design fixes to app-settings button

Signed-off-by: szaimen <szaimen@e.mail.de>

[tx-robot] updated from transifex

Merge pull request #27727 from nextcloud/backport/27638/stable21

[stable21] Downstream encryption:fix-encrypted-version for repairing "bad signature" errors

Prevent running FixEncryptedVersion without master key

Return an error when running occ encryption:fix-encrypted-version
when master key encryption is not enabled.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Fix FixEncryptedVersionTest test

Fixed setup to use EncryptionTrait like other existing tests.
Fix expectations to not rely on side effects from previous test cases.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Fix warnings in FixEncryptedVersion command

Fixed code warnings

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Detect disabled signature check when reparing

When running occ encryption:fix-encrypted-version, detect whether the
setting 'encryption_skip_signature_check' is set and abort if it is,
because the repair cannot detect version mismatch errors with it
enabled.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Downstream FixEncryptedVersionTest

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Downstream encryption:fix-encrypted-version

For fixing "Bad signature" errors.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

[tx-robot] updated from transifex

Merge pull request #27551 from nextcloud/backport/26571/stable21

[stable21] Only allow removing existing shares that would not be allowed due to reshare restrictions

Handle single action unshare

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Only allow removing existing shares that would not be allowed due to reshare restrictions

Signed-off-by: Julius Härtl <jus@bitgrid.net>

When changing the share owner, downgrade permissions where needed

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Drop share if moved to a parent share that does not allow resharing

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #27703 from nextcloud/backport/27698/stable21

[stable21] LDAP: determine shares of offline users only when needed

LDAP: determine shares of offline users only when needed

- determine shares may via Sharing code result in user exists checks
- this may result in an infinite loop when user exists was called before
- the info is really only required at one occ command

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27679 from nextcloud/backport/27675/stable21

[stable21] Validate the theming color also on CLI

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Validate the theming color also on CLI

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27670 from nextcloud/backport/27663/stable21

[stable21] Unshift crash reports when they are loaded, to break the recusion

Unshift crash reports when they are loaded, to break the recusion

If, for whatever reason, during the loading of a crash reporter a new
log entry is generated, then the lazy loading mechanism will be invoked
*again* while it's already executed. This doesn't result in an endless
recursion, but means that the crash reporters will be built and
registered many times. This then means any further log entry will be
logged x times instead of once.

Unshift makes sure to take the class off the registration list right
away, so another invokation of the same method won't try to do the same
job.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #27621 from nextcloud/version/21.0.3/rc1

[tx-robot] updated from transifex

update CA bundle

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27028 from nextcloud/backport/26852/stable21

[stable21] fix error when using CORS with no auth credentials

fix error when using CORS with no auth credentials

Merge pull request #27622 from nextcloud/dependabot/npm_and_yarn/stable21/dompurify-2.2.9

Bump dompurify from 2.2.8 to 2.2.9

Bump dompurify from 2.2.8 to 2.2.9

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.8 to 2.2.9.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.2.8...2.2.9)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27616 from nextcloud/backport/27610/stable21

[stable21] Throttle on public DAV endpoint

Merge pull request #27237 from nextcloud/dependabot/npm_and_yarn/stable21/moment-timezone-0.5.33

Bump moment-timezone from 0.5.32 to 0.5.33

Merge pull request #27231 from nextcloud/dependabot/npm_and_yarn/stable21/vue-loader-15.9.7

Bump vue-loader from 15.9.6 to 15.9.7

21.0.3 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Reference correct private variable

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Throttle on public DAV endpoint

We should throttle whenever an invalid request is sent to the public WebDAV endpoint.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

[tx-robot] updated from transifex

Bump moment-timezone from 0.5.32 to 0.5.33

Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.5.32 to 0.5.33.
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](https://github.com/moment/moment-timezone/compare/0.5.32...0.5.33)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27250 from nextcloud/dependabot/npm_and_yarn/stable21/ws-7.4.6

