6.1.0

Note

This is a rolling release. Learn here about the release types and lifecycle.

Releasenotes OpenCloud 6.1.0

🧭 Improved breadcrumb navigation

Navigating folder structures is now more consistent. The three-dot menu in the breadcrumb is now clickable and provides access to previously visited folders. This ensures that users can always navigate one step back via the breadcrumb and maintain orientation within deeper folder hierarchies.

⌨️ Keyboard shortcut for global search

The global search bar can now be focused using keyboard shortcuts (s or /). When focused, the search input is visually highlighted to improve clarity of active state.

Changelog

6.1.0 - 2026-04-20

❤️ Thanks to all contributors! ❤️

@JammingBen, @ScharfViktor, @aduffeck, @dragonchaser, @pedropintosilva, @rhafer, @AlexAndBear, @FrankM64, @kulmann, @pascalwengerter, @pedropintosilva, @tammi-23, @tiran133, @aduffeck, @fschade

Opencloud

📚 Documentation

• docs(web): deprecation notices for cern related feature flags [#2629]
• Update CI badge URL in README.md [#2614]

🐛 Bug Fixes

• Add a flag to the reindex command to force a full reindex [#2606]

📈 Enhancement

• proxy: Allow mapping from an external tenant id to the internal id [#2569]
• feat: enable EnableInsertRemoteFile WOPI flag for Collabora [#2555]
• feat(multi-tenancy): verify tenant via OIDC claim [#2559]

📦️ Dependencies

• Bump reva [#2611]
• chore(idp): clean up js dependencies [#2607]
• build(deps-dev): bump dotenv from 16.4.7 to 17.4.2 in /services/idp [#2603]
• chore: bump IDP javascript dependencies [#2600]
• build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 [#2587]
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0 [#2586]
• chore: bump reva to latest main [#2584]
• build(deps): bump golang.org/x/image from 0.36.0 to 0.38.0 [#2581]
• build(deps-dev): bump css-minimizer-webpack-plugin from 7.0.4 to 8.0.0 in /services/idp [#2551]
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.13 [#2526]
• build(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.15.0 [#2535]

Web

📈 Enhancement

• change: exchange icons [#2385]
• Merge header and file info in file sidebar [#2377]
• feat: set global color-scheme [#2379]
• feat: adjust mobile nav bar [#2372]
• feat(preview): play next audio file automatically after current track… [#2351]
• feat: active state for navigation in sidebar [#2374]
• Scroll selected mail into view after reload [#2341]
• Add contact details view [#2322]
• perf: use standalone silent redirect instead of bootstrapping the app [#2333]
• feat(design-system): add support for nuxt-link [#2318]
• feat: add drop with truncated items to oc-breadcrumb [#2309]
• feat: redesign share sidebar panel [#2293]
• feat: handle UI_InsertFile postMessage from Collabora [#2270]
• feat: focus global search bar via keyboard shortcut [#2274]
• feat: redesign sidebar file/space details panel [#2273]
• feat(design-system): redesign checkbox active state [#2266]
• feat: move favorite resource indicator to resource name [#2261]
• feat: add to favorites in preview app [#2251]

🐛 Bug Fixes

• fix: favorites list, undo delte doesn't return item to the favorites … [#2382]
• fix: extension action 'context' category [#2369]
• fix: prevent scroll when opening resource context menu [#2375]
• fix: mobile floating action button is too small [#2353]
• fix(runtime): optimize auth flow with expired token [#2346]
• fix(extension-sdk): add missing color roles [#2339]
• fix: optimize route change announcer [#2328]
• fix: prevent accidental space reset on public links [#2319]
• fix: markdown editor: incorrect rendering of unordered lists [#2315]
• Fix: #2262 accesssToken tripe S event [#2271]
• fix: preview app doesn't show video and mp3 meta data preview in phot… [#2302]
• fix(extension-sdk): do not run federation plugin in test mode [#2291]
• fix: v-oc-tooltip not reactive [#2255]

✅ Tests

• e2e-tests: favorites [#2370]

