Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

On iOS/iPadOS, we now display a button to open the PDF file in the browser
instead of the native PDF viewer. This is a workaround to avoid issues with the
native PDF viewer on iOS/iPadOS.

#13797
#13816

Bugfix - Fix danger filled button text color on focus: #13887

We've fixed the OcButton danger filled variant not applying the correct text
color when focused via keyboard.

#13887

Bugfix - Open external apps based on the file mime type: #13888

We've fixed the external app redirect (/external) picking an arbitrary app
when no app query parameter was present. It fell back to the first registered
app provider, which might not support the file's mime type, so the following
request to open the file failed with an "app not found" error that surfaced as a
generic error to the user.

The redirect now resolves the app from the file's mime type, preferring the
configured default application, and shows an explicit error when no suitable app
is available instead of silently redirecting to the wrong one.

#13888

Bugfix - Validate URL before opening password-protected folder: #13924

We've fixed an issue where the URL stored inside a .psec file was not
validated before being used as the source of the folder view iframe. The URL is
now checked to ensure it uses a safe scheme and points to the configured
ownCloud server.

#13924

Enhancement - OwnCloud branded login background: #13875

The default login page background has been replaced with the ownCloud branding
background. The background image is now applied through the CSS custom property
--oc-login-background-image, so a future branding update only needs to change
one value. The image itself still comes from the theme
(loginPage.backgroundImg in theme.json) and remains fully customizable.

#13875

Enhancement - Add a documentation screenshot capture tool: #13894

We added a Playwright-based tool under tests/e2e/docs that automatically
captures end-user documentation screenshots from a live ownCloud Web instance.
Each "tour" drives the UI through a documented flow and saves a captioned
screenshot per step plus a manifest.json, so the screenshots used in the user
documentation can be regenerated on demand and never drift from the product. The
initial tours mirror the "Web for users" documentation: the top navigation, the
file sidebars, sharing roles and contextual help.

#13894

Enhancement - Add an HTML editor app: #13895

We added a new app, web-app-html-editor, that opens .html, .htm and
.xhtml files in a CodeMirror source editor with a live preview. The file is
loaded and saved over WebDAV by the standard app wrapper, and the document is
rendered in a strictly sandboxed iframe (opaque origin, no network egress) with
Editor, Split and Preview view modes. The app is registered by file extension
and follows the same thin pattern as the text editor.

#13895

Enhancement - Save a copy of office documents to another format (Collabora): #13906

Office documents opened in Collabora Online could be renamed but not saved as a
copy or exported to another format back into oCIS storage: "Save As" silently
did nothing. Collabora exposes "Save As" as a host-delegated operation - it
posts a UI_SaveAs message and waits for the integration to reply with the
target filename via Action_SaveAs - but the app-provider integration never
opened that postMessage channel.

The app-provider now announces itself to the editor with Host_PostmessageReady
once the iframe has loaded, requests the grouped Save-As control via
ui_defaults (SaveAsMode=group), and on UI_SaveAs prompts for the copy's
name and replies with Action_SaveAs. The collaboration service already
implements WOPI PutRelativeFile, so the copy is written into the same space,
respecting the user's permissions. The chosen file extension selects the export
format (e.g. docx to pdf/odt, xlsx to ods, pptx to pdf).

#13906

Bugfix - Use authMfaRequiredLevelname from capabilities instead of hardcoded value: #13907

The MFA required ACR level for vault routes is now read from the capabilities
store (authMfaRequiredLevelname) instead of being hardcoded to "advanced".
This ensures the correct level is always used as configured by the server.

#13907

Security - Validate postMessage origin in embed mode modals: #13844

We've fixed a cross-site request forgery (CSRF) vulnerability where the embed
mode modals (Save As, Export As PDF and the file picker) processed incoming
postMessage events without verifying the sender's origin. A malicious page
holding a reference to an authenticated ownCloud window could forge
owncloud-embed:select, owncloud-embed:file-pick or owncloud-embed:cancel
messages and trigger authenticated file writes in the victim's space. Incoming
messages are now validated against an allowlist consisting of the application's
own origin and the optionally configured embed.messagesOrigin.

#13844

Bugfix - Add explicit size to space header image: #13822

The space header image did not have explicit width and height causing the image
to overflow its container. Adding explicit width and height with values of 100%
makes sure that the image stays within the boundaries of the container.

