fix: forbid moving a folder into a subfolder of itself

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #45009 from nextcloud/backport/44892/stable24

[stable24] fix(files): Also skip cross storage move with access control

fix(CI): Suppress psalm UndefinedClass

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(files): Also skip cross storage move with access control

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #44742 from nextcloud/backport/stable24/44736

[stable24] fix: Fix avatar images

test: Update tests

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix: Fix avatar images

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #44687 from nextcloud/backport/44678/stable24

[stable24] fix(3rdparty): Add a CI job to check 3rdparty integrity

fix(3rdparty): Add a CI job to check 3rdparty integrity

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #44479 from nextcloud/backport/44276/stable24

[stable24] fix(config): Make sure user keys are strings

Merge pull request #44519 from nextcloud/automated/noid/stable24-update-code-signing-crl

[stable24] fix(security): Update code signing revocation list

fix(security): Update code signing revocation list

Signed-off-by: GitHub <noreply@github.com>

fix(config): Make sure user keys are strings

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #44324 from nextcloud/backport/44309/stable24

[stable24] Forbid tagging readonly files

chore: Remove PHP8 constructor property promotions

25 supports 7.4

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(dav): Add missing use for OCP\Constants

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore: Break closure call on two lines to make it readable

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(systemtags): Forbid tagging of readonly files

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #43856 from nextcloud/backport/43787/stable24

Merge pull request #44143 from nextcloud/automated/noid/stable24-update-ca-cert-bundle

[stable24] fix(security): Update CA certificate bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

fix: Throw instead of yielding nothing when listing local directories

Signed-off-by: Julius Härtl <jus@bitgrid.net>
Signed-off-by: Max <max@nextcloud.com>

Merge pull request #43891 from nextcloud/backport/43599/stable24

Merge pull request #43782 from nextcloud/backport/43753/stable24

Merge pull request #43865 from nextcloud/backport/43859/stable24

fix(dav): Init ViewOnlyPlugin after auth

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #43871 from nextcloud/backport/43727/stable24

fix: Add bruteforce protection to email endpoint

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(dav): Rate limit calendar/subscription creation

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Check node permissions when restoring a version

Signed-off-by: Louis Chemineau <louis@chmn.me>

Check share attributes when downloading versions

Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #43748 from nextcloud/backport/40332/stable24

Remove modern PHP syntax, and apply codesniffer fixes in Share20/Manager.php

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Use nullsafe call syntax instead of additionnal check

Co-authored-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
Signed-off-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>

Fix tests, add test for the new feature

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Set files_sharing:hide_disabled_user_shares to 'yes' to hide shares from disabled users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #43503 from nextcloud/automated/noid/stable24-update-code-signing-crl

[stable24] fix(security): Update code signing revocation list

fix(security): Update code signing revocation list

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #43375 from nextcloud/automated/noid/stable24-update-code-signing-crl

[stable24] fix(security): Update code signing revocation list

fix(security): Update code signing revocation list

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #43072 from nextcloud/automated/noid/stable24-update-code-signing-crl

[stable24] fix(security): Update code signing revocation list

fix(security): Update code signing revocation list

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #42910 from nextcloud/fix/caldav/update-acls-deletedcalendarobjectscollection-stable24

[stable24] fix(CalDAV): set acls for DeletedCalendarObjectsCollection

fix(CalDAV): set acls for DeletedCalendarObjectsCollection

Signed-off-by: Johannes Merkel <mail@johannesgge.de>

Merge pull request #42878 from nextcloud/backport/42563/stable24

[stable24] Update crl after revoke integration_homeassistant.csr

Update crl after revoke integration_homeassistant.csr

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>

Merge pull request #42396 from nextcloud/backport/42140/stable24

[stable24] Update crl after revoke rides.csr

Update crl after revoke rides.csr

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>

Merge pull request #40817 from nextcloud/automated/noid/stable24-fix-npm-audit

[stable24] Fix npm audit

Merge pull request #42191 from nextcloud/automated/noid/stable24-update-ca-cert-bundle

