Skip to content

opencloud

File Storage & Sync

OpenCloud is the open source platform for file management, sharing and collaboration. Simple and sovereign.

Go Latest v7.1.0 · 1d ago Security brief →

Recent releases

View all 16 releases →
No immediate action
v7.1.0 Mixed

Share-Manager migration + bug fixes + deps

Review required
v7.0.0 Breaking risk
RCE / SSRF RBAC Breaking upgrade

Space memberships, Sharing config, Thumbnail security

No immediate action
v6.2.0 Bug fix

Cache store defaults

v4.0.6 Bug fix

Minor fixes and improvements.

Full changelog

4.0.6 - 2026-04-29

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @dragonchaser, @kulmann, @rhafer

🐛 Bug Fixes

  • [stable-4.0] More graceful shutdown fixes [#2692]
v6.1.0 New feature
Security fixes
  • vite updated to v8.0.5
  • lodash-es updated to v4.18.1
Notable features
  • Redesigned share sidebar panel
  • Auto-play next audio file in preview
  • OIDC tenant verification for multi-tenancy
Full changelog

[!NOTE]
This is a rolling release. Learn here about the release types and lifecycle.

Releasenotes OpenCloud 6.1.0

6.1.0 - 2026-04-20

❤️ Thanks to all contributors! ❤️

@JammingBen, @ScharfViktor, @aduffeck, @dragonchaser, @pedropintosilva, @rhafer, @AlexAndBear, @FrankM64, @kulmann, @pascalwengerter, @pedropintosilva, @tammi-23, @tiran133, @aduffeck, @fschade

Opencloud

📚 Documentation

  • docs(web): deprecation notices for cern related feature flags [#2629]
  • Update CI badge URL in README.md [#2614]

🐛 Bug Fixes

  • Add a flag to the reindex command to force a full reindex [#2606]

📈 Enhancement

  • proxy: Allow mapping from an external tenant id to the internal id [#2569]
  • feat: enable EnableInsertRemoteFile WOPI flag for Collabora [#2555]
  • feat(multi-tenancy): verify tenant via OIDC claim [#2559]

📦️ Dependencies

  • Bump reva [#2611]
  • chore(idp): clean up js dependencies [#2607]
  • build(deps-dev): bump dotenv from 16.4.7 to 17.4.2 in /services/idp [#2603]
  • chore: bump IDP javascript dependencies [#2600]
  • build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 [#2587]
  • build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0 [#2586]
  • chore: bump reva to latest main [#2584]
  • build(deps): bump golang.org/x/image from 0.36.0 to 0.38.0 [#2581]
  • build(deps-dev): bump css-minimizer-webpack-plugin from 7.0.4 to 8.0.0 in /services/idp [#2551]
  • build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.13 [#2526]
  • build(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.15.0 [#2535]

Web

📈 Enhancement

  • change: exchange icons [#2385]
  • Merge header and file info in file sidebar [#2377]
  • feat: set global color-scheme [#2379]
  • feat: adjust mobile nav bar [#2372]
  • feat(preview): play next audio file automatically after current track… [#2351]
  • feat: active state for navigation in sidebar [#2374]
  • Scroll selected mail into view after reload [#2341]
  • Add contact details view [#2322]
  • perf: use standalone silent redirect instead of bootstrapping the app [#2333]
  • feat(design-system): add support for nuxt-link [#2318]
  • feat: add drop with truncated items to oc-breadcrumb [#2309]
  • feat: redesign share sidebar panel [#2293]
  • feat: handle UI_InsertFile postMessage from Collabora [#2270]
  • feat: focus global search bar via keyboard shortcut [#2274]
  • feat: redesign sidebar file/space details panel [#2273]
  • feat(design-system): redesign checkbox active state [#2266]
  • feat: move favorite resource indicator to resource name [#2261]
  • feat: add to favorites in preview app [#2251]

🐛 Bug Fixes

  • fix: favorites list, undo delte doesn't return item to the favorites … [#2382]
  • fix: extension action 'context' category [#2369]
  • fix: prevent scroll when opening resource context menu [#2375]
  • fix: mobile floating action button is too small [#2353]
  • fix(runtime): optimize auth flow with expired token [#2346]
  • fix(extension-sdk): add missing color roles [#2339]
  • fix: optimize route change announcer [#2328]
  • fix: prevent accidental space reset on public links [#2319]
  • fix: markdown editor: incorrect rendering of unordered lists [#2315]
  • Fix: #2262 accesssToken tripe S event [#2271]
  • fix: preview app doesn't show video and mp3 meta data preview in phot… [#2302]
  • fix(extension-sdk): do not run federation plugin in test mode [#2291]
  • fix: v-oc-tooltip not reactive [#2255]

✅ Tests

  • e2e-tests: favorites [#2370]

