Merge pull request #37522 from nextcloud/fix/css-placeholder-color

Ungroup `placeholder` css rules to prevent browsers from removing all rules

Merge pull request #36617 from nextcloud/update/psr-container

chore: Update PSR container to 2.0.2

Merge pull request #37316 from nextcloud/fix/security/strict-cookie-check-status-codes

fix(security)!: Use consistent HTTP status for strict cookie checks

Merge pull request #32632 from nextcloud/smb-353

update icewind/smb to 3.5.4

Merge pull request #37241 from nextcloud/feature/allow-any-image-size

Allow images of any size as profile pictures

Merge pull request #37731 from nextcloud/feat/viewconfig-api

feat(files): add view config service to store user-config per view

feat(files): add view config service to store user-config per view

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #36774 from nextcloud/bugfix/noid/sabre-nodes

fix: always use proper path on node api when calling the view

Merge pull request #37330 from Al2Klimov/http-enough

Omit "Accessing site insecurely via HTTP." warning if HTTP is secure enough

Merge pull request #37762 from nextcloud/Jerome-Herbinet-patch-1

Fix wording meaning (placeholder)

Merge pull request #36528 from nextcloud/dav-backend-transations

CalDAV/CardDAV: put every method from backends that does multiple DB calls in transactions

fix(core): Ungroup `placeholder` css rules to prevent browsers from removing all rules

When rules are grouped using the comma operator and one selector is invalid / unknown then the whole group is invalidated[1].
In this case `::-ms-input-placeholder` is unknown to Firefox and Chrome, so the `::placeholder` rule is never applied.
[1]: https://www.w3.org/TR/selectors-3/#grouping

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #37534 from Rsplwe/master

Adjust the value of the "max-parts" parameter of the object storage 'ListPart' interface to 1000

Merge pull request #37324 from nextcloud/fix/mapper-exception

Allow to catch `IMapperException` by implementing `Throwable`

Merge pull request #37645 from nextcloud/fix/improve-imip-emails

fix(dav): Parse sender PARTSTAT in REPLYs

Merge pull request #37676 from nextcloud/fix/auth/atomic-password-db-statements

fix(auth): Run token bulk update statements in atomic transaction

tests: Adapt node related unit tests mocks to required root view

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fix: Use proper path when creating node instances

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #32314 from nextcloud/object-mkdir-logging

additional logging when mkdir fails for object storage

Drop broken unit test

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>

Omit "Accessing site insecurely via HTTP." warning if HTTP is secure enough

This is the case for localhost and Tor hidden services.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>

Merge pull request #35129 from Glandos/previewperf2

[Performance] Reuse preview directory listing

Merge pull request #31286 from rotdrop/bugfix/dont-start-session-when-session-is-already-open

Don't call session_start() when PHP session is still or already open.

Allow images of any size as profile pictures

Signed-off-by: Marco <marcoambrosini@icloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
Signed-off-by: Simon L <szaimen@e.mail.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix: Adjust console formatter code to match with Symfony type hints

Symfony has added type hints on the `OutputFormatterInterface`,
so we must adjust our type hints to match with Symfony.

Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>

chore: Update PSR container to 2.0.2, matching `3rdparty` nextcloud/3rdparty#1311

Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>

refactor(dav): Since we're in a transaction, use QB properly when incrementing synctoken

Now that we're in a transaction, we can reuse the sync token's previous value without trouble, and rewrite the increment UPDATE query without dirty direct SQL.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

fix(CalDAV/CardDAV): put every method from Cal/CardDAV backends that does multiple DB calls in transactions

In a lot of methods we're doing read-after-writes (for instance calling
updateProperties after touching calendar objects).
There's also a lot of deleting methods that do stuff sequentially which
could cause trouble.
This should avoid this kind of issues.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

fix(security)!: Use consistent HTTP status for strict cookie checks

Before: 503/412
Now: 412 + json body explaining the error

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

update icewind/smb to 3.5.4

Signed-off-by: Robin Appelman <robin@icewind.nl>

update icewind/smb to 3.5.3

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: Allow to catch `IMapperException` by implementing `Throwable`

Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>

Merge pull request #37724 from nextcloud/fix/encryption-signature-check-logic

Cleanup signature checking logic in encryption

Merge pull request #35744 from nextcloud/mimeloader-transaction

Put Mimeloader insertion and read in the same transaction

try to make linters happy

Signed-off-by: Glandos <bugs-github@antipoul.fr>

gather code from small and max preview

use directory listing in both functions to gain 25% speed on run where
every preview already exist.

