Skip to content

chore: bump version to 2.4.2 - #370

Closed
oc-tmueller wants to merge 1 commit into
masterfrom
release/2.4.2
Closed

oc-tmueller wants to merge 1 commit into
masterfrom
release/2.4.2

Conversation

@oc-tmueller

Copy link
Copy Markdown
Contributor

Prepares the ownCloud 11 security release for #365 (OC10-147), which is merged on master but unreleased.

  • appinfo/info.xml: 2.4.12.4.2
  • CHANGELOG.md: promotes the ## [Unreleased] entry into ## [2.4.2] - 2026-09-11, keeping the empty [Unreleased] heading and adding the [2.4.2] compare link - same shape as chore: bump version to 2.4.1 #359 (the 2.4.1 bump)

No code change. The date is set to today - adjust it if the merge slips. release.yml refuses to release unless the tag minus v equals <version>, so this has to merge before v2.4.2 is tagged.

The 10.x side

The same fix is being backported to the 2.3 line in #367#368#369. Worth knowing: release-2.3.4 had no verifyAudience() at all - #356 was never backported - so v2.3.5 is the first 10.x release to close OC10-115 as well as OC10-147, while this release only adds OC10-147 on top of v2.4.1.

Follow-ups, not in this PR

  • marketplace upload of the resulting openidconnect.tar.gz
  • a GHSA advisory, which has to cover both lines for OC10-115

Releases the introspection-branch audience check from #365 on the
ownCloud 11 line.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
@oc-tmueller
oc-tmueller requested a review from a team as a code owner September 11, 2026 09:01
@oc-tmueller

Copy link
Copy Markdown
Contributor Author

Superseded by #372, for the same reason as #369#371: release/2.4.2 matches the org ruleset as a protected release branch, so the branch is frozen after its first push. #372 carries the identical tree on chore/bump-2.4.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant