Merge pull request #19946 from nextcloud/dependabot/npm_and_yarn/stable16/acorn-6.4.1

[Security] Bump acorn from 6.1.1 to 6.4.1

[tx-robot] updated from transifex

[Security] Bump acorn from 6.1.1 to 6.4.1

Bumps [acorn](https://github.com/acornjs/acorn) from 6.1.1 to 6.4.1. **This update includes a security fix.**
- [Release notes](https://github.com/acornjs/acorn/releases)
- [Commits](https://github.com/acornjs/acorn/compare/6.1.1...6.4.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #19926 from nextcloud/backport/19910/stable16

[stable16] Do not use the instance name as user part of from mail addresses

Do not use the instance name as user part of from mail addresses

This will cause issues since the theming name can contain characters
that are not allowed in the local part of the mail address (like spaces)

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19866 from nextcloud/version/16.0.9/final

16.0.9

[tx-robot] updated from transifex

[tx-robot] updated from transifex

16.0.9

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #19844 from nextcloud/version/16.0.9/RC2

16.0.9 RC2

Merge pull request #19832 from nextcloud/backport/19815/stable16

[stable16] Prevent self-xss via invalid mysql user name on install screen

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19797 from nextcloud/backport/stable16/19768

[stable16] Keep edit permission when toggling share checkbox

16.0.9 RC2

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Prevent self-xss via invalid mysql user name on install screen

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19817 from nextcloud/backport/19742/stable16

[stable16] Add message for DoesNotExistException

[tx-robot] updated from transifex

Add message for DoesNotExistException

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Merge pull request #19734 from nextcloud/version/16.0.9/RC1

16.0.9 RC1

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Keep edit permission when updating resharing permission for file shares

Signed-off-by: Julius Härtl <jus@bitgrid.net>

16.0.9 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #18230 from nextcloud/stable16-backport/18120

[stable16] respect shareapi_allow_share_dialog_user_enumeration in Principal bac…

Merge pull request #19096 from nextcloud/backport/19023/stable16

[stable16] expose Argon2 options (as we did for bcrypt)

[tx-robot] updated from transifex

[tx-robot] updated from transifex

respect shareapi_allow_share_dialog_user_enumeration in Principal backend for Sabre/DAV

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19717 from nextcloud/backport/19707/stable16

[stable16] Fix non-centered no javascript message

[tx-robot] updated from transifex

Fix non-centered no javascript message

Signed-off-by: Gary Kim <gary@garykim.dev>

[tx-robot] updated from transifex

Merge pull request #18885 from nextcloud/backport/17717/stable16

[stable16] relax strict getHome behaviour for LDAP users in a shadow state

[tx-robot] updated from transifex

relax strict getHome behaviour for LDAP users in a shadow state

* simplifies deletion process
* less strange behaviour when looking up home storage (as long as it is local)
* thus could enable transfer ownerships after user went invisible on ldap

backport of #17717

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
decouple userExists from userExistsOnLDAP check

allows to mark users as offline right away, avoids a gap of being not a
user and causing weird side effects

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
adjust tests

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
remove superfluous tests

- user_ldap is not exposed to public api, it is always behind ldap_proxy
- this is too much for a unit test
- integration tests cover userExists implicitly

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
ensure that only valid group members are returned

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19626 from nextcloud/backport/19549/stable16

[stable16] remove noise from detectUuid and cache results

Merge pull request #19638 from nextcloud/backport/19634/stable16

[stable16] Correctly trim long cyrillic note

Correctly trim long cyrillic note

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

remove noise from detectUuid and cache results

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19594 from nextcloud/backport/19528/stable16

[stable16] Strip of users home path from share api message

[tx-robot] updated from transifex

Strip of users home path from share api message

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

extended documentation

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

ignore values that undershoot the minimum, go with default

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

use getSystemValueInt

Co-Authored-By: kesselb <mail@danielkesselberg.de>
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

expose Argon2 options (as we did for bcrypt)

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19472 from nextcloud/backport/19465/stable16

[stable16] when we receive intentional empty whats new info, do not try to show it

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

when we receive intentional empty whats new info, do not try to show it

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19453 from nextcloud/backport/19424/stable16

[stable16] Don't create invalid users

Don't create invalid users

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19362 from nextcloud/backport/19349/stable16

[stable16] Prevent archieved download on secure view

[tx-robot] updated from transifex

Merge pull request #19373 from nextcloud/dependabot/npm_and_yarn/build/stable16/lodash-4.17.15

[Security] Bump lodash from 4.17.11 to 4.17.15 in /build

[Security] Bump lodash from 4.17.11 to 4.17.15 in /build

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.15. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.15)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #19371 from nextcloud/dependabot/npm_and_yarn/build/stable16/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Merge pull request #19374 from nextcloud/dependabot/npm_and_yarn/build/stable16/lodash.mergewith-4.6.2

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

[tx-robot] updated from transifex

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Prevent archieved download on secure view

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19310 from nextcloud/backport/19219/stable16

[stable16] Fix display of DTEND for multi-day all-day event

[tx-robot] updated from transifex

Fix display of DTEND for multi-day all-day event

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #19285 from nextcloud/backport/19281/stable16

[stable16] for the DB ot pick an index specify the object_type

[tx-robot] updated from transifex

for the DB ot pick an index specify the object_type

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19209 from nextcloud/backport/19176/stable16

[stable16] Do not encode contacts menu mailto links

Do not encode contacts menu mailto links

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #19155 from nextcloud/version/16.0.8/final

16.0.8

Update CA bundle

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

16.0.8

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>