From dc6a08995e74f2ee49b81918501edc77629493e0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20M=C3=BCller?= <323649642+oc-tmueller@users.noreply.github.com> Date: Tue, 22 Sep 2026 17:35:59 +0200 Subject: [PATCH] chore: bump version to 4.3.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Release for the ownCloud 11.0.1 line. The notable change is that no released version of this app carries the return-URL validation yet: v4.3.0 was tagged 2026-07-20 at #613 and #620 landed after it. Also in: the pnpm settings move and lockfile regeneration (#624, #631), the JavaScript unit test harness (#623), the appstore make target removal (#634), the signed release and distribution-scan workflows (#616, #617), the community health files (#601), translations (#618) and dependency bumps (#615, #626, #628, #636). The changelog gains two backfilled sections while we are here. 4.3.0 shipped with no entry at all - its content is summarised from the 48 commits between v4.2.2 and v4.3.0 rather than enumerated - and 4.2.3 was only ever recorded on the 4.2 branch, so master's history skipped it. Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com> Co-authored-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com> Co-authored-by: Claude Opus 5 (1M context) --- CHANGELOG.md | 59 ++++++++++++++++++++++++++++++++++++++++++++++++ appinfo/info.xml | 2 +- 2 files changed, 60 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index cd466549d..c59c71670 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,65 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/). +## [4.3.1] - 2026-09-22 + +### Security + +- [620](https://github.com/owncloud/richdocuments/pull/620) - Only navigate to a validated absolute http(s) return URL when the editor is closed, and restrict the origin WOPI post messages are exchanged with + +### Fixed + +- [631](https://github.com/owncloud/richdocuments/pull/631) - Move pnpm settings out of package.json into pnpm-workspace.yaml, which pnpm 11 and later still read, so the transitive pins keep applying +- [624](https://github.com/owncloud/richdocuments/pull/624) - Regenerate the pnpm lockfile and bump eslint, closing all open dependency alerts + +### Changed + +- [636](https://github.com/owncloud/richdocuments/pull/636) - Bump the minor-and-patch group with 3 updates +- [634](https://github.com/owncloud/richdocuments/pull/634) - Drop the appstore make target in favour of dist +- [628](https://github.com/owncloud/richdocuments/pull/628) - Bump vue from 3.5.40 to 3.5.42 +- [626](https://github.com/owncloud/richdocuments/pull/626) - Give the 4.2 maintenance branch Dependabot coverage +- [623](https://github.com/owncloud/richdocuments/pull/623) - Add a JavaScript unit test harness for the classic frontend +- [618](https://github.com/owncloud/richdocuments/pull/618) - Update translations from Transifex +- [617](https://github.com/owncloud/richdocuments/pull/617) - Scan the distribution tree for known vulnerabilities +- [616](https://github.com/owncloud/richdocuments/pull/616) - Add a signed release workflow +- [615](https://github.com/owncloud/richdocuments/pull/615) - Bump prettier from 3.9.5 to 3.9.6 +- [601](https://github.com/owncloud/richdocuments/pull/601) - Community health files: README, AGENTS.md, CODE_OF_CONDUCT, SECURITY and SUPPORT + +## [4.3.0] - 2026-07-20 + +### Added + +- [573](https://github.com/owncloud/richdocuments/pull/573) - Support ownCloud 11 +- [579](https://github.com/owncloud/richdocuments/pull/579) - PHP 8 support +- [586](https://github.com/owncloud/richdocuments/pull/586) - Translation sync workflow + +### Security + +- [599](https://github.com/owncloud/richdocuments/pull/599) - Fix SSRF in federation endpoint: validate remote server against richdocuments.federation_allowlist system config + +### Fixed + +- [605](https://github.com/owncloud/richdocuments/pull/605) - Resolve all 78 open Dependabot alerts +- [574](https://github.com/owncloud/richdocuments/pull/574) - doctrine/dbal 3 compatibility, including deprecation fixes +- [590](https://github.com/owncloud/richdocuments/pull/590) - Grant contents:read permission for the translation-sync caller + +### Changed + +- [613](https://github.com/owncloud/richdocuments/pull/613) - Add code-signing challenge for G2 certificate enrollment +- [592](https://github.com/owncloud/richdocuments/pull/592) - Move acceptance tests to GitHub workflows +- [588](https://github.com/owncloud/richdocuments/pull/588) - Use the reusable build workflow for make dist +- [585](https://github.com/owncloud/richdocuments/pull/585) - Add a lint PR title workflow +- [603](https://github.com/owncloud/richdocuments/pull/603) - Bump behat acceptance test dependencies +- [604](https://github.com/owncloud/richdocuments/pull/604) - Add CODEOWNERS, managed by owncloud/admin +- [594](https://github.com/owncloud/richdocuments/pull/594) - Move Dependabot to a weekly Sunday schedule +- [566](https://github.com/owncloud/richdocuments/pull/566) - Configure Dependabot for Composer and npm + +## [4.2.3] - 2026-05-18 + +### Security + +- [599](https://github.com/owncloud/richdocuments/pull/599) - Fix SSRF in federation endpoint: validate remote server against richdocuments.federation_allowlist system config + ## [4.2.2] - 2025-11-19 ### Fixed diff --git a/appinfo/info.xml b/appinfo/info.xml index 852c6f28f..ce73ff888 100644 --- a/appinfo/info.xml +++ b/appinfo/info.xml @@ -9,7 +9,7 @@ This application can connect to a Collabora Online (or other) server (WOPI-like You can also edit your documents off-line with the Collabora Office app from the **[Android](https://play.google.com/store/apps/details?id=com.collabora.libreoffice)** and **[iOS](https://apps.apple.com/us/app/collabora-office/id1440482071)** store.]]> Edit office documents directly in your browser. AGPL - 4.3.0 + 4.3.1 Collabora Productivity based on work of Frank Karlitschek, Victor Dubiniuk https://github.com/owncloud/richdocuments/issues https://github.com/owncloud/richdocuments.git