#13822
#13835

Bugfix - Apply vault theme after OIDC callback: #13826

When opening the vault for the first time, the user is redirected to an external
IdP for 2FA. Upon returning, the OIDC callback URL contains no vault context,
causing the regular theme to be applied instead of the vault theme. We now also
check the stored post-login redirect URL during the OIDC callback to correctly
detect vault mode.

#13826

Bugfix - Gate MFA expiry dialog on vault capability: #13827

We've fixed the MFA session expiry warning to only appear when the vault
capability is enabled. Previously, the expiry worker and broadcast channel were
initialized unconditionally, causing the dialog to fire even when vault mode was
off. They are now lazily created only when vault is enabled and a session
duration is configured.

#13827

Bugfix - Logo not rendering in Firefox: #13834

The topbar logo was not visible in Firefox because the SVG files lacked explicit
width and height attributes. Firefox requires these attributes to establish
intrinsic dimensions when loading SVGs via <img>; without them it renders the
image as 0×0. Chrome infers the dimensions from viewBox alone.

#13834

Bugfix - Fix theme switching issues: #13843

When switching between themes, colors could get stuck or become unreadable until
a page refresh. Empty string values in theme tokens were overriding stylesheet
defaults with nothing, making elements invisible. Additionally, tokens from the
previous theme were not cleared before applying the new theme, causing stale
values to persist. We now remove previous theme properties before applying the
new theme and treat empty token values as unset. We also fixed the cancel button
in the password protected folder modal being invisible because its color matched
the dark action bar background.

#13843

Bugfix - Pass vault parameter to capabilities endpoint: #13867

We've fixed the capabilities request to include the vault=true query parameter
when the application is in vault mode. This ensures the backend returns
vault-specific capabilities. The OCS client is now reinitialized with the
correct base URL when vault mode is detected, following the same pattern as the
graph client.

#13867

Bugfix - Filter notifications by vault mode: #13877

We've fixed the notifications panel to only show notifications relevant to the
current mode. Previously, all notifications were shown regardless of whether the
user was in vault or drive mode. Notifications are now filtered so that vault
notifications appear only in vault mode and drive notifications appear only in
drive mode.

#13877

Bugfix - Prevent duplicate call for password protected public links: #13363

We've fixed an issue where the password protected public link was being called
twice.

#13363
#13409

Bugfix - Use dynamic viewport units (dvh/dvw) instead of viewport units (vh/vw): #13578

We have updated the CSS to use dynamic viewport units (dvh/dvw) instead of
viewport units (vh/vw) for better responsiveness on mobile devices, especially
when the virtual keyboard appears.

#13578

Bugfix - Cannot-edit-public-link-when-name-is-too-long: #13610

We've fixed an issue where users were unable to edit a public link if the name
of the link was too long.

#13610
https://kiteworks.atlassian.net/browse/OCISDEV-701

Bugfix - Fix space key selecting wrong resource: #13634

We have fixed a bug where pressing the space key in the file list or the space
list would select the wrong resource. This issue was caused by a mismatch
between the index of the selected item and the index of the item in the file
list.

#13634
https://kiteworks.atlassian.net/browse/OCISDEV-718

Bugfix - Fix share invite button being pushed down in space sharing: #13793

We have fixed a bug where the "Share" button in the invite collaborator form was
being pushed down when sharing a space. The layout now properly aligns items
vertically and prevents the button from wrapping to a new line.

#13793

Bugfix - Fix upload confirmation not visible on file drop page: #13799

We've fixed a responsive layout issue where the upload confirmation message was
not visible at small browser window sizes on the file drop page. The
UploadInfo panel was being clipped due to broken CSS. The layout now uses
natural document flow so the confirmation is always visible regardless of
viewport size.

#13799

Enhancement - Strip WebDAV prefix: #13545

Added a new logic to the WebDAV client to strip the prefix from the path if it
is present. Previously, only /dav/ prefix would be stripped when parsing the
response. Now, it will strip all the parts of the base remote URL. For example,
if the base remote URL is https://example.com/my/nested/path/, it will strip
the /my/nested/path/dav/ prefix.

#13545

Enhancement - Use spaceId: #13577

We now use the spaceId when matching the space for a resource instead of
manually constructed storageId from the resource ID.

#13577

Enhancement - Add theme mode: #13631

We've added a new property to the theme called mode. This property specifies
whether the theme is suitable for regular mode or vault mode. Valid values are
regular and vault.

#13631

Enhancement - Support log and conf files in text editor: #13632

We've added support for .log and .conf files in the text editor.

