Skip to content

chore: bump version to 2.4.2 - #372

Open
oc-tmueller wants to merge 1 commit into
masterfrom
chore/bump-2.4.2
Open

oc-tmueller wants to merge 1 commit into
masterfrom
chore/bump-2.4.2

Conversation

@oc-tmueller

Copy link
Copy Markdown
Contributor

Prepares the ownCloud 11 security release for #365 (OC10-147), which is merged on master but unreleased. Replaces #370 - see the note at the bottom.

  • appinfo/info.xml: 2.4.12.4.2
  • CHANGELOG.md: promotes the ## [Unreleased] entry into ## [2.4.2] - 2026-09-11, keeping the empty [Unreleased] heading and adding the [2.4.2] compare link - same shape as chore: bump version to 2.4.1 #359 (the 2.4.1 bump)

No code change. The date is set to today - adjust it if the merge slips. release.yml refuses to release unless the tag minus v equals <version>, so this has to merge before v2.4.2 is tagged.

The 10.x side

The same fix is being backported to the 2.3 line in #367#368#371. Worth knowing: release-2.3.4 had no verifyAudience() at all - #356 was never backported - so v2.3.5 is the first 10.x release to close OC10-115 as well as OC10-147, while this release only adds OC10-147 on top of v2.4.1.

Tag v2.3.5 before v2.4.2 if both go out together, so the oc11 release ends up as GitHub's "Latest" (releases are ordered by date - today v2.3.4 holds that label).

Why not #370

#370 used the branch name release/2.4.2, which the org ruleset matches as a protected release branch (deletion, non_fast_forward, required_signatures, pull_request), so no further commit could be pushed to it - not even a fast-forward - which makes it useless for review. Renamed to chore/bump-2.4.2; same tree, same single commit.

Follow-ups, not in this PR

  • marketplace upload of the resulting openidconnect.tar.gz
  • a GHSA advisory, which has to cover both lines for OC10-115

Releases the introspection-branch audience check from #365 on the
ownCloud 11 line.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
@oc-tmueller
oc-tmueller requested a review from a team as a code owner September 11, 2026 09:03
@oc-tmueller

Copy link
Copy Markdown
Contributor Author

recheck

@oc-tmueller oc-tmueller reopened this Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants