10.0.9RC Changelog Testing

[phil-davis]

Changelog for 10.0.9. Summary

Summary of the complete Changelog: https://github.com/owncloud/core/blob/stable10/CHANGELOG.md

This summary has a QA purpose.

Make sure to refresh the page before editing, and keep the edit window open for a short a time as possible.

Added

• [x] occ user:list now takes a list of attributes to display - #31115 @phil-davis
• [x] Added Symfony events for user preference changes - #31266 @phil-davis - unit tests pass, debugger tests done in PR, no further QA test.
• [x] Added Symfony events for public links shared by email - #31632 tested by unit tests @davitol
• [x] Added Symfony events for accept and reject for local shares - #31702 @davitol
• [x] Added support for Imprint and Privacy Policy URLs in web UI and email footers - #31666 #31699 #31730 #31766 @davitol
• [x] Added HTML template for lost password email - #31144 @davitol
• [x] Received local shares can now trigger a notification to accept or reject them, also visible in "Shared with you" section - #31613 @davitol
• [x] Rejected shares can now be accepted again in the "Shared with you" section - [#31613] (https://github.com/owncloud/core/issues/31613) @davitol
• [x] Provide original exception via logging events - #31623 @phil-davis - tested by unit tests
• [x] Share autocomplete now displays useful tooltip when typing less characters - #31729 @phil-davis
• [x] Added public Webdav API for versions using a new "meta" DAV endpoint - #31729 #29637 @phil-davis - acceptance tests exist
• [x] Added support for retrieving file previews using Webdav endpoint - #29319 #30192 Note: https://github.com/owncloud/core/issues/31849 @phil-davis
• [x] Added versioning support for primary object store - #29607 #31285 #31595 @davitol

[phil-davis]

Changed

• [x] Updated ca-bundle.crt - #31734 @phil-davis - from unpacked release tarball open resources/config/ca-bundle.crt - it opens in a certificate viewer app, parses as valid, shows the new certificates added in the PR.
• [x] Removed example theme which now lives in the theme-example repository - #31447 @davitol
• [x] A user who is a member of multiple groups is now excluded from sharing if at least one of their group is configured for exclusion - #31737 @phil-davis
• [x] Changed back default minimum search characters to 2 for share autocomplete due to confusion - #31729 @phil-davis
• [x] Files app UI now uses new versions API through the "meta" DAV endpoint @phil-davis - when using versions in webUI I can see server accesses like /remote.php/dav/meta/2147563785/v

Library updates

• Bump symfony to 3.4.8 and other pending minor bumps - #31221
• Bump karma from 2.0.0 to 2.0.2 in /build - #31253
• Bump karma-jasmine from 1.1.1 to 1.1.2 in /build - #31378
• Bump karma-coverage from 1.1.1 to 1.1.2 in /build - #31380
• Bump zendframework/zend-inputfilter from 2.8.1 to 2.8.2 - #31431
• Bump icewind/smb from 1.1.0 to 3.0.0 in /apps/files_external/3rdparty - #31521
• Bump symfony 3.4.9 to 3.4.11 - #31571
• Update jsdoc requirement to ~3.5.5 - #30036

[phil-davis]

Removed

• [x] Removed old private ajax API for previews, deprecated by DAV endpoint support - #30254 @phil-davis - testing of various preview features all still works, so it must not be using this removed API endpoint any longer

[phil-davis]

Fixed

• [x] Fixed restoring of versions for single file shares - #31681 @phil-davis
• [x] Group admins are not able to create groups any more using provisioning API - #31738 @phil-davis
• [ ] Fix Oracle for queries using ILIKE operator - #31466
• [x] Improve user-sync command help description - #31691 - and the change is in current doc also @phil-davis
• [x] Fix deletion and restoration of files in trashbin in some partial selection scenarios - #31700 @phil-davis
• [x] Do not load the code of disabled theme apps - #31478 @davitol
• [x] Fix encrypt-all and decrypt-all commands to keep shares when encrypting - #31600 #31590 @davitol
• [x] Proceed with encrypt-all command by enabling user-keys if no mode is selected by user - #31612 @davitol
• [x] Validate maximum length of a username - #31664 @phil-davis - works in both UI and provisioning API
• [x] Save timezone as given during login - #31493 @phil-davis
• [x] Fix checksum computation to not apply on read-write streams to avoid potential mismatch results - #31619 @phil-davis checksums.feature acceptance tests confirm that regular scenarios have not been broken
• [x] Exclude uploads directory from read-only cache mask, fixes guest app chunked uploads - #31596 @phil-davis guest acceptance tests added in https://github.com/owncloud/guests/pull/212 confirm this is good
• [x] Properly normalize paths for event, no &$magic needed - #31689 @phil-davis this is a general log output file path cleaner. Not seeing any double-slash in logs.
• [x] Use the correct user id in login related Symfony events - #31605 @phil-davis - event data is checked by unit tests
• [x] Fix public link dialog issue when collaborative tags app is disabled - #31581 @davitol
• ❌ Fix updating public link share in transfer ownership command - #31176 @davitol FIXED
• [x] Do not set the password again if it hasn't changed - #31370 @davitol
• [x] Use correct l10n to translate 'password was changed' email - #31553 @davitol
• [x] Improve text in settings/personal App Password - #31539 @phil-davis
• [x] Fix default language code example - #31448 @phil-davis change to example only, no run-time code
• [x] Fix double slash in versioning file copy events - #31452 @phil-davis
• [x] Split public password enforced capabilities based on a config - #31499 - covered by capabilities.feature acceptance tests
• [x] Fix bogus exceptions related to missing DAV nodes after deletion - #31479 @phil-davis - 'Could not get node for path' messages gone from log file
• [x] Fix enabling of users by group admins in the web UI - #31489 @phil-davis
• [x] Fix AccountMapper to return an object or throw an exception - #31445 @phil-davis this is an error-exception processing code path change. Commands that deal with UIDs are still working/logging OK when given a non-existent UID
• [x] Proper handling of exceptions in UserManager - #31446 @phil-davis as above
• [x] Properly cache non-existing user in UserManager - #31446 @phil-davis as above
• [x] Update verify checksums console output to flow more naturally - #31449 @phil-davis
• [x] Subadmin shouldn't be able to add users to their groups via API - #31337 @phil-davis
• [x] Catch duplicate inserts in token table - #31460 @phil-davis login etc works with debug level set and messages going to log
• [x] Fix overflowing public share names in the share panel - #31369 @phil-davis
• [x] Fix occ user:sync to sync quota from preferences after upgrade if backend provided no quota - #31360 @phil-daavis fix waas confirmed in PR https://github.com/owncloud/core/pull/31359#pullrequestreview-117607341
• [x] Fix for Redis dev editions - #31282 @phil-davis - was tested by PR submitter on system with Redis dev version. Not causing warnings on Admin General Settings panel with ordinary install.
• [x] Fix mail debug message recipient field - #31227 @phil-davis
• [x] Prevent infinite loop in case of error in "log" event handler - #31247 @phil-davis - requires coding an event with an error, not production testable (easily). dev tested here https://github.com/owncloud/core/pull/31247#issue-183426202
• [x] Fix HTTP status code when uploading virus-infected files - #31260 @phil-davis - files_antivirus acceptance tests confirm that this is fixed
• [x] Add back robots.txt in the release - #31248 @phil-davis - robots.txt is in unpacked tarball
• [x] [stable10] Properly detect thumbnail availability in PreviewPlugin https://github.com/owncloud/core/pull/31788 @davitol

