Add missing taint analysis docblock comments, and improve escaping in some methods

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #36857 from nextcloud/scan-repair-unencrypted-size

fix unencrypted_size for folders when scanning the filesystem with encryption enabled

Merge pull request #37856 from march42/bugfix/ldap_profiledata_removed

removed profile data from LDAP will get removed

Merge pull request #37864 from nextcloud/feat/noid/ratelimit-with-attributes

feat(ratelimit): Add Attributes support to rate limit middleware

feat(ratelimit): Add Attributes support to rate limit middleware

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #37763 from nextcloud/techdebt/36014/require-scour-0.38.2-for-svg-optimization

chore(assets): Require scour 0.38.2 (Ubuntu LTS 22.04+) for SVG optimization

Merge pull request #37895 from nextcloud/fix-make-grid-toggle-sticky

fix: make grid view button sticky

Merge pull request #37717 from nextcloud/artonge/fix/dont_override_stored_credentials_with_saml

Do not override stored credentials when login in with SAML

Merge pull request #37816 from nextcloud/fix/events/info-to-debug-log-legacy-events

fix(events): Log deprecated events as debug, not info

code styling

Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Marc Hefter <marchefter@march42.net>

Update apps/user_ldap/lib/User/User.php

Co-authored-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>
Signed-off-by: Marc Hefter <marchefter@march42.net>

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(assets): Optimize JPGs with jpegoptim 1.4.7

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(assets): Optimize PNGs with optipng 0.7.7

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(assets): Optimize SVGs with scour 0.38.2

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(assests): Ignore some more directories from optimization

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(assets): Require scour 0.38.2 (Ubuntu LTS 22.04+) for SVG optimization

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix: make grid view button sticky

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37032 from nextcloud/dependabot/npm_and_yarn/query-string-8.1.0

chore(deps): Bump query-string from 7.1.1 to 8.1.0

chore(deps): Bump query-string from 7.1.1 to 8.1.0

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #37884 from nextcloud/dependabot/npm_and_yarn/underscore-1.13.6

chore(npm): compile assets

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore(deps): bump browserslist-useragent-regexp from 3.0.2 to 4.0.0

Bumps [browserslist-useragent-regexp](https://github.com/browserslist/browserslist-useragent-regexp) from 3.0.2 to 4.0.0.
- [Release notes](https://github.com/browserslist/browserslist-useragent-regexp/releases)
- [Changelog](https://github.com/browserslist/browserslist-useragent-regexp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist-useragent-regexp/commits/v4.0.0)

---
updated-dependencies:
- dependency-name: browserslist-useragent-regexp
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

bump is-svg from 4.4.0 to 5.0.0

---
updated-dependencies:
- dependency-name: is-svg
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

bump underscore from 1.13.4 to 1.13.6

---
updated-dependencies:
- dependency-name: underscore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #37866 from nextcloud/fix/files-vue

Merge pull request #37885 from nextcloud/dependabot/composer/build/integration/behat/behat-3.13.0

chore(deps-dev): bump behat/behat from 3.12.0 to 3.13.0 in /build/integration

Merge pull request #37883 from nextcloud/dependabot/npm_and_yarn/puppeteer-19.10.1

chore(deps-dev): bump behat/behat in /build/integration

Bumps [behat/behat](https://github.com/Behat/Behat) from 3.12.0 to 3.13.0.
- [Release notes](https://github.com/Behat/Behat/releases)
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Behat/Behat/compare/v3.12.0...v3.13.0)

---
updated-dependencies:
- dependency-name: behat/behat
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #37891 from nextcloud/dependabot/composer/build/integration/guzzlehttp/guzzle-7.5.1

chore(deps-dev): bump guzzlehttp/guzzle from 7.5.0 to 7.5.1 in /build/integration

Merge pull request #37886 from nextcloud/dependabot/npm_and_yarn/wait-on-7.0.1

Merge pull request #37890 from nextcloud/dependabot/npm_and_yarn/karma-6.4.2

bump karma from 6.4.1 to 6.4.2

Merge pull request #37889 from nextcloud/dependabot/npm_and_yarn/pinia/testing-0.0.16

bump karma from 6.4.1 to 6.4.2

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #37881 from nextcloud/dependabot/npm_and_yarn/karma-spec-reporter-0.0.36

chore(deps-dev): bump guzzlehttp/guzzle in /build/integration

Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) from 7.5.0 to 7.5.1.
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.5/CHANGELOG.md)
- [Commits](https://github.com/guzzle/guzzle/compare/7.5.0...7.5.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

bump @pinia/testing from 0.0.15 to 0.0.16

---
updated-dependencies:
- dependency-name: "@pinia/testing"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

bump wait-on from 6.0.1 to 7.0.1

---
updated-dependencies:
- dependency-name: wait-on
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

bump puppeteer from 15.5.0 to 19.10.1

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(deps-dev): bump karma-spec-reporter from 0.0.35 to 0.0.36

