[Bug]: Dashboard widget sets data-due-state="Future" and fails to style overdue cards in red

The bug is in the Deck dashboard widget, not the main /apps/deck board view, so compare how data-due-state is computed in each. Start from the code that sets data-due-state on the duedate element and check why it returns "Future" for past due dates. Reproduce with one card due two weeks ago and one due in nine hours. Done when the overdue card is marked "Overdue" and its due text renders red in the widget, while the future card stays "Future".

⚠️ This issue respects the following points: ⚠️

• This is not a troubleshooting question, general support matter, or webserver/proxy problem, but likely a bug (if unsure, ask the Community Help Forum).
• This issue is not already reported on Github OR solved at the Community Help Forum (I've searched!).
• I'm using a maintained major version of Nextcloud Server and tested against the latest patch level. (Supported major versions and current patch levels).
• I agree to follow Nextcloud's Code of Conduct.
• I've tried my best to provide clear reproduction steps that someone unfamiliar with this bug could use to reproduce it.

Bug description

On Nextcloud Dashboard, the "Upcoming cards" / "Next cards" widget from the Deck app fails to render overdue/delayed cards in red.

Upon inspecting the rendered DOM elements in the browser, the date container attribute data-due-state is hardcoded or incorrectly evaluated as "Future" for all cards in the dashboard widget, regardless of whether the due date is in the past or future. Because data-due-state="Overdue" (or Past) is never set on overdue elements, CSS rules targeting overdue items are not applied.

Inside the main Deck application view (/apps/deck), due dates display correctly in red for delayed cards. The issue is isolated to the Dashboard widget component.

Opensuse leap 16.0.

Steps to reproduce

1. Create two cards in the Deck app:

• Card A: Set a due date in the past (e.g., 2 weeks ago).
• Card B: Set a due date in the future (e.g., in 9 hours).

2. Go to the Nextcloud Dashboard.
3. Inspect the HTML elements for both cards inside the Deck Dashboard Widget.

Expected behavior

Expected Behavior:
Overdue cards should render their due date text in red in the Dashboard widget.

The overdue card should carry data-due-state="Overdue" (or equivalent state class/attribute) in the DOM, while future cards carry data-due-state="Future".

Actual Behavior:
Both overdue and future cards render with normal styling.

Both overdue and future cards output data-due-state="Future" in the DOM.

DOM Evidence / Comparison:
Overdue Card (test1 (overdue) - Due 2 weeks ago):

  <a data-v-a0497d0e="" data-v-552e5f89="" href="/nextcloud/index.php/apps/deck#/board/1/card/585" target="_blank" class="card" data-v-bde19bf3="">
    <div data-v-a0497d0e="" class="card--header">
      <div data-v-26a5174b="" data-v-a0497d0e="" data-due-state="Future" class="duedate right">
        <div data-v-26a5174b="" name="jueves, 1 de octubre de 2026, 8:00" class="due">
          <span data-v-26a5174b="" aria-hidden="true" role="img" class="material-design-icon clock-outline-icon">
            <svg fill="currentColor" width="16" height="16" viewBox="0 0 24 24" class="material-design-icon__svg"><path d="M12,20A8,8 0 0,0 20,12A8,8 0 0,0 12,4A8,8 0 0,0 4,12A8,8 0 0,0 12,20M12,2A10,10 0 0,1 22,12A10,10 0 0,1 12,22C6.47,22 2,17.5 2,12A10,10 0 0,1 12,20M12.5,7V12.25L17,14.92L16.25,16.15L11,13V7H12.5Z"><!----></path></svg>
          </span> 
          <span data-v-26a5174b="" class="due--label">hace 2 semanas</span>
        </div>
      </div> 
      <span data-v-a0497d0e="" dir="auto" class="title">test1 (overdue)</span>
    </div> <!---->
  </a>
</li>

Upcoming Card (Test2 (not overdue) - Due in 9 hours):

  <a data-v-a0497d0e="" data-v-552e5f89="" href="/nextcloud/index.php/apps/deck#/board/1/card/586" target="_blank" class="card" data-v-bde19bf3="">
    <div data-v-a0497d0e="" class="card--header">
      <div data-v-26a5174b="" data-v-a0497d0e="" data-due-state="Future" class="duedate right">
        <div data-v-26a5174b="" name="viernes, 16 de octubre de 2026, 8:00" class="due">
          <span data-v-26a5174b="" aria-hidden="true" role="img" class="material-design-icon clock-outline-icon">
            <svg fill="currentColor" width="16" height="16" viewBox="0 0 24 24" class="material-design-icon__svg"><path d="M12,20A8,8 0 0,0 20,12A8,8 0 0,0 12,4A8,8 0 0,0 4,12A8,8 0 0,0 12,20M12,2A10,10 0 0,1 22,12A10,10 0 0,1 12,22C6.47,22 2,17.5 2,12A10,10 0 0,1 12,22C6.47,22 2,17.5 2,12A10,10 0 0,1 12,20M12.5,7V12.25L17,14.92L16.25,16.15L11,13V7H12.5Z"><!----></path></svg>
          </span> 
          <span data-v-26a5174b="" class="due--label">dentro de 9 horas</span>
        </div>
      </div> 
      <span data-v-a0497d0e="" dir="auto" class="title">Test2 (not overdue)</span>
    </div> <!---->
  </a>
</li>

