Table of Contents

• Changelog for 8.0.0

Changes in 8.0.0

Summary

• Bugfix - Fix user light creation: #11765
• Bugfix - OCM Specification Compliance: #11773
• Bugfix - Remove leading dot before checking disabled extension: #11814
• Bugfix - Support pointer types in config environment variable decoding: #11815
• Bugfix - Replace obsolete docker image in the deployment example: #11828
• Bugfix - Fix error code when a user can’t disable a space: #11845
• Bugfix - Fix Sharingroles: #11898
• Bugfix - Fix the error handling for empty name on space update: #11933
• Bugfix - Fix group creation in ocis-multi example: #12019
• Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942
• Enhancement - Bump Reva: #460
• Enhancement - Set Referrer-Policy to no-referrer: #11722
• Enhancement - Bump Reva: #11748
• Enhancement - Support disabling editors by extensions: #11750
• Enhancement - Add CLI to move stuck uploads: #11762
• Enhancement - Use externalID in Provisioning API: #11799
• Enhancement - Add CLI to clean orphned grants: #11804
• Enhancement - Bump Reva: #11808
• Enhancement - Bump Web to v12.2.0: #11834
• Enhancement - Introduce claims for multi-instance-ocis: #11848
• Enhancement - Update the ocis_full deployment example images: #11860
• Enhancement - Implement brute force protection for public links: #11864
• Enhancement - Update the ocis_full deployment example traefik image: #11867
• Enhancement - Added a graph endpoint alias: #11871
• Enhancement - Force Strict-Transport-Security: #11880
• Enhancement - Relocate Transifex resources: #11889
• Enhancement - Update the ocis_full deployment example images: #11890
• Enhancement - Allow sharing between instances: #11893
• Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912
• Enhancement - Update the traefik image for some deployment examples: #11915
• Enhancement - Add users instances: #11925
• Enhancement - Introduce external shares permission: #11931
• Enhancement - Update to go 1.25: #12004
• Enhancement - Bump Web to 12.3.1: #12016
• Enhancement - Bump Web to 12.3.0: #13519

Details

• Bugfix - Fix user light creation: #11765

  When trying to switch a user to user light before they logged in for the first time, an error would occur. The server now correctly handles this case and allows switching to user light even before the first login.

  https://github.com/owncloud/ocis/pull/11765

• Bugfix - OCM Specification Compliance: #11773

  OCM Specification Compliance

  https://github.com/owncloud/ocis/pull/11773

• Bugfix - Remove leading dot before checking disabled extension: #11814

  We have fixed a bug where the leading dot was not removed before checking if an extension is disabled. The original behavior would have caused the COLLABORATION_WOPI_DISABLED_EXTENSIONS config to be ignored.

  https://github.com/owncloud/ocis/pull/11814

• Bugfix - Support pointer types in config environment variable decoding: #11815

  Added support for decoding pointer types (*bool, *int, *string, etc.) in the envdecode package, allowing configuration fields to distinguish between unset (nil) and explicitly set values. Changed WEB_OPTION_EMBED_ENABLED from string to *bool type to enable explicit false values.

  https://github.com/owncloud/ocis/pull/11815

• Bugfix - Replace obsolete docker image in the deployment example: #11828

  In the ocis_ldap deployment example, we were using the bitnami/openldap docker image. This image isn’t available any longer, so the example couldn’t be deployed as intended.

  We’ve replaced the docker image with the osixia/openldap image and we’ve adjusted some of the configuration of the openldap image.

  https://github.com/owncloud/ocis/pull/11828

• Bugfix - Fix error code when a user can’t disable a space: #11845

  Previously, if the user couldn’t disable a space due to wrong permissions, the request returned a 404 error code, as if the space wasn’t found even though the space was visible. Now it will return the expected 403 error code.

  https://github.com/owncloud/ocis/pull/11845

• Bugfix - Fix Sharingroles: #11898

  Sharing roles were inconsistent, now they are fixed.

  https://github.com/owncloud/ocis/pull/11898

• Bugfix - Fix the error handling for empty name on space update: #11933

  Fix the error handling for empty name on space update.

  https://github.com/owncloud/ocis/issues/11887 https://github.com/owncloud/ocis/pull/11933

• Bugfix - Fix group creation in ocis-multi example: #12019

  Group creation was not working in ocis.ocm instance

  https://github.com/owncloud/ocis/pull/12019

• Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942

  Deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS environment variable was removed from frontend service config. Use OCIS_USER_SEARCH_DISPLAYED_ATTRIBUTES instead to control which user attributes are displayed in search results.

  https://github.com/owncloud/ocis/pull/11942

• Enhancement - Bump Reva: #460

  This updates the ownCloud Reva dependency to include brute force protection for public links. The feature implements rate-limiting that blocks access to password-protected public shares after exceeding a configurable maximum number of failed authentication attempts within a time window.

  https://github.com/owncloud/reva/pull/460

• Enhancement - Set Referrer-Policy to no-referrer: #11722

  Change the Referrer-Policy from ‘strict-origin-when-cross-origin’ to ‘no-referrer’ to enhance user privacy and security.

