Merge pull request #39842 from nextcloud/encode-filename-trashbin-restore

fix: encode basename in restore action

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #39511 from nextcloud/fix/reverse-getDateTime-deprecation

fix(utility): De- deprecate getDateTime and getTime as now() only returns DateTimeImmutable

fix(utility): De- deprecate getDateTime as now() only returns immutable objects
This will mean lots of code like
```$dateTime = (new DateTime())->setTimestamp(ITimeFactory::now()->getTimestamp()```
if a regular DateTime object is needed

Signed-off-by: Anna Larch <anna@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39713 from nextcloud/Jerome-Herbinet-remove-padding-for-longer-wordings

Remove padding for longer wordings (like the future French one)

Merge pull request #40013 from nextcloud/fix/remove-pw-from-logging

Do not log passwords in debug mode

npm run build

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Remove padding for longer wordings

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Do not log passwords in debug mode

Signed-off-by: Anna Larch <anna@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39971 from nextcloud/fix/a11y-weather-visible-label

Merge pull request #40012 from nextcloud/techdebt/noid/prepare-doctrine-update

Merge pull request #39955 from nextcloud/fix/files-lib

chore(deps): remove unused is-svg

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore: upgrade to `@nextcloud/files@3.0.0-beta.18`

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

feat: migrate FileAction from server

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore: use Navigation from `@nextcloud/files`

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(dbal): Migrate to Doctrine\DBAL\ParameterTypes

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(tests): Specify all positional parameters again to fix tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #39999 from nextcloud/chore/deps/ts-vue

Merge pull request #40005 from nextcloud/automated/noid/master-update-ca-cert-bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40001 from nextcloud/fix/openapi/capabilities

Fix OpenAPI capabilities

files: Fix OpenAPI spec

Signed-off-by: jld3103 <jld3103yt@gmail.com>

Update openapi-extractor

Signed-off-by: jld3103 <jld3103yt@gmail.com>

chore(deps): upgrade `@nextcloud/webpack-vue-config` and `typescript`

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #39958 from nextcloud/dav-permissions-perf

Merge pull request #39979 from nextcloud/automated/noid/master-fix-npm-audit

Merge pull request #39984 from nextcloud/feature/openapi/files_reminders

files_reminders: Add OpenAPI spec

Merge pull request #39950 from nextcloud/bugfix/uncaught-preview-promise

Merge pull request #39996 from nextcloud/bugfix/noid/fix-header-regression

fix(middleware): Fix header injection for bruteforce middleware

fix(middleware): Fix header injection for bruteforce middleware

Calling setHeaders(getHeaders()) breaks the CSP nonce for unknown reasons
So shifting back to old standard practise for now

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #39987 from nextcloud/fix/39926-fix_predefined_status-buttons

Fix predefined status buttons

Add logic for predefined status to be visible.
Add styles for radio buttons to be visible in checked, active and focus-visible state.

Signed-off-by: julia.kirschenheuter <julia.kirschenheuter@nextcloud.com>

Merge pull request #39912 from nextcloud/fix/improved-upload-view

Improve upload progress visualization

fix: Avoid throwing on folder previews as there are none

Signed-off-by: Julius Härtl <jus@bitgrid.net>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #39937 from nextcloud/feat/dashboard/item-api-v2

feat(dashboard): implement widget item api v2

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(dashboard): implement widget item api v2

This API enables the dashboard to render all widgets from the API data
alone without having apps to provide their own bundles. This saves a lot
of traffic and execution time as a lot less javascript has to be parsed
on the frontend.

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

files_reminders: Add OpenAPI spec

Signed-off-by: jld3103 <jld3103yt@gmail.com>

Merge pull request #39870 from nextcloud/perf/noid/memcache-bfp-backend

feat(security): Add a bruteforce protection backend base on memcache

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39943 from nextcloud/fix/users-app-nav

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(settings): Keyboard focus outline for app nav button

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(settings): Invert app nav icons when active

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(settings): Remove margin on app nav button

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(settings): Remove add group hover border

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix: Upload progress shows number of files to upload and current index

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make smooth bitrate and remaining upload time work when unset

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Smooth time remaining, bitrate and stabilize user information

Besides the existing moving average, a smoothing factor is introduced for the time remaining display as well as the bitrate.
Furthermore, half of the buffer needs to be filled before the first prediction is displayed to the user. This reduces volatile and jumping durations towards the user and improves usability.

Signed-off-by: Cyrill H. <phlogi@posteo.de>
