chore: update changelog by owncloud-calens-bot[bot] · Pull Request #13910 · owncloud/web

owncloud-calens-bot · 2026-06-26T07:34:21Z

Automated changelog update via Calens. This pull request is updated on each push to master — merging it will close it and a fresh one will be opened on the next change.

[full-ci] chore: bump version to 12.4.0

…version chore: use whitelisted calens version

The MFA expiry worker and broadcast channel were initialized unconditionally at startup. Now they are lazily created only when the vault capability is enabled and a session duration is configured, preventing the expiry warning from firing when vault mode is off. Also replaced `self` with `globalThis` in the worker as SonarQube was flagging the deprecated `self` reference.

* fix(e2e): [OCISDEV-843] Use correct listType for search results after pressing Enter * fix(e2e): [OCISDEV-843] Keeps resourcePage.searchList as the correct listType * fix(e2e): [OCISDEV-843] Using the filesList fix for listType Co-authored-by: Deyan Zhekov <deyan.zhekov@kiteworks.com>

…alysis (#13862) * chore(ci): remove SonarCloud CI-based analysis to enable Automatic Analysis (#13845) * ci: create nightly workflow and extract build/e2e into reusable workflows --------- Co-authored-by: Awab Abdoun <awabcodes@gmail.com>

…ching and cancel button visibility (#13843) (#13861) Clear previous theme's custom properties before applying the new theme so old values don't persist. Treat empty token strings as unset by removing the property instead of setting it to blank. Also fix the cancel button in the password protected folder modal being invisible against the dark action bar background.

… modals

…3842) The topbar logo was not visible in Firefox because the SVG files lacked explicit `width` and `height` attributes. Firefox requires these attributes to establish intrinsic dimensions when loading SVGs via `<img>`; without them it renders the image as 0×0. Chrome infers the dimensions from `viewBox` alone. Signed-off-by: Lukas Hirt <info@hirt.cz>

When opening the vault for the first time, the user is redirected to an external IdP for 2FA. Upon returning, the OIDC callback URL contains no vault context, causing the regular theme to be applied instead of the vault theme. We now also check the stored post-login redirect URL during the OIDC callback to correctly detect vault mode. Signed-off-by: Lukas Hirt <info@hirt.cz>

* fix(web-pkg): [OCISDEV-911] pass vault=true param to capabilities endpoint

…13835) (#13838) The space header image did not have explicit width and height causing the image to overflow its container. Adding explicit width and height with values of 100% makes sure that the image stays within the boundaries of the container. Signed-off-by: Lukas Hirt <info@hirt.cz>

…gate-iframe-csrf fix(web-pkg): [OCISDEV-777] validate postMessage origin in embed mode…

…13877) (#13879)

Signed-off-by: Lukas Hirt <info@hirt.cz>

* chore: bump version to v12.4.1 Signed-off-by: Lukas Hirt <info@hirt.cz> * chore: create v12.4.1 changelog Signed-off-by: Lukas Hirt <info@hirt.cz> * chore: sync translations Signed-off-by: Lukas Hirt <info@hirt.cz> --------- Signed-off-by: Lukas Hirt <info@hirt.cz>

update-docs · 2026-06-26T07:34:26Z

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

kw-security · 2026-06-26T07:34:36Z

⛔ Snyk checks have failed. 72 issues have been found so far.

Status	Scan Engine	Critical	High	Total (72)
⛔	Open Source Security	24	48	72 issues
✅	Licenses	0	0	0 issues
✅	Code Security	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

…instead of hardcoded value (#13908)

DeepDiver1975

Automated maintainer review (Claude Code review agent).

Duplicate detection: This PR (#13910) and #13911 share the same head commit e334b3b on the same branch chore/changelog-update, but target different base branches:

#13910 (this PR) → base master — shows 84 changed files and is CONFLICTING / DIRTY. The branch content belongs to the stable-12.4 line, so diffing it against the diverged master produces a large spurious diff and a merge conflict. This is not a clean changelog update against master.
#13911 → base stable-12.4 — shows exactly 1 file (CHANGELOG.md), a clean calens changelog regen, and is MERGEABLE.

Conclusion: #13911 is the canonical changelog PR; #13910 appears to be a mis-based duplicate (correct branch, wrong base). I recommend closing #13910 (or re-basing it onto the intended branch if a master changelog update was actually wanted) and proceeding with #13911.

I am not approving or merging this PR: it is the non-canonical duplicate and is currently un-mergeable (conflicts against master). To avoid a duplicate-merge race, the changelog merge should go through #13911 only.

changelog: this PR is the changelog update (n/a — nothing to add).

sonarqubecloud · 2026-06-26T09:57:20Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

DeepDiver1975

🤖 Automated review by the Claude Code review agent (acting as maintainer).

Verdict: comment — recommend closing this PR as a non-canonical duplicate.

This calens changelog-regen PR (chore/changelog-update, head 4a25abb) shares the exact same head commit as #13911. The two differ only in base branch:

This PR (#13910) targets master. Because the chore/changelog-update branch is based on the release line, the diff against master balloons to 80+ unrelated files (workflows, package.json, translations, components, …) and GitHub reports it CONFLICTING / DIRTY. This is the mis-based copy.
#13911 targets stable-12.4, where the same head reduces to a clean single-file CHANGELOG.md update and is MERGEABLE. That is the canonical PR.

