This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/owncloud/ocis](https://redirect.github.com/owncloud/ocis) |
major | `7.3.2` → `8.0.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>owncloud/ocis (docker.io/owncloud/ocis)</summary>

###
[`v8.0.0`](https://redirect.github.com/owncloud/ocis/blob/HEAD/CHANGELOG.md#Changelog-for-800-2026-02-13)

[Compare
Source](https://redirect.github.com/owncloud/ocis/compare/v7.3.2...v8.0.0)

The following sections list the changes for 8.0.0.

[8.0.0]:
https://redirect.github.com/owncloud/ocis/compare/v7.3.1...v8.0.0

#### Summary

- Bugfix - Fix user light creation:
[#&#8203;11765](https://redirect.github.com/owncloud/ocis/pull/11765)
- Bugfix - OCM Specification Compliance:
[#&#8203;11773](https://redirect.github.com/owncloud/ocis/pull/11773)
- Bugfix - Remove leading dot before checking disabled extension:
[#&#8203;11814](https://redirect.github.com/owncloud/ocis/pull/11814)
- Bugfix - Support pointer types in config environment variable
decoding:
[#&#8203;11815](https://redirect.github.com/owncloud/ocis/pull/11815)
- Bugfix - Replace obsolete docker image in the deployment example:
[#&#8203;11828](https://redirect.github.com/owncloud/ocis/pull/11828)
- Bugfix - Fix error code when a user can't disable a space:
[#&#8203;11845](https://redirect.github.com/owncloud/ocis/pull/11845)
- Bugfix - Fix Sharingroles:
[#&#8203;11898](https://redirect.github.com/owncloud/ocis/pull/11898)
- Bugfix - Fix the error handling for empty name on space update:
[#&#8203;11933](https://redirect.github.com/owncloud/ocis/pull/11933)
- Bugfix - Fix group creation in ocis-multi example:
[#&#8203;12019](https://redirect.github.com/owncloud/ocis/pull/12019)
- Change - Remove deprecated OCIS\_SHOW\_USER\_EMAIL\_IN\_RESULTS:
[#&#8203;11942](https://redirect.github.com/owncloud/ocis/pull/11942)
- Enhancement - Bump Reva:
[#&#8203;460](https://redirect.github.com/owncloud/reva/pull/460)
- Enhancement - Set Referrer-Policy to no-referrer:
[#&#8203;11722](https://redirect.github.com/owncloud/ocis/pull/11722)
- Enhancement - Bump Reva:
[#&#8203;11748](https://redirect.github.com/owncloud/ocis/pull/11748)
- Enhancement - Support disabling editors by extensions:
[#&#8203;11750](https://redirect.github.com/owncloud/ocis/pull/11750)
- Enhancement - Add CLI to move stuck uploads:
[#&#8203;11762](https://redirect.github.com/owncloud/ocis/pull/11762)
- Enhancement - Use externalID in Provisioning API:
[#&#8203;11799](https://redirect.github.com/owncloud/ocis/pull/11799)
- Enhancement - Add CLI to clean orphned grants:
[#&#8203;11804](https://redirect.github.com/owncloud/ocis/pull/11804)
- Enhancement - Bump Reva:
[#&#8203;11808](https://redirect.github.com/owncloud/ocis/pull/11808)
- Enhancement - Bump Web to v12.2.0:
[#&#8203;11834](https://redirect.github.com/owncloud/ocis/pull/11834)
- Enhancement - Introduce claims for multi-instance-ocis:
[#&#8203;11848](https://redirect.github.com/owncloud/ocis/pull/11848)
- Enhancement - Update the ocis\_full deployment example images:
[#&#8203;11860](https://redirect.github.com/owncloud/ocis/pull/11860)
- Enhancement - Implement brute force protection for public links:
[#&#8203;11864](https://redirect.github.com/owncloud/ocis/pull/11864)
- Enhancement - Update the ocis\_full deployment example traefik image:
[#&#8203;11867](https://redirect.github.com/owncloud/ocis/pull/11867)
- Enhancement - Added a graph endpoint alias:
[#&#8203;11871](https://redirect.github.com/owncloud/ocis/pull/11871)
- Enhancement - Force Strict-Transport-Security:
[#&#8203;11880](https://redirect.github.com/owncloud/ocis/pull/11880)
- Enhancement - Relocate Transifex resources:
[#&#8203;11889](https://redirect.github.com/owncloud/ocis/pull/11889)
- Enhancement - Update the ocis\_full deployment example images:
[#&#8203;11890](https://redirect.github.com/owncloud/ocis/pull/11890)
- Enhancement - Allow sharing between instances:
[#&#8203;11893](https://redirect.github.com/owncloud/ocis/pull/11893)
- Enhancement - Add photo EXIF metadata to search index and WebDAV
results:
[#&#8203;11912](https://redirect.github.com/owncloud/ocis/pull/11912)
- Enhancement - Update the traefik image for some deployment examples:
[#&#8203;11915](https://redirect.github.com/owncloud/ocis/pull/11915)
- Enhancement - Add users instances:
[#&#8203;11925](https://redirect.github.com/owncloud/ocis/pull/11925)
- Enhancement - Introduce external shares permission:
[#&#8203;11931](https://redirect.github.com/owncloud/ocis/pull/11931)
- Enhancement - Update to go 1.25:
[#&#8203;12011](https://redirect.github.com/owncloud/ocis/pull/12011)
- Enhancement - Bump Web to 12.3.1:
[#&#8203;12016](https://redirect.github.com/owncloud/ocis/pull/12016)
- Enhancement - Bump Web to 12.3.0:
[#&#8203;13519](https://redirect.github.com/owncloud/web/pull/13519)

#### Details

- Bugfix - Fix user light creation:
[#&#8203;11765](https://redirect.github.com/owncloud/ocis/pull/11765)

When trying to switch a user to user light before they logged in for the
first
time, an error would occur. The server now correctly handles this case
and
  allows switching to user light even before the first login.

  [#&#8203;11765](https://redirect.github.com/owncloud/ocis/pull/11765)

- Bugfix - OCM Specification Compliance:
[#&#8203;11773](https://redirect.github.com/owncloud/ocis/pull/11773)

  OCM Specification Compliance

  [#&#8203;11773](https://redirect.github.com/owncloud/ocis/pull/11773)

- Bugfix - Remove leading dot before checking disabled extension:
[#&#8203;11814](https://redirect.github.com/owncloud/ocis/pull/11814)

We have fixed a bug where the leading dot was not removed before
checking if an
  extension is disabled. The original behavior would have caused the
  `COLLABORATION_WOPI_DISABLED_EXTENSIONS` config to be ignored.

  [#&#8203;11814](https://redirect.github.com/owncloud/ocis/pull/11814)

- Bugfix - Support pointer types in config environment variable
decoding:
[#&#8203;11815](https://redirect.github.com/owncloud/ocis/pull/11815)

Added support for decoding pointer types (\*bool, \*int, \*string, etc.)
in the
envdecode package, allowing configuration fields to distinguish between
unset
(nil) and explicitly set values. Changed `WEB_OPTION_EMBED_ENABLED` from
string
  to \*bool type to enable explicit false values.

  [#&#8203;11815](https://redirect.github.com/owncloud/ocis/pull/11815)

- Bugfix - Replace obsolete docker image in the deployment example:
[#&#8203;11828](https://redirect.github.com/owncloud/ocis/pull/11828)

In the ocis\_ldap deployment example, we were using the bitnami/openldap
docker
image. This image isn't available any longer, so the example couldn't be
  deployed as intended.

We've replaced the docker image with the osixia/openldap image and we've
  adjusted some of the configuration of the openldap image.

  [#&#8203;11828](https://redirect.github.com/owncloud/ocis/pull/11828)

- Bugfix - Fix error code when a user can't disable a space:
[#&#8203;11845](https://redirect.github.com/owncloud/ocis/pull/11845)

Previously, if the user couldn't disable a space due to wrong
permissions, the
request returned a 404 error code, as if the space wasn't found even
though the
  space was visible. Now it will return the expected 403 error code.

