5.0.2

5.0.2 - 2026-02-05

Security

⚠️ Update immediately: CVE-2026-23989, a security issue in public links is resolved in v5.0.2.

We recommend all deployments running previous versions to update to one of these releases immediately.

❤️ Thanks to all contributors! ❤️

@AlexAndBear, @ScharfViktor, @flimmy, @individual-it, @rhafer, @saw-jan

🐛 Bug Fixes

• [full-ci] reva-bump-2.42.3 [#2276]

✅ Tests

• adapt test for #514 [#2255]
• api-test: upload-rename-download file with back slash [#2239]
• [full-ci][tests-only] test: add hook failures to the test failures list [#2041]

📚 Documentation

• docs(proxy): Clarify PROXY_OIDC_USERINFO_CACHE_TTL value [#2256]

📦️ Dependencies

• [full-ci] reva-bump-2.42.2 [#2270]
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.5 to 2.27.6 [#2238]