Signed-off-by: Glandos <bugs-github@antipoul.fr>

adapt test to new workflow

getDirectoryListing should return all files
getFile is not called anymore

Signed-off-by: Glandos <bugs-github@antipoul.fr>

Revert 0e49b40

Signed-off-by: Glandos <bugs-github@antipoul.fr>

improve parameter doc

Signed-off-by: Glandos <bugs-github@antipoul.fr>

Ensure max preview image is not null

Signed-off-by: Glandos <bugs-github@antipoul.fr>

php-cs-fix

Signed-off-by: Glandos <bugs-github@antipoul.fr>

List preview directory only once

getCachedPreview used to call `getFile`, and this calls `getDirectoryListing` (or underlying function that list directory) to find the file. This was done for every preview spec.
Now, this is done only once at the beginning of the loop, and the array is just iterated when needed to find the correct entry.

Signed-off-by: Glandos <bugs-github@antipoul.fr>

Don't call session_start() when PHP session is still or already open.

Signed-off-by: Claus-Justus Heine <himself@claus-justus-heine.de>

Merge pull request #36217 from nextcloud/handle-push-notification-with-no-calendar-name

Handle reminders where calendar name is null

Merge pull request #37764 from nextcloud/artonge/fix/disable_versions_feature_s3_versioning

Really disable versions features when S3 versioning is enabled

Put Mimeloader insertion and read in the same transaction

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

Merge pull request #36845 from Murena-SAS/reminder-iterator-exception

Fix max instances exception in get vevent call

Fix wording meaning (placeholder)

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Really disable versions features when S3 versioning is enabled

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #37735 from nextcloud/techdebt/ref-37476/ignore-excluded-dirs-on-image-optimization

chore(assets): Ignore git-ignored directories on image optimization

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37752 from nextcloud/automated/noid/master-update-psalm-baseline

[master] Update psalm-baseline.xml

Merge pull request #37750 from nextcloud/dependabot/npm_and_yarn/webpack-5.79.0

Bump @nextcloud/browser-storage from 0.1.1 to 0.2.0

Bumps [@nextcloud/browser-storage](https://github.com/nextcloud/nextcloud-browser-storage) from 0.1.1 to 0.2.0.
- [Release notes](https://github.com/nextcloud/nextcloud-browser-storage/releases)
- [Changelog](https://github.com/nextcloud/nextcloud-browser-storage/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/nextcloud-browser-storage/compare/v0.1.1...v0.2.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/browser-storage"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

bump webpack from 5.78.0 to 5.79.0

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #37400 from nextcloud/dependabot/npm_and_yarn/nextcloud/calendar-availability-vue-0.6.0-alpha1

chore(deps): Bump @nextcloud/calendar-availability-vue

Bumps [@nextcloud/calendar-availability-vue](https://github.com/nextcloud/calendar-availability-vue) from 0.5.0-rc2 to 0.6.0-alpha1.
- [Release notes](https://github.com/nextcloud/calendar-availability-vue/releases)
- [Changelog](https://github.com/nextcloud/calendar-availability-vue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/calendar-availability-vue/compare/v0.5.0-rc2...v0.6.0-alpha1)