  [#&#8203;11845](https://redirect.github.com/owncloud/ocis/pull/11845)

- Bugfix - Fix Sharingroles:
[#&#8203;11898](https://redirect.github.com/owncloud/ocis/pull/11898)

  Sharing roles were inconsistent, now they are fixed.

  [#&#8203;11898](https://redirect.github.com/owncloud/ocis/pull/11898)

- Bugfix - Fix the error handling for empty name on space update:
[#&#8203;11933](https://redirect.github.com/owncloud/ocis/pull/11933)

  Fix the error handling for empty name on space update.

[#&#8203;11887](https://redirect.github.com/owncloud/ocis/issues/11887)
  [#&#8203;11933](https://redirect.github.com/owncloud/ocis/pull/11933)

- Bugfix - Fix group creation in ocis-multi example:
[#&#8203;12019](https://redirect.github.com/owncloud/ocis/pull/12019)

  Group creation was not working in ocis.ocm instance

  [#&#8203;12019](https://redirect.github.com/owncloud/ocis/pull/12019)

- Change - Remove deprecated OCIS\_SHOW\_USER\_EMAIL\_IN\_RESULTS:
[#&#8203;11942](https://redirect.github.com/owncloud/ocis/pull/11942)

Deprecated OCIS\_SHOW\_USER\_EMAIL\_IN\_RESULTS environment variable was
removed from
frontend service config. Use OCIS\_USER\_SEARCH\_DISPLAYED\_ATTRIBUTES
instead to
  control which user attributes are displayed in search results.

  [#&#8203;11942](https://redirect.github.com/owncloud/ocis/pull/11942)

- Enhancement - Bump Reva:
[#&#8203;460](https://redirect.github.com/owncloud/reva/pull/460)

This updates the ownCloud Reva dependency to include brute force
protection for
public links. The feature implements rate-limiting that blocks access to
password-protected public shares after exceeding a configurable maximum
number
  of failed authentication attempts within a time window.

[owncloud/reva#460](https://redirect.github.com/owncloud/reva/pull/460)

- Enhancement - Set Referrer-Policy to no-referrer:
[#&#8203;11722](https://redirect.github.com/owncloud/ocis/pull/11722)

  Change the Referrer-Policy from 'strict-origin-when-cross-origin' to
  'no-referrer' to enhance user privacy and security.

Previously, the origin was sent on cross-origin requests. This change
completely
removes the Referrer header from all outgoing requests, preventing any
potential
leakage of browsing information to third parties. This is a more robust
approach
  to protecting user privacy.

  [#&#8203;11722](https://redirect.github.com/owncloud/ocis/pull/11722)

- Enhancement - Bump Reva:
[#&#8203;11748](https://redirect.github.com/owncloud/ocis/pull/11748)

  This updates the ownCloud Reva dependency to commit
  `82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45`. Changelog:

[owncloud/reva@`cb98fe5...82c22e9`](https://redirect.github.com/owncloud/reva/compare/cb98fe521deb55ae339d6ddc4a4b60d6d4da9e14...82c22e954c1cdabb62a14fbe5c1a4ec3e1dabd45)

  [#&#8203;11748](https://redirect.github.com/owncloud/ocis/pull/11748)

- Enhancement - Support disabling editors by extensions:
[#&#8203;11750](https://redirect.github.com/owncloud/ocis/pull/11750)

We have extended the configuration of collaboration service to support
disabling
  editors for specific file extensions.

  [#&#8203;11750](https://redirect.github.com/owncloud/ocis/pull/11750)

- Enhancement - Add CLI to move stuck uploads:
[#&#8203;11762](https://redirect.github.com/owncloud/ocis/pull/11762)

In some cases of saturated disk usage ocis metadata may get stuck. This
command
  relieves this case.

