chore(deps): update owncloud/ocis docker tag to v7.3.2#919
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): update owncloud/ocis docker tag to v7.3.2#919renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
c951431 to
103a7e3
Compare
c7f9ab3 to
1fc29ac
Compare
1fc29ac to
d6f7c26
Compare
d6f7c26 to
732c663
Compare
732c663 to
1fd1539
Compare
1fd1539 to
0201f0a
Compare
0201f0a to
7a99546
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.1.4→7.3.2Release Notes
owncloud/ocis (owncloud/ocis)
v7.3.2: 7.3.2Compare Source
Table of Contents
Changes in 7.3.2
Summary
Details
Enhancement - Force Strict-Transport-Security: #11880
Added
PROXY_FORCE_STRICT_TRANSPORT_SECURITYenvironment variable to forceemission of
Strict-Transport-Securityheader on all responses, including plainHTTP requests when TLS is terminated upstream. Useful when oCIS is deployed
behind a proxy.
#11880
Enhancement - Bump reva version: #11992
Bumps reva to newest version
#11992
v7.3.1Compare Source
The following sections list the changes for 8.0.0.
Summary
Details
Bugfix - Fix user light creation: #11765
When trying to switch a user to user light before they logged in for the first
time, an error would occur. The server now correctly handles this case and
allows switching to user light even before the first login.
#11765
Bugfix - OCM Specification Compliance: #11773
OCM Specification Compliance
#11773
Bugfix - Remove leading dot before checking disabled extension: #11814
We have fixed a bug where the leading dot was not removed before checking if an
extension is disabled. The original behavior would have caused the
COLLABORATION_WOPI_DISABLED_EXTENSIONSconfig to be ignored.#11814
Bugfix - Support pointer types in config environment variable decoding: #11815
Added support for decoding pointer types (*bool, *int, *string, etc.) in the
envdecode package, allowing configuration fields to distinguish between unset
(nil) and explicitly set values. Changed
WEB_OPTION_EMBED_ENABLEDfrom stringto *bool type to enable explicit false values.
#11815
Bugfix - Replace obsolete docker image in the deployment example: #11828
In the ocis_ldap deployment example, we were using the bitnami/openldap docker
image. This image isn't available any longer, so the example couldn't be
deployed as intended.
We've replaced the docker image with the osixia/openldap image and we've
adjusted some of the configuration of the openldap image.
#11828
Bugfix - Fix error code when a user can't disable a space: #11845
Previously, if the user couldn't disable a space due to wrong permissions, the
request returned a 404 error code, as if the space wasn't found even though the
space was visible. Now it will return the expected 403 error code.
#11845
Bugfix - Fix Sharingroles: #11898
Sharing roles were inconsistent, now they are fixed.
#11898
Bugfix - Fix the error handling for empty name on space update: #11933
Fix the error handling for empty name on space update.
#11887
#11933
Bugfix - Fix group creation in ocis-multi example: #12019
Group creation was not working in ocis.ocm instance
#12019
Change - Remove deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS: #11942
Deprecated OCIS_SHOW_USER_EMAIL_IN_RESULTS environment variable was removed from
frontend service config. Use OCIS_USER_SEARCH_DISPLAYED_ATTRIBUTES instead to
control which user attributes are displayed in search results.
#11942
Enhancement - Bump Reva: #460
This updates the ownCloud Reva dependency to include brute force protection for
public links. The feature implements rate-limiting that blocks access to
password-protected public shares after exceeding a configurable maximum number
of failed authentication attempts within a time window.
owncloud/reva#460
Enhancement - Set Referrer-Policy to no-referrer: #11722
Change the Referrer-Policy from 'strict-origin-when-cross-origin' to
'no-referrer' to enhance user privacy and security.
Previously, the origin was sent on cross-origin requests. This change completely
removes the Referrer header from all outgoing requests, preventing any potential
leakage of browsing information to third parties. This is a more robust approach
to protecting user privacy.
#11722
Enhancement - Bump Reva: #11748
This updates the ownCloud Reva dependency to commit
82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45. Changelog:owncloud/reva@
cb98fe5...82c22e9#11748
Enhancement - Support disabling editors by extensions: #11750
We have extended the configuration of collaboration service to support disabling
editors for specific file extensions.
