Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Signed-off-by: Milen Pivchev <milen.pivchev@gmail.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

* feat: preserve E2EE key sets during setup

Archive active E2EE credentials in the Keychain before setup resets or certificate renewal, while deduplicating snapshots and preserving explicit full cleanup.

Add unit coverage for complete, duplicate, and partial key-set archives, and update resolved package versions.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* feat: support read-only access with archived E2EE keys

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: reuse root metadata key for E2EE v2 child folders

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: enforce E2EE write access before metadata changes

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: handle empty users in E2EE v2 metadata

Reuse the encrypted root key only for child metadata and verify empty-user signatures with the current certificate.

Update Firebase dependencies to 12.18.0.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: enforce E2EE key set write access

Block metadata recovery and destructive operations when only archived or unavailable keys can decrypt the folder.

Allow explicit initial metadata creation for newly encrypted folders.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* test: verify E2EE archiving preserves active credentials

Pin Firebase and GoogleAppMeasurement to 12.17.0.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: handle changed E2EE server keys safely

Detect and replace stale server key sets while preserving archived keys for read-only access. Validate write operations and route encrypted media folder deletion through the E2EE flow.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: validate E2EE server keys once per active cycle

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* refactor: clarify metadata key decryption checks

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: require password for E2EE key deletion

Prompt for the account password before deleting E2EE keys or renewing certificates.

Update NextcloudKit to the password-parameter branch.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: allow passwordless E2EE key management

Update NextcloudKit and Firebase package revisions.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* cleaning

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* rename

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: validate E2EE keys against user certificates

Use the server public key only to authenticate certificates, and compare embedded user keys when detecting key changes.

Verify decrypted private keys match the user certificate before storing or uploading them.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: refresh plus menu when E2EE preference changes

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* chore: prepare 34.2.0 release

Pin NextcloudKit to 7.5.0 and reset the build number.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

* fix: prevent sensitive E2EE data from being logged

Replace raw key and metadata output with non-sensitive E2EE diagnostics.

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

---------

Signed-off-by: Marino Faggiana <marino.faggiana@nextcloud.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Signed-off-by: Nextcloud bot <bot@nextcloud.com>