Prevent self-xss via invalid mysql user name on install screen

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #19817 from nextcloud/backport/19742/stable16

[stable16] Add message for DoesNotExistException

[tx-robot] updated from transifex

Add message for DoesNotExistException

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Merge pull request #19734 from nextcloud/version/16.0.9/RC1

16.0.9 RC1

16.0.9 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #18230 from nextcloud/stable16-backport/18120

[stable16] respect shareapi_allow_share_dialog_user_enumeration in Principal bac…

Merge pull request #19096 from nextcloud/backport/19023/stable16

[stable16] expose Argon2 options (as we did for bcrypt)

[tx-robot] updated from transifex

[tx-robot] updated from transifex

respect shareapi_allow_share_dialog_user_enumeration in Principal backend for Sabre/DAV

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19717 from nextcloud/backport/19707/stable16

[stable16] Fix non-centered no javascript message

[tx-robot] updated from transifex

Fix non-centered no javascript message

Signed-off-by: Gary Kim <gary@garykim.dev>

[tx-robot] updated from transifex

Merge pull request #18885 from nextcloud/backport/17717/stable16

[stable16] relax strict getHome behaviour for LDAP users in a shadow state

[tx-robot] updated from transifex

relax strict getHome behaviour for LDAP users in a shadow state

* simplifies deletion process
* less strange behaviour when looking up home storage (as long as it is local)
* thus could enable transfer ownerships after user went invisible on ldap

backport of #17717

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
decouple userExists from userExistsOnLDAP check

allows to mark users as offline right away, avoids a gap of being not a
user and causing weird side effects

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
adjust tests

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
remove superfluous tests

- user_ldap is not exposed to public api, it is always behind ldap_proxy
- this is too much for a unit test
- integration tests cover userExists implicitly

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
ensure that only valid group members are returned

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19626 from nextcloud/backport/19549/stable16

[stable16] remove noise from detectUuid and cache results

Merge pull request #19638 from nextcloud/backport/19634/stable16

[stable16] Correctly trim long cyrillic note

Correctly trim long cyrillic note

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

remove noise from detectUuid and cache results

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19594 from nextcloud/backport/19528/stable16

[stable16] Strip of users home path from share api message

[tx-robot] updated from transifex

Strip of users home path from share api message

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

extended documentation

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

ignore values that undershoot the minimum, go with default

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

use getSystemValueInt

Co-Authored-By: kesselb <mail@danielkesselberg.de>
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

expose Argon2 options (as we did for bcrypt)

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19472 from nextcloud/backport/19465/stable16

[stable16] when we receive intentional empty whats new info, do not try to show it

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

when we receive intentional empty whats new info, do not try to show it

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19453 from nextcloud/backport/19424/stable16

[stable16] Don't create invalid users

Don't create invalid users

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19362 from nextcloud/backport/19349/stable16

[stable16] Prevent archieved download on secure view

[tx-robot] updated from transifex

Merge pull request #19373 from nextcloud/dependabot/npm_and_yarn/build/stable16/lodash-4.17.15

[Security] Bump lodash from 4.17.11 to 4.17.15 in /build

[Security] Bump lodash from 4.17.11 to 4.17.15 in /build

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.15. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.15)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #19371 from nextcloud/dependabot/npm_and_yarn/build/stable16/fstream-1.0.12

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Merge pull request #19374 from nextcloud/dependabot/npm_and_yarn/build/stable16/lodash.mergewith-4.6.2

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

[tx-robot] updated from transifex

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[Security] Bump fstream from 1.0.11 to 1.0.12 in /build

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. **This update includes a security fix.**
- [Release notes](https://github.com/npm/fstream/releases)
- [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Prevent archieved download on secure view

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19310 from nextcloud/backport/19219/stable16

[stable16] Fix display of DTEND for multi-day all-day event

[tx-robot] updated from transifex

Fix display of DTEND for multi-day all-day event

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #19285 from nextcloud/backport/19281/stable16

[stable16] for the DB ot pick an index specify the object_type

[tx-robot] updated from transifex

for the DB ot pick an index specify the object_type

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19209 from nextcloud/backport/19176/stable16

[stable16] Do not encode contacts menu mailto links

Do not encode contacts menu mailto links

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #19155 from nextcloud/version/16.0.8/final

16.0.8

Update CA bundle

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

16.0.8

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19027 from nextcloud/version/16.0.8/rc1

16.0.8 RC1

16.0.8 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #18440 from nextcloud/dependencies/npm/nextcloud-vue-collections-0.4.2

[stable16] Bump nextcloud-vue-collections to 0.4.2

Merge pull request #19015 from nextcloud/backport/17484/stable16

[stable16] Always use the latest timestamp for merged activities

Bump nextcloud-vue-collections to 0.4.2

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #19077 from nextcloud/backport/17920+18254/stable16

[stable16] when a user was deleted remove them from applicable list, unless...

rejig right to left join for sqlite's satisfaction

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

extend with group deletion handling

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

when a user was delete remove them from applicable list, unless

it is the only user, then remove the mount

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19016 from nextcloud/backport/18358/stable16

[stable16] Fix restoring shared versions

[tx-robot] updated from transifex