[3rdparty] Bump symfony dependencies to 4.2.7

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #15125 from nextcloud/tests/noid/folder-share-update-integration

Add integration tests for updating folder shares

Merge pull request #15065 from nextcloud/dependabot/npm_and_yarn/webpack-cli-3.3.0

Bump webpack-cli from 3.2.3 to 3.3.0

Merge pull request #15129 from nextcloud/enh/share_repair_step

Enh/share repair step

[tx-robot] updated from transifex

Merge pull request #15134 from nextcloud/fix/harden_public_preview_tests

Harden public preview tests

Harden public preview tests

This way there are less timing issues.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #14952 from nextcloud/enh/14179/api_csp

Set empty CSP by default

Add return types

Signed-off-by: Joas Schilling <coding@schilljs.com>

Use the querybuilder for the queries

Signed-off-by: Joas Schilling <coding@schilljs.com>

Allow to use Subqueries in from

Signed-off-by: Joas Schilling <coding@schilljs.com>

Repair step for link shares

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump webpack-cli from 3.2.3 to 3.3.0

Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/V.3.2.3...v.3.3.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>

Merge pull request #15061 from nextcloud/dependabot/npm_and_yarn/vue-and-vue-template-compiler-2.6.10

Bump vue and vue-template-compiler

Add integration tests for updating folder shares

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump vue and vue-template-compiler

Bumps [vue](https://github.com/vuejs/vue) and [vue-template-compiler](https://github.com/vuejs/vue). These dependencies needed to be updated together.

Updates `vue` from 2.6.8 to 2.6.10
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.6.8...v2.6.10)

Updates `vue-template-compiler` from 2.6.8 to 2.6.10
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.6.8...v2.6.10)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #15105 from nextcloud/dependabot/npm_and_yarn/v-tooltip-2.0.1

Bump v-tooltip from 2.0.0-rc.33 to 2.0.1

Set empty CSP by default

For #14179

By default responses should have the strictest (and simplest) CSP
possible. Only template responses should require an actual CSP.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #15123 from nextcloud/fix/share-link-pwd-error-feedback

Improve the share link password error feedback with a red border

Bump v-tooltip from 2.0.0-rc.33 to 2.0.1

Bumps [v-tooltip](https://github.com/Akryum/vue-tooltip) from 2.0.0-rc.33 to 2.0.1.
- [Release notes](https://github.com/Akryum/vue-tooltip/releases)
- [Commits](https://github.com/Akryum/vue-tooltip/commits/v2.0.1)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #15102 from nextcloud/dependabot/npm_and_yarn/vue-router-3.0.4

Bump vue-router from 3.0.2 to 3.0.4

Merge pull request #15015 from nextcloud/enhancement/better-comment-icon

Change the comment icon to something more visually appealing

Change the comment icon to something more visually appealing

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Improve the share link password error feedback with a red border

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Bump vue-router from 3.0.2 to 3.0.4

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.0.2 to 3.0.4.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.0.2...v3.0.4)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #15098 from nextcloud/dependabot/npm_and_yarn/marked-0.6.2

Bump marked from 0.6.1 to 0.6.2

[tx-robot] updated from transifex

Merge pull request #15115 from nextcloud/fix/noid/do-not-use-spaces-in-passwords

Do not use spaces in generated passwords

Do not use spaces in generated passwords

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #15100 from nextcloud/dependabot/npm_and_yarn/@babel/preset-env-7.4.3

Bump @babel/preset-env from 7.3.4 to 7.4.3

Merge pull request #15110 from nextcloud/fix/iedavclient/node-parser

Make sure we have a proper node before parsing

Make sure we have a proper node before parsing

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #15107 from nextcloud/css-var-transition

Add animation-slow var

Merge pull request #15057 from nextcloud/bugfix/noid/silent-view-change

Use slient option to switch for regular file actions as well

Add animation-slow var

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Merge pull request #15099 from nextcloud/dependabot/npm_and_yarn/@babel/core-7.4.3

Bump @babel/core from 7.3.4 to 7.4.3

Merge pull request #14974 from nextcloud/fix/id3parser-maintainer-update

Take over id3parser package and update it

Merge pull request #15097 from nextcloud/fix/drone/objectstore_selection

Pass proper TEST_SELECTION to drone objectstore

Merge pull request #15083 from nextcloud/fix/noid/devdocslink

fix link to dev documentation

Merge pull request #14966 from nextcloud/versions-handlebars-webpack

use webpack to compile handlebars for files_versions

Pass proper TEST_SELECTION to drone objectstore

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump marked from 0.6.1 to 0.6.2

Bumps [marked](https://github.com/markedjs/marked) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](https://github.com/markedjs/marked/compare/v0.6.1...v0.6.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #15062 from nextcloud/dependabot/npm_and_yarn/css-vars-ponyfill-1.17.2

Bump css-vars-ponyfill from 1.17.0 to 1.17.2

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

fix link to dev documentation

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Take over id3parser package and update it