  Previously, the origin was sent on cross-origin requests. This change completely removes the Referrer header from all outgoing requests, preventing any potential leakage of browsing information to third parties. This is a more robust approach to protecting user privacy.

  https://github.com/owncloud/ocis/pull/11722

• Enhancement - Bump Reva: #11748

  This updates the ownCloud Reva dependency to commit 82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45. Changelog: https://github.com/owncloud/reva/compare/cb98fe521deb55ae339d6ddc4a4b60d6d4da9e14…82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45

  https://github.com/owncloud/ocis/pull/11748

• Enhancement - Support disabling editors by extensions: #11750

  We have extended the configuration of collaboration service to support disabling editors for specific file extensions.

  https://github.com/owncloud/ocis/pull/11750

• Enhancement - Add CLI to move stuck uploads: #11762

  In some cases of saturated disk usage ocis metadata may get stuck. This command relieves this case.

  https://github.com/owncloud/ocis/pull/11762

• Enhancement - Use externalID in Provisioning API: #11799

  This PR adds the externalID as optional parameter to the Provisioning API that can be used as the primary identifier. It also contains a switch to enable this setting.

  https://github.com/owncloud/ocis/pull/11799

• Enhancement - Add CLI to clean orphned grants: #11804

  Add CLI ocis shares clean-orphaned-grants to find and optionally remove storage grants without corresponding share-manager entries.

  https://github.com/owncloud/ocis/pull/11804

• Enhancement - Bump Reva: #11808

  This updates the ownCloud Reva dependency to commit a122a9538794530267743edfd5dc67b48aa90325. Changelog: https://github.com/owncloud/reva/compare/751223b32d4852c73a43388f6f55308c2065afeb…a122a9538794530267743edfd5dc67b48aa90325

  https://github.com/owncloud/ocis/pull/11808

• Enhancement - Bump Web to v12.2.0: #11834

  • Bugfix owncloud/web#13177: Fix copying public link and password on Safari - Bugfix owncloud/web#13198: Fix incorrect translations - Bugfix owncloud/web#13203: Remove duplicate resource links - Bugfix owncloud/web#13213: Do not disable sharing of resources when managing spaces via claims - Bugfix owncloud/web#13223: Fix spinner loading continuously when resource is deleted - Bugfix owncloud/web#13233: Include Ubuntu font - Bugfix owncloud/web#13253: External share ID fallback - Bugfix owncloud/web#13274: Handle file loading error - Bugfix owncloud/web#13329: Use sticky header composable in deleted files - Enhancement owncloud/web#13168: Hide trashed spaces - Enhancement owncloud/web#13169: Drop beta badge from GeoGebra pinboards - Enhancement owncloud/web#13172: Add Excalidraw file icon - Enhancement owncloud/web#13197: Add Visio file icons - Enhancement owncloud/web#13224: Add table caption - Enhancement owncloud/web#13235: Use API groups search in admin settings - Enhancement owncloud/web#13296: Embed mode share links with password

  https://github.com/owncloud/ocis/pull/11834 https://github.com/owncloud/web/releases/tag/v12.2.0

• Enhancement - Introduce claims for multi-instance-ocis: #11848

  Reads claims from the oidc token to add users to ocis with specific roles.

  https://github.com/owncloud/ocis/pull/11848

• Enhancement - Update the ocis_full deployment example images: #11860

  • Traefik 3.6.2
  • Collabora 27.4.7.3
  • OnlyOffice 9.2.0
  • Mailpit 1.28.0

  https://github.com/owncloud/ocis/pull/11860

• Enhancement - Implement brute force protection for public links: #11864

  Public links will be protected by default, allowing up to 5 wrong password attempts per hour. If such rate is exceeded, the link will be blocked for all the users until the failure rate goes below the configured threshold (5 failures per hour by default, as said).

