mirror/opencloud
1
0 Fork 0
mirror of https://github.com/opencloud-eu/opencloud.git synced 2026-09-12 21:58:58 -04:00
Code Issues Packages Projects Releases Wiki Activity
23,889 Commits 104 Branches 73 Tags
88cc9cdfd349a613deb386ab8dae3ba5bb8f9a27
Commit Graph
23889 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
oauth 88cc9cdfd3 🎉 Release 8.0.0 2026-09-08 13:56:18 +00:00
oauth 639fe9ae55 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 13:56:18 +00:00
Dominik Schmidt b18618ab4a Merge pull request #3484 from opencloud-eu/fix/tika-embedded-facet-leak 
fix(search): extract facets from the main tika document only
 2026-09-08 15:52:21 +02:00
oauth 58bb8eb561 🎉 Release 8.0.0 2026-09-08 13:32:39 +00:00
oauth 5a59f6e1c4 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 13:32:38 +00:00
Dominik Schmidt 65f19b5d71 fix(thumbnails): close rejected vips ref, map oversized convert error to forbidden 2026-09-08 15:28:37 +02:00
Dominik Schmidt 7f687ea288 fix(thumbnails): bound declared image dimensions before decoding 
The imaging build decodes the full pixel buffer from the header-declared
dimensions before the existing MaxInputWidth/MaxInputHeight guard runs, so a
tiny crafted file whose header declares huge dimensions forces a multi-GB
allocation and can OOM the worker. Read the header with DecodeConfig and reject
oversized sources before the decode allocates, in both the imaging and vips
builds, and thread the limit through the audio cover-art and geogebra decoders
that decode a second attacker-controlled image.
 2026-09-08 15:28:37 +02:00
oauth cad3850c8e 🎉 Release 8.0.0 2026-09-08 12:54:43 +00:00
oauth 9f56fdb72d Merge branch 'origin/main' into 'next-release/main' 2026-09-08 12:54:42 +00:00
Dominik Schmidt be83ed19e3 fix(search): take extraction facets from the main document only 
The recursive tika response lists the file first, then its embedded
resources (cover art, thumbnails, the clip appended to a motion photo).
The loop applied getImage/getPhoto/getLocation/getAudio/getLivePhoto to
every part, so an mp3's embedded cover art leaked a 200x200 image facet
onto the track (and an embedded EXIF image would leak photo/location).
Read those facets from metas[0] only, like the video facet already does;
the loop now only concatenates title/content and detects the motion
photo clip.
 2026-09-08 14:52:35 +02:00
Dominik Schmidt b5cb1cd83b test(search): re-search until the expected files are in the result (#3488) 
Indexing of newly uploaded resources is asynchronous; the search step
slept a fixed 10s and searched once, so under load a just-uploaded file
was missing from the result and the following assertion failed. The
search step now remembers its query, and new eventually-contain steps
re-run the search until the expected entries are present (or the
WaitHelper timeout elapses), then assert as before. contentSearch
scenarios use them for their positive assertions; the exact-count check
runs after the expected entries have appeared.
 2026-09-08 14:50:49 +02:00
oauth c8f2f76932 🎉 Release 8.0.0 2026-09-08 12:44:16 +00:00
oauth dbb1b57e61 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 12:44:16 +00:00
zerox80 9797ee903f fix(config): correct pending version annotations 
Use the supported %%NEXT%% marker for seven graph and policies settings so the environment annotation check passes.
 2026-09-08 14:40:40 +02:00
oauth 851719e216 🎉 Release 8.0.0 2026-09-08 12:17:23 +00:00
oauth 9498efee25 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 12:17:22 +00:00
Jörn Friedrich Dreyer 973dbbdf1a Merge pull request #3241 from opencloud-eu/activitylog-event-handler-split 
Activitylog event handler split
 2026-09-08 14:13:28 +02:00
oauth 1223d68578 🎉 Release 8.0.0 2026-09-08 12:08:40 +00:00
oauth bb851534c1 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 12:08:39 +00:00
Dominik Schmidt 1ce7f07523 Merge pull request #3486 from opencloud-eu/test/extractedprops-wait-for-values 
test(search): wait for expected properties and documents
 2026-09-08 14:05:12 +02:00
Dominik Schmidt 3b83221a87 test(search): retry the driveItem GET until the extracted properties match 
Property extraction reaches the driveItem asynchronously, so the GET
step previously waited only until any extraction facet key appeared and
a separate step then validated the full schema, which could run on a
partial payload and fail intermittently. The GET and the status check
stay plain steps; a new explicit Then step re-fetches the item until
the response satisfies the expected schema (a partial never matches) or
the WaitHelper timeout elapses.