  [#&#8203;11762](https://redirect.github.com/owncloud/ocis/pull/11762)

- Enhancement - Use externalID in Provisioning API:
[#&#8203;11799](https://redirect.github.com/owncloud/ocis/pull/11799)

This PR adds the externalID as optional parameter to the Provisioning
API that
can be used as the primary identifier. It also contains a switch to
enable this
  setting.

  [#&#8203;11799](https://redirect.github.com/owncloud/ocis/pull/11799)

- Enhancement - Add CLI to clean orphned grants:
[#&#8203;11804](https://redirect.github.com/owncloud/ocis/pull/11804)

Add CLI `ocis shares clean-orphaned-grants` to find and optionally
remove
  storage grants without corresponding share-manager entries.

  [#&#8203;11804](https://redirect.github.com/owncloud/ocis/pull/11804)

- Enhancement - Bump Reva:
[#&#8203;11808](https://redirect.github.com/owncloud/ocis/pull/11808)

  This updates the ownCloud Reva dependency to commit
  `a122a9538794530267743edfd5dc67b48aa90325`. Changelog:

[owncloud/reva@`751223b...a122a95`](https://redirect.github.com/owncloud/reva/compare/751223b32d4852c73a43388f6f55308c2065afeb...a122a9538794530267743edfd5dc67b48aa90325)

  [#&#8203;11808](https://redirect.github.com/owncloud/ocis/pull/11808)

- Enhancement - Bump Web to v12.2.0:
[#&#8203;11834](https://redirect.github.com/owncloud/ocis/pull/11834)

- Bugfix
[owncloud/web#13177](https://redirect.github.com/owncloud/web/pull/13177):
Fix
    copying public link and password on Safari - Bugfix

[owncloud/web#13198](https://redirect.github.com/owncloud/web/pull/13198):
Fix incorrect
    translations - Bugfix

[owncloud/web#13203](https://redirect.github.com/owncloud/web/pull/13203):
Remove
    duplicate resource links - Bugfix

[owncloud/web#13213](https://redirect.github.com/owncloud/web/pull/13213):
Do not disable
    sharing of resources when managing spaces via claims - Bugfix

[owncloud/web#13223](https://redirect.github.com/owncloud/web/pull/13223):
Fix spinner
    loading continuously when resource is deleted - Bugfix

[owncloud/web#13233](https://redirect.github.com/owncloud/web/pull/13233):
Include Ubuntu
font - Bugfix
[owncloud/web#13253](https://redirect.github.com/owncloud/web/pull/13253):
    External share ID fallback - Bugfix

[owncloud/web#13274](https://redirect.github.com/owncloud/web/pull/13274):
Handle file
    loading error - Bugfix

[owncloud/web#13329](https://redirect.github.com/owncloud/web/pull/13329):
Use sticky
    header composable in deleted files - Enhancement

[owncloud/web#13168](https://redirect.github.com/owncloud/web/pull/13168):
Hide trashed
    spaces - Enhancement

[owncloud/web#13169](https://redirect.github.com/owncloud/web/pull/13169):
Drop beta
    badge from GeoGebra pinboards - Enhancement

[owncloud/web#13172](https://redirect.github.com/owncloud/web/pull/13172):
Add Excalidraw
    file icon - Enhancement

[owncloud/web#13197](https://redirect.github.com/owncloud/web/pull/13197):
Add Visio file
    icons - Enhancement

[owncloud/web#13224](https://redirect.github.com/owncloud/web/pull/13224):
Add table
    caption - Enhancement

[owncloud/web#13235](https://redirect.github.com/owncloud/web/pull/13235):
Use API groups
    search in admin settings - Enhancement

[owncloud/web#13296](https://redirect.github.com/owncloud/web/pull/13296):
Embed mode
    share links with password

  [#&#8203;11834](https://redirect.github.com/owncloud/ocis/pull/11834)
  <https://github.com/owncloud/web/releases/tag/v12.2.0>

- Enhancement - Introduce claims for multi-instance-ocis:
[#&#8203;11848](https://redirect.github.com/owncloud/ocis/pull/11848)

Reads claims from the oidc token to add users to ocis with specific
roles.

