6.6.0 Rolling Release

[ScharfViktor]

Prerequisites

• [x] DEV: release reva v.2.26.0 https://github.com/cs3org/reva/pull/4895
• [x] DEV: bump reva to v.26.0 https://github.com/owncloud/ocis/pull/10364
• [x] DEV: bump web to v.11.0.0 https://github.com/owncloud/ocis/pull/10357

QA Phase

• [x] QA: Performance test https://drone.owncloud.com/owncloud/ocis/40256/61/1 and https://grafana.k6.infra.owncloud.works/?orgId=1&refresh=15m&var-test_id=901f8e3d-2f18-407e-9a75-5cf08a8462b4
• [x] QA: Compatibility testing between owncloud/ocis-rolling:6.5.0 and (similar with owncloud/ocis-rolling:6.6.0)
• [x] QA: e2e with different deployment: https://github.com/owncloud/web/pull/11808

After QA Phase

• [x] DEV: Create branch release-x.x.x https://github.com/owncloud/ocis/pull/10366
  • [x] DEV: bump ocis version in necessary files
  • [x] DEV: ocis-pkg/version/version.go
  • [x] DEV: sonar-project.properties
  • [x] DEV: released deployment versions
  • [x] DEV: prepare changelog folder in changelog/x.x.x_???
  • [x] DEV: add release to https://owncloud.dev/ocis/release_roadmap
• [x] DEV: Create final signed tag
• [x] DEV: Check successful CI run on vx.y.z tag / BLOCKING for all further activity
• [x] Merge release notes
• [x] roll out release on https://infinite.owncloud.com/
• [x] roll out rolling release on https://owncloud.dev/ocis/deployment/continuous_deployment/

---

[micbar]

I did a prerelease v6.6.0-alpha.1 for DevOPS

[ScharfViktor]

@micbar when you will create PR for reva bump -> add please [k6-test] in title to run k6 test

[micbar]

CHANGELOG

Summary

oCIS

• Bugfix - Fix health and ready endpoints: #10163
• Bugfix - Always treat LDAP attribute names case-insensitively: #10204
• Bugfix - Fix delete share panic: #10219
• Bugfix - Continue listing shares on error: #10243
• Bugfix - Avoid re-creating thumbnails: #10251
• Bugfix - Kept historical resource naming in activity: #10266
• Bugfix - Fix panic when sharing with groups: #10279
• Bugfix - Thumbnail request limit: #10280
• Bugfix - Forbid the ocm space sharing: #10287
• Bugfix - Use secure config defaults for OCM: #10307
• Enhancement - Add OCM wellknown configuration: #9815
• Enhancement - Load IDP logo from theme: #10274
• Enhancement - WebOffice Templates: #10276
• Enhancement - Remove Deprecations: #10305
• Enhancement - Allow to use libvips for generating thumbnails: #10310
• Enhancement - Bump various dependencies: #10352
• Bugfix - Graph service now supports OCIS_LDAP_USER_SCHEMA_DISPLAYNAME env var: [#10257]

Web

• Change owncloud/web#11709: Remove importer as default app
• Enhancement owncloud/web#11668: Allow setting view mode for apps via query
• Enhancement owncloud/web#11731: File size warning in editors
• Enhancement owncloud/web#11737: Add not found page
• Enhancement owncloud/web#11750: Create documents from templates
• Bugfix owncloud/web#11604: User filters after page reload
• Bugfix owncloud/web#11645: Hide copy permanent link action on public pages
  • Bugfix owncloud/web#11677: Missing tags on "Shared with me" page
  • Bugfixowncloud/web#11678: Undefined request IDs
  • Bugfix owncloud/web#11688: Deleting federated connections
  • Bugfix owncloud/web#11706: Escape HTMLcharacters in activities and notification view
  • Bugfix owncloud/web#11707: Prevent not allowed characters in shortcut name
  • Bugfix owncloud/web#11712: Details panel wrong WebDAV URL of received shares
  • Bugfix owncloud/web#11725: Accessing disabled password-protected space does not show error
  • Bugfix owncloud/web#11726: Application menu not operable in Safari browser
  • Bugfix owncloud/web#11758: Navigating into folders that have been shared externally
  • Bugfix owncloud/web#11795: Sharing label for locked files

Reva

• Bugfix cs3org/reva#4880: Kept historical resource naming in activity
• Bugfix cs3org/reva#4874: Fix rename activity
• Bugfix cs3org/reva#4881: Log levels
• Bugfix cs3org/reva#4884: Fix OCM upload crush
• Bugfix cs3org/reva#4872: Return 409 conflict when a file was already created
• Bugfix cs3org/reva#4887: Fix ShareCache concurrency panic
• Bugfix cs3org/reva#4876: Fix share jail mountpoint parent id
• Bugfix cs3org/reva#4879: Fix trash-bin propfind panic
• Bugfix cs3org/reva#4888: Fix upload session bugs
• Bugfix cs3org/reva#4560: Always select next before making CS3 calls for propfinds
• Enhancement cs3org/reva#4893: Bump dependencies and go to 1.22.8
• Enhancement cs3org/reva#4890: Bump golangci-lint to 1.61.0
• Enhancement cs3org/reva#4886: Add new Mimetype ggp
• Enhancement cs3org/reva#4809: Implement OCM well-known endpoint
• Enhancement cs3org/reva#4889: Improve posixfs stability and performance
• Enhancement cs3org/reva#4882: Indicate template conversion capabilities on apps

[ScharfViktor]

Compatibility test between owncloud/ocis:6.5.0 and [6.6.0-rc.1](https://hub.docker.com/layers/owncloud/ocis-rolling/6.6.0-rc.1/images/sha256-ee2fa9f028357e4e7fa69bb9f5e0f5ce9be4f6cdbd47fb2f3e05d7c33a12ef7d?context=explore

shares:

• [x] public share (with an expiration date)
• [x] share with user as role editor (with an expiration date)
• [x] share with user as role viewer
• [x] share with group "Users"

project space:

• [x] uploaded folder & files
• [x] trashed files
• [x] share space with user
• [x] public share space
• [x] check space activities

files:

• [x] uploaded folder & files
• [x] version of files
• [x] trashed files
• [x] GDPR export
• [x] check activities

users

• [x] non demo user with role admin
• [x] non demo user with role user
• [x] created new user
• [x] disabled user
• [x] created new group

settings

• [x] language settings
• [x] update logo админ
• [x] new password

Remarks: no remarks

[micbar]

Trivy Security Scan on the Container Image

owncloud/ocis-rolling:6.6.0-rc.1 (alpine 3.20.3)

Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌────────────┬───────────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│  Library   │ Vulnerability │ Severity │ Installed Version │ Fixed Version │                           Title                           │
├────────────┼───────────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ libcrypto3 │ CVE-2024-9143 │ LOW      │ 3.3.2-r0          │ 3.3.2-r1      │ openssl: Low-level invalid GF(2^m) parameters lead to OOB │
│            │               │          │                   │               │ memory access                                             │
│            │               │          │                   │               │ https://avd.aquasec.com/nvd/cve-2024-9143                 │
├────────────┤               │          │                   │               │                                                           │
│ libssl3    │               │          │                   │               │                                                           │
│            │               │          │                   │               │                                                           │
│            │               │          │                   │               │                                                           │
└────────────┴───────────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

[ScharfViktor]

QA phase is complete

[micbar]

:tada: Infinite Scale 6.6.0

Docker

docker pull owncloud/ocis-rolling:latest

OR

docker pull owncloud/ocis-rolling:6.6.0

Binaries

https://download.owncloud.com/ocis/ocis/rolling/6.6.0/