[Security] Bump lodash from 4.17.11 to 4.17.15 in /build

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.15. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.15)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #19374 from nextcloud/dependabot/npm_and_yarn/build/stable16/lodash.mergewith-4.6.2

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

[tx-robot] updated from transifex

[Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build

Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19310 from nextcloud/backport/19219/stable16

[stable16] Fix display of DTEND for multi-day all-day event

[tx-robot] updated from transifex

Fix display of DTEND for multi-day all-day event

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

[tx-robot] updated from transifex

Merge pull request #19285 from nextcloud/backport/19281/stable16

[stable16] for the DB ot pick an index specify the object_type

[tx-robot] updated from transifex

for the DB ot pick an index specify the object_type

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19209 from nextcloud/backport/19176/stable16

[stable16] Do not encode contacts menu mailto links

Do not encode contacts menu mailto links

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #19155 from nextcloud/version/16.0.8/final

16.0.8

Update CA bundle

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

16.0.8

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #19027 from nextcloud/version/16.0.8/rc1

16.0.8 RC1

16.0.8 RC1

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #18440 from nextcloud/dependencies/npm/nextcloud-vue-collections-0.4.2

[stable16] Bump nextcloud-vue-collections to 0.4.2

Merge pull request #19015 from nextcloud/backport/17484/stable16

[stable16] Always use the latest timestamp for merged activities

Bump nextcloud-vue-collections to 0.4.2

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #19077 from nextcloud/backport/17920+18254/stable16

[stable16] when a user was deleted remove them from applicable list, unless...

rejig right to left join for sqlite's satisfaction

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

extend with group deletion handling

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

when a user was delete remove them from applicable list, unless

it is the only user, then remove the mount

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Merge pull request #19016 from nextcloud/backport/18358/stable16

[stable16] Fix restoring shared versions

[tx-robot] updated from transifex

Merge pull request #18933 from nextcloud/backport/18107/stable16

[stable16] dont throw undefined index errors for storages that have no owner set

update tests

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix restoring shared versions

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Always use the latest timestamp for merged activities

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

dont throw undefined index errors for storages that have no owner set

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #18759 from nextcloud/backport/18753/stable16

[stable16] Do not rerender the selection menu on show

[tx-robot] updated from transifex

Do not rerender the selection menu on show

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #18748 from nextcloud/backport/18740/stable16

[stable16] cache group existence early to save useless requests to LDAP

cache group existence early to save useless requests to LDAP

we do it for users already

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #18581 from nextcloud/backport/18140/stable16

[stable16] Allow inline styles for theming images

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Allow inline styles for theming images

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #18489 from nextcloud/backport/18433/stable16

[stable16] Use File Node API for more download cases, skip unreadable files

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[stable16] Fix listing users in groups with slash in the name (#18486)

[stable16] Fix listing users in groups with slash in the name

[tx-robot] updated from transifex

Fix listing users in groups with slash in the name

Signed-off-by: Gary Kim <gary@garykim.dev>

when downloading from web, skip files that are not accessible

* avoids a 403, but enables download of resources that are not restricted
* single file downloads still cause 403

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

use Nodes API for zip streaming

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Use files node API for single file downloads

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #18400 from nextcloud/backport/18302/stable16

[stable16] Fix comments search result to work with multibyte strings

Merge pull request #18459 from nextcloud/version/16.0.7/final

16.0.7

[tx-robot] updated from transifex

16.0.7

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Fix comments search result to work with multibyte strings

Currently, the searching in comments breaks up, if comments contain multibyte characters and string manipulation logic in getRelevantMessagePart happens to cut through them rendering the resulting string invalid (not UTF-8 compliant). This patch replaces all string manipulating functions in this code to multibyte aware ones.

Signed-off-by: Michał Węgrzynek <michal.wegrzynek@malloc.com.pl>