Merge pull request #37553 from nextcloud/backport/37542/stable24

[stable24] feat(security): Allow to opt-out of ratelimit protection, e.g. for te…

fix(backport): Add missing sample config

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(security): Allow to opt-out of ratelimit protection, e.g. for testing on CI

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #37280 from nextcloud/automated/noid/stable24-update-psalm-baseline

[stable24] Update psalm-baseline.xml

Merge pull request #37493 from nextcloud/backport/37448/stable24

[stable24] hide shared files located in group folder's trash bin

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

hide shared files located in group folder's trash bin

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37443 from nextcloud/backport/37437/stable24

[stable24] fix(docs): Fix RST parsing of the sample config

fix(docs): Fix RST parsing of the sample config

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37367 from nextcloud/backport/36636/stable24

[stable24] fix OC_Image: Prevent E_WARNING from getimagesize*

Merge pull request #36580 from nextcloud/backport/36509/stable24

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix OC_Image: Prevent E_WARNING from getimagesize*

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Merge pull request #37353 from nextcloud/release/24.0.11

24.0.11

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

24.0.11

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37204 from nextcloud/release/24.0.11_rc1

24.0.11 RC1

Merge pull request #37250 from nextcloud/backport/37010/stable24

[stable24] Fix Cache-Control header of non-versioned assets

Merge pull request #37237 from nextcloud/backport/37227/stable24

[stable24] chore: use local variable for remote address

chore: use local variable for remote address

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #37256 from nextcloud/backport/37252/stable24

[stable24] fix(workflow): Check tag attribute

fix(workflow): Check tag attribute

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix Cache-Control header of non-versioned assets

Non-cache-busted assets such as /dist/core-main.js also matched the
regex meant for cache-busted assets (note the ? at the end of the
regex).
The FilesMatch directive for cache-busted assets coming after the
non-cache-busted version all assets actually got the immutable flag
in their Cache-Control header. This caused client-side errors on
updates.

Query strings are not actually passed to FilesMatch directives so we
need another way to tell cache-busted/versionned assets apart from
non-versioned assets, here using If/Else directives.

Signed-off-by: Nicolas Guichard <nicolas@guichard.eu>

Merge pull request #36750 from nextcloud/backport/36689/stable24

[stable24] Change X-Robots-Tag header from "none" to "noindex, nofollow"

Merge pull request #36900 from nextcloud/backport/stable24/36837

[stable24] fix(SystemTagManager): Truncate overlong tag names

Merge pull request #36743 from nextcloud/backport/35419/stable24

[stable24] Fix login loop if login CSRF fails and user is not logged in

Merge pull request #35651 from nextcloud/backport/35057/stable24

[stable24] Add brute force protection on all methods wrapped by PublicShareMiddleware

Merge pull request #37226 from nextcloud/backport/37221/stable24

[stable24] Save some CI time

manual backport of #35057

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Save some CI time

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37004 from nextcloud/backport/36803/stable24

[stable24] [db]: Remove not supported column comments for SQLite

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

24.0.11 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37159 from nextcloud/backport/37070/stable24

[stable24] add a check for disk_free_space in Config.php

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

add a check for disk_free_space in Config.php

Signed-off-by: Simon L <szaimen@e.mail.de>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #36888 from nextcloud/backport/36781/stable24

[stable24] fix(CI): Run repair steps against Oracle DB

Merge pull request #36586 from nextcloud/backport/36552/stable24

[stable24] fix(client-login-flow): Handle missing stateToken gracefully

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37037 from nextcloud/backport/37023/stable24

[stable24] chore(security): Bump "Expires" of well-known/security.txt

chore(security): Bump "Expires" of well-known/security.txt

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

tests(db): Add test case to ensure column comments work

Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>

fix(DB): Remove not supported column comments when using SQLite

Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Neutralize action name

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #36746 from nextcloud/backport/36465/stable24

[stable24] Avoid locking on restore/delete and limit concurrent requests

fix(SystemTagManager): Truncate overlong tag names

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Fix appconfig compatibility with Oracle DB

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(OCC): Don't throw in the repair step for phone validation

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fail the repair command when an error happened

Signed-off-by: Joas Schilling <coding@schilljs.com>

First run unit tests so they don't fail

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(CI): Run repair steps against Oracle DB

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #36662 from nextcloud/backport/36192/stable24

[stable24] fix(caldav): Fix reminder timezone drift for all-day events

fix(client-login-flow): Handle missing stateToken gracefully

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

fix(caldav): Fix reminder timezone drift for all-day events

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #36762 from nextcloud/bugfix/noid/scss-reset

Avoid scss cacher reset on empty variables

Merge pull request #36651 from nextcloud/automated/noid/stable24-update-psalm-baseline

[stable24] Update psalm-baseline.xml

fix: Avoid resetting scss cacher when no variables are found

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(files_trashbin): Remove unnecessary scanner logic when getting versions from trash

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #36732 from nextcloud/backport/35365/stable24

[stable24] Check for opcache.file_cache_only=1

Merge pull request #36730 from nextcloud/backport/36691/stable24

[stable24] add a disk_free_space check before writing config

Merge pull request #36798 from nextcloud/backport/36795/stable24

[stable24] Avoid extra parenthesis around SQL in IN expressions

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #36686 from nextcloud/release/24.0.10

24.0.10

24.0.10

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #36816 from nextcloud/backport/36814/stable24

[stable24] Validate the scope when validating operations

Also check the scope when reading operations from the database

Signed-off-by: Joas Schilling <coding@schilljs.com>

Validate the scope when validating operations

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): 🔠 Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>