  [#&#8203;11848](https://redirect.github.com/owncloud/ocis/pull/11848)

- Enhancement - Update the ocis\_full deployment example images:
[#&#8203;11860](https://redirect.github.com/owncloud/ocis/pull/11860)

  - Traefik    3.6.2
  - Collabora  27.4.7.3
  - OnlyOffice 9.2.0
  - Mailpit    1.28.0

  [#&#8203;11860](https://redirect.github.com/owncloud/ocis/pull/11860)

- Enhancement - Implement brute force protection for public links:
[#&#8203;11864](https://redirect.github.com/owncloud/ocis/pull/11864)

Public links will be protected by default, allowing up to 5 wrong
password
attempts per hour. If such rate is exceeded, the link will be blocked
for all
the users until the failure rate goes below the configured threshold (5
failures
  per hour by default, as said).

The failure rate is configurable, so it can be 10 failures each 2 hours
or 3
  failures per minute.

  [#&#8203;11864](https://redirect.github.com/owncloud/ocis/pull/11864)
[owncloud/reva#460](https://redirect.github.com/owncloud/reva/pull/460)

- Enhancement - Update the ocis\_full deployment example traefik image:
[#&#8203;11867](https://redirect.github.com/owncloud/ocis/pull/11867)

  - Traefik: 3.6.4
  - Traefik fix for Collabora

  [#&#8203;11867](https://redirect.github.com/owncloud/ocis/pull/11867)

- Enhancement - Added a graph endpoint alias:
[#&#8203;11871](https://redirect.github.com/owncloud/ocis/pull/11871)

We added a graph endpoint alias that uses the unified roles instead of
cs3 roles

  [#&#8203;11871](https://redirect.github.com/owncloud/ocis/pull/11871)

- Enhancement - Force Strict-Transport-Security:
[#&#8203;11880](https://redirect.github.com/owncloud/ocis/pull/11880)

Added `PROXY_FORCE_STRICT_TRANSPORT_SECURITY` environment variable to
force
emission of `Strict-Transport-Security` header on all responses,
including plain
HTTP requests when TLS is terminated upstream. Useful when oCIS is
deployed
  behind a proxy.

  [#&#8203;11880](https://redirect.github.com/owncloud/ocis/pull/11880)

- Enhancement - Relocate Transifex resources:
[#&#8203;11889](https://redirect.github.com/owncloud/ocis/pull/11889)

The resources for services with translations are relocated in Transifex
from
owncloud to owncloud-web. Now all ocis related resources are in one
project.

  [#&#8203;11889](https://redirect.github.com/owncloud/ocis/pull/11889)

- Enhancement - Update the ocis\_full deployment example images:
[#&#8203;11890](https://redirect.github.com/owncloud/ocis/pull/11890)

  - Traefic:   v3.6.6
  - Collabora: 25.04.8.1.1
  - Onlyoffice: 9.2.1.1

  [#&#8203;11890](https://redirect.github.com/owncloud/ocis/pull/11890)

- Enhancement - Allow sharing between instances:
[#&#8203;11893](https://redirect.github.com/owncloud/ocis/pull/11893)

  In Multi-Instance ocis it is now possible to share between instances.

  [#&#8203;11893](https://redirect.github.com/owncloud/ocis/pull/11893)

- Enhancement - Add photo EXIF metadata to search index and WebDAV
results:
[#&#8203;11912](https://redirect.github.com/owncloud/ocis/pull/11912)

We've added support for photo metadata fields in the Bleve search index
and
WebDAV REPORT responses. This enables photo gallery applications to
efficiently
  query photos by their EXIF metadata and display camera information.

