/owncloud/ocis/pull/10885)
* Enhancement - Use maintained forks: [#10886](https://github.com/owncloud/ocis/pull/10886)
* Enhancement - Add email notification for share removed event: [#10915](https://github.com/owncloud/ocis/pull/10915)
* Enhancement - Update Web to v1.11.1: [#10918](https://github.com/owncloud/ocis/pull/10918)
* Enhancement - Update Web to v1.11.2: [#10930](https://github.com/owncloud/ocis/pull/10930)
* Enhancement - Implement debug docker for arm64 platform: [#10940](https://github.com/owncloud/ocis/pull/10940)
* Enhancement - Add roles: [#10964](https://github.com/owncloud/ocis/pull/10964)
* Enhancement - Update Web to v1.11.3: [#10977](https://github.com/owncloud/ocis/pull/10977)
* Enhancement - Add the ocm notification handler: [#11005](https://github.com/owncloud/ocis/pull/11005)
* Enhancement - Add logging when a users space gets deleted: [#11037](https://github.com/owncloud/ocis/pull/11037)
* Enhancement - Add the ocm notification ShareChangePermission: [#11041](https://github.com/owncloud/ocis/pull/11041)
* Enhancement - Update Web to v11.2.0: [#11049](https://github.com/owncloud/ocis/pull/11049)
* Enhancement - Update Web to v11.3.0: [#11058](https://github.com/owncloud/ocis/pull/11058)
* Enhancement - Bump Reva: [#11083](https://github.com/owncloud/ocis/pull/11083)

## Details

* Bugfix - Update govips to 2.16.0: [#10378](https://github.com/owncloud/ocis/issues/10378)

   The update to govips 2.16.0 removes temporary access to /tmp that was introduced
   by govips.

   https://github.com/owncloud/ocis/issues/10378
   https://github.com/owncloud/ocis/pull/10943

* Bugfix - Share creation date is missing in invite response: [#10781](https://github.com/owncloud/ocis/pull/10781)

   The graph drives invite response now includes the `createdDateTime` field.

   https://github.com/owncloud/ocis/issues/10739
   https://github.com/owncloud/ocis/pull/10781

* Bugfix - Bump some golang dependencies: [#10795](https://github.com/owncloud/ocis/pull/10795)

   Bump dependencies "golang.org/x/crypto" and "golang.org/x/net"

   https://github.com/owncloud/ocis/pull/10795

* Bugfix - Allow to accepted invite after it was once deleted: [#10834](https://github.com/owncloud/ocis/pull/10834)

   Allowed to accepted invite even after it was once deleted on the invite receiver
   or invite creation side.

   https://github.com/owncloud/ocis/issues/10813
   https://github.com/owncloud/ocis/pull/10834

* Bugfix - Fix the mail notifications for the user light: [#10865](https://github.com/owncloud/ocis/pull/10865)

   Fix the default bundle-list for mail notification settings for the user light.

   https://github.com/owncloud/ocis/issues/10864
   https://github.com/owncloud/ocis/pull/10865

* Bugfix - Fix filtering of PostprocessingStepFinished events: [#10868](https://github.com/owncloud/ocis/pull/10868)

   https://github.com/owncloud/ocis/issues/10867
   https://github.com/owncloud/ocis/pull/10868

* Bugfix - Prevent empty email body for grouped email notifications: [#10869](https://github.com/owncloud/ocis/pull/10869)

   https://github.com/owncloud/ocis/pull/10869

* Bugfix - Consistently name roles: [#10871](https://github.com/owncloud/ocis/pull/10871)

   BundleUUIDRoleGuest has been renamed to BundleUUIDRoleUserLight for consistency
   reasons

   https://github.com/owncloud/ocis/pull/10871

* Bugfix - Fix grouped email notifications store key: [#10873](https://github.com/owncloud/ocis/pull/10873)

   Interval and user id is now separated by `_` (key schema:
   `${INTERVAL}_${USER_ID}`).

   https://github.com/owncloud/ocis/pull/10873

* Bugfix - Fix missing newline in grouped email: [#10883](https://github.com/owncloud/ocis/pull/10883)

   `\n` is now replaced by `<br>` in the HTML email body

   https://github.com/owncloud/ocis/pull/10883

* Bugfix - Fix email templates white spaces & new lines: [#10884](https://github.com/owncloud/ocis/pull/10884)

   Email templates now contain no unwanted white spaces & new lines if
   .CallToAction is nil

   https://github.com/owncloud/ocis/pull/10884

* Bugfix - Fix the ocm gateway connection pool: [#10916](https://github.com/owncloud/ocis/pull/10916)

   Fix the ocm gateway connection pool. Fix ocis dependency in the reva go.mod
   file. Bump the ocis version accordingly to the major version.

   https://github.com/owncloud/ocis/issues/10846
   https://github.com/owncloud/ocis/issues/10878
   https://github.com/owncloud/ocis/pull/10916

* Bugfix - Add fallback for folder names: [#10932](https://github.com/owncloud/ocis/pull/10932)

   Add translated `shared-with-me` fallback for folder names in the activitylog to
   avoid `{folder}` in the output.

   https://github.com/owncloud/ocis/issues/10906
   https://github.com/owncloud/ocis/pull/10932

* Bugfix - Allow view ocm shares: [#10944](https://github.com/owncloud/ocis/pull/10944)

   OCM shares with `view` permissions did not work. When opening them in weboffice
   an error would occur. This has been fixed.

   https://github.com/owncloud/ocis/pull/10944

* Bugfix - Fix Collaboration file extension check: [#10947](https://github.com/owncloud/ocis/issues/10947)

   Fixed Collaboration file extension check to case-insensitive comparison.

   https://github.com/owncloud/ocis/issues/10947
   https://github.com/owncloud/ocis/pull/10945

* Bugfix - Add Identities to education user: [#11016](https://github.com/owncloud/ocis/pull/11016)

   Education User where not created correctly. They were missing the Identities
   field

   https://github.com/owncloud/ocis/pull/11016

* Bugfix - Bump libregraph api: [#11021](https://github.com/owncloud/ocis/pull/11021)

   Bump the libregraph api to avoid a regression.

   https://github.com/owncloud/ocis/pull/11021

* Bugfix - Fix OCM create share: [#11047](https://github.com/owncloud/ocis/pull/11047)

   We fixed the OCM share fails on share creating if the federated instance is not
   reachable.

   https://github.com/owncloud/ocis/issues/11046
   https://github.com/owncloud/ocis/pull/11047

* Bugfix - Fix update grants for  the OCM share: [#11052](https://github.com/owncloud/ocis/pull/11052)

   Fix update grants for the OCM share

   https://github.com/owncloud/ocis/issues/11022
   https://github.com/owncloud/ocis/pull/11052

* Enhancement - Part I: The user settings are extended by notifications preferences: [#10706](https://github.com/owncloud/ocis/pull/10706)

   Part I: Users can now store their notifications preferences in the user settings

   https://github.com/owncloud/ocis/issues/10669
   https://github.com/owncloud/ocis/pull/10706

* Enhancement - Part II: Filtering of in-app notifications: [#10779](https://github.com/owncloud/ocis/pull/10779)

   Part II: In-app notifications are now filtered based on the notification
   preferences in the user settings

   https://github.com/owncloud/ocis/issues/10769
   https://github.com/owncloud/ocis/pull/10779

* Enhancement - Part III: Filtering of mail notifications: [#10792](https://github.com/owncloud/ocis/pull/10792)

   Part III: Mail notifications are now filtered based on the notification
   preferences in the user settings

   https://github.com/owncloud/ocis/issues/10790
   https://github.com/owncloud/ocis/pull/10792

* Enhancement - Translate Notification Settings: [#10812](https://github.com/owncloud/ocis/pull/10812)

   Translates the notification settings according to the users language preference.

   https://github.com/owncloud/ocis/pull/10812

* Enhancement - Part IV: Grouping of mail notifications: [#10838](https://github.com/owncloud/ocis/pull/10838)

   Part IV: Mail notifications can now be grouped on a daily or weekly basis

   https://github.com/owncloud/ocis/issues/10793
   https://github.com/owncloud/ocis/pull/10838

* Enhancement - Update web to v11.1.0: [#10853](https://github.com/owncloud/ocis/pull/10853)

   - Bugfix [owncloud/web#12040](https://github.com/owncloud/web/pull/12040):
   Preview app files visibility: #12040 - Bugfix
   [owncloud/web#12044](https://github.com/owncloud/web/pull/12044): Disable paste
   action in same folder: #12044 - Bugfix
   [owncloud/web#12045](https://github.com/owncloud/web/pull/12045): Do not push
   sidebar close action away: #12045 - Bugfix
   [owncloud/web#12045](https://github.com/owncloud/web/pull/12045): Update sidebar
   width on resize: #12045 - Bugfix
   [owncloud/web#12045](https://github.com/owncloud/web/pull/12045): Use correct
   breakpoints in sidebar: #12045 - Bugfix
   [owncloud/web#12050](https://github.com/owncloud/web/pull/12050): Show indirect
   shares on search page: #12050 - Bugfix
   [owncloud/web#12055](https://github.com/owncloud/web/pull/12055): Add more
   padding to input when clear action is visible: #12055 - Bugfix
   [owncloud/web#12058](https://github.com/owncloud/web/pull/12058): Use local
   state in sidebar in embed mode: #12058 - Bugfix
   [owncloud/web#12063](https://github.com/owncloud/web/pull/12063): Change opacity
   of disabled checkboxes: #12063 - Bugfix
   [owncloud/web#12074](https://github.com/owncloud/web/pull/12074): Refetch
   notifications settings on locale change: #12074 - Enhancement
   [owncloud/web#12010](https://github.com/owncloud/web/pull/12010): Add
   notifications settings: #12010 - Enhancement
   [owncloud/web#12054](https://github.com/owncloud/web/pull/12054): Use generic
   private link error: #12054

   https://github.com/owncloud/ocis/pull/10853
   https://github.com/owncloud/web/releases/tag/v11.1.0

* Enhancement - Add tests for grouped emails: [#10885](https://github.com/owncloud/ocis/pull/10885)

   https://github.com/owncloud/ocis/pull/10885

* Enhancement - Use maintained forks: [#10886](https://github.com/owncloud/ocis/pull/10886)

   Switches away from unmainatained forks.

   https://github.com/owncloud/ocis/pull/10886

* Enhancement - Add email notification for share removed event: [#10915](https://github.com/owncloud/ocis/pull/10915)

   https://github.com/owncloud/ocis/issues/10904
   https://github.com/owncloud/ocis/pull/10915

* Enhancement - Update Web to v1.11.1: [#10918](https://github.com/owncloud/ocis/pull/10918)

   - Bugfix [owncloud/web#12112](https://github.com/owncloud/web/pull/12112):
   Optionally access preview app route query: #12112 - Bugfix
   [owncloud/web#12118](https://github.com/owncloud/web/pull/12118): Change
   federated share icon: #12118 - Bugfix
   [owncloud/web#12118](https://github.com/owncloud/web/pull/12118): Improve
   federated share icon contrast: #12118 - Bugfix
   [owncloud/web#12119](https://github.com/owncloud/web/pull/12119): Show external
   share indicator: #12119

   https://github.com/owncloud/ocis/pull/10918
   https://github.com/owncloud/web/releases/tag/v11.1.1

* Enhancement - Update Web to v1.11.2: [#10930](https://github.com/owncloud/ocis/pull/10930)

   - Bugfix [owncloud/ocis#10891](https://github.com/owncloud/ocis/issues/10891):
   Rename ScienceMesh: #10891

   https://github.com/owncloud/ocis/pull/10930
   https://github.com/owncloud/web/releases/tag/v11.1.2

* Enhancement - Implement debug docker for arm64 platform: [#10940](https://github.com/owncloud/ocis/pull/10940)

   https://github.com/owncloud/ocis/pull/10940

* Enhancement - Add roles: [#10964](https://github.com/owncloud/ocis/pull/10964)

   Add EditorListGrantsWithVersions and FileEditorListGrantsWithVersions roles.

   https://github.com/owncloud/ocis/issues/10747
   https://github.com/owncloud/ocis/pull/10964

* Enhancement - Update Web to v1.11.3: [#10977](https://github.com/owncloud/ocis/pull/10977)

   - Bugfix [owncloud/web#12156](https://github.com/owncloud/web/pull/12156):
   Replace text editor: #12156

   https://github.com/owncloud/ocis/pull/10977
   https://github.com/owncloud/web/releases/tag/v11.1.3

* Enhancement - Add the ocm notification handler: [#11005](https://github.com/owncloud/ocis/pull/11005)

   Added the ocm notification handler that allows receiving a notification from a
   remote party about changes to a previously known entity.

   https://github.com/owncloud/enterprise/issues/7075
   https://github.com/owncloud/ocis/pull/11005

* Enhancement - Add logging when a users space gets deleted: [#11037](https://github.com/owncloud/ocis/pull/11037)

   When deleting a user, their personal space will also be deleted. When this
   operation fails the logging in the graph service was insufficient. We added some
   logs.

   https://github.com/owncloud/ocis/pull/11037

* Enhancement - Add the ocm notification ShareChangePermission: [#11041](https://github.com/owncloud/ocis/pull/11041)

   Added the ocm notification ShareChangePermission that allows to synchronize the
   permissions of a share between the federated instances.

   https://github.com/owncloud/ocis/pull/11041

* Enhancement - Update Web to v11.2.0: [#11049](https://github.com/owncloud/ocis/pull/11049)

   - Bugfix [owncloud/web#12146](https://github.com/owncloud/web/pull/12146):
   Create password protected folder in personal space - Bugfix
   [owncloud/web#12194](https://github.com/owncloud/web/pull/12194): Display shared
   file versions - Bugfix
   [owncloud/web#12175](https://github.com/owncloud/web/pull/12175): Do not render
   default actions in context menu - Bugfix
   [owncloud/web#12204](https://github.com/owncloud/web/pull/12204): Enable
   external shares editing - Bugfix
   [owncloud/web#12177](https://github.com/owncloud/web/pull/12177): Open password
   protected folder when clicking on its name - Bugfix
   [owncloud/web#12206](https://github.com/owncloud/web/pull/12206): Preserve
   current language in password protected folder view - Bugfix
   [owncloud/web#12205](https://github.com/owncloud/web/pull/12205): Prevent
   password protected folder move - Bugfix
   [owncloud/web#12195](https://github.com/owncloud/web/pull/12195): Sanitize
   content from md-editor-v3 - Bugfix
   [owncloud/web#12178](https://github.com/owncloud/web/pull/12178): Skip upload
   dropzone init when files view is missing - Enhancement
   [owncloud/web#12206](https://github.com/owncloud/web/pull/12206): Add `lang` URL
   query parameter - Enhancement
   [owncloud/web#12142](https://github.com/owncloud/web/pull/12142): Add password
   protected folders handler - Enhancement
   [owncloud/web#12137](https://github.com/owncloud/web/pull/12137): Add password
   protected folders app - Enhancement
   [owncloud/web#12188](https://github.com/owncloud/web/pull/12188): Allow camera
   in external app iframe - Enhancement
   [owncloud/web#12142](https://github.com/owncloud/web/pull/12142): Control more
   elements visibility via URL query - Enhancement
   [owncloud/web#12152](https://github.com/owncloud/web/pull/12152): Delete
   password protected folders - Enhancement
   [owncloud/web#12046](https://github.com/owncloud/web/pull/12046): Disable
   resources in delete queue - Enhancement
   [owncloud/web#12145](https://github.com/owncloud/web/pull/12145): Display
   default actions in context menu - Enhancement
   [owncloud/web#12145](https://github.com/owncloud/web/pull/12145): Hide password
   protected folders action - Enhancement
   [owncloud/web#12145](https://github.com/owncloud/web/pull/12145): Hide password
   protected folders extension - Enhancement
   [owncloud/web#12141](https://github.com/owncloud/web/pull/12141): Password
   protected folder permissions - Enhancement
   [owncloud/web#12146](https://github.com/owncloud/web/pull/12146): Recursive
   folder creation

   https://github.com/owncloud/ocis/pull/11049
   https://github.com/owncloud/web/releases/tag/v11.2.0

* Enhancement - Update Web to v11.3.0: [#11058](https://github.com/owncloud/ocis/pull/11058)

   - Enhancement [owncloud/web#12104](https://github.com/owncloud/web/pull/12104):
   Add psec file icon - Enhancement
   [owncloud/web#12105](https://github.com/owncloud/web/pull/12105): Handle
   extensions without editor - Enhancement
   [owncloud/web#12109](https://github.com/owncloud/web/pull/12109): Add custom
   handler to file extensions

   https://github.com/owncloud/ocis/pull/11058
   https://github.com/owncloud/web/releases/tag/v11.3.0

* Enhancement - Bump Reva: [#11083](https://github.com/owncloud/ocis/pull/11083)

   Bumps reva version to 2.27.7

   https://github.com/owncloud/ocis/pull/11083

# Changelog for [7.0.0] (2024-12-17)

The following sections list the changes for 7.0.0.

[7.0.0]: https://github.com/owncloud/ocis/compare/v5.0.9...v7.0.0

## Summary

* Bugfix - Generate short tokens to be used as access tokens for WOPI: [#10391](https://github.com/owncloud/ocis/pull/10391)
* Bugfix - Fix put relative wopi operation for microsoft: [#10403](https://github.com/owncloud/ocis/pull/10403)
* Bugfix - Make SSE keepalive interval configurable: [#10411](https://github.com/owncloud/ocis/pull/10411)
* Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: [#10425](https://github.com/owncloud/ocis/pull/10425)
* Bugfix - Micro registry cache fixes: [#10429](https://github.com/owncloud/ocis/pull/10429)
* Bugfix - Fix the memlimit loglevel: [#10433](https://github.com/owncloud/ocis/pull/10433)
* Bugfix - Log GRPC requests in debug mode: [#10438](https://github.com/owncloud/ocis/pull/10438)
* Bugfix - Restart Postprocessing properly: [#10439](https://github.com/owncloud/ocis/pull/10439)
* Bugfix - Allow to configure data server URL for ocm: [#10440](https://github.com/owncloud/ocis/pull/10440)
* Bugfix - Respect proxy url when validating proofkeys: [#10462](https://github.com/owncloud/ocis/pull/10462)
* Bugfix - Return wopi lock header in get lock response: [#10470](https://github.com/owncloud/ocis/pull/10470)
* Bugfix - 'ocis backup consistency' fixed for file revisions: [#10493](https://github.com/owncloud/ocis/pull/10493)
* Bugfix - Wait for services to be ready before registering them: [#10498](https://github.com/owncloud/ocis/pull/10498)
* Bugfix - Fix 0-byte file uploads: [#10500](https://github.com/owncloud/ocis/pull/10500)
* Bugfix - Fixed `sharedWithMe` response for OCM shares: [#10501](https://github.com/owncloud/ocis/pull/10501)
* Bugfix - Fix gateway nats checks: [#10502](https://github.com/owncloud/ocis/pull/10502)
* Bugfix - Fix idp guest role default assignment: [#10511](https://github.com/owncloud/ocis/pull/10511)
* Bugfix - Remove mbreaker: [#10524](https://github.com/owncloud/ocis/pull/10524)
* Bugfix - Fix impersonated request user mismatch: [#10548](https://github.com/owncloud/ocis/pull/10548)
* Bugfix - Fix federated sharing when using an external IDP: [#10567](https://github.com/owncloud/ocis/pull/10567)
* Bugfix - Fix node cache ttl updates: [#10575](https://github.com/owncloud/ocis/pull/10575)
* Bugfix - We now limit the number of workers of the jsoncs3 share manager: [#10578](https://github.com/owncloud/ocis/pull/10578)
* Bugfix - Set MaxConcurrency to 1: [#10580](https://github.com/owncloud/ocis/pull/10580)
* Bugfix - Reuse go-micro service clients: [#10582](https://github.com/owncloud/ocis/pull/10582)
* Bugfix - Make collaboration service use a gateway selector: [#10584](https://github.com/owncloud/ocis/pull/10584)
* Bugfix - Return an error if we can't get the keys and ensure they're cached: [#10590](https://github.com/owncloud/ocis/pull/10590)
* Bugfix - Fix status code for thumbnail requests: [#10592](https://github.com/owncloud/ocis/pull/10592)
* Bugfix - Fix the activity field mapping: [#10593](https://github.com/owncloud/ocis/pull/10593)
* Bugfix - Fix deny access for graph roles: [#10627](https://github.com/owncloud/ocis/pull/10627)
* Bugfix - Fix link activity message: [#10663](https://github.com/owncloud/ocis/pull/10663)
* Bugfix - Fix possible race condition when a thumbnails is stored in the FS: [#10693](https://github.com/owncloud/ocis/pull/10693)
* Bugfix - Skip fetching members: [#10701](https://github.com/owncloud/ocis/pull/10701)
* Bugfix - Fix FileInfo BreadcrumbFolderURL: [#10718](https://github.com/owncloud/ocis/pull/10718)
* Bugfix - Fix graph drives response for federated shares: [#10730](https://github.com/owncloud/ocis/pull/10730)
* Bugfix - GetLastModified property in the REPORT response will use RFC1123 format: [#10738](https://github.com/owncloud/ocis/pull/10738)
* Bugfix - Unifi logging: [#10743](https://github.com/owncloud/ocis/pull/10743/)
* Bugfix - Fix FileInfo BreadcrumbFolderURL upd: [#10757](https://github.com/owncloud/ocis/pull/10757)
* Bugfix - Bump Reva: [#10766](https://github.com/owncloud/ocis/pull/10766)
* Enhancement - Create thumbnails for GGP MIME types: [#10304](https://github.com/owncloud/ocis/pull/10304)
* Enhancement - Include a product name in the collaboration service: [#10335](https://github.com/owncloud/ocis/pull/10335)
* Enhancement - Add web extensions to the ocis_full example: [#10399](https://github.com/owncloud/ocis/pull/10399)
* Enhancement - Remove deprecated CLI commands: [#10432](https://github.com/owncloud/ocis/pull/10432)
* Enhancement - Bump cs3api: [#10449](https://github.com/owncloud/ocis/pull/10449)
* Enhancement - Bump reva to latest: [#10472](https://github.com/owncloud/ocis/pull/10472)
* Enhancement - Concurrent userlog processing: [#10504](https://github.com/owncloud/ocis/pull/10504)
* Enhancement - Concurrent autoaccept for shares: [#10507](https://github.com/owncloud/ocis/pull/10507)
* Enhancement - Fetch shared resource metadata concurrently in graph: [#10683](https://github.com/owncloud/ocis/pull/10683)
* Enhancement - Update web to v11.0.6: [#10755](https://github.com/owncloud/ocis/pull/10755)

## Details

* Bugfix - Generate short tokens to be used as access tokens for WOPI: [#10391](https://github.com/owncloud/ocis/pull/10391)

   Currently, the access tokens being used might be too long. In particular,
   Microsoft Office Online complains about the URL (which contains the access
   token) is too long and refuses to work.

   https://github.com/owncloud/ocis/pull/10391

* Bugfix - Fix put relative wopi operation for microsoft: [#10403](https://github.com/owncloud/ocis/pull/10403)

   We fixed a bug in the put relative wopi operation for microsoft. The response
   now contains the correct properties.

   https://github.com/owncloud/ocis/pull/10403

* Bugfix - Make SSE keepalive interval configurable: [#10411](https://github.com/owncloud/ocis/pull/10411)

   To prevent intermediate proxies from closing the SSE connection admins can now
   configure a `SSE_KEEPALIVE_INTERVAL`.

   https://github.com/owncloud/ocis/pull/10411

* Bugfix - Removed 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' setting: [#10425](https://github.com/owncloud/ocis/pull/10425)

   The config option 'OCM_OCM_PROVIDER_AUTHORIZER_VERIFY_REQUEST_HOSTNAME' was
   removed from the OCM service. The additional security provided by this setting
   is somewhat questionable and only provided in very specific setups.

   We are not going through the normal deprecation process for this setting, as it
   was never really working anyway. If you have this setting in your configuration,
   it will be ignored. You can safely remove it.

   https://github.com/owncloud/ocis/issues/10355
   https://github.com/owncloud/ocis/pull/10425

* Bugfix - Micro registry cache fixes: [#10429](https://github.com/owncloud/ocis/pull/10429)

   We now invalidate cache entries when any of the nodes was not updated.

   https://github.com/owncloud/ocis/pull/10429

* Bugfix - Fix the memlimit loglevel: [#10433](https://github.com/owncloud/ocis/pull/10433)

   We set the memlimit default loglevel to error.

   https://github.com/owncloud/ocis/issues/10427
   https://github.com/owncloud/ocis/pull/10433

* Bugfix - Log GRPC requests in debug mode: [#10438](https://github.com/owncloud/ocis/pull/10438)

   When log level is set to debug we will now also log grpc requests.

   https://github.com/owncloud/ocis/pull/10438

* Bugfix - Restart Postprocessing properly: [#10439](https://github.com/owncloud/ocis/pull/10439)

   Properly differentiate between resume and restart postprocessing.

   https://github.com/owncloud/ocis/pull/10439

* Bugfix - Allow to configure data server URL for ocm: [#10440](https://github.com/owncloud/ocis/pull/10440)

   We introduced the `OCM_OCM_STORAGE_DATA_SERVER_URL` setting to fix a bug when
   downloading files from an OCM share. Before the data server URL defaulted to the
   listen address of the OCM server, which did not work when using 0.0.0.0 as the
   listen address.

   https://github.com/owncloud/ocis/issues/10358
   https://github.com/owncloud/ocis/pull/10440

* Bugfix - Respect proxy url when validating proofkeys: [#10462](https://github.com/owncloud/ocis/pull/10462)

   We fixed a bug where the proxied wopi URL was not used when validating
   proofkeys. This caused the validation to fail when the proxy was used.

   https://github.com/owncloud/ocis/pull/10462

* Bugfix - Return wopi lock header in get lock response: [#10470](https://github.com/owncloud/ocis/pull/10470)

   We fixed a bug where the wopi lock header was not returned in the get lock
   response. This is now fixed and the wopi validator tests are passing.

   https://github.com/owncloud/ocis/pull/10470

* Bugfix - 'ocis backup consistency' fixed for file revisions: [#10493](https://github.com/owncloud/ocis/pull/10493)

   A bug was fixed that caused the 'ocis backup consistency' command to incorrectly
   report inconistencies when file revisions with a zero value for the nano-second
   part of the timestamp were present.

   https://github.com/owncloud/ocis/issues/9498
   https://github.com/owncloud/ocis/pull/10493

* Bugfix - Wait for services to be ready before registering them: [#10498](https://github.com/owncloud/ocis/pull/10498)

   https://github.com/owncloud/ocis/pull/10498

* Bugfix - Fix 0-byte file uploads: [#10500](https://github.com/owncloud/ocis/pull/10500)

   We fixed an issue where 0-byte files upload did not return the Location header.

   https://github.com/owncloud/ocis/issues/10469
   https://github.com/owncloud/ocis/pull/10500

* Bugfix - Fixed `sharedWithMe` response for OCM shares: [#10501](https://github.com/owncloud/ocis/pull/10501)

   OCM shares returned in the `sharedWithMe` response did not have the `mimeType`
   property populated correctly.

   https://github.com/owncloud/ocis/issues/10495
   https://github.com/owncloud/ocis/pull/10501

* Bugfix - Fix gateway nats checks: [#10502](https://github.com/owncloud/ocis/pull/10502)

   We now only check if nats is available when the gateway actually uses it.
   Furthermore, we added a backoff for checking the readys endpoint.

   https://github.com/owncloud/ocis/pull/10502

* Bugfix - Fix idp guest role default assignment: [#10511](https://github.com/owncloud/ocis/pull/10511)

   We fixed an idp guest role default assignment.

   https://github.com/owncloud/ocis/issues/10474
   https://github.com/owncloud/ocis/pull/10511

* Bugfix - Remove mbreaker: [#10524](https://github.com/owncloud/ocis/pull/10524)

   The circuit breaker is not handle correctly and leads therefore to more issues
   than it solves. We removed it.

   https://github.com/owncloud/ocis/pull/10524

* Bugfix - Fix impersonated request user mismatch: [#10548](https://github.com/owncloud/ocis/pull/10548)

   We fixed a user id and name mismatch in the impersonated auth-app API request

   https://github.com/owncloud/ocis/issues/10292
   https://github.com/owncloud/ocis/pull/10548

* Bugfix - Fix federated sharing when using an external IDP: [#10567](https://github.com/owncloud/ocis/pull/10567)

   We fixed a bug that caused federated sharing to fail, when the federated oCIS
   instances where sharing the same external IDP.

   https://github.com/owncloud/ocis/pull/10567
   https://github.com/cs3org/reva/pull/4933

* Bugfix - Fix node cache ttl updates: [#10575](https://github.com/owncloud/ocis/pull/10575)

   We now only udpate the TTL of the node that is created or updated.

   https://github.com/owncloud/ocis/pull/10575

* Bugfix - We now limit the number of workers of the jsoncs3 share manager: [#10578](https://github.com/owncloud/ocis/pull/10578)

   We now restrict the number of workers that look up shares to 5. The number can
   be changed with `SHARING_USER_JSONCS3_MAX_CONCURRENCY` or
   `OCIS_MAX_CONCURRENCY`.

   https://github.com/owncloud/ocis/pull/10578
   https://github.com/owncloud/ocis/pull/10552

* Bugfix - Set MaxConcurrency to 1: [#10580](https://github.com/owncloud/ocis/pull/10580)

   Set MaxConcurrency for frontend and userlog and sharing services to 1. Too many
   workers will negatively impact performance on small machines.

   https://github.com/owncloud/ocis/pull/10580
   https://github.com/owncloud/ocis/pull/10557

* Bugfix - Reuse go-micro service clients: [#10582](https://github.com/owncloud/ocis/pull/10582)

   Go micro clients must not be reinitialized. The internal selector will spawn a
   new go routine to watch for registry changes.

   https://github.com/owncloud/ocis/pull/10582

* Bugfix - Make collaboration service use a gateway selector: [#10584](https://github.com/owncloud/ocis/pull/10584)

   https://github.com/owncloud/ocis/pull/10584

* Bugfix - Return an error if we can't get the keys and ensure they're cached: [#10590](https://github.com/owncloud/ocis/pull/10590)

   Previously, there was an issue where we could get an error while getting the
   public keys from the /hosting/discovery endpoint but we're returning a wrong
   success value instead. This is fixed now and we're returning the error.

