fix: expect invalidateTokensOfUser only be called for seen users

Signed-off-by: Artur Neumann <artur@jankaritech.com>

invalidate oauth2 tokens only for seen users

Signed-off-by: Artur Neumann <artur@jankaritech.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47258 from nextcloud/bugfix/noid/translated-predefined-user-status

Don't save translated predefined user status as custom status

Merge pull request #47252 from nextcloud/bugfix/noid/dont-crash-when-creating-folder

fix(adminaudit): Don't crash when creating folder

chore(assets): Recompile assets

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(userstatus): Don't set predefined user status as custom when changing "Clear at"

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #47253 from nextcloud/feat/webauthn-uv

feat(webauthn): Add user verification to webauthn challenges

feat(webauthn): Add user verification to webauthn challenges

Require user verification if all tokens are registered
with UV flag, else discourage it

Signed-off-by: S1m <git@sgougeon.fr>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

fix(adminaudit): Don't crash when creating folder

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47240 from nextcloud/fix/webauth-credentials-length

fix(webauthn): Increase database column for public key id

fix(webauthn): Increase database column for public key id

* Resolves https://github.com/nextcloud/server/issues/34476

There is no maximum length defined in the standard,
most common the length is between 128 and 200 characters,
but as we store it not in plain data but base64 encoded the length can grow about 1/3.

We had a regression with 'Nitrokey 3' which created IDs with 196 byte length -> 262 bytes encoded base64.
So to be save we increase the size to 512 bytes.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #47203 from nextcloud/fix/app-menu-hover

fix(AppMenu): Prevent menu entries from jumping on hover

Merge pull request #47225 from nextcloud/dependabot/npm_and_yarn/is-svg-5.1.0

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(AppMenu): Prevent menu entries from jumping on hover

Only grow and shrink app menu entry if needed

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore(deps): bump is-svg from 5.0.1 to 5.1.0

Bumps [is-svg](https://github.com/sindresorhus/is-svg) from 5.0.1 to 5.1.0.
- [Release notes](https://github.com/sindresorhus/is-svg/releases)
- [Commits](https://github.com/sindresorhus/is-svg/compare/v5.0.1...v5.1.0)

---
updated-dependencies:
- dependency-name: is-svg
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #47212 from nextcloud/chore/master-is-now-31

Merge pull request #46809 from nextcloud/refactor/files_external/security-attributes

Merge pull request #47211 from nextcloud/fix/core/limit-valid-avatar-sizes

Merge pull request #47201 from nextcloud/fix/also-run-user-status-automation-for-start-and-end

fix(userstatus): run user status automation job for start and end events

Merge pull request #46887 from nextcloud/fix/versions-catch-insertion-error

fix(3rdparty): Update 3rdparty after dependabot changes

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #46966 from nextcloud/fix/cache-uploader-get-content-function

chore(assets): Recompile assets

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(branchoff): Bump versions and requirements in apps

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(release)!: Bump Server version to 31

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(security): Update expiration date in security.txt

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(CI)!: Add stable30 to and remove stable27 from GitHub Actions

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore: compile assets

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

perf(files): Cache `getContents` function used for uploader

Instead of trigger a PROPFIND for every new-menu entry clicks,
or conflict handling of uploads, we can just use the cached content from the file store.
If we do not have any cache entry we fetch new, but otherwise this is not needed.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #46813 from nextcloud/refactor/files_versions/security-attributes

Merge pull request #46812 from nextcloud/refactor/files_trashbin/security-attributes

refactor(files_external): Replace security annotations with respective attributes

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(userstatus): run user status automation job for start and end events

Signed-off-by: Anna Larch <anna@nextcloud.com>
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #47016 from nextcloud/refactor/cleanup-files-view

Merge pull request #46806 from nextcloud/refactor/federation/security-attributes

Merge pull request #46814 from nextcloud/refactor/oauth2/security-attributes

Merge pull request #46816 from nextcloud/refactor/settings/security-attributes

Merge pull request #46821 from nextcloud/refactor/updatenotification/security-attributes

Merge pull request #47207 from nextcloud/fix/sticky-nav-item

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

refactor(files): Drop unneeded initial state

The initial state is no longer used, it was only used in legacy UI and in the f2v rewrite
it was only used for the `id` which can be loaded just from the URL.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(core): Limit valid avatar sizes

Signed-off-by: provokateurin <kate@provokateurin.de>

fix(files): Fix non-sticky sticky views in files nav

Signed-off-by: Christopher Ng <chrng8@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #47209 from nextcloud/rakekniven-patch-2

chore(i18n): Improved grammar

Reported at Transifex.

