Bump the app version to 0.4.0

[chadek]

Moves appinfo/info.xml to 0.4.0, for the release that swaps the bundled document server from ONLYOFFICE DocumentServer to Euro-Office.

The version has to move for the two migrations added since v0.3.3 to run at all, and for the repair step that hands an install configured before #387 the format matrix a fresh one is seeded with — Nextcloud only replays either when the declared version increases.

---

Release notes for v0.4.0, everything merged since v0.3.3:

v0.4.0

Document server

• bundle Euro-Office (v9.3.4-hotfix.1) instead of ONLYOFFICE DocumentServer; the Makefile resolves the release asset through the GitHub API, so make ds_repo=ONLYOFFICE/DocumentServer ds_version=v9.4.0 still builds the upstream tree
• serve sdkjs/common/device_scale.js, which 404'd on every document open

Saving

• documents are written back to Nextcloud while they are being edited, at most once per autosave_interval (60 s, 0 turns it off) — from the editing path itself, so it no longer depends on cron, and no longer depends on an occ process having the storage credentials either (The occ documentserver:flush "workaround" does not work (and cannot work) with external SMB storage; a solution idea is attached in case the root problem cannot be fixed (it has persisted for years). #399) — closes Edits and changes made in Onlyoffice are not synced into Nextcloud #100, closes File changes are shown in OnlyOffice but don't appear in Files app #12, closes OnlyOffice file not saved, file changes lost upon exit #103, closes File are not saved on file system but are only editable in onlyoffice #281, closes Saving/offloading is not happening #366, closes Possible data loss after Document Server connection failure #381
• the document is written out and disposed of as soon as the last editor leaves, both on closing the editor and on closing the browser tab — closes Edits and changes made in Onlyoffice are not synced into Nextcloud #100, closes OnlyOffice file not saved, file changes lost upon exit #103
• the Cleanup background job now writes documents that are being edited instead of skipping them, and goes through the same interval
• occ documentserver:flush no longer consumes a live document's change list: run while somebody was still editing it emptied the log the file is rebuilt from and could delete the document folder under an open session — closes Data loss when executing occ documentserver:flush #398
• occ documentserver:flush finishes its sweep past a document that will not assemble, reports failures on stderr, waits for a write already in progress, retries while Nextcloud's file locking holds the file, and exits 0 on success
• new occ documentserver:flush --snapshot: write every open document out without ending any session
• expired sessions are no longer counted as participants, so "the last editor left" is actually seen; a departing editor's row is deleted rather than expired, so its own orphaned poll cannot revive it
• deleteIndex is answered against the number of changes the document holds rather than the highest index, and an absent or -1 index no longer cuts every change in the document — an off-by-one that silently deleted a live change on save

Editing

• the settings chosen in the ONLYOFFICE admin page take effect: format and default-opener choices are no longer reverted on the next page load, a fresh install is seeded from the format matrix the bundled server actually ships (29 editable formats where it seeded a stale 12), and an install configured before this is repaired on upgrade — closes Opening PDF fails: The "documentType" parameter for the config object is invalid. Please correct it. #331
• the editor's Save button ("Keep intermediate versions when editing") works: forceSaveStart is answered with the two-part reply the editor accepts, throttled so a client cannot turn every keystroke into a converter run, refused to read-only sessions, and it snapshots rather than flushing
• the editor's chat panel works — messages both ways, and a late joiner reads the backlog
• a participant dropped to view mode (asc_coAuthoringDisconnect) no longer ends the document for everybody else — with the live-broadcast fix from v0.3.3, co-authoring now shows other people's typing for the whole session — closes No real coediting #302, closes onlyoffice co editing #288
• a batch of changes that collides on change_index is retried instead of leaving the connection in a dead transaction, where every later query in the request failed with SAVEPOINT DOCTRINE_n does not exist
• the memcache IPC backend no longer loses an in-flight message, which swallowed or reordered co-authoring broadcasts on instances with memcache.distributed set

Conversion and fonts

• PDF export is no longer blank. font_selection.bin shipped an absolute path to every bundled font as it was on the machine that built the package; when one did not resolve, x2t wrote a PDF with no glyphs and exited 0, so nothing downstream could tell a blank conversion from a good one. The paths are pinned relative at build time now, the same way AllFonts.js already was — closes Major: PDFs exports are BLANK! #371, closes PDF prints are blank - Document Server cant print any fonts #251, closes Open pdf file blank or failed #287
• a font rebuild that does not rebuild fails loudly: the old check accepted a stale AllFonts.js left over from the build, so a rebuild that wrote nothing reported success, and it never looked at font_selection.bin at all. It now verifies this run wrote both files, that the write succeeded, and that every pinned path resolves — and refuses up front, naming the file and the user, when it cannot write (the shape of Exception: sh: ../../tools/allfontsgen: not found #145 and Segmentation fault while rebuilding fonts #278)
• x2t's stdout is scanned for Can't load fontfile and logged, rather than discarding the one stream that mentioned it
• occ documentserver:fonts returned 1 on success and 0 on failure, so anything scripting it was told the opposite of what happened

Security

• images imported through imgurls are fetched with Nextcloud's HTTP client instead of fopen(): file://, loopback, link-local and redirect-to-private are all refused (SSRF / local file read)
• the document server package's sha256 is verified before it is unpacked, and the extracted tree is no longer chmod 777 — it holds the x2t binary the web server executes
• a stored chat message is capped at the editor's own maximum, the close beacon is rate limited, and an api.js that was never rendered answers 404 instead of an empty 200

Internals

• four database indexes that duplicate a wider one are dropped, and the change index's unique constraint is reordered so MAX(change_index) WHERE document_id = ? is a lookup rather than a scan — Potentially redundant indices #353
• command handlers are resolved through the app container instead of the deprecated service locator
• Change::$changeIndex is declared and populated — getChangeIndex() returned null from an int-typed method, plus a dynamic property deprecation on PHP 8.4
• the memcache IPC miss counters expire
• the browser test rig lives in the repository and runs in CI on pull requests and weekly

---

The whole rig suite is green on this branch — formats, smoke, flush-live, autosave, leave, twotab, coedit, coedit-xlsx, forcesave, chat, pdf — on Nextcloud 34 with ONLYOFFICE connector 10.1 and bundled Euro-Office 9.3.4. Each issue listed above has a comment on it with the test output that covers it.

Not fixed in this release, so the saving section above is not read as more than it is: #401 reports that on 0.3.4 a spreadsheet's file on disk can lag behind what the editor shows, and can even go backwards — an edit missing from one write reappearing in a later one. It is open and under investigation; the write path this release adds is what that report is against.

🤖 Generated with Claude Code

[chadek]

Re-verified after rebasing onto 8fea4eb (#402), since pinning the font paths changes files the converter reads on every run — AllFonts.js is what spreadsheet change replay measures text with, so a mistake there would show up in coedit-xlsx rather than in pdf.

Full suite on Nextcloud 34, ONLYOFFICE connector 10.1, bundled Euro-Office 9.3.4:

   PASS  formats         56s
   PASS  smoke          212s
   PASS  flush-live     158s
   PASS  autosave       186s
   PASS  leave          287s
   PASS  twotab         272s
   PASS  coedit         199s
   PASS  coedit-xlsx    144s
   PASS  forcesave      219s
   PASS  chat           190s
   PASS  pdf              5s
   SUITE: all green