   In addition, the public keys weren't being cached, so we hit the
   /hosting/discovery endpoint every time we need to use the public keys. The keys
   are now cached so we don't need to hit the endpoint more than what we need.

   https://github.com/owncloud/ocis/pull/10590

* Bugfix - Fix status code for thumbnail requests: [#10592](https://github.com/owncloud/ocis/pull/10592)

   We fixed the status code returned by the thumbnails service when the image
   source for a thumbnail exceeds the configured maximum dimensions or file size.
   The service now returns a 403 Forbidden status code instead of a 500 Internal
   Server Error status code.

   https://github.com/owncloud/ocis/issues/10589
   https://github.com/owncloud/ocis/pull/10592

* Bugfix - Fix the activity field mapping: [#10593](https://github.com/owncloud/ocis/pull/10593)

   https://github.com/owncloud/ocis/issues/10228
   https://github.com/owncloud/ocis/pull/10593
   Fixed
   the
   activity
   field
   mapping

* Bugfix - Fix deny access for graph roles: [#10627](https://github.com/owncloud/ocis/pull/10627)

   We added a unified role "Cannot access" to prevent a regression when switching
   the share implementation to the graph API. This role is now used to deny access
   to a resource.The new role is not enabled by default. The whole deny feature is
   still experimental.

   https://github.com/owncloud/ocis/pull/10627

* Bugfix - Fix link activity message: [#10663](https://github.com/owncloud/ocis/pull/10663)

   We changed the link token to display name in the activity message.

   https://github.com/owncloud/ocis/issues/10295
   https://github.com/owncloud/ocis/pull/10663

* Bugfix - Fix possible race condition when a thumbnails is stored in the FS: [#10693](https://github.com/owncloud/ocis/pull/10693)

   A race condition could cause the thumbnail service to return a thumbnail with 0
   bytes or with partial content. In order to fix this, the service will create a
   temporary file with the contents and then rename that file to its final
   location.

   https://github.com/owncloud/ocis/pull/10693

* Bugfix - Skip fetching members: [#10701](https://github.com/owncloud/ocis/pull/10701)

   We now skip fetching group members when they are not needed.

   https://github.com/owncloud/ocis/pull/10701

* Bugfix - Fix FileInfo BreadcrumbFolderURL: [#10718](https://github.com/owncloud/ocis/pull/10718)

   We fixed the FileInfo.BreadcrumbFolderURL in a collaboration api"

   https://github.com/owncloud/ocis/pull/10718

* Bugfix - Fix graph drives response for federated shares: [#10730](https://github.com/owncloud/ocis/pull/10730)

   Federated shares where erroneously showing up in the /me/drives response on the
   graph API.

   https://github.com/owncloud/ocis/issues/10689
   https://github.com/owncloud/ocis/pull/10730

* Bugfix - GetLastModified property in the REPORT response will use RFC1123 format: [#10738](https://github.com/owncloud/ocis/pull/10738)

   This will follow the standard and will also match the format of the same
   property in the PROPFIND response

   https://github.com/owncloud/ocis/pull/10738

* Bugfix - Unifi logging: [#10743](https://github.com/owncloud/ocis/pull/10743/)

   We fixed some cases where we did not use the correct logger.

   https://github.com/owncloud/ocis/pull/10743/

* Bugfix - Fix FileInfo BreadcrumbFolderURL upd: [#10757](https://github.com/owncloud/ocis/pull/10757)

   Made GetScopeByKeyPrefix function as a private method of the FileConnector

   https://github.com/owncloud/ocis/pull/10757

* Bugfix - Bump Reva: [#10766](https://github.com/owncloud/ocis/pull/10766)

   Bumps reva version to 2.27.0

  *   Bugfix [cs3org/reva#4985](https://github.com/cs3org/reva/pull/4985): Drop unneeded session locks
  *   Bugfix [cs3org/reva#5000](https://github.com/cs3org/reva/pull/5000): Fix ceph build
  *   Bugfix [cs3org/reva#4989](https://github.com/cs3org/reva/pull/4989): Deleting OCM share also updates storageprovider
  *   Enhancement [cs3org/reva#4998](https://github.com/cs3org/reva/pull/4998): Emit event when an ocm share is received
  *   Enhancement [cs3org/reva#4996](https://github.com/cs3org/reva/pull/4996): Get rid of some cases of unstructured logging

   Bumps reva version to 2.26.8

  *   Fix [cs3org/reva#4983](https://github.com/cs3org/reva/pull/4983): Delete stale shares in the jsoncs3 share manager
  *   Fix [cs3org/reva#4963](https://github.com/cs3org/reva/pull/4963): Fix name and displayName in an ocm
  *   Fix [cs3org/reva#4968](https://github.com/cs3org/reva/pull/4968): Jsoncs3 cache fixes
  *   Fix [cs3org/reva#4928](https://github.com/cs3org/reva/pull/4928): Propagate lock in PROPPATCH
  *   Fix [cs3org/reva#4971](https://github.com/cs3org/reva/pull/4971): Use manager to list shares
  *   Fix [cs3org/reva#4978](https://github.com/cs3org/reva/pull/4978): We added more trace spans in decomposedfs
  *   Fix [cs3org/reva#4921](https://github.com/cs3org/reva/pull/4921): Polish propagation related code

   Bugfix: Bump Reva to v2.26.7

  * Fix [cs3org/reva#4964](https://github.com/cs3org/reva/issues/4964): Fix a wrong error code when approvider creates a new file

   Bump Reva to v2.26.6

  * Fix [cs3org/reva#4955](https://github.com/cs3org/reva/issues/4955): Allow small clock skew in reva token validation
  * Fix [cs3org/reva#4929](https://github.com/cs3org/reva/issues/4929): Fix flaky posixfs integration tests
  * Fix [cs3org/reva#4953](https://github.com/cs3org/reva/issues/4953): Avoid gateway panics
  * Fix [cs3org/reva#4959](https://github.com/cs3org/reva/issues/4959): Fix missing file touched event
  * Fix [cs3org/reva#4933](https://github.com/cs3org/reva/issues/4933): Fix federated sharing when using an external identity provider
  * Fix [cs3org/reva#4935](https://github.com/cs3org/reva/issues/4935): Enable datatx log
  * Fix [cs3org/reva#4936](https://github.com/cs3org/reva/issues/4936): Do not delete mlock files
  * Fix [cs3org/reva#4954](https://github.com/cs3org/reva/issues/4954): Prevent a panic when logging an error
  * Fix [cs3org/reva#4956](https://github.com/cs3org/reva/issues/4956): Improve posixfs error handling and logging
  * Fix [cs3org/reva#4951](https://github.com/cs3org/reva/issues/4951): Pass the initialized logger down the stack

   Bugfix: Bump Reva to v2.26.5

  * Fix [cs3org/reva#4926](https://github.com/cs3org/reva/issues/4926): Make etag always match content on downloads
  * Fix [cs3org/reva#4920](https://github.com/cs3org/reva/issues/4920): Return correct status codes for simple uploads
  * Fix [cs3org/reva#4924](https://github.com/cs3org/reva/issues/4924): Fix sync propagation
  * Fix [cs3org/reva#4916](https://github.com/cs3org/reva/issues/4916): Improve posixfs stability and performanc

   Enhancement: Bump reva to 2.26.4

  *   Bugfix [cs3org/reva#4917](https://github.com/cs3org/reva/pull/4917): Fix 0-byte file uploads
  *   Bugfix [cs3org/reva#4918](https://github.com/cs3org/reva/pull/4918): Fix app templates

   Bump reva to 2.26.3

  *   Bugfix [cs3org/reva#4908](https://github.com/cs3org/reva/pull/4908): Add checksum to OCM storageprovider responses
  *   Enhancement [cs3org/reva#4910](https://github.com/cs3org/reva/pull/4910): Bump cs3api
  *   Enhancement [cs3org/reva#4909](https://github.com/cs3org/reva/pull/4909): Bump cs3api
  *   Enhancement [cs3org/reva#4906](https://github.com/cs3org/reva/pull/4906): Bump cs3api

   Bump reva to 2.26.2

  *   Enhancement [cs3org/reva#4897](https://github.com/cs3org/reva/pull/4897): Fix remaining quota calculation
  *   Bugfix      [cs3org/reva#4902](https://github.com/cs3org/reva/pull/4902): Fix quota calculation

   https://github.com/owncloud/ocis/pull/10766
   https://github.com/owncloud/ocis/pull/10735
   https://github.com/owncloud/ocis/pull/10612
   https://github.com/owncloud/ocis/pull/10552
   https://github.com/owncloud/ocis/pull/10539
   https://github.com/owncloud/ocis/pull/10419

* Enhancement - Create thumbnails for GGP MIME types: [#10304](https://github.com/owncloud/ocis/pull/10304)

   Creates thumbnails for newly added ggp files

   https://github.com/owncloud/ocis/pull/10304

* Enhancement - Include a product name in the collaboration service: [#10335](https://github.com/owncloud/ocis/pull/10335)

   The product name will allow using a different app name. For example, a "CoolBox"
   app name might use a branded Collabora instance by using "Collabora" as product
   name.

   https://github.com/owncloud/ocis/pull/10335
   https://github.com/owncloud/ocis/pull/10490

* Enhancement - Add web extensions to the ocis_full example: [#10399](https://github.com/owncloud/ocis/pull/10399)

   We added some of the web extensions from ownCloud to the ocis_full docker
   compose example.

   - importer - draw-io - external-sites - json-viewer - unzip - progressbars

   These can be enabled in the .env file one by one.

   Read more about ocis extensions in
   https://github.com/owncloud/web-extensions/blob/main/README.md

   https://github.com/owncloud/ocis/pull/10399

* Enhancement - Remove deprecated CLI commands: [#10432](https://github.com/owncloud/ocis/pull/10432)

   We removed the following deprecated CLI commands: `ocis storage-users uploads
   list` `ocis storage-users uploads clean`

   https://github.com/owncloud/ocis/issues/10428
   https://github.com/owncloud/ocis/pull/10432

* Enhancement - Bump cs3api: [#10449](https://github.com/owncloud/ocis/pull/10449)

   https://github.com/owncloud/ocis/pull/10449

* Enhancement - Bump reva to latest: [#10472](https://github.com/owncloud/ocis/pull/10472)

   https://github.com/owncloud/ocis/pull/10472

* Enhancement - Concurrent userlog processing: [#10504](https://github.com/owncloud/ocis/pull/10504)

   We now start multiple go routines that process events. The default of 5
   goroutines can be changed with the new `USERLOG_MAX_CONCURRENCY` environment
   variable.

   https://github.com/owncloud/ocis/pull/10504

* Enhancement - Concurrent autoaccept for shares: [#10507](https://github.com/owncloud/ocis/pull/10507)

   Shares for groups are now concurrently accepted. Tha default of 25 goroutinges
   can be changed with the new `FRONTEND_MAX_CONCURRENCY` environment variable.

   https://github.com/owncloud/ocis/pull/10507
   https://github.com/owncloud/ocis/pull/10476

* Enhancement - Fetch shared resource metadata concurrently in graph: [#10683](https://github.com/owncloud/ocis/pull/10683)

   We now concurrently stat shared resources when listing shares

   https://github.com/owncloud/ocis/pull/10683

* Enhancement - Update web to v11.0.6: [#10755](https://github.com/owncloud/ocis/pull/10755)

   - Bugfix [owncloud/web#11992](https://github.com/owncloud/web/pull/11992): OCM
   invite flow - Bugfix
   [owncloud/web#11997](https://github.com/owncloud/web/pull/11997): Change search
   scope without search term - Bugfix
   [owncloud/web#11998](https://github.com/owncloud/web/pull/11998): Do not load
   version when sidebar is closed - Bugfix
   [owncloud/web#12000](https://github.com/owncloud/web/pull/12000): Use only space
   resource with driveType "project" as space in sidebar - Bugfix
   [owncloud/web#12002](https://github.com/owncloud/web/pull/12002): OCM share
   editing - Bugfix
   [owncloud/web#12002](https://github.com/owncloud/web/pull/12002): OCM share
   recipient issuer - Bugfix
   [owncloud/web#12008](https://github.com/owncloud/web/pull/12008): Missing
   activities on Shared with me page - Bugfix
   [owncloud/web#12010](https://github.com/owncloud/web/pull/12010): Sidebar file
   info for shares - Bugfix
   [owncloud/web#12012](https://github.com/owncloud/web/pull/12012): Show missing
   role name in link share panel - Bugfix
   [owncloud/web#12013](https://github.com/owncloud/web/pull/12013): Missing
   translations for share type filters - Bugfix
   [owncloud/web#12022](https://github.com/owncloud/web/pull/12022): Permanent link
   for shares

   We updated ownCloud Web to v11.0.4. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#11870](https://github.com/owncloud/web/issues/11870):
   Preview image retries postprocessing - Bugfix
   [owncloud/web#11883](https://github.com/owncloud/web/issues/11883): Preview app
   Shared with me page - Bugfix
   [owncloud/web#11897](https://github.com/owncloud/web/issues/11897): "Save as" /
   "Open" when embed delegate authentication is enabled - Bugfix
   [owncloud/web#11900](https://github.com/owncloud/web/issues/11900): App top bar
   does not show location when shared file is opened - Bugfix
   [owncloud/web#11900](https://github.com/owncloud/web/issues/11900): Open from
   app and Save As feature broken when opened via shared file - Bugfix
   [owncloud/web#11904](https://github.com/owncloud/web/issues/11904): Public
   folder reload - Bugfix
   [owncloud/web#11916](https://github.com/owncloud/web/issues/11916): Fix order in
   roles drop down - Bugfix
   [owncloud/web#11923](https://github.com/owncloud/web/issues/11923): Allow create
   template with different editors - Bugfix
   [owncloud/web#11924](https://github.com/owncloud/web/issues/11924): Extension
   actions in right sidebar - Bugfix
   [owncloud/web#11929](https://github.com/owncloud/web/issues/11929): Unique
   request ids

   We updated ownCloud Web to v11.0.2. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#11803](https://github.com/owncloud/web/issues/11803):
   Files appearing in file list - Bugfix
   [owncloud/web#11804](https://github.com/owncloud/web/pull/11804): Add missing
   translations - Bugfix
   [owncloud/web#11806](https://github.com/owncloud/web/issues/11806): Folder size
   mismatch - Bugfix
   [owncloud/web#11813](https://github.com/owncloud/web/pull/11813): Preview image
   retries - Bugfix
   [owncloud/web#11817](https://github.com/owncloud/web/pull/11817): Respect post
   logout url - Bugfix
   [owncloud/web#11830](https://github.com/owncloud/web/issues/11830): Right side
   bar cut off - Bugfix
   [owncloud/web#11831](https://github.com/owncloud/web/pull/11831): Sidebar
   showing wrong shares - Bugfix
   [owncloud/web#11853](https://github.com/owncloud/web/issues/11853): Context menu
   "Open app in new tab" broken - Bugfix
   [owncloud/web#11008](https://github.com/owncloud/web/issues/11008): Show lock
   information in file details

   https://github.com/owncloud/ocis/pull/10755
   https://github.com/owncloud/ocis/pull/10569
   https://github.com/owncloud/ocis/pull/10604
   https://github.com/owncloud/ocis/pull/10467
   https://github.com/owncloud/ocis/pull/10503
   https://github.com/owncloud/web/releases/tag/v11.0.6
   https://github.com/owncloud/web/releases/tag/v11.0.3
   https://github.com/owncloud/web/releases/tag/v11.0.4
   https://github.com/owncloud/web/releases/tag/v11.0.1
   https://github.com/owncloud/web/releases/tag/v11.0.2

# Changelog for [5.0.9] (2024-11-14)

The following sections list the changes for 5.0.9.

[5.0.9]: https://github.com/owncloud/ocis/compare/v6.6.1...v5.0.9

## Summary

* Bugfix - Thumbnail request limit: [#10280](https://github.com/owncloud/ocis/pull/10280)
* Bugfix - Restart Postprocessing properly: [#10439](https://github.com/owncloud/ocis/pull/10439)
* Change - Define maximum input image dimensions and size when generating previews: [#10270](https://github.com/owncloud/ocis/pull/10270)

## Details

* Bugfix - Thumbnail request limit: [#10280](https://github.com/owncloud/ocis/pull/10280)

   The `THUMBNAILS_MAX_CONCURRENT_REQUESTS` setting was not working correctly.
   Previously it was just limiting the number of concurrent thumbnail downloads.
   Now the limit is applied to the number thumbnail generations requests.
   Additionally the webdav service is now returning a "Retry-After" header when it
   is hitting the ratelimit of the thumbnail service.

   https://github.com/owncloud/ocis/pull/10280
   https://github.com/owncloud/ocis/pull/10270
   https://github.com/owncloud/ocis/pull/10225

* Bugfix - Restart Postprocessing properly: [#10439](https://github.com/owncloud/ocis/pull/10439)

   Properly differentiate between resume and restart postprocessing.

   https://github.com/owncloud/ocis/pull/10439

* Change - Define maximum input image dimensions and size when generating previews: [#10270](https://github.com/owncloud/ocis/pull/10270)

   This is a general hardening change to limit processing time and resources of the
   thumbnailer.

   https://github.com/owncloud/ocis/pull/10270
   https://github.com/owncloud/ocis/pull/9360
   https://github.com/owncloud/ocis/pull/9035
   https://github.com/owncloud/ocis/pull/9069

# Changelog for [6.6.1] (2024-10-24)

The following sections list the changes for 6.6.1.

[6.6.1]: https://github.com/owncloud/ocis/compare/v6.6.0...v6.6.1

## Summary

* Bugfix - Fix panic when stopping the nats: [#10363](https://github.com/owncloud/ocis/pull/10363)
* Bugfix - Disable download activity: [#10368](https://github.com/owncloud/ocis/pull/10368)
* Bugfix - Fix Activitylog issues: [#10376](https://github.com/owncloud/ocis/pull/10376)
* Bugfix - Security fixes: [#10376](https://github.com/owncloud/ocis/pull/10376)
* Bugfix - Make antivirus workers configurable: [#10383](https://github.com/owncloud/ocis/pull/10383)
* Bugfix - Increase event processing workers: [#10385](https://github.com/owncloud/ocis/pull/10385)
* Bugfix - Fix envvar deprecations for next production release: [#10386](https://github.com/owncloud/ocis/pull/10386)
* Bugfix - Fix healthchecks: [#10405](https://github.com/owncloud/ocis/pull/10405)

## Details

* Bugfix - Fix panic when stopping the nats: [#10363](https://github.com/owncloud/ocis/pull/10363)

   The nats server itself runs signal handling that the Shutdown() call in the ocis
   code is redundant and led to a panic.

   https://github.com/owncloud/ocis/issues/10360
   https://github.com/owncloud/ocis/pull/10363

* Bugfix - Disable download activity: [#10368](https://github.com/owncloud/ocis/pull/10368)

   We disable the download activity until we have a proper solution for it.

   https://github.com/owncloud/ocis/issues/10293
   https://github.com/owncloud/ocis/pull/10368

* Bugfix - Fix Activitylog issues: [#10376](https://github.com/owncloud/ocis/pull/10376)

   Fixes multiple activititylog issues. There was an error about `max payload
   exceeded` when there were too many activities on one folder. Listing would take
   very long even with a limit activated. All of these issues are now fixed.

   https://github.com/owncloud/ocis/pull/10376

* Bugfix - Security fixes: [#10376](https://github.com/owncloud/ocis/pull/10376)

   We polished some of the sonarcloud issues.

   https://github.com/owncloud/ocis/pull/10376

* Bugfix - Make antivirus workers configurable: [#10383](https://github.com/owncloud/ocis/pull/10383)

   We made the number of go routines that pull events from the queue configurable.

   https://github.com/owncloud/ocis/pull/10383

* Bugfix - Increase event processing workers: [#10385](https://github.com/owncloud/ocis/pull/10385)

   We increased the number of go routines that pull events from the queue to three
   and made the number off workers configurable. Furthermore, the postprocessing
   delay no longer introduces a sleep that slows down pulling of events, but
   asynchronously triggers the next step.

   https://github.com/owncloud/ocis/pull/10385
   https://github.com/owncloud/ocis/pull/10368

* Bugfix - Fix envvar deprecations for next production release: [#10386](https://github.com/owncloud/ocis/pull/10386)

   Some envvar deprecations were incomplete. One was missed to be removed, one had
   missing information.

   https://github.com/owncloud/ocis/pull/10386

* Bugfix - Fix healthchecks: [#10405](https://github.com/owncloud/ocis/pull/10405)

   We needed to replace 0.0.0.0 bind addresses by outbound IP addresses in the
   healthcheck routine.

   https://github.com/owncloud/ocis/pull/10405

# Changelog for [6.6.0] (2024-10-21)

The following sections list the changes for 6.6.0.

[6.6.0]: https://github.com/owncloud/ocis/compare/v6.5.0...v6.6.0

## Summary

* Bugfix - Fix health and ready endpoints: [#10163](https://github.com/owncloud/ocis/pull/10163)
* Bugfix - Always treat LDAP attribute names case-insensitively: [#10204](https://github.com/owncloud/ocis/pull/10204)
* Bugfix - Fix delete share panic: [#10219](https://github.com/owncloud/ocis/pull/10219)
* Bugfix - Continue listing shares on error: [#10243](https://github.com/owncloud/ocis/pull/10243)
* Bugfix - Avoid re-creating thumbnails: [#10251](https://github.com/owncloud/ocis/pull/10251)
* Bugfix - Graph service now supports `OCIS_LDAP_USER_SCHEMA_DISPLAYNAME` env var: [#10257](https://github.com/owncloud/ocis/issues/10257)
* Bugfix - Kept historical resource naming in activity: [#10266](https://github.com/owncloud/ocis/pull/10266)
* Bugfix - Fix panic when sharing with groups: [#10279](https://github.com/owncloud/ocis/pull/10279)
* Bugfix - Thumbnail request limit: [#10280](https://github.com/owncloud/ocis/pull/10280)
* Bugfix - Forbid the ocm space sharing: [#10287](https://github.com/owncloud/ocis/pull/10287)
* Bugfix - Use secure config defaults for OCM: [#10307](https://github.com/owncloud/ocis/pull/10307)
* Enhancement - Add OCM wellknown configuration: [#9815](https://github.com/owncloud/ocis/pull/9815)
* Enhancement - Load IDP logo from theme: [#10274](https://github.com/owncloud/ocis/pull/10274)
* Enhancement - WebOffice Templates: [#10276](https://github.com/owncloud/ocis/pull/10276)
* Enhancement - Remove Deprecations: [#10305](https://github.com/owncloud/ocis/pull/10305)
* Enhancement - Allow to use libvips for generating thumbnails: [#10310](https://github.com/owncloud/ocis/pull/10310)
* Enhancement - Bump various dependencies: [#10352](https://github.com/owncloud/ocis/pull/10352)
* Enhancement - Update web to v11.0.0: [#10357](https://github.com/owncloud/ocis/pull/10357)
* Enhancement - Bump reva to 2.26.0: [#10364](https://github.com/owncloud/ocis/pull/10364)

## Details

* Bugfix - Fix health and ready endpoints: [#10163](https://github.com/owncloud/ocis/pull/10163)

   We added new checks to the `/readyz` and `/healthz` endpoints to ensure that the
   services are ready and healthy. This change ensures that the endpoints return
   the correct status codes, which is needed to stabilize the k8s deployments.

   https://github.com/owncloud/ocis/issues/10316
   https://github.com/owncloud/ocis/issues/10281
   https://github.com/owncloud/ocis/pull/10163
   https://github.com/owncloud/ocis/pull/10301
   https://github.com/owncloud/ocis/pull/10302
   https://github.com/owncloud/ocis/pull/10303
   https://github.com/owncloud/ocis/pull/10308
   https://github.com/owncloud/ocis/pull/10323
   https://github.com/owncloud/ocis/pull/10163
   https://github.com/owncloud/ocis/pull/10333

* Bugfix - Always treat LDAP attribute names case-insensitively: [#10204](https://github.com/owncloud/ocis/pull/10204)

   We fixes a bug where some LDAP attributes (e.g. owncloudUUID) were not treated
   case-insensitively.

   https://github.com/owncloud/ocis/issues/10200
   https://github.com/owncloud/ocis/pull/10204

* Bugfix - Fix delete share panic: [#10219](https://github.com/owncloud/ocis/pull/10219)

   Fixes a panic when deleting an ocm share

   https://github.com/owncloud/ocis/pull/10219

* Bugfix - Continue listing shares on error: [#10243](https://github.com/owncloud/ocis/pull/10243)

   We now continue listing received shares when one of the shares cannot be statted
   or converted to a driveItem.

   https://github.com/owncloud/ocis/pull/10243

* Bugfix - Avoid re-creating thumbnails: [#10251](https://github.com/owncloud/ocis/pull/10251)

   We fixed a bug that caused the system to re-create thumbnails for images, even
   if a thumbnail already existed in the cache.

   https://github.com/owncloud/ocis/pull/10251

* Bugfix - Graph service now supports `OCIS_LDAP_USER_SCHEMA_DISPLAYNAME` env var: [#10257](https://github.com/owncloud/ocis/issues/10257)

   To align with the other services the graph service now supports the
   `OCIS_LDAP_USER_SCHEMA_DISPLAYNAME` environment variable to configure the LDAP
   attribute that is used for display name attribute of users.