#13632
#13650

Enhancement - Show correct modal for saveAs and open actions: #13759

We've added logic to show the correct modal when the user clicks on "Save As" or
"Open" from the 3 dots context menu.

#13759

Enhancement - Add vault search separation: #13769

We've implemented vault search separation by adding the vault:true query token
to the <oc:pattern> search payload. The token is now included in both "All
files" and "Current folder" search requests, ensuring vault content is correctly
scoped in all search scenarios.

#13769

Enhancement - Add new theme colors: #13795

We've added new theme colors. These new colors are:

• background-sidebar - search-input-text-default - search-input-text-muted -
  search-input-border - search-input-bg

#13795

Enhancement - Check vault permission: #13802

When the user has the VaultMode.ReadWriteEnabled.own permission, the mode
switch will be shown in the topbar.

#13802

Enhancement - MFA session expiry warning: #13803

We've added a warning modal that notifies users before their multi-factor
authentication session expires. Users can extend the session via silent OIDC
renewal or dismiss the warning. The modal state is synchronized across multiple
browser tabs using a BroadcastChannel.

#13803

Enhancement - Vault-aware breadcrumbs: #13803

We've introduced vault-aware breadcrumbs that show Vault or Drive as the root
item depending on the active scope. Users without vault access see the original
labels instead.

#13803

Bugfix - Share button not usable when role dropdown text is too long: #13638

We've fixed an issue where the share button was not usable when the text in the
role dropdown was too long.

#13638

Bugfix - Shared with does not show members: #13667

We've fixed an issue where the list of external users in the "Shared with"
section was not displayed.

#13667

Bugfix - Escape strings when returned from server: #13680

We've fixed an issue where strings returned from the server were not escaped

#13680

Enhancement - Use signature auth: #11963

When requesting resources from public links, we now request also
oc:signature-auth property. This property is then used to sign the archiver
download URL within password protected public links.

owncloud/ocis#11963
#13576

Bugfix - Search Text Overalps With Search Icon In The Search Bar: #13542

We have fixed an issue where the search text in the search bar would overlap
with the search icon, making it difficult to read. This improvement enhances the
user experience by ensuring that the search text is clearly visible and does not
interfere with the functionality of the search icon.

#13542
#13553

Bugfix - Prevent overlapping search content: #13406

We've fixed an issue where the search placeholder and value were overlapping the
search scope filter on mobile devices. The placeholder is now hidden on mobile
devices, scope filter is represented by an icon instead of text and a correct
padding is applied to the search input so that the value ends before reaching
the icons.

#13406

Bugfix - Filter only personal trashed spaces: #13415

Instead of filtering all trashed spaces, we now filter only personal trashed
spaces. This fixes the issue where listing spaces with "Include disabled" option
toggled did not show disabled spaces.

#13415

Enhancement - Dynamic theme-color meta tag based on loaded theme: #5847

The theme-color meta tag now dynamically uses the brand color from the currently
loaded theme instead of a hardcoded value. This improves Safari's tab bar
styling to match custom themes and provides a more cohesive branded experience.

#5847

Enhancement - Use beta endpoint for single drive operations: #13412

We've updated the single drive operations to use the v1 beta endpoint. This
allows us to drop custom hardcoded logic for converting drive permissions.

#13412

Enhancement - Add crash page: #13426

We've added a crash page to the application. This page is displayed when the
application encounters an error that it cannot recover from.

#13426

Enhancement - Catch spaces loading error: #13426

In case there is any error during spaces loading, the application will now
display a crash page instead of showing an infinite loading state.

#13426

Enhancement - Drop custom share filters: #13485

In the Shares panel, we have dropped the custom filters applied to the
recipients autocomplete. The filtering is happening already in the backend, so
we don't need to apply any custom filters here. It also makes implementing new
filters faster in the future because they need to be implemented only once in
the backend. If this change breaks any specific use cases, it will be fixed in
the backend.

#13485

Enhancement - Add cross-instance reference: #13499

Added cross-instance reference to the user account page. The cross-instance
reference is a unique identifier for the user across different oCIS instances.

#13499

Enhancement - Add instance switcher: #13500

Added a list of users' instances to the user menu. When multiple instances are
enabled in oCIS, the user can switch between instances by clicking on the
instance in the list. The list displays maximum 3 instances. If there are more
instances, the user can click on a button to open the instances modal. Within
the modal, the user can see all instances and switch between them by clicking on
the instance or a "Switch" button.