 2026-09-08 13:39:00 +02:00
oauth 106cce2915 🎉 Release 8.0.0 2026-09-08 08:51:25 +00:00
oauth ba0319ad89 Merge branch 'origin/main' into 'next-release/main' 2026-09-08 08:51:25 +00:00
Jörn Friedrich Dreyer 391705b017 Merge pull request #3441 from opencloud-eu/dependabot/go_modules/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp-0.71.0 
build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.70.0 to 0.71.0
 2026-09-08 10:47:59 +02:00
oauth d8a2eb71f3 🎉 Release 8.0.0 2026-09-08 07:42:21 +00:00
oauth aa5509e81e Merge branch 'origin/main' into 'next-release/main' 2026-09-08 07:42:21 +00:00
Alex Ababii 8875d062b0 upd tests for auth requests middelware 2026-09-08 09:37:51 +02:00
Alex Ababii d1d20edbd2 log jwt expired on debug level instead of error 2026-09-08 09:37:51 +02:00
dependabot[bot] b50c5e54d6 build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.70.0 to 0.71.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.70.0...zpages/v0.71.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-08 07:26:51 +00:00
opencloudeu c2a34e8c45 [tx] updated from transifex 2026-09-07 23:17:03 +00:00
oauth 94b6424df3 🎉 Release 8.0.0 2026-09-07 14:17:08 +00:00
oauth ef56e1f89f Merge branch 'origin/main' into 'next-release/main' 2026-09-07 14:17:08 +00:00
Dominik Schmidt d6c6b6fd0d Merge pull request #3481 from opencloud-eu/fix/proxy-signed-url-methods 
fix(proxy): restrict JWT signed urls to the allowed HTTP methods
 2026-09-07 16:13:40 +02:00
Dominik Schmidt 7f7a938c3f fix(proxy): restrict JWT signed urls to the allowed HTTP methods 
The legacy OC-Signature path already rejects methods outside
PRE_SIGNED_URL_ALLOWED_HTTP_METHODS, the JWT path did not. A leaked
signed download url could be used for PUT, DELETE, MOVE or PROPFIND
as the signing user for the lifetime of the signature.
 2026-09-07 13:00:09 +02:00
Jörn Friedrich Dreyer cfefb83d26 revert unrelated changes 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer 9357124a91 add tests to extracted services 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer c36af05d14 simplify ConnectNatsKV 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer 7947c1c98a reduce packages 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer d58c1e3dab use json encode 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer 5a609c98dc handle error types 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:33 +02:00
Jörn Friedrich Dreyer 29913e1d7f revert to legacy autoack events 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer 5028364e2c add tests to cover more ack scenarios 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer b2b15d44f7 rename test files 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer 6ea363b0b9 add debouncer tests 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer 9594313243 add explicit ack 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer 62d815abe9 split handlers, fix bugs 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Jörn Friedrich Dreyer 5923aa5e5e move event + http handler code to the events package 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2026-09-07 12:52:32 +02:00
Dominik Schmidt 81536bbd0e Merge pull request #3471 from opencloud-eu/feat/graph-expand-thumbnails 
feat(graph): expand thumbnails on driveItems
 2026-09-07 12:50:53 +02:00
Jörn Friedrich Dreyer be226ebb4c Merge pull request #3478 from opencloud-eu/reva-bump-main-20260907 
[full-ci] chore: bump reva to latest main
 2026-09-07 12:48:12 +02:00
Dominik Schmidt c2b37668e4 chore: bump reva to latest main 2026-09-07 09:33:59 +02:00