#11750
Enhancement - Add CLI to move stuck uploads: #11762
In some cases of saturated disk usage ocis metadata may get stuck. This command
relieves this case.
#11762
Enhancement - Use externalID in Provisioning API: #11799
This PR adds the externalID as optional parameter to the Provisioning API that
can be used as the primary identifier. It also contains a switch to enable this
setting.
#11799
Enhancement - Add CLI to clean orphned grants: #11804
Add CLI
ocis shares clean-orphaned-grantsto find and optionally removestorage grants without corresponding share-manager entries.
#11804
Enhancement - Bump Reva: #11808
This updates the ownCloud Reva dependency to commit
a122a9538794530267743edfd5dc67b48aa90325. Changelog:owncloud/reva@
751223b...a122a95#11808
Enhancement - Bump Web to v12.2.0: #11834
copying public link and password on Safari - Bugfix
owncloud/web#13198: Fix incorrect
translations - Bugfix
owncloud/web#13203: Remove
duplicate resource links - Bugfix
owncloud/web#13213: Do not disable
sharing of resources when managing spaces via claims - Bugfix
owncloud/web#13223: Fix spinner
loading continuously when resource is deleted - Bugfix
owncloud/web#13233: Include Ubuntu
font - Bugfix owncloud/web#13253:
External share ID fallback - Bugfix
owncloud/web#13274: Handle file
loading error - Bugfix
owncloud/web#13329: Use sticky
header composable in deleted files - Enhancement
owncloud/web#13168: Hide trashed
spaces - Enhancement
owncloud/web#13169: Drop beta
badge from GeoGebra pinboards - Enhancement
owncloud/web#13172: Add Excalidraw
file icon - Enhancement
owncloud/web#13197: Add Visio file
icons - Enhancement
owncloud/web#13224: Add table
caption - Enhancement
owncloud/web#13235: Use API groups
search in admin settings - Enhancement
owncloud/web#13296: Embed mode
share links with password
#11834
https://github.com/owncloud/web/releases/tag/v12.2.0
Enhancement - Introduce claims for multi-instance-ocis: #11848
Reads claims from the oidc token to add users to ocis with specific roles.
#11848
Enhancement - Update the ocis_full deployment example images: #11860
#11860
Enhancement - Implement brute force protection for public links: #11864
Public links will be protected by default, allowing up to 5 wrong password
attempts per hour. If such rate is exceeded, the link will be blocked for all
the users until the failure rate goes below the configured threshold (5 failures
per hour by default, as said).
The failure rate is configurable, so it can be 10 failures each 2 hours or 3
failures per minute.
#11864
owncloud/reva#460
Enhancement - Update the ocis_full deployment example traefik image: #11867
#11867
Enhancement - Added a graph endpoint alias: #11871
We added a graph endpoint alias that uses the unified roles instead of cs3 roles
#11871
Enhancement - Force Strict-Transport-Security: #11880
Added
PROXY_FORCE_STRICT_TRANSPORT_SECURITYenvironment variable to forceemission of
Strict-Transport-Securityheader on all responses, including plainHTTP requests when TLS is terminated upstream. Useful when oCIS is deployed
behind a proxy.
#11880
Enhancement - Relocate Transifex resources: #11889
The resources for services with translations are relocated in Transifex from
owncloud to owncloud-web. Now all ocis related resources are in one project.
#11889
Enhancement - Update the ocis_full deployment example images: #11890
#11890
Enhancement - Allow sharing between instances: #11893
In Multi-Instance ocis it is now possible to share between instances.
#11893
Enhancement - Add photo EXIF metadata to search index and WebDAV results: #11912
We've added support for photo metadata fields in the Bleve search index and
WebDAV REPORT responses. This enables photo gallery applications to efficiently
query photos by their EXIF metadata and display camera information.