#13500

Bugfix - Fix copying public link and password on Safari: #13177

We have fixed an issue where copying the public link and password on Safari was
not working as expected.

#13177
https://kiteworks.atlassian.net/browse/OCISDEV-196

Bugfix - Fix incorrect translations: #13198

We have fixed an issue where translations were always showing in English,
regardless of the user's selected language.

#13198
https://kiteworks.atlassian.net/browse/OCISDEV-420

Bugfix - Remove duplicate resource links: #13203

In the resources table, we had duplicate resource links. This has been fixed by
removing the link from the resource icon. The icon is now treated solely as a
decorative element and is hidden from screen readers.

#13203

Bugfix - Do not disable sharing of resources when managing spaces via claims: #13213

When managing spaces via claims, we were disabling sharing of resources when the
server managed spaces capability was enabled. This was not correct, as we should
only disable sharing of spaces.

#13213

Bugfix - Fix spinner loading continuously when resource is deleted: #13223

We have fixed an issue where the loading spinner would continue to spin
indefinitely when a resource was deleted.

#13223
https://kiteworks.atlassian.net/browse/OCISDEV-418

Bugfix - Include Ubuntu font: #13233

We've included the Ubuntu font in the web container. This fixed the issue where
the Ubuntu font was not being loaded in the PDF export due to CSP restrictions.
The font is distributed under the open licence.

#13233
https://canonical.com/legal/font-licence

Bugfix - External share ID fallback: #13253

We now fallback to the original ID if decoding the external share ID fails.

#13253

Bugfix - Handle file loading error: #13274

Skip loading file content if getting the file info fails. This prevents an
unexpected error when opening a file.

#13274

Bugfix - Use sticky header composable in deleted files: #13329

The sticky header composable is now used in the deleted files view. This fixes
the issue where the header was always sticky. On smaller screens, this breaks
the layout and overlaps the content.

#13329

Enhancement - Hide trashed spaces: #13168

If the root.deleted.state property of a space is trashed, the space is not
shown in the UI. This includes also personal spaces.

#13168

Enhancement - Drop beta badge from GeoGebra pinboards: #13169

We've dropped the beta badge from the GeoGebra pinboard icon.

#13169

Enhancement - Add Excalidraw file icon: #13172

Added a new file icon for Excalidraw files. Any file with the extension
.excalidraw will now have the Excalidraw logo as file icon.

#13172

Enhancement - Add Visio file icons: #13197

Added a new file icon for Visio files. The icon is used for files with the
extension .vsd, .vsdm, .vsdx, .vss, .vssm, .vssx, .vst, .vstm,
.vstx. The icon is a file icon from Font Awesome adjusted by subtracting the
project-diagram icon from it.

#13197
https://fontawesome.com/v5/icons/file?f=classic&s=solid
https://fontawesome.com/v5/icons/project-diagram?f=classic&s=solid

Enhancement - Add table caption: #13224

We added a caption to the OcTable component. It's content can be set via a
newly introduced caption prop. The visibility of the caption can also be
toggled via new captionVisible prop. By default, it is visible only to screen
readers. If the OcTable includes any sortable columns, the caption will
automatically include screen reader only explanation of sorting capabilities.
This makes sure that screen readers are not overriding column headers with
actions via aria-label and that it does not repeat the same action multiple
times. All of this behavior is directly inspired by the ARIA Authoring Practices
Guide (APG).

#13224
https://www.w3.org/WAI/ARIA/apg/patterns/table/examples/sortable-table/

Enhancement - Use API groups search in admin settings: #13235

We have changed the search behaviour in the admin settings. Instead of filtering
the groups in the client, we now use the search parameter of the list groups API
endpoint.

#13235

Enhancement - Embed mode share links with password: #13296

In embed mode, the "Copy link and password" button text has been changed to
"Share link(s) and password(s)". When sharing links in embed mode, a new event
owncloud-embed:share-links is now emitted that contains an array of objects
with the link URL and optionally the password (when the "Share link(s) and
password(s)" button is clicked). This allows parent applications to handle both
the link and password programmatically.

DEPRECATION NOTICE: This deprecates the owncloud-embed:share event. The
existing event continues to be emitted for backward compatibility.

#13296

Bugfix - Do not disable sharing of resources when managing spaces via claims: #13213

When managing spaces via claims, we were disabling sharing of resources when the
server managed spaces capability was enabled. This was not correct, as we should
only disable sharing of spaces.

#13213