This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
ReleasePort's take
Light signalThe v0.10.0 release updates node engines to the next LTS version and bumps several dependencies (semver, cookie, express, tar-fs, dockerode). It also applies multiple bug‑fixes including npm audit vulnerability fixes and a PHP curl handling deprecation fix.
Why it matters: Updating node engines aligns runtime environments with supported LTS releases; fixing npm audit vulnerabilities reduces security exposure. The PHP CURLOPT_BINARYTRANSFER deprecation fix is required for PHP 8.4 compatibility.
Summary
AI summaryUpdates chore, deps, and CI across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add SPDX header to all PHP files. Add SPDX header to all PHP files. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Low |
Add Nextcloud 29 support. Add Nextcloud 29 support. Source: granite4.1:30b@2026-06-10-audit Confidence: low |
— |
| Dependency | Low |
Update node engines to next LTS version. Update node engines to next LTS version. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Dependency | Low |
Bump semver from 5.7.1 to 5.7.2. Bump semver from 5.7.1 to 5.7.2. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Dependency | Low |
Bump cookie and express dependencies. Bump cookie and express dependencies. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Dependency | Low |
Bump tar-fs and dockerode dependencies. Bump tar-fs and dockerode dependencies. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Deprecation | Medium |
Remove reference to ILogger interface. Remove reference to ILogger interface. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Fix Markdown format in app description. Fix Markdown format in app description. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Fix npm audit vulnerabilities. Fix npm audit vulnerabilities. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Fix composer conflict. Fix composer conflict. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Fix Curl CURLOPT_BINARYTRANSFER deprecation for PHP 8.4. Fix Curl CURLOPT_BINARYTRANSFER deprecation for PHP 8.4. Source: llm_adapter@2026-06-10 Confidence: high |
— |
Full changelog
What's Changed
- chore: update node engines to next LTS by @nextcloud-command in https://github.com/nextcloud/social/pull/1795
- Fix Markdown format in app description by @ahangarha in https://github.com/nextcloud/social/pull/1799
- Modernize e2e tests by @artonge in https://github.com/nextcloud/social/pull/1748
- Create pr-feedback.yml by @artonge in https://github.com/nextcloud/social/pull/1807
- removing deprecated event by @ArtificialOwl in https://github.com/nextcloud/social/pull/1865
- Update README.md by @codesmith-emmy in https://github.com/nextcloud/social/pull/1880
- feat(deps): Add Nextcloud 29 support by @nickvergessen in https://github.com/nextcloud/social/pull/1870
- chore(CI): Adjust testing matrix for Nextcloud 29 on master by @nickvergessen in https://github.com/nextcloud/social/pull/1885
- Updating pr-feedback.yml workflow from template by @nextcloud-command in https://github.com/nextcloud/social/pull/1886
- chore: update workflows from templates by @nextcloud-command in https://github.com/nextcloud/social/pull/1875
- chore: update workflows from templates by @nextcloud-command in https://github.com/nextcloud/social/pull/1891
- chore: migrate reuse to toml by @AndyScherzinger in https://github.com/nextcloud/social/pull/1892
- Chore(deps): Bump semver from 5.7.1 to 5.7.2 by @dependabot[bot] in https://github.com/nextcloud/social/pull/1811
- Updating cypress.yml workflow from template by @nextcloud-command in https://github.com/nextcloud/social/pull/1804
- chore: Update icons to latest Material Symbols by @AndyScherzinger in https://github.com/nextcloud/social/pull/1904
- Add SPDX header to all PHP files by @AndyScherzinger in https://github.com/nextcloud/social/pull/1905
- Add SPDX header by @AndyScherzinger in https://github.com/nextcloud/social/pull/1906
- Add npm audit fix by @AndyScherzinger in https://github.com/nextcloud/social/pull/1910
- Update npm and node engines versions by @nextcloud-command in https://github.com/nextcloud/social/pull/1878
- [master] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/social/pull/1914
- chore: Remove reference to ILogger by @artonge in https://github.com/nextcloud/social/pull/1937
- [master] Fix npm audit by @nextcloud-command in https://github.com/nextcloud/social/pull/1938
- Chore(deps): Bump cookie and express by @dependabot[bot] in https://github.com/nextcloud/social/pull/1940
- fixing composer conflict by @ArtificialOwl in https://github.com/nextcloud/social/pull/1943
- [PHP 8.4] Fix: Curl
CURLOPT_BINARYTRANSFERdeprecated by @Ayesh in https://github.com/nextcloud/social/pull/1879 - chore(CI): Updating reuse.yml workflow from template by @nextcloud-command in https://github.com/nextcloud/social/pull/1958
- Chore(deps): Bump tar-fs and dockerode by @dependabot[bot] in https://github.com/nextcloud/social/pull/1967
- chore(CI): Updating pr-feedback.yml workflow from template by @nextcloud-command in https://github.com/nextcloud/social/pull/1962
- ci: update node.yml workflow from template by @nextcloud-command in https://github.com/nextcloud/social/pull/1966
- refactor(QueryBuilder): Port away from execute() by @CarlSchwan in https://github.com/nextcloud/social/pull/1989
- Fix Content-Type for ActivityPub requests by @driusan in https://github.com/nextcloud/social/pull/1987
- refactor: Port away from QueryException by @CarlSchwan in https://github.com/nextcloud/social/pull/1994
- New Social App by @SchBenedikt in https://github.com/nextcloud/social/pull/2002
New Contributors
- @ahangarha made their first contribution in https://github.com/nextcloud/social/pull/1799
- @codesmith-emmy made their first contribution in https://github.com/nextcloud/social/pull/1880
- @AndyScherzinger made their first contribution in https://github.com/nextcloud/social/pull/1892
- @Ayesh made their first contribution in https://github.com/nextcloud/social/pull/1879
- @driusan made their first contribution in https://github.com/nextcloud/social/pull/1987
- @SchBenedikt made their first contribution in https://github.com/nextcloud/social/pull/2002
Full Changelog: https://github.com/nextcloud/social/compare/v0.6.1...v0.10.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]