Use minio for s3 tests

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Run s3 tests again

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #26650 from nextcloud/backport/26548/stable21

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27744 from nextcloud/backport/27739/stable21

[stable21] design fixes to app-settings button

Fix avatar actions

Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27707 from nextcloud/version/21.0.3/final

Merge pull request #27107 from nextcloud/backport/27043/stable21

design fixes to app-settings button

Signed-off-by: szaimen <szaimen@e.mail.de>

[tx-robot] updated from transifex

Merge pull request #27727 from nextcloud/backport/27638/stable21

[stable21] Downstream encryption:fix-encrypted-version for repairing "bad signature" errors

Prevent running FixEncryptedVersion without master key

Return an error when running occ encryption:fix-encrypted-version
when master key encryption is not enabled.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Fix FixEncryptedVersionTest test

Fixed setup to use EncryptionTrait like other existing tests.
Fix expectations to not rely on side effects from previous test cases.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Fix warnings in FixEncryptedVersion command

Fixed code warnings

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Detect disabled signature check when reparing

When running occ encryption:fix-encrypted-version, detect whether the
setting 'encryption_skip_signature_check' is set and abort if it is,
because the repair cannot detect version mismatch errors with it
enabled.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Downstream FixEncryptedVersionTest

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Downstream encryption:fix-encrypted-version

For fixing "Bad signature" errors.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

[tx-robot] updated from transifex

Merge pull request #27551 from nextcloud/backport/26571/stable21

[stable21] Only allow removing existing shares that would not be allowed due to reshare restrictions

Handle single action unshare

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Only allow removing existing shares that would not be allowed due to reshare restrictions

Signed-off-by: Julius Härtl <jus@bitgrid.net>

When changing the share owner, downgrade permissions where needed

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Drop share if moved to a parent share that does not allow resharing

Signed-off-by: Julius Härtl <jus@bitgrid.net>

21.0.3

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27703 from nextcloud/backport/27698/stable21

[stable21] LDAP: determine shares of offline users only when needed

LDAP: determine shares of offline users only when needed

- determine shares may via Sharing code result in user exists checks
- this may result in an infinite loop when user exists was called before
- the info is really only required at one occ command

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27679 from nextcloud/backport/27675/stable21

[stable21] Validate the theming color also on CLI

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Validate the theming color also on CLI

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27670 from nextcloud/backport/27663/stable21

[stable21] Unshift crash reports when they are loaded, to break the recusion

Unshift crash reports when they are loaded, to break the recusion

If, for whatever reason, during the loading of a crash reporter a new
log entry is generated, then the lazy loading mechanism will be invoked
*again* while it's already executed. This doesn't result in an endless
recursion, but means that the crash reporters will be built and
registered many times. This then means any further log entry will be
logged x times instead of once.

Unshift makes sure to take the class off the registration list right
away, so another invokation of the same method won't try to do the same
job.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[tx-robot] updated from transifex

Merge pull request #27621 from nextcloud/version/21.0.3/rc1

[tx-robot] updated from transifex

update CA bundle

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #27028 from nextcloud/backport/26852/stable21

[stable21] fix error when using CORS with no auth credentials

fix error when using CORS with no auth credentials

Merge pull request #27622 from nextcloud/dependabot/npm_and_yarn/stable21/dompurify-2.2.9

Bump dompurify from 2.2.8 to 2.2.9

Bump dompurify from 2.2.8 to 2.2.9

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.8 to 2.2.9.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.2.8...2.2.9)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27616 from nextcloud/backport/27610/stable21

[stable21] Throttle on public DAV endpoint

Merge pull request #27237 from nextcloud/dependabot/npm_and_yarn/stable21/moment-timezone-0.5.33

Bump moment-timezone from 0.5.32 to 0.5.33

Merge pull request #27231 from nextcloud/dependabot/npm_and_yarn/stable21/vue-loader-15.9.7

