[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27411 from nextcloud/backport/27375/stable21

[stable21] Don't update statuses to offline again and again

Merge pull request #27015 from nextcloud/backport/26980-stable21

[stable21] Use parent wrapper to properly handle moves on the same source/target storage

Don't update statuses to offline again and again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27336 from nextcloud/backport/27329/stable21

[stable21] Propagate throttling on OCS response

Merge pull request #27359 from nextcloud/backport/27354/stable21

[stable21] Escape filename in Content-Disposition

[tx-robot] updated from transifex

Merge pull request #27333 from nextcloud/backport/27328/stable21

[stable21] emit UserLoggedInEvent on apache auth

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27350 from nextcloud/backport/25280/stable21

[stable21] Set umask before operations that create local files

Set umask before operations that create local files

this solves issues where "other php stuff" is messing with the umask

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #27347 from nextcloud/backport/27053/stable21

[stable21] Don't throw when comments is disabled

Merge pull request #27334 from nextcloud/backport/25770/stable21

[stable21] Don't allow executing cli if cache backend is unavailable

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27346 from nextcloud/debt/noid/missing-import

[stable21] Replace OCSController with OCP\API

Escape filename in Content-Disposition

We should escape all occurences of ' and \ in here.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Don't throw when comments is disabled

Signed-off-by: Joas Schilling <coding@schilljs.com>

Replace OCSController with OCP\API

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Propagate throttling on OCS response

The BaseResponse converter did not take over any throttling state from the DataResponse.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Don't allow executing cli if cache backend is unavailable

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

emit UserLoggedInEvent on apache auth

- post_login OC_Hook is barely used or listened to

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27318 from nextcloud/backport/27099/stable21

[stable21] Make user:report command scale

Make user:report command scale

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

Merge pull request #27195 from nextcloud/backport/27188/stable21

[stable21] Fix the get editable fields endpoint without a user id

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27248 from nextcloud/dependabot/npm_and_yarn/stable21/browserslist-4.16.6

[Security] Bump browserslist from 4.16.0 to 4.16.6

Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.16.0 to 4.16.6. **This update includes a security fix.**
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.16.0...4.16.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #27208 from nextcloud/backport/27199/stable21

[stable21] Use noreply@ as email address for share emails

Use noreply@ as email address for share emails

Fixes #26683

Before it used the instance name, which a) doesn't make sense to randomly guess email addresses and b) could contain characters that are not allowed in email addresses like spaces.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #27184 from nextcloud/dependabot/npm_and_yarn/stable21/various

[tx-robot] updated from transifex

Add integration tests for the editable fields

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix the get editable fields endpoint without a user id

Signed-off-by: Joas Schilling <coding@schilljs.com>

Npm build

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Bump @babel/plugin-proposal-class-properties from 7.12.1 to 7.12.13

Bumps [@babel/plugin-proposal-class-properties](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-class-properties) from 7.12.1 to 7.12.13.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.12.13/packages/babel-plugin-proposal-class-properties)

Signed-off-by: dependabot[bot] <support@github.com>

Bump @nextcloud/capabilities from 1.0.2 to 1.0.4

Bumps [@nextcloud/capabilities](https://github.com/nextcloud/nextcloud-capabilities) from 1.0.2 to 1.0.4.
- [Release notes](https://github.com/nextcloud/nextcloud-capabilities/releases)
- [Changelog](https://github.com/nextcloud/nextcloud-capabilities/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/nextcloud-capabilities/commits)

Signed-off-by: dependabot[bot] <support@github.com>

Bump dompurify from 2.2.6 to 2.2.8

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.6 to 2.2.8.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.2.6...2.2.8)

Signed-off-by: dependabot[bot] <support@github.com>

Bump autosize from 4.0.2 to 4.0.4

Bumps [autosize](https://github.com/jackmoore/autosize) from 4.0.2 to 4.0.4.
- [Release notes](https://github.com/jackmoore/autosize/releases)
- [Changelog](https://github.com/jackmoore/autosize/blob/master/changelog.md)
- [Commits](https://github.com/jackmoore/autosize/compare/4.0.2...4.0.4)

