Merge pull request #16897 from nextcloud/dependabot/npm_and_yarn/apps/accessibility/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/accessibility

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/accessibility

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16900 from nextcloud/dependabot/npm_and_yarn/apps/oauth2/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/oauth2

Merge pull request #16902 from nextcloud/dependabot/npm_and_yarn/apps/updatenotification/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/updatenotification

Merge pull request #16904 from nextcloud/dependabot/npm_and_yarn/settings/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings

Merge pull request #16905 from nextcloud/dependabot/npm_and_yarn/build/stable15/mixin-deep-1.3.2

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /build

[tx-robot] updated from transifex

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /build

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /settings

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep in /apps/updatenotification

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump mixin-deep from 1.3.1 to 1.3.2 in /apps/oauth2

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. **This update includes a security fix.**
- [Release notes](https://github.com/jonschlinkert/mixin-deep/releases)
- [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16849 from nextcloud/backport/16847/stable15

[stable15] Only add the app-itunes-app tag if the id is set

[tx-robot] updated from transifex

Only add the app-itunes-app tag if the id is set

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #16825 from nextcloud/backport/16808/stable15

[stable15] Undefined variable response when server is no nextcloud anymore

[tx-robot] updated from transifex

Undefined variable response when server is no nextcloud anymore

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #16803 from nextcloud/backport/16793/stable15

[stable15] Filter more configs

Filter more configs

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[stable15] Rename delete label to Delete folder/file (#16742)

[stable15] Rename delete label to Delete folder/file

Rename delete label to Delete folder/file

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Merge pull request #16732 from nextcloud/version/15.0.11/final

15.0.11

[tx-robot] updated from transifex

15.0.11

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16676 from nextcloud/version/15.0.11/RC1

15.0.11 RC1

15.0.11 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #16692 from nextcloud/backport/16683/stable15

[stable15] Fix enable/disable user audit message

Merge pull request #16224 from nextcloud/backport/15769/stable15

[stable15] dont use part files for dav writes when the target folder doesn't have create permissions

Merge pull request #16690 from nextcloud/backport/16686/stable15

[stable15] Properly return an int in the getId function of the cache

add test for overwriting in non creatable directory

Signed-off-by: Robin Appelman <robin@icewind.nl>

dont use part files for dav writes when the target folder doesn't have create permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix enable/disable user audit message

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Properly return an int in the getId function of the cache

fixes #16684

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16631 from nextcloud/backport/16624/stable15

[stable15] Make sure we only fetch the file by id for the actual owner

Make sure we only fetch the file by id for the actual owner

Otherwise this will fetch all mounts for the file id which is quite
expensive and causes long saving times in big sharing structures

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #16608 from nextcloud/backport/stable15/16596

[stable15] Set proper defaults for v-tooltip usages

[tx-robot] updated from transifex

Merge pull request #16611 from nextcloud/backport/16599/stable15

[stable15] Fix/xss/on favorite file

prevent potential XSS via unchecked use innerHTML

Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>

fix XSS when adding a file with a malicious name to favorites

Signed-off-by: Max Fichtelmann <max.fichtelmann@procilon.de>

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Force defaultHtml setting of v-tooltip to be disabled

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16565 from nextcloud/backport/16555/stable15

[stable15] use a pattern to identify sensitive config keys

Merge pull request #16568 from nextcloud/backport/16163/stable15

[stable15] Change send to sent

[tx-robot] updated from transifex

Change send to sent

Signed-off-by: Frederic Werner <frederic-github@werner-net.work>

treat sensitive config keys by pattern

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #16549 from nextcloud/dependabot/npm_and_yarn/settings/stable15/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings

[Security] Bump fstream from 1.0.11 to 1.0.12 in /settings

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16548 from nextcloud/dependabot/npm_and_yarn/build/stable15/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

[tx-robot] updated from transifex

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16537 from nextcloud/backport/16503/stable15

[stable15] allow to provide supported calendar component set internally as a string

allow to provide supported calendar component set internally as a string

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16445 from nextcloud/backport/16440/stable15

[stable15] Fix File#putContents(string) on ObjectStorage

[tx-robot] updated from transifex

Fix File#putContents(string) on ObjectStorage

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Merge pull request #16433 from nextcloud/backport/16424/stable15

[stable15] Do not keep searching for recent

Do not keep searching for recent

If userA has a lot of recent files. But only shares 1 file with userB
(that has no files at all). We could keep searching until we run out of
recent files for userA.

Now assume the inactive userB has 20 incomming shares like that from
different users. getRecent then basically keeps consuming huge amounts
of resources and with each iteration the load on the DB increases
(because of the offset).

This makes sure we do not get more than 3 times the limit we search for
or more than 5 queries.

This means we might miss some recent entries but we should fix that
separatly. This is just to make sure the load on the DB stays sane.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #16426 from nextcloud/backport/16423/stable15

[stable15] Only prevent disabling encrytion via the API

Only prevent disabling encrytion via the API

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex