feat(login): Clear login form (password) after IDLE timeout

For security reasons it is recommended to stop the login process at a defined time,
this could prevent password leaks by e.g. user forgetting that they entered their password on public devices.

Enforced e.g. by the BSI ORP.4.A13 rule.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #44425 from nextcloud/dependabot/npm_and_yarn/nextcloud/router-3.0.0

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(tests): Add mock for `window._oc_webroot`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

build(deps): bump @nextcloud/router from 2.2.1 to 3.0.0

Bumps [@nextcloud/router](https://github.com/nextcloud/nextcloud-router) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/nextcloud/nextcloud-router/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-router/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/nextcloud-router/compare/v2.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/router"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #44424 from nextcloud/dependabot/npm_and_yarn/webpack-5.91.0

Merge pull request #44429 from nextcloud/dependabot/npm_and_yarn/tar-6.2.1

build(deps-dev): bump tar from 6.2.0 to 6.2.1

Bumps [tar](https://github.com/isaacs/node-tar) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #44431 from nextcloud/dependabot/npm_and_yarn/nextcloud/vue-8.11.1

build(deps): bump @nextcloud/vue from 8.11.0 to 8.11.1

Bumps [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue) from 8.11.0 to 8.11.1.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud-libraries/nextcloud-vue/compare/v8.11.0...v8.11.1)

---
updated-dependencies:
- dependency-name: "@nextcloud/vue"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #44428 from nextcloud/dependabot/npm_and_yarn/cypress-13.7.1

build(deps-dev): bump cypress from 13.7.0 to 13.7.1

Bumps [cypress](https://github.com/cypress-io/cypress) from 13.7.0 to 13.7.1.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/cypress-io/cypress/compare/v13.7.0...v13.7.1)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #44427 from nextcloud/dependabot/npm_and_yarn/cypress-split-1.21.0

Merge pull request #44430 from nextcloud/dependabot/npm_and_yarn/core-js-3.36.1

Merge pull request #44432 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.18

build(deps): bump core-js from 3.36.0 to 3.36.1

Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.36.0 to 3.36.1.
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.36.1/packages/core-js)

---
updated-dependencies:
- dependency-name: core-js
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #44426 from nextcloud/dependabot/npm_and_yarn/dompurify-3.0.11

build(deps): bump dompurify from 3.0.9 to 3.0.11

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.0.9 to 3.0.11.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.0.9...3.0.11)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

build(deps-dev): bump webpack from 5.90.3 to 5.91.0

Bumps [webpack](https://github.com/webpack/webpack) from 5.90.3 to 5.91.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.90.3...v5.91.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #44436 from nextcloud/dependabot/npm_and_yarn/webpack-dev-middleware-5.3.4

build(deps-dev): bump webpack-dev-middleware from 5.3.3 to 5.3.4

Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #44423 from nextcloud/dependabot/npm_and_yarn/libphonenumber-js-1.10.58

build(deps): bump libphonenumber-js from 1.10.57 to 1.10.58

Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) from 1.10.57 to 1.10.58.
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.10.57...v1.10.58)

---
updated-dependencies:
- dependency-name: libphonenumber-js
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #44417 from nextcloud/fix/files-suffix-folders

fix(files): Only add copy suffix before file extension for files (not folders)

build(deps-dev): bump phpunit/phpunit in /build/integration

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.17 to 9.6.18.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.18/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.17...9.6.18)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps-dev): bump cypress-split from 1.20.1 to 1.21.0

Bumps [cypress-split](https://github.com/bahmutov/cypress-split) from 1.20.1 to 1.21.0.
- [Release notes](https://github.com/bahmutov/cypress-split/releases)
- [Commits](https://github.com/bahmutov/cypress-split/compare/v1.20.1...v1.21.0)

---
updated-dependencies:
- dependency-name: cypress-split
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #44357 from nextcloud/wrapper-instanceof-resiliant

Merge pull request #44362 from nextcloud/artonge/feat/check_permissions_of_all_nodes_for_versions

Check permissions of all accessible file for versions

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): When copying nodes only add the copy suffix for file before file extension

Co-authored-by: Pytal <24800714+Pytal@users.noreply.github.com>
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44407 from nextcloud/fix/files-copy-move-escaping

fix(files): Do not escape file names in the file picker

Merge pull request #44400 from nextcloud/bugfix/noid/allow-debug-loglevel-again

fix(logging): Restore the option to log with debug level

Merge pull request #44408 from nextcloud/fix/jsresource-locator-app-root

fix(JSRecourceLocator): Add missing slash after server root

fix(JSRecourceLocator): Add missing slash after server root

The `OC::$SERVERROOT` is always returned without a trailing slash, so we need to add a slash between server root and apps directory.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Do not escape file names for filepicker buttons

