[QA] Confirmatory testing for Ebadi - 8.2.0

[deyankiteworks]

JIRA: OCISDEV-1034

Change log for v8.2.0-rc.1

[ishabaral]

• Security - Add X-XSS-Protection header: fix: [OCISDEV-426] X-XSS-Protection header #12092
• Security - Upgrade libvips to 8.18.2: chore: bump libvips #12301
• Security - Fix signing-key to public share guests: feat: [OCISDEV-720] fix public link #12332 @PrajwolAmatya
• Security - Do not leak internal error details in webdav error responses: fix: [OCISDEV-750] Prevent error information disclosure #12398 @PrajwolAmatya
• Security - Make OIDC group sync opt-in: fix: [OCISDEV-886] harden group join #12490 @PrajwolAmatya
• Security - Block password and account changes via PATCH /graph/v1.0/me: fix: [OCISDEV-977] patch me #12493 @PrajwolAmatya
• Bugfix - Always set an audit action for share updates: Inconsistent Audit Log #7661 @PrajwolAmatya
• Bugfix - Fix the proxy readiness check for NATS: Readiness check for some services returns 500 status code #10661 @PrajwolAmatya
• Bugfix - Honor $select=actions on the drive item permissions endpoint: Permissions API: $select with Actions Includes Unwanted Roles Values #10816 @PrajwolAmatya
• Bugfix - Keep group memberships when the OIDC groups claim is absent: User gets removed from group after being added by OIDC claim #11435 @PrajwolAmatya
• Bugfix - Pass the space ID when purging revision blobs: Blob orphaned version 7.1.4 #11644 @anon-pradip
• Bugfix - Fix postprocessing resume command --restart flag: [CLI] Empty output on postprocessing command #11692
• Bugfix - Don't use hardcoded groupOfNames in group creation: fix(graph): Don't use hardcoded groupOfNames in group creation #11776
• Bugfix - Translation for some email notifications: fix: some notifications were translated wrong due to an empty l10n key #11979
• Bugfix - Rework monitoring in the ocis_full deployment example: [docs-only] Update ocis full monitoring base #11995
• Bugfix - Extract metadata from oversized files and fix ISO field: fix(search): skip Tika re-extraction when file content has not changed #12000
• Bugfix - Make tag unassignment idempotent and handle publish failures: fix(graph): make tag unassignment idempotent #12001
• Bugfix - Expose the signature-auth attribute: [full-ci] Chore/bump web to v12.3.1 #12016
• Bugfix - Fix CSP blocking bundled KaTeX font: fix(proxy): add data: to font-src CSP to allow bundled KaTeX fonts #12070
• Bugfix - Fix case-sensitive photo metadata search: fix(search): use case-insensitive analyzer for photo metadata fields #12078
• Bugfix - Prevent incomplete Tika extractions from permanently blocking re-index: fix(search): prevent incomplete Tika extractions from blocking re-index #12095
• Bugfix - Use O(1) document lookup instead of full search during reindexing: [backport] feat: add globalID for EK users #12096
• Bugfix - Fix IDP build on FreeBSD by disabling absolute Babel runtime: fix(idp): disable absolute Babel runtime paths for FreeBSD compatibility #12114
• Bugfix - Always descend into directories during space reindexing: fix(search): always descend into directories during IndexSpace walk #12119
• Bugfix - Don't index failed uploads: Dont Index failed uploads #12121
• Bugfix - Avoid superfluous GetPublicShare call when deleting space permissions: fix(graph): avoid superfluous GetPublicShare call when deleting space permissions #12122
• Bugfix - Fix CreateHome cache: [full-ci] [OCISDEV-460] fix: move the home space create cache to the proxy #12128
• Bugfix - Return 200 OK for WOPI Lock requests in read-only and view-only modes: fix(collaboration): [OCISDEV-781] return 200 OK for WOPI Lock in read-only and view-only modes #12257
• Bugfix - Fix typo in README: fix: correct typo in readme #12263