📦️ Dependencies

  • fix(deps): update dependency @casl/ability to v6.8.1 [#2396]
  • fix(deps): update dependency axios to v1.15.1 [#2392]
  • chore(deps): update dependency filesize to v11.0.16 [#2395]
  • chore(deps): update dependency fast-xml-parser to v5.7.1 [#2388]
  • fix(deps): update dependency @sentry/vue to v10.49.0 [#2381]
  • chore(deps): update node.js to v24.15.0 [#2380]
  • chore(deps): update devdependencies (non-major) - autoclosed [#2387]
  • fix(deps): update dependency uuid to v14 [#2393]
  • chore(deps): update devdependencies (non-major) [#2378]
  • chore(deps): update dependency @cucumber/cucumber to v12.8.1 [#2362]
  • chore(deps): update dependency fast-xml-parser to v5.6.0 [#2373]
  • chore(deps): update dependency dompurify to v3.4.0 [#2363]
  • chore(deps): update typescript-eslint monorepo to v8.58.2 [#2360]
  • chore(deps): update devdependencies (non-major) [#2358]
  • chore(deps): update tiptap monorepo to v3.22.3 [#2320]
  • chore(deps): update dependency globals to v17.5.0 [#2352]
  • chore(deps): update dependency fast-xml-parser to v5.5.12 [#2354]
  • chore(deps): update devdependencies (non-major) [#2350]
  • chore(deps): update dependency @types/node to v25.6.0 [#2338]
  • fix(deps): update dependency @unhead/vue to v3 [#2337]
  • fix(deps): update dependency @sentry/vue to v10.48.0 [#2336]
  • fix(deps): update dependency qs to v6.15.1 [#2327]
  • chore(deps): update devdependencies (non-major) [#2331]
  • chore(deps): update dependency fast-xml-parser to v5.5.11 [#2324]
  • fix(deps): update dependency axios to v1.15.0 [#2330]
  • chore(deps): update devdependencies (non-major) [#2325]
  • chore(deps): update traefik docker tag to v3.6.13 [#2316]
  • chore(deps): update typescript-eslint monorepo to v8.58.1 [#2317]
  • chore(deps): update devdependencies (non-major) [#2313]
  • chore(deps): update devdependencies (non-major) [#2307]
  • fix(deps): update dependency p-queue to v9.1.2 [#2308]
  • fix(deps): update dependency typescript to v6 [#2204]
  • chore(deps): update dependency @unhead/vue to v2.1.13 [#2303]
  • fix(deps): update dependency fuse.js to v7.3.0 [#2297]
  • chore(deps): update tiptap monorepo to v3.22.2 [#2285]
  • chore(deps): update dependency @panzoom/panzoom to v4.6.2 [#2295]
  • chore(deps): update dependency fast-xml-parser to v5.5.10 [#2299]
  • chore(deps): update dependency md-editor-v3 to v6.4.2 [#2304]
  • chore(deps): update devdependencies (non-major) [#2294]
  • fix(deps): update dependency vitest-mock-extended to v4 [#2306]
  • chore(deps): update dependency vite to v8.0.5 [security] [#2305]
  • chore(deps): update dependency vitest-mock-extended to v3.1.1 [#2289]
  • fix(deps): update dependency lodash-es to v4.18.1 [security] [#2282]
  • chore(deps): update tiptap monorepo to v3.22.0 [#2248]
  • chore(deps): update dependency @playwright/test to v1.59.1 [#2277]
  • fix(deps): update dependency p-queue to v9.1.1 [#2278]
  • chore(deps): update dependency @codemirror/view to v6.41.0 [#2275]
  • chore(deps): update devdependencies (non-major) [#2268]
  • fix(deps): update dependency @sentry/vue to v10.47.0 [#2269]
  • chore(deps): update dependency filesize to v11.0.15 [#2223]
  • fix(deps): update dependency axios to v1.14.0 [#2250]
  • chore(deps): update dependency @module-federation/vite to v1.13.6 [#2264]
  • chore(deps): update typescript-eslint monorepo to v8.58.0 [#2265]
  • chore(deps): update devdependencies (non-major) [#2257]

Reva

🐛 Bug Fixes

  • Fix race conditions in the hybrid metadata backend [#594]
  • fix: error handling in upload session cleanup [#582]

📈 Enhancement

  • experimental: add darwin watchfs support [#471]
  • Tracing [#596]

📦️ Dependencies

  • chore(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.51.0 [#591]
  • chore(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 [#586]
  • chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 in the go_modules group across 1 directory [#595]
  • chore(deps): bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2 [#589]
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0 [#585]
  • chore(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.65.0 to 0.68.0 [#584]
  • chore(deps): bump github.com/rs/zerolog from 1.34.0 to 1.35.0 [#583]
  • chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in the go_modules group across 1 directory [#581]
  • chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 [#580]
  • chore(deps): bump github.com/samber/slog-zerolog/v2 from 2.9.1 to 2.9.2 [#569]
  • chore(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 in the go_modules group across 1 directory [#579]
  • chore(deps): bump golang.org/x/image from 0.24.0 to 0.38.0 in the go_modules group across 1 directory [#577]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
5,543
Forks
208
Languages
Go Gherkin PHP

Community & Support

Beta — feedback welcome: [email protected]