   `LDAP_USER_SCHEMA_DISPLAY_NAME` is now deprecated and will be removed in a
   future release.

   https://github.com/owncloud/ocis/issues/10257

* Bugfix - Kept historical resource naming in activity: [#10266](https://github.com/owncloud/ocis/pull/10266)

   Kept historical resource naming after renaming in activity for shares and public
   links.

   https://github.com/owncloud/ocis/issues/10210
   https://github.com/owncloud/ocis/pull/10266

* Bugfix - Fix panic when sharing with groups: [#10279](https://github.com/owncloud/ocis/pull/10279)

   We fixed a bug which caused a panic when sharing with groups, this only happened
   under a heavy load. Besides the bugfix, we also reduced the number of share auto
   accept log messages to avoid flooding the logs.

   https://github.com/owncloud/ocis/issues/10258
   https://github.com/owncloud/ocis/pull/10279

* Bugfix - Thumbnail request limit: [#10280](https://github.com/owncloud/ocis/pull/10280)

   The `THUMBNAILS_MAX_CONCURRENT_REQUESTS` setting was not working correctly.
   Previously it was just limiting the number of concurrent thumbnail downloads.
   Now the limit is applied to the number thumbnail generations requests.
   Additionally the webdav service is now returning a "Retry-After" header when it
   is hitting the ratelimit of the thumbnail service.

   https://github.com/owncloud/ocis/pull/10280
   https://github.com/owncloud/ocis/pull/10225

* Bugfix - Forbid the ocm space sharing: [#10287](https://github.com/owncloud/ocis/pull/10287)

   We forbid adding the federated users as members of the space via items invite.

   https://github.com/owncloud/ocis/issues/10051
   https://github.com/owncloud/ocis/pull/10287

* Bugfix - Use secure config defaults for OCM: [#10307](https://github.com/owncloud/ocis/pull/10307)

   https://github.com/owncloud/ocis/pull/10307

* Enhancement - Add OCM wellknown configuration: [#9815](https://github.com/owncloud/ocis/pull/9815)

   We now configure the `wellknown` service for OCM.

   https://github.com/owncloud/ocis/pull/9815

* Enhancement - Load IDP logo from theme: [#10274](https://github.com/owncloud/ocis/pull/10274)

   We now load the IDP logo from the theme file.

   https://github.com/owncloud/web/issues/11603
   https://github.com/owncloud/ocis/pull/10274

* Enhancement - WebOffice Templates: [#10276](https://github.com/owncloud/ocis/pull/10276)

   We are now able to use templates for WebOffice and use them as a starting point
   for new documents.

   We are supporting the following mime types:

   ## OnlyOffice

   - **MimeType:** `application/vnd.ms-word.template.macroenabled.12`
   **TargetExtension:** `docx`

   - **MimeType:** `application/vnd.oasis.opendocument.text-template`
   **TargetExtension:** `docx`

   - **MimeType:**
   `application/vnd.openxmlformats-officedocument.wordprocessingml.template`
   **TargetExtension:** `docx`

   - **MimeType:** `application/vnd.oasis.opendocument.spreadsheet-template`
   **TargetExtension:** `xlsx`

   - **MimeType:** `application/vnd.ms-excel.template.macroenabled.12`
   **TargetExtension:** `xlsx`

   - **MimeType:**
   `application/vnd.openxmlformats-officedocument.spreadsheetml.template`
   **TargetExtension:** `xlsx`

   - **MimeType:** `application/vnd.oasis.opendocument.presentation-template`
   **TargetExtension:** `pptx`

   - **MimeType:** `application/vnd.ms-powerpoint.template.macroenabled.12`
   **TargetExtension:** `pptx`

   - **MimeType:**
   `application/vnd.openxmlformats-officedocument.presentationml.template`
   **TargetExtension:** `pptx`

   ## Collabora

   - **MimeType:** `application/vnd.oasis.opendocument.spreadsheet-template`
   **TargetExtension:** `ods`

   - **MimeType:** `application/vnd.oasis.opendocument.text-template`
   **TargetExtension:** `odt`

   - **MimeType:** `application/vnd.oasis.opendocument.presentation-template`
   **TargetExtension:** `odp`

   https://github.com/owncloud/ocis/issues/9785
   https://github.com/owncloud/ocis/pull/10276

* Enhancement - Remove Deprecations: [#10305](https://github.com/owncloud/ocis/pull/10305)

   Remove deprecated stores/caches/registries and envvars from the codebase.

   https://github.com/owncloud/ocis/pull/10305

* Enhancement - Allow to use libvips for generating thumbnails: [#10310](https://github.com/owncloud/ocis/pull/10310)

   To improve performance (and to be able to support a wider range of images
   formats in the future) the thumbnails service is now able to utilize libvips
   (https://www.libvips.org/) for generating thumbnails. Enabling the use of
   libvips is implemented as a build-time option which is currently disabled for
   the "bare-metal" build of the ocis binary and enabled for the docker image
   builds.

   https://github.com/owncloud/ocis/pull/10310

* Enhancement - Bump various dependencies: [#10352](https://github.com/owncloud/ocis/pull/10352)

   https://github.com/owncloud/ocis/pull/10352

* Enhancement - Update web to v11.0.0: [#10357](https://github.com/owncloud/ocis/pull/10357)

   Tags: web

   We updated ownCloud Web to v11.0.0. Please refer to the changelog (linked) for
   details on the web release.

   - Change [owncloud/web#11709](https://github.com/owncloud/web/pull/11709):
   Remove importer as default app - Enhancement
   [owncloud/web#11668](https://github.com/owncloud/web/pull/11668): Allow setting
   view mode for apps via query - Enhancement
   [owncloud/web#11731](https://github.com/owncloud/web/pull/11731): File size
   warning in editors - Enhancement
   [owncloud/web#11737](https://github.com/owncloud/web/pull/11737): Add not found
   page - Enhancement
   [owncloud/web#11750](https://github.com/owncloud/web/pull/11750): Create
   documents from templates - Bugfix
   [owncloud/web#11604](https://github.com/owncloud/web/pull/11604): User filters
   after page reload - Bugfix
   [owncloud/web#11645](https://github.com/owncloud/web/pull/11645): Hide copy
   permanent link action on public pages - Bugfix
   [owncloud/web#11677](https://github.com/owncloud/web/pull/11677): Missing tags
   on "Shared with me" page - Bugfix
   [owncloud/web#11678](https://github.com/owncloud/web/pull/11678): Undefined
   request IDs - Bugfix
   [owncloud/web#11688](https://github.com/owncloud/web/pull/11688): Deleting
   federated connections - Bugfix
   [owncloud/web#11706](https://github.com/owncloud/web/pull/11706): Escape HTML
   characters in activities and notification view - Bugfix
   [owncloud/web#11707](https://github.com/owncloud/web/pull/11707): Prevent not
   allowed characters in shortcut name - Bugfix
   [owncloud/web#11712](https://github.com/owncloud/web/pull/11712): Details panel
   wrong WebDAV URL of received shares - Bugfix
   [owncloud/web#11725](https://github.com/owncloud/web/pull/11725): Accessing
   disabled password-protected space does not show error - Bugfix
   [owncloud/web#11726](https://github.com/owncloud/web/pull/11726): Application
   menu not operable in Safari browser - Bugfix
   [owncloud/web#11758](https://github.com/owncloud/web/pull/11758): Navigating
   into folders that have been shared externally - Bugfix
   [owncloud/web#11795](https://github.com/owncloud/web/pull/11795): Sharing label
   for locked files

   https://github.com/owncloud/ocis/pull/10357
   https://github.com/owncloud/web/releases/tag/v11.0.0

* Enhancement - Bump reva to 2.26.0: [#10364](https://github.com/owncloud/ocis/pull/10364)

  *   Bugfix [cs3org/reva#4880](https://github.com/cs3org/reva/pull/4880): Kept historical resource naming in activity
  *   Bugfix [cs3org/reva#4874](https://github.com/cs3org/reva/pull/4874): Fix rename activity
  *   Bugfix [cs3org/reva#4881](https://github.com/cs3org/reva/pull/4881): Log levels
  *   Bugfix [cs3org/reva#4884](https://github.com/cs3org/reva/pull/4884): Fix OCM upload crush
  *   Bugfix [cs3org/reva#4872](https://github.com/cs3org/reva/pull/4872): Return 409 conflict when a file was already created
  *   Bugfix [cs3org/reva#4887](https://github.com/cs3org/reva/pull/4887): Fix ShareCache concurrency panic
  *   Bugfix [cs3org/reva#4876](https://github.com/cs3org/reva/pull/4876): Fix share jail mountpoint parent id
  *   Bugfix [cs3org/reva#4879](https://github.com/cs3org/reva/pull/4879): Fix trash-bin propfind panic
  *   Bugfix [cs3org/reva#4888](https://github.com/cs3org/reva/pull/4888): Fix upload session bugs
  *   Bugfix [cs3org/reva#4560](https://github.com/cs3org/reva/pull/4560): Always select next before making CS3 calls for propfinds
  *   Enhancement [cs3org/reva#4893](https://github.com/cs3org/reva/pull/4893): Bump dependencies and go to 1.22.8
  *   Enhancement [cs3org/reva#4890](https://github.com/cs3org/reva/pull/4890): Bump golangci-lint to 1.61.0
  *   Enhancement [cs3org/reva#4886](https://github.com/cs3org/reva/pull/4886): Add new Mimetype ggp
  *   Enhancement [cs3org/reva#4809](https://github.com/cs3org/reva/pull/4809): Implement OCM well-known endpoint
  *   Enhancement [cs3org/reva#4889](https://github.com/cs3org/reva/pull/4889): Improve posixfs stability and performance
  *   Enhancement [cs3org/reva#4882](https://github.com/cs3org/reva/pull/4882): Indicate template conversion capabilities on apps

   https://github.com/owncloud/ocis/pull/10364
   https://github.com/owncloud/ocis/pull/10347
   https://github.com/owncloud/ocis/pull/10321
   https://github.com/owncloud/ocis/pull/10236
   https://github.com/owncloud/ocis/pull/10216
   https://github.com/owncloud/ocis/pull/10315

# Changelog for [6.5.0] (2024-10-01)

The following sections list the changes for 6.5.0.

[6.5.0]: https://github.com/owncloud/ocis/compare/v5.0.8...v6.5.0

## Summary

* Bugfix - Fixed the ocm email template: [#10030](https://github.com/owncloud/ocis/pull/10030)
* Bugfix - Fixed activity filter depth: [#10031](https://github.com/owncloud/ocis/pull/10031)
* Bugfix - Fixed proxy build info: [#10039](https://github.com/owncloud/ocis/pull/10039)
* Bugfix - Fixed the ocm tocken: [#10050](https://github.com/owncloud/ocis/pull/10050)
* Bugfix - Fix ocm space sharing: [#10060](https://github.com/owncloud/ocis/pull/10060)
* Bugfix - Fix the error code for ocm space sharing: [#10079](https://github.com/owncloud/ocis/pull/10079)
* Bugfix - Added LinkUpdated activity: [#10085](https://github.com/owncloud/ocis/pull/10085)
* Bugfix - Fix Activities leak: [#10092](https://github.com/owncloud/ocis/pull/10092)
* Bugfix - Include additional logs in the collaboration service: [#10101](https://github.com/owncloud/ocis/pull/10101)
* Bugfix - Added ShareUpdate activity: [#10104](https://github.com/owncloud/ocis/pull/10104)
* Bugfix - Fixed the collaboration service registration: [#10107](https://github.com/owncloud/ocis/pull/10107)
* Bugfix - CheckFileInfo will return a 404 error if the target file isn't found: [#10112](https://github.com/owncloud/ocis/pull/10112)
* Bugfix - Forbid Activities for Sharees: [#10136](https://github.com/owncloud/ocis/pull/10136)
* Bugfix - Always select next gateway client: [#10141](https://github.com/owncloud/ocis/pull/10141)
* Bugfix - Remove duplicate CSP header from responses: [#10146](https://github.com/owncloud/ocis/pull/10146)
* Bugfix - Fixed the missing folder variable: [#10150](https://github.com/owncloud/ocis/pull/10150)
* Bugfix - Fix activity limit: [#10165](https://github.com/owncloud/ocis/pull/10165)
* Bugfix - Fix email translations: [#10171](https://github.com/owncloud/ocis/pull/10171)
* Bugfix - Fix Activities translation: [#10175](https://github.com/owncloud/ocis/pull/10175)
* Enhancement - Allow to maintain the last sign-in timestamp of a user: [#9942](https://github.com/owncloud/ocis/pull/9942)
* Enhancement - Add an Activity for FileUpdated: [#10072](https://github.com/owncloud/ocis/pull/10072)
* Enhancement - Remove METADATA_BACKEND: [#10113](https://github.com/owncloud/ocis/pull/10113)
* Enhancement - Load CSP configuration file if it exists: [#10139](https://github.com/owncloud/ocis/pull/10139)
* Enhancement - FileDownloaded Activity: [#10161](https://github.com/owncloud/ocis/pull/10161)
* Enhancement - Add WOPI host URLs to the collaboration service: [#10174](https://github.com/owncloud/ocis/pull/10174)
* Enhancement - Update web to v10.3.0: [#10177](https://github.com/owncloud/ocis/pull/10177)
* Enhancement - Bump reva to 2.25.0: [#10194](https://github.com/owncloud/ocis/pull/10194)

## Details

* Bugfix - Fixed the ocm email template: [#10030](https://github.com/owncloud/ocis/pull/10030)

   The golang conditional construction moved out from the transifex template.

   https://github.com/owncloud/ocis/pull/10030

* Bugfix - Fixed activity filter depth: [#10031](https://github.com/owncloud/ocis/pull/10031)

   Fixed activity filter 'depth:-1'

   https://github.com/owncloud/ocis/issues/9850
   https://github.com/owncloud/ocis/pull/10031

* Bugfix - Fixed proxy build info: [#10039](https://github.com/owncloud/ocis/pull/10039)

   The version string for the proxy service has been changed to 'version'.

   https://github.com/owncloud/ocis/pull/10039

* Bugfix - Fixed the ocm tocken: [#10050](https://github.com/owncloud/ocis/pull/10050)

   We now pass the JWT secret to the reva runtime.

   https://github.com/owncloud/ocis/pull/10050

* Bugfix - Fix ocm space sharing: [#10060](https://github.com/owncloud/ocis/pull/10060)

   We prevent adding the federated users as members of the space.

   https://github.com/owncloud/ocis/issues/10051
   https://github.com/owncloud/ocis/pull/10060

* Bugfix - Fix the error code for ocm space sharing: [#10079](https://github.com/owncloud/ocis/pull/10079)

   We fixed the error code for ocm space sharing

   https://github.com/owncloud/ocis/issues/10051
   https://github.com/owncloud/ocis/pull/10079

* Bugfix - Added LinkUpdated activity: [#10085](https://github.com/owncloud/ocis/pull/10085)

   Added the LinkUpdated activity in the space context

   https://github.com/owncloud/ocis/issues/10012
   https://github.com/owncloud/ocis/pull/10085

* Bugfix - Fix Activities leak: [#10092](https://github.com/owncloud/ocis/pull/10092)

   Fix activities endpoint by preventing unauthorized users to get activities

   https://github.com/owncloud/ocis/pull/10092

* Bugfix - Include additional logs in the collaboration service: [#10101](https://github.com/owncloud/ocis/pull/10101)

   More logs have been added in the middlware of the collaboration service to debug
   401 error codes. Any error that happens in that middleware should have its
   corresponding log entry

   https://github.com/owncloud/ocis/pull/10101

* Bugfix - Added ShareUpdate activity: [#10104](https://github.com/owncloud/ocis/pull/10104)

   Added the ShareUpdate activity in the space context.

   https://github.com/owncloud/ocis/issues/10011
   https://github.com/owncloud/ocis/pull/10104

* Bugfix - Fixed the collaboration service registration: [#10107](https://github.com/owncloud/ocis/pull/10107)

   Fixed an issue when the collaboration service registers apps also for binary and
   unknown mime types.

   https://github.com/owncloud/ocis/issues/10086
   https://github.com/owncloud/ocis/pull/10107

* Bugfix - CheckFileInfo will return a 404 error if the target file isn't found: [#10112](https://github.com/owncloud/ocis/pull/10112)

   Previously, the request failed with a 500 error code, but it it will fail with a
   404 error code

   https://github.com/owncloud/ocis/pull/10112

* Bugfix - Forbid Activities for Sharees: [#10136](https://github.com/owncloud/ocis/pull/10136)

   Sharees may not see item activities. We now bind it to ListGrants permission.

   https://github.com/owncloud/ocis/pull/10136

* Bugfix - Always select next gateway client: [#10141](https://github.com/owncloud/ocis/pull/10141)

   We now use the gateway selector to always select the next gateway client. This
   ensures that we can always connect to the gateway during up- and downscaling.

   https://github.com/owncloud/ocis/pull/10141
   https://github.com/owncloud/ocis/pull/10133

* Bugfix - Remove duplicate CSP header from responses: [#10146](https://github.com/owncloud/ocis/pull/10146)

   The web service was adding a CSP on its own, and that one has been removed. The
   proxy service will take care of the CSP header.

   https://github.com/owncloud/ocis/pull/10146

* Bugfix - Fixed the missing folder variable: [#10150](https://github.com/owncloud/ocis/pull/10150)

   We fixed the missing folder variable when folder renamed.

   https://github.com/owncloud/ocis/issues/10148
   https://github.com/owncloud/ocis/pull/10150

* Bugfix - Fix activity limit: [#10165](https://github.com/owncloud/ocis/pull/10165)

   When requesting a limit on activities, ocis would limit first, then filter and
   sort. Now it filters and sorts first, then limits.

   https://github.com/owncloud/ocis/pull/10165

* Bugfix - Fix email translations: [#10171](https://github.com/owncloud/ocis/pull/10171)

   Email translations would not use custom translation pathes. This is now fixed.

   https://github.com/owncloud/ocis/pull/10171

* Bugfix - Fix Activities translation: [#10175](https://github.com/owncloud/ocis/pull/10175)

   Fix the panic for the translation-sync in the activities service.

   https://github.com/owncloud/ocis/pull/10175

* Enhancement - Allow to maintain the last sign-in timestamp of a user: [#9942](https://github.com/owncloud/ocis/pull/9942)

   When the LDAP identity backend is configured to have write access to the
   database we're now able to maintain the ocLastSignInTimestamp attribute for the
   users.

   This attribute is return in the 'signinActivity/lastSuccessfulSignInDateTime'
   properity of the user objects. It is also possible to $filter on this attribute.

   Use e.g. '$filter=signinActivity/lastSuccessfulSignInDateTime le
   2023-12-31T00:00:00Z' to search for users that have not signed in since
   2023-12-31. Note: To use this type of filter the underlying LDAP server must
   support the '<=' filter. Which is currently not the case of the built-in LDAP
   server (idm).

   https://github.com/owncloud/ocis/pull/9942
   https://github.com/owncloud/ocis/pull/10111

* Enhancement - Add an Activity for FileUpdated: [#10072](https://github.com/owncloud/ocis/pull/10072)

   Previously FileUpdated has also triggered a FileAdded Activity

   https://github.com/owncloud/ocis/pull/10072

* Enhancement - Remove METADATA_BACKEND: [#10113](https://github.com/owncloud/ocis/pull/10113)

   Removes the deprecated XXX_METADATA_BACKEND envvars

   https://github.com/owncloud/ocis/pull/10113

* Enhancement - Load CSP configuration file if it exists: [#10139](https://github.com/owncloud/ocis/pull/10139)

   The Content Security Policy (CSP) configuration file is now loaded by default if
   it exists. The configuration file looked for should be located at
   `$OCIS_BASE_DATA_PATH/proxy/csp.yaml`. If the file does not exist, the default
   CSP configuration is used.

   https://github.com/owncloud/ocis/issues/10021
   https://github.com/owncloud/ocis/pull/10139

* Enhancement - FileDownloaded Activity: [#10161](https://github.com/owncloud/ocis/pull/10161)

   Add an activity when a file gets downloaded via public link

   https://github.com/owncloud/ocis/pull/10161

* Enhancement - Add WOPI host URLs to the collaboration service: [#10174](https://github.com/owncloud/ocis/pull/10174)

   We added the WOPI host urls to create a better integration with WOPI clients.
   This allows the WOPI apps to display links to our sharing and versions panel in
   the UI.

   https://github.com/owncloud/ocis/pull/10174

* Enhancement - Update web to v10.3.0: [#10177](https://github.com/owncloud/ocis/pull/10177)

   Tags: web

   We updated ownCloud Web to v10.3.0. Please refer to the changelog (linked) for
   details on the web release.

  * Bugfix [owncloud/web#11557](https://github.com/owncloud/web/pull/11557): OCM token clipboard copy
  * Bugfix [owncloud/web#11560](https://github.com/owncloud/web/pull/11560): OCM local instance check
  * Bugfix [owncloud/web#11583](https://github.com/owncloud/web/pull/11583): Thumbnails for GeoGebra slides not showing up
  * Bugfix [owncloud/web#11584](https://github.com/owncloud/web/pull/11584): Logout issues on token renewal failure
  * Bugfix [owncloud/web#11633](https://github.com/owncloud/web/pull/11633): App version downloads
  * Bugfix [owncloud/web#11642](https://github.com/owncloud/web/pull/11642): Wrong webdav URL in sidebar
  * Bugfix [owncloud/web#11643](https://github.com/owncloud/web/pull/11643): Renaming space in projects view files table does not work
  * Bugfix [owncloud/web#11653](https://github.com/owncloud/web/pull/11653): Hide share type switch for project spaces
  * Bugfix [owncloud/web#11658](https://github.com/owncloud/web/pull/11658): File name truncation
  * Enhancement [owncloud/web#11553](https://github.com/owncloud/web/pull/11553): Copy quick link action removal
  * Enhancement [owncloud/web#11553](https://github.com/owncloud/web/pull/11553): Internal link removal
  * Enhancement [owncloud/web#11558](https://github.com/owncloud/web/pull/11558): Add split confirm button to create link modal
  * Enhancement [owncloud/web#11561](https://github.com/owncloud/web/pull/11561): Add versions to the left sidebar bottom
  * Enhancement [owncloud/web#11574](https://github.com/owncloud/web/pull/11574): Accessibility improvements
  * Enhancement [owncloud/web#11580](https://github.com/owncloud/web/pull/11580): Show min oCIS version in app details (app store)
  * Enhancement [owncloud/web#11586](https://github.com/owncloud/web/pull/11586): Add a "Save As" function to the app top bar
  * Enhancement [owncloud/web#11606](https://github.com/owncloud/web/pull/11606): Move permanent link indicator
  * Enhancement [owncloud/web#11606](https://github.com/owncloud/web/pull/11606): Redesign sidebar link section in sharing panel
  * Enhancement [owncloud/web#11614](https://github.com/owncloud/web/pull/11614): Soothe right sidebar panel transitions
  * Enhancement [owncloud/web#11631](https://github.com/owncloud/web/pull/11631): Preview loading performance
  * Enhancement [owncloud/web#11644](https://github.com/owncloud/web/pull/11644): Add cancel button to unsaved changes dialog
  * Enhancement [owncloud/web#11646](https://github.com/owncloud/web/pull/11646): File type icon for .ggs files
  * Enhancement [owncloud/web#11661](https://github.com/owncloud/web/pull/11661): Remove link type "Uploader"

   https://github.com/owncloud/ocis/pull/10177
   https://github.com/owncloud/web/releases/tag/v10.3.0

* Enhancement - Bump reva to 2.25.0: [#10194](https://github.com/owncloud/ocis/pull/10194)

  *   Bugfix [cs3org/reva#4854](https://github.com/cs3org/reva/pull/4854): Added ShareUpdate activity
  *   Bugfix [cs3org/reva#4865](https://github.com/cs3org/reva/pull/4865): Better response codes for app new endpoint
  *   Bugfix [cs3org/reva#4858](https://github.com/cs3org/reva/pull/4858): Better response codes for app new endpoint
  *   Bugfix [cs3org/reva#4867](https://github.com/cs3org/reva/pull/4867): Fix remaining space calculation for S3 blobstore
  *   Bugfix [cs3org/reva#4852](https://github.com/cs3org/reva/pull/4852): Populate public link user correctly
  *   Bugfix [cs3org/reva#4859](https://github.com/cs3org/reva/pull/4859): Fixed the collaboration service registration
  *   Bugfix [cs3org/reva#4835](https://github.com/cs3org/reva/pull/4835): Fix sharejail stat id
  *   Bugfix [cs3org/reva#4856](https://github.com/cs3org/reva/pull/4856): Fix time conversion
  *   Bugfix [cs3org/reva#4851](https://github.com/cs3org/reva/pull/4851): Use gateway selector in sciencemesh
  *   Bugfix [cs3org/reva#4850](https://github.com/cs3org/reva/pull/4850): Write upload session info atomically
  *   Enhancement [cs3org/reva#4866](https://github.com/cs3org/reva/pull/4866): Unit test the json ocm invite manager
  *   Enhancement [cs3org/reva#4847](https://github.com/cs3org/reva/pull/4847): Add IsVersion to UploadReadyEvent
  *   Enhancement [cs3org/reva#4868](https://github.com/cs3org/reva/pull/4868): Improve metadata client errors
  *   Enhancement [cs3org/reva#4848](https://github.com/cs3org/reva/pull/4848): Add trashbin support to posixfs alongside other improvements

   https://github.com/owncloud/ocis/pull/10194
   https://github.com/owncloud/ocis/pull/10172
   https://github.com/owncloud/ocis/pull/10157
   https://github.com/owncloud/ocis/pull/9817

# Changelog for [5.0.8] (2024-09-30)

The following sections list the changes for 5.0.8.

[5.0.8]: https://github.com/owncloud/ocis/compare/v6.4.0...v5.0.8

## Summary

* Bugfix - Update reva to v2.19.8: [#10138](https://github.com/owncloud/ocis/pull/10138)

## Details

* Bugfix - Update reva to v2.19.8: [#10138](https://github.com/owncloud/ocis/pull/10138)

   We updated reva to v2.19.8

  *   Fix [cs3org/reva#4761](https://github.com/cs3org/reva/pull/4761): Quotes in dav Content-Disposition header
  *   Fix [cs3org/reva#4853](https://github.com/cs3org/reva/pull/4853): Write upload session info atomically
  *   Enh [cs3org/reva#4701](https://github.com/cs3org/reva/pull/4701): Extend service account permissions

   https://github.com/owncloud/ocis/pull/10138
   https://github.com/owncloud/ocis/pull/10103

# Changelog for [6.4.0] (2024-09-12)

The following sections list the changes for 6.4.0.

