fix: Make forbidden filename list case insensitive again

It previously was, even if not documented, case insensitive.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(JSConfig): Add `forbidden_filenames` and `forbidden_filename_characters` to the `oc_config`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Deprecate `\OCP\Files\FileInfo::BLACKLIST_FILES_REGEX` as this is unused

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Move filename validation to one common place

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat: Cache filename blacklist and forbidden filename characters

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

feat: Add `getForbiddenFilenames` to `OCP\Util` and ensure forbidden files are enforced

* Provide filename blacklist in public `\OCP\Util`
* Use filename blacklist and forbidden characters also in `Filesystem::isFileBlacklisted`
* Drop unused and deprecated `\OC_Util::isValidFileName`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #45140 from nextcloud/fix-fileaccess-single

fix: fix FileAccess::getByFileId(InStorage)

Merge pull request #38670 from nextcloud/Jerome-Herbinet-ui-colour-concept

Wordings : Enhancement of background and UI color change thanks to better title and description

Merge pull request #45136 from nextcloud/feat/webauthn/submit-device-name

feat(webauthn): submit device name by pressing enter

Merge pull request #44819 from raphj/issue42689

fix(theming): better background and UI color change description

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

fix(files): apply the renaming when leaving the input field

Refs: #42689

Signed-off-by: Raphaël Jakse <raphael.git@jakse.fr>

Merge pull request #45150 from nextcloud/dependabot/npm_and_yarn/ejs-3.1.10

Merge pull request #45134 from nextcloud/automated/noid/master-update-psalm-baseline

[master] Update psalm-baseline.xml

Merge pull request #39247 from nextcloud/query-log-backtrace

Merge pull request #45149 from nextcloud/bugfix/noid/improve-pr-template

fix(github): Add a security info to the PR template

chore(deps-dev): bump ejs from 3.1.9 to 3.1.10

Bumps [ejs](https://github.com/mde/ejs) from 3.1.9 to 3.1.10.
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](https://github.com/mde/ejs/compare/v3.1.9...v3.1.10)

---
updated-dependencies:
- dependency-name: ejs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #45125 from nextcloud/fix/drop-ical-js

fix(github): Add a security info to the PR template

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #45131 from nextcloud/chore/location-path-prefix

chore: Remove All files prefix from original location

Merge pull request #45138 from nextcloud/smb-notify-test-retry

Merge pull request #45122 from nextcloud/techdebt/noid/remove-temporary-executeUpdate

fix(querybuilder): Remove temporary internal method executeUpdate()

chore(tests): Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

feat: add option to add backtrace to the query logger

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: fix FileAccess::getByFileId(InStorage)

Signed-off-by: Robin Appelman <robin@icewind.nl>

test: retry smb notify test a few times

Signed-off-by: Robin Appelman <robin@icewind.nl>

feat(webauthn): submit device name by pressing enter

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Update pr-feedback.yml

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45129 from nextcloud/pulsejet/name-idx-mig

fix(core): add fs_name_hash index to migration

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Remove All files prefix from original location

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #44694 from nextcloud/feat/show-trash-deleted-by

feat(trashbin): Show user who deleted a file

chore: compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

refactor(trashbin): Move columns into separate file

Signed-off-by: Christopher Ng <chrng8@gmail.com>

feat(trashbin): Show user who deleted a file

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(core): add fs_name_hash index to migration

Signed-off-by: Varun Patil <varunpatil@ucla.edu>

Merge pull request #44695 from nextcloud/dependabot/composer/build/integration/phpunit/phpunit-9.6.19

Merge pull request #44545 from nextcloud/dependabot/npm_and_yarn/webdav-5.5.0

build(deps): bump webdav from 5.4.0 to 5.5.0

fix(deps): Drop `ical.js` from dependencies

This seems to be fully replaced with `@nextcloud/calendar-availablity`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44942 from nextcloud/dependabot/npm_and_yarn/simplewebauthn/browser-10.0.0

bump @simplewebauthn/browser from 9.0.1 to 10.0.0

bump @simplewebauthn/browser from 9.0.1 to 10.0.0

---
updated-dependencies:
- dependency-name: "@simplewebauthn/browser"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #45117 from nextcloud/bug/noid/unnecessary-ini-set

chore: remove unnecessary ini_set

Merge pull request #44943 from nextcloud/dependabot/npm_and_yarn/nextcloud/password-confirmation-5.1.0

fix(querybuilder): Remove temporary internal method executeUpdate()

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #44941 from nextcloud/dependabot/npm_and_yarn/types/dockerode-3.3.28

Merge pull request #44829 from nextcloud/feat/add-storage-tree-to-info-file

feat(occ): Add --storage-tree option to info:file to help debug storages

Merge pull request #44871 from nextcloud/feature/include-file-id-in-audit-logs

feat: include file id in audit logs

fix(deps): bump @nextcloud/password-confirmation from 5.0.1 to 5.1.0

---
updated-dependencies:
- dependency-name: "@nextcloud/password-confirmation"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps-dev): bump phpunit/phpunit in /build/integration

