[tx-robot] updated from transifex

Merge pull request #27349 from nextcloud/backport/25280/stable20

[stable20] Set umask before operations that create local files

Skip the test if Imagick is misconfigured

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27412 from nextcloud/backport/27375/stable20

[stable20] Don't update statuses to offline again and again

improve type handling of Avatar::generateAvatarFromSv

Signed-off-by: Robin Appelman <robin@icewind.nl>

Don't update statuses to offline again and again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27325 from nextcloud/stable20-backport-27024

[stable20] Properly log expiration date removal in audit log

Merge pull request #27183 from nextcloud/dependabot/npm_and_yarn/stable20/various

[stable20] Bump patch dependencies

Merge pull request #27209 from nextcloud/backport/27199/stable20

[stable20] Use noreply@ as email address for share emails

Merge pull request #27337 from nextcloud/backport/27329/stable20

[stable20] Propagate throttling on OCS response

Merge pull request #27360 from nextcloud/backport/27354/stable20

[stable20] Escape filename in Content-Disposition

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Set umask before operations that create local files

this solves issues where "other php stuff" is messing with the umask

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Escape filename in Content-Disposition

We should escape all occurences of ' and \ in here.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

[tx-robot] updated from transifex

Propagate throttling on OCS response

The BaseResponse converter did not take over any throttling state from the DataResponse.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #27319 from nextcloud/backport/27099/stable20

[stable20] Make user:report command scale

Properly log expiration date removal in audit log

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Make user:report command scale

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Use noreply@ as email address for share emails

Fixes #26683

Before it used the instance name, which a) doesn't make sense to randomly guess email addresses and b) could contain characters that are not allowed in email addresses like spaces.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Npm build

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Bump vuedraggable from 2.24.1 to 2.24.3

Bumps [vuedraggable](https://github.com/SortableJS/Vue.Draggable) from 2.24.1 to 2.24.3.
- [Release notes](https://github.com/SortableJS/Vue.Draggable/releases)
- [Commits](https://github.com/SortableJS/Vue.Draggable/commits/v2.24.3)

Signed-off-by: dependabot[bot] <support@github.com>

Bump eslint-plugin-import from 2.22.0 to 2.22.1

Bumps [eslint-plugin-import](https://github.com/benmosher/eslint-plugin-import) from 2.22.0 to 2.22.1.
- [Release notes](https://github.com/benmosher/eslint-plugin-import/releases)
- [Changelog](https://github.com/benmosher/eslint-plugin-import/blob/master/CHANGELOG.md)
- [Commits](https://github.com/benmosher/eslint-plugin-import/compare/v2.22.0...v2.22.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump autosize from 4.0.2 to 4.0.4

Bumps [autosize](https://github.com/jackmoore/autosize) from 4.0.2 to 4.0.4.
- [Release notes](https://github.com/jackmoore/autosize/releases)
- [Changelog](https://github.com/jackmoore/autosize/blob/master/changelog.md)
- [Commits](https://github.com/jackmoore/autosize/compare/4.0.2...4.0.4)

Signed-off-by: dependabot[bot] <support@github.com>

Bump clipboard from 2.0.6 to 2.0.8

Bumps [clipboard](https://github.com/zenorocha/clipboard.js) from 2.0.6 to 2.0.8.
- [Release notes](https://github.com/zenorocha/clipboard.js/releases)
- [Commits](https://github.com/zenorocha/clipboard.js/compare/v2.0.6...v2.0.8)

Signed-off-by: dependabot[bot] <support@github.com>

Bump dompurify from 2.2.2 to 2.2.8

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.2 to 2.2.8.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.2.2...2.2.8)

Signed-off-by: dependabot[bot] <support@github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27014 from nextcloud/backport/27000/stable20

[stable20] Harden apptoken check

[tx-robot] updated from transifex

Harden apptoken check

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26900 from nextcloud/dependabot/npm_and_yarn/stable20/handlebars-4.7.7

Merge pull request #26954 from nextcloud/backport/26879/stable20

[stable20]  Don't break OCC if an app is breaking in it's Application class

[Security] Bump handlebars from 4.7.6 to 4.7.7

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7. **This update includes a security fix.**
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27001 from nextcloud/backport/26946/stable20

[stable20] Respect default share permissions for federated reshares

Respect default share permissions for federated reshares

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26965 from nextcloud/backport/26292/stable20

[stable20] ignore readonly flag for directories

Merge pull request #26971 from nextcloud/backport/26958/stable20

[stable20] Throttle MountPublicLinkController when share is not found

[tx-robot] updated from transifex

Throttle MountPublicLinkController when share is not found

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

ignore readonly flag for directories

see http://support.microsoft.com/kb/326549

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #26956 from nextcloud/backport/26945/stable20

[stable20] Add bruteforce protection to the shareinfo endpoint

Add bruteforce protection to the shareinfo endpoint

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Don't break OCC if an app is breaking in it's Application class

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

Merge pull request #26909 from nextcloud/dependabot/npm_and_yarn/stable20/lodash-4.17.21

[Security] Bump lodash from 4.17.20 to 4.17.21

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26920 from nextcloud/dependabot/npm_and_yarn/stable20/hosted-git-info-2.8.9

[Security] Bump hosted-git-info from 2.8.8 to 2.8.9

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. **This update includes a security fix.**
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

Merge pull request #26894 from nextcloud/version/20.0.10

20.0.10

20.0.10

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Merge pull request #26882 from nextcloud/backport/26869/stable20

[stable20] l10n: Spelling unification

Fix test

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

l10n: Spelling unification

Spelling unification in Transifex.

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #26862 from nextcloud/backport/26149/stable20

[stable20] Only perform login check during ownership transfer for encryption

Only perform login check during ownership transfer for encryption

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #26836 from nextcloud/version/20.0.10/final

20.0.10 RC1

Update bundle

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26542 from nextcloud/stable20-26433

[stable20] Limit size of properties to 2048 characters

[tx-robot] updated from transifex

20.0.10 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25973 from nextcloud/backport/25417/stable20-fix-account-data-visibility-after-disabling-public-addressbook-upload

[stable20] Fix account data visibility after disabling public addressbook upload

Limit size of properties to 2048 characters

It is unreasonable to expect that one of these fields would be longer
than 2048 characters. Whilst some have definitely lower limits (such as
for phone numbers or domain names), a upper bound as sanity check makes
sense.

Backport of https://github.com/nextcloud/server/pull/26433

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #26824 from nextcloud/backport/26811/stable20

[stable20] Do not try to contact lookup server if not needed

Do not try to contact lookup server if not needed

In some cases (for example you never send data to the lookup server)
there is no need for this job to even try.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #26809 from nextcloud/backport/26647/stable20

[stable20] Fail when creating new files with an empty path

Fail when creating new files with an empty path

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #26798 from nextcloud/backport/26785/stable20

[stable20] LDAP: do not bother to search after the last page

Merge pull request #26788 from nextcloud/backport/26718/stable20

[stable20] Fix ratelimit template

[tx-robot] updated from transifex

do not try to search after the last page

- saves an LDAP requests in these cases
- prevents a Protocol Error logged on < 7.3 API (for backports)

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Do not allow to overwrite some variables

Signed-off-by: Joas Schilling <coding@schilljs.com>