Signed-off-by: dependabot[bot] <support@github.com>

Bump css-vars-ponyfill from 2.4.2 to 2.4.5

Bumps [css-vars-ponyfill](https://github.com/jhildenbiddle/css-vars-ponyfill) from 2.4.2 to 2.4.5.
- [Release notes](https://github.com/jhildenbiddle/css-vars-ponyfill/releases)
- [Changelog](https://github.com/jhildenbiddle/css-vars-ponyfill/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jhildenbiddle/css-vars-ponyfill/compare/v2.4.2...v2.4.5)

Signed-off-by: dependabot[bot] <support@github.com>

[tx-robot] updated from transifex

Merge pull request #27121 from nextcloud/backport/27117/stable21

[stable21] Add DB exception '@throws' tag to QBMapper PHPDoc

Merge pull request #27124 from nextcloud/backport/26282/stable21

[stable21] improve type handling of Avatar::generateAvatarFromSvg

improve type handling of Avatar::generateAvatarFromSv

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #27109 from nextcloud/backport/26466/stable21

[stable21] Move remnants of ocs api requests to v2 endpoint

Add DB exception throws tag to QBMapper PHPDoc

Signed-off-by: Anna Larch <anna@nextcloud.com>

Move remnants of ocs api requests to v2 endpoint

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #27097 from nextcloud/backport/27040/stable21

[stable21] Avoid reading ~/.aws/config when using S3 provider

Avoid reading ~/.aws/config when using S3 provider

When using S3 storage, we sometimes have open_basedir errors due to aws-sdk-php trying to read ~/.aws/config which is out of open_basedir restrictions.
Christoph Wurst already added csm=false config in #21406 but it wasn't enough, we also need to set use_arn_region=false, added in this commit.

Signed-off-by: Florent <florent@coppint.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27058 from nextcloud/backport/27032/stable21

[stable21] Fix filesize error on log rotation, if file does not exist

typo

Signed-off-by: dartcafe <github@dartcafe.de>

fix #25813

Signed-off-by: dartcafe <github@dartcafe.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26905 from nextcloud/dependabot/npm_and_yarn/stable21/handlebars-4.7.7

Merge pull request #27021 from nextcloud/backport/26963/stable21

[stable21] Fix log error when creating files from an empty template

[Security] Bump handlebars from 4.7.6 to 4.7.7

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7. **This update includes a security fix.**
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Fix log error when creating files from an empty template

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #27012 from nextcloud/backport/27000/stable21

[stable21] Harden apptoken check

[tx-robot] updated from transifex

Use parent wrapper to properly handle moves on the same source/target storage

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Harden apptoken check

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26999 from nextcloud/backport/26946/stable21

[stable21] Respect default share permissions for federated reshares

Respect default share permissions for federated reshares

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26964 from nextcloud/backport/26292/stable21

[stable21] ignore readonly flag for directories

Merge pull request #26952 from nextcloud/backport/26949/stable21

[stable21] fix occ command user:add-app-password

Merge pull request #26972 from nextcloud/backport/26958/stable21

[stable21] Throttle MountPublicLinkController when share is not found

[tx-robot] updated from transifex

Throttle MountPublicLinkController when share is not found

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

ignore readonly flag for directories

see http://support.microsoft.com/kb/326549

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #26955 from nextcloud/backport/26945/stable21

[stable21] Add bruteforce protection to the shareinfo endpoint

Add bruteforce protection to the shareinfo endpoint

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26879 from nextcloud/backport/26878/stable21

[stable21] Don't break OCC if an app is breaking in it's Application class

use the UID as loginName and not the display name.

Otherwise the app password will not work for users with a display name different to the UID.

Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>

[tx-robot] updated from transifex

Merge pull request #26911 from nextcloud/dependabot/npm_and_yarn/stable21/url-parse-1.5.1

[Security] Bump url-parse from 1.4.7 to 1.5.1

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.1. **This update includes a security fix.**
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #26912 from nextcloud/dependabot/npm_and_yarn/stable21/lodash-4.17.21

[Security] Bump lodash from 4.17.20 to 4.17.21

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26918 from nextcloud/dependabot/npm_and_yarn/stable21/hosted-git-info-2.8.9

[Security] Bump hosted-git-info from 2.8.8 to 2.8.9

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. **This update includes a security fix.**
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

Don't break OCC if an app is breaking in it's Application class

Signed-off-by: Joas Schilling <coding@schilljs.com>