diff --git a/CHANGELOG.md b/CHANGELOG.md index 4a3b969636e..2e87ff651f9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,6 @@ # Table of Contents +* [Changelog for 8.0.8](#changelog-for-808-2026-08-20) * [Changelog for 8.0.7](#changelog-for-807-2026-07-31) * [Changelog for 8.0.6](#changelog-for-806-2026-07-15) * [Changelog for 8.0.5](#changelog-for-805-2026-06-18) @@ -66,6 +67,60 @@ * [Changelog for 1.1.0](#changelog-for-110-2021-01-22) * [Changelog for 1.0.0](#changelog-for-100-2020-12-17) +# Changelog for [8.0.8] (2026-08-20) + +The following sections list the changes for 8.0.8. + +[8.0.8]: https://github.com/owncloud/ocis/compare/v8.0.7...v8.0.8 + +## Summary + +* Security - Bump golang.org/x/image to v0.45.0: [#12808](https://github.com/owncloud/ocis/pull/12808) +* Bugfix - Cache LDAP instance mapper lookups: [#12823](https://github.com/owncloud/ocis/pull/12823) +* Bugfix - Fix share metadata corruption during concurrent share operations: [#12621](https://github.com/owncloud/ocis/pull/12621) +* Enhancement - Add TLS support for NATS store and registry connections: [#12765](https://github.com/owncloud/ocis/pull/12765) + +## Details + +* Security - Bump golang.org/x/image to v0.45.0: [#12808](https://github.com/owncloud/ocis/pull/12808) + + Upgraded golang.org/x/image from v0.44.0 to v0.45.0 to address + GO-2026-6222: excessive memory allocation during VP8L decoding. + + https://github.com/owncloud/ocis/pull/12808 + +* Bugfix - Cache LDAP instance mapper lookups: [#12823](https://github.com/owncloud/ocis/pull/12823) + + In multi-instance deployments, resolving a user's instance name/ID during + `GET /graph/v1.0/users` (and group member expansion) issued a fresh, uncached + LDAP search per instance/guest attribute value on every request. Under load + this multiplied into large numbers of redundant LDAP round-trips per page of + users, saturating the LDAP connection pool and causing request timeouts. The + LDAP identity backend now caches instance mapper lookups, including negative + (not-found) results, for a configurable TTL + (`OCIS_LDAP_INSTANCE_MAPPER_CACHE_TTL`, default 60s). + + https://github.com/owncloud/ocis/pull/12823 + +* Bugfix - Fix share metadata corruption during concurrent share operations: [#12621](https://github.com/owncloud/ocis/pull/12621) + + When multiple sharing service replicas processed share operations concurrently + for the same user, the share metadata could become corrupted with references to + missing data, making all shares inaccessible to that user. The received share + cache now uses compare-and-swap (etag) validation to detect concurrent writes + and retries gracefully, preventing metadata corruption. + + https://github.com/owncloud/ocis/pull/12621 + +* Enhancement - Add TLS support for NATS store and registry connections: [#12765](https://github.com/owncloud/ocis/pull/12765) + + All `nats-js-kv` store, cache, and service registry connections now support + TLS. Configure via `OCIS_CACHE_ENABLE_TLS`, `OCIS_PERSISTENT_STORE_ENABLE_TLS`, + and `MICRO_REGISTRY_ENABLE_TLS`, with corresponding `*_TLS_INSECURE` and + `*_TLS_ROOT_CA_CERTIFICATE` variants per connection type. + + https://github.com/owncloud/ocis/pull/12765 + # Changelog for [8.0.7] (2026-07-31) The following sections list the changes for 8.0.7. diff --git a/changelog/unreleased/bugfix-ldap-instance-mapper-cache.md b/changelog/8.0.8_2026-08-20/bugfix-ldap-instance-mapper-cache.md similarity index 93% rename from changelog/unreleased/bugfix-ldap-instance-mapper-cache.md rename to changelog/8.0.8_2026-08-20/bugfix-ldap-instance-mapper-cache.md index 112a04c2a55..706410f1500 100644 --- a/changelog/unreleased/bugfix-ldap-instance-mapper-cache.md +++ b/changelog/8.0.8_2026-08-20/bugfix-ldap-instance-mapper-cache.md @@ -8,3 +8,5 @@ users, saturating the LDAP connection pool and causing request timeouts. The LDAP identity backend now caches instance mapper lookups, including negative (not-found) results, for a configurable TTL (`OCIS_LDAP_INSTANCE_MAPPER_CACHE_TTL`, default 60s). + +https://github.com/owncloud/ocis/pull/12823 \ No newline at end of file diff --git a/changelog/unreleased/bugfix-share-metadata-corruption-concurrent.md b/changelog/8.0.8_2026-08-20/bugfix-share-metadata-corruption-concurrent.md similarity index 100% rename from changelog/unreleased/bugfix-share-metadata-corruption-concurrent.md rename to changelog/8.0.8_2026-08-20/bugfix-share-metadata-corruption-concurrent.md diff --git a/changelog/unreleased/enhancement-nats-tls.md b/changelog/8.0.8_2026-08-20/enhancement-nats-tls.md similarity index 100% rename from changelog/unreleased/enhancement-nats-tls.md rename to changelog/8.0.8_2026-08-20/enhancement-nats-tls.md diff --git a/changelog/unreleased/security-bump-x-image-vp8l.md b/changelog/8.0.8_2026-08-20/security-bump-x-image-vp8l.md similarity index 100% rename from changelog/unreleased/security-bump-x-image-vp8l.md rename to changelog/8.0.8_2026-08-20/security-bump-x-image-vp8l.md diff --git a/ocis-pkg/version/version.go b/ocis-pkg/version/version.go index b9e7a093f21..47248fe24fe 100644 --- a/ocis-pkg/version/version.go +++ b/ocis-pkg/version/version.go @@ -16,7 +16,7 @@ var ( // LatestTag is the latest released version plus the dev meta version. // Will be overwritten by the release pipeline // Needs a manual change for every tagged release - LatestTag = "8.0.7" + LatestTag = "8.0.8" // Date indicates the build date. // This has been removed, it looks like you can only replace static strings with recent go versions diff --git a/sonar-project.properties b/sonar-project.properties index 5117dc7ef04..09079c68482 100644 --- a/sonar-project.properties +++ b/sonar-project.properties @@ -2,7 +2,7 @@ sonar.projectKey=owncloud_ocis sonar.organization=owncloud-1 sonar.projectName=ocis -sonar.projectVersion=8.0.7 +sonar.projectVersion=8.0.8 sonar.host.url=https://sonarcloud.io # =====================================================