Signed-off-by: rakekniven <2069590+rakekniven@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #46888 from nextcloud/jtr/bfp-settings-app-default-enable

Merge pull request #46723 from nextcloud/feat/add-delta-sync-to-subscription-calendars

feat(webcal): only update modified and deleted events from webcal calendars

Merge pull request #45435 from nextcloud/feat/dav/upcoming-events-api

feat(dav): Add an API for upcoming events

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

feat(dav): Add an API for upcoming events

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #47200 from nextcloud/fix/issue-47193

fix: test variables before returning

Merge pull request #47202 from nextcloud/chore/nextcloud-auth-2_4

chore(deps): Update `@nextcloud/auth` to v2.4.0 and use `getCSPNonce` where possible

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

chore(deps): Update `@nextcloud/auth` to v2.4.0 and use `getCSPNonce` where possible

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #43573 from nextcloud/HolgerHees-fix-csp-nonce-handling

Fix for ignored `CSP_NONCE` in ContentSecurity Header

Merge pull request #45786 from nextcloud/fix/caldav/default-vjournal

fix(caldav): allow VJOURNAL if no supported component set is specified

Merge pull request #45221 from nextcloud/feat/auth/authtoken-clean-up

feat(auth): Clean-up unused auth tokens and wipe tokens

fix: test variables before returning

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

fix(caldav): allow VJOURNAL if no supported component set is specified

This is mandated by the RFCs.

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #47195 from nextcloud/bugfix/noid/return-correct-userid-on-fed-invites

fix(federation): Return the used userID to allow the inviting server …

Merge pull request #47198 from nextcloud/fix/issue-46700

Change label "Allow download" for better l10n

chore(assets): Recompile assets

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: Update translation string

Signed-off-by: Archisman Das <archisman.officials@gmail.com>

fix(federation): Return the used userID to allow the inviting server to react to the famous `mapUid` result

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #47189 from nextcloud/feat/noid/ship-twofactor_nextcloud_notification

chore: Ship twofactor_nextcloud_notification

feat(webcal): only update modified and deleted events from webcal calendars

Signed-off-by: Anna Larch <anna@nextcloud.com>

feat(auth): Clean-up unused auth tokens and wipe tokens

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Merge pull request #41740 from nextcloud/Fix/duplicate-reminders

fix(dav): Handle duplicate event reminder

Merge pull request #47180 from nextcloud/fix/apply-group-limit-on-remove-from-group

Apply group limit on remove from group

Merge pull request #47181 from nextcloud/fix/new-folder-messae

fix(files): Add messages when "new folder" fails or gets cancelled

fix: handle-duplicate-reminder

Signed-off-by: hamza221 <hamzamahjoubi221@gmail.com>

Merge pull request #47188 from nextcloud/spreed/12950/avatar-menu-icon-color

fix(avatar): Fix icon-color for action-router contacts menu options

chore: Ship twofactor_nextcloud_notification

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(avatar): Fix icon-color for action-router contacts menu options

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

feat: Provide CSP nonce as `<meta>` element

This way we use the CSP nonce for dynamically loaded scripts.
Important to notice: The CSP nonce must NOT be injected in `content` as
this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(files): Add messages when "new folder" fails or gets cancelled

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

test: Adjust tests for CSP nonce

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make sure CSP nonce is not double base64 encoded

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Use `CSP_NONCE` env variable in ContentSecurity Header

We should use 'cspNonceManager' for requesting the NONCE value, because it is doing the same as before, except that it honors a CPS_NONCE environment variable if available.

Signed-off-by: Holger Hees <holger.hees@gmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47177 from nextcloud/fix/noid/preferred-taskprocessing-providers

[Task processing] Fix preferred providers

feat(taskprocessing): add text2text, text2image, contextWrite, transcribe and translate providers in the testing app

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

chore(tests): Fix import in cypress test limit_to_same_group.cy.ts

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(tests): Fix SPDX license header on new cypress test

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix(tests): Adapt tests to change of DefaultShareProvider constructor

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

fix: Remove shares only if there are no more common groups between users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

chore(tests): Test limiting sharing to same group

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(files_sharing): Delete user shares if needed when user is removed from a group

Signed-off-by: Louis Chemineau <louis@chmn.me>

fix(taskprocessing): select preferred provider when running sync task, fix task type values according to preferred provider

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Merge pull request #46987 from nextcloud/fix/dav-public

fix(dav): Ensure share properties are also set on public remote endpoint

feat: Make `ISharedStorage` public API and reuse where possible

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(dav): Ensure share properties are also set on public remote endpoint

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #47157 from nextcloud/perf/prevent-extra-requests

perf(files): Prevent extraneous requests when tree children are loading

Merge pull request #47153 from nextcloud/trashbin-fix-folder-extract

fix: fix getting the folder node from the dav response