List ext-pdo as hard requirement for composer

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #20597 from nextcloud/enh/lazy_node_events

Add lazy events for the Node API

Merge pull request #21124 from nextcloud/feature/20612/add-capability-for-file-comments

Add a capability when file comments are enabled

Add a capability when file comments are enabled

Signed-off-by: Joas Schilling <coding@schilljs.com>

Add lazy events for the Node API

Right now if you want to get events via the Node API you have to have a
real instance of the Root. Which in turns sets up the whole FS.

We should make sure this is done lazy. Else enabling the preview
generator for example makes you setup the whole FS on each and every
authenticated call.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #21122 from nextcloud/enhancement/auth-token-exception-reporting

Improve traces of invalid token exceptions

Merge pull request #21123 from nextcloud/fix/noid/fix-retrieval-of-groups

simplify getGroups, fixing wrong chunking logic

Merge pull request #21112 from nextcloud/techdebt/noid/remove-db-prefix

Remove db prefix option from cli install command

Merge pull request #20976 from nextcloud/fix/make-translation-sanitization-optional

Make the translation sanitization optional

Fix devices & sessions sanitization

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Make the translation sanitization optional

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

simplify getGroups, fixing wrong chunking logic

pagination is taken care of properly in the search logic in Access class

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #21079 from nextcloud/dependabot/npm_and_yarn/moment-2.26.0

Bump moment from 2.25.3 to 2.26.0

Merge pull request #21117 from nextcloud/design/text-variables-simplify

Simplify text variables from 4 to 2, map -lighter to -maxcontrast

Log why a token is not valid during password check

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Improve traces of invalid token exceptions

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Simplify text variables from 4 to 2, map -lighter to -maxcontrast

Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>

Bump moment from 2.25.3 to 2.26.0

Bumps [moment](https://github.com/moment/moment) from 2.25.3 to 2.26.0.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/moment/moment/compare/2.25.3...2.26.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21106 from nextcloud/fix/10809/user-pwd-change-loginname

use the loginname to verify the old password in user password changes

Remove the prefix setting attempt from our CI

Signed-off-by: Joas Schilling <coding@schilljs.com>

use the loginname to verify the old password in user password changes

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Remove db prefix option from cli install command

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #21108 from nextcloud/fix/20745/eor-old-php-api

fixes infinitely repeating LDPA search results with PHP <= 7.2

[tx-robot] updated from transifex

fixes infinitely repeating LDPA search results with PHP <= 7.2

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #21092 from nextcloud/enh/noid/recommended-apps

Update recommended apps

Merge pull request #21090 from nextcloud/bug/noid/do-not-read-cert-from-datadir-by-default

Do not read certificate bundle from data dir by default

Merge pull request #21078 from nextcloud/dependabot/npm_and_yarn/vue-router-3.2.0

Bump vue-router from 3.1.6 to 3.2.0

Bump bundles

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Do not read certificate bundle from data dir by default

Before the resources/config/ca-bundle.crt was only used when the list of custom
certificates was empty and the instance was not installed. But it should also
be used when the list is empty and the instance is installed.

This is inverting the logic to stop if the instance is not installed to use the
default bundle. And it also does this when the list is empty.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Update hub bundle and add proxy rule to htaccess

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Bump vue-router from 3.1.6 to 3.2.0

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.1.6 to 3.2.0.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.1.6...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #20005 from joeried/occ-remove-bruteforce-attempts-by-ip

Implement occ command to reset bruteforce attemps from a given IP address

Fix code style

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #20989 from nextcloud/td/js/move_core_files_webpack

Move core/js/files to webpack

Merge pull request #21065 from nextcloud/fix/cleanstatscache_before_fetching_metadata

Clear the statscache before fetching the metadata

[tx-robot] updated from transifex

Move core/js/files to webpack

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21001 from rubo77/pngs

compress some images with tinypng.com

compress some images with tinypng.com

Signed-off-by: Ruben Barkow-Kuder <github@r.z11.de>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #20776 from nextcloud/enh/limit_group_queries

Improve group queries

Clear the statscache before fetching the metadata

Else if a lot of writes happen. It might happen that an old stat result
is used. Resulting in a wrong file size for the file. For example the
text app when a lot of people edit at the same time.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

Merge pull request #20814 from nextcloud/group-id-only

dont get the group details if we only ask for the id

Merge pull request #20586 from nextcloud/techdebt/noid/make-image-optimization.sh-better-readable

Improve build/image-optimization.sh

Merge pull request #21018 from nextcloud/bug/20498/add-defaults-on-empty

Create account structure also for empty record

[tx-robot] updated from transifex

Merge pull request #21054 from nextcloud/feature/noid/default-gzip-encoding-for-http-clients

Allow gzip encoded requests by default

Revert "Compress the appstore requests by default"

This reverts commit 6ffde128ad17a1ebe38f8d18b21a37d01b47c46b.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Allow gzip encoded requests by default

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #21050 from nextcloud/bug/noid/caching-and-gzipping-of-appstore-requests

Caching and compression for app store requests

Compress the appstore requests by default

In test it reduced the transfered data from 5 MB to 2 MB. This should reduce the load on the appstore significantly.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Cache appstore requests for 60 instead of 5 minutes

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Merge pull request #21010 from nextcloud/dependabot/npm_and_yarn/marked-1.1.0

