Skip to content

chore: add changelog folder for 10.16.4 release #41766

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DeepDiver1975 merged 1 commit into from
Jul 29, 2026
+43 −11
Merged

chore: add changelog folder for 10.16.4 release #41766

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 34 additions & 11 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# Table of Contents

* [Changelog for unreleased](#changelog-for-owncloud-core-unreleased-unreleased)
* [Changelog for 10.16.4](#changelog-for-owncloud-core-10164-2026-07-29)
* [Changelog for 10.16.3](#changelog-for-owncloud-core-10163-2026-05-22)
* [Changelog for 10.16.2](#changelog-for-owncloud-core-10162-2026-04-02)
* [Changelog for 10.16.1](#changelog-for-owncloud-core-10161-2026-02-18)
Expand Down Expand Up @@ -34,7 +35,7 @@
The following sections list the changes in ownCloud core unreleased relevant to
ownCloud admins and users.

[unreleased]: https://github.com/owncloud/core/compare/v10.16.3...master
[unreleased]: https://github.com/owncloud/core/compare/v10.16.4...master

## Summary

Expand All @@ -53,7 +54,6 @@ ownCloud admins and users.
* Bugfix - Normalise trashbin original-location PROPFIND response: [#39337](https://github.com/owncloud/core/issues/39337)
* Bugfix - Add missing space to mail footer signature delimiter: [#41364](https://github.com/owncloud/core/issues/41364)
* Bugfix - Fix htaccess RewriteBase rules blocking API requests by file extension: [#41418](https://github.com/owncloud/core/issues/41418)
* Bugfix - Fix subadmin email change updating caller's address instead of target's: [#41574](https://github.com/owncloud/core/pull/41574)
* Bugfix - Adjust code to avoid PHP8 messages: [#41597](https://github.com/owncloud/core/pull/41597)
* Bugfix - Support federation between systems in subdirectories: [#41599](https://github.com/owncloud/core/pull/41599)
* Bugfix - Remove owncloud.com/federation link from federated cloud settings: [#41608](https://github.com/owncloud/core/pull/41608)
Expand Down Expand Up @@ -272,15 +272,6 @@ ownCloud admins and users.

https://github.com/owncloud/core/issues/41418

* Bugfix - Fix subadmin email change updating caller's address instead of target's: [#41574](https://github.com/owncloud/core/pull/41574)

The verification token and confirmation link in the subadmin path of
setMailAddress were associated with the caller's account instead of the target
user's account. Clicking the confirmation link changed the subadmin's email
rather than the intended target's email.

https://github.com/owncloud/core/pull/41574

* Bugfix - Adjust code to avoid PHP8 messages: [#41597](https://github.com/owncloud/core/pull/41597)

Avoid trying to access array offset on false in the encryption storage wrapper.
Expand Down Expand Up @@ -739,6 +730,38 @@ ownCloud admins and users.

https://github.com/owncloud/core/pull/41762

# Changelog for ownCloud Core [10.16.4] (2026-07-29)

The following sections list the changes in ownCloud core 10.16.4 relevant to
ownCloud admins and users.

[10.16.4]: https://github.com/owncloud/core/compare/v10.16.3...v10.16.4

## Summary

* Bugfix - Fix subadmin email change updating caller's address instead of target's: [#41574](https://github.com/owncloud/core/pull/41574)
* Change - Honour the write hook veto on legacy chunked WebDAV uploads: [#41763](https://github.com/owncloud/core/pull/41763)

## Details

* Bugfix - Fix subadmin email change updating caller's address instead of target's: [#41574](https://github.com/owncloud/core/pull/41574)

The verification token and confirmation link in the subadmin path of
setMailAddress were associated with the caller's account instead of the target
user's account. Clicking the confirmation link changed the subadmin's email
rather than the intended target's email.

https://github.com/owncloud/core/pull/41574

* Change - Honour the write hook veto on legacy chunked WebDAV uploads: [#41763](https://github.com/owncloud/core/pull/41763)

The legacy WebDAV chunked upload path assembled the final file without
respecting the pre-write hook result, so the filename blacklist that applies to
ordinary uploads was not enforced for chunked uploads. The chunked assembly now
aborts when a write hook vetoes the file, matching the non-chunked upload path.

https://github.com/owncloud/core/pull/41763

# Changelog for ownCloud Core [10.16.3] (2026-05-22)

The following sections list the changes in ownCloud core 10.16.3 relevant to
Expand Down
0 changelog/unreleased/41574 → changelog/10.16.4_2026-07-29/41574
View file
Open in desktop
File renamed without changes.
9 changes: 9 additions & 0 deletions changelog/10.16.4_2026-07-29/41763
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
Change: Honour the write hook veto on legacy chunked WebDAV uploads

The legacy WebDAV chunked upload path assembled the final file without
respecting the pre-write hook result, so the filename blacklist that applies
to ordinary uploads was not enforced for chunked uploads. The chunked
assembly now aborts when a write hook vetoes the file, matching the
non-chunked upload path.

https://github.com/owncloud/core/pull/41763