Bump @nextcloud/momemt to 1.2.1

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Merge pull request #33354 from nextcloud/backport/33031/stable23

[stable23] Improve local IP detection

Merge pull request #33392 from nextcloud/backport/33280/stable23

[stable23] handle AccessDenied error when checking if external s3 support versions

Merge pull request #32333 from nextcloud/dependabot/npm_and_yarn/stable23/clipboard-2.0.11

Bump clipboard from 2.0.10 to 2.0.11

Bumps [clipboard](https://github.com/zenorocha/clipboard.js) from 2.0.10 to 2.0.11.
- [Release notes](https://github.com/zenorocha/clipboard.js/releases)
- [Commits](https://github.com/zenorocha/clipboard.js/compare/v2.0.10...v2.0.11)

---
updated-dependencies:
- dependency-name: clipboard
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33408 from nextcloud/backport/33090/stable23

[stable23] DAV custom props: catch Exception and rollback transaction in case

Merge pull request #33156 from nextcloud/backport/32997/stable23

[stable23] load dashboard widgets of enabled apps only

Merge pull request #33383 from nextcloud/backport/33378/stable23

[stable23] don't set `null` as a bundle path

Fix autoloader

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix PHP 7.3 compat

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Remove call to undefined function, fix typing

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Align copied file with our code style

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Copy IpUtils from Symfony to avoid new dependency on backport

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #33103 from nextcloud/enhancement/add-logging-lo-federation

[Stable23] Logging, updating status for general error in federation

Merge pull request #33095 from nextcloud/dependabot/composer/build/integration/stable23/sabre/dav-4.4.0

Update sabre/dav requirement from 4.3.1 to 4.4.0 in /build/integration

catch any exception for transaction control

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

DAV custom props: catch Exception and rollback transaction in case

- before exceptions were not caught, a started transaction might not have
  been finished
- also resolve depractions and use IQueryBuilder

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

handle AccessDenied error when checking if external s3 support versions

Signed-off-by: Matthieu Gallien <matthieu.gallien@nextcloud.com>

Merge pull request #33366 from nextcloud/vincentdabot/npm_and_yarn/stable23/underscore-1.12.1

[stable23] Bump underscore from 1.12.0 to 1.12.1

avoid early DI of IAppManager

- might break install

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

load widgets only of enabled apps

- per design, all enabled apps have their registration run
- limitations, e.g. enabled by group, are not considered in that state,
  because we do not have a session (and might need apps?)
- before instantiation of widget it has to be checked whether the providing
  app is actually enabled for the logged in user.
- a public interface is being changed, but it is not meant to be
  implemented or used outside of the core handling. Therefore save to
  backport.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

don't set `null` as a bundle path

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix core tests by stubbing debounce

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

Bump underscore from 1.12.0 to 1.12.1

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33348 from nextcloud/dependabot/npm_and_yarn/stable23/dompurify-2.3.10

Bump dompurify from 2.3.8 to 2.3.10

Merge pull request #33351 from nextcloud/backport/33315/stable23

[stable23] Reset user status based on message ID only

Merge pull request #33365 from nextcloud/backport/33341/stable23

[stable23] Don't try to purge objects from the birthday calendar when it doesn't exist

Don't try to purge objects from the birthday calendar when it doesn't exist

Doesn't matter much as it's been recreated afterwards with (ensureCalendarExists).

Closes #29617

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

Use Symfony IpUtils to check for local IP ranges

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Check for local IPs nested in IPv6 as well

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Refactor local IP if and set strict to true for in_array

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Improve local IP detection

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Reset user status based on message ID only

Since some statuses (call) can occure with different status
(away and dnd) we need to reset only based on the message id.
But as it can not be set by the user this is still save and okay.

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #33344 from nextcloud/backport/33129/stable23

[stable23] Fix reading blob data as resource

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Bump dompurify from 2.3.8 to 2.3.10

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.3.8 to 2.3.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.3.8...2.3.10)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix reading blob data as resource

PostgreSQL returns data as resource when using IQueryBuilder::PARAM_LOB
(which is used for QBMapper).

Previously we just converted this resource using settype, which produced
things like "Resource id #14" instead of the actual resource data.

