Server 10.13 Release Notes

modules/ROOT/pages/server_release_notes.adoc

@@ -4,6 +4,7 @@
 :page-aliases: {latest-server-version}@server:admin_manual:whats_new_admin.adoc, \
 {latest-server-version}@server:ROOT:server_release_notes.adoc
 
+* xref:changes-in-10-13-0[Changes in 10.13.0]
 * xref:changes-in-10-12-2[Changes in 10.12.2]
 * xref:changes-in-10-12-1[Changes in 10.12.1]
 * xref:changes-in-10-12-0[Changes in 10.12.0]
@@ -41,6 +42,146 @@
 * xref:changes-in-8-0[Changes in 8.0]
 * xref:changes-in-7-0[Changes in 7.0]
 
+== Changes in 10.13.0
+
+Dear ownCloud administrator, find below the changes and known issues in ownCloud Server 10.13.0 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Server changelog] for further details on what has changed.
+
+=== Update Symfony from 4.4.* to 5.4.*
+
+Symfony framework has been updated to LTS major version 5.4. This also affected a number of apps which required a new release and have been now included in the complete bundle.
+
+=== Drop Setup of User Key Encryption
+
+User key encryption has been already deprecated in core versions later than 10.7. For this reason, the command line interface and web UI to enable user key encryption is no longer available. If you are operating an ownCloud installation with user key encryption enabled, please get in contact with support@owncloud.com to plan a migration to master key encryption. https://github.com/owncloud/encryption/pull/389[encryption#389]
+
+=== User Key Encryption Is No Longer Auto-Enabled
+
+Executing the `encryption:encrypt-all` occ command will no longer auto-enable user key encryption. https://github.com/owncloud/core/pull/40702[#40702]
+
+=== Added occ command to remove obsolete storages
+
+Metadata coming from storages are stored in the database. Previously, when a storage has been removed from ownCloud, metadata remained in the DB. The new occ command allows removing that stored metadata, reducing the amount of space used by the DB as well as slightly improving the performance since there will be less entries. https://github.com/owncloud/core/pull/40779[#40779]
+
+=== Enforce 2-Factor Authentication
+
+2-factor authentication can be enforced now. The feature requires at least one app implementing 2-factor authentication, otherwise no enforcement will be done. If 2-factor authentication is enforced, all users will be required to use a 2-factor authentication app. Some specific groups selected by the admin can be excluded to let those users bypass 2-factor authentication. https://github.com/owncloud/core/pull/40830[#40830]
+
+=== Setting up Federation Sharing over the Web UI Is Again Possible
+
+After an update of the guzzle library in previous core versions, it was no longer possible to set up federation sharing over the Web UI because of the wrong format used during the token exchange phase. We now explicitly set the format to be json so that the exchange is correctly done. https://github.com/owncloud/core/pull/40815[#40815]
+
+=== Add Commands to Handle Trusted Servers from the Command Line
+
+New occ commands have been added to handle the trusted servers for federation from the command line. These commands will allow the admin to add, list and remove trusted servers. https://github.com/owncloud/core/pull/40796[#40796]
+
+=== Implement App Registry
+
+By using a new option `Open in..` in the iOS (version 12.0.3+) or Desktop client (version 4.0+) it is now possible to directly open a file in the Office Suite being installed on the ownCloud server. https://github.com/owncloud/core/pull/40843[#40843]    
+
+=== Skip `share_folder` for Guest Users
+
+When the `share_folder` config.php option was set, guest users could not longer see their received shares. We now skip the `share_folder` config.php option for guest users and default to root. https://github.com/owncloud/core/pull/40864[#40864]
+
+=== Apply same restrictions for all the shares
+
+Remote shares will have the same restrictions as user and group shares. This means that, in order for a remote user to show up as sharee, the search term length must be greater than the minimum configured otherwise only exact matches will be shown. https://github.com/owncloud/core/pull/40885[#40885]
+
+=== Clean up storage and database after failed file uploads
+
+Storage and database are now cleaned up of any remaining items if a file upload fails. https://github.com/owncloud/core/pull/40892[#40892]
+
+=== Bump Files App Version
+