  The failure rate is configurable, so it can be 10 failures each 2 hours or 3 failures per minute.

  https://github.com/owncloud/ocis/pull/11864 https://github.com/owncloud/reva/pull/460

• Enhancement - Update the ocis_full deployment example traefik image: #11867

  • Traefik: 3.6.4
  • Traefik fix for Collabora

  https://github.com/owncloud/ocis/pull/11867

• Enhancement - Added a graph endpoint alias: #11871

  We added a graph endpoint alias that uses the unified roles instead of cs3 roles

  https://github.com/owncloud/ocis/pull/11871

• Enhancement - Force Strict-Transport-Security: #11880

  Added PROXY_FORCE_STRICT_TRANSPORT_SECURITY environment variable to force emission of Strict-Transport-Security header on all responses, including plain HTTP requests when TLS is terminated upstream. Useful when oCIS is deployed behind a proxy.

  https://github.com/owncloud/ocis/pull/11880

• Enhancement - Relocate Transifex resources: #11889

  The resources for services with translations are relocated in Transifex from owncloud to owncloud-web. Now all ocis related resources are in one project.

  https://github.com/owncloud/ocis/pull/11889

• Enhancement - Update the ocis_full deployment example images: #11890

  • Traefic: v3.6.6
  • Collabora: 25.04.8.1.1
  • Onlyoffice: 9.2.1.1

  https://github.com/owncloud/ocis/pull/11890

• Enhancement - Allow sharing between instances: #11893

  In Multi-Instance ocis it is now possible to share between instances.

  https://github.com/owncloud/ocis/pull/11893

• Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912

  We’ve added support for photo metadata fields in the Bleve search index and WebDAV REPORT responses. This enables photo gallery applications to efficiently query photos by their EXIF metadata and display camera information.

  The following photo metadata fields are now indexed and searchable: - photo.takenDateTime - When the photo was taken (supports date range queries) - photo.cameraMake - Camera manufacturer (e.g., Canon, Nikon, Samsung) - photo.cameraModel - Camera model name - photo.fNumber - Aperture f-stop value - photo.focalLength - Focal length in millimeters - photo.iso - ISO sensitivity - photo.orientation - Image orientation - photo.exposureNumerator - Exposure time numerator (for shutter speed calculation) - photo.exposureDenominator - Exposure time denominator (for shutter speed calculation)

  GPS location data is also included when available: - photo.location.latitude - GPS latitude - photo.location.longitude - GPS longitude - photo.location.altitude - GPS altitude

  These fields are returned in WebDAV search results using the oc:photo-* property namespace, allowing web extensions to build photo timeline views, filter by camera, or show photos on a map.

  https://github.com/owncloud/ocis/pull/11912

• Enhancement - Update the traefik image for some deployment examples: #11915

  • Traefik: 3.6.6 —> 3.6.7

  https://github.com/owncloud/ocis/pull/11915

• Enhancement - Add users instances: #11925

  The user endpoint now returns the instances that the user is either a member or a guest of and the cross instance reference.

  https://github.com/owncloud/ocis/pull/11925

• Enhancement - Introduce external shares permission: #11931

  Introduces a permission allowing to share between instances in multi-instance ocis. This permission is by default added to the admin and space-admin role.

  https://github.com/owncloud/ocis/pull/11931

• Enhancement - Update to go 1.25: #12004

  We have updated go to version 1.25 and alpine to version 3.23.3

  https://github.com/owncloud/ocis/pull/12004

• Enhancement - Bump Web to 12.3.1: #12016

  Bugfix owncloud/web#13553: Search Text Overalps With Search Icon In The Search Bar

  https://github.com/owncloud/ocis/pull/12016 https://github.com/owncloud/web/releases/tag/v12.3.1

• Enhancement - Bump Web to 12.3.0: #13519

  Bugfix owncloud/web#13406: Prevent overlapping search content Bugfix owncloud/web#13415 Filter only personal trashed spaces Enhancement owncloud/web#5847 Dynamic theme-color meta tag based on loaded theme Enhancement owncloud/web#13412 Use beta endpoint for single drive operations Enhancement owncloud/web#13426 Add crash page Enhancement owncloud/web#13426Catch spaces loading error Enhancement owncloud/web#13485Drop custom share filters Enhancement owncloud/web#13499Add cross-instance reference Enhancement owncloud/web#13500Add instance switcher

  https://github.com/owncloud/web/pull/13519 https://github.com/owncloud/web/releases/tag/v12.3.0