Bump webpack-cli from 4.3.1 to 4.4.0

Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 4.3.1 to 4.4.0.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@4.3.1...webpack-cli@4.4.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #25281 from nextcloud/enh/comments/moment_once

Only include moments once in comments

Merge pull request #25183 from nextcloud/dependabot/composer/league/flysystem-1.1.3

Bump league/flysystem from 1.0.64 to 1.1.3

Merge pull request #25273 from nextcloud/enhancement/hide-two-factor-settings-if-no-providers

Do not show 2FA settings if the user has no providers available

Only include moments once in comments

Shaves off a decent amount of the code size. Let alone the parsing.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25275 from nextcloud/fix/two-factor-token-type

Convert 2FA token type to string

Merge pull request #25279 from nextcloud/fix/fully-deprecate-old-initial-state-interface

Fully deprecate the old initial state interface, not just the methods

Bump league/flysystem from 1.0.64 to 1.1.3

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Fully deprecate the old initial state interface, not just the methods

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #25241 from nextcloud/dependabot/npm_and_yarn/build/socket.io-2.4.1

Merge pull request #25274 from nextcloud/fix/19647/federated_users_are_not_valid_users

Do not obtain userFolder of a federated user

Merge pull request #25128 from nextcloud/ldapprovider-get-property

extend ILDAPProvider to allow reading arbitrairy ldap attributes for users

adjust since

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
Co-authored-by: Morris Jobke <hey@morrisjobke.de>

Convert 2FA token type to string

The IConfig service is documented to handle its data as strings, hence
this changes the code a bit to ensure we store keys as string and
convert them back when reading.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Do not show 2FA settings if the user has no providers available

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Do not obtain userFolder of a federated user

Federated shares are somewhat special. So we can't move the files from
the main user and we should try to get it from the intialized root
already.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25271 from nextcloud/dependabot/composer/aws/aws-sdk-php-3.171.21

Bump aws/aws-sdk-php from 3.133.27 to 3.171.21

Bump aws/aws-sdk-php from 3.133.27 to 3.171.21

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #25269 from nextcloud/dependabot/composer/swiftmailer/swiftmailer-6.2.5

Bump swiftmailer/swiftmailer from 6.2.4 to 6.2.5

Bump swiftmailer/swiftmailer from 6.2.4 to 6.2.5

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #25253 from nextcloud/fix/noid/log-noise

silence log message

Merge pull request #25255 from nextcloud/dav-storage-copy-directory

also use storage copy when dav copying directories

Merge pull request #25257 from nextcloud/dependabot/composer/sabre/dav-4.1.4

Bump sabre/dav from 4.1.3 to 4.1.4

Bump sabre/dav from 4.1.3 to 4.1.4

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

also use storage copy when dav copying directories

Signed-off-by: Robin Appelman <robin@icewind.nl>

silence log message

- this appears too often (in some configurations) when qualifying group
members which do not meet the criteria

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #25252 from nextcloud/dependabot/composer/giggsey/libphonenumber-for-php-8.12.16

Bump giggsey/libphonenumber-for-php from 8.12.4 to 8.12.16

Bump giggsey/libphonenumber-for-php from 8.12.4 to 8.12.16

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #25214 from nextcloud/dependabot/composer/phpseclib/phpseclib-2.0.30

Bump phpseclib/phpseclib from 2.0.25 to 2.0.30

Merge pull request #25238 from nextcloud/enh/noid/apps-defacto-in-root

Apps folder is defacto in root folder and not above

Merge pull request #25240 from nextcloud/enh/noid/re-use-fetched-dependencies

Re-use fetched dependencies in lib/base.php

Merge pull request #25119 from nextcloud/version/21/beta7

21 beta7

Merge pull request #25234 from nextcloud/bugfix/noid/fix-encoding-issue-with-oc.notification.show

Fix encoding issue with OC.Notification.show

Merge pull request #25236 from nextcloud/mkdir-explicit-chmod

explicitly set permissions on newly created folders

[tx-robot] updated from transifex

[Security] Bump socket.io from 2.3.0 to 2.4.1 in /build

Bumps [socket.io](https://github.com/socketio/socket.io) from 2.3.0 to 2.4.1. **This update includes a security fix.**
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/2.4.1/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/2.3.0...2.4.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Re-use fetched dependencies in lib/base.php

Reduces calls to DI container by reusing already fetched dependencies.

For status.php it went from 355 to 344.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Apps folder is defacto in root folder and not above

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #25229 from nextcloud/bugfix/noid/darkmode-popover-adjustments

Dark mode adjustments for popover

explicitly set permissions on newly created folders

this works around any `umask` that might be set and limiting the folder permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #25212 from nextcloud/enh/preview-markdown

Enhance markdown file preview rendering

Fix typo in comment

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #25224 from nextcloud/bugfix/24600/fix-saving-user-credentials

Update handling of user credentials

Fix encoding issue with OC.Notification.show

Signed-off-by: Joas Schilling <coding@schilljs.com>

Dark mode adjustments for popover

Add new popover classes from @nextcloud/vue's Popover and PopoverMenu*
components. This fixes issues where the menu icons were not inverted.

Adjusted border for both the avatar popover menu and also actions
popover menu to make them easier to distinguish from the background.

Now using border color for the popover arrow to make it more visible
outside the border.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Merge pull request #25217 from nextcloud/enh/drop_index

Drop authtoken_version_index

Enhance markdown file preview rendering

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Also load CA properly in integrity check

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

phpsec lib can't parse multiple certs in one go

So we have to split it manually and do it ourselves

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix potential empty result

Signed-off-by: Joas Schilling <coding@schilljs.com>

Drop authtoken_version_index

The index was used when deleting old tokens. On top of that the index is
of course not that great since the version is either 1 or 2.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25223 from nextcloud-pr-bot/automated/noid/psalm-baseline-update

[Automated] Update psalm-baseline.xml

Compare and store the login name via the event

Signed-off-by: Joas Schilling <coding@schilljs.com>

Also fix the username when it changed

Signed-off-by: Joas Schilling <coding@schilljs.com>

Don't save credentials of another user

Signed-off-by: Joas Schilling <coding@schilljs.com>

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Merge pull request #25151 from nextcloud/bugfix/noid/ie11-dashboard-syntax-error

Fix IE 11 dashboard syntax error

Merge pull request #25216 from nextcloud/enh/ca-bundle

Bump CA bundle

Bump phpseclib/phpseclib from 2.0.25 to 2.0.30

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #25173 from nextcloud/enh/webp_support

Add support for webp

Add support for webp

Including handling in OC_Image
But also a preview provider

Of course only works if your php actually supports webp

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25184 from nextcloud/feature/noid/first-class-citizen-notifications

Directly add notifications element

extend ILDAPProvider to allow reading arbitrairy ldap attributes for users

Signed-off-by: Robin Appelman <robin@icewind.nl>

Bump CA bundle

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25198 from nextcloud/dependabot/composer/pear/archive_tar-1.4.12

Bump pear/archive_tar from 1.4.11 to 1.4.12

Bump pear/archive_tar from 1.4.11 to 1.4.12

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #25153 from nextcloud/bugfix/noid/force-signature-verification-on-occ

Force signature verification of apps on occ

[tx-robot] updated from transifex

Merge pull request #25186 from nextcloud/bugfix/noid/dont-log-keys-on-verifySignature

Don't log keys on checkSignature

Merge pull request #25187 from nextcloud/dependabot/composer/symfony/polyfill-intl-normalizer-1.22.0

Bump symfony/polyfill-intl-normalizer from 1.20.0 to 1.22.0

Merge pull request #25182 from nextcloud/bugfix/noid/readd-element-id

Readd element ID after component mount.

Merge pull request #25181 from nextcloud/crl/update-revoked-gravatar.crt

Update CRL due to revoked gravatar.crl

Merge pull request #25185 from nextcloud/bugfix/share-errors

Show the actual error on share requests

Bump symfony/polyfill-intl-normalizer from 1.20.0 to 1.22.0

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Don't log keys on checkSignature

Signed-off-by: Joas Schilling <coding@schilljs.com>

Show the actual error on share requests

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Directly add notifications element

Since there seems to be an issue with the old way notifications is mounted,
we now hardcode it.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Readd element ID after component mount.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Update CRL due to revoked gravatar.crl

https://github.com/nextcloud/app-certificate-requests/pull/362

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #25168 from nextcloud/fix/cards_abiduri

Add cards_abiduri index on install

Merge pull request #25059 from nextcloud/dependabot/composer/web-auth/webauthn-lib-3.3.1

Bump web-auth/webauthn-lib from 3.1.1 to 3.3.1

Merge pull request #25177 from nextcloud/bugfix/noid/more-usable-mysql-password

Only use alphanumeric chars for mysql password

Merge pull request #25176 from nextcloud/add-composer-lock-for-acceptance-tests-to-git

Add "composer.lock" for acceptance tests to git

Only use alphanumeric chars for mysql password

/ and + can cause problems with other tools that you might want to run on your Nextcloud database.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix markup

Signed-off-by: Joas Schilling <coding@schilljs.com>

Add a warning when trying to run integrity:check-core on git

Signed-off-by: Joas Schilling <coding@schilljs.com>

Cleanup the constructor

Signed-off-by: Joas Schilling <coding@schilljs.com>

Force run the verification of the signature on occ

Signed-off-by: Joas Schilling <coding@schilljs.com>

Bump web-auth/webauthn-lib from 3.1.1 to 3.3.1

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #25160 from nextcloud/dependabot/npm_and_yarn/webpack-4.46.0

Add "composer.lock" for acceptance tests to git

As "composer.lock" was not versioned the dependencies had to be resolved
everytime that the acceptance tests run, which took some precious time.

Besides that the dependency versions were also tightened for better
control.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

[tx-robot] updated from transifex

Add cards_abiduri index on install

Else we directly tell the admin to add this on install.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #25159 from nextcloud/dependabot/npm_and_yarn/sass-loader-10.1.1

[tx-robot] updated from transifex

Bump webpack from 4.45.0 to 4.46.0

Bumps [webpack](https://github.com/webpack/webpack) from 4.45.0 to 4.46.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.45.0...v4.46.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump sass-loader from 10.1.0 to 10.1.1

Bumps [sass-loader](https://github.com/webpack-contrib/sass-loader) from 10.1.0 to 10.1.1.
- [Release notes](https://github.com/webpack-contrib/sass-loader/releases)
- [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/sass-loader/compare/v10.1.0...v10.1.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>