30.0.11 RC1

[blizzz]

• [stable30] feat(admin_audit): write admin audit log for login failed #51107
• build(deps-dev): bump mime from 4.0.6 to 4.0.7 #51962
• [stable30] perf(files_sharing): do not emit second propfind for account filter #52002
• [stable30] fix: fix preloading files with no custom properties #52102
• Revert "[stable30] feat(bulk-upload): change the default to disabled … #52139
• [stable30] fix: Transfer ownership with S3 as primary #52184
• [stable30] fix(files_sharing): file request pass empty string if password or expiration is disabled #52196
• [stable30] feat(security): add configurable IPv6 subnet for BFP and throttling #52232
• [stable30] fix: Check that user actually can validate password for js #52238
• build(deps-dev): bump @types/dockerode from 3.3.37 to 3.3.38 #52273
• [stable30] chore(dependencies): update @nextcloud/vue to v8.25.1 #52297
• build(deps-dev): bump guzzlehttp/guzzle from 7.9.2 to 7.9.3 in /build/integration #52305
• build(deps-dev): bump symfony/event-dispatcher from 5.4.34 to 5.4.45 in /build/integration #52306
• build(deps-dev): bump phpunit/phpunit from 9.6.19 to 9.6.22 in /build/integration #52307
• build(deps): bump phpunit/phpunit from 9.6.19 to 9.6.22 in /vendor-bin/phpunit #52310
• build(deps): bump core-js from 3.37.1 to 3.41.0 #52311
• build(deps-dev): bump workbox-webpack-plugin from 7.1.0 to 7.3.0 #52318
• build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.6.0 #52319
• build(deps): bump libphonenumber-js from 1.11.20 to 1.12.7 #52322
• build(deps-dev): bump cypress from 13.13.3 to 13.17.0 #52324
• build(deps-dev): bump webpack from 5.94.0 to 5.99.6 #52327
• build(deps-dev): bump puppeteer from 24.4.0 to 24.7.0 #52329
• build(deps-dev): bump jasmine-core from 2.5.2 to 2.99.1 #52331
• build(deps-dev): bump @babel/preset-typescript from 7.24.7 to 7.27.0 #52333
• build(deps-dev): bump @babel/node from 7.25.9 to 7.26.0 #52339
• build(deps-dev): bump cypress-if from 1.12.6 to 1.13.2 #52340
• build(deps): bump pinia from 2.2.8 to 2.3.1 #52342
• build(deps-dev): bump tslib from 2.6.3 to 2.8.1 #52344
• build(deps-dev): bump babel-loader from 9.1.3 to 9.2.1 #52346
• build(deps-dev): bump typescript from 5.7.3 to 5.8.3 #52348
• build(deps): bump focus-trap from 7.5.4 to 7.6.4 #52350
• [stable30] fix(files): prevent dragging preview when drag-drop #52362
• [stable30] fix(dav): allow uploading of files with long filenames #52377
• [stable30] fix(objectstorage): add retry attempts to S3 connection #52381
• [stable30] fix(federation): allows equal signs in federation id #52386
• [stable30] fix(db): Create replacement index where original index is missing #52393
• [stable30] chore(deps): Bump laravel/serializable-closure from 1.3.5 to 1.3.7 #52398
• [stable30] fix(updatenotification): Fix error handling when fetching applist for server update #52405
• [stable30] fix(files_sharing): Improve expiration date input change handling #52408
• [stable30] fix(files_versions): create version if previous does not exist #52412
• [stable30] perf(db): Extend index on cards_properties to cover name and value #52414
• [stable30] test(cypress): rename select all clear #52421
• [stable30] fix(config): Censor more app configs in system report #52432
• [stable30] fix(occ): Fix autocompletion of config:app:* commands #52436
• build(deps): bump nextcloud/coding-standard from 1.2.1 to 1.2.2 in /vendor-bin/cs-fixer #52462
• build(deps-dev): bump webpack from 5.99.6 to 5.99.7 #52463
• build(deps-dev): bump @testing-library/user-event from 14.5.2 to 14.6.1 #52464
• build(deps-dev): bump cypress-axe from 1.5.0 to 1.6.0 #52465
• build(deps-dev): bump @testing-library/jest-dom from 6.4.8 to 6.6.3 #52466
• build(deps-dev): bump puppeteer from 24.7.0 to 24.7.2 #52467
• build(deps-dev): bump sass from 1.77.8 to 1.87.0 #52468
• build(deps): bump p-limit from 6.1.0 to 6.2.0 #52469
• build(deps): bump @nextcloud/vue from 8.25.1 to 8.26.0 #52471
• build(deps-dev): bump dockerode from 4.0.5 to 4.0.6 #52472
• build(deps-dev): bump ts-jest from 29.2.6 to 29.3.2 #52473
• build(deps-dev): bump @babel/plugin-transform-private-methods from 7.24.7 to 7.25.9 #52475
• [stable30] fix(settings): only provide groups the subadmin has access to  #52487
• [stable30] fix(settings): allow to clear twitter and fediverse #52489
• [stable30] fix: Fix copying to the root of another mountpoint #52499
• [stable30] fix(32bit): use PHP_INT_MAX where needed #52513
• [stable30] fix(JSResourceLocator) fix incorrect parameter being used #52523
• [stable30] fix(WFE): properly set inital status #52528
• [stable30] fix(files_sharing): Prevent create/delete permissions on file shares #52530
• [stable30] perf(caldav): increase chunk size in RemoveOrphanEventsAndContacts repair step #52547
• [stable30] fix(dav): check the owner displayName scope before giving attribute #52553
• [stable30] fix(files): Ensure the filter instance is mounted #52557
• [stable30] fix(CalDAV): do not ignore move command object target uri #52561
• chore: ignore coding-standard PRs from git blame #52568
• [stable30] fix(WeatherStatus): Check if result is an array #52570
