v10.1.3

Fixed

• Rate limit wopi endpoints by @elzody in #5616
• Only allow setting auth token types to request config access by @elzody in #5612
• Properly validate old timestamp by @elzody in #5609
• Allow server-side file reads in SecureViewWrapper by @chrip in #5591
• Mark wopi token as sensitive also on controller level by @nickvergessen in #5585
• Handle fopen() returning false for non-existent paths by @chrip in #5583
• Use oci 18 container by @elzody in #5580
• Check read permission before showing PDF edit action by @nfebe in #5562
• Hide sidebar in edit mode by @elzody in #5526
• Allow to leave edit mode by @mejo- in #5518
• Remove unneeded action by @elzody in #5410
• Stabilize save as test by @elzody in #5313
• Fix overlapping buttons in header by @silverkszlo in #5603
• Allow using regular document files as templates by @meven in #5548

Other

• Update nextcloud/ocp dependency by @nextcloud-command in #5593
• Bump phpseclib by @elzody in #5581
• Update nextcloud/ocp dependency by @nextcloud-command in #5569
• Bump ts-loader from 9.5.4 to 9.5.7 by @dependabot[bot] in #5541
• Bump cypress-split from 1.24.28 to 1.24.31 by @dependabot[bot] in #5505
• Update nextcloud/ocp dependency by @nextcloud-command in #5488

v9.0.6

Fixed

• Rate limit wopi endpoints by @elzody in #5615
• Only allow setting auth token types to request config access by @elzody in #5611
• Properly validate old timestamp by @elzody in #5608
• Allow server-side file reads in SecureViewWrapper by @chrip in #5590
• Handle fopen() returning false for non-existent paths by @chrip in #5584
• Check read permission before showing PDF edit action by @elzody in #5563
• Hide sidebar in edit mode by @elzody in #5525
• Allow to leave edit mode by @mejo- in #5517
• Fix overlapping buttons in header by @silverkszlo in #5604
• Allow using regular document files as templates by @meven in #5547

Other

• Fix npm audit by @nextcloud-command in #5596
• Update nextcloud/ocp dependency by @nextcloud-command in #5595
• Update nextcloud/ocp dependency by @nextcloud-command in #5570
• Update nextcloud/ocp dependency by @nextcloud-command in #5560
• Bump ts-loader from 9.5.4 to 9.5.7 by @dependabot[bot] in #5542
• Update nextcloud/ocp dependency by @nextcloud-command in #5534
• Update nextcloud/ocp dependency by @nextcloud-command in #5510
• Bump cypress-split from 1.24.28 to 1.24.31 by @dependabot[bot] in #5507
• Fix npm audit by @nextcloud-command in #5489

v8.7.9

Fixed

• Only allow setting auth token types to request config access by @elzody in #5610

Other

• Update nextcloud/ocp dependency by @nextcloud-command in #5433

v10.1.2

Fixed

• fix: Force hide viewer header after changed iframe z-index #5498

v9.0.5

Fixed

• fix: Force hide viewer header after changed iframe z-index #5497

v10.1.1

Added

• show share button for nonshareable docs by @emberfiend in #5456

Fixed

• Add accessKey to Open in local editor button by @codewithvk in #5480
• widen global templates restrictions by @elzody in #5476
• remove superfluous high z-index by @mejo- in #5470
• set sensible height for embedded widget by @mejo- in #5471

Other

• Dependency updates

v9.0.4

Fixed

• widen global templates restrictions by @elzody in #5477
• remove superfluous high z-index by @mejo- in #5469
• set sensible height for embedded widget by @mejo- in #5472
• drop beyond deprecated X-Frame-Options by @joshtrichards in #5466
• Check file existence before using save as by @juliusknorr in #5444

Other

• Dependency updates

v10.1.0

Added

• Implement AI Watermarking by @marcelklehr in #5411

Fixed

• Non-admins cannot upload/delete system config settings by @elzody in #5422
• Properly annotate settings controller by @elzody in #5417
• Properly check for lock wopi operations by @juliusknorr in #5415

Other

• Dependency updates

v9.0.3

Fixed

• Non-admins cannot upload/delete system config settings by @elzody in #5423
• Properly annotate settings controller by @elzody in #5419
• Properly check for lock wopi operations by @juliusknorr in #5413
• For now assume we have form filling if no version can be determined by @juliusknorr in #5384
• Properly work with non-numeric version ids by @juliusknorr in #5378
• Remove hasDrawSupport check that strips .odg mimetypes by @timar in #5375
• Emit files:node:updated event on UI_Save by @silverkszlo in #5363
• Register handler within init script by @susnux in #5355
• Drop dead code from ShareLinkListener by @joshtrichards in #5334
• Stabilize Save As test by @elzody in #5314
• Pass format to SaveAs by @Minion3665 in #5221

Other

• Dependency updates

v8.7.8

Fixed

• Non-admins cannot upload/delete system config settings by @elzody in #5424
• Properly annotate settings controller by @elzody in #5418
• Properly check for lock wopi operations by @juliusknorr in #5414
• For now assume we have form filling if no version can be determined by @juliusknorr in #5385
• Properly work with non-numeric version ids by @juliusknorr in #5379
• Remove hasDrawSupport check that strips .odg mimetypes by @timar in #5376
• Emit files:node:updated event on UI_Save by @silverkszlo in #5364
• Drop dead code from ShareLinkListener by @joshtrichards in #5333
• Stabilize save as test by @elzody in #5315
• Pass format to SaveAs by @Minion3665 in #5222

Other

• Dependency updates
• NPM audits