  The following photo metadata fields are now indexed and searchable: -
`photo.takenDateTime` - When the photo was taken (supports date range
queries) -
`photo.cameraMake` - Camera manufacturer (e.g., Canon, Nikon, Samsung) -
`photo.cameraModel` - Camera model name - `photo.fNumber` - Aperture
f-stop
value - `photo.focalLength` - Focal length in millimeters - `photo.iso`
- ISO
  sensitivity - `photo.orientation` - Image orientation -
  `photo.exposureNumerator` - Exposure time numerator (for shutter speed
calculation) - `photo.exposureDenominator` - Exposure time denominator
(for
  shutter speed calculation)

GPS location data is also included when available: -
`photo.location.latitude` -
  GPS latitude - `photo.location.longitude` - GPS longitude -
  `photo.location.altitude` - GPS altitude

These fields are returned in WebDAV search results using the
`oc:photo-*`
property namespace, allowing web extensions to build photo timeline
views,
  filter by camera, or show photos on a map.

  [#&#8203;11912](https://redirect.github.com/owncloud/ocis/pull/11912)

- Enhancement - Update the traefik image for some deployment examples:
[#&#8203;11915](https://redirect.github.com/owncloud/ocis/pull/11915)

  - Traefik: 3.6.6 --> 3.6.7

  [#&#8203;11915](https://redirect.github.com/owncloud/ocis/pull/11915)

- Enhancement - Add users instances:
[#&#8203;11925](https://redirect.github.com/owncloud/ocis/pull/11925)

The user endpoint now returns the instances that the user is either a
member or
  a guest of and the cross instance reference.

  [#&#8203;11925](https://redirect.github.com/owncloud/ocis/pull/11925)

- Enhancement - Introduce external shares permission:
[#&#8203;11931](https://redirect.github.com/owncloud/ocis/pull/11931)

Introduces a permission allowing to share between instances in
multi-instance
ocis. This permission is by default added to the admin and space-admin
role.

  [#&#8203;11931](https://redirect.github.com/owncloud/ocis/pull/11931)

- Enhancement - Update to go 1.25:
[#&#8203;12011](https://redirect.github.com/owncloud/ocis/pull/12011)

  We have updated go to version 1.25 and alpine to version 3.23.3

  [#&#8203;12011](https://redirect.github.com/owncloud/ocis/pull/12011)
  [#&#8203;12004](https://redirect.github.com/owncloud/ocis/pull/12004)

- Enhancement - Bump Web to 12.3.1:
[#&#8203;12016](https://redirect.github.com/owncloud/ocis/pull/12016)

Bugfix
[owncloud/web#13553](https://redirect.github.com/owncloud/web/pull/13553):
Search
  Text Overalps With Search Icon In The Search Bar

  [#&#8203;12016](https://redirect.github.com/owncloud/ocis/pull/12016)
  <https://github.com/owncloud/web/releases/tag/v12.3.1>

- Enhancement - Bump Web to 12.3.0:
[#&#8203;13519](https://redirect.github.com/owncloud/web/pull/13519)

Bugfix
[owncloud/web#13406](https://redirect.github.com/owncloud/web/pull/13406):
Prevent
  overlapping search content Bugfix

[owncloud/web#13415](https://redirect.github.com/owncloud/web/pull/13415)
Filter only
  personal trashed spaces Enhancement
[owncloud/web#5847](https://redirect.github.com/owncloud/web/pull/5847)
Dynamic
  theme-color meta tag based on loaded theme Enhancement

[owncloud/web#13412](https://redirect.github.com/owncloud/web/pull/13412)
Use beta
  endpoint for single drive operations Enhancement

[owncloud/web#13426](https://redirect.github.com/owncloud/web/pull/13426)
Add crash page
  Enhancement

[owncloud/web#13426](https://redirect.github.com/owncloud/web/pull/13426)Catch
spaces
  loading error Enhancement

[owncloud/web#13485](https://redirect.github.com/owncloud/web/pull/13485)Drop
custom
  share filters Enhancement

[owncloud/web#13499](https://redirect.github.com/owncloud/web/pull/13499)Add
  cross-instance reference Enhancement

[owncloud/web#13500](https://redirect.github.com/owncloud/web/pull/13500)Add
instance
  switcher


[owncloud/web#13519](https://redirect.github.com/owncloud/web/pull/13519)
  <https://github.com/owncloud/web/releases/tag/v12.3.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNS4zIiwidXBkYXRlZEluVmVyIjoiNDMuMTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9tYWpvciJdfQ==-->