The following photo metadata fields are now indexed and searchable: -
photo.takenDateTime- When the photo was taken (supports date range queries) -photo.cameraMake- Camera manufacturer (e.g., Canon, Nikon, Samsung) -photo.cameraModel- Camera model name -photo.fNumber- Aperture f-stopvalue -
photo.focalLength- Focal length in millimeters -photo.iso- ISOsensitivity -
photo.orientation- Image orientation -photo.exposureNumerator- Exposure time numerator (for shutter speedcalculation) -
photo.exposureDenominator- Exposure time denominator (forshutter speed calculation)
GPS location data is also included when available: -
photo.location.latitude-GPS latitude -
photo.location.longitude- GPS longitude -photo.location.altitude- GPS altitudeThese fields are returned in WebDAV search results using the
oc:photo-*property namespace, allowing web extensions to build photo timeline views,
filter by camera, or show photos on a map.
#11912
Enhancement - Update the traefik image for some deployment examples: #11915
#11915
Enhancement - Add users instances: #11925
The user endpoint now returns the instances that the user is either a member or
a guest of and the cross instance reference.
#11925
Enhancement - Introduce external shares permission: #11931
Introduces a permission allowing to share between instances in multi-instance
ocis. This permission is by default added to the admin and space-admin role.
#11931
Enhancement - Update to go 1.25: #12011
We have updated go to version 1.25 and alpine to version 3.23.3
#12011
#12004
Enhancement - Bump Web to 12.3.1: #12016
Bugfix owncloud/web#13553: Search
Text Overalps With Search Icon In The Search Bar
#12016
https://github.com/owncloud/web/releases/tag/v12.3.1
Enhancement - Bump Web to 12.3.0: #13519
Bugfix owncloud/web#13406: Prevent
overlapping search content Bugfix
owncloud/web#13415 Filter only
personal trashed spaces Enhancement
owncloud/web#5847 Dynamic
theme-color meta tag based on loaded theme Enhancement
owncloud/web#13412 Use beta
endpoint for single drive operations Enhancement
owncloud/web#13426 Add crash page
Enhancement
owncloud/web#13426Catch spaces
loading error Enhancement
owncloud/web#13485Drop custom
share filters Enhancement
owncloud/web#13499Add
cross-instance reference Enhancement
owncloud/web#13500Add instance
switcher
owncloud/web#13519
https://github.com/owncloud/web/releases/tag/v12.3.0
v7.3.0Compare Source
The following sections list the changes for 7.3.1.
Summary
Details
Enhancement - Bump Web to 12.1.1: #11726
This version contains only updated translations.
#11726
https://github.com/owncloud/web/releases/tag/v12.1.1
Enhancement - Bump Web to v12.1.2: #11836
not disable sharing of resources when managing spaces via claims
#11836
https://github.com/owncloud/web/releases/tag/v12.1.2
v7.2.0Compare Source
The following sections list the changes for 7.3.0.
Summary
Details
Bugfix - Fix the expiration date response for links: #11239
We fixed the inconsistency in the expiration date response for links
#11232
#11239
Bugfix - Return translated role definitions: #11466
Instead of always returning the role definitions in English, we now return the
role definitions in the language set in the
Accept-Languageheader if present.#11466
Bugfix - Tolerating the empty request body for WebDAV: #11516
Tolerating the empty request body for WebDAV operations like MKCOL, DELETE,
MOVE, COPY.
#10809
#11516
Bugfix - Fix space root handling in a sharedByMe: #11533
Fix space root handling in a graph sharedByMe
#11533
Bugfix - Fix the create link endpoint: #11542
We fixed an issue when Shares drive can be shared via link share with Internal
role using permissions endpoint
#11409
#11542
Bugfix - Limit search only when scope is passed: #11664
Previously, the search service would limit the search to the according space
when searching
/dav/spaces/. This was not correct, as the search should belimited to the according space when a
scopeis passed in the search patterninstead.
#11664
Bugfix - Add OCS v2 capabilities endpoint to public paths: #11665
Following the same behavior as OCS v1, we added the OCS v2 capabilities endpoint
to the public paths.
#11665
Bugfix - Add webdav without trailing slash into proxy default config: #11677
We've added the
/webdavendpoint without a trailing slash into the proxydefault config.
#10346
#10334
#11677
Bugfix - Fix clean uploads command: #11693
When using --clean ongoing uploads would be purged but the nodes would not be
reverted. This is now fixed.