[6.4.0]: https://github.com/owncloud/ocis/compare/v5.0.7...v6.4.0

## Summary

* Bugfix - Set capability response `disable_self_password_change` correctly: [#9853](https://github.com/owncloud/ocis/pull/9853)
* Bugfix - Activity Translations: [#9856](https://github.com/owncloud/ocis/pull/9856)
* Bugfix - The user attributes `userType` and `memberOf` are readonly: [#9867](https://github.com/owncloud/ocis/pull/9867)
* Bugfix - Use key to get specific trash item: [#9879](https://github.com/owncloud/ocis/pull/9879)
* Bugfix - Fix response code when upload a file over locked: [#9894](https://github.com/owncloud/ocis/pull/9894)
* Bugfix - List OCM permissions as graph drive item permissions: [#9905](https://github.com/owncloud/ocis/pull/9905)
* Bugfix - Fix listing ocm shares: [#9925](https://github.com/owncloud/ocis/pull/9925)
* Bugfix - Allow update of ocm shares: [#9980](https://github.com/owncloud/ocis/pull/9980)
* Change - Remove store service: [#9890](https://github.com/owncloud/ocis/pull/9890)
* Enhancement - We now set the configured protocol transport for service metadata: [#9490](https://github.com/owncloud/ocis/pull/9490)
* Enhancement - Microsoft Office365 and Office Online support: [#9686](https://github.com/owncloud/ocis/pull/9686)
* Enhancement - Added a new role space editor without versions: [#9880](https://github.com/owncloud/ocis/pull/9880)
* Enhancement - Improve revisions purge: [#9891](https://github.com/owncloud/ocis/pull/9891)
* Enhancement - Allow setting default locale of activitylog: [#9892](https://github.com/owncloud/ocis/pull/9892)
* Enhancement - Graph translation path: [#9902](https://github.com/owncloud/ocis/pull/9902)
* Enhancement - Added a new roles viewer/editor with ListGrants: [#9943](https://github.com/owncloud/ocis/pull/9943)
* Enhancement - Handle OCM invite generated event: [#9966](https://github.com/owncloud/ocis/pull/9966)
* Enhancement - Update web to v10.2.0: [#9988](https://github.com/owncloud/ocis/pull/9988)
* Enhancement - Allow blob as connect-src in default CSP: [#9993](https://github.com/owncloud/ocis/pull/9993)
* Enhancement - Unified Roles Management: [#10013](https://github.com/owncloud/ocis/pull/10013)
* Enhancement - Bump reva to v2.24.1: [#10028](https://github.com/owncloud/ocis/pull/10028)

## Details

* Bugfix - Set capability response `disable_self_password_change` correctly: [#9853](https://github.com/owncloud/ocis/pull/9853)

   The capability value `disable_self_password_change` was not being set correctly
   when `user.passwordProfile` is configured as a read-only attribute.

   https://github.com/owncloud/enterprise/issues/6849
   https://github.com/owncloud/ocis/pull/9853

* Bugfix - Activity Translations: [#9856](https://github.com/owncloud/ocis/pull/9856)

   Translations for activities did not show up in transifex

   https://github.com/owncloud/ocis/pull/9856

* Bugfix - The user attributes `userType` and `memberOf` are readonly: [#9867](https://github.com/owncloud/ocis/pull/9867)

   The graph API now treats the user attributes `userType` and `memberOf` as
   read-only. They are not meant be updated directly by the client.

   https://github.com/owncloud/ocis/issues/9858
   https://github.com/owncloud/ocis/pull/9867

* Bugfix - Use key to get specific trash item: [#9879](https://github.com/owncloud/ocis/pull/9879)

   The activitylog and clientlog services now only fetch the specific trash item
   instead of getting all items in trash and filtering them on their side. This
   reduces the load on the storage users service because it no longer has to
   assemble a full trash listing.

   https://github.com/owncloud/ocis/pull/9879

* Bugfix - Fix response code when upload a file over locked: [#9894](https://github.com/owncloud/ocis/pull/9894)

   We fixed a bug where the response code was incorrect when uploading a file over
   a locked file.

   https://github.com/owncloud/ocis/issues/7638
   https://github.com/owncloud/ocis/pull/9894

* Bugfix - List OCM permissions as graph drive item permissions: [#9905](https://github.com/owncloud/ocis/pull/9905)

   The libre graph API now returns OCM shares when listing driveItem permissions.

   https://github.com/owncloud/ocis/issues/9898
   https://github.com/owncloud/ocis/pull/9905

* Bugfix - Fix listing ocm shares: [#9925](https://github.com/owncloud/ocis/pull/9925)

   The libre graph API now returns an etag, the role and the creation time for ocm
   shares. It also includes ocm shares in the sharedByMe endpoint.

   https://github.com/owncloud/ocis/pull/9925
   https://github.com/owncloud/ocis/pull/9920

* Bugfix - Allow update of ocm shares: [#9980](https://github.com/owncloud/ocis/pull/9980)

   We fixed a bug that prevented ocm shares to be updated or removed.

   https://github.com/owncloud/ocis/issues/9926
   https://github.com/owncloud/ocis/pull/9980

* Change - Remove store service: [#9890](https://github.com/owncloud/ocis/pull/9890)

   We have removed the unused store service.

   https://github.com/owncloud/ocis/issues/1357
   https://github.com/owncloud/ocis/pull/9890

* Enhancement - We now set the configured protocol transport for service metadata: [#9490](https://github.com/owncloud/ocis/pull/9490)

   This allows configuring services to listan on `tcp` or `unix` sockets and
   clients to use the `dns`, `kubernetes` or `unix` protocol URIs instead of
   service names.

   https://github.com/owncloud/ocis/pull/9490
   https://github.com/cs3org/reva/pull/4744

* Enhancement - Microsoft Office365 and Office Online support: [#9686](https://github.com/owncloud/ocis/pull/9686)

   Add support for Microsoft Office365 Cloud and Microsoft Office Online on
   premises. You can use the cloud feature either within a Microsoft
   [CSP](https://learn.microsoft.com/en-us/partner-center/enroll/csp-overview)
   partnership or via the ownCloud office365 proxy subscription. Please contact
   sales@owncloud.com to get more information about the ownCloud office365 proxy
   subscription.

   https://github.com/owncloud/ocis/pull/9686

* Enhancement - Added a new role space editor without versions: [#9880](https://github.com/owncloud/ocis/pull/9880)

   We add a new role space editor without list and restore version permissions.

   https://github.com/owncloud/ocis/issues/9699
   https://github.com/owncloud/ocis/pull/9880

* Enhancement - Improve revisions purge: [#9891](https://github.com/owncloud/ocis/pull/9891)

   The `revisions purge` command would time out on big spaces. We have improved
   performance by parallelizing the process.

   https://github.com/owncloud/ocis/pull/9891

* Enhancement - Allow setting default locale of activitylog: [#9892](https://github.com/owncloud/ocis/pull/9892)

   Allows setting the default locale via `OCIS_DEFAULT_LANGUAGE` envvar

   https://github.com/owncloud/ocis/pull/9892

* Enhancement - Graph translation path: [#9902](https://github.com/owncloud/ocis/pull/9902)

   Add `GRAPH_TRANSLATION_PATH` envvar like in other l10n services

   https://github.com/owncloud/ocis/pull/9902

* Enhancement - Added a new roles viewer/editor with ListGrants: [#9943](https://github.com/owncloud/ocis/pull/9943)

   We add a new roles space viewer/editor with ListGrants permissions.

   https://github.com/owncloud/ocis/issues/9701
   https://github.com/owncloud/ocis/pull/9943

* Enhancement - Handle OCM invite generated event: [#9966](https://github.com/owncloud/ocis/pull/9966)

   Both the notification and audit services now handle the OCM invite generated
   event.

   - The notification service is responsible for sending an email to the invited
   user. - The audit service is responsible for logging the event.

   https://github.com/owncloud/ocis/issues/9583
   https://github.com/owncloud/ocis/pull/9966
   https://github.com/cs3org/reva/pull/4832

* Enhancement - Update web to v10.2.0: [#9988](https://github.com/owncloud/ocis/pull/9988)

   Tags: web

   We updated ownCloud Web to v10.2.0. Please refer to the changelog (linked) for
   details on the web release.

  * Bugfix [owncloud/web#11512](https://github.com/owncloud/web/pull/11512): OCM invite generation body format
  * Bugfix [owncloud/web#11526](https://github.com/owncloud/web/pull/11526): Logout on access token renewal failure
  * Enhancement [owncloud/web#11377](https://github.com/owncloud/web/pull/11377): Replace custom datepicker with native html element
  * Enhancement [owncloud/web#11387](https://github.com/owncloud/web/pull/11387): Display disabled role permissions
  * Enhancement [owncloud/web#11394](https://github.com/owncloud/web/pull/11394): Mark external shares
  * Enhancement [owncloud/web#11484](https://github.com/owncloud/web/pull/11484): Hide versions panel with insufficient permissions
  * Enhancement [owncloud/web#11502](https://github.com/owncloud/web/pull/11502): Support a tags in actions
  * Enhancement [owncloud/web#11508](https://github.com/owncloud/web/pull/11508): Improve tiles view performance
  * Enhancement [owncloud/web#11515](https://github.com/owncloud/web/pull/11515): Add default actions extension point
  * Enhancement [owncloud/web#11518](https://github.com/owncloud/web/pull/11518): Add select all checkbox to tiles view

   https://github.com/owncloud/ocis/pull/9988
   https://github.com/owncloud/web/releases/tag/v10.2.0

* Enhancement - Allow blob as connect-src in default CSP: [#9993](https://github.com/owncloud/ocis/pull/9993)

   We added 'blob:' to the default connect-src items in the default CSP rules.

   https://github.com/owncloud/ocis/pull/9993

* Enhancement - Unified Roles Management: [#10013](https://github.com/owncloud/ocis/pull/10013)

   Improved management of unified roles with the introduction of default
   enabled/disabled states and a new command for listing available roles. It is
   important to note that a disabled role does not lose previously assigned
   permissions; it only means that the role is not available for new assignments.

   The following roles are now enabled by default:

   - UnifiedRoleViewerID - UnifiedRoleSpaceViewer - UnifiedRoleEditor -
   UnifiedRoleSpaceEditor - UnifiedRoleFileEditor - UnifiedRoleEditorLite -
   UnifiedRoleManager

   The following roles are now disabled by default:

   - UnifiedRoleSecureViewer

   To enable the UnifiedRoleSecureViewer role, you must provide a list of all
   available roles through one of the following methods:

   - Using the GRAPH_AVAILABLE_ROLES environment variable. - Setting the
   available_roles configuration value.

   To enable a role, include the UID of the role in the list of available roles.

   A new command has been introduced to simplify the process of finding out which
   UID belongs to which role. The command is:

   ```
   $ ocis graph list-unified-roles
   ```

   The output of this command includes the following information for each role:

   - uid: The unique identifier of the role. - Description: A short description of
   the role. - Enabled: Whether the role is enabled or not.

   https://github.com/owncloud/ocis/issues/9698
   https://github.com/owncloud/ocis/pull/10013
   https://github.com/owncloud/ocis/pull/9727

* Enhancement - Bump reva to v2.24.1: [#10028](https://github.com/owncloud/ocis/pull/10028)

  *   Bugfix [cs3org/reva#4843](https://github.com/cs3org/reva/pull/4843): Allow update of ocm shares
  *   Bugfix [cs3org/reva#4820](https://github.com/cs3org/reva/pull/4820): Fix response code when upload a file over locked
  *   Bugfix [cs3org/reva#4837](https://github.com/cs3org/reva/pull/4837): Fix OCM userid encoding
  *   Bugfix [cs3org/reva#4823](https://github.com/cs3org/reva/pull/4823): Return etag for ocm shares
  *   Bugfix [cs3org/reva#4822](https://github.com/cs3org/reva/pull/4822): Allow listing directory trash items by key
  *   Enhancement [cs3org/reva#4816](https://github.com/cs3org/reva/pull/4816): Ignore resharing requests
  *   Enhancement [cs3org/reva#4817](https://github.com/cs3org/reva/pull/4817): Added a new role space editor without versions
  *   Enhancement [cs3org/reva#4829](https://github.com/cs3org/reva/pull/4829): Added a new roles viewer/editor with ListGrants
  *   Enhancement [cs3org/reva#4828](https://github.com/cs3org/reva/pull/4828): New event: UserSignedIn
  *   Enhancement [cs3org/reva#4836](https://github.com/cs3org/reva/pull/4836): Publish an event when an OCM invite is generated

   https://github.com/owncloud/ocis/pull/10028
   https://github.com/owncloud/ocis/pull/9980
   https://github.com/owncloud/ocis/pull/9981
   https://github.com/owncloud/ocis/pull/9981
   https://github.com/owncloud/ocis/pull/9920
   https://github.com/owncloud/ocis/pull/9879
   https://github.com/owncloud/ocis/pull/9860

# Changelog for [5.0.7] (2024-09-04)

The following sections list the changes for 5.0.7.

[5.0.7]: https://github.com/owncloud/ocis/compare/v6.3.0...v5.0.7

## Summary

* Enhancement - Add virus filter to sessions command: [#9041](https://github.com/owncloud/ocis/pull/9041)
* Enhancement - Assimilate `clean` into `sessions` command: [#9828](https://github.com/owncloud/ocis/pull/9828)
* Enhancement - Update web to v8.0.5: [#9958](https://github.com/owncloud/ocis/pull/9958)

## Details

* Enhancement - Add virus filter to sessions command: [#9041](https://github.com/owncloud/ocis/pull/9041)

   Allow filtering upload session by virus status (has-virus=true/false)

   https://github.com/owncloud/ocis/pull/9041

* Enhancement - Assimilate `clean` into `sessions` command: [#9828](https://github.com/owncloud/ocis/pull/9828)

   We deprecated `ocis storage-user uploads clean` and added the same logic to
   `ocis storage-users uploads session --clean`

   https://github.com/owncloud/ocis/pull/9828

* Enhancement - Update web to v8.0.5: [#9958](https://github.com/owncloud/ocis/pull/9958)

   Tags: web

   We updated ownCloud Web to v8.0.5. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#11395](https://github.com/owncloud/web/pull/11395):
   Missing space members for group memberships - Bugfix
   [owncloud/web#11263](https://github.com/owncloud/web/pull/11263): Show more
   toggle in space members view not reactive - Bugfix
   [owncloud/web#11263](https://github.com/owncloud/web/pull/11263): Space show
   links from other spaces - Bugfix
   [owncloud/web#11303](https://github.com/owncloud/web/pull/11303): Uploading
   nested folders

   https://github.com/owncloud/ocis/pull/9958
   https://github.com/owncloud/web/releases/tag/v8.0.5

# Changelog for [6.3.0] (2024-08-20)

The following sections list the changes for 6.3.0.

[6.3.0]: https://github.com/owncloud/ocis/compare/v6.2.0...v6.3.0

## Summary

* Bugfix - Ignore address for kubernetes registry: [#9490](https://github.com/owncloud/ocis/pull/9490)
* Bugfix - Use bool type for web embed delegatedAuthentication: [#9692](https://github.com/owncloud/ocis/pull/9692)
* Bugfix - Repair nats-js-kv registry: [#9734](https://github.com/owncloud/ocis/pull/9734)
* Bugfix - Use less selectors that watch the registry: [#9741](https://github.com/owncloud/ocis/pull/9741)
* Bugfix - We fixed the client config generation for the built in IDP: [#9770](https://github.com/owncloud/ocis/pull/9770)
* Bugfix - Change ocmproviders config defaultpath: [#9778](https://github.com/owncloud/ocis/pull/9778)
* Bugfix - Web theme color contrasts: [#10726](https://github.com/owncloud/web/issues/10726)
* Enhancement - New WOPI operations added to the collaboration service: [#9505](https://github.com/owncloud/ocis/pull/9505)
* Enhancement - Allow configuring grpc max connection age: [#9657](https://github.com/owncloud/ocis/pull/9657)
* Enhancement - Tracing improvements in the collaboration service: [#9684](https://github.com/owncloud/ocis/pull/9684)
* Enhancement - Local WEB App configuration: [#9691](https://github.com/owncloud/ocis/pull/9691)
* Enhancement - Bump tusd pkg to v2: [#9714](https://github.com/owncloud/ocis/pull/9714)
* Enhancement - Gateways should directly talk to themselves: [#9714](https://github.com/owncloud/ocis/pull/9714)
* Enhancement - Support Skyhigh Security ICAP as an ICAP server: [#9720](https://github.com/owncloud/ocis/issues/9720)
* Enhancement - Added generic way to translate composite entities: [#9722](https://github.com/owncloud/ocis/pull/9722)
* Enhancement - Add an API to auth-app service: [#9755](https://github.com/owncloud/ocis/pull/9755)
* Enhancement - Bump go-micro plugins pkg: [#9756](https://github.com/owncloud/ocis/pull/9756)
* Enhancement - Allow querying federated user roles for sharing: [#9765](https://github.com/owncloud/ocis/pull/9765)
* Enhancement - Refactor the connector in the collaboration service: [#9771](https://github.com/owncloud/ocis/pull/9771)
* Enhancement - Add OCIS_ENABLE_OCM env var: [#9784](https://github.com/owncloud/ocis/pull/9784)
* Enhancement - OCM related adjustments in graph: [#9788](https://github.com/owncloud/ocis/pull/9788)
* Enhancement - Update web to v10.1.0: [#9832](https://github.com/owncloud/ocis/pull/9832)
* Enhancement - Bump reva to 2.23.0: [#9852](https://github.com/owncloud/ocis/pull/9852)

## Details

* Bugfix - Ignore address for kubernetes registry: [#9490](https://github.com/owncloud/ocis/pull/9490)

   We no longer pass an address to the go micro kubernetes registry implementation.
   This causes the implementation to autodetect the namespace and not hardcode it
   to `default`.

   https://github.com/owncloud/ocis/pull/9490

* Bugfix - Use bool type for web embed delegatedAuthentication: [#9692](https://github.com/owncloud/ocis/pull/9692)

   https://github.com/owncloud/ocis/pull/9692

* Bugfix - Repair nats-js-kv registry: [#9734](https://github.com/owncloud/ocis/pull/9734)

   The registry would always send traffic to only one pod. This is now fixed and
   load should be spread evenly. Also implements watcher method so the cache can
   use it. Internally, it can now distinguish services by version and will
   aggregate all nodes of the same version into a single service, as expected by
   the registry cache and watcher.

   https://github.com/owncloud/ocis/pull/9734
   https://github.com/owncloud/ocis/pull/9726
   https://github.com/owncloud/ocis/pull/9656

* Bugfix - Use less selectors that watch the registry: [#9741](https://github.com/owncloud/ocis/pull/9741)

   The proxy now shares the service selector for all host lookups.

   https://github.com/owncloud/ocis/pull/9741

* Bugfix - We fixed the client config generation for the built in IDP: [#9770](https://github.com/owncloud/ocis/pull/9770)

   We now use the OCIS_URL to generate the web client registration configuration.
   It does not make sense use the OCIS_ISSUER_URL if the idp was configured to run
   on a different domain.

   https://github.com/owncloud/ocis/pull/9770

* Bugfix - Change ocmproviders config defaultpath: [#9778](https://github.com/owncloud/ocis/pull/9778)

   We moved the default location of the `ocmproviders.json` config file out of the
   data directory of the ocm service to the ocis config directory.

   https://github.com/owncloud/ocis/pull/9778

* Bugfix - Web theme color contrasts: [#10726](https://github.com/owncloud/web/issues/10726)

   Web theme colors have been enhanced so they have at least a 4.5:1 contrast ratio
   because of a11y reasons.

   https://github.com/owncloud/web/issues/10726
   https://github.com/owncloud/web/pull/11331
   https://github.com/owncloud/ocis/pull/9752

* Enhancement - New WOPI operations added to the collaboration service: [#9505](https://github.com/owncloud/ocis/pull/9505)

   PutRelativeFile, DeleteFile and RenameFile operations have been added to the
   collaboration service. GetFileInfo operation will now report the support of
   these operations to the WOPI app

   https://github.com/owncloud/ocis/pull/9505

* Enhancement - Allow configuring grpc max connection age: [#9657](https://github.com/owncloud/ocis/pull/9657)

   We added a GRPC_MAX_CONNECTION_AGE env var that allows limiting the lifespan of
   connections. A closed connection triggers grpc clients to do a new DNS lookup to
   pick up new IPs.

   https://github.com/owncloud/ocis/pull/9657

* Enhancement - Tracing improvements in the collaboration service: [#9684](https://github.com/owncloud/ocis/pull/9684)

   Uploads and downloads through the collaboration service will be traced. The
   openInApp request will also be linked properly with other requests in the
   tracing. In addition, the collaboration service will include some additional
   information in the traces. Filtering based on that information might be an
   option.

   https://github.com/owncloud/ocis/pull/9684

* Enhancement - Local WEB App configuration: [#9691](https://github.com/owncloud/ocis/pull/9691)

   We've added a new feature which allows configuring applications individually
   instead of using the global apps.yaml file. With that, each application can have
   its own configuration file, which will be loaded by the WEB service.

   The local configuration has the highest priority and will override the global
   configuration. The Following order of precedence is used: local.config >
   global.config > manifest.config.

   Besides the configuration, the application now be disabled by setting the
   `disabled` field to `true` in one of the configuration files.

   https://github.com/owncloud/ocis/issues/9687
   https://github.com/owncloud/ocis/pull/9691

* Enhancement - Bump tusd pkg to v2: [#9714](https://github.com/owncloud/ocis/pull/9714)

   Bumps the tusd pkg to v2.4.0

   https://github.com/owncloud/ocis/pull/9714

* Enhancement - Gateways should directly talk to themselves: [#9714](https://github.com/owncloud/ocis/pull/9714)

   The CS3 gateway can directly to itself when it wants to talk to the registries
   running in the same reva runtime.

   https://github.com/owncloud/ocis/pull/9714

* Enhancement - Support Skyhigh Security ICAP as an ICAP server: [#9720](https://github.com/owncloud/ocis/issues/9720)

   We have upgraded the antivirus ICAP client library, bringing enhanced
   performance and reliability to our antivirus scanning service. With this update,
   the Skyhigh Security ICAP can now be used as an ICAP server, providing robust
   and scalable antivirus solutions.

   https://github.com/owncloud/ocis/issues/9720
   https://github.com/fschade/icap-client/pull/6

* Enhancement - Added generic way to translate composite entities: [#9722](https://github.com/owncloud/ocis/pull/9722)

   Added a generic way to translate the necessary fields in composite entities. The
   function takes the entity, translation function and fields to translate that are
   described by the TranslateField function. The function supports nested structs
   and slices of structs.

   https://github.com/owncloud/ocis/issues/9700
   https://github.com/owncloud/ocis/pull/9722

* Enhancement - Add an API to auth-app service: [#9755](https://github.com/owncloud/ocis/pull/9755)

   Adds an API to create, list and delete app tokens. Includes an impersonification
   feature for migration scenarios.

   https://github.com/owncloud/ocis/pull/9755

* Enhancement - Bump go-micro plugins pkg: [#9756](https://github.com/owncloud/ocis/pull/9756)

   Bump plugins pkg to include fix for cache delete

   https://github.com/owncloud/ocis/pull/9756

* Enhancement - Allow querying federated user roles for sharing: [#9765](https://github.com/owncloud/ocis/pull/9765)

   When listing permissions clients can now fetch the list of available federated
   sharing roles by sending a `GET
   /graph/v1beta1/drives/{driveid}/items/{itemid}/permissions?$filter=@libre.graph.permissions.roles.allowedValues/rolePermissions/any(p:contains(p/condition,
   '@Subject.UserType=="Federated"'))` request. Note that this is the only
   supported filter expression. Federated sharing roles will be omitted from
   requests without this filter.

   https://github.com/owncloud/ocis/pull/9765

* Enhancement - Refactor the connector in the collaboration service: [#9771](https://github.com/owncloud/ocis/pull/9771)

   This will simplify and homogenize the code around the connector

   https://github.com/owncloud/ocis/pull/9771

* Enhancement - Add OCIS_ENABLE_OCM env var: [#9784](https://github.com/owncloud/ocis/pull/9784)

   We added a new `OCIS_ENABLE_OCM` env var that will enable all ocm flags.

   https://github.com/owncloud/ocis/pull/9784

* Enhancement - OCM related adjustments in graph: [#9788](https://github.com/owncloud/ocis/pull/9788)

   The /users enpdoint of the graph service was changed with respect to how it
   handles OCM federeated users: - The 'userType' property is now alway returned.
   As new usertype 'Federated' was introduced. To indicate that the user is a
   federated user. - Supported for filtering users by 'userType' as added. Queries
   like "$filter=userType eq 'Federated'" are now possible. - Federated users are
   only returned when explicitly requested via filter. When no filter is provider
   only 'Member' users are returned.

   https://github.com/owncloud/ocis/issues/9702
   https://github.com/owncloud/ocis/pull/9788
   https://github.com/owncloud/ocis/pull/9757

* Enhancement - Update web to v10.1.0: [#9832](https://github.com/owncloud/ocis/pull/9832)

   Tags: web

   We updated ownCloud Web to v10.1.0. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#11263](https://github.com/owncloud/web/pull/11263) Show
   more toggle in space members view not reactive - Bugfix
   [owncloud/web#11299](https://github.com/owncloud/web/pull/11299) Uploading
   nested folders - Bugfix
   [owncloud/web#11312](https://github.com/owncloud/web/pull/11312) Toggling
   checkboxes via keyboard - Bugfix
   [owncloud/web#11313](https://github.com/owncloud/web/pull/11313) Prevent
   horizontal table scroll - Bugfix
   [owncloud/web#11342](https://github.com/owncloud/web/pull/11342) Keyboard
   actions for disabled resources - Bugfix
   [owncloud/web#11348](https://github.com/owncloud/web/pull/11348) OCM page reload
   - Bugfix [owncloud/web#11353](https://github.com/owncloud/web/pull/11353)
   Closing an app opened via in-app open feature stays open - Enhancement
   [owncloud/web#11287](https://github.com/owncloud/web/pull/11287) Add quota
   information to account page - Enhancement
   [owncloud/web#11302](https://github.com/owncloud/web/pull/11302) App Store app -
   Enhancement [owncloud/web#11310](https://github.com/owncloud/web/pull/11310)
   Redesign share link modal - Enhancement
   [owncloud/web#11315](https://github.com/owncloud/web/pull/11315) Accessibility -
   Enhancement [owncloud/web#11329](https://github.com/owncloud/web/pull/11329)
   Files as links - Enhancement
   [owncloud/web#11344](https://github.com/owncloud/web/pull/11344) Unstick top bar

   https://github.com/owncloud/ocis/pull/9832
   https://github.com/owncloud/web/releases/tag/v10.1.0

* Enhancement - Bump reva to 2.23.0: [#9852](https://github.com/owncloud/ocis/pull/9852)

  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4741): Always find unique providers
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4762): Blanks in dav Content-Disposition header
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4775): Fixed the response code when copying the shared from to personal
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4633): Allow all users to create internal links
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4771): Deleting resources via their id
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4768): Fixed the file name validation if nodeid is used
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4758): Fix moving locked files, enable handling locked files via ocdav
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4774): Fix micro ocdav service init and registration
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4776): Fix response code for DEL file that in postprocessing
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4746): Uploading the same file multiple times leads to orphaned blobs
  *   Fix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4778): Zero byte uploads
  *   Chg [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4759): Updated to the latest version of the go-cs3apis
  *   Chg [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4773): Ocis bumped
  *   Enh [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4766): Set archiver output format via query parameter
  *   Enh [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4763): Improve posixfs storage driver

   https://github.com/owncloud/ocis/pull/9852
   https://github.com/owncloud/ocis/pull/9763
   https://github.com/owncloud/ocis/pull/9714
   https://github.com/owncloud/ocis/pull/9715

# Changelog for [6.2.0] (2024-07-30)

The following sections list the changes for 6.2.0.