[phil-davis]

@davitol I volunteered myself for some PRs that I am already familiar with, but I did not do. That will get me started. You do the same. Then as we get them done, we can put our names against more, or look for other "volunteers" if needed.

[phil-davis]

10.0.9RC2 Items

• [x] Added account module middleware to be able to plug in logic after authentication - #31883 @phil-davis no auth regressions found. (to test by smoke-test of password-policy with 10.0.9RC3)
• [x] Received local shares can now trigger a notification to accept or reject them, also visible in "Shared with you" section - extra changes from issue #31886 @phil-davis Note: the exact format of the notification messages is changed again by #31947 (see RC3 section)
• [x] - Added public Webdav API for versions using a new "meta" DAV endpoint - added PR #31805 PR #31801 @phil-davis
• [x] - Added support for retrieving file previews using Webdav endpoint - added issues #31748 #31788 #31862 #31865 @phil-davis #31748 tested by firewall acceptance tests passing, #31788 tested with local storage as per https://github.com/owncloud/core/issues/31763#issuecomment-396995052 , #31865 tested with procedure in #31849
• [x] A user who is a member of multiple groups is now excluded from sharing if at least one of their group is configured for exclusion - added #31822 @phil-davis - code change is to never-called code, so no test. Code awaits removal in stablee10 #31824
• [x] Bookmarks certificate was removed - #31878 @phil-davis updated intermediate.crl.pem content is in released tarball
• [x] Work around Edge browser memory leak in web UI chunked upload - #31884 - memory use in Edge (HTML 17) and IE11 ddoes not grow constantly during large file upload
• [x] Don't fail if ISqlMigration doesn't return anything - #31779 @phil-davis
• [x] Catch duplicate inserts in token table - added #31794 @phil-davis - removal of excess logging only

10.0.9RC3 Items

• [x] Added account module middleware to be able to plug in logic after authentication -added #31933 @phil-davis (to test by smoke-test of password-policy with 10.0.9RC3)
• [x] Adjustments for the notifications messages of the sharing apps - #31947 @phil-davis
• [x] Disable jquery globalEval - #31972 @phil-davis examined js/js code in Firefox debugger on login page and when logged in
• [x] Fix updating public link share in transfer ownership command - added #31953 @phil-davis test steps from https://github.com/owncloud/core/issues/31150#issue-314806286

[phil-davis]

Password policy testing overview:

• [x] enable password policy, change policy parameters for min length, min uppercase, min lowercase, min numbers, min special chars and the actual special chars. Check that relevant error messages are returned when trying to change password from webUI, occ commands and user provisioning API. PR https://github.com/owncloud/password_policy/pull/21 tidied the messages
• [x] setup user_ldap. Confirm that LDAP users do not get password expiry, but that ordinary users do.
• [x] try to change other user's passwords as admin. Confirm that normal users get their password changed and get a password change recorded from which password expiry ticks. Confirm that LDAP user passwords cannot be changed (and so they never get password history, and so never get expired). PR https://github.com/owncloud/password_policy/pull/31 prevents occ command from expiring LDAP user passwords.
• [x] install and enable one-time password TOTP. Check it works along with password policies and expiry. Problem found with interaction between OTP and password expired flow in webUI see issue https://github.com/owncloud/password_policy/issues/32
• [x] create app passwords. Confirm that they work across ordinary password change and expiry. Seems to be some issue with app passwords not working correctly after the ordinary password has expired - issue https://github.com/owncloud/password_policy/issues/33
• [x] check password expiry for new users that never change their password - https://github.com/owncloud/password_policy/issues/25 and fix in PR https://github.com/owncloud/password_policy/pull/34

Nothing here requires a core change, so no need to hold 10.0.9

[davitol]

❌ Fix updating public link share in transfer ownership command - #31176 @davitol FIXED

Retested in RC3 and it is fixed

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.