Merge pull request #27632 from nextcloud/chore/caldav-trashbin-iso-timestamps

Use ISO8601 timestamps for the CalDAV trashbin

Merge pull request #27605 from nextcloud/better-security-warning

Make security warning stand out more

Merge pull request #27583 from nextcloud/dependabot/add-v2-config-file

Merge pull request #27635 from nextcloud/fix/datetime-constants

Fix usage of DateTime constants

Use ISO8601 timestamps for the CalDAV trashbin

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #27628 from nextcloud/security-txt

Add security.txt

Move DateTime::RFC2822 to DateTimeInterface::2822

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Move DateTime::ATOM to DateTimeInterface::ATOM

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #26344 from J0WI/fs-early-root

Return early if path is root

Move header into h3

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #27627 from nextcloud/dependabot/npm_and_yarn/babel/preset-env-7.14.7

Rebuild autoloader

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Add security.txt

Ref https://securitytxt.org

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Bump @babel/preset-env from 7.14.5 to 7.14.7

Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.14.5 to 7.14.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.14.7/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #27611 from nextcloud/dependabot/npm_and_yarn/query-string-7.0.1

Bump query-string from 5.1.1 to 7.0.1

Merge pull request #27561 from nextcloud/dav-search-offset

allow setting offset for dav search queries not limited to the users home storage

Merge pull request #26346 from J0WI/clean-auth-regex

Cleaner removePassword regex

Merge pull request #26323 from J0WI/crypt-const

Use constant for supported formats

Bump query-string from 5.1.1 to 7.0.1

Bumps [query-string](https://github.com/sindresorhus/query-string) from 5.1.1 to 7.0.1.
- [Release notes](https://github.com/sindresorhus/query-string/releases)
- [Commits](https://github.com/sindresorhus/query-string/compare/v5.1.1...v7.0.1)

---
updated-dependencies:
- dependency-name: query-string
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #27610 from nextcloud/add-throttling-to-public-auth

Throttle on public DAV endpoint

Merge pull request #27567 from nextcloud/dependabot/npm_and_yarn/build/karma-6.3.4

Bump karma from 5.2.3 to 6.3.4 in /build

Bump karma from 5.2.3 to 6.3.4 in /build

Bumps [karma](https://github.com/karma-runner/karma) from 5.2.3 to 6.3.4.
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](https://github.com/karma-runner/karma/compare/v5.2.3...v6.3.4)

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #27383 from nextcloud/dependabot/npm_and_yarn/build/puppeteer-10.0.0

Bump puppeteer from 5.5.0 to 10.0.0 in /build

[tx-robot] updated from transifex

Merge pull request #27604 from nextcloud/bugfix/24918

Proper opacity on multiselect actions in files

Merge pull request #27609 from nextcloud/dependabot/composer/aws/aws-sdk-php-3.184.6

Bump aws/aws-sdk-php from 3.184.2 to 3.184.6

Bump puppeteer from 5.5.0 to 10.0.0 in /build

Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 5.5.0 to 10.0.0.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/puppeteer/puppeteer/compare/v5.5.0...v10.0.0)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Reference correct private variable

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

allow setting offset for queries not limited to the users home storage

multi-storage offset is cheap (enough) now

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #27555 from nextcloud/dependabot/npm_and_yarn/sass-1.35.1

Bump sass from 1.34.1 to 1.35.1

Throttle on public DAV endpoint

We should throttle whenever an invalid request is sent to the public WebDAV endpoint.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Bump aws/aws-sdk-php from 3.184.2 to 3.184.6

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Make security warning stand out more

The security warning is currently being ignored by too many users as it's part of the text and not visually distinct.

Ref #26944

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Proper opacity on multiselect actions in files

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #27595 from nextcloud/enh/25174/hide-hyphen-if-slogan-is-empty

mail-template - don't show hyphen if slogan is empty

fix NewUserMailHelperTest

Signed-off-by: szaimen <szaimen@e.mail.de>

fix NewUserMailHelperTest

Signed-off-by: szaimen <szaimen@e.mail.de>

mail-template - don't show hyphen if slogan is empty

Signed-off-by: szaimen <szaimen@e.mail.de>

Merge pull request #27593 from nextcloud/dependabot/composer/giggsey/libphonenumber-for-php-8.12.25

Bump giggsey/libphonenumber-for-php from 8.12.24 to 8.12.25

Merge pull request #27566 from nextcloud/fix/device-login-styles

Update Login with device page styles

Bump giggsey/libphonenumber-for-php from 8.12.24 to 8.12.25

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #27590 from nextcloud/dependabot/composer/swiftmailer/swiftmailer-6.2.7

Bump swiftmailer/swiftmailer from 6.2.5 to 6.2.7

[tx-robot] updated from transifex

Merge pull request #27283 from nextcloud/Valdnet-patch-1

l10n: Spelling unification

l10n: Spelling unification

Spelling unification in Transifex.

Signed-off-by: Christopher Ng <chrng8@gmail.com>

l10n: Spelling unification

Spelling unification in Transifex.

Signed-off-by: Christopher Ng <chrng8@gmail.com>

l10n: Spelling unification

Spelling unification in Transifex.