Now we read the stream correctly if the returned data is a resource

See context at #22472

Fixes #22439

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33253 from nextcloud/backport/32963/stable23

[stable23] also use nextcloud certificate bundle when downloading from s3

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33277 from nextcloud/backport/33270/stable23

[stable23] fix loading legacy app.php with multi app dir

fix loading legacy app.php with multi app dir

- requireAppFile() only appends /appinfo/app.php
- without the absolute path, require_once looks into include_path
- the first match in inlcude_path however migth be different from appPath
- fixed by providing the tested(!), full path to the app

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33257 from nextcloud/release/23.0.7

23.0.7

23.0.7

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

only use nextcloud bundle when explicitly enabled

Signed-off-by: Robin Appelman <robin@icewind.nl>

also use nextcloud certificate bundle when downloading from s3

Signed-off-by: Robin Appelman <robin@icewind.nl>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33150 from nextcloud/automated/noid/stable23-update-psalm-baseline

[stable23] Update psalm-baseline.xml

Update psalm baseline

Signed-off-by: GitHub <noreply@github.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Add logging to federation sync

Signed-off-by: Anna Larch <anna@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33168 from nextcloud/release/23.0.7_rc2

23.0.7 RC2

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #33158 from nextcloud/backport/33153/stable23

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33123 from nextcloud/release/23.0.7_rc1

Merge pull request #32987 from nextcloud/backport/stable23/31771

[stable23] Fix hook encryption with cron job

Merge pull request #32529 from nextcloud/dependabot/npm_and_yarn/stable23/vue-router-3.5.4

Bump vue-router from 3.5.3 to 3.5.4

Merge pull request #33035 from nextcloud/backport/31345/stable23

Merge pull request #32919 from nextcloud/backport/32874/stable23

Only ignore attempts of the same action

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #33114 from nextcloud/backport/stable23/31194

[stable23] Allow to disable password policy enforcement for selected groups

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33144 from nextcloud/backport/33052/stable23

Fix unit tests

Signed-off-by: Joas Schilling <coding@schilljs.com>

Prevent duplicate set display name request

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Do not save invalid display name to the database

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #33133 from nextcloud/backport/32993/stable23

[stable23] Fixes for quota text in navigation bar

Bump vue-router from 3.5.3 to 3.5.4

Bumps [vue-router](https://github.com/vuejs/router) from 3.5.3 to 3.5.4.
- [Release notes](https://github.com/vuejs/router/releases)
- [Changelog](https://github.com/vuejs/router/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/router/commits)

---
updated-dependencies:
- dependency-name: vue-router
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Fix hook encryption with cron job

Make sure the setup fs is set before using the Update service

Backport of #29674

Signed-off-by: Carl Schwan <carl@carlschwan.eu>

Fix quota text not updated after copying or moving a file

Note that the quota may change too when files are moved if the file is
moved, for example, to or from a folder shared by other user.

Besides the quota the storage statistics are also updated, similar to
what is done when a file is deleted.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Fix quota text not updated when no quota is set

The JavaScript code that updates the quota text expects the element to
have "quotatext" as id.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Fix quota text shown escaped

"t()" escapes and sanitizes the returned text by default, so strings
like "<" are converted to "&lt;". However, the "jQuery.text()" parameter
does not need to be escaped, as "&lt;" is shown literally as "&lt;"
rather than "<". Now "jQuery.html()" is used instead, which "unescapes"
the given text and sets it as a new text node (as the text in the
parameter does not contain markup for elements, only text).

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Merge pull request #33120 from nextcloud/backport/33109/stable23

[stable23] Fix translation of home breadcrumb

Update sabre/dav requirement from 4.3.1 to 4.4.0 in /build/integration

Updates the requirements on [sabre/dav](https://github.com/sabre-io/dav) to permit the latest version.
- [Release notes](https://github.com/sabre-io/dav/releases)
- [Changelog](https://github.com/sabre-io/dav/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sabre-io/dav/compare/4.3.1...4.4.0)

---
updated-dependencies:
- dependency-name: sabre/dav
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #33018 from nextcloud/dependabot/composer/build/integration/stable23/guzzlehttp/guzzle-6.5.8

Update guzzlehttp/guzzle requirement from 6.5.7 to 6.5.8 in /build/integration

Merge pull request #32890 from nextcloud/backport/32584/stable23

[stable23] Make sure ResetTokenBackgroundJob doesn't execute if config is read-only

[tx-robot] updated from transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #33024 from nextcloud/backport/29862/stable23

[stable23] Avoid deprecation warnings about libxml_disable_entity_loader in PHP 8+

Merge pull request #33116 from nextcloud/backport/33113/stable23

[stable23] Remove .php from ajax url

23.0.7 RC1

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix translation of home breadcrumb

Signed-off-by: Christopher Ng <chrng8@gmail.com>

add missing GET param to getstoragestats url

Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
(cherry picked from commit ca6a7245032e87f6d7f65c8e796cc0f176659677)

Fix 404 when using index.php in the url

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
(cherry picked from commit ee793572cb9acc9d688b1ff191a59e8699af9da1)

Remove .php from url

Probably here for legacy reasons, but it is a bit weird to call an .php
endpoint that doesn't correspond to a .php file

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
(cherry picked from commit c7931086cc557211073540cf13e2af4c5afaaad3)

Allow to disable password policy enforcement for selected groups

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Co-authored-by: Vincent Petry <vincent@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #33004 from nextcloud/backport/32719/stable23

[stable23] Fix email shares not being shown to other users