Update baseline on stable21

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Merge pull request #26641 from nextcloud/backport/26633/stable21

[stable21] Make lookup search explicit

Merge pull request #26639 from nextcloud/backport/26551/stable21

[stable21] ensure redis returns bool for hasKey

Make lookup search explicit

Speedsup sharee lookup quite a bit.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26625 from nextcloud/bugfix/noid/fix-sharemail-empty-password-check

[stable21] Fix empty password check for mail shares

Merge pull request #26636 from nextcloud/backport/26615/stable21

[stable21] Require read permissions for federated shares

[tx-robot] updated from transifex

ensure redis returns bool for hasKey

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Require read permissions for federated shares

Else they end up as weird shares that can't be properly utilized by
other parties anyway.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26621 from nextcloud/backport/26613/stable21

[stable21] Do not allow adding file drop shares to your own cloud

Fix empty password check for mail shares

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Do not allow adding file drop shares to your own cloud

There is no reason for this and you can't create such shares normally
anyway.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26616 from nextcloud/backport/26614/stable21

[stable21] Update root.crl due to revoked news.crt

Update root.crl due to revoked news.crt

See https://github.com/nextcloud/app-certificate-requests/pull/382

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26604 from nextcloud/dependabot/npm_and_yarn/stable21/ssri-6.0.2

[Security] Bump ssri from 6.0.1 to 6.0.2

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. **This update includes a security fix.**
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #26587 from nextcloud/backport/26581/stable21

[stable21] Fix constraint violation detection in QB Mapper

Fix constraint violation detection in QB Mapper

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26535 from nextcloud/backport/26521/stable21

[stable21] Fix accessibility issues on log in screen

Fix 'Log in with a device' link focusability

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Fix log in button hover/focus feedback

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix password visibility toggle alt text and hover/focus feedback

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

[tx-robot] updated from transifex

Merge pull request #26525 from nextcloud/backport/26433/stable21

[stable21] Limit size of properties to 2048 characters

Limit size of properties to 2048 characters

It is unreasonable to expect that one of these fields would be longer
than 2048 characters. Whilst some have definitely lower limits (such as
for phone numbers or domain names), a upper bound as sanity check makes
sense.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #26514 from nextcloud/backport/26439/stable21

[stable21] Increase subnet matcher

Increase subnet matcher

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #26508 from nextcloud/backport/26230/stable21

[stable21] l10n: Add word user in FederatedShareProvider.php

l10n: Add word user in FederatedShareProvider.php

Standardizing text strings with other Nextcloud applications.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26453 from nextcloud/version/21.0.1/final

21.0.1 final

Merge pull request #26459 from nextcloud/backport/26458/stable21

[stable21] Show icon-phone when setting is set to private instead of local

Merge pull request #26447 from nextcloud/3rdparty/stable21/phpseclib-2.0.31

[3rdparty][stable21] phpseclib-2.0.31

Show icon-phone when setting is set to private instead of local

Signed-off-by: Joas Schilling <coding@schilljs.com>

[3rdparty][stable21] phpseclib-2.0.31

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26451 from nextcloud/revert-26326-backport/26070/stable21

Revert "[stable21] add a prefix index to filecache.path"

21.0.1 final

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Revert "[stable21] add a prefix index to filecache.path"

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26400 from nextcloud/backport/26061/stable21

[stable21] Log and continue when failing to update encryption keys during for individual files

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26413 from nextcloud/dependabot/npm_and_yarn/stable21/y18n-4.0.1

[Security] Bump y18n from 4.0.0 to 4.0.1

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1. **This update includes a security fix.**
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #26406 from nextcloud/backport/26396/stable21

[tx-robot] updated from transifex

Merge pull request #26313 from nextcloud/version/21.0.1/RC1

21.0.1 RC1

Merge pull request #26402 from nextcloud/ldap-factory-no-ldap-21

[21] make ILDAPProviderFactory usable when there is no ldap setup

Merge pull request #26404 from nextcloud/backport/26403/stable21

[stable21] remove leftover debug @NoCSRFRequired introduced with #26198

Properly handle creating the template directory in a subfolder (fixes #25787)

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Get the parent directory before creating a file from a template

Signed-off-by: Julius Härtl <jus@bitgrid.net>

remove leftover debug @NoCSRFRequired introduced with #26198

Signed-off-by: Robin Appelman <robin@icewind.nl>

make ILDAPProviderFactory usable when there is no ldap setup

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #26398 from nextcloud/backport/26394/stable21

[stable21] Allow apps to write/update account data

Fix phpcs issues in encryption update

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Log and continue when failing to update encryption keys during for individual files

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #26391 from nextcloud/backport/26386/stable21

[stable21] Also check the default phone region when the number has no country code

Allow apps to write/update account data

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

Also check the default phone region when the number has no country code

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #26377 from nextcloud/backport/25500/stable21

[stable21] fix(translation): replace static error message

Merge pull request #26376 from nextcloud/backport/25804/stable21

[stable21] Do not attempt to read 0 bytes when manually iterating over a non-seekable file

Merge pull request #26379 from nextcloud/backport/25924/stable21

[stable21] Only mark migrations as installed after execution

Merge pull request #26382 from nextcloud/backport/26372/stable21

[stable21] gracefully handle deleteFromSelf when share is already gone

[tx-robot] updated from transifex

gracefully handle deleteFromSelf when share is already gone

- handling race conditions

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Only mark migrations as installed after execution

The problem is that if a developer creates a structural error in their migration file,
they will already be marked as executed and an not be rerun.

Signed-off-by: Joas Schilling <coding@schilljs.com>

revert(comment)

Signed-off-by: Samuel <faust64@gmail.com>

revert(exception): keep throwing an exception for now

Signed-off-by: Samuel <faust64@gmail.com>

fix(translation): replace static error message

as suggested by @kesselb in nextcloud/server#25490

Signed-off-by: Samuel <faust64@gmail.com>

Properly end iterating over the file once the target has been reached

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #26371 from nextcloud/backport/26370/stable21

[stable21] Remove notifications when retesting profile field input

Merge pull request #26363 from nextcloud/backport/26325/stable21

[stable21] Update cipher defaults

Remove notifications when retesting

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #26366 from nextcloud/backport/26355/stable21

[stable21] Fix working for phone number integration

[tx-robot] updated from transifex

Merge pull request #26326 from nextcloud/backport/26070/stable21

[stable21] add a prefix index to filecache.path

Fix working for phone number integration

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #26357 from nextcloud/backport/26342/stable21

[stable21] Fix broken Calendar Event Invite email icons in Gmail by using PNGs instead of SVGs

Update cipher defaults

Signed-off-by: J0WI <J0WI@users.noreply.github.com>

change calendar invite emails to use pngs instead of svgs

Signed-off-by: Nick Sweeting <git@sweeting.me>

Merge pull request #26352 from nextcloud/backport/26243/stable21

[stable21] Avatar privacy and new scope

Capability for federated scope

Added additional capability in the provisioning API to signal whether
the federation scope values can be used.

This is based on whether the lookup server upload is enabled or not.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Update autoloader for PlaceholderAvatar

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Int tests for provisioning API scopes

Added integration tests for the scope attributes in the provisioning
API.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Add known user check in avatar when v2-private scope

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Update psalm-baseline for Avatar API quirks

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Change account property capability

Include version number in capability

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com>