[6.2.0]: https://github.com/owncloud/ocis/compare/v5.0.6...v6.2.0

## Summary

* Bugfix - Fix restarting of postprocessing: [#6945](https://github.com/owncloud/ocis/pull/6945)
* Bugfix - Fix crash on empty tracing provider: [#9622](https://github.com/owncloud/ocis/pull/9622)
* Bugfix - Fixed the file name validation if nodeid is used: [#9634](https://github.com/owncloud/ocis/pull/9634)
* Bugfix - Fix a missing SecureView permission attribute in the REPORT response: [#9638](https://github.com/owncloud/ocis/pull/9638)
* Bugfix - Fixed the channel lock in a workers pool: [#9647](https://github.com/owncloud/ocis/pull/9647)
* Bugfix - Missing invitation in permission responses: [#9652](https://github.com/owncloud/ocis/pull/9652)
* Bugfix - Repair nats-js-kv registry: [#9662](https://github.com/owncloud/ocis/pull/9662)
* Bugfix - Fix panic: [#9673](https://github.com/owncloud/ocis/pull/9673)
* Bugfix - Fixed the response code when copying the shared from to personal: [#9677](https://github.com/owncloud/ocis/pull/9677)
* Bugfix - Fixed response code for DELETE file that is in postprocessing: [#9689](https://github.com/owncloud/ocis/pull/9689)
* Change - Remove unavailable web config options: [#9679](https://github.com/owncloud/ocis/pull/9679)
* Enhancement - Introduce auth-app service: [#9079](https://github.com/owncloud/ocis/pull/9079)
* Enhancement - Add support for proof keys for the collaboration service: [#9366](https://github.com/owncloud/ocis/pull/9366)
* Enhancement - Log user agent and remote addr on auth errors: [#9475](https://github.com/owncloud/ocis/pull/9475)
* Enhancement - Add missing WOPI features: [#9580](https://github.com/owncloud/ocis/pull/9580)
* Enhancement - Bump commitID for web: [#9631](https://github.com/owncloud/ocis/pull/9631)
* Enhancement - Remove oidc-go dependency: [#9641](https://github.com/owncloud/ocis/pull/9641)
* Enhancement - Improve the collaboration service logging: [#9653](https://github.com/owncloud/ocis/pull/9653)
* Enhancement - Fix trash command: [#9665](https://github.com/owncloud/ocis/pull/9665)
* Enhancement - Added the debugging to full ocis docker example: [#9666](https://github.com/owncloud/ocis/pull/9666)
* Enhancement - Add locking support for MS Office Online Server: [#9685](https://github.com/owncloud/ocis/pull/9685)
* Enhancement - Bump reva to v.2.22.0: [#9690](https://github.com/owncloud/ocis/pull/9690)
* Enhancement - Add `--diff` to the `ocis init` command: [#9693](https://github.com/owncloud/ocis/pull/9693)
* Enhancement - Update web to v10.0.0: [#9707](https://github.com/owncloud/ocis/pull/9707)

## Details

* Bugfix - Fix restarting of postprocessing: [#6945](https://github.com/owncloud/ocis/pull/6945)

   We fixed a bug where non-admin requests to admin resources would get 401
   Unauthorized. Now, the server sends 403 Forbidden response.

   https://github.com/owncloud/ocis/issues/5938
   https://github.com/owncloud/ocis/pull/6945

* Bugfix - Fix crash on empty tracing provider: [#9622](https://github.com/owncloud/ocis/pull/9622)

   We have fixed a bug that causes a crash when OCIS_TRACING_ENABLED is set to
   true, but no tracing Endpoints or Collectors have been provided.a

   https://github.com/owncloud/ocis/issues/7012
   https://github.com/owncloud/ocis/pull/9622

* Bugfix - Fixed the file name validation if nodeid is used: [#9634](https://github.com/owncloud/ocis/pull/9634)

   We have fixed the file name validation if nodeid is used

   https://github.com/owncloud/ocis/issues/9568
   https://github.com/owncloud/ocis/pull/9634

* Bugfix - Fix a missing SecureView permission attribute in the REPORT response: [#9638](https://github.com/owncloud/ocis/pull/9638)

   We fixed a missing SecureView permission attribute in the REPORT response.

   https://github.com/owncloud/ocis/issues/9607
   https://github.com/owncloud/ocis/pull/9638

* Bugfix - Fixed the channel lock in a workers pool: [#9647](https://github.com/owncloud/ocis/pull/9647)

   We fixed an error when the users can't see more than 10 shares

   https://github.com/owncloud/ocis/issues/9642
   https://github.com/owncloud/ocis/pull/9647

* Bugfix - Missing invitation in permission responses: [#9652](https://github.com/owncloud/ocis/pull/9652)

   We have fixed a bug where the `invitation` property was missing in the response
   when creating, listing or updating graph permissions.

   https://github.com/owncloud/ocis/issues/9571
   https://github.com/owncloud/ocis/pull/9652

* Bugfix - Repair nats-js-kv registry: [#9662](https://github.com/owncloud/ocis/pull/9662)

   The registry would always send traffic to only one pod. This is now fixed and
   load should be spread evenly. Also implements watcher method so the cache can
   use it.

   https://github.com/owncloud/ocis/pull/9662
   https://github.com/owncloud/ocis/pull/9654
   https://github.com/owncloud/ocis/pull/9620

* Bugfix - Fix panic: [#9673](https://github.com/owncloud/ocis/pull/9673)

   Fixes panic occuring when the nats-js-kv is not properly initialized.

   https://github.com/owncloud/ocis/pull/9673

* Bugfix - Fixed the response code when copying the shared from to personal: [#9677](https://github.com/owncloud/ocis/pull/9677)

   We fixed the response code when copying the file from shares to personal space
   with a secure view role.

   https://github.com/owncloud/ocis/issues/9482
   https://github.com/owncloud/ocis/pull/9677

* Bugfix - Fixed response code for DELETE file that is in postprocessing: [#9689](https://github.com/owncloud/ocis/pull/9689)

   We fixed the response code when DELETE and MOVE requests to the file that is
   still in post-processing.

   https://github.com/owncloud/ocis/issues/9432
   https://github.com/owncloud/ocis/pull/9689

* Change - Remove unavailable web config options: [#9679](https://github.com/owncloud/ocis/pull/9679)

   We've removed config options from the web package, that are no longer available
   in web. Check the web changelog for more details.

   https://github.com/owncloud/ocis/pull/9679
   https://github.com/owncloud/web/pull/11256
   https://github.com/owncloud/web/pull/10122
   https://github.com/owncloud/web/pull/11260

* Enhancement - Introduce auth-app service: [#9079](https://github.com/owncloud/ocis/pull/9079)

   Introduce a new service, auth-app, that provides authentication and
   authorization services for applications.

   https://github.com/owncloud/ocis/pull/9079

* Enhancement - Add support for proof keys for the collaboration service: [#9366](https://github.com/owncloud/ocis/pull/9366)

   Proof keys support will be enabled by default in order to ensure that all the
   requests come from a trusted source. Since proof keys must be set in the WOPI
   app (OnlyOffice, Collabora...), it's possible to disable the verification of the
   proof keys via configuration.

   https://github.com/owncloud/ocis/pull/9366

* Enhancement - Log user agent and remote addr on auth errors: [#9475](https://github.com/owncloud/ocis/pull/9475)

   The proxy will now log `user_agent`, `client.address`, `network.peer.address`
   and `network.peer.port` to help operations debug authentication errors. The
   latter three follow the [Semantic Conventions 1.26.0 / General /
   Attributes](https://opentelemetry.io/docs/specs/semconv/general/attributes/)
   naming to better integrate with log aggregation tools.

   https://github.com/owncloud/ocis/pull/9475

* Enhancement - Add missing WOPI features: [#9580](https://github.com/owncloud/ocis/pull/9580)

   We added the feature to disable the chat for onlyoffice and added the missing
   language parameters to the wopi app url.

   https://github.com/owncloud/ocis/pull/9580

* Enhancement - Bump commitID for web: [#9631](https://github.com/owncloud/ocis/pull/9631)

   Bump the web commitID to current master

   https://github.com/owncloud/ocis/pull/9631

* Enhancement - Remove oidc-go dependency: [#9641](https://github.com/owncloud/ocis/pull/9641)

   Removes the kgol/oidc-go dependency because it was flagged by dependabot.
   Luckily us we only used it for importing the strings "profile" and "email".

   https://github.com/owncloud/ocis/pull/9641

* Enhancement - Improve the collaboration service logging: [#9653](https://github.com/owncloud/ocis/pull/9653)

   We added more debug log information to the collaboration service. This is vital
   for scenarios when we need to debug in remote setups.

   https://github.com/owncloud/ocis/pull/9653

* Enhancement - Fix trash command: [#9665](https://github.com/owncloud/ocis/pull/9665)

   The `ocis trash purge-empty-dirs` command should work on any storage provider,
   not just `storage/users`.

   https://github.com/owncloud/ocis/pull/9665

* Enhancement - Added the debugging to full ocis docker example: [#9666](https://github.com/owncloud/ocis/pull/9666)

   Added the debugging to full ocis docker example

   https://github.com/owncloud/ocis/pull/9666

* Enhancement - Add locking support for MS Office Online Server: [#9685](https://github.com/owncloud/ocis/pull/9685)

   We added support for the special kind of lock tokens that MS Office Online
   Server uses to lock files via the Wopi protocol. It will only be active if you
   set the `COLLABORATION_APP_NAME` environment variable to
   `MicrosoftOfficeOnline`.

   https://github.com/owncloud/ocis/pull/9685

* Enhancement - Bump reva to v.2.22.0: [#9690](https://github.com/owncloud/ocis/pull/9690)

  *   Bugfix [cs3org/reva#4741](https://github.com/cs3org/reva/pull/4741): Always find unique providers
  *   Bugfix [cs3org/reva#4762](https://github.com/cs3org/reva/pull/4762): Blanks in dav Content-Disposition header
  *   Bugfix [cs3org/reva#4775](https://github.com/cs3org/reva/pull/4775): Fixed the response code when copying the shared from to personal
  *   Bugfix [cs3org/reva#4633](https://github.com/cs3org/reva/pull/4633): Allow all users to create internal links
  *   Bugfix [cs3org/reva#4771](https://github.com/cs3org/reva/pull/4771): Deleting resources via their id
  *   Bugfix [cs3org/reva#4768](https://github.com/cs3org/reva/pull/4768): Fixed the file name validation if nodeid is used
  *   Bugfix [cs3org/reva#4758](https://github.com/cs3org/reva/pull/4758): Fix moving locked files, enable handling locked files via ocdav
  *   Bugfix [cs3org/reva#4774](https://github.com/cs3org/reva/pull/4774): Fix micro ocdav service init and registration
  *   Bugfix [cs3org/reva#4776](https://github.com/cs3org/reva/pull/4776): Fix response code for DEL file that in postprocessing
  *   Bugfix [cs3org/reva#4746](https://github.com/cs3org/reva/pull/4746): Uploading the same file multiple times leads to orphaned blobs
  *   Bugfix [cs3org/reva#4778](https://github.com/cs3org/reva/pull/4778): Zero byte uploads
  *   Change [cs3org/reva#4759](https://github.com/cs3org/reva/pull/4759): Updated to the latest version of the go-cs3apis
  *   Change [cs3org/reva#4773](https://github.com/cs3org/reva/pull/4773): Ocis bumped
  *   Enhancement [cs3org/reva#4766](https://github.com/cs3org/reva/pull/4766): Set archiver output format via query parameter
  *   Enhancement [cs3org/reva#4763](https://github.com/cs3org/reva/pull/4763): Improve posixfs storage driver

   https://github.com/owncloud/ocis/pull/9690
   https://github.com/owncloud/ocis/pull/9662
   https://github.com/owncloud/ocis/pull/9621
   https://github.com/owncloud/ocis/pull/9677
   https://github.com/owncloud/ocis/pull/9689

* Enhancement - Add `--diff` to the `ocis init` command: [#9693](https://github.com/owncloud/ocis/pull/9693)

   We have added a new flag `--diff` to the `ocis init` command to show the diff of
   the configuration files. This is useful to see what has changed in the
   configuration files when you run the `ocis init` command. The diff is stored to
   the ocispath in the config folder as ocis.config.patch and can be applied using
   the linux `patch` command.

   https://github.com/owncloud/ocis/issues/3645
   https://github.com/owncloud/ocis/pull/9693

* Enhancement - Update web to v10.0.0: [#9707](https://github.com/owncloud/ocis/pull/9707)

   Tags: web

   We updated ownCloud Web to v10.0.0. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#11174](https://github.com/owncloud/web/pull/11174)
   Downloading files via the app top bar doesn't reflect the current state - Bugfix
   [owncloud/web#11186](https://github.com/owncloud/web/pull/11186) Images
   stretched in preview app in Safari browser - Bugfix
   [owncloud/web#11194](https://github.com/owncloud/web/pull/11194) UI breaks when
   tags are numbers - Bugfix
   [owncloud/web#11253](https://github.com/owncloud/web/pull/11253) Open dropdown
   menu does not deselect other items in admin settings app - Change
   [owncloud/web#11251](https://github.com/owncloud/web/pull/11251) Removal of
   Deprecated Config Options - Change
   [owncloud/web#11252](https://github.com/owncloud/web/pull/11252) Remove draw-io
   as default app - Change
   [owncloud/web#11277](https://github.com/owncloud/web/pull/11277) Remove set as
   description space action - Enhancement
   [owncloud/web#11166](https://github.com/owncloud/web/pull/11166) Add share role
   icon to shared with me table - Enhancement
   [owncloud/web#11258](https://github.com/owncloud/web/pull/11258) Application
   menu extension point - Enhancement
   [owncloud/web#11279](https://github.com/owncloud/web/pull/11279) Move quota info
   to general info in user menu - Enhancement
   [owncloud/web#11280](https://github.com/owncloud/web/pull/11280) Add edit
   description button to space info

   https://github.com/owncloud/ocis/pull/9707
   https://github.com/owncloud/web/releases/tag/v10.0.0

# Changelog for [5.0.6] (2024-07-17)

The following sections list the changes for 5.0.6.

[5.0.6]: https://github.com/owncloud/ocis/compare/v6.1.0...v5.0.6

## Summary

* Bugfix - Allow all uploads to restart: [#9506](https://github.com/owncloud/ocis/pull/9506)
* Bugfix - Fix the email notification service: [#9514](https://github.com/owncloud/ocis/pull/9514)
* Enhancement - Limit concurrent thumbnail requests: [#9199](https://github.com/owncloud/ocis/pull/9199)
* Enhancement - Update web to v8.0.4: [#9429](https://github.com/owncloud/ocis/pull/9429)
* Enhancement - Add cli to purge revisions: [#9497](https://github.com/owncloud/ocis/pull/9497)

## Details

* Bugfix - Allow all uploads to restart: [#9506](https://github.com/owncloud/ocis/pull/9506)

   On postprocessing-restart, allow all uploads to restart even if one fails.

   https://github.com/owncloud/ocis/pull/9506

* Bugfix - Fix the email notification service: [#9514](https://github.com/owncloud/ocis/pull/9514)

   We fixed an error in the notification service that caused the email notification
   to fail when the user's display name contained special characters.

   https://github.com/owncloud/ocis/issues/9402
   https://github.com/owncloud/ocis/pull/9514

* Enhancement - Limit concurrent thumbnail requests: [#9199](https://github.com/owncloud/ocis/pull/9199)

   The number of concurrent requests to the thumbnail service can be limited now to
   have more control over the consumed system resources.

   https://github.com/owncloud/ocis/pull/9199

* Enhancement - Update web to v8.0.4: [#9429](https://github.com/owncloud/ocis/pull/9429)

   Tags: web

   We updated ownCloud Web to v8.0.4. Please refer to the changelog (linked) for
   details on the web release.

   - Bugfix [owncloud/web#10814](https://github.com/owncloud/web/issues/10814):
   Vertical scroll for OcModal on small screens - Bugfix
   [owncloud/web#10918](https://github.com/owncloud/web/issues/10918): Resource
   deselection on right-click - Bugfix
   [owncloud/web#10920](https://github.com/owncloud/web/pull/10920): Resources with
   name consist of number won't show up in trash bin - Bugfix
   [owncloud/web#10941](https://github.com/owncloud/web/issues/10941): Space not
   updating on navigation - Bugfix
   [owncloud/web#11063](https://github.com/owncloud/web/issues/11063): Enforce
   shortcut URL protocol - Bugfix
   [owncloud/web#11092](https://github.com/owncloud/web/issues/11092): Browser
   confirmation dialog after closing editor - Bugfix
   [owncloud/web#11091](https://github.com/owncloud/web/issues/11091): Button focus
   when closing editor - Bugfix
   [owncloud/web#10942](https://github.com/owncloud/web/issues/10942): Keyboard
   navigation breaking - Bugfix
   [owncloud/web#11086](https://github.com/owncloud/web/pull/11086): Opening public
   links with an expired token

   https://github.com/owncloud/ocis/pull/9429
   https://github.com/owncloud/ocis/pull/9510
   https://github.com/owncloud/web/releases/tag/v8.0.3
   https://github.com/owncloud/web/releases/tag/v8.0.4

* Enhancement - Add cli to purge revisions: [#9497](https://github.com/owncloud/ocis/pull/9497)

   Adds a cli that allows removing all revisions for a storage-provider.

   https://github.com/owncloud/ocis/pull/9497

# Changelog for [6.1.0] (2024-07-08)

The following sections list the changes for 6.1.0.

[6.1.0]: https://github.com/owncloud/ocis/compare/v6.0.0...v6.1.0

## Summary

* Bugfix - Fix sharing-ng permission listings for personal and virtual drive items: [#9438](https://github.com/owncloud/ocis/pull/9438)
* Bugfix - Add inotify-tools and bash packages to docker files: [#9440](https://github.com/owncloud/ocis/pull/9440)
* Bugfix - Allow all uploads to restart: [#9465](https://github.com/owncloud/ocis/pull/9465)
* Bugfix - Fix the email notification service: [#9467](https://github.com/owncloud/ocis/pull/9467)
* Bugfix - Fix Password Reset: [#9479](https://github.com/owncloud/ocis/pull/9479)
* Bugfix - Fixed the email template: [#9484](https://github.com/owncloud/ocis/pull/9484)
* Bugfix - Polish secure view: [#9532](https://github.com/owncloud/ocis/pull/9532)
* Enhancement - Rudimentary OCM support in graph: [#8909](https://github.com/owncloud/ocis/pull/8909)
* Enhancement - Activitylog API: [#9361](https://github.com/owncloud/ocis/pull/9361)
* Enhancement - Add the backchannel logout event: [#9447](https://github.com/owncloud/ocis/pull/9447)
* Enhancement - Add fail flag to consistency check: [#9447](https://github.com/owncloud/ocis/pull/9447)
* Enhancement - Configurable OCM timeouts: [#9450](https://github.com/owncloud/ocis/pull/9450)
* Enhancement - Deprecate gateway environment variables: [#9451](https://github.com/owncloud/ocis/pull/9451)
* Enhancement - Allow reindexing all spaces: [#9456](https://github.com/owncloud/ocis/pull/9456)
* Enhancement - Autoprovision group memberships: [#9458](https://github.com/owncloud/ocis/pull/9458)
* Enhancement - Allow disable versioning: [#9473](https://github.com/owncloud/ocis/pull/9473)
* Enhancement - Empty trash directories: [#9483](https://github.com/owncloud/ocis/pull/9483)
* Enhancement - Various fixes for the activitylog service: [#9485](https://github.com/owncloud/ocis/pull/9485)
* Enhancement - Add cli to purge revisions: [#9497](https://github.com/owncloud/ocis/pull/9497)
* Enhancement - Update web to v9.1.0: [#9547](https://github.com/owncloud/ocis/pull/9547)
* Enhancement - Bump reva to v2.21.0: [#9556](https://github.com/owncloud/ocis/pull/9556)

## Details

* Bugfix - Fix sharing-ng permission listings for personal and virtual drive items: [#9438](https://github.com/owncloud/ocis/pull/9438)

   Fixes an issue where the sharing-ng service was not able to list permissions for
   personal and virtual drive items.

   https://github.com/owncloud/ocis/issues/8922
   https://github.com/owncloud/ocis/pull/9438

* Bugfix - Add inotify-tools and bash packages to docker files: [#9440](https://github.com/owncloud/ocis/pull/9440)

   We need both packages to make posixfs work. Later, once the golang package is
   fixed to not depend on bash any more, bash can be removed again.

   https://github.com/owncloud/ocis/pull/9440

* Bugfix - Allow all uploads to restart: [#9465](https://github.com/owncloud/ocis/pull/9465)

   On postprocessing-restart, allow all uploads to restart even if one fails.

   https://github.com/owncloud/ocis/pull/9465

* Bugfix - Fix the email notification service: [#9467](https://github.com/owncloud/ocis/pull/9467)

   We fixed an error in the notification service that caused the email notification
   to fail when the user's display name contained special characters.

   https://github.com/owncloud/ocis/issues/9402
   https://github.com/owncloud/ocis/pull/9467

* Bugfix - Fix Password Reset: [#9479](https://github.com/owncloud/ocis/pull/9479)

   The `ocis idm resetpassword` always used the hardcoded `admin` name for the
   user. Now user name can be specified via the `--user-name` (`-u`) flag.

   https://github.com/owncloud/ocis/pull/9479

* Bugfix - Fixed the email template: [#9484](https://github.com/owncloud/ocis/pull/9484)

   Fixed the email template when the description was marked as a link.

   https://github.com/owncloud/ocis/issues/8424
   https://github.com/owncloud/ocis/pull/9484

* Bugfix - Polish secure view: [#9532](https://github.com/owncloud/ocis/pull/9532)

   We fixed a bug where viewing pdf files in secure view mode was not possible.
   Secure view access on space roots was dropped because of unwanted side effects.

   https://github.com/owncloud/ocis/pull/9532

* Enhancement - Rudimentary OCM support in graph: [#8909](https://github.com/owncloud/ocis/pull/8909)

   We now allow creating and accepting OCM shares.

   https://github.com/owncloud/ocis/pull/8909

* Enhancement - Activitylog API: [#9361](https://github.com/owncloud/ocis/pull/9361)

   Adds an api to the `activitylog` service which allows retrieving data by clients
   to show item activities

   https://github.com/owncloud/ocis/pull/9361

* Enhancement - Add the backchannel logout event: [#9447](https://github.com/owncloud/ocis/pull/9447)

   We've added the backchannel logout event

   https://github.com/owncloud/ocis/issues/9355
   https://github.com/owncloud/ocis/pull/9447

* Enhancement - Add fail flag to consistency check: [#9447](https://github.com/owncloud/ocis/pull/9447)

   We added a `--fail` flag to the `ocis backup consistency` command. If set to
   true, the command will return a non-zero exit code if any inconsistencies are
   found. This allows you to use the command in scripts and CI/CD pipelines to
   ensure that backups are consistent.

   https://github.com/owncloud/ocis/pull/9447

* Enhancement - Configurable OCM timeouts: [#9450](https://github.com/owncloud/ocis/pull/9450)

   We added `OCM_OCM_INVITE_MANAGER_TOKEN_EXPIRATION` and
   `OCM_OCM_INVITE_MANAGER_TIMEOUT` to allow changing the default invite token
   duration as well as the request timeout for requests made to other instances.

   https://github.com/owncloud/ocis/pull/9450

* Enhancement - Deprecate gateway environment variables: [#9451](https://github.com/owncloud/ocis/pull/9451)

   Deprecate service specific `_GATEWAY_NAME` env vars. It makes no sense to point
   one specific service to a different gateway.

   https://github.com/owncloud/ocis/pull/9451

* Enhancement - Allow reindexing all spaces: [#9456](https://github.com/owncloud/ocis/pull/9456)

   Adds a `--all-spaces` flag to the `ocis search index` command to allow
   reindexing all spaces at once.

   https://github.com/owncloud/ocis/pull/9456

* Enhancement - Autoprovision group memberships: [#9458](https://github.com/owncloud/ocis/pull/9458)

   When PROXY_AUTOPROVISION_ACCOUNTS is enabled it is now possible to automatically
   maintain the group memberships of users via a configurable OIDC claim.

   https://github.com/owncloud/ocis/issues/5538
   https://github.com/owncloud/ocis/pull/9458

* Enhancement - Allow disable versioning: [#9473](https://github.com/owncloud/ocis/pull/9473)

   Adds new configuration options to disable versioning for the storage providers

   https://github.com/owncloud/ocis/pull/9473

* Enhancement - Empty trash directories: [#9483](https://github.com/owncloud/ocis/pull/9483)

   We have added a cli-command that allows cleaning up empty directories in the
   trashbins folder structure in decomposedFS.

   https://github.com/owncloud/ocis/issues/9393
   https://github.com/owncloud/ocis/issues/9271
   https://github.com/owncloud/ocis/pull/9483

* Enhancement - Various fixes for the activitylog service: [#9485](https://github.com/owncloud/ocis/pull/9485)

   First round of fixes to make the activitylog service more robust and reliable.

   https://github.com/owncloud/ocis/pull/9485
   https://github.com/owncloud/ocis/pull/9467

* Enhancement - Add cli to purge revisions: [#9497](https://github.com/owncloud/ocis/pull/9497)

   Adds a cli that allows removing all revisions for a storage-provider.

   https://github.com/owncloud/ocis/pull/9497

* Enhancement - Update web to v9.1.0: [#9547](https://github.com/owncloud/ocis/pull/9547)

   Tags: web

   We updated ownCloud Web to v9.1.0. Please refer to the changelog (linked) for
   details on the web release.

  * Bugfix [owncloud/web#11058](https://github.com/owncloud/web/pull/11058): Resetting user after logout
  * Bugfix [owncloud/web#11059](https://github.com/owncloud/web/pull/11059): Admin settings UI update after save
  * Bugfix [owncloud/web#11068](https://github.com/owncloud/web/pull/11068): Editor save after token renewal
  * Bugfix [owncloud/web#11132](https://github.com/owncloud/web/pull/11132): Trash bin breaking on navigation
  * Bugfix [owncloud/web#11135](https://github.com/owncloud/web/issues/11135): Tooltips in trashbin covered
  * Bugfix [owncloud/web#11137](https://github.com/owncloud/web/pull/11137): Duplicated elements on public link page
  * Bugfix [owncloud/web#11139](https://github.com/owncloud/web/pull/11139): Secure view default action
  * Enhancement [owncloud/web#5387](https://github.com/owncloud/web/issues/5387): Accessibility improvements
  * Enhancement [owncloud/web#10996](https://github.com/owncloud/web/pull/10996): Activities sidebar app panel
  * Enhancement [owncloud/web#11054](https://github.com/owncloud/web/pull/11054): Consistent initial loading spinner
  * Enhancement [owncloud/web#11057](https://github.com/owncloud/web/pull/11057): Add action drop down to app top bar
  * Enhancement [owncloud/web#11060](https://github.com/owncloud/web/pull/11060): Decrease text editor loading times
  * Enhancement [owncloud/web#11077](https://github.com/owncloud/web/pull/11077): Reduce network load on token renewal
  * Enhancement [owncloud/web#11085](https://github.com/owncloud/web/pull/11085): Open file directly from app
  * Enhancement [owncloud/web#11093](https://github.com/owncloud/web/pull/11093): Enable default autosave in editors

   https://github.com/owncloud/ocis/pull/9547
   https://github.com/owncloud/web/releases/tag/v9.1.0

* Enhancement - Bump reva to v2.21.0: [#9556](https://github.com/owncloud/ocis/pull/9556)

  *   Bugfix [cs3org/reva#4740](https://github.com/cs3org/reva/pull/4740): Disallow reserved filenames
  *   Bugfix [cs3org/reva#4748](https://github.com/cs3org/reva/pull/4748): Quotes in dav Content-Disposition header
  *   Bugfix [cs3org/reva#4750](https://github.com/cs3org/reva/pull/4750): Validate a space path
  *   Enhancement [cs3org/reva#4737](https://github.com/cs3org/reva/pull/4737): Add the backchannel logout event
  *   Enhancement [cs3org/reva#4749](https://github.com/cs3org/reva/pull/4749): DAV error codes
  *   Enhancement [cs3org/reva#4742](https://github.com/cs3org/reva/pull/4742): Expose disable-versioning configuration option
  *   Enhancement [cs3org/reva#4739](https://github.com/cs3org/reva/pull/4739): Improve posixfs storage driver
  *   Enhancement [cs3org/reva#4738](https://github.com/cs3org/reva/pull/4738): Add GetServiceUserToken() method to utils pkg

   https://github.com/owncloud/ocis/pull/9556
   https://github.com/owncloud/ocis/pull/9473

# Changelog for [6.0.0] (2024-06-19)

The following sections list the changes for 6.0.0.

[6.0.0]: https://github.com/owncloud/ocis/compare/v5.0.5...v6.0.0

## Summary

* Bugfix - Fix an error when lock/unlock a public shared file: [#8472](https://github.com/owncloud/ocis/pull/8472)
* Bugfix - Fix the docker-compose wopi: [#8483](https://github.com/owncloud/ocis/pull/8483)
* Bugfix - Fix remove/update share permissions: [#8529](https://github.com/owncloud/ocis/pull/8529)
* Bugfix - Correct the default mapping of roles: [#8534](https://github.com/owncloud/ocis/pull/8534)
* Bugfix - Fix graph drive invite: [#8538](https://github.com/owncloud/ocis/pull/8538)
* Bugfix - Fix the mount points naming: [#8543](https://github.com/owncloud/ocis/pull/8543)
* Bugfix - We now always select the next clients when autoaccepting shares: [#8570](https://github.com/owncloud/ocis/pull/8570)
* Bugfix - Always select next before making calls: [#8578](https://github.com/owncloud/ocis/pull/8578)
* Bugfix - Fix sharing invite on virtual drive: [#8609](https://github.com/owncloud/ocis/pull/8609)
* Bugfix - Prevent copying a file to a parent folder: [#8649](https://github.com/owncloud/ocis/pull/8649)
* Bugfix - Disable Multipart uploads: [#8666](https://github.com/owncloud/ocis/pull/8666)
* Bugfix - Internal links shouldn't have a password: [#8668](https://github.com/owncloud/ocis/pull/8668)
* Bugfix - Fix uploading via a public link: [#8702](https://github.com/owncloud/ocis/pull/8702)
* Bugfix - Mask user email in output: [#8726](https://github.com/owncloud/ocis/issues/8726)
* Bugfix - Fix restarting of postprocessing: [#8782](https://github.com/owncloud/ocis/pull/8782)
* Bugfix - Fix the create personal space cache: [#8799](https://github.com/owncloud/ocis/pull/8799)
* Bugfix - Fix removing groups from space: [#8803](https://github.com/owncloud/ocis/pull/8803)
* Bugfix - Validate conditions for sharing roles by resource type: [#8815](https://github.com/owncloud/ocis/pull/8815)
* Bugfix - Fix creating the drive item: [#8817](https://github.com/owncloud/ocis/pull/8817)
* Bugfix - Fix unmount item from share: [#8827](https://github.com/owncloud/ocis/pull/8827)
* Bugfix - Fix creating new WOPI documents on public shares: [#8828](https://github.com/owncloud/ocis/pull/8828)
* Bugfix - Nats reconnects: [#8880](https://github.com/owncloud/ocis/pull/8880)
* Bugfix - Update the admin user role assignment to enforce the config: [#8897](https://github.com/owncloud/ocis/pull/8897)
* Bugfix - Fix affected users on sses: [#8928](https://github.com/owncloud/ocis/pull/8928)
* Bugfix - Fix well-known rewrite endpoint: [#8946](https://github.com/owncloud/ocis/pull/8946)
* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981)
* Bugfix - Fix collaboration registry setting: [#9105](https://github.com/owncloud/ocis/pull/9105)
* Bugfix - Service startup of WOPI example: [#9127](https://github.com/owncloud/ocis/pull/9127)
* Bugfix - Fix the status code for multiple mount and unmount share: [#9193](https://github.com/owncloud/ocis/pull/9193)
* Bugfix - Don't show thumbnails for secureview shares: [#9299](https://github.com/owncloud/ocis/pull/9299)
* Bugfix - Fix share update: [#9301](https://github.com/owncloud/ocis/pull/9301)
* Bugfix - Fix the error translation from utils: [#9331](https://github.com/owncloud/ocis/pull/9331)
* Bugfix - Fix the settings metedata tests: [#9341](https://github.com/owncloud/ocis/pull/9341)
* Bugfix - The hidden shares have been excluded from a search result: [#9371](https://github.com/owncloud/ocis/pull/9371)
* Bugfix - Encode Registry Keys: [#9385](https://github.com/owncloud/ocis/pull/9385)
* Change - Change the default store for presigned keys to nats-js-kv: [#8419](https://github.com/owncloud/ocis/pull/8419)
* Change - Disable resharing by default for deprecation: [#8653](https://github.com/owncloud/ocis/pull/8653)
* Change - The `filesystem` backend for the settings service has been removed: [#9138](https://github.com/owncloud/ocis/pull/9138)
* Change - Define maximum input image dimensions and size when generating previews: [#9360](https://github.com/owncloud/ocis/pull/9360)
* Enhancement - Introduce staticroutes package & remove well-known OIDC middleware: [#6095](https://github.com/owncloud/ocis/issues/6095)
* Enhancement - Graphs endpoint for mounting and unmounting shares: [#7885](https://github.com/owncloud/ocis/pull/7885)
* Enhancement - Add epub reader to web default apps: [#8410](https://github.com/owncloud/ocis/pull/8410)
* Enhancement - Change Cors default settings: [#8518](https://github.com/owncloud/ocis/pull/8518)
* Enhancement - Custom WEB App Loading: [#8523](https://github.com/owncloud/ocis/pull/8523)
* Enhancement - Update to go 1.22: [#8586](https://github.com/owncloud/ocis/pull/8586)
* Enhancement - Send more sse events: [#8587](https://github.com/owncloud/ocis/pull/8587)
* Enhancement - Send SSE when file is locked/unlocked: [#8602](https://github.com/owncloud/ocis/pull/8602)
* Enhancement - Add the spaceID to sse: [#8614](https://github.com/owncloud/ocis/pull/8614)
* Enhancement - The graph endpoints for listing permission works for spaces now: [#8642](https://github.com/owncloud/ocis/pull/8642)
* Enhancement - Bump keycloak: [#8687](https://github.com/owncloud/ocis/pull/8687)
* Enhancement - Make IDP cookies same site strict: [#8716](https://github.com/owncloud/ocis/pull/8716)
* Enhancement - Make server side space templates production ready: [#8723](https://github.com/owncloud/ocis/pull/8723)
* Enhancement - Sharing NG role names and descriptions: [#8743](https://github.com/owncloud/ocis/pull/8743)
* Enhancement - Ability to Change Share Item Visibility in Graph API: [#8750](https://github.com/owncloud/ocis/pull/8750)
* Enhancement - Enable web extension drawio by default: [#8760](https://github.com/owncloud/ocis/pull/8760)
* Enhancement - Remove resharing: [#8762](https://github.com/owncloud/ocis/pull/8762)
* Enhancement - Add CSP and other security related headers to oCIS: [#8777](https://github.com/owncloud/ocis/pull/8777)
* Enhancement - Add FileTouched SSE Event: [#8778](https://github.com/owncloud/ocis/pull/8778)
* Enhancement - Prepare runners to start the services: [#8802](https://github.com/owncloud/ocis/pull/8802)
* Enhancement - Sharing SSEs: [#8854](https://github.com/owncloud/ocis/pull/8854)
* Enhancement - Secure viewer share role: [#8907](https://github.com/owncloud/ocis/pull/8907)
* Enhancement - Add Link SSEs: [#8908](https://github.com/owncloud/ocis/pull/8908)
* Enhancement - ShareeIDs in SSEs: [#8915](https://github.com/owncloud/ocis/pull/8915)
* Enhancement - Allow to resolve public shares without the ocs tokeninfo endpoint: [#8926](https://github.com/owncloud/ocis/pull/8926)
* Enhancement - Initiator-IDs: [#8936](https://github.com/owncloud/ocis/pull/8936)
* Enhancement - Add endpoint for getting drive items: [#8939](https://github.com/owncloud/ocis/pull/8939)
* Enhancement - Improve infected file handling: [#8947](https://github.com/owncloud/ocis/pull/8947)
* Enhancement - Configurable claims for auto-provisioning user accounts: [#8952](https://github.com/owncloud/ocis/pull/8952)
* Enhancement - Bump nats-js-kv pkg: [#8953](https://github.com/owncloud/ocis/pull/8953)
* Enhancement - Graph permission created date time: [#8954](https://github.com/owncloud/ocis/pull/8954)
* Enhancement - Add virus filter to sessions command: [#9041](https://github.com/owncloud/ocis/pull/9041)
* Enhancement - Assimilate `clean` into `sessions` command: [#9041](https://github.com/owncloud/ocis/pull/9041)
* Enhancement - Add remote item id to WebDAV report responses: [#9094](https://github.com/owncloud/ocis/issues/9094)
* Enhancement - Theme Processing and Logo Customization: [#9133](https://github.com/owncloud/ocis/pull/9133)
* Enhancement - Add watermark text: [#9144](https://github.com/owncloud/ocis/pull/9144)
* Enhancement - Update selected attributes of autoprovisioned users: [#9166](https://github.com/owncloud/ocis/pull/9166)
* Enhancement - Limit concurrent thumbnail requests: [#9199](https://github.com/owncloud/ocis/pull/9199)
* Enhancement - The storage-users doc updated: [#9228](https://github.com/owncloud/ocis/pull/9228)
* Enhancement - Docker compose example for ClamAV: [#9229](https://github.com/owncloud/ocis/pull/9229)
* Enhancement - Add command to check ocis backup consistency: [#9238](https://github.com/owncloud/ocis/pull/9238)
* Enhancement - Web server compression: [#9287](https://github.com/owncloud/ocis/pull/9287)
* Enhancement - Add secureview flag when listing apps via http: [#9289](https://github.com/owncloud/ocis/pull/9289)
* Enhancement - Activitylog Service: [#9327](https://github.com/owncloud/ocis/pull/9327)
* Enhancement - Update web to v9.0.0-alpha.7: [#9395](https://github.com/owncloud/ocis/pull/9395)
* Enhancement - Bump Reva to v2.20.0: [#9415](https://github.com/owncloud/ocis/pull/9415)

## Details

* Bugfix - Fix an error when lock/unlock a public shared file: [#8472](https://github.com/owncloud/ocis/pull/8472)

   We fixed a bug when anonymous user with viewer role in public link of a folder
   can lock/unlock a file inside it

   https://github.com/owncloud/ocis/issues/7785
   https://github.com/owncloud/ocis/pull/8472

* Bugfix - Fix the docker-compose wopi: [#8483](https://github.com/owncloud/ocis/pull/8483)

   We fixed an issue when Collabora is not available time by time after running the
   docker-compose wopi deployment

   https://github.com/owncloud/ocis/issues/8474
   https://github.com/owncloud/ocis/pull/8483

* Bugfix - Fix remove/update share permissions: [#8529](https://github.com/owncloud/ocis/pull/8529)

   This is a workaround that should prevent removing or changing the share
   permissions when the file is locked. These limitations have to be removed after
   the wopi server will be able to unlock the file properly. These limitations are
   not spread on the files inside the shared folder.

   https://github.com/owncloud/ocis/issues/8273
   https://github.com/owncloud/ocis/pull/8529
   https://github.com/cs3org/reva/pull/4534

* Bugfix - Correct the default mapping of roles: [#8534](https://github.com/owncloud/ocis/pull/8534)

   The default config for the OIDC role mapping was incorrect. Lightweight users
   are now assignable.

   https://github.com/owncloud/ocis/pull/8534

* Bugfix - Fix graph drive invite: [#8538](https://github.com/owncloud/ocis/pull/8538)

   We fixed the issue when sharing of personal drive is allowed via graph

   https://github.com/owncloud/ocis/issues/8494
   https://github.com/owncloud/ocis/pull/8538

* Bugfix - Fix the mount points naming: [#8543](https://github.com/owncloud/ocis/pull/8543)

   We fixed a bug that caused inconsistent naming when multiple users share the
   resource with same name to another user.

   https://github.com/owncloud/ocis/issues/8471
   https://github.com/owncloud/ocis/pull/8543

* Bugfix - We now always select the next clients when autoaccepting shares: [#8570](https://github.com/owncloud/ocis/pull/8570)

   https://github.com/owncloud/ocis/pull/8570

* Bugfix - Always select next before making calls: [#8578](https://github.com/owncloud/ocis/pull/8578)

   We now select the next client more often to spread out load

   https://github.com/owncloud/ocis/pull/8578

* Bugfix - Fix sharing invite on virtual drive: [#8609](https://github.com/owncloud/ocis/pull/8609)

   We fixed the issue when sharing of virtual drive with other users was allowed

   https://github.com/owncloud/ocis/issues/8495
   https://github.com/owncloud/ocis/pull/8609

* Bugfix - Prevent copying a file to a parent folder: [#8649](https://github.com/owncloud/ocis/pull/8649)

   When copying a file to a parent folder, the file would be copied to the parent
   folder, but the file would not be removed from the original folder.

   https://github.com/owncloud/ocis/issues/1230
   https://github.com/owncloud/ocis/pull/8649
   https://github.com/cs3org/reva/pull/4571
   %60

* Bugfix - Disable Multipart uploads: [#8666](https://github.com/owncloud/ocis/pull/8666)

   Disables multiparts uploads as they lead to high memory consumption

   https://github.com/owncloud/ocis/pull/8666

* Bugfix - Internal links shouldn't have a password: [#8668](https://github.com/owncloud/ocis/pull/8668)

   Internal links shouldn't have a password when create/update

   https://github.com/owncloud/ocis/issues/8619
   https://github.com/owncloud/ocis/pull/8668

* Bugfix - Fix uploading via a public link: [#8702](https://github.com/owncloud/ocis/pull/8702)

   Fix http error when uploading via a public link

   https://github.com/owncloud/ocis/issues/8699
   https://github.com/owncloud/ocis/pull/8702

* Bugfix - Mask user email in output: [#8726](https://github.com/owncloud/ocis/issues/8726)

   We have fixed a bug where the user email was not masked in the output and the
   user emails could be enumerated through the sharee search. This is the ocis side
   which adds an suiting config option to mask user emails in the output.

   https://github.com/owncloud/ocis/issues/8726
   https://github.com/cs3org/reva/pull/4603
   https://github.com/owncloud/ocis/pull/8764

* Bugfix - Fix restarting of postprocessing: [#8782](https://github.com/owncloud/ocis/pull/8782)

   When an upload is not found, the logic to restart postprocessing was bunked.
   Additionally we extended the upload sessions command to be able to restart the
   uploads without using a second command.

   NOTE: This also includes a breaking fix for the deprecated `ocis storage-users
   uploads list` command

   https://github.com/owncloud/ocis/pull/8782

* Bugfix - Fix the create personal space cache: [#8799](https://github.com/owncloud/ocis/pull/8799)

   We fixed a problem with the config for the create personal space cache which
   resulted in the cache never being used.

   https://github.com/owncloud/ocis/pull/8799

* Bugfix - Fix removing groups from space: [#8803](https://github.com/owncloud/ocis/pull/8803)

   We fixed a bug when unable to remove groups from space via graph

   https://github.com/owncloud/ocis/issues/8768
   https://github.com/owncloud/ocis/pull/8803

* Bugfix - Validate conditions for sharing roles by resource type: [#8815](https://github.com/owncloud/ocis/pull/8815)

   We improved the validation of the allowed sharing roles for specific resource
   type for various sharing related graph API endpoints. This allows e.g. the web
   client to restrict the sharing roles presented to the user based on the type of
   the resource that is being shared.

   https://github.com/owncloud/ocis/issues/8331
   https://github.com/owncloud/ocis/pull/8815

* Bugfix - Fix creating the drive item: [#8817](https://github.com/owncloud/ocis/pull/8817)

   We fixed the issue when creating a drive item with random item id was allowed

   https://github.com/owncloud/ocis/issues/8724
   https://github.com/owncloud/ocis/pull/8817

* Bugfix - Fix unmount item from share: [#8827](https://github.com/owncloud/ocis/pull/8827)

   We fixed the status code returned for the request to delete a driveitem.

   https://github.com/owncloud/ocis/issues/8731
   https://github.com/owncloud/ocis/pull/8827

* Bugfix - Fix creating new WOPI documents on public shares: [#8828](https://github.com/owncloud/ocis/pull/8828)

   Creating a new Office document in a publicly shared folder is now possible.

   https://github.com/owncloud/ocis/issues/8691
   https://github.com/owncloud/ocis/pull/8828

* Bugfix - Nats reconnects: [#8880](https://github.com/owncloud/ocis/pull/8880)

   We fixed the reconnect handling of the natjs kv registry.

   https://github.com/owncloud/ocis/pull/8880

* Bugfix - Update the admin user role assignment to enforce the config: [#8897](https://github.com/owncloud/ocis/pull/8897)

   The admin user role assigment was not updated after the first assignment. We now
   read the assigned role during init and update the admin user ID accordingly if
   the role is not assigned. This is especially needed when the OCIS_ADMIN_USER_ID
   is set after the autoprovisioning of the admin user when it originates from an
   external Identity Provider.

   https://github.com/owncloud/ocis/pull/8897

* Bugfix - Fix affected users on sses: [#8928](https://github.com/owncloud/ocis/pull/8928)

   The AffectedUsers field of sses now only reports affected users.

   https://github.com/owncloud/ocis/pull/8928

* Bugfix - Fix well-known rewrite endpoint: [#8946](https://github.com/owncloud/ocis/pull/8946)

   https://github.com/owncloud/ocis/issues/8703
   https://github.com/owncloud/ocis/pull/8946

* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981)

   Fix for a vulnerability with low severity in disintegration/imaging.

   https://github.com/owncloud/ocis/pull/8981
   https://github.com/advisories/GHSA-q7pp-wcgr-pffx

* Bugfix - Fix collaboration registry setting: [#9105](https://github.com/owncloud/ocis/pull/9105)

   Fixed the collaboration service GRPC namespace

   https://github.com/owncloud/ocis/pull/9105

* Bugfix - Service startup of WOPI example: [#9127](https://github.com/owncloud/ocis/pull/9127)

   We fixed a bug in the service startup of the appprovider-onlyoffice in the
   ocis_wopi deployment example.

   https://github.com/owncloud/ocis/pull/9127

* Bugfix - Fix the status code for multiple mount and unmount share: [#9193](https://github.com/owncloud/ocis/pull/9193)

   We fixed the status code for multiple mount and unmount share.

   https://github.com/owncloud/ocis/issues/8876
   https://github.com/owncloud/ocis/pull/9193

* Bugfix - Don't show thumbnails for secureview shares: [#9299](https://github.com/owncloud/ocis/pull/9299)

   We have fixed a bug where thumbnails were shown for secureview shares.

   https://github.com/owncloud/ocis/issues/9249
   https://github.com/owncloud/ocis/pull/9299

* Bugfix - Fix share update: [#9301](https://github.com/owncloud/ocis/pull/9301)

   We fixed the response code when the role/permission is empty on the share update

   https://github.com/owncloud/ocis/issues/8747
   https://github.com/owncloud/ocis/pull/9301

* Bugfix - Fix the error translation from utils: [#9331](https://github.com/owncloud/ocis/pull/9331)

   We've fixed the error translation from the statusCodeError type to CS3 Status
   because the FromCS3Status function converts a CS3 status code into a
   corresponding local Error representation.

   https://github.com/owncloud/ocis/issues/9151
   https://github.com/owncloud/ocis/pull/9331

* Bugfix - Fix the settings metedata tests: [#9341](https://github.com/owncloud/ocis/pull/9341)

   We fix the settings metedata tests that had the data race

   https://github.com/owncloud/ocis/issues/9372
   https://github.com/owncloud/ocis/pull/9341

* Bugfix - The hidden shares have been excluded from a search result: [#9371](https://github.com/owncloud/ocis/pull/9371)

   The hidden shares have been excluded from a search result.

   https://github.com/owncloud/ocis/issues/7383
   https://github.com/owncloud/ocis/pull/9371

* Bugfix - Encode Registry Keys: [#9385](https://github.com/owncloud/ocis/pull/9385)

   Encode the keys of the natsjskv registry as they have always been.

   https://github.com/owncloud/ocis/pull/9385

* Change - Change the default store for presigned keys to nats-js-kv: [#8419](https://github.com/owncloud/ocis/pull/8419)

   We wrapped the store service in a micro store implementation and changed the
   default to the built-in NATS instance.

   https://github.com/owncloud/ocis/pull/8419

* Change - Disable resharing by default for deprecation: [#8653](https://github.com/owncloud/ocis/pull/8653)

   We disabled the resharing feature by default. This feature will be removed from
   the product in the next major release. The resharing feature is not recommended
   for use and should be disabled. Existing reshares will continue to work.

   https://github.com/owncloud/ocis/pull/8653

* Change - The `filesystem` backend for the settings service has been removed: [#9138](https://github.com/owncloud/ocis/pull/9138)

   The only remaining backend for the settings service is `metadata`, which has
   been the default backend since ocis 2.0

   https://github.com/owncloud/ocis/pull/9138

* Change - Define maximum input image dimensions and size when generating previews: [#9360](https://github.com/owncloud/ocis/pull/9360)

   This is a general hardening change to limit processing time and resources of the
   thumbnailer.

   https://github.com/owncloud/ocis/pull/9360
   https://github.com/owncloud/ocis/pull/9035
   https://github.com/owncloud/ocis/pull/9069

* Enhancement - Introduce staticroutes package & remove well-known OIDC middleware: [#6095](https://github.com/owncloud/ocis/issues/6095)

   We have introduced a new static routes package to the proxy. This package is
   responsible for serving static files and oidc well-known endpoint
   `/.well-known/openid-configuration`. We have removed the well-known middleware
   for OIDC and moved it to the newly introduced static routes module in the proxy.

   https://github.com/owncloud/ocis/issues/6095
   https://github.com/owncloud/ocis/pull/8541

* Enhancement - Graphs endpoint for mounting and unmounting shares: [#7885](https://github.com/owncloud/ocis/pull/7885)

   Functionality for mounting (accepting) and unmounting (rejecting) received
   shares has been added to the graph API.

   https://github.com/owncloud/ocis/pull/7885

* Enhancement - Add epub reader to web default apps: [#8410](https://github.com/owncloud/ocis/pull/8410)

   We've added the new epub reader app to the web default apps, so it will be
   enabled and usable by default.

   https://github.com/owncloud/ocis/pull/8410

* Enhancement - Change Cors default settings: [#8518](https://github.com/owncloud/ocis/pull/8518)

   We have changed the default CORS settings to set `Access-Control-Allow-Origin`
   to the `OCIS_URL` if not explicitely set and `Access-Control-Allow-Credentials`
   to `false` if not explicitely set.

   https://github.com/owncloud/ocis/issues/8514
   https://github.com/owncloud/ocis/pull/8518

* Enhancement - Custom WEB App Loading: [#8523](https://github.com/owncloud/ocis/pull/8523)

   We've added a new feature which allows the administrator of the environment to
   provide custom web applications to the users. This feature is useful for
   organizations that have specific web applications that they want to provide to
   their users.

   The users will then be able to access these custom web applications from the web
   ui. For a detailed description of the feature, please read the WEB service
   README.md file.

   https://github.com/owncloud/ocis/issues/8392
   https://github.com/owncloud/ocis/pull/8523

* Enhancement - Update to go 1.22: [#8586](https://github.com/owncloud/ocis/pull/8586)

   We have updated go to version 1.22.

   https://github.com/owncloud/ocis/pull/8586

* Enhancement - Send more sse events: [#8587](https://github.com/owncloud/ocis/pull/8587)

   We added sse events for `ItemTrashed`, `ItemRestored`,`ContainerCreated` and
   `FileRenamed`

   https://github.com/owncloud/ocis/pull/8587

* Enhancement - Send SSE when file is locked/unlocked: [#8602](https://github.com/owncloud/ocis/pull/8602)

   Send sse events when a file is locked or unlocked.

   https://github.com/owncloud/ocis/pull/8602

* Enhancement - Add the spaceID to sse: [#8614](https://github.com/owncloud/ocis/pull/8614)

   Adds the spaceID to all clientlog sse messages

   https://github.com/owncloud/ocis/pull/8614
   https://github.com/owncloud/ocis/pull/8624

* Enhancement - The graph endpoints for listing permission works for spaces now: [#8642](https://github.com/owncloud/ocis/pull/8642)

   We enhanced the 'graph/v1beta1/drives/{{driveid}}/items/{{itemid}}/permissions'
   endpoint to list permission of the space when the 'itemid' refers to a space
   root.

   https://github.com/owncloud/ocis/issues/8352
   https://github.com/owncloud/ocis/pull/8642

* Enhancement - Bump keycloak: [#8687](https://github.com/owncloud/ocis/pull/8687)

   Bumps keycloak version

   https://github.com/owncloud/ocis/issues/8569
   https://github.com/owncloud/ocis/pull/8687

* Enhancement - Make IDP cookies same site strict: [#8716](https://github.com/owncloud/ocis/pull/8716)

   To enhance the security of our application and prevent Cross-Site Request
   Forgery (CSRF) attacks, we have updated the SameSite attribute of the build in
   Identity Provider (IDP) cookies to Strict.

   This change restricts the browser from sending these cookies with any cross-site
   requests, thereby limiting the exposure of the user's session to potential
   threats.

   This update does not impact the existing functionality of the application but
   provides an additional layer of security where needed.

   https://github.com/owncloud/ocis/pull/8716

* Enhancement - Make server side space templates production ready: [#8723](https://github.com/owncloud/ocis/pull/8723)

   Fixes several smaller bugs and adds some improvements to space templates,
   introduced with https://github.com/owncloud/ocis/pull/8558

   https://github.com/owncloud/ocis/pull/8723

* Enhancement - Sharing NG role names and descriptions: [#8743](https://github.com/owncloud/ocis/pull/8743)

   We've adjusted the display names and descriptions of the sharing NG roles to
   align with the previously agreed upon terms.

   https://github.com/owncloud/ocis/pull/8743

* Enhancement - Ability to Change Share Item Visibility in Graph API: [#8750](https://github.com/owncloud/ocis/pull/8750)

   Introduce the `PATCH /graph/v1beta1/drives/{driveID}/items/{itemID}` Graph API
   endpoint which allows updating individual Drive Items.

   At the moment, only the share visibility is considered changeable, but in the
   future, more properties can be added to this endpoint.