Bump vue-loader from 15.9.6 to 15.9.7

21.0.3 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Reference correct private variable

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Throttle on public DAV endpoint

We should throttle whenever an invalid request is sent to the public WebDAV endpoint.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

[tx-robot] updated from transifex

Bump moment-timezone from 0.5.32 to 0.5.33

Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.5.32 to 0.5.33.
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](https://github.com/moment/moment-timezone/compare/0.5.32...0.5.33)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: npmbuildbot-nextcloud[bot] <npmbuildbot-nextcloud[bot]@users.noreply.github.com>

Merge pull request #27250 from nextcloud/dependabot/npm_and_yarn/stable21/ws-7.4.6

[Security] Bump ws from 7.3.1 to 7.4.6

Merge pull request #27599 from nextcloud/backport/27596/stable21

[stable21] [stable20] Properly cleanup entries of WebAuthn on user deletion

Remove throwing annotation

This class was just introduced in Nc 21.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Use execute instead of executeStatement

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

Properly cleanup entries of WebAuthn on user deletion

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27569 from nextcloud/dependabot/npm_and_yarn/stable21/postcss-7.0.36

[Security] Bump postcss from 7.0.35 to 7.0.36

Bumps [postcss](https://github.com/postcss/postcss) from 7.0.35 to 7.0.36. **This update includes a security fix.**
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.35...7.0.36)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Fix accessibility of federation menu privacy buttons

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix accessibility of profile picture section

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix missing label of Files navigation sublist toggles

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix missing label of grid view toggle

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix screenreader label of search icon

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Add proper labels for personal settings privacy toggles

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Improve focus feedback for file list actions

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

Fix summary footer position and text contrast

Signed-off-by: Jan C. Borchardt <hey@jancborchardt.net>

[tx-robot] updated from transifex

Merge pull request #27415 from nextcloud/backport/26494/stable21

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #27455 from nextcloud/backport/27444/stable21

[stable21] Header must contain a colon

[tx-robot] updated from transifex

Header must contain a colon

Merge pull request #27446 from nextcloud/backport/27429/stable21

[stable21] Don't pass a column object to addOrderBy

[tx-robot] updated from transifex

Merge pull request #27324 from nextcloud/stable21-backport-27024

[stable21] Properly log expiration date removal in audit log

Fix #26085

addOrderBy expects a order expression. For the migration scenario we have column objects. Column objects are not supported by quoteColumnName yet.

A column object as order expression is most likely an edgy thing when migration database information.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #27303 from nextcloud/backport/27062/stable21

[stable21] properly use limit and offset for search in Jail wrapper

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Check whether output buffering is active before turning it off

Before we just turned it off and @suppressed the error if ob was not active.
In PHP 8 this error is no longer suppressed, so try to not cause it at all.

Signed-off-by: Richard de Boer <git@tubul.net>

Fix a usort comparison function returning a boolean instead of an integer

PHP 8 shows deprecation warnings about this, see #25806

Signed-off-by: Richard de Boer <git@tubul.net>

Fix functions taking optional parameters before required ones

PHP 8 shows deprecation warnings about this, see #25806
Removes the "default" values, as they actually are required parameters anyway.

Signed-off-by: Richard de Boer <git@tubul.net>

Merge pull request #27411 from nextcloud/backport/27375/stable21

[stable21] Don't update statuses to offline again and again

Merge pull request #27015 from nextcloud/backport/26980-stable21

[stable21] Use parent wrapper to properly handle moves on the same source/target storage

Don't update statuses to offline again and again

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #27336 from nextcloud/backport/27329/stable21

[stable21] Propagate throttling on OCS response

Merge pull request #27359 from nextcloud/backport/27354/stable21

[stable21] Escape filename in Content-Disposition

[tx-robot] updated from transifex

Merge pull request #27333 from nextcloud/backport/27328/stable21

[stable21] emit UserLoggedInEvent on apache auth

[tx-robot] updated from transifex