• [stable30] fix(notification): Notification in activity shows "Rich subject or a … #52577
• [stable30] fix: Flaky samba kerberos tests #52580
• build(deps): bump query-string from 9.1.0 to 9.1.2 #52608
• build(deps-dev): bump phpunit/phpunit from 9.6.22 to 9.6.23 in /build/integration #52614
• build(deps): bump core-js from 3.41.0 to 3.42.0 #52615
• build(deps): bump phpunit/phpunit from 9.6.22 to 9.6.23 in /vendor-bin/phpunit #52616
• [stable30] fix(loginflow): Fix type error when password could not be decrypted #52624
• [stable30] fix(workflowengine): fix group not shown in Group membership check #52641
• [stable30] fix(files_external): Mark password fields for LoginCredentials and SessionCredentials as hidden and optional #52645
• [stable30] fix(apps): Sort names separately from active/update state #52652
• [stable30] fix(blurhash): Use preview API to generate the previews #52660
• build(deps): Bump laravel/serializable-closure from 1.3.5 to 1.3.7 3rdparty#1995
• [stable30] chore(dev-deps): Bump nextcloud/ocp package activity#1817
• [stable30] fix: don't setup the filesystem to check if a user is blocked by ACLs activity#1986
• [stable30] fix(info.xml): correct developer docs link (typo) app_api#559
• [stable30] fix(exAppMapper): init missing headers_to_exclude app_api#563
• [stable30] fix(CI): disable RateLimiting for Nextcloud in the CI app_api#566
• [stable30] feat: lowercase headers to exclude in exapp proxy app_api#570
• [stable30] Fix task processing registration validation app_api#574
• [stable30] Fix npm audit bruteforcesettings#727
• [stable30] Fix npm audit bruteforcesettings#732
• [stable30] Fix npm audit bruteforcesettings#739
• [stable30] switch to probeCircles circles#1982
• [stable30] Fix npm audit files_pdfviewer#1187
• [stable30] Fix saving annotations in paths with special characters files_pdfviewer#1193
• [stable30] Fix npm audit files_pdfviewer#1199
• [stable30] fix: Open PDF file in "richdocuments" if it is not downloadable files_pdfviewer#1205
• [stable30] Fix npm audit firstrunwizard#1558
• Chore(deps-dev): Bump @nextcloud/vite-config from 1.5.2 to 1.5.4 firstrunwizard#1597
• Chore(deps-dev): Bump vite from 5.4.18 to 5.4.19 firstrunwizard#1598
• [stable30] Fix npm audit logreader#1613
• [stable30] fix(LogTable): implement virtual scrolling logreader#1615
• [stable30] Update nextcloud/ocp dependency logreader#1621
• [stable30] Fix npm audit logreader#1626
• [stable30] chore: update workflows logreader#1630
• [stable30] Update nextcloud/ocp dependency logreader#1636
• [stable30] Fix npm audit logreader#1639
• [stable30] Update nextcloud/ocp dependency nextcloud_announcements#475
• [stable30] Update nextcloud/ocp dependency nextcloud_announcements#476
• [stable30] ci: Fix typo in performance integration test run notifications#2292
• [stable30] Fix npm audit notifications#2302
• [stable30] ci: Update workflows notifications#2305
• [stable30] fix(build): avoid double load of the app notifications#2308
• [stable30] Update nextcloud/ocp dependency notifications#2315
• [stable30] Fix npm audit notifications#2316
• build(deps-dev): Bump @nextcloud/vite-config from 1.5.3 to 1.5.4 notifications#2321
• [stable30] Update nextcloud/ocp dependency notifications#2326
• [stable30] Fix npm audit notifications#2329
• Chore(deps-dev): Bump dockerode from 4.0.4 to 4.0.5 photos#2914
• [stable30] Update nextcloud/ocp dependency photos#2917
• [stable30] Fix npm audit photos#2920
• Chore(deps-dev): Bump dockerode from 4.0.5 to 4.0.6 photos#2955
• [stable30] Update nextcloud/ocp dependency photos#2980
• [stable30] fix(Places): Use event metadata to compute the place photos#2988
• [stable30] Update nextcloud/ocp dependency photos#2997
• [stable30] Update nextcloud/ocp dependency serverinfo#799
• [stable30] Update nextcloud/ocp dependency serverinfo#801
• [stable30] fix: try to avoid memory exhaustion suspicious_login#987
• [stable30] fix: exclude vendor-bin from release artifacts suspicious_login#990
• fix(deps): update dependency y-prosemirror to ^1.3.3 (stable30) text#7140
• fix(deps): update dependency yjs to ^13.6.26 (stable30) text#7142
• fix(deps): update dependency y-prosemirror to ^1.3.4 (stable30) text#7151
• chore(deps): update dependency @nextcloud/vite-config to ^1.5.4 (stable30) text#7174
• chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.40.1 (stable30) text#7175
• chore(deps): update dependency vite to ^5.4.19 (stable30) text#7176
• fix(deps): update dependency lib0 to ^0.2.105 (stable30) text#7177
• fix(deps): update tiptap to ^2.11.9 (stable30) text#7178
• [stable30] fix: Adjust padding in table cell and header components text#7187
• [stable30] fix: Apply storage checks in addition to share text#7193
• [stable30] Fix npm audit twofactor_nextcloud_notification#925
• [stable30] ci: Update workflows twofactor_nextcloud_notification#990
• [stable30] Update nextcloud/ocp dependency twofactor_nextcloud_notification#994
• [stable30] Update nextcloud/ocp dependency twofactor_nextcloud_notification#996
• [stable30] fix(deps): Bump symfony/process twofactor_totp#1582
• [stable30] Fix npm audit viewer#2797
• [stable30] Update cypress snapshots viewer#2805