Bump marked from 0.8.2 to 1.1.0

Merge pull request #21041 from nextcloud/enh/dataresponse_etag_lastmod

Copy over the ETag and LastModified when formatting a Dataresponse

Merge pull request #21044 from nextcloud/enhancement/app-disable-log-message

Add a message to the log entry of an app being disabled

Add a message to the log entry of an app being disabled

As an admin, it's always a surprise to see that an app got disabled. On
a busy server with many log entries, it's hard to locate the entry that
explains why Nextcloud disabled an app. Adding a message will make it
more obvious, allowing admins and developers to grep for the string.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Bump marked from 0.8.2 to 1.1.0

Bumps [marked](https://github.com/markedjs/marked) from 0.8.2 to 1.1.0.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](https://github.com/markedjs/marked/compare/v0.8.2...v1.1.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21006 from nextcloud/dependabot/npm_and_yarn/moment-2.25.3

Bump moment from 2.24.0 to 2.25.3

Copy over the ETag and LastModified when formatting a Dataresponse

This way the ETag checks etc are all working.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump moment from 2.24.0 to 2.25.3

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.25.3.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/moment/moment/compare/2.24.0...2.25.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21009 from nextcloud/dependabot/npm_and_yarn/vuex-3.4.0

Bump vuex from 3.1.3 to 3.4.0

[tx-robot] updated from transifex

Bump vuex from 3.1.3 to 3.4.0

Bumps [vuex](https://github.com/vuejs/vuex) from 3.1.3 to 3.4.0.
- [Release notes](https://github.com/vuejs/vuex/releases)
- [Changelog](https://github.com/vuejs/vuex/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vuex/compare/v3.1.3...v3.4.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21011 from nextcloud/dependabot/npm_and_yarn/bootstrap-4.5.0

Bump bootstrap from 4.4.1 to 4.5.0

Merge pull request #21033 from nextcloud/enh/capabilities_initialstate

Provide capabilities via initialstate

Provide capabilities via initialstate

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #20846 from nextcloud/fix/link_fed_perm

Link permissions

Merge pull request #21017 from nextcloud/enh/noid/clean-excluded-groups-list

Remove group from excluded_groups_list after delete

Bump bootstrap from 4.4.1 to 4.5.0

Bumps [bootstrap](https://github.com/twbs/bootstrap) from 4.4.1 to 4.5.0.
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](https://github.com/twbs/bootstrap/compare/v4.4.1...v4.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21008 from nextcloud/dependabot/npm_and_yarn/css-vars-ponyfill-2.3.1

Bump css-vars-ponyfill from 2.2.1 to 2.3.1

Merge pull request #21003 from nextcloud/enh/noid/validate-locale

Remove entries from locales.json incompatible with punic

Bump css-vars-ponyfill from 2.2.1 to 2.3.1

Bumps [css-vars-ponyfill](https://github.com/jhildenbiddle/css-vars-ponyfill) from 2.2.1 to 2.3.1.
- [Release notes](https://github.com/jhildenbiddle/css-vars-ponyfill/releases)
- [Changelog](https://github.com/jhildenbiddle/css-vars-ponyfill/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jhildenbiddle/css-vars-ponyfill/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #21007 from nextcloud/dependabot/npm_and_yarn/blueimp-md5-2.16.0

Bump blueimp-md5 from 2.15.0 to 2.16.0

Merge pull request #21026 from nextcloud/dependabot/npm_and_yarn/moment-timezone-0.5.31

Bump moment-timezone from 0.5.28 to 0.5.31

Bump moment-timezone from 0.5.28 to 0.5.31

Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.5.28 to 0.5.31.
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](https://github.com/moment/moment-timezone/compare/0.5.28...0.5.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #20988 from nextcloud/td/js/deprecate_util_moment_functions

Deprectae OC.Util.formatDate and OC.Util.relativeModifiedDate

[tx-robot] updated from transifex

Create account structure also for empty record

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Remove group from excluded_groups_list after delete

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Bump blueimp-md5 from 2.15.0 to 2.16.0

Bumps [blueimp-md5](https://github.com/blueimp/JavaScript-MD5) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/blueimp/JavaScript-MD5/releases)
- [Commits](https://github.com/blueimp/JavaScript-MD5/compare/v2.15.0...v2.16.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Remove entries from locales.json incompatible with punic

As reported at https://github.com/nextcloud/server/issues/20999 the list contains en_US_POSIX as locale but punic is unable to parse such a locale. If you select that locale everyone is confused.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Merge pull request #20629 from mejo-/files_sharing_preview_text

Don't load text file preview when text app is available (Fixes: #20615)

Deprectae OC.Util.formatDate and OC.Util.relativeModifiedDate

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Merge pull request #20957 from nextcloud/Valdnet-patch-5

l10n: Adding "The" before "Following"

Merge pull request #20987 from nextcloud/feature/noid/allow-compressed-templateresponses

Allow TemplateResponse to be compressed

Merge pull request #20941 from nextcloud/smb-3.2.4

update icewind/smb to 3.2.4

Merge pull request #20904 from nextcloud/dependabot/npm_and_yarn/dompurify-2.0.11

Bump dompurify from 2.0.8 to 2.0.11

Bump dompurify from 2.0.8 to 2.0.11

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.0.8 to 2.0.11.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.0.8...2.0.11)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Allow TemplateResponse to be compressed

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

l10n: Add "The" before "Following"

Fix share update test

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Update public link share permission code

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>