Version 34.0.3 August 13, 2026

Changes:
server

    Perf: Replace more calls from getUserGroups to getUserGroupIds (server#62223)
    Improve logout url generation (server#62234)
    Fix: Output shape validation will delete keys when there is a list of files (server#62237)
    Chore: undeprecate the redis cache backend (server#62266)
    Fix(jobs): resolve portability issues with background job cleanup (server#62279)
    Fix(files_external/SMB): Use ‘null’ explicitly for no workgroup (server#62281)
    Fix(files): preserve encryptedVersion when copying cache entries (server#62337)
    Fix(preview): Handle unique constraints violation exception (server#62363)
    Fix(files_version): mtime confusion on milliseconds (server#62372)
    Fix(AmazonS3): pass S3 error messages through to the frontend (server#62418)
    Fix(SetupChecks): Link to task processing worker docs (server#62443)
    Fix: Don’t add empty and broken ExternalShareScanJob on upgrade (server#62451)
    Fix(background-jobs): preserve Snowflake IDs as strings (server#62457)
    Fix: harden object store against copying a file to itself (server#62461)
    Fix: Use PHP_AUTH_PW for strict password confirmation (server#62537)
    Build(deps): bump guzzlehttp/guzzle to 7.15.2 (server#62584)
    Perf: Use hash map to check if path was already checked (server#62588)
    Fix(TaskProcessing): Claim tasks atomically in both SynchronousBackgr… (server#62608)
    Perf(preview): Optimize retriving all previews from oc_filecache (server#62611)
    Fix(unified-search): catch errors in response (server#62616)
    Chore(previews): add file signature check before opening files (server#62620)
    Test(version-check): Fix flaky test (server#62623)
    Master] fix(security): Update code signing revocation list (server#62652)
    Fix(search): Add end date for last 7 and last 30 days (server#62685)
    Fix(caldav): Expand recurring events for principal calendar search (server#62693)
    Optimize propagator (server#62699)
    Expend a bit OCP\GlobalScale\IConfig (server#62700)
    Fix(MemcachedFactory): Enable TCP_NODELAY and adjust default timeouts to be reasonable (server#62702)
    Fix(Database): Use real idle-timer to prevent `lastInsertId` being reset on MariaDB/MySQL (server#62714)
    Fix(imip): add context to imip log messages (server#62723)
    Fix(share-api-controller): add sanity check on canAccessShare for circle share types (server#62733)
    Fix(jobs): compute memory usage after clean-up (server#62768)
    Fix(metadata): bind chunked file ids (server#62771)
    Perf(user-display-name): Check memory cache before trying redis (server#62778)
    Fix(encryption): Correctly report size for zero-byte encrypted files (server#62780)
    More logging around partfile rename failures (server#62782)
    Fix(provisioning_api): read newUser.sendEmail as a boolean (server#62784)
    Fix(encryption): handle decryption exception with outdated passwords (server#62788)
    Test(TestCase): restore unregistered services correctly (server#62790)
    Fix(imip): don’t report success when a calendar cannot process iMip (server#62792)
    Fix(share): Avoid crash when share owner is not found (server#62798)
    Fix(systemTags): setObjectIdsForTag() dispatches once (server#62801)
    Test: migrate to Playwright (server#62803)
    Fix: handle sftp private key as password (server#62824)
    Host/ip validator hardenings (server#62829)
    Fix: disable direct link if link shares are disabled (server#62832)
    Check free space in the proper folder when restoring from trash (server#62837)
    Fix: clear key password after loading key (server#62850)
    Fix(direct editing): cleanup tokens on user deletion (server#62862)
    Fix(dav): properly finalize with MOVE only (server#62876)
    Fix(appstore): initialize the exApps store when enabled (server#62881)
    Fix(share): do not re-accept rejected shares (server#62891)
    Hide personal settings of apps not enabled for the user (server#62901)
    Feat: Add setting to bypass password confirmation on a selected ip ranges (server#62908)
    Fix(share): Prevent type error caused by non-existing user (server#62912)
    Feat: Allow to check user existence outside specific user backends (server#62917)
    Fix: require admin permissions for all systemtag updates (server#62924)
    Fix(files_sharing): skip unresolvable share recipients (server#62928)
    Feat(lookup): search for local account only via lookupserver (server#62934)
    Fix(sharing): properly handle verification of copy/move actions (server#62937)
    Feat: allow specifying applicable users and groups in the files_external:create command (server#62949)
    Fix(setup): make sure CAN_INSTALL error page is shown (server#62953)
    Fix(trashbin): properly show deleted by for federated shares (server#62965)
    Fix(auth): log invalid token during password reset (server#62970)
    Fix(PublicPreview): Call getMimetype() on File objects (server#62976)
    Fix: Handle 2fa enforcement earlier (server#62983)
    Fix(ObjectStore): reset multipart upload byte counter on retry (server#62994)
    Fix(console): write app command loading errors to stderr (server#62998)
    Fix(files): do not let a failing move hook break the move or hide files (server#63001)
    Fix(settings): missing end of html tag (server#63016)
    Fix(files): Prevent corruption of files when moving from encrypted to unencrypted folders within the same object storage (server#63020)
    Fix(files): remove leading slash from destination in copy/move toast (server#63039)
    Fix: improve logging when failing to get newly created user (server#63075)
    Fix(lookup-server): accept self-signed lus on globalscale (server#63076)
    Fix(files_trashbin): cleanup trash metadata after failed cross-user moves (server#63088)
    Fix: throw better error message if a user doesn’t have a key even though it should have (server#63093)
    Fix(CalDAV): Check for user status before serving public calendars (server#63105)
    Feat(federation): Add accept/decline mechanism for federated calendars (server#63113)
    Backports ldap fixes (server#63125)
    Fix: bump dav version for to trigger migration (server#63135)
    Fix(files_versions): pass missing fileInfo properties to Viewer.compare (server#63153)

