Share Audit Dashboard - Releases

Security

• Share deletion — single, bulk, orphan revoke and recipient revoke-all — now always goes through IShareManager instead of a raw SQL DELETE, so federated unshare (OCM), ShareDeletedEvent and provider-specific cleanup run; a direct DB delete is now only a documented fallback (owner account gone, provider app disabled), and a genuinely retryable failure (a locked file, an unreachable storage backend) is reported back as failed instead of being forced through that fallback.
• Bulk endpoints (revoke, orphan revoke, revoke-all for a recipient) are capped and chunked so an unbounded selection can no longer tie up a PHP worker for minutes; revoke-all for a recipient with a very large number of shares now runs in server-side batches of 500 instead of one synchronous request.
• The security-alerts cache is now invalidated as soon as a link is fixed or revoked, instead of only expiring after its normal TTL — the alerts view no longer shows an already-fixed item as still insecure right after acting on it.
• Minimum supported Nextcloud version raised to 31 — orphan-share revoke relies on IShareManager::getShareById()'s $onlyValid parameter, which does not exist on Nextcloud 30.
• The exposure score no longer treats a share type this version of the app doesn't recognize (e.g. one added in a future Nextcloud release) as safe — it's now weighted the same as an external share instead of falling back to internal, and shown as its own "Other" slice (with an explanatory tooltip) in the exposure breakdown whenever it's non-zero.
• The recipient drill-down's shares/revoke-all endpoints are now rate-limited, matching the same endpoint's search action.

Added

• Portuguese (Portugal) translation of the whole interface, plus build/l10n.py to regenerate the frontend l10n/*.js bundles from the .json sources and report missing or orphaned strings; l10n.py --check now also gates krankerl package.
• Security alerts: copy/open-in-Files actions on individual alerts, and a clearable active-filter indicator.
• All shares: a table caption describing the view.
• Personal view: an option to include link tokens in CSV export, with an explicit warning about what that means.
• Admin setting to turn the personal "My shares audit" page and its dashboard widget off instance-wide, for admins who want sharing audits to stay an admin-only concern.
• Two new configurable security-alert rules: a public link open for anonymous upload without a password (file drop, or full create+update access), and a native group share granting edit or reshare permission to a group above a configurable member-count threshold (default 20).
• The exposure/type "Other" bucket (share types this version doesn't recognize) now shows an explanatory tooltip on the dashboard's "Shares by type" chart and stat cards too, not just the exposure map.

Changed

• Personal view header, summary cards and table captions restyled to match the admin dashboard's look (icon cards, ·-separated header, consistent table styling).

Fixed

• Several UI strings introduced alongside the above were missing from l10n/*.json, so pt_PT users saw English text on the newest features.
• The "with expiration" / "without expiration" filter (All shares column filter, and the underlying flag used by exports) now treats an already-expired date as "without expiration" instead of counting it as still protected.