---
updated-dependencies:
- dependency-name: "@nextcloud/calendar-availability-vue"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #37751 from nextcloud/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.58.0

bump @typescript-eslint/eslint-plugin from 5.45.0 to 5.58.0

Merge pull request #37749 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.7

chore(deps-dev): Bump phpunit/phpunit from 9.6.6 to 9.6.7 in /build/integration

Merge pull request #37747 from nextcloud/dependabot/npm_and_yarn/vue/vue2-jest-29.2.3

chore(deps-dev): Bump @vue/vue2-jest from 29.1.1 to 29.2.3

Merge pull request #37746 from nextcloud/dependabot/npm_and_yarn/sass-loader-13.2.2

chore(deps-dev): Bump sass-loader from 13.2.0 to 13.2.2

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

bump @typescript-eslint/eslint-plugin from 5.45.0 to 5.58.0

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): Bump phpunit/phpunit in /build/integration

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.6 to 9.6.7.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.7/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.6...9.6.7)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(deps-dev): Bump @vue/vue2-jest from 29.1.1 to 29.2.3

Bumps [@vue/vue2-jest](https://github.com/vuejs/vue-jest) from 29.1.1 to 29.2.3.
- [Release notes](https://github.com/vuejs/vue-jest/releases)
- [Commits](https://github.com/vuejs/vue-jest/compare/v29.1.1...v29.2.3)

---
updated-dependencies:
- dependency-name: "@vue/vue2-jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): Bump sass-loader from 13.2.0 to 13.2.2

Bumps [sass-loader](https://github.com/webpack-contrib/sass-loader) from 13.2.0 to 13.2.2.
- [Release notes](https://github.com/webpack-contrib/sass-loader/releases)
- [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/sass-loader/compare/v13.2.0...v13.2.2)

---
updated-dependencies:
- dependency-name: sass-loader
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #36690 from nextcloud/bugfix/noid/rollback-hook

Merge pull request #37611 from ZE3kr/patch-1

Unquote S3 ETag stored in oc_filecache

Merge pull request #37603 from joshtrichards/jr-reset-pw-honest-msg

More honest reset password request response

Merge pull request #36351 from nextcloud/bugfix/noid/move-encryption-password-email-to-template

Move encrypt-all password email to EmailTemplate

chore(assets): Ignore git-ignored directories on image optimization

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #37726 from nextcloud/feat/files-events

fix(files): standardize `files:node:event` event syntax

Merge pull request #37476 from nextcloud/ci/checkers/fix-autoloader-generation-extraneous-apps

ci(checkers): Fix autoloader (re)generation for extraneous apps

fix(files): standardize `files:node:event` event syntax

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Cleanup signature checking logic in encryption

Signed-off-by: jld3103 <jld3103yt@gmail.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Compile webpack assets - again

Signed-off-by: Josh Richards <josh.t.richards@gmail.com>

More honest reset password request response

Addresses request in additional comments of #37408

* Honest but still won't leak information
* Also reminds user to verify the provided user id email address/user

Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
Refine reset password response copy

Co-authored-by: Louis <6653109+artonge@users.noreply.github.com>
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
Wrap honest password reset request response

Merge pull request #32499 from nextcloud/enh/noid/ldap-search-entryuuid-no-wildcard

Fix Ldap search for attributes with no substr matching rule

perform exact Ldap search as well to make sure it works for attributes without a substr matching rule

Signed-off-by: Julien Veyssier <eneiluj@posteo.net>

fix(dav): Parse sender PARTSTAT in REPLYs

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #37429 from nextcloud/object-store-rmdir

improve objectstore rmdir handling

Merge pull request #37704 from nextcloud/bugfix/noid/fix-translations-api

fix(translation): Fix several issues with the translations api

Merge pull request #37692 from nextcloud/feat/resizeobserver-breakpoint-files

feat(files): better breakpoints and sidebar responsive design

Merge pull request #37697 from nextcloud/fix/button-text

Fix button text

feat(translation): Allow guests to use translations as well

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(translation): Use 400 as status code to be distinguishable from server errors

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(translation): Properly set the numbers as HTTP status code

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(translation): Translate error messages on translations API

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(files): better breakpoints and sidebar responsive design

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix button text

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37642 from nextcloud/fix/reactivity-files

Merge pull request #37680 from nextcloud/enh/noid/add-app-type-extended-authentication

app type extended_authentication

fix(auth): Run token statements in atomic transaction

All or nothing

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

app type extended_authentication

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

fix: wrong copyright

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>