• Bugfix - Return 404 when deleting a non-existing link share on a space: fix: [OCISDEV-828] Fix the response code on deleting a non-existing link share on a space #12266
• Bugfix - Fix space management middleware removing users from spaces on download: fix(proxy): [OCISDEV-845] skip space reconciliation on signed URL requests #12285
• Bugfix - Search no longer disabled when OCIS_DISABLE_PREVIEWS=true: chore: decouple webdav search reuter, changelog #12303
• Bugfix - Stable order for user search attributes: fix: [OCISDEV-673] stable order for user search attributes #12337
• Bugfix - Cache compiled rego policies to avoid recompiling on every request: fix(policies): [OCISDEV-803] cache rego policies #12345
• Bugfix - SpaceEditorWithoutTrashbin roles now correctly allow file editing: fix: [OCISDEV-873] *WithoutTrashbin space editor roles render files read-only in Web frontend #12346
• Bugfix - Skip indexing of files still in postprocessing: fix(search): [OCISDEV-867] skip indexing of files still in processing state #12350
• Bugfix - Fix PostgreSQL container restart loop in Keycloak deployments: fix(deployments): prevent PostgreSQL restart loop by fixing volume mount path #12359
• Bugfix - Prevent panic in presigned URL auth when signing key is missing: OCIS_CACHE_STORE=noop breaks signed URL authentication with panic: index out of range #12384 @PrajwolAmatya
• Bugfix - Mask configs that hold secrets: fix: [OCISDEV-879] fix the config mask #12397 @PrajwolAmatya
• Bugfix - Recover from permanently-closed NATS connections in the nats-js-kv store: fix(deps): [OCISDEV-834] recover from dead NATS connections in nats-js-kv #12404 @PrajwolAmatya
• Bugfix - Education user DELETE no longer 404s while leaving LDAP entry behind: fix(graph): [OCISDEV-964] education user delete uses wrong id #12405 @PrajwolAmatya
• Bugfix - Fix double HTML-escaping of notification emails for multiple recipients: fix(notifications): don't HTML-escape email template vars in place #12413 @PrajwolAmatya
• Bugfix - Re-verify access tokens with an expired userinfo cache entry: fix(proxy): re-verify access token when cached userinfo has expired #12414 @PrajwolAmatya
• Bugfix - Keep shares visible in sharedWithMe when a resource cannot be statted: fix(graph): keep shares visible in sharedWithMe when a resource cannot be statted #12430 @nabim777
• Bugfix - Ensure the redirect URI for the IDP is valid: [OCISDEV-577] fix: ensure the redirect_uri is valid #12444 @nabim777
• Bugfix - The auth-app will create the user's home if needed: fix: auth-app will create the user home if needed #12457 @ishabaral
• Bugfix - Do not disable personal space on inconclusive permission check: Revert "Fix/ocisdev 884" #12499 @nabim777
• Bugfix - Rate-limit the exportPersonalData endpoint: Opening documents in external app (OnlyOffice/WOPI) returns client-side 404 - race condition with /app/list on full page navigation #12516 @nabim777
• Bugfix - Apply the role allowlist on permission updates: fix: [OCISDEV-810] fix the space role and custom role checks #12540 @nabim777
• Change - Deprecate the owncloudsql storage driver option: Deprecate the owncloudsql storage driver #12486
• Enhancement - Add web extensions deployment configuration: feat(deployment): add photo-addon and advanced-search web extensions #11940
• Enhancement - Add AI-assisted development guide: Create ai-assisted-dev #11941
• Enhancement - Bump Web to 12.3.1: [full-ci] chore: bump web to v12.3.1 #12015
• Enhancement - Add space ID to incoming shares: feat(graph): [OCISDEV-602] add space ID to incoming shares #12024
• Enhancement - Add spaceid to REPORT: feat(webdav): [OCISDEV-602] add spaceid to report #12028
• Enhancement - Bump Reva version: feat: bump reva to latest #12051
