fix(dav): don't crash subscription on invalid calendar object

Signed-off-by: escoand <escoand@users.noreply.github.com>

Merge pull request #47414 from nextcloud/debt/noid/user-changed-event

test(admin_audit): add test for user management listener

Merge pull request #48512 from nextcloud/fix/pick-folder-smart-picker

fix(files): Fix folders not being selectable in the smart picker

Merge pull request #47788 from nextcloud/feat/add-addressbook-list-command

feat(carddav): add command to list address books

Merge pull request #48513 from nextcloud/fix/taskprocessing-manager/php-notice

fix(TaskProcessing\Manager): Don't provoke PHP notice in setTaskResult

fix(TaskProcessing\Manager): Don't provoke PHP notice in setTaskResult

Signed-off-by: Marcel Klehr <mklehr@gmx.net>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): Fix folders not being selectable in the smart picker

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #48496 from nextcloud/enh/noid/taskprocessing-commands-task-errors

[taskprocessing] Add new command to get a task from a task ID

Merge pull request #48451 from nextcloud/bug/noid/federated-addressbook-sync-without-localaddressallowed

fix: make federation address book sync work with allow_local_remote_servers = false

feat(taskprocessing): new command to get a task from a task ID, include error_message in list and get commands

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #48426 from nextcloud/jtr/fix-45671

chore: always execute parse_url in preventLocalAddress

This change should make it easier to spot wrong uses of the HTTP client on development setups where allow_local_remote_servers is usually true.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix: make federation address book sync work with allow_local_remote_servers = false

Client.preventLocalAddress expects an absolute URL, which means the base_uri option cannot be used.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #48454 from nextcloud/fix/storage/get-directory-content-return-type

Merge pull request #48484 from nextcloud/fwdport/48445/master

fix(Auth): ignore missing token when trying to set password-unconfirm…

Merge pull request #48480 from nextcloud/checkColExists

fix(migration): Check if column exits before adding it

Merge pull request #48235 from nextcloud/readd-object-store-phpunit

test: re-add object store primary storage phpunit tests

ci: Fix path name

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #48483 from nextcloud/ci/noid/execute-psalm-security-on-push

ci: Execute psalm:security on pushes

fix(Auth): ignore missing token when trying to set password-unconfirmable

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

ci: Execute psalm:security on pushes

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #48476 from nextcloud/ci/noid/improve-running-psalm-locally

ci: Don't upload output of normal psalm to GitHub Security section

fix(migration): Check if column exits before adding it

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>

Merge pull request #48479 from nextcloud/dependabot/github_actions/github-actions-aa3137d618

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(deps): Bump actions/checkout in the github-actions group

Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 4.1.7 to 4.2.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...d632683dd7b4114ad314bca15554477dd762a938)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

ci: Add psalm baseline for security and make CI fail on change

Signed-off-by: Joas Schilling <coding@schilljs.com>

ci: Don't upload output of normal psalm to GitHub Security section

Signed-off-by: Joas Schilling <coding@schilljs.com>

ci: Improve usability of running different psalm modes locally

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #48455 from nextcloud/update-phpdoc-for-folder-get

update docs for Folder.get and call for Folder.nodeExists

Merge pull request #47846 from nextcloud/fix/provisionApi-status-codes

fix: provision api's status codes

fix: catch NotPermittedException in Folder.nodeExists

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

docs: Folder.get throws a NotPermittedException exception

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #48466 from nextcloud/ci/noid/require-up-to-date-psalm-paseline

ci: fail psalm when baseline update required

Merge pull request #48461 from nextcloud/perf/files/chunked-upload-default-100-mib

ci: fail psalm when baseline update required

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #48460 from nextcloud/deps/noid/bump-3rdparty-hash

build: Bump 3rdparty hash after empty updates

fix: provision api's status codes

Signed-off-by: Hamza Mahjoubi <hamzamahjoubi221@gmail.com>

fix(Storage): Fix getDirectoryContent() return type

Signed-off-by: provokateurin <kate@provokateurin.de>

Merge pull request #48453 from nextcloud/fix/psalm/update-baseline

perf(files): Adjust default chunk size for chunked upload to 100MiB

Signed-off-by: provokateurin <kate@provokateurin.de>

build: Bump 3rdparty hash after empty updates

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #47910 from nextcloud/fix/files-add-move-info

fix(files): Add more visual move / copy notification

fix(files): Add more visual move / copy notification

* Resolves: https://github.com/nextcloud/server/issues/46645

This adds loading toast notification while the move operation is running.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(psalm): Update baseline

Signed-off-by: provokateurin <kate@provokateurin.de>

Merge pull request #48439 from nextcloud/fix/background-image

fix(theming): Use `AppConfig` for setting background image

Merge pull request #48437 from nextcloud/fix/noid/count-disabled-correct

Merge pull request #48446 from nextcloud/fix/fix-storage-interface-check

feat(carddav): add command to list address books

Signed-off-by: Anna Larch <anna@nextcloud.com>

fix: Fix test of IConstructableStorage implentation by storage classes

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #48431 from nextcloud/dependabot/npm_and_yarn/vueuse/integrations-11.1.0

chore(deps): Bump @vueuse/integrations from 11.0.3 to 11.1.0

Bumps [@vueuse/integrations](https://github.com/vueuse/vueuse/tree/HEAD/packages/integrations) from 11.0.3 to 11.1.0.
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v11.1.0/packages/integrations)