[stable24] fix(security): Update CA certificate bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #41665 from nextcloud/backport/39285/stable24

[stable24] add command do delete orphan shares

Merge pull request #41322 from nextcloud/backport/39924/stable24

[stable24] fix: Set X-Requested-With header on all requests to avoid browser auth dialogs

compile assets

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

fix: Set X-Requested-With header on all requests to avoid browser auth dialogs

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

add command do delete orphan shares

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #41530 from nextcloud/backport/41526/stable24

[stable24] Reverse X-Forwarded-For list to read the correct proxy remote address

Merge pull request #41524 from nextcloud/backport/41520/stable24

[stable24] Finish password confirmation

Reverse X-Forwarded-For list to read the correct proxy remote address

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(workflows): Finish password confirmation

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #41127 from nextcloud/backport/41123/stable24

[stable24] fix(external): Get storage before update it

fix(external): Get storage before update it

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #40382 from nextcloud/backport/38808/stable24

Merge pull request #40386 from nextcloud/backport/36830/stable24

[stable24] fix: Avoid failing with duplicate checks

fix: Avoid failing with duplicate checks

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fix: Only read unencrypted_size when file is actually encrypted

Signed-off-by: Julius Härtl <jus@bitgrid.net>

fix: Only store unencrypted_size if path should be encrypted

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #40317 from nextcloud/backport/40292/stable24

[stable24] fix(CalDAV): check birthday calendar owner

Merge pull request #40305 from nextcloud/backport/stable24/40293

[stable24] fix(ratelimit): Only use memory cache backend for redis

fix(CalDAV): check birthday calendar owner

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40219 from nextcloud/automated/noid/stable24-fix-npm-audit

[stable24] Fix npm audit

fix(ratelimit): Only use memory cache backend for redis

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40262 from nextcloud/backport/40234/stable24

[stable24] enh: skip processing for empty response

enh: skip processing for empty response

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #40004 from nextcloud/automated/noid/stable24-update-ca-cert-bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #39541 from nextcloud/automated/noid/stable24-fix-npm-audit

[stable24] Fix npm audit

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #39494 from nextcloud/backport/39490/stable24

[stable24] fix(apps): Fix loading info.xml file

fix(apps): Fix loading info.xml file

Ref: https://bugs.php.net/bug.php?id=62577

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #39420 from nextcloud/backport/39416/stable24

[sŧable24] fix(core): Add password confirmation requirement for getapppassword

fix(core): Add password confirmation requirement for getapppassword

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #39357 from nextcloud/backport/39323/39323-stable24

[stable24] getStorage before remove

getStorage before remove

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Merge pull request #39347 from nextcloud/ci/sign-drone-stable24

[stable24] chore(CI): Sign .drone.yml file

chore(CI): Sign .drone.yml file

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #38985 from nextcloud/automated/noid/stable24-fix-npm-audit

[stable24] Fix npm audit

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #39254 from nextcloud/backport/38046/stable24

[stable24] fix(dav): Abort requests with 429 instead of waiting

Merge pull request #39033 from nextcloud/backport/38917/stable24

fix(psalm): Install apcu, ftp and ldap extension like in static-code-analysis-security

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: use handleLoginFailed for invalid email address

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix(dav): Abort requests with 429 instead of waiting

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #38901 from nextcloud/backport/38773/stable24

[stable24] Add bruteforce protection in OauthApiController

add bruteforce protection in OauthApiController

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

fix(l10n): Fix plural issue with different locale and language

We need to use the language code here instead of the locale,
because Symfony does not distinguish between the two and would
otherwise e.g. with locale "Czech" and language "German" try to
pick a non-existing plural rule, because Czech has 4 plural forms
and German only 2.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #38937 from nextcloud/backport/37709/stable24

[stable24] fix: Check for wrapped retriable exceptions to handle deadlocks