[eluttine]

Bumps appinfo/info.xml to 1.0.2 for release.

What's in it

Three fixes, all in the LDAP sync's prune path, all merged since v1.0.1:

• fix: skip the prune when the LDAP walk does not finish #20 — a failed LDAP search no longer prunes. safeSearch() returned [] both for an empty page and for a thrown search; an empty page ends the paging loop, so one transient failure emptied both tables and blanked every teacher's picker until the next good run.
• fix: prune in chunks instead of one NOT IN list #27 — the prune no longer sends the whole keep-set as one NOT IN list. Past 1000 groups that logged an error on every sync (every 15 minutes, with a stack trace), and would genuinely fail on Oracle and on SQLite builds older than 3.32. Fixes LdapSync fails when more than 1000 groups: deleteNotIn() exceeds QueryBuilder IN-list limit #25.
• fix: refuse to prune when the LDAP walk matches nothing #30 — a walk that completes but matches nothing no longer prunes, when there are rows to lose. An upstream puavoEduGroupType rename, or the bind agent losing read access to it, emptied both tables with exit 0 and no warning. Fixes Sync empties the tables when a completed LDAP walk matches zero class groups #28.

occ groupsharemachine:sync now reports PRUNE SKIPPED: <reason> on the affected line and exits non-zero when a run was not trustworthy enough to prune against.

Not in it

• No migrations. The schema is unchanged since 1.0.1, so occ upgrade has nothing to run for this version.
• No change to the supported range — still min-version="31" max-version="33". The NC 34 bump is separate and still pending.

Why 1.0.2 and not 1.1.0

Bug fixes only, no new features and no schema change. The one argument for a minor bump is that occ groupsharemachine:sync can now exit non-zero where it always exited 0, which is a change to a documented interface — but that exit code is the fix, so patch reads right to me. Say if you'd rather signpost it as 1.1.0.

Verified

make produces a tarball carrying <version>1.0.2</version>. Full gate green on main: phpunit 56/56, Psalm clean, php-cs-fixer clean.

The README's install example pointed at v1.0.0, which would have handed an admin a build without the class-group search fix; it now names the current tag.

After merging

Per the README release steps:

git tag v1.0.2 && git push --tags
make sign                       # needs certs in ~/.nextcloud/certificates/

then attach build/groupsharemachine.tar.gz to the GitHub release.

[ateras]

Looks good to me and I think 1.0.2 instead of 1.1.0 is fine.

Due to the app being Puavo-specific and not available in the Nextcloud app store it is unlikely that it would be used anywhere else than internally by Puavo/Opinsys. Therefore we don't have to be extra careful with the version number schema even if the exit code changes in one special case.