• Enhancement - Add ResourceID field to UploadReady event: [docs-only] fix: add ResourceID field to UploadReady event with file's node ID #12060
• Enhancement - Replace embedded IDP React SPA with server-rendered login page: feat: [OCISDEV-696] service/idp no-npm #12086
• Enhancement - Support numeric range queries in KQL: feat(kql): support numeric range queries #12094
• Enhancement - Add blobstore CLI commands to storage-users service: Add CLI command to test Blobstore #12102
• Enhancement - Optimize search index after bulk reindexing: enhancement(search): optimize bleve index after bulk reindexing #12104
• Enhancement - Add vault storage with MFA-protected access: [full-ci] feat: ocisdev-533 graph #12108
• Enhancement - Retry and abort on repeated extraction failures during indexing: enhancement(search): backoff and abort on repeated extraction failures during indexing #12111
• Enhancement - Log effective data and config paths at startup: enhancement: log effective data and config paths at startup #12117
• Enhancement - Allow resetting IDM service user passwords: feat(idm): add --service-user flag to resetpassword command #12118
• Enhancement - Update images in the ocis_full deployment example: [docs-only] Update images in the ocis_full deployment example #12123
• Enhancement - Add ocis search optimize CLI command: feat(search): add ocis search optimize CLI command #12136
• Enhancement - Add Keycloak to the ocis_full deployment example: feat: copy the keycloak exapmle to full #12139
• Enhancement - Allow multiple objectClasses on group creation: Lao (lo) translation completed for ownCloud Infinite Scale on Transifex #12229
• Enhancement - Add SpaceEditorWithoutVersionsWithoutTrashbin space membership role: feat(graph): [OCISDEV-807] add SpaceEditorWithoutVersionsWithoutTrashbin role #12261
• Enhancement - Add vault capabilities to the OCS capabilities endpoint: feat: [OCISDEV-531] add vault capabilities to the OCS capabilities endpoint #12283
• Enhancement - Disable public link sharing for vault resources: feat: [OCISDEV-531] Disable public link sharing for vault resources #12321
• Enhancement - Update web-extension images in ocis_fuill: feat: add new image versions for web-extensions #12324
• Enhancement - Bump dependencies: chore: consolidated bumps and security updates #12325
• Enhancement - Add VaultMode permission: feat(settings): [OCISDEV-869] add VaultMode permission #12328
• Enhancement - Add vault themes: feat: [OCISDEV-710] add vault themes #12329
• Enhancement - Add ocis shares clean-corrupt-public-shares maintenance command: feat(ocis): [OCISDEV-877] add clean-corrupt-public-shares command #12494 @ashmitapaudel
• Enhancement - Harden OCM create share: fix: [OCISDEV-756] harden ocm create share #12496
• Enhancement - Clean up the deployment examples: feat: Clean up the deployment examples #12521 @ashmitapaudel
• Enhancement - Allow disabling the last sign-in timestamp update: feat(graph): allow disabling the last sign-in timestamp update #12522
• Enhancement - Add configurable software license and help page links: feat: [OCISDEV-948] add configurable software license and help page links #12528
• Enhancement - Configurable logo click-through URL: feat: [OCISDEV-950] make logo click-through URL configurable #12529 @ashmitapaudel
• Enhancement - Add option to disable public link sharing: Feat/ocisdev 949/disable direct sharing #12542 @ashmitapaudel
• Enhancement - Add option to disable direct (user/group) sharing: Feat/ocisdev 949/disable direct sharing #12542 @ashmitapaudel
• Enhancement - Bump Web to 12.3.3: [full-ci] Chore/bump version 12.3.3 web#13705
• Enhancement - Bump Web to 12.4.0: [full-ci] chore: bump version to 12.4.0 web#13809