📦️ Dependencies

• fix(deps): update dependency @casl/ability to v6.8.1 [#2396]
• fix(deps): update dependency axios to v1.15.1 [#2392]
• chore(deps): update dependency filesize to v11.0.16 [#2395]
• chore(deps): update dependency fast-xml-parser to v5.7.1 [#2388]
• fix(deps): update dependency @sentry/vue to v10.49.0 [#2381]
• chore(deps): update node.js to v24.15.0 [#2380]
• chore(deps): update devdependencies (non-major) - autoclosed [#2387]
• fix(deps): update dependency uuid to v14 [#2393]
• chore(deps): update devdependencies (non-major) [#2378]
• chore(deps): update dependency @cucumber/cucumber to v12.8.1 [#2362]
• chore(deps): update dependency fast-xml-parser to v5.6.0 [#2373]
• chore(deps): update dependency dompurify to v3.4.0 [#2363]
• chore(deps): update typescript-eslint monorepo to v8.58.2 [#2360]
• chore(deps): update devdependencies (non-major) [#2358]
• chore(deps): update tiptap monorepo to v3.22.3 [#2320]
• chore(deps): update dependency globals to v17.5.0 [#2352]
• chore(deps): update dependency fast-xml-parser to v5.5.12 [#2354]
• chore(deps): update devdependencies (non-major) [#2350]
• chore(deps): update dependency @types/node to v25.6.0 [#2338]
• fix(deps): update dependency @unhead/vue to v3 [#2337]
• fix(deps): update dependency @sentry/vue to v10.48.0 [#2336]
• fix(deps): update dependency qs to v6.15.1 [#2327]
• chore(deps): update devdependencies (non-major) [#2331]
• chore(deps): update dependency fast-xml-parser to v5.5.11 [#2324]
• fix(deps): update dependency axios to v1.15.0 [#2330]
• chore(deps): update devdependencies (non-major) [#2325]
• chore(deps): update traefik docker tag to v3.6.13 [#2316]
• chore(deps): update typescript-eslint monorepo to v8.58.1 [#2317]
• chore(deps): update devdependencies (non-major) [[#2313](https://g...

4.0.5

4.0.5 - 2026-04-08

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @rhafer

📦️ Dependencies

• Bump go dependencies with known vulnerabilities [#2566]

4.0.5-beta.1

v4.0.5-beta.1

Release 4.0.5 Beta 1

6.0.0

Note

This is a rolling release. Learn here about the release types and lifecycle.

Releasenotes OpenCloud 6.0.0

⭐ Favorite Feature

The Favorites feature in the OpenCloud Web UI allows users to mark important and frequently used files for quick access. Favorite status is stored server-side, so it is available centrally and not tied to a single client. Favorited files are indicated with a star and are visible across personal and project spaces, subfolders, and search results. All favorites are collected on a dedicated Favorites page, supporting both list and grid views, with consistent display of file name, preview/type, status indicators, and available actions. Spaces themselves cannot yet be marked as favorites.

🧮 Calculator Extension

The Calculator Extension enables quick calculations directly in the OpenCloud search bar. Users can type a calculation, see the result instantly, and copy it directly. This extension comes from the community, providing practical functionality without leaving the Web UI.

📋 Pastebin Extension

The Pastebin Extension allows users to easily share text content. Shared items are automatically stored in a hidden .space folder within the personal area. This extension is also contributed by the community, making it simple to manage and share text snippets securely.

Changelog

6.0.0 - 2026-03-31

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @aduffeck, @dragonchaser, @micbar, @pascalwengerter, @smoothscholar, @rhafer, @AlexAndBear, @JammingBen, @dschmidt, @kulmann, @saw-jan, @tammi-23

Opencloud:

💥 Breaking changes

• Improve opensearch highlighting, fix favorites [#2514]

✅ Tests

• [full-ci] api-test: check that report contains favorites [#2531]
• api-tests: search for favorites [#2487]
• [test-only] favorites tests [#2474]

📈 Enhancement

• feat: add userid to spans [#2536]
• feat: add openFilesInNewTab web config option [#2522]
• Always enable favorites, remove FRONTEND_ENABLE_FAVORITES flag [#2494]
• Implement favorites [#2454]

🐛 Bug Fixes

• Fix bleve batches [#2524]

📦️ Dependencies

• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.5 to 2.12.6 [#2525]
• build(deps-dev): bump postcss-preset-env from 10.1.3 to 11.2.0 in /services/idp [#2392]
• build(deps): bump github.com/tus/tusd/v2 from 2.8.0 to 2.9.2 [#2485]
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 [#2519]
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.5 [#2499]
• build(deps): bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0 [#2503]
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 [#2472]
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.65.0 to 0.67.0 [#2473]
• build(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 [#2468]
• build(deps): bump go.opentelemetry.io/contrib/zpages from 0.65.0 to 0.67.0 [#2467]
• build(deps): bump github.com/testcontainers/testcontainers-go/modules/opensearch from 0.40.0 to 0.41.0 [#2458]
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.41.0 to 1.42.0 [#2459]
• build(deps): bump github.com/testcontainers/testcontainers-go from 0.40.0 to 0.41.0 [#2453]
• build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 [#2452]
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.40.0 to 1.42.0 [#2441]
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.65.0 to 0.67.0 [#2442]

Web

⚠️ Deprecation

• The AMD format for external apps is now deprecated. External apps need to be built with the latest extension-sdk to use the new ESM format. Support for the AMD format will be removed in an upcoming version. [#2213]

🐛 Bug Fixes

• fix: remove search limit from favorites request [#2245]
• fix: add missing breadcrumb in favorites view [#2243]
• fix: idp logout on network errors [#2230]
• fix: breadcrumb in admin settings info section not clickable [#2237]
• fix: metadataUrl in user manager [#2239]
• fix: remove redundant header in admin settings info section [#2236]
• fix: admin settings user avatar take too much space and divergend fro… [#2222]
• Fix password modal can be confirmed even if the password is empty [#2219]
• fix: context menu does not close when favorite item [#2212]
• fix: preserve query params on public link redirect [#2199]
• fix: version check in conjunction with dev docker image leads to left… [#2156]
• fix: sidebar top margin too low when no FAB is present [#2147]
• fix: files with name e.G. .space won't be shown when 'show file extens… [#2149]
• fix: account settings on mobile view [#2148]
• fix: app top bar gets removed, even if unsaved changes modal appears [#2141]
• fix: oc-drop a11y and overflow issues [#2100]
• fix: search bar disappears when entering account preferences [#2122]
• fix: bring back disabled space indicator in tiles view [#2110]
• fix: focus ring for upload buttons [#2111]

📈 Enhancement

• feat: add openFilesInNewTab config option [#2218]
• feat: auto-register extension dev servers with host [#2220]
• feat: add logo to admin settings info section [#2228]
• feat: add module federation support for external apps [#2213]
• feat: add empty state icon for favorites [#2211]
• Use favorites from graph api [#2171]
• Implement sending a draft [#2193]
• Feat/1959 [#2125]
• feat: contacts support full name and name components [#2187]
• feat: add contacts app skeleton [#2155]
• feat: small UI improvements/fixes [#2177]
• feat: add no content images for mail app [#2165]
• feat: webfinger oidc discovery [#2152]
• Added draft state handling [#1956]
• feat: use oc colors in collabora [#2144]
• feat: polish input fields [#2127]
• feat(runtime): add dynamic extension points for sidebar-nav [#2134]
• feat: polish drop menus [#2133]
• feat: polish filters [#2124]
• feat: polish shares page [#2116]
• feat: polish left sidebar [#2118]
• feat: polish space enabled/disabled status indicators [#2113]
• feat: show icon of the current view mode in view mode switch [#2105]

✅ Tests

• [full-ci] test(e2e): fix share type label check [#2191]...

4.0.4

4.0.4 - 2026-03-30

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @aduffeck, @dragonchaser, @rhafer, @saw-jan

Opencloud

🐛 Bug Fixes

• Backport bleve batch fix [#2527]
• Backport backchannel logout [#2407]

📦️ Dependencies

• [stable-4.0] Bump some go dependencies [#2544]

Reva

🐛 Bug Fixes

• Backport excessive load fixes [https://github.com/opencloud-eu/reva/pull/571]

5.2.0

Note

This is a rolling release. Learn here about the release types and lifecycle.

Releasenotes OpenCloud 5.2.0

➕ Floating Action Button for “Create or Upload”

The “Create or Upload” button in the Files app is now a Floating Action Button (FAB). Available actions open as a dropdown or bottom drawer. The button is disabled or hidden if the user lacks write permissions.

New default format: Open formats like ODT are now the default format when creating new documents via the “New” button. This can be changed via the configuration file [here]

Changelog

5.2.0 - 2026-03-09

❤️ Thanks to all contributors! ❤️

@AlexAndBear, @JammingBen, @MahdiBaghbani, @ScharfViktor, @aduffeck, @butonic, @dragonchaser, @dragotin, @fschade, @pat-s, @rhafer, @dschmidt, @flimmy, @kulmann, @saw-jan, @micbar

Opencloud

📚 Documentation

• update links and references in CONTRIBUTING.md [#2411]
• adr(webfinger): Align example config with implementation [#2353]

📈 Enhancement

• feat(graph/education): Add support of 'eq' filters on users [#2421]
• feat(web): change surface colors to more modern ones [#2377]
• Add openCloudEducationExternalId to user [#2357]
• feat: app-registry adjust default mime-types [#2354]
• feat: support desktop and mobile specific client_id and scopes [#2072]

🐛 Bug Fixes

• [SKIP CI] Fix simple install script, use admin-password switch [#2413]
• resolve logout token subject:sessions for the idp backchannel logout [#2328]
• fix(oidc_auth): Fix userinfo cache expiration logic [#2360]

📦️ Dependencies

• build(deps): bump github.com/open-policy-agent/opa from 1.13.2 to 1.14.0 [#2427]
• build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 [#2425]
• build(deps): bump github.com/davidbyttow/govips/v2 from 2.16.0 to 2.17.0 [#2420]
• build(deps): bump github.com/nats-io/nats.go from 1.48.0 to 1.49.0 [#2390]
• build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 [#2412]
• build(deps): bump github.com/kovidgoyal/imaging from 1.8.19 to 1.8.20 [#2391]
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.7 to 2.28.0 [#2375]
• build(deps): bump github.com/open-policy-agent/opa from 1.13.1 to 1.13.2 [#2374]
• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1 [#2362]
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 [#2366]
• build(deps): bump go.opentelemetry.io/contrib/zpages from 0.64.0 to 0.65.0 [#2363]
• build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 [#2356]
• build(deps): bump github.com/go-resty/resty/v2 from 2.17.1 to 2.17.2 [#2355]
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.64.0 to 0.65.0 [#2321]
• build(deps): bump github.com/open-policy-agent/opa from 1.12.3 to 1.13.1 [#2350]

Web

💥 Breaking changes

• feat!: remove deprecations for v6.0.0 [#2093]
• refactor!: floating UI [#1998]
• refactor!: port vue-portal to teleport or extension system [#2015]
• refactor!: mobile nav to web-pkg [#2007]

🔒 Security

• chore(deps): fix current security alerts [#2040]

📈 Enhancement

• feat: use proper size-5 class for medium sized icons [#2066]
• feat: increase topbar height [#2070]
• Improve empty state icons [#2094]
• feat: ease use of floating action button extension [#2090]
• feat: add polished icons for no content message [#2033]
• feat: add fab to admin settings and spaces overview [#2025]
• feat(ocm): implement WAYF page and enhance invitation workflow [#1486]
• feat: modernize surface colors [#2023]
• feat: create or upload floating action button [#1997]
• feat: eleminate collapsed state of left side bar [#1993]
• feat: unifiy create and upload button [#1989]

🐛 Bug Fixes

• fix: don't show 'new' button in secret file drop [#2086]
• Fix broken link to web docs [#2080]
• fix: admin settings layout [#2062]
• fix: backchannel logout react to sid [#1969]
• fix: broken AvatarImage usages [#2042]
• fix(files): prevent selection reset during keyboard navigation [#2044]
• fix: visual active state in preview app (photo roll) [#2029]
• fix: prevent 'New'-button flicker when navigating [#2026]
• fix(web-runtime): cache embed query params across config reloads [#1977]
• fix(web-pkg): guard against missing routes in getEditorRoute [#1975]

✅ Tests

• keycloak tests [#2064]
• test(e2e): increase timeout for large file upload step [#2067]
• update keycloak version [#2051]
• [full-ci] test: fix ocm invite token parsing [#2049]