[Security] Bump ws from 7.3.1 to 7.4.6

Merge pull request #27599 from nextcloud/backport/27596/stable21

[stable21] [stable20] Properly cleanup entries of WebAuthn on user deletion

Remove throwing annotation

This class was just introduced in Nc 21.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Use execute instead of executeStatement

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Properly cleanup entries of WebAuthn on user deletion

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27569 from nextcloud/dependabot/npm_and_yarn/stable21/postcss-7.0.36

[Security] Bump postcss from 7.0.35 to 7.0.36

Bumps [postcss](https://github.com/postcss/postcss) from 7.0.35 to 7.0.36. **This update includes a security fix.**
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.35...7.0.36)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27415 from nextcloud/backport/26494/stable21

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27455 from nextcloud/backport/27444/stable21

[stable21] Header must contain a colon

[tx-robot] updated from transifex

Header must contain a colon

Merge pull request #27446 from nextcloud/backport/27429/stable21

[stable21] Don't pass a column object to addOrderBy

[tx-robot] updated from transifex

Merge pull request #27324 from nextcloud/stable21-backport-27024

[stable21] Properly log expiration date removal in audit log

Fix #26085

addOrderBy expects a order expression. For the migration scenario we have column objects. Column objects are not supported by quoteColumnName yet.

A column object as order expression is most likely an edgy thing when migration database information.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #27303 from nextcloud/backport/27062/stable21

[stable21] properly use limit and offset for search in Jail wrapper

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Check whether output buffering is active before turning it off

Before we just turned it off and @suppressed the error if ob was not active.
In PHP 8 this error is no longer suppressed, so try to not cause it at all.

Signed-off-by: Richard de Boer <git@tubul.net>

Fix a usort comparison function returning a boolean instead of an integer

PHP 8 shows deprecation warnings about this, see #25806

Signed-off-by: Richard de Boer <git@tubul.net>

Fix functions taking optional parameters before required ones

PHP 8 shows deprecation warnings about this, see #25806
Removes the "default" values, as they actually are required parameters anyway.

Signed-off-by: Richard de Boer <git@tubul.net>

Merge pull request #27411 from nextcloud/backport/27375/stable21

[stable21] Don't update statuses to offline again and again

Merge pull request #27015 from nextcloud/backport/26980-stable21

[stable21] Use parent wrapper to properly handle moves on the same source/target storage

Don't update statuses to offline again and again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27336 from nextcloud/backport/27329/stable21

[stable21] Propagate throttling on OCS response

Merge pull request #27359 from nextcloud/backport/27354/stable21

[stable21] Escape filename in Content-Disposition

[tx-robot] updated from transifex

Merge pull request #27333 from nextcloud/backport/27328/stable21

[stable21] emit UserLoggedInEvent on apache auth

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27350 from nextcloud/backport/25280/stable21

[stable21] Set umask before operations that create local files

Set umask before operations that create local files

this solves issues where "other php stuff" is messing with the umask

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #27347 from nextcloud/backport/27053/stable21

[stable21] Don't throw when comments is disabled

Merge pull request #27334 from nextcloud/backport/25770/stable21

[stable21] Don't allow executing cli if cache backend is unavailable

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27346 from nextcloud/debt/noid/missing-import

[stable21] Replace OCSController with OCP\API

Escape filename in Content-Disposition

We should escape all occurences of ' and \ in here.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Don't throw when comments is disabled

Signed-off-by: Joas Schilling <coding@schilljs.com>

Replace OCSController with OCP\API

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

Propagate throttling on OCS response

The BaseResponse converter did not take over any throttling state from the DataResponse.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Don't allow executing cli if cache backend is unavailable

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

emit UserLoggedInEvent on apache auth

- post_login OC_Hook is barely used or listened to

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Properly log expiration date removal in audit log

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #27318 from nextcloud/backport/27099/stable21

[stable21] Make user:report command scale

Make user:report command scale

Signed-off-by: Joas Schilling <coding@schilljs.com>

[tx-robot] updated from transifex

properly use limit and offset for search in Jail wrapper

Signed-off-by: Robin Appelman <robin@icewind.nl>