Handle single action unshare

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Only allow removing existing shares that would not be allowed due to reshare restrictions

Signed-off-by: Julius Härtl <jus@bitgrid.net>

When changing the share owner, downgrade permissions where needed

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Drop share if moved to a parent share that does not allow resharing

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #27651 from nextcloud/dependabot/npm_and_yarn/stable20/eslint-plugin-standard-4.0.2

Bump eslint-plugin-standard from 4.0.1 to 4.0.2

Merge pull request #27680 from nextcloud/backport/27675/stable20

[stable20] Validate the theming color also on CLI

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Validate the theming color also on CLI

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

Bump eslint-plugin-standard from 4.0.1 to 4.0.2

Bumps [eslint-plugin-standard](https://github.com/standard/eslint-plugin-standard) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/standard/eslint-plugin-standard/releases)
- [Commits](https://github.com/standard/eslint-plugin-standard/compare/v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-standard
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #27226 from nextcloud/dependabot/npm_and_yarn/stable20/p-queue-6.6.2

Bump p-queue from 6.6.1 to 6.6.2

Merge pull request #27620 from nextcloud/version/20.0.11/rc1

20.0.11 RC1

Bump p-queue from 6.6.1 to 6.6.2

Bumps [p-queue](https://github.com/sindresorhus/p-queue) from 6.6.1 to 6.6.2.
- [Release notes](https://github.com/sindresorhus/p-queue/releases)
- [Commits](https://github.com/sindresorhus/p-queue/compare/v6.6.1...v6.6.2)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27639 from nextcloud/dependabot/npm_and_yarn/stable20/vue-loader-15.9.7

Bump vue-loader from 15.9.3 to 15.9.7

Bump vue-loader from 15.9.3 to 15.9.7

Bumps [vue-loader](https://github.com/vuejs/vue-loader) from 15.9.3 to 15.9.7.
- [Release notes](https://github.com/vuejs/vue-loader/releases)
- [Changelog](https://github.com/vuejs/vue-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-loader/compare/v15.9.3...v15.9.7)

---
updated-dependencies:
- dependency-name: vue-loader
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>
Signed-off-by: Louis Chemineau <louis@chmn.me>

[tx-robot] updated from transifex

update CA bundle

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27027 from nextcloud/backport/26852/stable20

[stable20] fix error when using CORS with no auth credentials

fix error when using CORS with no auth credentials

Merge pull request #27297 from nextcloud/dependabot/npm_and_yarn/stable20/webpack-4.44.2

Bump webpack from 4.44.1 to 4.44.2

Bump webpack from 4.44.1 to 4.44.2

Bumps [webpack](https://github.com/webpack/webpack) from 4.44.1 to 4.44.2.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v4.44.1...v4.44.2)

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #27016 from nextcloud/backport/26980-stable20

 [stable20] Use parent wrapper to properly handle moves on the same source/target storage

Merge pull request #27617 from nextcloud/backport/27610/stable20

[stable20] Throttle on public DAV endpoint

20.0.11 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Reference correct private variable

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Throttle on public DAV endpoint

We should throttle whenever an invalid request is sent to the public WebDAV endpoint.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

[tx-robot] updated from transifex

Merge pull request #27247 from nextcloud/dependabot/npm_and_yarn/stable20/browserslist-4.16.6

[Security] Bump browserslist from 4.14.0 to 4.16.6

Merge pull request #27596 from nextcloud/stable20-backport-27532

[stable20] Properly cleanup entries of WebAuthn on user deletion

Remove throwing annotation

This class was just introduced in Nc 21.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Use execute instead of executeStatement

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Properly cleanup entries of WebAuthn on user deletion

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Merge pull request #27570 from nextcloud/dependabot/npm_and_yarn/stable20/ws-7.5.0

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[Security] Bump ws from 7.3.1 to 7.5.0

Bumps [ws](https://github.com/websockets/ws) from 7.3.1 to 7.5.0. **This update includes security fixes.**
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.3.1...7.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27523 from nextcloud/bug/noid/unreachable-check-query-builder

[stable20] Activate constraint check for oracle / pqsql also for 20

Activate constraint check for oracle / pqsql also for 20.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27456 from nextcloud/backport/27444/stable20