Recommendation: close #13910 and proceed with #13911. No changes needed to the changelog content itself — this is the changelog update (changelog=present), and the canonical PR carries it correctly.

sonarqubecloud · 2026-06-26T11:17:08Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

DeepDiver1975

Automated maintainer review (Claude Code agent).

This is a calens changelog regeneration on chore/changelog-update (head cd0e3fd) — the changelog update itself, so the changelog requirement is satisfied (this PR is the changelog).

However, #13910 and #13911 share the same head commit (cd0e3fd) and are duplicates. #13910 is based on master and currently reports mergeable: CONFLICTING / DIRTY — its diff is mis-based against master and pulls in unrelated changes (whole workflow files, etc.), so it cannot merge cleanly. #13911 is based on the correct release branch stable-12.4 and is MERGEABLE.

Recommendation: close this PR (#13910) as the non-canonical, mis-based duplicate and proceed with #13911 as the canonical changelog update. No code review concerns beyond the duplication/base mismatch.

mzner and others added 19 commits May 22, 2026 17:46

chore: bump version to 12.4.0

07cdf1b

Merge pull request #13809 from owncloud/chore/bump-version-12.4.0

eaa7d5c

[full-ci] chore: bump version to 12.4.0

chore: use whitelisted calens version

140ec50

Merge pull request #13810 from owncloud/chore/use-whitelisted-calens-…

7dbf6ee

…version chore: use whitelisted calens version

fix(web-pkg): [OCISDEV-777] validate postMessage origin in embed mode…

b5e60a5

… modals

Chore/backport pass vault param to capabilities (#13868)

841605b

* fix(web-pkg): [OCISDEV-911] pass vault=true param to capabilities endpoint

Merge pull request #13863 from owncloud/fix/OCISDEV-777/backport-miti…

85647f7

…gate-iframe-csrf fix(web-pkg): [OCISDEV-777] validate postMessage origin in embed mode…

fix(notifications): [OCISDEV-967] filter notifications by vault mode (#…

a43605d

…13877) (#13879)

chore: bump version to v12.4.1

acd69c0

Signed-off-by: Lukas Hirt <info@hirt.cz>

chore: create v12.4.1 changelog

b20e612

Signed-off-by: Lukas Hirt <info@hirt.cz>

chore: sync translations

2b4c666

Signed-off-by: Lukas Hirt <info@hirt.cz>

fix(web-runtime): use authMfaRequiredLevelname from capability store …

bbca521

…instead of hardcoded value (#13908)

owncloud-calens-bot Bot force-pushed the chore/changelog-update branch from 8b31fa2 to e334b3b Compare June 26, 2026 08:32

DeepDiver1975 mentioned this pull request Jun 26, 2026

chore: update changelog #13911

Open

DeepDiver1975 reviewed Jun 26, 2026

View reviewed changes

owncloud-calens-bot Bot force-pushed the chore/changelog-update branch 2 times, most recently from bea84e9 to 83086ad Compare June 26, 2026 09:56

owncloud-calens-bot Bot force-pushed the chore/changelog-update branch from 83086ad to f373698 Compare June 26, 2026 09:58

chore: bump version to 12.4.2 (#13912)

4fd34d5

owncloud-calens-bot Bot force-pushed the chore/changelog-update branch from f373698 to 4a25abb Compare June 26, 2026 09:59

DeepDiver1975 reviewed Jun 26, 2026

View reviewed changes

mzner and others added 2 commits June 26, 2026 13:15

chore: add missing 12.4.2 changelog entry (#13913)

6a0f8cd

chore: update changelog

cd0e3fd

owncloud-calens-bot Bot force-pushed the chore/changelog-update branch from 4a25abb to cd0e3fd Compare June 26, 2026 11:15

DeepDiver1975 reviewed Jun 26, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: update changelog#13910

chore: update changelog#13910
owncloud-calens-bot[bot] wants to merge 23 commits into
masterfrom
chore/changelog-update

owncloud-calens-bot Bot commented Jun 26, 2026

Uh oh!

update-docs Bot commented Jun 26, 2026

Uh oh!

kw-security commented Jun 26, 2026 •

edited

Loading

Uh oh!

DeepDiver1975 left a comment

Uh oh!

sonarqubecloud Bot commented Jun 26, 2026

Uh oh!

DeepDiver1975 left a comment

Uh oh!

sonarqubecloud Bot commented Jun 26, 2026

Uh oh!

DeepDiver1975 left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Uh oh!

Conversation

owncloud-calens-bot Bot commented Jun 26, 2026

Uh oh!

update-docs Bot commented Jun 26, 2026

Uh oh!

kw-security commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⛔ Snyk checks have failed. 72 issues have been found so far.

Uh oh!

DeepDiver1975 left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Jun 26, 2026

Quality Gate passed

Uh oh!

DeepDiver1975 left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud Bot commented Jun 26, 2026

Quality Gate passed

Uh oh!

DeepDiver1975 left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

kw-security commented Jun 26, 2026 •

edited

Loading