fix(ratelimit): Only use memory cache backend for redis

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40281 from nextcloud/deps/nextcloud/dialogs-4.2.0-beta.5

Merge pull request #40231 from nextcloud/sharing-mask-wrapper-27

[27] move share permission logic to storage wrapper

Merge pull request #40200 from nextcloud/backport/39925/stable27

[stable27] fix(CardDAV): allow disabling of the system address book

chore: Compile assets

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Bump @nextcloud/dialogs to v4.2.0 beta 5

Signed-off-by: Christopher Ng <chrng8@gmail.com>

chore: Add patch-package dev dep for @nextcloud/dialogs

Signed-off-by: Christopher Ng <chrng8@gmail.com>

Merge pull request #40197 from nextcloud/update-sabre-http-for-stable27

[stable27] chore(3rdparty): update sabre/http to 5.1.10

Merge pull request #40269 from nextcloud/ftp-ci-fix-27

[27] change proftpd ci image

Merge pull request #40258 from nextcloud/backport/40234/stable27

[stable27] enh: skip processing for empty response

Merge pull request #40227 from nextcloud/backport/40195/stable27

[stable27] fix: prevent sharing permissions on user root folder

Merge pull request #40186 from nextcloud/backport/39017/stable27

[stable27] fix(s3): fix handling verify_bucket_exists parameter

change proftpd ci image

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix(CardDAV): allow disabling of the system address book via config option

Signed-off-by: Anna Larch <anna@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

enh: skip processing for empty response

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

cleanup di for share permissions wrapper

Signed-off-by: Robin Appelman <robin@icewind.nl>

more share permission logic to storage wrapper

this way we only have to determine the share permissions once

Signed-off-by: Robin Appelman <robin@icewind.nl>

chore(3rdparty): update sabre/http to 5.1.10

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix: prevent sharing permissions on user root folder

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(s3): fix handling verify_bucket_exists parameter

If 'verify_bucket_exists' is set to false in the config.php s3 configuration, it's supposed to avoid
verifying that the bucket exists. However empty(falsy) will  always return true, so this condition
would not work.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>

Merge pull request #40098 from nextcloud/release/27.1.0_rc1

27.1.0 RC1

Merge pull request #40179 from nextcloud/artonge/backport/stable27/39472_2

[stable27] Improve sharing flow

Improve sharing flow

This commit introduces the following changes:

- Does not create new share once user is selected for internal shares
- Adds a `SharingDetails` view for share configurations
- Adds a quick share select to enable fast changes in share permisions.

Resolves: https://github.com/nextcloud/server/issues/26691

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: Louis Chemineau <louis@chmn.me>

Merge pull request #40175 from nextcloud/rev/noid/direct-push

[stable27] revert accidental direct push of 8b42fb033fdcd3775b4850de6faf6091c8dcc716

Revert "Improve sharing flow"

This reverts commit 8b42fb033fdcd3775b4850de6faf6091c8dcc716.

Merge pull request #40074 from nextcloud/backport/39944/stable27

[stable27] pass the share to the cache instead of having to ask the storage

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40162 from nextcloud/backport/40108/stable27

Improve sharing flow

This commit introduces the following changes:

- Does not create new share once user is selected for internal shares
- Adds a `SharingDetails` view for share configurations
- Adds a quick share select to enable fast changes in share permisions.

Resolves: https://github.com/nextcloud/server/issues/26691

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: Louis Chemineau <louis@chmn.me>

feat: add switch to disable dns pinning

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40032 from nextcloud/backport/40013/stable27

[stable27] Do not log passwords in debug mode

Merge pull request #40101 from nextcloud/backport/38545/stable27

[stable27] fix(CI): Add empty eslint and node when unrelated (PHP only)

Merge pull request #40080 from nextcloud/backport/40077/stable27

[stable27] fix(cache): Remove displayname cache entry on delete

fix(CI): Add empty eslint and node when unrelated (PHP only)

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #40039 from nextcloud/backport/39511/stable27

[stable27] fix(utility): De- deprecate getDateTime and getTime as now() only returns DateTimeImmutable

27.1.0 RC1

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #40081 from nextcloud/fix/stable27/check-vobject-exists

[stable27] fix(CalDAV): check voject exists before attempting any operation

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(CalDAV): check voject exists before attempting any operation

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40078 from nextcloud/backport/39699/stable27