[stable20] Header must contain a colon

[tx-robot] updated from transifex

Header must contain a colon

[tx-robot] updated from transifex

Merge pull request #27308 from nextcloud/backport/27062/stable20

[stable20] properly use limit and offset for search in Jail wrapper

properly use limit and offset for search in Jail wrapper

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27349 from nextcloud/backport/25280/stable20

[stable20] Set umask before operations that create local files

Skip the test if Imagick is misconfigured

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27412 from nextcloud/backport/27375/stable20

[stable20] Don't update statuses to offline again and again

improve type handling of Avatar::generateAvatarFromSv

Signed-off-by: Robin Appelman <robin@icewind.nl>

Don't update statuses to offline again and again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27325 from nextcloud/stable20-backport-27024

[stable20] Properly log expiration date removal in audit log

Merge pull request #27183 from nextcloud/dependabot/npm_and_yarn/stable20/various

[stable20] Bump patch dependencies

Merge pull request #27209 from nextcloud/backport/27199/stable20

[stable20] Use noreply@ as email address for share emails

Merge pull request #27337 from nextcloud/backport/27329/stable20

[stable20] Propagate throttling on OCS response

Merge pull request #27360 from nextcloud/backport/27354/stable20

[stable20] Escape filename in Content-Disposition

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Set umask before operations that create local files

this solves issues where "other php stuff" is messing with the umask

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Escape filename in Content-Disposition

We should escape all occurences of ' and \ in here.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

[tx-robot] updated from transifex

Propagate throttling on OCS response

The BaseResponse converter did not take over any throttling state from the DataResponse.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Merge pull request #27319 from nextcloud/backport/27099/stable20

[stable20] Make user:report command scale

Properly log expiration date removal in audit log

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Make user:report command scale

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[Security] Bump browserslist from 4.14.0 to 4.16.6

Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.14.0 to 4.16.6. **This update includes a security fix.**
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.14.0...4.16.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Use noreply@ as email address for share emails

Fixes #26683

Before it used the instance name, which a) doesn't make sense to randomly guess email addresses and b) could contain characters that are not allowed in email addresses like spaces.

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Npm build

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Bump vuedraggable from 2.24.1 to 2.24.3

Bumps [vuedraggable](https://github.com/SortableJS/Vue.Draggable) from 2.24.1 to 2.24.3.
- [Release notes](https://github.com/SortableJS/Vue.Draggable/releases)
- [Commits](https://github.com/SortableJS/Vue.Draggable/commits/v2.24.3)

Signed-off-by: dependabot[bot] <support@github.com>

Bump eslint-plugin-import from 2.22.0 to 2.22.1

Bumps [eslint-plugin-import](https://github.com/benmosher/eslint-plugin-import) from 2.22.0 to 2.22.1.
- [Release notes](https://github.com/benmosher/eslint-plugin-import/releases)
- [Changelog](https://github.com/benmosher/eslint-plugin-import/blob/master/CHANGELOG.md)
- [Commits](https://github.com/benmosher/eslint-plugin-import/compare/v2.22.0...v2.22.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump autosize from 4.0.2 to 4.0.4

Bumps [autosize](https://github.com/jackmoore/autosize) from 4.0.2 to 4.0.4.
- [Release notes](https://github.com/jackmoore/autosize/releases)
- [Changelog](https://github.com/jackmoore/autosize/blob/master/changelog.md)
- [Commits](https://github.com/jackmoore/autosize/compare/4.0.2...4.0.4)

Signed-off-by: dependabot[bot] <support@github.com>

Bump clipboard from 2.0.6 to 2.0.8

Bumps [clipboard](https://github.com/zenorocha/clipboard.js) from 2.0.6 to 2.0.8.
- [Release notes](https://github.com/zenorocha/clipboard.js/releases)
- [Commits](https://github.com/zenorocha/clipboard.js/compare/v2.0.6...v2.0.8)

Signed-off-by: dependabot[bot] <support@github.com>

Bump dompurify from 2.2.2 to 2.2.8

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.2 to 2.2.8.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.2.2...2.2.8)

Signed-off-by: dependabot[bot] <support@github.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27014 from nextcloud/backport/27000/stable20

[stable20] Harden apptoken check