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Bump @babel/core from 7.3.4 to 7.4.3

Bumps [@babel/core](https://github.com/babel/babel) from 7.3.4 to 7.4.3.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.3.4...v7.4.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>

[tx-robot] updated from transifex

Bump css-vars-ponyfill from 1.17.0 to 1.17.2

Bumps [css-vars-ponyfill](https://github.com/jhildenbiddle/css-vars-ponyfill) from 1.17.0 to 1.17.2.
- [Release notes](https://github.com/jhildenbiddle/css-vars-ponyfill/releases)
- [Changelog](https://github.com/jhildenbiddle/css-vars-ponyfill/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jhildenbiddle/css-vars-ponyfill/compare/v1.17.0...v1.17.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump @babel/preset-env from 7.3.4 to 7.4.3

Bumps [@babel/preset-env](https://github.com/babel/babel) from 7.3.4 to 7.4.3.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.3.4...v7.4.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>

Use slient option to switch for regular file actions as well

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #15053 from nextcloud/a-new-journey-begins

Bump versions of server and the requirements of apps

Disable acceptance test which should fail anyway

Signed-off-by: Joas Schilling <coding@schilljs.com>

Bump versions of server and the requirements of apps

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #15043 from nextcloud/version/16/rc1

16.0.0 RC 1

16.0.0 RC 1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #14967 from nextcloud/lib-private-user-trigger-pass-old

Do not issue update command if nothing has changed in user values

Return true in the dummy backend for successful display name change

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

lib/private/User: do not change user properties if value has not changed

lib/private/User,apps/user_ldap/lib/User: always pass old value to User::triggerChange

Merge pull request #15020 from nextcloud/bugfix/noid/fix-too-many-event-triggers

Bugfix/noid/fix too many event triggers

Merge pull request #15052 from nextcloud/fix/noid/pass-oldvalue

Pass old value to user triggerChange hook & do not update unchanged attributes

Merge pull request #14965 from nextcloud/enh/install_file

Prevent a reinstall

lib/private/User: do not change user properties if value has not changed

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Pass old value to user triggerChange hook

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #15049 from nextcloud/do-not-allow-javascript-eval-in-the-public-share-auth-page-with-talk

Do not allow JavaScript "eval" in the public share auth page with Talk

Block install without CAN_INSTALL file

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #14994 from nextcloud/feature/noid/pre-releases-for-beta-and-daily

Enable pre-releases for beta and daily channel

Merge pull request #15027 from nextcloud/enh/less-phan-processes

Run less phan processes

Merge pull request #14987 from nextcloud/tests/14962/public-folder-open

Add acceptance test for public folder navigation

Merge pull request #14972 from nextcloud/fix/app-nav-toggle-missing

Disable the injected snapper logic when apps want to ship their own

Merge pull request #14990 from nextcloud/enhancement/noid/projects

Rename collections to projects

Merge pull request #15035 from nextcloud/enhancement/noid/add-isavailable-to-fulltextsearchmanager

[nc16] Add a bool check isAvailable() to FullTextSearchManager

Merge pull request #15030 from nextcloud/fix/remove-2fa-admin-settings-debug-log

Remove a debug log from the 2FA admin settings

Do not allow JavaScript "eval" in the public share auth page with Talk

Talk no longer uses JavaScript "eval", so the Content Security Policy
can now be configured to prevent its use in the public share
authentication page when the password is protected by Talk.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

+isAvailable()

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Do not inject a #app-navigation-toggle if there is already one

This allows apps to ship their own, as in some cases the #app-content
element does not exist on page load and therefore the injection fails
and the icon is missing afterwards.

Fixes https://github.com/nextcloud/server/issues/14956

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Add acceptance test for public folder navigation

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Remove a debug log from the 2FA admin settings

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #15022 from nextcloud/bugfix/noid/respect-lookup-server-disabling-master

Respect the setting if the lookup server is disabled

[tx-robot] updated from transifex

Run less phan processes

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Only update the lookup server if it is enabled AND a server is set

Signed-off-by: Joas Schilling <coding@schilljs.com>

Only update the lookup server if it is enabled AND a server is set

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #15016 from nextcloud/enh/no-eval-default-response

Forbid eval on legacy responses

Remove unnecessary event dispatcher

The event is already triggered in OC\User\User::triggerChange

Signed-off-by: Joas Schilling <coding@schilljs.com>

Don't get the avatar when we don't operate anyway

Signed-off-by: Joas Schilling <coding@schilljs.com>

Forbid eval on legacy responses

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Use label from apps

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump nextcloud-vue-collections

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Rename collections to projects

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Add projects icon

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #14989 from nextcloud/enh/check_failing_putcontent_appdata

Harden appdata putcontent

Merge pull request #14983 from nextcloud/fix/drone_template_compile

Do not try to compile templates that are not there

Merge pull request #14985 from nextcloud/bugfix/14962/fix-public-folder-open

Check if OCA.Files.App is available before calling