[stable27] Hide shares by disabled users

fix(cache): Remove displayname cache entry on delete

Signed-off-by: Joas Schilling <coding@schilljs.com>

Use nullsafe call syntax instead of additionnal check

Co-authored-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
Signed-off-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>

Fix tests, add test for the new feature

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Set files_sharing:hide_disabled_user_shares to 'yes' to hide shares from disabled users

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

pass the share to the cache instead of having to ask the storage

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #40060 from nextcloud/backport/27-upload-progress

[stable27] Improve upload progress visualization

fix(utility): De- deprecate getDateTime as now() only returns immutable objects
This will mean lots of code like
```$dateTime = (new DateTime())->setTimestamp(ITimeFactory::now()->getTimestamp()```
if a regular DateTime object is needed

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40066 from nextcloud/backport/39911/stable27

[stable27] fix(CardDAV): only run upgrade sync if 1000 users or less

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(CardDAV): only run upgrade sync if 1000 users or less

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40062 from nextcloud/fix/theming-async-chunks

Merge pull request #39728 from nextcloud/automated/noid/stable27-fix-npm-audit

[stable27] Fix npm audit

chore(deps): fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(theming): Add `__webpack_nounce__` to support async chunks like the filepicker

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Upload progress shows number of files to upload and current index

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix: Make smooth bitrate and remaining upload time work when unset

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Smooth time remaining, bitrate and stabilize user information

Besides the existing moving average, a smoothing factor is introduced for the time remaining display as well as the bitrate.
Furthermore, half of the buffer needs to be filled before the first prediction is displayed to the user. This reduces volatile and jumping durations towards the user and improves usability.

Signed-off-by: Cyrill H. <phlogi@posteo.de>
Co-authored-by: Carl Schwan <carl@carlschwan.eu>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #40045 from nextcloud/backport/27/encode-filename-trashbin-restore

fix: encode basename in restore action

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Merge pull request #40034 from nextcloud/fix/stable27/log-condition-user

[stable27] Fix user log.condition feature

Fix user log.condition feature

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>

Merge pull request #39900 from nextcloud/fix/stable27/set-owner-principal-for-SAB

Merge pull request #40028 from nextcloud/release/27.1.0_beta_3

27.1.0 beta 3

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39939 from nextcloud/deps/stable27/tarstreamer-php8

chore: update tarstreamer to 2.1.0

To improve php8 support

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

fix(CardDAV): set owner-principal, displayname properties for SAB

Signed-off-by: Anna Larch <anna@nextcloud.com>

Do not log passwords in debug mode

Signed-off-by: Anna Larch <anna@nextcloud.com>

Merge pull request #40030 from nextcloud/fix/update-dialogs-to-4.2.0-beta.4

chore: compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore: Update `@nextcloud/dialogs` to 4.2.0-beta.4 for FilePicker improvments

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Merge pull request #39953 from nextcloud/backport/39903/stable27

Merge pull request #39952 from nextcloud/szaimen-patch-1

27.1.0 beta 3

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39997 from nextcloud/backport/39870/stable27

[stable27] feat(security): Add a bruteforce protection backend base on memcache

Merge pull request #40007 from nextcloud/automated/noid/stable27-update-ca-cert-bundle

fix(middleware): Fix header injection for bruteforce middleware

Calling setHeaders(getHeaders()) breaks the CSP nonce for unknown reasons
So shifting back to old standard practise for now

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(admin): Show an error when the admin is throttled

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix: Make bypass function public API

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(OCC): Add a command to get the bruteforce state of an IP

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat: Expose if the own IP is allowed to bypass bruteforce protection

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat: Add a header which signals that the request was throttled

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(security): Add a "testing mode" for bruteforce protection that doesn't sleep

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(security): Add a bruteforce protection backend base on memcache

Similar to the ratelimit backend

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #39993 from nextcloud/backport/39937/stable27

[stable27] feat(dashboard): implement widget item api v2

Fix(CI): Satisfy old psalm by being less specific

Signed-off-by: Joas Schilling <coding@schilljs.com>

chore(assets): Recompile JS

Signed-off-by: Joas Schilling <coding@schilljs.com>

feat(dashboard): implement widget item api v2

This API enables the dashboard to render all widgets from the API data
alone without having apps to provide their own bundles. This saves a lot
of traffic and execution time as a lot less javascript has to be parsed
on the frontend.

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

Merge pull request #39934 from nextcloud/backport/39481/stable27