Return the proper jailed path when requesting the root path

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #16992 from nextcloud/backport/16932/stable15

[stable15] Be sure to get the jailed path if the storage is a jail

Merge pull request #16996 from nextcloud/backport/16982/stable15

[stable15] Only run code coverage CI on merge

Only run code coverage CI on merge

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Be sure to get the jailed path if the storage is a jail

Fixes: https://github.com/nextcloud/groupfolders/issues/583
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[stable15] prevent the server's app-navigation's css to overru… (#16937)

[stable15] prevent the server's app-navigation's css to overrule the scoped css …

[tx-robot] updated from transifex

prevent the server's app-navigation's css to overrule the scoped css in vue components

Signed-off-by: Marco Ambrosini <marcoambrosini@pm.me>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16884 from nextcloud/backport/16875/stable15

[stable15] Use custom client URL in welcome emails

Merge pull request #16897 from nextcloud/dependabot/npm_and_yarn/apps/accessibility/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/accessibility

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/accessibility

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16900 from nextcloud/dependabot/npm_and_yarn/apps/oauth2/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/oauth2

Merge pull request #16902 from nextcloud/dependabot/npm_and_yarn/apps/updatenotification/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/updatenotification

Merge pull request #16904 from nextcloud/dependabot/npm_and_yarn/settings/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings

Merge pull request #16905 from nextcloud/dependabot/npm_and_yarn/build/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /build

[tx-robot] updated from transifex

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /build

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep in /apps/updatenotification

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/oauth2

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Mock client URL in new user mail tests

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Use custom client URL in welcome emails

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16849 from nextcloud/backport/16847/stable15

[stable15] Only add the app-itunes-app tag if the id is set

[tx-robot] updated from transifex

Only add the app-itunes-app tag if the id is set

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #16825 from nextcloud/backport/16808/stable15

[stable15] Undefined variable response when server is no nextcloud anymore

[tx-robot] updated from transifex

Undefined variable response when server is no nextcloud anymore

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #16803 from nextcloud/backport/16793/stable15

[stable15] Filter more configs

Filter more configs

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[stable15] Rename delete label to Delete folder/file (#16742)

[stable15] Rename delete label to Delete folder/file

Rename delete label to Delete folder/file

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Merge pull request #16732 from nextcloud/version/15.0.11/final

15.0.11

[tx-robot] updated from transifex

15.0.11

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16676 from nextcloud/version/15.0.11/RC1

15.0.11 RC1

15.0.11 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #16692 from nextcloud/backport/16683/stable15

[stable15] Fix enable/disable user audit message

Merge pull request #16224 from nextcloud/backport/15769/stable15

[stable15] dont use part files for dav writes when the target folder doesn't have create permissions

Merge pull request #16690 from nextcloud/backport/16686/stable15

[stable15] Properly return an int in the getId function of the cache

add test for overwriting in non creatable directory

Signed-off-by: Robin Appelman <robin@icewind.nl>

dont use part files for dav writes when the target folder doesn't have create permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix enable/disable user audit message

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Properly return an int in the getId function of the cache

fixes #16684

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16631 from nextcloud/backport/16624/stable15

[stable15] Make sure we only fetch the file by id for the actual owner

Make sure we only fetch the file by id for the actual owner

Otherwise this will fetch all mounts for the file id which is quite
expensive and causes long saving times in big sharing structures

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #16608 from nextcloud/backport/stable15/16596

[stable15] Set proper defaults for v-tooltip usages

[tx-robot] updated from transifex

Merge pull request #16611 from nextcloud/backport/16599/stable15

[stable15] Fix/xss/on favorite file

prevent potential XSS via unchecked use innerHTML

Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>

fix XSS when adding a file with a malicious name to favorites

Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Force defaultHtml setting of v-tooltip to be disabled

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16565 from nextcloud/backport/16555/stable15

[stable15] use a pattern to identify sensitive config keys

Merge pull request #16568 from nextcloud/backport/16163/stable15

[stable15] Change send to sent

[tx-robot] updated from transifex

Change send to sent

Signed-off-by: Frederic Werner <frederic-github@werner-net.work>

treat sensitive config keys by pattern

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #16549 from nextcloud/dependabot/npm_and_yarn/settings/stable15/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings

[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16548 from nextcloud/dependabot/npm_and_yarn/build/stable15/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

[tx-robot] updated from transifex

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16537 from nextcloud/backport/16503/stable15

[stable15] allow to provide supported calendar component set internally as a string

allow to provide supported calendar component set internally as a string

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex