This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryCleanup stale sessions, improve user deletion handling and update dependencies across deps, actions, and sessions modules.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Updates extendable-media-recorder-wav-encoder from 7.0.137 to 7.0.139. Updates extendable-media-recorder-wav-encoder from 7.0.137 to 7.0.139. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updates @rspack/cli from 1.7.11 to 1.7.12 (dev dependency). Updates @rspack/cli from 1.7.11 to 1.7.12 (dev dependency). Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updates libphonenumber-js from 1.13.6 to 1.13.7. Updates libphonenumber-js from 1.13.6 to 1.13.7. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updates extendable-media-recorder from 9.2.37 to 9.2.38. Updates extendable-media-recorder from 9.2.37 to 9.2.38. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updates @rspack/core from 1.7.11 to 1.7.12 (dev dependency). Updates @rspack/core from 1.7.11 to 1.7.12 (dev dependency). Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes exposing chunked recording upload only when sharing is allowed. Fixes exposing chunked recording upload only when sharing is allowed. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes creation of conversations as System instead of guest for external calls. Fixes creation of conversations as System instead of guest for external calls. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes cleanup of stale sessions on deletion. Fixes cleanup of stale sessions on deletion. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Medium |
Fixes cleanup on user deletion. Fixes cleanup on user deletion. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Medium |
Fixes potential null reference in Circle getBasedOn. Fixes potential null reference in Circle getBasedOn. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Low |
Cleans up stale sessions on deletion. Cleans up stale sessions on deletion. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Performs cleanup when a user is deleted. Performs cleanup when a user is deleted. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Handles possible null result from Circle getBasedOn. Handles possible null result from Circle getBasedOn. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Changed
- Update dependencies
Fixed
What's Changed
- [stable32] ci(actions): Update workflow templates from organization template repository by @nextcloud-command in https://github.com/nextcloud/spreed/pull/18476
- [stable32] fix(user): Clean up on user deletion by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18481
- [stable32] chore(deps): bump @nextcloud/eslint-config library to v9.0.0 by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18484
- [stable32] fix(sessions): Cleanup stale sessions by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18501
- [stable32] fix(recording): Only expose chunked recording upload when sharing is allowed by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18519
- [stable32] fix(external-calls): Create conversations as System instead of guest by @nickvergessen in https://github.com/nextcloud/spreed/pull/18513
- [stable32] build(deps): Bump extendable-media-recorder-wav-encoder from 7.0.137 to 7.0.139 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18536
- [stable32] build(deps-dev): Bump @rspack/cli from 1.7.11 to 1.7.12 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18538
- [stable32] build(deps): Bump libphonenumber-js from 1.13.6 to 1.13.7 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18539
- build(deps-dev): Bump @rspack/core from 1.7.11 to 1.7.12 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18535
- build(deps): Bump extendable-media-recorder from 9.2.37 to 9.2.38 by @dependabot[bot] in https://github.com/nextcloud/spreed/pull/18537
- [stable32] Update nextcloud/ocp dependency by @nextcloud-command in https://github.com/nextcloud/spreed/pull/18556
- [stable32] ci(actions): Update workflow templates from organization template repository by @nextcloud-command in https://github.com/nextcloud/spreed/pull/18560
- [stable32] fix(recording): Improve documentation for chunked-upload and fix share expiration by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18562
- [stable32] ci(actions): Update workflow templates from organization template repository by @nextcloud-command in https://github.com/nextcloud/spreed/pull/18575
- [stable32] fix: Circle getBasedOn can be null by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18594
- [stable32] chore(release): Changelog for v22.0.15 by @backportbot[bot] in https://github.com/nextcloud/spreed/pull/18602
Full Changelog: https://github.com/nextcloud/spreed/compare/v22.0.14...v22.0.15
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]