---
updated-dependencies:
- dependency-name: "@vueuse/integrations"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #48430 from nextcloud/dependabot/npm_and_yarn/libphonenumber-js-1.11.9

chore(deps): Bump libphonenumber-js from 1.11.5 to 1.11.9

Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) from 1.11.5 to 1.11.9.
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.11.5...v1.11.9)

---
updated-dependencies:
- dependency-name: libphonenumber-js
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #48432 from nextcloud/dependabot/npm_and_yarn/cypress-13.15.0

chore(deps-dev): Bump cypress from 13.14.2 to 13.15.0

Bumps [cypress](https://github.com/cypress-io/cypress) from 13.14.2 to 13.15.0.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/cypress-io/cypress/compare/v13.14.2...v13.15.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(theming): Use `AppConfig` for setting background image

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #48424 from nextcloud/fix/declarative-settings-priority

fix(settings): Sort all settings - incl declarative settings - by priority

fix: correctly count disabled users for subadmins

Signed-off-by: Maksim Sukharev <antreesy.web@gmail.com>

Merge pull request #48098 from nextcloud/feat/zip-folder-plugin

feat: Move to ZipFolderPlugin for downloading multiple-nodes

fix(settings): Sort all settings - incl declarative settings - by priority

Previously declarative settings were sorted by priority but behind the "native" settings,
this is now fixed, meaning a declarative setting with higher priority than an `ISetting` will
be correctly rendered before that `ISetting` in the settings list.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: Drop unused legacy `OC_Files`

It is replaced with the Sabre `ZipFolderPlugin` and apps should use the `OCP\AppFramework\Http\StreamResponse`.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(files_sharing): Make `ShareController` download route use the DAV `ZipFolderPlugin`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(files): Make the files download action use WebDAV zip download

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Allow `Streamer` to specify type in constructor instead of magin UA handling

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat(dav): New `ZipFolderPlugin` which allows to download folders using GET requests

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47265 from nextcloud/ernolf/configurable_sharetoken_length

feat(share): make sharelink token length configurable

feat(share): make sharelink token length configurable

- ensure unique share token with dynamic length adjustment

Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>

Merge pull request #48433 from nextcloud/dependabot/npm_and_yarn/puppeteer-23.4.1

Merge pull request #48434 from nextcloud/dependabot/npm_and_yarn/typescript-5.6.2

chore(deps-dev): Bump typescript from 5.5.4 to 5.6.2

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.5.4 to 5.6.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.5.4...v5.6.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): Bump puppeteer from 23.3.0 to 23.4.1

Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 23.3.0 to 23.4.1.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/release-please-config.json)
- [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v23.3.0...puppeteer-v23.4.1)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(config): Suppress error at install time

Signed-off-by: Josh <josh.t.richards@gmail.com>

Merge pull request #48419 from nextcloud/bugfix/noid/fix-rtl-language-list

fix(l10n): Fix list of RTL languages

fix: rework move into object store to better preserve fileids

Signed-off-by: Robin Appelman <robin@icewind.nl>

test: fix share storage move test with object store

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: preserve fileid when moving from objectstore to non-objectstore

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: ensure source folder is removed from cache when moving to objectstore

otherwise this causes confusion down the line as it's contents will be moved to the new cache

Signed-off-by: Robin Appelman <robin@icewind.nl>

test: re-add object store primary storage phpunit tests

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix(l10n): Fix list of RTL languages

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #48219 from nextcloud/fix/istorage/return-types

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #48370 from nextcloud/dependabot/composer/laravel/serializable-closure-1.3.5

build(deps): Bump laravel/serializable-closure from 1.3.3 to 1.3.5

fix(IStorage): Use false instead of bool intersection type to match implementations

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(Storage): Fix IStorage return types

Signed-off-by: provokateurin <kate@provokateurin.de>

test: Fix IStorage return types

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(files_external): Fix all IStorage return types

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(files_sharing): Fix all IStorage return types

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(files_trashbin): Fix all IStorage return types

Signed-off-by: provokateurin <kate@provokateurin.de>

build(deps): Bump laravel/serializable-closure from 1.3.3 to 1.3.5

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #48366 from nextcloud/fix/files_sharing/ocm-permissions

fix(files_sharing): Parse OCM share permissions from OCM and not OCS prop

Merge pull request #48153 from nextcloud/feat/shipped/app_api

feat(app_api): make app_api shipped and default enabled

Merge pull request #48375 from nextcloud/bugfix/noid/skip-future-shipped-apps-from-updatenotification-check

Skip future shipped apps from updatenotification check

Merge pull request #48361 from nextcloud/fix/querybuilder/oracle-indentifier-length

fix(QueryBuilder): Restrict identifier length to 30 characters due to Oracle limitations

Merge pull request #48359 from nextcloud/artonge/feat/compare_hashed_password_when_updating_global_cred_in_files_external

fix: Use placeholder for external storage password