All pull requests

Pull requests

• files_external: answer invalid user-provided credentials with HTTP 400

  #41949·openefaadmin opened Oct 29, 2026·

  ·
  3

• chore(deps): bump @bower_components/bootstrap from 3.4.1 to v5.3.8 in /build

  dependenciesjavascript
  #41945·dependabot[bot] opened Oct 27, 2026Bot·

  ·
  2

• chore(deps): bump @bower_components/select2 from 3.5.4 to 4.0.13 in /build

  dependenciesjavascript
  #41942·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  2

• chore(deps): bump @bower_components/jcrop from 0.9.12 to v2.0.4 in /build

  dependenciesjavascript
  #41940·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  2

• chore(deps): bump @bower_components/jquery-migrate from 1.4.0 to 3.0.0 in /build

  dependenciesjavascript
  #41939·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  3

• chore(deps): bump @bower_components/blueimp-md5 from 1.0.1 to v2.19.0 in /build

  dependenciesjavascript
  #41934·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  3

• fix: accept null in User::setEMailAddress() and setDisplayName()

  #41897·openefaadmin opened Oct 7, 2026·

  ·
  4

• fix: store an empty file cache mimetype as unknown

  #41896·openefaadmin opened Oct 7, 2026·

  ·
  2

• fix: run occ by absolute path when cron.php is called from the CLI

  #41895·openefaadmin opened Oct 7, 2026·

  ·
  3

• fix: fall back to the first trusted domain whatever its array key

  #41894·openefaadmin opened Oct 7, 2026·

  ·
  6

• refactor(files): drop the distributed cache in front of the storages table

  3 - To Review
  #41736·DeepDiver1975 opened Jul 27, 2026Contributor·5 of 11 tasks·

  ·

  · development
  1

  

• fix(integrity): clear stale per app results and use the local cache tier

  3 - To Review
  #41735·DeepDiver1975 opened Jul 27, 2026Contributor·4 of 11 tasks·

  ·

  · development
  1

  

• chore(deps-dev): bump sinon from 19.0.5 to 22.1.0 in /build

  dependenciesjavascript
  #41731·dependabot[bot] opened Jul 26, 2026Bot·

  ·
  3

• chore(deps): bump @bower_components/jquery-migrate from 1.4.0 to 3.0.0 in /build

  dependenciesjavascript
  #41730·dependabot[bot] opened Jul 26, 2026Bot·

  ·
  3

• fix: Improve target option processing in js.js

  #41729·odaysec opened Jul 25, 2026Contributor·3 of 11 tasks·

  ·
  1

• test: check the XML returned by occ commands in acceptance tests

  #41655·phil-davis opened Jun 26, 2026Contributor·

  ·
  2

• fix(trashbin): don't overwrite existing file when restoring to a target (#35974)

  #41645·DeepDiver1975 opened Jun 21, 2026Contributor·

  ·
  1

  4

• fix(backgroundjob): don't log ERROR for stale job rows of removed apps (#35589)

  #41644·DeepDiver1975 opened Jun 21, 2026Contributor·

  ·
  1

  3

• fix(installer): validate app archive before deleting installed app on update (#34669)

  #41643·DeepDiver1975 opened Jun 21, 2026Contributor·

  ·
  1

  2

• fix(occ): don't let one broken command make occ unusable (#33895)

  #41642·DeepDiver1975 opened Jun 19, 2026Contributor·

  ·
  1

  5

• fix(trashbin): avoid full filecache scan when restoring versions (#31682)

  #41641·DeepDiver1975 opened Jun 19, 2026Contributor·

  ·
  1

  5

• fix(sharing): show original file owner in reshare panel

  #41640·DeepDiver1975 opened Jun 19, 2026Contributor·

  ·
  1

  2

• chore(ci): run webUILogin acceptance test suite in CI

  #41629·phil-davis opened Jun 16, 2026Contributor·

  ·
  1

• fix(command): restrict allowed_classes in ClosureJob unserialize() to prevent RCE

  #41583·DeepDiver1975 opened Jun 5, 2026Contributor·3 tasks·

  ·
  4

• fix(files_external): add SSRF host validation to external storage backend

  #41581·DeepDiver1975 opened Jun 5, 2026Contributor·3 tasks·

  ·
  5