📦️ Dependencies

• chore(deps): update dependency eslint to v10 [#1945]
• chore(deps): update dependency md-editor-v3 to v6.4.0 [#2072]
• chore(deps): update devdependencies (non-major) [#2057]
• fix(deps): update dependency @sentry/vue to v10.42.0 - autoclosed [#2052]
• chore(deps): update dependency fast-xml-parser to v5.4.2 [#2059]
• chore(deps): update dependency @floating-ui/dom to v1.7.6 [#2065]
• chore(deps): update dependency dompurify to v3.3.2 [security] [#2095]
• chore(deps): update dependency ejs to v5 [#2096]
• chore(deps): update dependency @codemirror/view to v6.39.16 [#2050]
• chore(deps): update dependency globals to v17.4.0 [#2048]
• chore(deps): update dependency @cucumber/messages to v32.2.0 [#2047]
• fix(deps): update dependency axios to v1.13.6 [#2046]
• chore(deps): update dependency @cucumber/messages to v32.1.0 [#2043]
• chore(deps): update tiptap monorepo to v3.20.0 [#1999]
• chore(deps): update dependency simple-git to v3.32.3 [#2039]
• chore(deps): update devdependencies (non-major) [#2030]
• fix(deps): update dependency @sentry/vue to v10.40.0 [#2036]
• chore(deps): update dependency fast-xml-parser to v5.4.1 [#2037]
• chore(deps): update vue monorepo to v3.5.29 [#2034]
• chore(deps): update node.js to v24.14.0 [#2035]
• chore(deps): update typescript-eslint monorepo to v8.56.1 [[#20...

5.1.0

Note

This is a rolling release. Learn here about the release types and lifecycle.

Releasenotes OpenCloud 5.1.0

🖼️ Preview App Performance

The Preview App has been optimized for significantly better performance when browsing large photo folders. Instead of requesting all images at full resolution, only the currently viewed image is loaded in high quality. Images in the Photo Roll are loaded as small thumbnails and only for items visible in the viewport. Additional images are loaded dynamically while scrolling, and pending image requests are cancelled when they are no longer needed, especially on slow or unstable connections.

Changelog

5.1.0 - 2026-02-16

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @VicDeo, @aduffeck, @dragonchaser, @individual-it, @kulmann, @micbar, @rhafer, @schweigisito

🐛 Bug Fixes

• [full-ci] Bump reva v2.42.4 [#2348]
• fix: fix typo in variable description [#2333]
• fix: include sessionID in sse logout event [#2327]
• fix: fix typo in gateway service documentation [#2332]
• Sanitize web config only once [#2286]

📈 Enhancement

• external tenant id [#2258]

📚 Documentation

• fix: make file urls [#2304]

📦️ Dependencies

• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.12 to 1.4.13 [#2316]
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.39.0 to 1.40.0 [#2279]
• update reva after merge #514 [#2309]
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.4 to 5.2.5 [#2278]

5.0.2

5.0.2 - 2026-02-05

Security

⚠️ Update immediately: CVE-2026-23989, a security issue in public links is resolved in v5.0.2.

We recommend all deployments running previous versions to update to one of these releases immediately.

❤️ Thanks to all contributors! ❤️

@AlexAndBear, @ScharfViktor, @flimmy, @individual-it, @rhafer, @saw-jan

🐛 Bug Fixes

• [full-ci] reva-bump-2.42.3 [#2276]

✅ Tests

• adapt test for #514 [#2255]
• api-test: upload-rename-download file with back slash [#2239]
• [full-ci][tests-only] test: add hook failures to the test failures list [#2041]

📚 Documentation

• docs(proxy): Clarify PROXY_OIDC_USERINFO_CACHE_TTL value [#2256]

📦️ Dependencies

• [full-ci] reva-bump-2.42.2 [#2270]
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.5 to 2.27.6 [#2238]

5.0.2-rc.1

v5.0.2-rc.1

Release 5.0.2 RC 1

4.0.3

4.0.3 - 2026-02-05

Security

⚠️ Update immediately: CVE-2026-23989, a security issue in public links is resolved in v4.0.3.

We recommend all deployments running previous versions to update to one of these releases immediately.

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @aduffeck, @fschade, @kulmann, @micbar, @prashant-gurung899, @saw-jan

🐛 Bug Fixes

• Bump reva 2.40.3 [#2275]

✅ Tests

• [tests-only] port tests to stable #2087 #2039 [#2185]
• [full-ci][tests-only] port test fixes [#2017]
• [stable-4.0] Port #2011 [#2018]

📦️ Dependencies

• Bump reva [#2274]

Reva

• fix(authscope): Fix parent check [#522]