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Update login with device page styles

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Bump swiftmailer/swiftmailer from 6.2.5 to 6.2.7

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #27587 from nextcloud/dependabot/composer/icewind/streams-0.7.5

Bump icewind/streams from 0.7.4 to 0.7.5

Merge pull request #27581 from nextcloud/dependabot/composer/vimeo/psalm-4.8.1

Fix typing error in AppFetcher.php

Signed-off-by: Louis Chemineau <louis@chmn.me>

Bump icewind/streams from 0.7.4 to 0.7.5

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Update Autoloader

Signed-off-by: Louis Chemineau <louis@chmn.me>

Update baseline again

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #27585 from nextcloud/dependabot/composer/phpseclib/phpseclib-2.0.32

Bump phpseclib/phpseclib from 2.0.31 to 2.0.3

Fix typing error

Signed-off-by: Louis Chemineau <louis@chmn.me>

Bump phpseclib/phpseclib from 2.0.31 to 2.0.3

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Upgrade to GitHub-native Dependabot

Update baseline

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump vimeo/psalm from 4.7.2 to 4.8.1

Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 4.7.2 to 4.8.1.
- [Release notes](https://github.com/vimeo/psalm/releases)
- [Commits](https://github.com/vimeo/psalm/compare/4.7.2...4.8.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #27573 from nextcloud/dependabot/npm_and_yarn/vue-material-design-icons-4.12.1

Bump vue-material-design-icons from 4.11.0 to 4.12.1

Bumps [vue-material-design-icons](https://github.com/robcresswell/vue-material-design-icons) from 4.11.0 to 4.12.1.
- [Release notes](https://github.com/robcresswell/vue-material-design-icons/releases)
- [Changelog](https://github.com/robcresswell/vue-material-design-icons/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/robcresswell/vue-material-design-icons/compare/4.11.0...4.12.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27544 from nextcloud/chore/phase-out-controller-reflector

Phase out the controller reflector

Merge pull request #27540 from nextcloud/getstoragerootid-failed-storage

handle case where storage can't be created in getStorageRootId

Merge pull request #27532 from nextcloud/fix/noid/properly-cleanup-webauthn-user-deletion

Properly cleanup entries of WebAuthn on user deletion

Bump sass from 1.34.1 to 1.35.1

Bumps [sass](https://github.com/sass/dart-sass) from 1.34.1 to 1.35.1.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.34.1...1.35.1)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Properly cleanup entries of WebAuthn on user deletion

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #27548 from nextcloud-pr-bot/automated/noid/psalm-baseline-update

[Automated] Update psalm-baseline.xml

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Phase out the controller reflector

1) PHP8 attributes will soon replace phpdoc annotations
2) Most of the class was never meant to be used by an app but internally

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #24318 from nextcloud/techdebt/noid/remove-oc_user-getDisplayName

Use proper methods for display name retrieval

Merge pull request #27537 from nextcloud/fix/noid/webauthn-localhost

Allow WebAuthn on localhost as well

Merge pull request #27535 from nextcloud/techdebt/noid/update-shipped-info.xsd-aswell

Update shipped info.xsd too

Allow WebAuthn on localhost as well

* browsers typically whiteliste this as well - https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
* for developing purposes see https://developer.chrome.com/docs/devtools/webauthn/

Signed-off-by: Morris Jobke <hey@morrisjobke.de>
Signed-off-by: Louis Chemineau <louis@chmn.me>

handle case where storage can't be created in getStorageRootId

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #26939 from nextcloud/enh/app-icon-notification-bubble

Let apps toggle an unread counter on app icons

Merge pull request #27525 from nextcloud/version/22.0.0-beta5

22.0.0 beta 5

Merge pull request #27522 from nextcloud/bugfix/noid/save-a-request-after-heartbeat

Save a request everytime we send the heartbeat

Fix jsdoc

Co-authored-by: Louis <6653109+artonge@users.noreply.github.com>

Use DI for files_sharing Cache

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Use proper methods for display name retrieval

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #27534 from nextcloud-pr-bot/automated/noid/psalm-baseline-update

[Automated] Update psalm-baseline.xml

Update shipped info.xsd too

Signed-off-by: Joas Schilling <coding@schilljs.com>

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Merge pull request #22628 from Sp1l/simplify-htaccess-rewrites

Coalesce RewriteCond lines in .htaccess

Merge pull request #27098 from nextcloud/fix/noid/missing-key-in-addInfo

force 'name' key in array

Let apps toggle an unread counter on app icons

Co-authored-by: Louis Chemineau <louis@chmn.me>
Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #26319 from nextcloud/files_external_app.php

Move files_external to IBootstrap and remove some deprecated stuff in the process

Merge pull request #27190 from nextcloud/bugfix/noid/deduplicate-translation

Deduplicate translations and fix double .

Merge pull request #27529 from nextcloud/fix/25950/default-product-name

Fix default product name for old themes

Fix default product name for old themes

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #27515 from nextcloud/enh/noid/read-multi-value-user-attribute

Add method to read multi-value attributes from ldap

Merge pull request #26571 from nextcloud/bugfix/noid/existing-link-no-reshare

Only allow removing existing shares that would not be allowed due to reshare restrictions

fix app disdplay name

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>