Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Merge pull request #26990 from francoisfreitag/rm-unused

Remove unused apps/dav/js/schedule-response.js

Merge pull request #27007 from francoisfreitag/script

Prefer string $file over 1-element array in script()

Merge pull request #26987 from nextcloud/dependabot/npm_and_yarn/build/node-sass-6.0.0

Merge pull request #26980 from nextcloud/bugfix/noid/partfile-move-storage

Use parent wrapper to properly handle moves on the same source/target storage

Merge pull request #26322 from nextcloud/recent-search

Use file search for recent files and optimize getting share types

Merge pull request #26580 from castillo92/patch-2

Fix casing of exception string

Merge pull request #27000 from nextcloud/enh/apptoken/check_apptoken

Harden apptoken check

Prefer string $file over 1-element array in script()

The string syntax is more obvious. There should be one (and preferably
only one) way of doing things.

Signed-off-by: François Freitag <mail@franek.fr>

Merge pull request #26896 from nextcloud/Valdnet-patch-8

l10n: Replace the apostrophe with double quotation

Merge pull request #26626 from J0WI/strict-security

Make Security module strict

Harden apptoken check

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26998 from nextcloud/dependabot/npm_and_yarn/babel/core-7.14.2

Bump @babel/core from 7.13.16 to 7.14.2

Merge pull request #26946 from nextcloud/enh/fed_share/respect_default_permissions

Respect default share permissions for federated reshares

Bump @babel/core from 7.13.16 to 7.14.2

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.13.16 to 7.14.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.14.2/packages/babel-core)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Respect default share permissions for federated reshares

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26846 from nextcloud/followup/26572/reply-with-json-when-not-accepting-html

Reply with json when not accepting html on LoginException

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Remove unused apps/dav/js/schedule-response.js

File is not included in the schedule-response-options template and is
commented out. The commented code relies on the buttonset() jQuery
plugin, which is deprecated.
https://api.jqueryui.com/buttonset/

If this code was to be re-introduced, it would take a different form.

Signed-off-by: François Freitag <mail@franek.fr>

[tx-robot] updated from transifex

Bump node-sass from 5.0.0 to 6.0.0 in /build

Bumps [node-sass](https://github.com/sass/node-sass) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sass/node-sass/compare/v5.0.0...v6.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Use parent wrapper to properly handle moves on the same source/target storage

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[tx-robot] updated from transifex

Merge pull request #26679 from nextcloud/bugfix/noid/fix-unauthorized-ocs-status-in-provisioning

Fix unauthorized OCS status in provisioning

Merge pull request #26959 from nextcloud/techdebt/noid/verifiyuserdata-iaccountmanager

VerifyUserData shall use IAccountManager, not private API

Merge pull request #26961 from nextcloud/techdet/noid/lib-accountmanager-api

ValidatePhoneNumber and PersonalInfo to use public IAccountManager

VerifyUserData shall use IAccountManager, not private API

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

PersonalInfo settings to use public AccoutManager API

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Repair job to use public AccoutManager API

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #26958 from nextcloud/enh/MountPublicLinkController/throttling

Throttle MountPublicLinkController when share is not found

Throttle MountPublicLinkController when share is not found

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26962 from nextcloud/fix-cs

Fix CS check

Fix CS check

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26923 from nextcloud/techdebt/noid/provapi-no-private-accountmanager

provisioning API to use only public API of IAccountManager

Merge pull request #26941 from nextcloud/enh/register-multiselect-fileactions

Allow apps to register a file action for multiselect

Merge pull request #26922 from nextcloud/techdebt/noid/dav-no-private-class

dav: Converter & SyncService shall not use private AccountManager

Merge pull request #26945 from nextcloud/enh/shareinfo/throttle

Add bruteforce protection to the shareinfo endpoint

Allow apps to register a file action for multiselect

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Add bruteforce protection to the shareinfo endpoint

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Fix unauthorized OCS status in provisioning

Signed-off-by: Joas Schilling <coding@schilljs.com>

Reply with JSON when html is not accepted like in SecurityMiddleware

Signed-off-by: Joas Schilling <coding@schilljs.com>

Reply with UNAUTHORIZED like on APIs when login exception was thrown

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #26949 from nextcloud/fix-add-app-password

fix occ command user:add-app-password

[tx-robot] updated from transifex

allow to set valid scopes only in AccountProperty

the auto-fallback to v2-local is removed as well to react on wrong input

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

remove private AccountManager from SyncService

and fix test

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

use the UID as loginName and not the display name.