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.18 to 9.6.19.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.19/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.18...9.6.19)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

fix(dev-deps): bump @types/dockerode from 3.3.26 to 3.3.28

---
updated-dependencies:
- dependency-name: "@types/dockerode"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump webdav from 5.4.0 to 5.5.0

Bumps [webdav](https://github.com/perry-mitchell/webdav-client) from 5.4.0 to 5.5.0.
- [Changelog](https://github.com/perry-mitchell/webdav-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/perry-mitchell/webdav-client/compare/v5.4.0...v5.5.0)

---
updated-dependencies:
- dependency-name: webdav
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore: remove unnecessary ini_set

Changing gc_maxlifetime cannot have any effect because this configuration option does not exist. There is a configuration option named session.gc_maxlifetime.

I removed the ini_set call because autoconfiguring is error-prone, and the current code could never have worked as intended.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

feat: include file id in audit logs

Signed-off-by: yemkareems <yemkareems@gmail.com>

Merge pull request #44533 from nextcloud/dependabot/composer/vendor-bin/psalm/vimeo/psalm-5.23.1

chore: Update baseline to include new 3rdparty psalm errors

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Avoid reference use in AppConfig

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix small psalm errors in legacy

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix tiny phpdoc errors related to Share

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Avoid useless reference usage in user_ldap

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix phpdoc typing in DirectEditing\Manager

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(files_external): Be extra safe with null handling to please psalm

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Improve typing in Archive/TAR.php

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Improve typing of mimetype aliases

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix incorrect phpdoc typing in dav app

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix default values for ini var in lib/base.php

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(user_ldap): Improve typing and fix a var name

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(theming): Fix erronous phpdoc typing

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(setupchecks): Fix opcache buffer check

This was broken by last codestyle update, maybe even before because of
 operator precedence. Now using vars to make it readable and correct at
 the same time.

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(files): Fix ownership transfer encrypted files detection

Discovered by psalm update

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Remove bogus code from query builder and fix parameter name

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Fix newly spotted psalm issues, add exhaustive typed magic properties for LDAP classes

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

build(deps): bump vimeo/psalm from 5.9.0 to 5.23.1 in /vendor-bin/psalm

Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 5.9.0 to 5.23.1.
- [Release notes](https://github.com/vimeo/psalm/releases)
- [Commits](https://github.com/vimeo/psalm/compare/5.9.0...5.23.1)

---
updated-dependencies:
- dependency-name: vimeo/psalm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #44996 from nextcloud/fix/unify-access-to-forbidden-chars

fix(files): Use OCP\Util::getForbiddenFileNameChars instead of directaccess to system config

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(files): Use string array instead of string for forbidden characters

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Use OCP\Util::getForbiddenFileNameChars instead of direct access to system config

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #44968 from nextcloud/fix/drop-workaround-for-obsolete-php

fix: Drop workarounds for unsupported obsolete PHP versions

Merge pull request #45029 from nextcloud/backport/44972/master

fix(unifiedSearch): Prevent broken avatars for federated users

Merge pull request #44952 from nextcloud/perf/44951/template-creator

perf(templates): Emit RegisterTemplateCreatorEvent to register template creators more lazy

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(unifiedSearch): Prevent broken avatars for federated users

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #44586 from nextcloud/pulsejet/name-idx

perf(core): add index on name

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45073 from nextcloud/dependabot/npm_and_yarn/sass-1.75.0

build(deps-dev): bump sass from 1.74.1 to 1.75.0

Bumps [sass](https://github.com/sass/dart-sass) from 1.74.1 to 1.75.0.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.74.1...1.75.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #45072 from nextcloud/dependabot/npm_and_yarn/puppeteer-22.7.1

build(deps-dev): bump puppeteer from 22.5.0 to 22.7.1

Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 22.5.0 to 22.7.1.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/release-please-config.json)
- [Commits](https://github.com/puppeteer/puppeteer/compare/puppeteer-v22.5.0...puppeteer-v22.7.1)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45066 from nextcloud/feat/workflow-auto-update-dependabot-approve-merge.yml

Updating dependabot-approve-merge.yml workflow from template

Merge pull request #45065 from nextcloud/feat/workflow-auto-update-pr-feedback.yml

Updating pr-feedback.yml workflow from template

Updating dependabot-approve-merge.yml workflow from template

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Updating pr-feedback.yml workflow from template

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #44670 from nextcloud/fix/session/no-authtoken-password-no-check

fix(session): Do not update authtoken last_check for passwordless

fix(session): Do not update authtoken last_check for passwordless

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #44496 from nextcloud/feat/s3-accelerate

feat: support "s3-accelerate" endpoint

feat: add option to enable s3 acceleration

Signed-off-by: Robin Appelman <robin@icewind.nl>