Pending PRs:

• @come-nc
  • [stable30] Fix files_sorting cypress tests #51694
• @edward-ly
  • [stable30] fix(TaskProcessing): increase task cleanup delay #52655
• @backportbot
  • [stable30] chore: Update workflows activity#1993
  • [stable30] Fix multiple cypress issues activity#1996
• @ChristophWurst
  • [stable30] test: Set PHPUNIT_RUN env var suspicious_login#984
• @susnux
  • [stable30] fix: Hide download action when file does not provide download permissions viewer#2524
• @juliusknorr
  • [stable30] fix: Do not update page title for single file public shares viewer#2794
• @ShGKme
  • perf(rich_workspace): only add property for parent text#5963
• (generated)
  • build(deps): bump @nextcloud/dialogs from 6.1.1 to 6.2.0 #52607
  • [stable30] chore(deps): Bump pdfjs-dist from 4.0.189 to 4.0.379 files_pdfviewer#1137

[blizzz]

Required PRs

• [stable30] fix(workflowengine): fix group not shown in Group membership check #52641
• [stable30] fix(files_external): Mark password fields for LoginCredentials and SessionCredentials as hidden and optional #52645
• [stable30] fix: Apply storage checks in addition to share text#7193

Nice to have PRs

• backport of fix(files_sharing): Filter own shares that are reshares #52503