Otherwise the app password will not work for users with a display name different to the UID.

Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>

Merge pull request #26751 from nextcloud/3rdparty/archive_tar/1.4.13

[3rdparty] Archive tar 1.4.13 bump

[tx-robot] updated from transifex

[3rdparty] Archive tar 1.4.13 bump

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #26917 from nextcloud/dependabot/npm_and_yarn/build/hosted-git-info-2.8.9

[Security] Bump hosted-git-info from 2.7.1 to 2.8.9 in /build

[Security] Bump hosted-git-info from 2.7.1 to 2.8.9 in /build

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. **This update includes a security fix.**
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.7.1...v2.8.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #26919 from nextcloud/dependabot/npm_and_yarn/hosted-git-info-2.8.9

[Security] Bump hosted-git-info from 2.8.8 to 2.8.9

Change the values in test

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

Change the values in the test

Merge pull request #26925 from nextcloud-pr-bot/automated/noid/psalm-baseline-update

[Automated] Update psalm-baseline.xml

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

provAPI to use only public API of IAccountManager

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

dav: do not use private AccountManager

- also updates data structure in test

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #26915 from nextcloud/chore/dav-calendar-untyped-events

Drop even more untyped events from the dav code

[Security] Bump hosted-git-info from 2.8.8 to 2.8.9

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. **This update includes a security fix.**
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Remove the untyped calendar update event

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Remove the untyped calendar create event

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #26913 from nextcloud/chore/dav-calendar-object-untyped-events

Drop some more untyped events from the dav code

Merge pull request #26848 from nextcloud/bugfix/noid/add-datetime-support-to-qbmapper

Add datetime support to QBMapper

Merge pull request #26914 from nextcloud/fix/caldav-get-shares-unused-param

Drop the unused second parameter on \OCA\DAV\CalDAV\CalDavBackend::getShares

Clean up reminder actions and call methods directly

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Remove the \OCA\DAV\CalDAV\CalDavBackend::createCalendarObject event

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Remove the \OCA\DAV\CalDAV\CalDavBackend::updateCalendarObject event

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Drop the unused second parameter on \OCA\DAV\CalDAV\CalDavBackend::getShares

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Remove the \OCA\DAV\CalDAV\CalDavBackend::deleteCalendarObject event

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #26907 from nextcloud/dependabot/npm_and_yarn/build/lodash-4.17.21

[Security] Bump lodash from 4.17.19 to 4.17.21 in /build

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21. **This update includes a security fix.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.19...4.17.21)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

l10n: Replace the apostrophe with double quotation

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

l10n: Replace the apostrophe with double quotation

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #26877 from nextcloud/chore/query-builder-execute-statement

Rename IQueryBuilder::executeUpdate to IQueryBuilder::executeStatement

Merge pull request #26878 from nextcloud/bugfix/noid/dont-break-occ-when-an-app-is-breaking-in-application-class

Don't break OCC if an app is breaking in it's Application class

Merge pull request #26869 from nextcloud/Valdnet-patch-8

l10n: Spelling unification

Don't break OCC if an app is breaking in it's Application class

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix usage of rename executeUpdate

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Rename IQueryBuilder::executeUpdate to IQueryBuilder::executeStatement

Because executeUpdate wasn't a great name. And in DBAL they also use
executeStatement more consistently now.

Ref https://github.com/doctrine/dbal/issues/4607

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Fix test

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

l10n: Spelling unification

Spelling unification in Transifex.

Signed-off-by: Valdnet <47037905+Valdnet@users.noreply.github.com>

[tx-robot] updated from transifex

Merge pull request #26845 from nextcloud/fix/noid/import-card-fix-string-value

fix creating vcards with multiple string values

Merge pull request #24835 from nextcloud/enhancement/composer-ext-zip

Add ext-zip as platform dependency

Merge pull request #26860 from nextcloud-pr-bot/automated/noid/psalm-baseline-update

[Automated] Update psalm-baseline.xml

Add ext-zip as platform dependency

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #26858 from nextcloud/dependabot/submodules/3rdparty-44e7240

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Merge pull request #26859 from nextcloud/dependabot/composer/vimeo/psalm-4.7.2

Bump vimeo/psalm from 4.7.1 to 4.7.2

Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 4.7.1 to 4.7.2.
- [Release notes](https://github.com/vimeo/psalm/releases)
- [Commits](https://github.com/vimeo/psalm/compare/4.7.1...4.7.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>