   This enhancement is needed for the user interface, allowing specific shares to
   be hidden or unhidden as needed, thereby improving the user experience.

   https://github.com/owncloud/ocis/issues/8654
   https://github.com/owncloud/ocis/pull/8750

* Enhancement - Enable web extension drawio by default: [#8760](https://github.com/owncloud/ocis/pull/8760)

   Enable web extension drawio by default

   https://github.com/owncloud/ocis/pull/8760

* Enhancement - Remove resharing: [#8762](https://github.com/owncloud/ocis/pull/8762)

   Removed resharing feature from codebase

   https://github.com/owncloud/ocis/pull/8762

* Enhancement - Add CSP and other security related headers to oCIS: [#8777](https://github.com/owncloud/ocis/pull/8777)

   General hardening of oCIS

   https://github.com/owncloud/ocis/pull/8777
   https://github.com/owncloud/ocis/pull/9025
   https://github.com/owncloud/ocis/pull/9167
   https://github.com/owncloud/ocis/pull/9313

* Enhancement - Add FileTouched SSE Event: [#8778](https://github.com/owncloud/ocis/pull/8778)

   Send an sse when a file is touched (aka 0 byte upload)

   https://github.com/owncloud/ocis/pull/8778

* Enhancement - Prepare runners to start the services: [#8802](https://github.com/owncloud/ocis/pull/8802)

   The runners will improve and make service startup easier. The runner's behavior
   is more predictable with clear expectations.

   https://github.com/owncloud/ocis/pull/8802

* Enhancement - Sharing SSEs: [#8854](https://github.com/owncloud/ocis/pull/8854)

   Added server side events for item moved, share created/updated/removed, space
   membership created/removed.

   https://github.com/owncloud/ocis/pull/8854
   https://github.com/owncloud/ocis/pull/8875

* Enhancement - Secure viewer share role: [#8907](https://github.com/owncloud/ocis/pull/8907)

   A new share role "Secure viewer" has been added. This role is applicable for
   files, folders and spaces and only allows viewing them (and their content).

   https://github.com/owncloud/ocis/pull/8907

* Enhancement - Add Link SSEs: [#8908](https://github.com/owncloud/ocis/pull/8908)

   Add sses for link created/updated/removed.

   https://github.com/owncloud/ocis/pull/8908

* Enhancement - ShareeIDs in SSEs: [#8915](https://github.com/owncloud/ocis/pull/8915)

   We will now send a list of userIDs (one or in case of a group share multiple) on
   share related SSEs

   https://github.com/owncloud/ocis/pull/8915

* Enhancement - Allow to resolve public shares without the ocs tokeninfo endpoint: [#8926](https://github.com/owncloud/ocis/pull/8926)

   Instead of querying the /v1.php/apps/files_sharing/api/v1/tokeninfo/ endpoint, a
   client can now resolve public and internal links by sending a PROPFIND request
   to /dav/public-files/{sharetoken}

  * authenticated clients accessing an internal link are redirected to the "real" resource (`/dav/spaces/{target-resource-id}
  * authenticated clients are able to resolve public links like before. For password protected links they need to supply the password even if they have access to the underlying resource by other means.
  * unauthenticated clients accessing an internal link get a 401 returned with  WWW-Authenticate set to Bearer (so that the client knows that it need to get a token via the IDP login page.
  * unauthenticated clients accessing a password protected link get a 401 returned with an error message to indicate the requirement for needing the link's password.

   https://github.com/owncloud/ocis/issues/8858
   https://github.com/owncloud/ocis/pull/8926
   https://github.com/cs3org/reva/pull/4653

* Enhancement - Initiator-IDs: [#8936](https://github.com/owncloud/ocis/pull/8936)

   Allows sending a header `Initiator-ID` on http requests. This id will be added
   to sse events so clients can figure out if their particular instance was
   triggering the event. Additionally this adds the etag of the file/folder to all
   sse events.

   https://github.com/owncloud/ocis/pull/8936
   https://github.com/owncloud/ocis/pull/8701

* Enhancement - Add endpoint for getting drive items: [#8939](https://github.com/owncloud/ocis/pull/8939)

   An endpoint for getting drive items via ID has been added.

   https://github.com/owncloud/ocis/issues/8915
   https://github.com/owncloud/ocis/pull/8939

* Enhancement - Improve infected file handling: [#8947](https://github.com/owncloud/ocis/pull/8947)

   Reworks virus handling.Shows scandate and outcome on ocis storage-users uploads
   sessions. Avoids retrying infected files on ocis postprocessing restart.

   https://github.com/owncloud/ocis/pull/8947

* Enhancement - Configurable claims for auto-provisioning user accounts: [#8952](https://github.com/owncloud/ocis/pull/8952)

   We introduce the new environment variables "PROXY_AUTOPROVISION_CLAIM_USERNAME",
   "PROXY_AUTOPROVISION_CLAIM_EMAIL", and "PROXY_AUTOPROVISION_CLAIM_DISPLAYNAME"
   which can be used to configure the OIDC claims that should be used for
   auto-provisioning user accounts.

   The automatic fallback to use the 'email' claim value as the username when the
   'preferred_username' claim is not set, has been removed.

   Also it is now possible to autoprovision users without an email address.

   https://github.com/owncloud/ocis/issues/8635
   https://github.com/owncloud/ocis/issues/6909
   https://github.com/owncloud/ocis/pull/8952

* Enhancement - Bump nats-js-kv pkg: [#8953](https://github.com/owncloud/ocis/pull/8953)

   Uses official nats-js-kv package now. Moves away from custom fork.

   https://github.com/owncloud/ocis/pull/8953

* Enhancement - Graph permission created date time: [#8954](https://github.com/owncloud/ocis/pull/8954)

   We've added the created date time to graph permission objects.

   https://github.com/owncloud/ocis/issues/8749
   https://github.com/owncloud/ocis/pull/8954

* Enhancement - Add virus filter to sessions command: [#9041](https://github.com/owncloud/ocis/pull/9041)

   Allow filtering upload session by virus status (has-virus=true/false)

   https://github.com/owncloud/ocis/pull/9041

* Enhancement - Assimilate `clean` into `sessions` command: [#9041](https://github.com/owncloud/ocis/pull/9041)

   We deprecated `ocis storage-user uploads clean` and added the same logic to
   `ocis storage-users uploads session --clean`

   https://github.com/owncloud/ocis/pull/9041

* Enhancement - Add remote item id to WebDAV report responses: [#9094](https://github.com/owncloud/ocis/issues/9094)

   The remote item id has been added to WebDAV `REPORT` responses.

   https://github.com/owncloud/ocis/issues/9094
   https://github.com/owncloud/ocis/pull/9095

* Enhancement - Theme Processing and Logo Customization: [#9133](https://github.com/owncloud/ocis/pull/9133)

   We have made significant improvements to the theme processing in Infinite Scale.
   The changes include:

   - Enhanced the way themes are composed. Now, the final theme is a combination of
   the built-in theme and the custom theme provided by the administrator via
   `WEB_ASSET_THEMES_PATH` and `WEB_UI_THEME_PATH`. - Introduced a new mechanism to
   load custom assets. This is particularly useful when a single asset, such as a
   logo, needs to be overwritten. - Fixed the logo customization option.
   Previously, small theme changes would copy the entire theme. Now, only the
   changed keys are considered, making the process more efficient. - Default themes
   are now part of ocis. This change simplifies the theme management process for
   web.

   These changes enhance the robustness of the theme handling in Infinite Scale and
   provide a better user experience.

   https://github.com/owncloud/ocis/issues/8966
   https://github.com/owncloud/ocis/pull/9133

* Enhancement - Add watermark text: [#9144](https://github.com/owncloud/ocis/pull/9144)

   We've added the watermark text for the Secure View mode.

   https://github.com/owncloud/ocis/pull/9144

* Enhancement - Update selected attributes of autoprovisioned users: [#9166](https://github.com/owncloud/ocis/pull/9166)

   When autoprovisioning is enabled, we now update autoprovisioned users when their
   display name or email address claims change.

   https://github.com/owncloud/ocis/issues/8955
   https://github.com/owncloud/ocis/pull/9166

* Enhancement - Limit concurrent thumbnail requests: [#9199](https://github.com/owncloud/ocis/pull/9199)

   The number of concurrent requests to the thumbnail service can be limited now to
   have more control over the consumed system resources.

   https://github.com/owncloud/ocis/pull/9199

* Enhancement - The storage-users doc updated: [#9228](https://github.com/owncloud/ocis/pull/9228)

   The storage-users doc was updated, added the details to the 'Restore Trash-Bins
   Items' section.

   https://github.com/owncloud/ocis/pull/9228

* Enhancement - Docker compose example for ClamAV: [#9229](https://github.com/owncloud/ocis/pull/9229)

   This PR adds a docker compose example for running a local oCIS together with
   ClamAV as virus scanner. The example is for demonstration purposes only and
   should not be used in production.

   https://github.com/owncloud/ocis/pull/9229

* Enhancement - Add command to check ocis backup consistency: [#9238](https://github.com/owncloud/ocis/pull/9238)

   Adds a command that checks the consistency of an ocis backup.

   https://github.com/owncloud/ocis/pull/9238

* Enhancement - Web server compression: [#9287](https://github.com/owncloud/ocis/pull/9287)

   We've added a compression middleware to the web server to reduce the request
   size when delivering static files. This speeds up loading times in web clients.

   https://github.com/owncloud/web/issues/7964
   https://github.com/owncloud/ocis/pull/9287

* Enhancement - Add secureview flag when listing apps via http: [#9289](https://github.com/owncloud/ocis/pull/9289)

   To allow clients to see which application supports secure view, we add a flag to
   the http response when the app service name matches a configured secure view app
   provider. The app can be configured by setting
   `FRONTEND_APP_HANDLER_SECURE_VIEW_APP_ADDR` to the address of the registered CS3
   app provider.

   https://github.com/owncloud/ocis/pull/9289
   https://github.com/owncloud/ocis/pull/9280
   https://github.com/owncloud/ocis/pull/9277

* Enhancement - Activitylog Service: [#9327](https://github.com/owncloud/ocis/pull/9327)

   Adds a new service `activitylog` which stores events (activities) per resource.
   This data can be retrieved by clients to show item activities

   https://github.com/owncloud/ocis/pull/9327

* Enhancement - Update web to v9.0.0-alpha.7: [#9395](https://github.com/owncloud/ocis/pull/9395)

   Tags: web

   We updated ownCloud Web to v9.0.0-alpha.7. Please refer to the changelog
   (linked) for details on the web release.

  * Bugfix [owncloud/web#10377](https://github.com/owncloud/web/pull/10377): User data not updated while altering own user
  * Bugfix [owncloud/web#10417](https://github.com/owncloud/web/pull/10417): Admin settings keyboard navigation
  * Bugfix [owncloud/web#10517](https://github.com/owncloud/web/pull/10517): Load thumbnail when postprocessing is finished
  * Bugfix [owncloud/web#10551](https://github.com/owncloud/web/pull/10551): Share sidebar icons
  * Bugfix [owncloud/web#10702](https://github.com/owncloud/web/pull/10702): Apply sandbox attribute to iframe in draw-io extension
  * Bugfix [owncloud/web#10706](https://github.com/owncloud/web/pull/10706): Apply sandbox attribute to iframe in app-external extension
  * Bugfix [owncloud/web#10746](https://github.com/owncloud/web/pull/10746): Versions loaded multiple times when opening sidebar
  * Bugfix [owncloud/web#10760](https://github.com/owncloud/web/pull/10760): Incoming notifications broken while notification center is open
  * Bugfix [owncloud/web#10814](https://github.com/owncloud/web/issues/10814): Vertical scroll for OcModal on small screens
  * Bugfix [owncloud/web#10900](https://github.com/owncloud/web/pull/10900): Context menu empty in tiles view
  * Bugfix [owncloud/web#10918](https://github.com/owncloud/web/issues/10918): Resource deselection on right-click
  * Bugfix [owncloud/web#10920](https://github.com/owncloud/web/pull/10920): Resources with name consist of number won't show up in trash bin
  * Bugfix [owncloud/web#10928](https://github.com/owncloud/web/pull/10928): Disable search in public link context
  * Bugfix [owncloud/web#10941](https://github.com/owncloud/web/issues/10941): Space not updating on navigation
  * Bugfix [owncloud/web#10974](https://github.com/owncloud/web/pull/10974): Local logout if IdP has no logout support
  * Change [owncloud/web#7338](https://github.com/owncloud/web/issues/7338): Remove deprecated code
  * Change [owncloud/web#9892](https://github.com/owncloud/web/issues/9892): Remove skeleton app
  * Change [owncloud/web#10102](https://github.com/owncloud/web/pull/10102): Remove deprecated extension point for adding quick actions
  * Change [owncloud/web#10122](https://github.com/owncloud/web/pull/10122): Remove homeFolder option
  * Change [owncloud/web#10210](https://github.com/owncloud/web/issues/10210): Vuex store removed
  * Change [owncloud/web#10240](https://github.com/owncloud/web/pull/10240): Remove ocs user
  * Change [owncloud/web#10330](https://github.com/owncloud/web/pull/10330): Registering app file editors
  * Change [owncloud/web#10443](https://github.com/owncloud/web/pull/10443): Add extensionPoint concept
  * Change [owncloud/web#10758](https://github.com/owncloud/web/pull/10758): Portal target removed
  * Change [owncloud/web#10786](https://github.com/owncloud/web/pull/10786): Disable opening files in embed mode
  * Enhancement [owncloud/web#5383](https://github.com/owncloud/web/issues/5383): Accessibility improvements
  * Enhancement [owncloud/web#9215](https://github.com/owncloud/web/issues/9215): Icon for .dcm files
  * Enhancement [owncloud/web#10018](https://github.com/owncloud/web/issues/10018): Tile sizes
  * Enhancement [owncloud/web#10207](https://github.com/owncloud/web/pull/10207): Enable user preferences in public links
  * Enhancement [owncloud/web#10334](https://github.com/owncloud/web/pull/10334): Move ThemeSwitcher into Account Settings
  * Enhancement [owncloud/web#10383](https://github.com/owncloud/web/issues/10383): Top loading bar increase visibility
  * Enhancement [owncloud/web#10390](https://github.com/owncloud/web/pull/10390): Integrate ToastUI editor in the text editor app
  * Enhancement [owncloud/web#10443](https://github.com/owncloud/web/pull/10443): Custom component extension type
  * Enhancement [owncloud/web#10448](https://github.com/owncloud/web/pull/10448): Epub reader app
  * Enhancement [owncloud/web#10485](https://github.com/owncloud/web/pull/10485): Highlight search term in sharing autosuggest list
  * Enhancement [owncloud/web#10519](https://github.com/owncloud/web/pull/10519): Warn user before closing browser when upload is in progress
  * Enhancement [owncloud/web#10534](https://github.com/owncloud/web/issues/10534): Full text search default
  * Enhancement [owncloud/web#10544](https://github.com/owncloud/web/pull/10544): Show locked and processing next to other status indicators
  * Enhancement [owncloud/web#10546](https://github.com/owncloud/web/pull/10546): Set emoji as space icon
  * Enhancement [owncloud/web#10586](https://github.com/owncloud/web/pull/10586): Add SSE events for locking, renaming, deleting, and restoring
  * Enhancement [owncloud/web#10611](https://github.com/owncloud/web/pull/10611): Remember left nav bar state
  * Enhancement [owncloud/web#10612](https://github.com/owncloud/web/pull/10612): Remember right side bar state
  * Enhancement [owncloud/web#10624](https://github.com/owncloud/web/pull/10624): Add details panel to trash
  * Enhancement [owncloud/web#10709](https://github.com/owncloud/web/pull/10709): Implement Server-Sent Events (SSE) for File Creation
  * Enhancement [owncloud/web#10758](https://github.com/owncloud/web/pull/10758): Search providers extension point
  * Enhancement [owncloud/web#10782](https://github.com/owncloud/web/pull/10782): Implement Server-Sent Events (SSE) for file updates
  * Enhancement [owncloud/web#10798](https://github.com/owncloud/web/pull/10798): Add SSE event for moving
  * Enhancement [owncloud/web#10801](https://github.com/owncloud/web/pull/10801): Ability to theme sharing role icons
  * Enhancement [owncloud/web#10807](https://github.com/owncloud/web/pull/10807): Add SSE event for moving
  * Enhancement [owncloud/web#10874](https://github.com/owncloud/web/pull/10874): Show loading spinner while searching or filtering users
  * Enhancement [owncloud/web#10907](https://github.com/owncloud/web/pull/10907): Display hidden resources information in files list
  * Enhancement [owncloud/web#10929](https://github.com/owncloud/web/pull/10929): Add loading spinner to admin settings spaces and groups
  * Enhancement [owncloud/web#10956](https://github.com/owncloud/web/pull/10956): Audio metadata panel
  * Enhancement [owncloud/web#10956](https://github.com/owncloud/web/pull/10956): EXIF metadata panel
  * Enhancement [owncloud/web#10976](https://github.com/owncloud/web/pull/10976): Faster page loading times
  * Enhancement [owncloud/web#11004](https://github.com/owncloud/web/pull/11004): Add enabled only filter to spaces overview
  * Enhancement [owncloud/web#11037](https://github.com/owncloud/web/pull/11037): Multiple sidebar root panels

   https://github.com/owncloud/ocis/pull/9395
   https://github.com/owncloud/web/releases/tag/v9.0.0

* Enhancement - Bump Reva to v2.20.0: [#9415](https://github.com/owncloud/ocis/pull/9415)

  *   Bugfix [cs3org/reva#4623](https://github.com/cs3org/reva/pull/4623): Consistently use spaceid and nodeid in logs
  *   Bugfix [cs3org/reva#4584](https://github.com/cs3org/reva/pull/4584): Prevent copying a file to a parent folder
  *   Bugfix [cs3org/reva#4700](https://github.com/cs3org/reva/pull/4700): Clean empty trash node path on delete
  *   Bugfix [cs3org/reva#4567](https://github.com/cs3org/reva/pull/4567): Fix error message in authprovider if user is not found
  *   Bugfix [cs3org/reva#4615](https://github.com/cs3org/reva/pull/4615): Write blob based on session id
  *   Bugfix [cs3org/reva#4557](https://github.com/cs3org/reva/pull/4557): Fix ceph build
  *   Bugfix [cs3org/reva#4711](https://github.com/cs3org/reva/pull/4711): Duplicate headers in DAV responses
  *   Bugfix [cs3org/reva#4568](https://github.com/cs3org/reva/pull/4568): Fix sharing invite on virtual drive
  *   Bugfix [cs3org/reva#4559](https://github.com/cs3org/reva/pull/4559): Fix graph drive invite
  *   Bugfix [cs3org/reva#4593](https://github.com/cs3org/reva/pull/4593): Make initiatorIDs also work on uploads
  *   Bugfix [cs3org/reva#4608](https://github.com/cs3org/reva/pull/4608): Use gateway selector in jsoncs3
  *   Bugfix [cs3org/reva#4546](https://github.com/cs3org/reva/pull/4546): Fix the mount points naming
  *   Bugfix [cs3org/reva#4678](https://github.com/cs3org/reva/pull/4678): Fix nats encoding
  *   Bugfix [cs3org/reva#4630](https://github.com/cs3org/reva/pull/4630): Fix ocm-share-id
  *   Bugfix [cs3org/reva#4518](https://github.com/cs3org/reva/pull/4518): Fix an error when lock/unlock a file
  *   Bugfix [cs3org/reva#4622](https://github.com/cs3org/reva/pull/4622): Fix public share update
  *   Bugfix [cs3org/reva#4566](https://github.com/cs3org/reva/pull/4566): Fix public link previews
  *   Bugfix [cs3org/reva#4589](https://github.com/cs3org/reva/pull/4589): Fix uploading via a public link
  *   Bugfix [cs3org/reva#4660](https://github.com/cs3org/reva/pull/4660): Fix creating documents in nested folders of public shares
  *   Bugfix [cs3org/reva#4635](https://github.com/cs3org/reva/pull/4635): Fix nil pointer when removing groups from space
  *   Bugfix [cs3org/reva#4709](https://github.com/cs3org/reva/pull/4709): Fix share update
  *   Bugfix [cs3org/reva#4661](https://github.com/cs3org/reva/pull/4661): Fix space share update for ocs
  *   Bugfix [cs3org/reva#4656](https://github.com/cs3org/reva/pull/4656): Fix space share update
  *   Bugfix [cs3org/reva#4561](https://github.com/cs3org/reva/pull/4561): Fix Stat() by Path on re-created resource
  *   Bugfix [cs3org/reva#4710](https://github.com/cs3org/reva/pull/4710): Tolerate missing user space index
  *   Bugfix [cs3org/reva#4632](https://github.com/cs3org/reva/pull/4632): Fix access to files withing a public link targeting a space root
  *   Bugfix [cs3org/reva#4603](https://github.com/cs3org/reva/pull/4603): Mask user email in output
  *   Change [cs3org/reva#4542](https://github.com/cs3org/reva/pull/4542): Drop unused service spanning stat cache
  *   Enhancement [cs3org/reva#4712](https://github.com/cs3org/reva/pull/4712): Add the error translation to the utils
  *   Enhancement [cs3org/reva#4696](https://github.com/cs3org/reva/pull/4696): Add List method to ocis and s3ng blobstore
  *   Enhancement [cs3org/reva#4693](https://github.com/cs3org/reva/pull/4693): Add mimetype for sb3 files
  *   Enhancement [cs3org/reva#4699](https://github.com/cs3org/reva/pull/4699): Add a Path method to blobstore
  *   Enhancement [cs3org/reva#4695](https://github.com/cs3org/reva/pull/4695): Add photo and image props
  *   Enhancement [cs3org/reva#4706](https://github.com/cs3org/reva/pull/4706): Add secureview flag when listing apps via http
  *   Enhancement [cs3org/reva#4585](https://github.com/cs3org/reva/pull/4585): Move more consistency checks to the usershare API
  *   Enhancement [cs3org/reva#4702](https://github.com/cs3org/reva/pull/4702): Added theme capability
  *   Enhancement [cs3org/reva#4672](https://github.com/cs3org/reva/pull/4672): Add virus filter to list uploads sessions
  *   Enhancement [cs3org/reva#4614](https://github.com/cs3org/reva/pull/4614): Bump mockery to v2.40.2
  *   Enhancement [cs3org/reva#4621](https://github.com/cs3org/reva/pull/4621): Use a memory cache for the personal space creation cache
  *   Enhancement [cs3org/reva#4556](https://github.com/cs3org/reva/pull/4556): Allow tracing requests by giving util functions a context
  *   Enhancement [cs3org/reva#4694](https://github.com/cs3org/reva/pull/4694): Expose SecureView in WebDAV permissions
  *   Enhancement [cs3org/reva#4652](https://github.com/cs3org/reva/pull/4652): Better error codes when removing a space member
  *   Enhancement [cs3org/reva#4725](https://github.com/cs3org/reva/pull/4725): Unique share mountpoint name
  *   Enhancement [cs3org/reva#4689](https://github.com/cs3org/reva/pull/4689): Extend service account permissions
  *   Enhancement [cs3org/reva#4545](https://github.com/cs3org/reva/pull/4545): Extend service account permissions
  *   Enhancement [cs3org/reva#4581](https://github.com/cs3org/reva/pull/4581): Make decomposedfs more extensible
  *   Enhancement [cs3org/reva#4564](https://github.com/cs3org/reva/pull/4564): Send file locked/unlocked events
  *   Enhancement [cs3org/reva#4730](https://github.com/cs3org/reva/pull/4730): Improve posixfs storage driver
  *   Enhancement [cs3org/reva#4587](https://github.com/cs3org/reva/pull/4587): Allow passing a initiator id
  *   Enhancement [cs3org/reva#4645](https://github.com/cs3org/reva/pull/4645): Add ItemID to LinkRemoved
  *   Enhancement [cs3org/reva#4686](https://github.com/cs3org/reva/pull/4686): Mint view only token for open in app requests
  *   Enhancement [cs3org/reva#4606](https://github.com/cs3org/reva/pull/4606): Remove resharing
  *   Enhancement [cs3org/reva#4643](https://github.com/cs3org/reva/pull/4643): Secure viewer share role
  *   Enhancement [cs3org/reva#4631](https://github.com/cs3org/reva/pull/4631): Add space-share-updated event
  *   Enhancement [cs3org/reva#4685](https://github.com/cs3org/reva/pull/4685): Support t and x in ACEs
  *   Enhancement [cs3org/reva#4625](https://github.com/cs3org/reva/pull/4625): Test async processing cornercases
  *   Enhancement [cs3org/reva#4653](https://github.com/cs3org/reva/pull/4653): Allow to resolve public shares without the ocs tokeninfo endpoint
  *   Enhancement [cs3org/reva#4657](https://github.com/cs3org/reva/pull/4657): Add ScanData to Uploadsession

   https://github.com/owncloud/ocis/pull/9415
   https://github.com/owncloud/ocis/pull/9377
   https://github.com/owncloud/ocis/pull/9330
   https://github.com/owncloud/ocis/pull/9318
   https://github.com/owncloud/ocis/pull/9269
   https://github.com/owncloud/ocis/pull/9236
   https://github.com/owncloud/ocis/pull/9188
   https://github.com/owncloud/ocis/pull/9132
   https://github.com/owncloud/ocis/pull/9041
   https://github.com/owncloud/ocis/pull/9002
   https://github.com/owncloud/ocis/pull/8917
   https://github.com/owncloud/ocis/pull/8795
   https://github.com/owncloud/ocis/pull/8701
   https://github.com/owncloud/ocis/pull/8606
   https://github.com/owncloud/ocis/pull/8937

# Changelog for [5.0.5] (2024-05-22)

The following sections list the changes for 5.0.5.

[5.0.5]: https://github.com/owncloud/ocis/compare/v5.0.4...v5.0.5

## Summary

* Enhancement - Update web to v8.0.2: [#9153](https://github.com/owncloud/ocis/pull/9153)

## Details

* Enhancement - Update web to v8.0.2: [#9153](https://github.com/owncloud/ocis/pull/9153)

   Tags: web

   We updated ownCloud Web to v8.0.2. Please refer to the changelog (linked) for
   details on the web release.

  * Bugfix [owncloud/web#10515](https://github.com/owncloud/web/issues/10515): Folder replace
  * Bugfix [owncloud/web#10598](https://github.com/owncloud/web/issues/10598): Hidden right sidebar on small screens
  * Bugfix [owncloud/web#10634](https://github.com/owncloud/web/issues/10634): Scope loss when showing search results
  * Bugfix [owncloud/web#10657](https://github.com/owncloud/web/issues/10657): Theme loading without matching theme
  * Bugfix [owncloud/web#10763](https://github.com/owncloud/web/pull/10763): Flickering loading indicator
  * Bugfix [owncloud/web#10810](https://github.com/owncloud/web/issues/10810): Download files with special chars in name
  * Bugfix [owncloud/web#10881](https://github.com/owncloud/web/pull/10881): IDP logout issues

   https://github.com/owncloud/ocis/pull/9153
   https://github.com/owncloud/web/releases/tag/v8.0.2

# Changelog for [5.0.4] (2024-05-13)

The following sections list the changes for 5.0.4.

[5.0.4]: https://github.com/owncloud/ocis/compare/v5.0.3...v5.0.4

## Summary

* Bugfix - Update reva to v2.19.7: [#9011](https://github.com/owncloud/ocis/pull/9011)
* Bugfix - Service startup of WOPI example: [#9127](https://github.com/owncloud/ocis/pull/9127)
* Bugfix - Nats reconnects: [#9139](https://github.com/owncloud/ocis/pull/9139)

## Details

* Bugfix - Update reva to v2.19.7: [#9011](https://github.com/owncloud/ocis/pull/9011)

   We updated reva to v2.19.7

  *   Enhancement [cs3org/reva#4673](https://github.com/cs3org/reva/pull/4673): Add virus filter to list uploads sessions

   https://github.com/owncloud/ocis/pull/9011

* Bugfix - Service startup of WOPI example: [#9127](https://github.com/owncloud/ocis/pull/9127)

   We fixed a bug in the service startup of the appprovider-onlyoffice in the
   ocis_wopi deployment example.

   https://github.com/owncloud/ocis/pull/9127

* Bugfix - Nats reconnects: [#9139](https://github.com/owncloud/ocis/pull/9139)

   We fixed the reconnect handling of the natjs kv registry.

   https://github.com/owncloud/ocis/pull/9139
   https://github.com/owncloud/ocis/pull/8880

# Changelog for [5.0.3] (2024-05-02)

The following sections list the changes for 5.0.3.