Co-authored-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #39965 from nextcloud/dependabot/npm_and_yarn/cypress-12.17.4

Merge pull request #39989 from nextcloud/techdebt/noid/bump-coding-style

fix(CS): Ignore apps*/ directories which are gitignored

feat(admin): Show an error when the admin is throttled

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: Make bypass function public API

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(OCC): Add a command to get the bruteforce state of an IP

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat: Expose if the own IP is allowed to bypass bruteforce protection

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat: Add a header which signals that the request was throttled

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(security): Add a "testing mode" for bruteforce protection that doesn't sleep

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(security): Add a bruteforce protection backend base on memcache

Similar to the ratelimit backend

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(CS): Ignore apps*/ directories which are gitignored

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #39391 from nextcloud/fix/4324-fix-color-of-special-buttons

Change color of error and success

Change color of error and success

Signed-off-by: julia.kirschenheuter <julia.kirschenheuter@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39727 from nextcloud/automated/noid/master-update-psalm-baseline

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #39968 from nextcloud/dependabot/npm_and_yarn/nextcloud-vue-collections-0.11.1

chore(deps): Bump nextcloud-vue-collections from 0.10.0 to 0.11.1

Bumps [nextcloud-vue-collections](https://github.com/juliushaertl/nextcloud-vue-collections) from 0.10.0 to 0.11.1.
- [Release notes](https://github.com/juliushaertl/nextcloud-vue-collections/releases)
- [Commits](https://github.com/juliushaertl/nextcloud-vue-collections/compare/v0.10.0...v0.11.1)

---
updated-dependencies:
- dependency-name: nextcloud-vue-collections
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #39976 from nextcloud/dependabot/github_actions/actions/stale-8

Merge pull request #39975 from nextcloud/dependabot/github_actions/actions/github-script-6

Merge pull request #39967 from nextcloud/dependabot/npm_and_yarn/sass-1.66.1

chore(deps): Bump actions/stale from 5 to 8

Bumps [actions/stale](https://github.com/actions/stale) from 5 to 8.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v5...v8)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps): Bump actions/github-script from 5 to 6

Bumps [actions/github-script](https://github.com/actions/github-script) from 5 to 6.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(a11y): Add always visible label when setting weather address

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore(deps-dev): Bump sass from 1.64.2 to 1.66.1

Bumps [sass](https://github.com/sass/dart-sass) from 1.64.2 to 1.66.1.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.64.2...1.66.1)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): Bump cypress from 12.17.3 to 12.17.4

Bumps [cypress](https://github.com/cypress-io/cypress) from 12.17.3 to 12.17.4.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/cypress-io/cypress/compare/v12.17.3...v12.17.4)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39924 from nextcloud/bugfix/noid/x-requested-with

Merge pull request #39754 from nextcloud/Jerome-Herbinet-download-and-enable-all

Download and enable all

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Download and enable all

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
npm run build

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Merge pull request #39961 from nextcloud/bugfix/noid/simplify-route-name

fix(CS): Use the naming pattern for the URL scheme

fix: Set X-Requested-With header on all requests to avoid browser auth dialogs

Signed-off-by: Julius Härtl <jus@bitgrid.net>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #39888 from nextcloud/less-container-queries

Reduce the number of container queries

Merge pull request #39922 from nextcloud/dependabot/npm_and_yarn/marked-7.0.3

chore(deps): Bump marked from 5.1.2 to 7.0.3

Merge pull request #39938 from nextcloud/dependabot/npm_and_yarn/libphonenumber-js-1.10.41

chore(deps): Bump libphonenumber-js from 1.10.38 to 1.10.41

only determine quota_include_external_storage once for quota wrapper

Signed-off-by: Robin Appelman <robin@icewind.nl>

chore(deps): Bump marked from 5.1.2 to 7.0.3

Bumps [marked](https://github.com/markedjs/marked) from 5.1.2 to 7.0.3.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json)
- [Commits](https://github.com/markedjs/marked/compare/v5.1.2...v7.0.3)

---
updated-dependencies:
- dependency-name: marked
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

improve performance of calculating dav permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #39867 from nextcloud/login-less

Add a separate event for login page rendering

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(CS): Use the naming pattern for the URL scheme

Signed-off-by: Joas Schilling <coding@schilljs.com>

only get logger when needed in sabre/directory

Signed-off-by: Robin Appelman <robin@icewind.nl>

better caching in storage stats calculations

Signed-off-by: Robin Appelman <robin@icewind.nl>

only gather dependencies for trashbin wrapper once

Signed-off-by: Robin Appelman <robin@icewind.nl>

reuse dependencies from wrapped cache

Signed-off-by: Robin Appelman <robin@icewind.nl>