activity

    Refactor(tests): migrate e2e test suite from Cypress to Playwright (activity#2633)
    Fix(deps): pin nextcloud/ocp to dev-stable34 in psalm vendor-bin (activity#2790)
    Perf(files): compute move/rename activity settings once (activity#2794)
    Fix: do not fail moves when the old location cannot be resolved (activity#2798)
    Fix(expire): delete conditions for activity_expire_exclude_users (activity#2806)
    Feat: adding an option to exclude users from the acitivity log (activity#2808)
    Fix(notifications): Require absolute links for support of desktop and mobile clients (activity#2830)

app_api

    Ci(tests-deploy): wait until Nextcloud is installed before enabling AppAPI (app_api#955)

circles

    Avoid duplicate purge on inheritance (circles#2689)
    Fix(local-controller): validate when trying adding member of type contact (circles#2703)
    Fix: Use global members limit as default for circle (circles#2706)
    Fix: add promoteToOwner method (circles#2715)
    Fix(circles): preserve group display names when creating circles (circles#2724)

files_downloadlimit

    Fix: allow higher download limits than 500 (files_downloadlimit#907)

files_pdfviewer

    Fix: Add explicit dependency for vue-loader@legacy (files_pdfviewer#1498)
    Chore: Add explicit dependency for terser-webpack-plugin (files_pdfviewer#1505)
    Chore(deps): Bump PDF.js from 4.0.189 to 4.10.38 (files_pdfviewer#1513)

logreader

    [automated/noid/stable34-fix-npm-audit] fix(build): extract license information from .map files (logreader#2179)

notifications

    Fix(push): Fix undefined index when accessing token age (notifications#3225)
    Build(deps): Bump guzzlehttp/guzzle (notifications#3240)
    Perf(push): Send push notifications async to proxies (notifications#3246)
    Fix(webpush): Skip browsers when disabled (notifications#3248)

photos

    Fix: handling of directory names with special characters (photos#3665)
    Chore: adjust PHP dependencies (photos#3706)
    Fix(dav): properly handle metadata (photos#3714)

related_resources

    Ci(psalm): Fix nextcloud/ocp update (related_resources#1047)

serverinfo

    Fix: Mark update storage stats as time insensitive (serverinfo#1087)

text

    Fix: add file-access check (text#8918)
    Fix: Pasting from excel inserts an image instead of a formatted table (text#8920)
    Fix(collaboration): ellipsise user caret labels (text#8926)
    Fix/autosave timer (text#8928)
    Fix: update ShowImageModal to use fullUrl for show original image instead of preview (text#8946)
    Fix(editor): fix viewer header overlaying page content on mobile (text#8953)
    Fix(DirectEditing): check if user is enabled (text#8959)
    Fix(sync): reset #sending flag when no active connection on sendStepsNow (text#8965)
    Fix(attachments): check documentId matches (text#8967)
    Chore(test): direct editing permissions (text#8975)
    Test(playwright): don’t set `webServer.url` parameter (text#8976)
    Fix: guard access to unavailable extensions when rich editing is off (text#8981)
    Fix(editor): set `translate=yes` for read-only editor (text#8982)
    Fix(lists): no margin-bottom for nested lists to prevent ugly gap (text#9024)
    Fix(LinkPicker): improve suggestions order and rename ‘Files’ (text#9025)