#11693
Bugfix - Fix stale nodes command: #11704
Fix delete-stale-nodes command to properly remove or roll-back nodes
#11704
Enhancement - Add GetPermission API: #8616
Graph service: added GET
/v1beta1/drives/{driveId}/items/{itemId}/permissions/{permissionId} (and
space-root equivalent) so clients can retrieve a single permission instead of
listing all.
#8616
#11477
Enhancement - Bump importer app: #10880
The importer app in the ocis_full example has been updated. It's using the
upstream Uppy Companion Docker image now.
#10880
Enhancement - Allow scaling the search service: #11029
Previously, the search service locked the index for its whole lifetime, so any
other search service wouldn't be able to access to the index. With this change,
the search service can be configure to lock the index per operation, so other
search services can access the index as long as there is no operation ongoing.
#11029
Enhancement - Add Cli to delete personal spaces: #11555
Add Cli to delete the trashed personal spaces.
#11555
Enhancement - Add custom labels for app tokens: #11555
The ability to set a custom label when creating an app token has been added.
#11555
Enhancement - HTTP Strict Transport Security: #11568
Added Support for HTTP Strict Transport Security. It reduces surface for
Man-in-the-Middle attacks or leakage of sensitive information.
#11568
Enhancement - Allow markdown output for unified-roles-table: #11581
Allows rendering the
ocis graph list-unified-rolescommand in markdown (orcolorized)
#11581
Enhancement - Added the OnlyOffice license support: #11624
Added the OnlyOffice ee license support to the ocis_full deployment.
#11624
Enhancement - Bump Web to 12.0.4: #11625
public link archiver download URL
#11625
https://github.com/owncloud/web/releases/tag/v12.0.4
Enhancement - Update the ocis_full deployment example: #11666
Fix description texts, move image versions from yaml to .env where applicapable
#11666
Enhancement - Bump Reva version: #11669
Bumped reva version
#11669
#11693
#11704
Enhancement - Added user type upgrade/downgrade: #11678
Added the mechanism to disable/enable personal spaces on user type
upgrade/downgrade
#11678
Enhancement - Respect changed user type in OIDC claim: #11684
Ensure that OIDC login correctly interprets user type changes to disable/enable
personal spaces on user type upgrade/downgrade
#11684
Enhancement - Drop remote.php prefix: #11687
The
remote.phpprefix is now fully optional in WebDAV endpoints and is neverreturned in responses.
#11687
Enhancement - Add configurable display attributes: #11695
We added new configuration options
UserSearchDisplayedAttributeswhich allowsto configure the attributes that are displayed in the user search results. We
are also deprecating the
ShowUserEmailInResultsconfiguration option.#11695
Enhancement - Bump Web to 12.1.0: #11710
selection only when path changes - Bugfix
owncloud/web#12780: Handle direct
admin settings access - Bugfix
owncloud/web#12954: Add clipboard
permissions - Bugfix
owncloud/web#13075: Set md-editor
code block header to have z-index of 0 - Bugfix
owncloud/web#13126: Make progress
bar settings reactive - Bugfix
owncloud/web#13127: Handle HTML
upload error - Bugfix
owncloud/web#13136: Disallow
U+202E character in folder name - Bugfix
owncloud/web#13142: Use correct
color for universal icon - Enhancement
owncloud/web#12788: Add markdown
to PDF export - Enhancement
owncloud/web#12915: Use switch for
full text search filter - Enhancement
owncloud/web#12925: Add MFA
capability - Enhancement
owncloud/web#12933: Add universal
access - Enhancement
owncloud/web#12973: Add GeoGebra
pinboard icon - Enhancement
owncloud/web#12974: Replace board
icon - Enhancement
owncloud/web#13093: Add
OcResponsiveImage component - Enhancement
owncloud/web#13093: Add topbar
mobile logo theme option - Enhancement
owncloud/web#13110: Add mobile to
query param - Enhancement
owncloud/web#13111: Use OCS v2 API
Drop
remote.phpfrom WebDAV paths - Enhancementowncloud/web#13144: Display custom
attributes in share autocomplete
#11710
https://github.com/owncloud/web/releases/tag/v12.1.0
Enhancement - Bump Web to 12.1.1: #11726
This version contains only updated translations.
#11726
https://github.com/owncloud/web/releases/tag/v12.1.1
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.