Bumps [karma-spec-reporter](https://github.com/tmcgee123/karma-spec-reporter) from 0.0.35 to 0.0.36.
- [Release notes](https://github.com/tmcgee123/karma-spec-reporter/releases)
- [Commits](https://github.com/tmcgee123/karma-spec-reporter/compare/v0.0.35...v0.0.36)

---
updated-dependencies:
- dependency-name: karma-spec-reporter
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #37867 from nextcloud/techdebt/noid/require-min-composer-version-for-autoloader

chore(autoloader): Require a minimum composer version to make sure the autoloader

Merge pull request #37820 from nextcloud/parent-storage-mtime-ignore-error

ignore errors while trying to update parent storage_mtime

Merge pull request #37853 from nextcloud/fix/37610/composer-caches-to-apcu

add the server roots and version info hash to apcu prefix

Read mtime of version.php only once

- in most cases it would read again in \OC_Util::loadVersion anyway
- remove some unused use statements

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

add the server roots and version info hash to apcu prefix

fixes collissions when more than one instance is running on the same
system

For the memcaches we use a more complex prefix, where version and
instance ID are incorporated. We do not have this data at hand at this
point of time. But we can get the mtime of the version.php file
relatively cheap.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

chore(npm): compile assets

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(files): do not execute the default action on folders

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore(autoloader): Update autoloaders with composer 2.5.5

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(npm): compile assets

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

chore(CI): Require a minimum composer version to make sure the autoloader is okay

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(files): favorite marker css

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(files): fileid attribute

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

feat(files): allow navigation entry removal

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(files): paths store reactivity

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

feat(files): add dir file action parameter

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

feat(files): add sidebar action

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(files): always force menu

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #37858 from nextcloud/fix/lock

Fix lockfile and update cypress

Merge pull request #37525 from nextcloud/file-debug-info

add command for getting fileinfo for debugging

chore(npm): fix warning and build

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #37062 from nextcloud/free-space

Check free space only if source exists and is dir

Merge pull request #37596 from nextcloud/enh/type-iconfig-getter-calls

Use typed version of IConfig::getSystemValue as much as possible

chore(deps): update cypress

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

fix(npm): lockfile

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

removed profile data from LDAP will get removed

If attribute mapping is configured and no value present in LDAP, the
according profile field is emptied. Removing an attribute e.g. phone
from LDAP will cause the phone number being removed from profile.

Signed-off-by: Marc Hefter <marchefter@gmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37834 from nextcloud/fix/profiler-fix-typeerror

Fix TypeError in Profiler

ignore errors while trying to update parent storage_mtime

in the worst case this should only cause an extra rescan later

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge branch 'master' into enh/type-iconfig-getter-calls

Signed-off-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>

Merge pull request #37826 from nextcloud/bugfix/noid/no-error-for-guests

fix(files): Don't throw an error when guests access the controller

Merge pull request #37428 from nextcloud/enh/ignore-non-numeric-versions

Ignore and log non integer versions

Merge pull request #37597 from Jerome-Herbinet/patch-20

Fix : Hides hidden files and folder in modal (beginning with a dot)

fix(npm): lockfile

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Merge pull request #36565 from march42/feature/ldap_update_profile

[user_ldap] Update profile from LDAP fields

Merge pull request #37824 from nextcloud/feat/groupfolders

feat(files): add default action support and expose router

Fix TypeError in Profiler

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

npm run build

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

feat(files): expose Files router

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

feat(files): add default action support

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

npm run sass

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Cancel initial changes

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Merge pull request #37807 from nextcloud/fix/37373

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #37065 from nextcloud/enh/a11y-system-tags

Add accessible system tags select

Remove legacy systemtags code

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Add accessible system tags select

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Fix Vue TypeScript build errors

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #37804 from nextcloud/deps/nextcloud/vue-7.10.0

fix(files_external): Background color of external devices with errors should respect color theme

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #37809 from nextcloud/fix/last-used

Bump @nextcloud/vue from 7.9.0 to 7.10.0

Signed-off-by: Christopher Ng <chrng8@gmail.com>

fix(files): Don't throw an error when guests access the controller

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge branch 'master' into patch-20

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Merge pull request #37674 from nextcloud/feature/speech-to-text

feat(SpeechToText): Add SpeechToText OCP provider API

npm run build

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Following Artonge suggestion

Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>

Merge pull request #37451 from Fenn-CS/fix/36437/deprecate-php-8.0

Deprecate PHP8.0