Merge pull request #46816 from nextcloud/refactor/settings/security-attributes

Merge pull request #46821 from nextcloud/refactor/updatenotification/security-attributes

Merge pull request #47207 from nextcloud/fix/sticky-nav-item

fix(files): Fix non-sticky sticky views in files nav

Signed-off-by: Christopher Ng <chrng8@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #47209 from nextcloud/rakekniven-patch-2

chore(i18n): Improved grammar

Reported at Transifex.

Signed-off-by: rakekniven <2069590+rakekniven@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #46888 from nextcloud/jtr/bfp-settings-app-default-enable

Merge pull request #46723 from nextcloud/feat/add-delta-sync-to-subscription-calendars

feat(webcal): only update modified and deleted events from webcal calendars

Merge pull request #45435 from nextcloud/feat/dav/upcoming-events-api

feat(dav): Add an API for upcoming events

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

feat(dav): Add an API for upcoming events

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #47200 from nextcloud/fix/issue-47193

fix: test variables before returning

Merge pull request #47202 from nextcloud/chore/nextcloud-auth-2_4

chore(deps): Update `@nextcloud/auth` to v2.4.0 and use `getCSPNonce` where possible

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore(deps): Update `@nextcloud/auth` to v2.4.0 and use `getCSPNonce` where possible

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #43573 from nextcloud/HolgerHees-fix-csp-nonce-handling

Fix for ignored `CSP_NONCE` in ContentSecurity Header

Merge pull request #45786 from nextcloud/fix/caldav/default-vjournal

fix(caldav): allow VJOURNAL if no supported component set is specified

Merge pull request #45221 from nextcloud/feat/auth/authtoken-clean-up

feat(auth): Clean-up unused auth tokens and wipe tokens

fix: test variables before returning

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

fix(caldav): allow VJOURNAL if no supported component set is specified

This is mandated by the RFCs.

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #47195 from nextcloud/bugfix/noid/return-correct-userid-on-fed-invites

fix(federation): Return the used userID to allow the inviting server …

Merge pull request #47198 from nextcloud/fix/issue-46700

Change label "Allow download" for better l10n

chore(assets): Recompile assets

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: Update translation string

Signed-off-by: Archisman Das <archisman.officials@gmail.com>

fix(federation): Return the used userID to allow the inviting server to react to the famous `mapUid` result

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #47189 from nextcloud/feat/noid/ship-twofactor_nextcloud_notification

chore: Ship twofactor_nextcloud_notification

feat(webcal): only update modified and deleted events from webcal calendars

Signed-off-by: Anna Larch <anna@nextcloud.com>

feat(auth): Clean-up unused auth tokens and wipe tokens

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #41740 from nextcloud/Fix/duplicate-reminders

fix(dav): Handle duplicate event reminder

Merge pull request #47180 from nextcloud/fix/apply-group-limit-on-remove-from-group

Apply group limit on remove from group

Merge pull request #47181 from nextcloud/fix/new-folder-messae

fix(files): Add messages when "new folder" fails or gets cancelled

fix: handle-duplicate-reminder

Signed-off-by: hamza221 <hamzamahjoubi221@gmail.com>

Merge pull request #47188 from nextcloud/spreed/12950/avatar-menu-icon-color

fix(avatar): Fix icon-color for action-router contacts menu options

chore: Ship twofactor_nextcloud_notification

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(avatar): Fix icon-color for action-router contacts menu options

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

feat: Provide CSP nonce as `<meta>` element

This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Add messages when "new folder" fails or gets cancelled

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

test: Adjust tests for CSP nonce

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make sure CSP nonce is not double base64 encoded

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Use `CSP_NONCE` env variable in ContentSecurity Header

We should use 'cspNonceManager' for requesting the NONCE value, because it is doing the same as before, except that it honors a CPS_NONCE environment variable if available.