+The files app version was not properly increased when the `OCA\Files\BackgroundJob\CleanupPersistentFileLock` and `OCA\Files\BackgroundJob\PreviewCleanupJob` background jobs were originally added. As a result, those two jobs were not correctly inserted into the `oc_jobs` table upon a core upgrade. First time installations are not affected as their jobs are correctly added. https://github.com/owncloud/core/pull/40878[#40878]
+
+=== Explicitly Set Open Mode in the Checksum Wrapper
+
+Uploading files to some external storages via the desktop client was causing issues due to the checksum wrapper. We are using additional wrappers and the mode wasn't being detected correctly in some cases. Using the right mode in the checksum wrapper was required in order to decide whether we should have discarded the final checksum or not; in this case, the checksum was being discarded so it was causing a checksum mismatch. Now the open mode in the checksum wrapper is set explicitly. https://github.com/owncloud/core/pull/40832[#40832]
+
+=== Align to New accounts.google.com Authorization URI
+
+Core 10.12.1 brought an update of the google/apiclient from version 2.12.6 to 2.13.1. However, in version 2.13.0 the accounts.google.com authorization URI has been updated. This change broke old code that uses the `setApprovalPrompt('force')` instead of the newer `setPrompt('consent')` method, as this endpoint does not support the legacy approval prompt parameter. This has been now fixed. https://github.com/owncloud/core/pull/40783[#40783]
+
+=== Fix for Query Unnecessarily Deleting Thumbnails
+
+Fixed query that detects unused thumbnails to prevent unnecessary deletes and potential recreations. https://github.com/owncloud/core/pull/40801[#40801]
+
+=== Automatically Disable Online Updater for Enterprise
+
+Online updater is not recommended for Enterprise installations and is now automatically disabled in such cases. https://github.com/owncloud/core/pull/40841[#40841]
+
+=== Versions Expire Job No Longer Reports an Error with Federated Shares
+
+The versions expire job does not report errors anymore with federated shares when versioning metadata is enabled. https://github.com/owncloud/core/pull/40847[#40847]
+
+=== Display and delete invalid background jobs
+
+Background jobs can be no longer valid because they are from an old version of an app, or from an app that has been disabled. These jobs can now be listed with the command `occ background:queue:status --display-invalid-jobs` and can be deleted with the command `occ background:queue:delete <Job ID>`. https://github.com/owncloud/core/pull/40846[#40846]
+
+=== Rely on server to sort the user list
+
+Previously, the user list was sorted in the browser. This was causing confusion because the sorting happened without taking into account all the items, so there were some weird effects. There is no sorting in the browser now. The server is expected to return the list of users already sorted, so the browser just needs to show the list. https://github.com/owncloud/core/pull/40840[#40840]
+
+=== Remove the `add group` button from the dropdowns in the users page
+
+The `add group` button has been removed from the dropdowns because the behavior was confusing. You can still create new groups in the users page by using the `add group` button in the top left corner of the users page. The dropdowns will only select existing groups, but they won't add new groups. https://github.com/owncloud/core/pull/40770[#40770]
+
+=== Require firebase/php-jwt in core
+
+firebase/php-jwt version 6 is now part of core and all apps can rely on it. https://github.com/owncloud/core/pull/40901[#40901]
+
+=== New Default Minimum Supported Desktop Client Version
+
+To ensure clean and reliable operation of the ownCloud platform it is important to stay up-to-date with the latest releases of the server as well as the clients. To take care of compatibility between the server and desktop clients, the minimum version the server will accept connections from has been raised to version `3.2.1`.
+
+While it’s recommended to keep up with later versions, this is the new default value. https://github.com/owncloud/core/pull/40876[#40876]
+
+=== Notable Changes
+
+* Setup checks now allow values other than `none` for X-Robots-Tag header. If `none` or `noindex` and `nofollow` are missing, a security warning is raised. Previously a header value with `noindex` and `nofollow` wasn't allowed even though it was valid. https://github.com/owncloud/core/pull/40715[#40715]
