treat sensitive config keys by pattern

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #16543 from nextcloud/backport/16532/stable16

[stable16] Fix max contrast retrieval to limit minimum color for relative time

[tx-robot] updated from transifex

Merge pull request #16541 from nextcloud/backport/15794/stable16

[stable16] Lock SCSS so we only run 1 job at a time

Trigger fallback code to get max contrast value and use integer there

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Fix max contrast retrieval to limit minimum color for relative time

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Lock SCSS so we only run 1 job at a time

This is bit hacky but a start to lock the SCSS compiler properly
Retry during 10s then give up
Properly get error message
Do not clear locks and properly debug scss caching

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #16536 from nextcloud/backport/16503/stable16

[stable16] allow to provide supported calendar component set internally as a string

allow to provide supported calendar component set internally as a string

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #16527 from nextcloud/backport/15637/stable16

[stable16] Allow hidden smb shares

Merge pull request #16524 from nextcloud/backport/16523/stable16

[stable16] Nested recursion breaking max nested level for parent comment calculation

Fix wrong indentation

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Fix invalid recursion

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Allow hidden smb shares

A hidden smb share ends with $. This patch changes the placeholder
detection to allow shares with $ at the end.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

PHPStorm code cleanup

Signed-off-by: Joas Schilling <coding@schilljs.com>

Get the topmost parent for the parent instead of doing endless recursion

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16500 from nextcloud/backport/16495/stable16

[stable16] Pass $configargs to openssl_pkey_export

Pass $configargs to openssl_pkey_export

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16444 from nextcloud/backport/16440/stable16

[stable16] Fix File#putContents(string) on ObjectStorage

[tx-robot] updated from transifex

Fix File#putContents(string) on ObjectStorage

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Merge pull request #16437 from nextcloud/backport/16151/stable16

[stable16] Update operationprogressbar.js

Update operationprogressbar.js

To fix issue #16137

Signed-off-by: james.lao@gmail.com <james.lao@gmail.com>

Merge pull request #16432 from nextcloud/backport/16424/stable16

[stable16] Do not keep searching for recent

Do not keep searching for recent

If userA has a lot of recent files. But only shares 1 file with userB
(that has no files at all). We could keep searching until we run out of
recent files for userA.

Now assume the inactive userB has 20 incomming shares like that from
different users. getRecent then basically keeps consuming huge amounts
of resources and with each iteration the load on the DB increases
(because of the offset).

This makes sure we do not get more than 3 times the limit we search for
or more than 5 queries.

This means we might miss some recent entries but we should fix that
separatly. This is just to make sure the load on the DB stays sane.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #16425 from nextcloud/backport/16423/stable16

[stable16] Only prevent disabling encrytion via the API

Only prevent disabling encrytion via the API

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #16414 from nextcloud/backport/15606/stable16

[stable16] Add catch for RuntimeException

Log RuntimeException in CleanupCardDAVPhotoCache

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Add catch for RuntimeException

getDirectoryListing can throw a NotFoundException or a RuntimeException.
The repair step should be skipped if the cache directory is missing so
a catch for both exceptions is required.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Merge pull request #16405 from nextcloud/backport/16400/stable16

[stable16] addsubtag should push to array

addsubtag should push to array

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #16352 from nextcloud/dependabot/npm_and_yarn/stable16/lodash-4.17.13

[Security] Bump lodash from 4.17.11 to 4.17.13

Merge pull request #16341 from nextcloud/dependabot/npm_and_yarn/stable16/lodash.merge-4.6.2

[Security] Bump lodash from 4.17.11 to 4.17.13

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.13. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.13)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

[Security] Bump lodash.merge from 4.6.1 to 4.6.2

Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16338 from nextcloud/dependabot/npm_and_yarn/stable16/lodash.mergewith-4.6.2

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2

[tx-robot] updated from transifex

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2

Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #16330 from nextcloud/backport/16323/stable16

[stable16] Use HTTP1.1 to read S3 objects

Merge pull request #16325 from nextcloud/backport/16308/stable16

[stable16] Prevent undefined offset 0 in findByUserIdOrMail

Use HTTP1.1 to read S3 objects

Some of the READs otherwise use HTTP/1.0 which is not always supported
by all backends. HTTP/1.1 is there since 1999 way longer than S3 so safe
to assume it is always there IMO.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Return first value from $users

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Merge pull request #16254 from nextcloud/backport/16208/stable16

[stable16] Always set the display name for user shares

Merge pull request #16303 from nextcloud/version/noid/16.0.3

16.0.3

16.0.3

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #16297 from nextcloud/backport/16288/stable16

[stable16] Try to delete the cypress folder of the viewer app

[tx-robot] updated from transifex

Merge pull request #16249 from nextcloud/backport/16170/stable16

[stable16] fix permissions for drag-n-drop uploads

Try to delete the cypress folder of the viewer app

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[stable16] Properly load permissions in showActions (#16282)

[stable16] Properly load permissions in showActions

[tx-robot] updated from transifex

Properly load permissions in showActions

When setViewerMode(false) is called, the permissions should be fetched from the available dirInfo

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[stable16] dont use part files for dav writes when the target… (#16223)

[stable16] dont use part files for dav writes when the target folder doesn't have create permissions

[tx-robot] updated from transifex

Always set the display name for user shares

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #16244 from nextcloud/backport/16241/stable16

[stable16] Fix redirect after rescanFailedIntegrityCheck to "Overview" page

fix permissions for drag-n-drop uploads

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix redirect after rescanFailedIntegrityCheck to "Overview" page

The link of the rescanFailedIntegrityCheck link is on the sub page "Overview". After clicking the link, the user is, however, redirected to the "Basic settings" page.

Signed-off-by: Sven Strickroth <email@cs-ware.de>

[tx-robot] updated from transifex

Merge pull request #16189 from nextcloud/backport/16183/stable16

[stable16] Do not fail hard on new user mail error

Merge pull request #16218 from nextcloud/version/noid/16.0.2

16.0.2

[tx-robot] updated from transifex

add test for overwriting in non creatable directory

Signed-off-by: Robin Appelman <robin@icewind.nl>

dont use part files for dav writes when the target folder doesn't have create permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>

16.0.2

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #16211 from nextcloud/backport/16186/stable16

[stable16] Better check reshare permissions part2

Remove duplicate tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Unify the permission checking in one place only

Signed-off-by: Joas Schilling <coding@schilljs.com>

Better check reshare permissions when creating a share

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #16201 from nextcloud/backport/16199/stable16

[stable16] RefreshWebcalJob: replace ugly Regex with standard php utils

[tx-robot] updated from transifex

RefreshWebcalJob: replace ugly Regex with standard php utils

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[stable16] Forward OCSException to initiator (#16191)

[stable16] Forward OCSException to initiator

Forward OCSException to initiator

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Do not fail hard on new user mail error

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Merge pull request #16157 from richardhj/patch-1

Update Nextcloud version in docs link

Merge pull request #16177 from nextcloud/backport/16175/stable16

[stable16] Allow apps to overwrite the maximum length when reading from database

Allow apps to overwrite the maximum length when reading from database

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Update Nextcloud version in docs link

Signed-off-by: Richard Henkenjohann <richardhenkenjohann@googlemail.com>

Merge pull request #16064 from nextcloud/version/16.0.2/RC1

16.0.2 RC1

[tx-robot] updated from transifex