Signed-off-by: Holger Hees <holger.hees@gmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47177 from nextcloud/fix/noid/preferred-taskprocessing-providers

[Task processing] Fix preferred providers

feat(taskprocessing): add text2text, text2image, contextWrite, transcribe and translate providers in the testing app

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

chore(tests): Fix import in cypress test limit_to_same_group.cy.ts

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(tests): Fix SPDX license header on new cypress test

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(tests): Adapt tests to change of DefaultShareProvider constructor

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Remove shares only if there are no more common groups between users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(tests): Test limiting sharing to same group

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(files_sharing): Delete user shares if needed when user is removed from a group

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(taskprocessing): select preferred provider when running sync task, fix task type values according to preferred provider

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #46987 from nextcloud/fix/dav-public

fix(dav): Ensure share properties are also set on public remote endpoint

feat: Make `ISharedStorage` public API and reuse where possible

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(dav): Ensure share properties are also set on public remote endpoint

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47157 from nextcloud/perf/prevent-extra-requests

perf(files): Prevent extraneous requests when tree children are loading

Merge pull request #47153 from nextcloud/trashbin-fix-folder-extract

fix: fix getting the folder node from the dav response

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix: fix getting the folder node from the dav response

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

perf(files): Prevent extraneous requests when tree children are loading

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #47152 from nextcloud/fix/guest-layout

fix(styles): Guest layout should follow the new design

Merge pull request #47135 from nextcloud/fix/open-tags-in-folder

fix(systemtags): Sub folders should be opened in files

fix(systemtags): Sub folders should be opened in files

Currently this is simply broken and here are two ways:
1. Open subfolders in files view
2. Implement logic to save last request

1 is the way this is now implemented, basically copy-paste from the recent view.
2 is much more complicated because if we get `/2/foo/bar` as the path we need to know the source of `foo`, so we would need at least 2 requests or cache the previous directory. We do not do it like this for any view so lets just stick with 1 for now.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(styles): Guest layout should follow the new design

1. Adjust some places that used the old pill-style design
2. Make indention consistent using tabs
3. Remove duplicates styles for inputs (also included in server.css) that conflic with nextcloud-vue styles

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47147 from nextcloud/fix/trim-new-folder

fix(files): trim names on new node creation

fix(files): trim names on new node creation

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #47149 from nextcloud/fix/disable-tags-editing

fix(files): Disable tags editing for shared files/folders with view only permission

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): Disable tags editing for shared files/folders with view only permission

Signed-off-by: Konstantin Myakshin <molodchick@gmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47100 from nextcloud/release/30.0.0_beta_5

Merge pull request #46456 from nextcloud/fix/check-datadir

fix(SetupCheck): Properly check public access to data directory

When checking for public (web) access to the data directory the status is not enough
as you might have a webserver that forwards to e.g. a login page.
So instead check that the content of the file matches.

For this the `.ncdata` file (renamed from `.ocdata`¹) has minimal text content
to allow checking.

¹The file was renamed from the legacy `.ocdata`, there is a repair step to remove the old one.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47122 from nextcloud/feat/limited-depth-tree

feat(files): Load limited depth tree

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat: Load limited depth tree

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat(files): Add getter for all view configs

Signed-off-by: Christopher Ng <chrng8@gmail.com>

perf(files): Remove redundant call to get navigation

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat(files): Update openapi

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat(files): Allow specifying path and depth for returned folder tree

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #47140 from nextcloud/fix/app-menu-focus

fix: Make focused app menu entry wider to see full name

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make focussed app menu entry wider to see full name

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47121 from nextcloud/fix/a11y-inline-action

fix(systemtags): Make inline tags list fully accessible

Merge pull request #46624 from nextcloud/fix/issue-43923

fix(caldav): test for null and blank value

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

test: Added e2e tests for inline system tags file action

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(systemtags): Make inline tags list fully accessible

1. The label was wrong it mentioned the first and last tag, so the information was duplicated
2. It only mentioned the first and last but not all other
3. All other tags were only added as `title` which is not accessible

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47120 from nextcloud/fix/systemtags

fix(systemtags): Correctly load tagged files in "tags"-files-view

Merge pull request #47116 from nextcloud/addColMigNotEx

fix(migration): Add column if not exists

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(systemtags): Correctly load tagged files in "tags"-files-view

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(caldav): test for null and blank value

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

Merge pull request #47034 from nextcloud/fix/app-menu-overflow

fix: Make app menu overflow entries vertically aligned

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>