+* The `Last Login` column on the Users page is now correctly hidden if the setting is initially unchecked. https://github.com/owncloud/core/pull/40771[#40771]
+* User input is validated now in UserController. https://github.com/owncloud/core/pull/40769[#40769]
+* A system tag with a too long name resulted in potentially inaccessible data. https://github.com/owncloud/core/pull/40804[#40804]
+* A federated share with a too long name resulted in inaccessible data. https://github.com/owncloud/core/pull/40726[#40726]
+* Due to Apache rewrite rules originally not existing headers could hold an empty string. https://github.com/owncloud/core/pull/40856[#40856]
+* Verbose command output of `background:queue:execute` is now displayed. https://github.com/owncloud/core/pull/40844[#40844]
+* There have been rare cases where deleting a file from a Google Drive mount could have thrown an undefined variable error. Since the process completed without further issues, no errors should have been thrown. This fix initializes the variables for these cases properly, making the error go away. https://github.com/owncloud/core/pull/40822[#40822]
+* Some occ commands could have returned an invalid exit status when executed. This has been corrected and occ commands will now always return an integer exit status. Zero (0) is success, any other value indicates a problem. https://github.com/owncloud/core/pull/40793[#40793]
+* Do not correct parent folders if the target isn't fully scanned. https://github.com/owncloud/core/pull/40730[#40730]
+* Trying to connect an external WebDAV storage to a non-WebDAV server will now fail when trying to initiate the first connection. This prevents connecting to an invalid server, and thus prevents problems for users. https://github.com/owncloud/core/pull/40861[#40861]
+* We have added an `if-statement` in the ShareesController code of the files_sharing app that searches for remote sharees. When the `sciencemesh` app is installed, it will be used instead of the federatedfilesharing app to find sharee matches for OCM sharing. https://github.com/owncloud/core/pull/40886[#40886]
+* Changed the share dropdown to expand to the page bottom if there are more entries. https://github.com/owncloud/core/pull/40873[#40873]
+
+=== Updated App Versions
+
+Find below a list of updated apps in comparison with the 10.12.2 complete bundle. More information on the changes can be found in the respective changelogs on ownCloud Marketplace.
+
+* https://marketplace.owncloud.com/apps/activity [Activity] 2.7.2
+* https://marketplace.owncloud.com/apps/admin_audit [Auditing] 2.1.4
+* https://marketplace.owncloud.com/apps/customgroups [Custom Groups] 0.7.2
+* https://marketplace.owncloud.com/apps/diagnostics [Diagnostics] 0.2.0
+* https://marketplace.owncloud.com/apps/files_antivirus [Anti-Virus] 1.2.2
+* https://marketplace.owncloud.com/apps/files_classifier [Document Classification] 1.4.0
+* https://marketplace.owncloud.com/apps/files_lifecycle [File Lifecycle Management] 1.3.4
+* https://marketplace.owncloud.com/apps/files_primary_s3 [S3 Primary Object Storage] 1.5.0
+* https://marketplace.owncloud.com/apps/files_texteditor [Text Editor] 2.5.2
+* https://marketplace.owncloud.com/apps/impersonate [Impersonate] 0.5.3
+* https://marketplace.owncloud.com/apps/market [Market] 0.8.0
+* https://marketplace.owncloud.com/apps/metrics [Metrics] 1.3.0
+* https://marketplace.owncloud.com/apps/oauth2 [OAuth2] 0.6.0
+* https://marketplace.owncloud.com/apps/password_policy [Password Policy] 2.2.0
+* https://marketplace.owncloud.com/apps/ransomware_protection [Ransomware Protection] 1.7.0
+* https://marketplace.owncloud.com/apps/user_ldap [LDAP Integration] 0.18.0
+* https://marketplace.owncloud.com/apps/user_shibboleth [SAML/SSO Integration] 3.6.0
+* https://marketplace.owncloud.com/apps/web [Web] 7.0.2
+* https://marketplace.owncloud.com/apps/windows_network_drive [External Storage: Windows Network Drives] 2.3.0
+* https://marketplace.owncloud.com/apps/wopi [Microsoft Office Online] 1.7.0
+* https://marketplace.owncloud.com/apps/workflow [Workflows] 0.6.0
+
+=== Known Issues
+
+Currently there are no known issues with ownCloud Server 10.13.0. This section will be updated if issues are discovered.
+
 == Changes in 10.12.2
 
 Dear ownCloud administrator, find below the changes and known issues in ownCloud Server 10.12.2 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Server changelog] for further details on what has changed.