The text is already escaped by Vue, so we should not escape or sanitize the filename.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(logging): Restore the option to log with debug level

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #44361 from nextcloud/release/29.0.0_beta_5

Merge pull request #44075 from nextcloud/fix/dav/sync-token-retention-time

Merge pull request #44252 from nextcloud/enh/s3-connectivity

feat(ObjectStore): Make the S3 `concurrency` option configurable

Merge pull request #44368 from nextcloud/feat/new-file-menu-icon-svg

feat: Add new mdi New file menu icons

fix(dav): Add retention time to sync token cleanup

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

feat(ObjectStore): Make S3 MultipartUpload concurrency configurable

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(ObjectStore): Use common S3 trait so config and connection trait members are in sync

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44381 from nextcloud/fix/workflows-engine-groups

fix(workflowengine): Use correct event names to make search for groups work again

Merge pull request #44297 from nextcloud/fix/forbid-tagging-readonly-files

Forbid tagging readonly files

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #44218 from nextcloud/613-limit-auth-input-emails-255

feat: Limit email input to 255 chars

Merge pull request #44360 from nextcloud/fix/add-exdate-exrule-to-confidential-object

fix(caldav): add EXDATE and EXRULE to confidential object

Merge pull request #44376 from nextcloud/fix/dav/acls-shared-addressbook

fix(dav): ACLs for shared addressbooks

Merge pull request #44363 from nextcloud/artonge/debt/rename_author_hook

Rename MetadataFileEvents to VersionAuthorListener

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(workflowengine): Use correct event for searching for groups

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44295 from nextcloud/fix/direct-edit-incognito

Allow injecting the user temporarily for direct editing

refactor(files_versions): Rename MetadataFileEvents to VersionAuthorListener

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(dav): ACLs for shared addressbooks

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #44297 from nextcloud/fix/forbid-tagging-readonly-files

Forbid tagging readonly files

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

feat: Limit email input on auth pages to 255 chars

Excessively long emails reported make server unresponsive.

We could at some point, consider adding a configuration for sysadmins to bypass this setting
on their instance if they want.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(caldav): add EXDATE and EXRULE to confidential object

Signed-off-by: Anna Larch <anna@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore: Update openapi spec

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat: Add new icon-filetype-text and icon-add-folder-description

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix: Use default grey for text as background-image url svgs do not support CSS variables

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Add mdi mimetype svgs
- article for text
- description for x-office-document
- file-table-box for x-office-spreadsheet
- file-presentation-box for x-office-presentation
- drawing-box for x-office-drawing

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat: Add iconSvgInline to TemplateFileCreator

Signed-off-by: Christopher Ng <chrng8@gmail.com>

build(hub): 29.0.0 beta 5

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

fix: add extra check to ensure wrapped shared storage is set

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: log error when default getWrapperStorage would return null

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #44344 from nextcloud/fix/dav/webdav-5-fetch

fix(dav): adjust usages of webdav.customRequest

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #44339 from nextcloud/fix/noid/use-share-owner

fix(share): use share owner to get ownership

Merge pull request #44276 from nextcloud/fix/config/string-user-keys

fix(share): use share owner to confirm reshare

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #44333 from nextcloud/bug/noid/remove-optional-index-cards-abid

fix(db): remove redundant index in cards

Merge pull request #44275 from nextcloud/release/29.0.0_beta_4

Merge pull request #44328 from nextcloud/feat/app-discover-showcase-type

feat(settings): Implement `showcase` type for App Discover section

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(settings): Implement `app` type for AppDiscover section

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(settings): Implement `showcase` type for App Discover section

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Make App Discover PostType responsive based on available width

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44286 from nextcloud/fix/app-discover-media-size

fix(settings): Ensure media for app discover section is scaled correctly

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Fit media into post type (app discover section)

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Show proper warning if app discover section could not be fetched

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44282 from nextcloud/fix/app-discover-pin-and-parse

fix(settings): Support `order` property on App Discover elements and hide future elements

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(settings): Support `order` property on App Discover elements and hide future elements

This adds support to pinning elements by setting the `order` property on the element (e.g. `order: 0` will always be the first element to show).
Also filter list of elements to remove upcoming and outdated elements (as the json might be cached).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(config): Make sure user keys are strings

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

fix(db): remove redundant index in cards

Follow up for https://github.com/nextcloud/server/pull/43340

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #44236 from nextcloud/fix/settings--app-list-scrolling-on-safari

Merge pull request #44316 from nextcloud/fix/resolveGroupShares

chore: Break closure call on two lines to make it readable

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(systemtags): Forbid tagging of readonly files

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(assets): Recompile assets

Signed-off-by: Grigorii K. Shartsev <me@shgk.me>