Nextcloud Server version

35

Operating system

Other

PHP engine version

PHP 8.4

Web server

Apache (supported)

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Upgraded to a MAJOR version (ex. 31 to 32)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "samara.com.es"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "35.0.2.2",
        "overwrite.cli.url": "https:\/\/samara.com.es\/nextcloud",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "maintenance": false,
        "theme": "",
        "loglevel": 2,
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379,
            "timeout": 0
        },
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "default_phone_region": "ES",
        "mail_smtpsecure": "ssl",
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpauth": 1,
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "trashbin_retention_obligation": "auto, 365",
        "logtimezone": "Europe\/Paris",
        "maintenance_window_start": 1,
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "overwritehost": "samara.com.es",
        "overwriteprotocol": "https",
        "overwritewebroot": "\/nextcloud",
        "data-fingerprint": "cf169299a3af92438917265be815e446"
    }
}

List of activated Apps

Enabled:
  - activity: 8.0.0
  - admin_audit: 2.0.0
  - analytics: 7.0.2
  - app_api: 35.0.0
  - appstore: 2.0.0
  - better_app_menu: 0.0.2
  - bruteforcesettings: 8.0.0
  - calendar: 6.6.2
  - circles: 35.0.0
  - cloud_federation_api: 2.0.0
  - comments: 2.0.0
  - contacts: 8.9.1
  - contactsinteraction: 2.0.0
  - dashboard: 8.0.0
  - dav: 2.0.0
  - deck: 1.19.0
  - federatedfilesharing: 2.0.0
  - federation: 2.0.0
  - files: 3.0.0
  - files_accesscontrol: 6.0.1
  - files_external: 2.0.0
  - files_lock: 35.0.1
  - files_pdfviewer: 8.0.0
  - files_reminders: 2.0.0
  - files_sharing: 2.0.0
  - files_trashbin: 2.0.0
  - files_versions: 2.0.0
  - files_zip: 3.0.1
  - forms: 5.4.0
  - gpxpod: 8.4.1
  - groupfolders: 23.0.1
  - logreader: 8.0.0
  - lookup_server_connector: 2.0.0
  - mail: 5.12.4
  - maps: 1.8.0
  - notes: 6.1.0
  - notifications: 8.0.1
  - oauth2: 2.0.0
  - office: 1.1.0
  - password_policy: 7.0.0
  - photos: 8.0.0
  - polls: 9.3.0
  - privacy: 7.0.0
  - profile: 2.0.0
  - provisioning_api: 2.0.0
  - recommendations: 8.0.0
  - related_resources: 6.0.0
  - richdocuments: 12.0.1
  - serverinfo: 7.0.0
  - settings: 2.0.0
  - sharebymail: 2.0.0
  - sharing: 1.0.4
  - side_menu: 6.2.0
  - socialsharing_telegram: 5.0.3
  - spreed: 25.0.6
  - support: 7.0.0
  - survey_client: 7.0.0
  - suspicious_login: 13.0.0
  - systemtags: 2.0.0
  - tasks: 0.18.1
  - text: 9.0.1
  - theming: 3.0.0
  - theming_customcss: 1.22.0
  - twofactor_backupcodes: 2.0.0
  - twofactor_totp: 17.1.0
  - updatenotification: 2.0.0
  - user_status: 2.0.0
  - viewer: 8.0.0
  - weather_status: 2.0.0
  - webhook_listeners: 2.0.0
  - workflowengine: 3.0.0
Disabled:
  - dicomviewer: 2.3.3 (installed 2.3.3)
  - encryption: 3.0.1
  - files_downloadlimit: 5.3.0 (installed 2.0.0)
  - firstrunwizard: 8.0.0 (installed 2.18.0)
  - nextcloud_announcements: 7.0.0 (installed 1.18.0)
  - quicknotes: 1.0.1 (installed 1.0.1)
  - testing: 1.23.0
  - twofactor_nextcloud_notification: 9.0.0
  - user_ldap: 2.0.0

Nextcloud Signing status

Nextcloud Logs

Additional info

No response