[5.0.3]: https://github.com/owncloud/ocis/compare/v5.0.2...v5.0.3

## Summary

* Bugfix - Update the admin user role assignment to enforce the config: [#8918](https://github.com/owncloud/ocis/pull/8918)
* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981)
* Bugfix - Update reva to v2.19.6: [#9011](https://github.com/owncloud/ocis/pull/9011)
* Bugfix - Fix infected file handling: [#9011](https://github.com/owncloud/ocis/pull/9011)

## Details

* Bugfix - Update the admin user role assignment to enforce the config: [#8918](https://github.com/owncloud/ocis/pull/8918)

   The admin user role assigment was not updated after the first assignment. We now
   read the assigned role during init and update the admin user ID accordingly if
   the role is not assigned. This is especially needed when the OCIS_ADMIN_USER_ID
   is set after the autoprovisioning of the admin user when it originates from an
   external Identity Provider.

   https://github.com/owncloud/ocis/pull/8918
   https://github.com/owncloud/ocis/pull/8897

* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981)

   Fix for a vulnerability with low severity in disintegration/imaging.

   https://github.com/owncloud/ocis/pull/8981
   https://github.com/advisories/GHSA-q7pp-wcgr-pffx

* Bugfix - Update reva to v2.19.6: [#9011](https://github.com/owncloud/ocis/pull/9011)

   We updated reva to v2.19.6

  *   Bugfix      [cs3org/reva#4654](https://github.com/cs3org/reva/pull/4654): Write blob based on session id
  *   Bugfix      [cs3org/reva#4666](https://github.com/cs3org/reva/pull/4666): Fix uploading via a public link
  *   Bugfix      [cs3org/reva#4665](https://github.com/cs3org/reva/pull/4665): Fix creating documents in nested folders of public shares
  *   Enhancement [cs3org/reva#4655](https://github.com/cs3org/reva/pull/4655): Bump mockery to v2.40.2
  *   Enhancement [cs3org/reva#4664](https://github.com/cs3org/reva/pull/4664): Add ScanData to Uploadsession

   https://github.com/owncloud/ocis/pull/9011

* Bugfix - Fix infected file handling: [#9011](https://github.com/owncloud/ocis/pull/9011)

   Reworks virus handling. Shows scandate and outcome on ocis storage-users uploads
   sessions. Avoids retrying infected files on ocis postprocessing restart.

   https://github.com/owncloud/ocis/pull/9011

# Changelog for [5.0.2] (2024-04-17)

The following sections list the changes for 5.0.2.

[5.0.2]: https://github.com/owncloud/ocis/compare/v5.0.1...v5.0.2

## Summary

* Bugfix - Fix creating new WOPI documents on public shares: [#8828](https://github.com/owncloud/ocis/pull/8828)
* Bugfix - Update reva to v2.19.5: [#8873](https://github.com/owncloud/ocis/pull/8873)

## Details

* Bugfix - Fix creating new WOPI documents on public shares: [#8828](https://github.com/owncloud/ocis/pull/8828)

   Creating a new Office document in a publicly shared folder is now possible.

   https://github.com/owncloud/ocis/issues/8691
   https://github.com/owncloud/ocis/pull/8828

* Bugfix - Update reva to v2.19.5: [#8873](https://github.com/owncloud/ocis/pull/8873)

   We updated reva to v2.19.5

  *   Bugfix [cs3org/reva#4626](https://github.com/cs3org/reva/pull/4626): Fix public share update
  *   Bugfix [cs3org/reva#4634](https://github.com/cs3org/reva/pull/4634): Fix access to files withing a public link targeting a space root

   https://github.com/owncloud/ocis/pull/8873

# Changelog for [5.0.1] (2024-04-10)

The following sections list the changes for 5.0.1.

[5.0.1]: https://github.com/owncloud/ocis/compare/v4.0.7...v5.0.1

## Summary

* Bugfix - Make IDP cookies same site strict: [#8716](https://github.com/owncloud/ocis/pull/8716)
* Bugfix - Update reva to v2.19.4: [#8781](https://github.com/owncloud/ocis/pull/8781)
* Bugfix - Fix restarting of postprocessing: [#8782](https://github.com/owncloud/ocis/pull/8782)
* Bugfix - Fix the create personal space cache: [#8799](https://github.com/owncloud/ocis/pull/8799)

## Details

* Bugfix - Make IDP cookies same site strict: [#8716](https://github.com/owncloud/ocis/pull/8716)

   To enhance the security of our application and prevent Cross-Site Request
   Forgery (CSRF) attacks, we have updated the SameSite attribute of the build in
   Identity Provider (IDP) cookies to Strict.

   This change restricts the browser from sending these cookies with any cross-site
   requests, thereby limiting the exposure of the user's session to potential
   threats.

   This update does not impact the existing functionality of the application but
   provides an additional layer of security where needed.

   This only affects cookies set by the built-in IDP. Production systems should not
   be affected.

   https://github.com/owncloud/ocis/pull/8716

* Bugfix - Update reva to v2.19.4: [#8781](https://github.com/owncloud/ocis/pull/8781)

   We updated reva to v2.19.4

  *   Bugfix [cs3org/reva#4612](https://github.com/cs3org/reva/pull/4612): Use gateway selector in jsoncs3 to scale the service

   Https://github.com/owncloud/ocis/pull/8787

   We updated reva to v2.19.3

  *   Bugfix[cs3org/reva#4607](https://github.com/cs3org/reva/pull/4607): Mask user email in output

   https://github.com/owncloud/ocis/pull/8781

* Bugfix - Fix restarting of postprocessing: [#8782](https://github.com/owncloud/ocis/pull/8782)

   When an upload is not found, the logic to restart postprocessing was bunked.
   Additionally we extended the upload sessions command to be able to restart the
   uploads without using a second command.

   NOTE: This also includes a breaking fix for the deprecated `ocis storage-users
   uploads list` command

   https://github.com/owncloud/ocis/pull/8782

* Bugfix - Fix the create personal space cache: [#8799](https://github.com/owncloud/ocis/pull/8799)

   We fixed a problem with the config for the create personal space cache which
   resulted in the cache never being used.

   https://github.com/owncloud/ocis/pull/8799

# Changelog for [4.0.7] (2024-03-27)

The following sections list the changes for 4.0.7.

[4.0.7]: https://github.com/owncloud/ocis/compare/v5.0.0...v4.0.7

## Summary

* Bugfix - Update reva to include bugfixes and improvements: [#8718](https://github.com/owncloud/ocis/pull/8718)
* Enhancement - Update to go 1.22: [#8597](https://github.com/owncloud/ocis/pull/8597)

## Details

* Bugfix - Update reva to include bugfixes and improvements: [#8718](https://github.com/owncloud/ocis/pull/8718)

   ## Changelog for reva 2.13.4

  *   Bugfix [cs3org/reva#4398](https://github.com/cs3org/reva/pull/4398): Fix ceph build
  *   Bugfix [cs3org/reva#4396](https://github.com/cs3org/reva/pull/4396): Allow an empty credentials chain in the auth middleware
  *   Bugfix [cs3org/reva#4423](https://github.com/cs3org/reva/pull/4423): Fix disconnected traces
  *   Bugfix [cs3org/reva#4590](https://github.com/cs3org/reva/pull/4590): Fix uploading via a public link
  *   Bugfix [cs3org/reva#4470](https://github.com/cs3org/reva/pull/4470): Keep failed processing status
  *   Enhancement [cs3org/reva#4397](https://github.com/cs3org/reva/pull/4397): Introduce UploadSessionLister interface

   https://github.com/owncloud/ocis/pull/8718

* Enhancement - Update to go 1.22: [#8597](https://github.com/owncloud/ocis/pull/8597)

   We have updated go to version 1.22.

   https://github.com/owncloud/ocis/pull/8597

# Changelog for [5.0.0] (2024-03-18)

The following sections list the changes for 5.0.0.

[5.0.0]: https://github.com/owncloud/ocis/compare/v4.0.6...v5.0.0

## Summary

* Bugfix - Fix wrong compile date: [#6132](https://github.com/owncloud/ocis/pull/6132)
* Bugfix - Fix the kql-bleve search: [#7290](https://github.com/owncloud/ocis/pull/7290)
* Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: [#7312](https://github.com/owncloud/ocis/issues/7312)
* Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: [#7319](https://github.com/owncloud/ocis/issues/7319)
* Bugfix - Deprecate redundant encryptions settings for notification service: [#7345](https://github.com/owncloud/ocis/issues/7345)
* Bugfix - Check school number for duplicates before adding a school: [#7351](https://github.com/owncloud/ocis/pull/7351)
* Bugfix - Don't reload web config: [#7369](https://github.com/owncloud/ocis/pull/7369)
* Bugfix - Delete outdated userlog events: [#7410](https://github.com/owncloud/ocis/pull/7410)
* Bugfix - Set the mountpoint on auto accept: [#7460](https://github.com/owncloud/ocis/pull/7460)
* Bugfix - Fix default language fallback: [#7465](https://github.com/owncloud/ocis/issues/7465)
* Bugfix - GetUserByClaim fixed for Active Directory: [#7476](https://github.com/owncloud/ocis/pull/7476)
* Bugfix - Fix preview request 500 error when made too early: [#7502](https://github.com/owncloud/ocis/issues/7502)
* Bugfix - Fix 403 in docs pipeline: [#7509](https://github.com/owncloud/ocis/issues/7509)
* Bugfix - Fix the auth service env variable: [#7523](https://github.com/owncloud/ocis/pull/7523)
* Bugfix - Token storage config fixed: [#7528](https://github.com/owncloud/ocis/pull/7528)
* Bugfix - Set existing mountpoint on auto accept: [#7592](https://github.com/owncloud/ocis/pull/7592)
* Bugfix - Return 423 status code on tag create: [#7596](https://github.com/owncloud/ocis/pull/7596)
* Bugfix - Fix libre-graph status codes: [#7678](https://github.com/owncloud/ocis/issues/7678)
* Bugfix - Fix unlock via space API: [#7726](https://github.com/owncloud/ocis/pull/7726)
* Bugfix - Disable DEPTH infinity in PROPFIND: [#7746](https://github.com/owncloud/ocis/pull/7746)
* Bugfix - Fix the tgz mime type: [#7772](https://github.com/owncloud/ocis/pull/7772)
* Bugfix - Fix natsjs cache: [#7790](https://github.com/owncloud/ocis/pull/7790)
* Bugfix - Fix search service start: [#7795](https://github.com/owncloud/ocis/pull/7795)
* Bugfix - Fix search response: [#7815](https://github.com/owncloud/ocis/pull/7815)
* Bugfix - The race conditions in tests: [#7847](https://github.com/owncloud/ocis/pull/7847)
* Bugfix - Do not purge expired upload sessions that are still postprocessing: [#7859](https://github.com/owncloud/ocis/pull/7859)
* Bugfix - Fix the public link update: [#7862](https://github.com/owncloud/ocis/pull/7862)
* Bugfix - Fix jwt config of policies service: [#7893](https://github.com/owncloud/ocis/pull/7893)
* Bugfix - Updating logo with new theme structure: [#7930](https://github.com/owncloud/ocis/pull/7930)
* Bugfix - Password policy return code was wrong: [#7952](https://github.com/owncloud/ocis/pull/7952)
* Bugfix - Removed outdated and unused dependency from idp package: [#7957](https://github.com/owncloud/ocis/issues/7957)
* Bugfix - Update permission validation: [#7963](https://github.com/owncloud/ocis/pull/7963)
* Bugfix - Renaming a user to a string with capital letters: [#7964](https://github.com/owncloud/ocis/pull/7964)
* Bugfix - Improve OCM support: [#7973](https://github.com/owncloud/ocis/pull/7973)
* Bugfix - Permissions of a role with duplicate ID: [#7976](https://github.com/owncloud/ocis/pull/7976)
* Bugfix - Non durable streams for sse service: [#7986](https://github.com/owncloud/ocis/pull/7986)
* Bugfix - Fix empty trace ids: [#8023](https://github.com/owncloud/ocis/pull/8023)
* Bugfix - Fix search by containing special characters: [#8050](https://github.com/owncloud/ocis/pull/8050)
* Bugfix - Fix the upload postprocessing: [#8117](https://github.com/owncloud/ocis/pull/8117)
* Bugfix - Disallow to delete a file during the processing: [#8132](https://github.com/owncloud/ocis/pull/8132)
* Bugfix - Fix wrong naming in nats-js-kv registry: [#8140](https://github.com/owncloud/ocis/pull/8140)
* Bugfix - IDP CS3 backend sessions now survive a restart: [#8142](https://github.com/owncloud/ocis/pull/8142)
* Bugfix - Fix patching of language: [#8182](https://github.com/owncloud/ocis/pull/8182)
* Bugfix - Fix search service to not log expected cases as errors: [#8200](https://github.com/owncloud/ocis/pull/8200)
* Bugfix - Updating and reset logo failed: [#8211](https://github.com/owncloud/ocis/pull/8211)
* Bugfix - Cleanup graph/pkg/service/v0/driveitems.go: [#8228](https://github.com/owncloud/ocis/pull/8228)
* Bugfix - Cleanup `search/pkg/search/search.go`: [#8230](https://github.com/owncloud/ocis/pull/8230)
* Bugfix - Graph/sharedWithMe works for shares from project spaces now: [#8233](https://github.com/owncloud/ocis/pull/8233)
* Bugfix - Fix PATCH/DELETE status code for drives that don't support them: [#8235](https://github.com/owncloud/ocis/pull/8235)
* Bugfix - Fix nats authentication: [#8236](https://github.com/owncloud/ocis/pull/8236)
* Bugfix - Fix the resource name: [#8246](https://github.com/owncloud/ocis/pull/8246)
* Bugfix - Apply role constraints when creating shares via the graph API: [#8247](https://github.com/owncloud/ocis/pull/8247)
* Bugfix - Fix concurrent access to a map: [#8269](https://github.com/owncloud/ocis/pull/8269)
* Bugfix - Fix nats registry: [#8281](https://github.com/owncloud/ocis/pull/8281)
* Bugfix - Remove invalid environment variables: [#8303](https://github.com/owncloud/ocis/pull/8303)
* Bugfix - Fix concurrent shares config: [#8317](https://github.com/owncloud/ocis/pull/8317)
* Bugfix - Fix Content-Disposition header for downloads: [#8381](https://github.com/owncloud/ocis/pull/8381)
* Bugfix - Signed url verification: [#8385](https://github.com/owncloud/ocis/pull/8385)
* Bugfix - Fix an error when move: [#8396](https://github.com/owncloud/ocis/pull/8396)
* Bugfix - Fix extended env parser: [#8409](https://github.com/owncloud/ocis/pull/8409)
* Bugfix - Graph/drives/permission Expiration date update: [#8413](https://github.com/owncloud/ocis/pull/8413)
* Bugfix - Fix search error message: [#8444](https://github.com/owncloud/ocis/pull/8444)
* Bugfix - Graph/sharedWithMe align IDs with webdav response: [#8467](https://github.com/owncloud/ocis/pull/8467)
* Bugfix - Fix an error when lock/unlock a public shared file: [#8472](https://github.com/owncloud/ocis/pull/8472)
* Bugfix - Bump reva to pull in changes to fix recursive trashcan purge: [#8505](https://github.com/owncloud/ocis/pull/8505)
* Bugfix - Fix remove/update share permissions: [#8529](https://github.com/owncloud/ocis/pull/8529)
* Bugfix - Fix graph drive invite: [#8538](https://github.com/owncloud/ocis/pull/8538)
* Bugfix - We now always select the next clients when autoaccepting shares: [#8570](https://github.com/owncloud/ocis/pull/8570)
* Bugfix - Correct the default mapping of roles: [#8639](https://github.com/owncloud/ocis/pull/8639)
* Bugfix - Disable Multipart uploads: [#8667](https://github.com/owncloud/ocis/pull/8667)
* Bugfix - Fix last month search: [#31145](https://github.com/golang/go/issues/31145)
* Change - Auto-Accept Shares: [#7097](https://github.com/owncloud/ocis/pull/7097)
* Change - Change the default TUS chunk size: [#7273](https://github.com/owncloud/ocis/pull/7273)
* Change - Remove privacyURL and imprintURL from the config: [#7938](https://github.com/owncloud/ocis/pull/7938/)
* Change - Remove accessDeniedHelpUrl from the config: [#7970](https://github.com/owncloud/ocis/pull/7970)
* Change - Change the default store for presigned keys to nats-js-kv: [#8419](https://github.com/owncloud/ocis/pull/8419)
* Change - Deprecate sharing cs3 backends: [#8478](https://github.com/owncloud/ocis/pull/8478)
* Enhancement - Add the Banned Passwords List: [#4197](https://github.com/cs3org/reva/pull/4197)
* Enhancement - Introduce service accounts: [#6427](https://github.com/owncloud/ocis/pull/6427)
* Enhancement - SSE for messaging: [#6992](https://github.com/owncloud/ocis/pull/6992)
* Enhancement - Support spec violating AD FS access token issuer: [#7140](https://github.com/owncloud/ocis/pull/7140)
* Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: [#7176](https://github.com/owncloud/ocis/issues/7176)
* Enhancement - Keyword Query Language (KQL) search syntax: [#7212](https://github.com/owncloud/ocis/pull/7212)
* Enhancement - Introduce clientlog service: [#7217](https://github.com/owncloud/ocis/pull/7217)
* Enhancement - Proxy uses service accounts for provisioning: [#7240](https://github.com/owncloud/ocis/pull/7240)
* Enhancement - The password policies change request: [#7264](https://github.com/owncloud/ocis/pull/7264)
* Enhancement - Introduce natsjs registry: [#7272](https://github.com/owncloud/ocis/issues/7272)
* Enhancement - Add the password policies: [#7285](https://github.com/owncloud/ocis/pull/7285)
* Enhancement - Add login URL config: [#7317](https://github.com/owncloud/ocis/pull/7317)
* Enhancement - Improve SSE format: [#7325](https://github.com/owncloud/ocis/pull/7325)
* Enhancement - New value `auto` for NOTIFICATIONS_SMTP_AUTHENTICATION: [#7356](https://github.com/owncloud/ocis/issues/7356)
* Enhancement - Make sse service scalable: [#7382](https://github.com/owncloud/ocis/pull/7382)
* Enhancement - Edit wrong named enves: [#7406](https://github.com/owncloud/ocis/pull/7406)
* Enhancement - Thumbnail generation with image processors: [#7409](https://github.com/owncloud/ocis/pull/7409)
* Enhancement - Set default for Async Uploads to true: [#7416](https://github.com/owncloud/ocis/pull/7416)
* Enhancement - The default language added: [#7417](https://github.com/owncloud/ocis/pull/7417)
* Enhancement - Add "Last modified" filter Chip: [#7455](https://github.com/owncloud/ocis/pull/7455)
* Enhancement - Config for disabling Web extensions: [#7486](https://github.com/owncloud/ocis/pull/7486)
* Enhancement - Store and index metadata: [#7490](https://github.com/owncloud/ocis/pull/7490)
* Enhancement - Add support for audio files to the thumbnails service: [#7491](https://github.com/owncloud/ocis/pull/7491)
* Enhancement - Implement sharing roles: [#7524](https://github.com/owncloud/ocis/pull/7524)
* Enhancement - Add new permission to delete public link password: [#7538](https://github.com/owncloud/ocis/pull/7538)
* Enhancement - Add config to enforce passwords on all public links: [#7547](https://github.com/owncloud/ocis/pull/7547)
* Enhancement - Tika content extraction cleanup for search: [#7553](https://github.com/owncloud/ocis/pull/7553)
* Enhancement - Allow configuring storage registry with envvars: [#7554](https://github.com/owncloud/ocis/pull/7554)
* Enhancement - Add search MediaType filter: [#7602](https://github.com/owncloud/ocis/pull/7602)
* Enhancement - Add Sharing NG endpoints: [#7633](https://github.com/owncloud/ocis/pull/7633)
* Enhancement - Configs for Web embed mode: [#7670](https://github.com/owncloud/ocis/pull/7670)
* Enhancement - Support login page background configuration: [#7674](https://github.com/owncloud/ocis/issues/7674)
* Enhancement - Add new permissions: [#7700](https://github.com/owncloud/ocis/pull/7700)
* Enhancement - Add preferred language to user settings: [#7720](https://github.com/owncloud/ocis/pull/7720)
* Enhancement - Add user filter startswith and contains: [#7739](https://github.com/owncloud/ocis/pull/7739)
* Enhancement - Allow configuring additional routes: [#7741](https://github.com/owncloud/ocis/pull/7741)
* Enhancement - Default link permission config: [#7783](https://github.com/owncloud/ocis/pull/7783)
* Enhancement - Add banned password list to the default deployments: [#7784](https://github.com/owncloud/ocis/pull/7784)
* Enhancement - Update to go 1.21: [#7794](https://github.com/owncloud/ocis/pull/7794)
* Enhancement - Add Sharing NG list permissions endpoint: [#7805](https://github.com/owncloud/ocis/pull/7805)
* Enhancement - Add user list requires filter config: [#7866](https://github.com/owncloud/ocis/pull/7866)
* Enhancement - Retry antivirus postprocessing step in case of problems: [#7874](https://github.com/owncloud/ocis/pull/7874)
* Enhancement - Add validation to public share provider: [#7877](https://github.com/owncloud/ocis/pull/7877)
* Enhancement - Graphs endpoint for mounting and unmounting shares: [#7885](https://github.com/owncloud/ocis/pull/7885)
* Enhancement - Store and index metadata: [#7886](https://github.com/owncloud/ocis/pull/7886)
* Enhancement - Allow regular users to list other users: [#7887](https://github.com/owncloud/ocis/pull/7887)
* Enhancement - Add edit public share to sharing NG: [#7908](https://github.com/owncloud/ocis/pull/7908/)
* Enhancement - Add cli commands for trash-bin: [#7917](https://github.com/owncloud/ocis/pull/7917)
* Enhancement - Add validation update public share: [#7978](https://github.com/owncloud/ocis/pull/7978)
* Enhancement - Allow inmemory nats-js-kv stores: [#7979](https://github.com/owncloud/ocis/pull/7979)
* Enhancement - Disable the password policy: [#7985](https://github.com/owncloud/ocis/pull/7985)
* Enhancement - Use kv store in natsjs registry: [#7987](https://github.com/owncloud/ocis/pull/7987)
* Enhancement - Allow authentication nats connections: [#7989](https://github.com/owncloud/ocis/pull/7989)
* Enhancement - Add RED metrics to the metrics endpoint: [#7994](https://github.com/owncloud/ocis/pull/7994)
* Enhancement - Add ocm and sciencemesh services: [#7998](https://github.com/owncloud/ocis/pull/7998)
* Enhancement - Make nats-js-kv the default registry: [#8011](https://github.com/owncloud/ocis/pull/8011)
* Enhancement - Service Account roles: [#8051](https://github.com/owncloud/ocis/pull/8051)
* Enhancement - Update antivirus service: [#8062](https://github.com/owncloud/ocis/pull/8062)
* Enhancement - Remove deprecated environment variables: [#8149](https://github.com/owncloud/ocis/pull/8149)
* Enhancement - Disable the password policy: [#8152](https://github.com/owncloud/ocis/pull/8152)
* Enhancement - Allow restarting multiple uploads with one command: [#8287](https://github.com/owncloud/ocis/pull/8287)
* Enhancement - Modify the concurrency default: [#8309](https://github.com/owncloud/ocis/pull/8309)
* Enhancement - Improve ocis single binary start: [#8320](https://github.com/owncloud/ocis/pull/8320)
* Enhancement - Use environment variables in yaml config files: [#8339](https://github.com/owncloud/ocis/pull/8339)
* Enhancement - Increment filenames on upload collisions in secret filedrops: [#8340](https://github.com/owncloud/ocis/pull/8340)
* Enhancement - Allow sending multiple user ids in one sse event: [#8379](https://github.com/owncloud/ocis/pull/8379)
* Enhancement - Allow to skip service listing: [#8408](https://github.com/owncloud/ocis/pull/8408)
* Enhancement - Add a make step to validate the env var annotations: [#8436](https://github.com/owncloud/ocis/pull/8436)
* Enhancement - Drop the unnecessary grants exists check when creating shares: [#8502](https://github.com/owncloud/ocis/pull/8502)
* Enhancement - Update to go 1.22: [#8586](https://github.com/owncloud/ocis/pull/8586)
* Enhancement - Update web to v8.0.0: [#8613](https://github.com/owncloud/ocis/pull/8613)
* Enhancement - Update web to v8.0.1: [#8626](https://github.com/owncloud/ocis/pull/8626)
* Enhancement - Update reva to 2.19.2: [#8638](https://github.com/owncloud/ocis/pull/8638)

## Details

* Bugfix - Fix wrong compile date: [#6132](https://github.com/owncloud/ocis/pull/6132)

   We fixed that current date is always printed.

   https://github.com/owncloud/ocis/issues/6124
   https://github.com/owncloud/ocis/pull/6132

* Bugfix - Fix the kql-bleve search: [#7290](https://github.com/owncloud/ocis/pull/7290)

   We fixed the issue when 500 on searches that contain ":". Added the characters
   escaping according to https://blevesearch.com/docs/Query-String-Query/

   https://github.com/owncloud/ocis/issues/7282
   https://github.com/owncloud/ocis/pull/7290

* Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: [#7312](https://github.com/owncloud/ocis/issues/7312)

   We reintroduced the USERS_LDAP_USER_SCHEMA_ID variable which was accidently
   removed from the users service with the 4.0.0 release.

   https://github.com/owncloud/ocis/issues/7312
   https://github.com/owncloud/ocis-charts/issues/397

* Bugfix - Do not reset state of received shares when rebuilding the jsoncs3 index: [#7319](https://github.com/owncloud/ocis/issues/7319)

   We fixed a problem with the "ocis migrate rebuild-jsoncs3-indexes" command which
   reset the state of received shares to "pending".

   https://github.com/owncloud/ocis/issues/7319

* Bugfix - Deprecate redundant encryptions settings for notification service: [#7345](https://github.com/owncloud/ocis/issues/7345)

   The values `tls` and `ssl` for the `smtp_encryption` configuration setting are
   duplicates of `starttls` and `ssltls`. They have been marked as deprecated. A
   warning will be logged when they are still used. Please use `starttls` instead
   for `tls` and `ssltls` instead of `ssl.

   https://github.com/owncloud/ocis/issues/7345

* Bugfix - Check school number for duplicates before adding a school: [#7351](https://github.com/owncloud/ocis/pull/7351)

   We fixed an issue that allowed to create two schools with the same school number

   https://github.com/owncloud/enterprise/issues/6051
   https://github.com/owncloud/ocis/pull/7351

* Bugfix - Don't reload web config: [#7369](https://github.com/owncloud/ocis/pull/7369)

   When requesting `config.json` file from the server, web service would reload the
   file if a path is set. This will remove config entries set via Envvar. Since we
   want to have the possiblity to set configuration from both sources we removed
   the reading from file. The file will still be loaded on service startup.

   https://github.com/owncloud/ocis/pull/7369

* Bugfix - Delete outdated userlog events: [#7410](https://github.com/owncloud/ocis/pull/7410)

   Userlog will now delete events when the user has no longer access to the
   underlying resource

   https://github.com/owncloud/ocis/pull/7410

* Bugfix - Set the mountpoint on auto accept: [#7460](https://github.com/owncloud/ocis/pull/7460)

   On shares auto accept set a mountpoint with same logic as ocs handler

   https://github.com/owncloud/ocis/pull/7460

* Bugfix - Fix default language fallback: [#7465](https://github.com/owncloud/ocis/issues/7465)

   Add the default language for the webui, the settings, userlog and notification
   service.

   https://github.com/owncloud/ocis/issues/7465

* Bugfix - GetUserByClaim fixed for Active Directory: [#7476](https://github.com/owncloud/ocis/pull/7476)

   The reva ldap backend for the users and groups service did not hex escape binary
   uuids in LDAP filter correctly this could cause problems in Active Directory
   setups for services using the GetUserByClaim CS3 request with claim "userid".

   https://github.com/owncloud/ocis/issues/7469
   https://github.com/owncloud/ocis/pull/7476

* Bugfix - Fix preview request 500 error when made too early: [#7502](https://github.com/owncloud/ocis/issues/7502)

   Fix the status code and message when a thumbnail request is made too early.

   https://github.com/owncloud/ocis/issues/7502
   https://github.com/owncloud/ocis/pull/7507

* Bugfix - Fix 403 in docs pipeline: [#7509](https://github.com/owncloud/ocis/issues/7509)

   Docs pipeline was not routed through our proxies which could lead to requests
   being blacklisted

   https://github.com/owncloud/ocis/issues/7509
   https://github.com/owncloud/ocis/pull/7511

* Bugfix - Fix the auth service env variable: [#7523](https://github.com/owncloud/ocis/pull/7523)

   We the auth service env variable to t