chore: improve typing for SharedStorage::$storage

Signed-off-by: Robin Appelman <robin@icewind.nl>

fix: don't return null for SharedStorage::getWrapperStorage with share recursion

Signed-off-by: Robin Appelman <robin@icewind.nl>

Merge pull request #46090 from nextcloud/backport/46073/stable28

[stable28] fix: allows admin to edit global credentials

Merge pull request #46442 from nextcloud/backport/46392/stable28

[stable28] feat: don't count failed CSRF as failed login attempt

Merge pull request #46060 from nextcloud/backport/45938/stable28

[stable28] fix: Do not log an error when connecting to SFTP without a logged in user

feat: don't count failed CSRF as failed login attempt

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

Merge pull request #46422 from nextcloud/backport/46374/stable28

[stable28] fix: Update Nextcloud libraries

Merge pull request #46436 from nextcloud/backport/46398/stable28

[stable28] fix(Session): avoid race conditions on clustered setups

Merge pull request #46433 from nextcloud/backport/46428/stable28

[stable28] fix(theming): Don't reset the cachebuster value when we reset theming

Merge pull request #46421 from nextcloud/backport/46315/stable28

[stable28] fix(caldav): limit vevent size

ci(psalm): update baseline

prefer to keep this check as PublicEmitter should be dropped sooner or
later

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix(Session): avoid race conditions on clustered setups

- re-stablishes old behaviour with cache to return null instead of throwing
  an InvalidTokenException when the token is cached as non-existing
- token invalidation and re-generation are bundled in a DB transaction now

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Merge pull request #46430 from nextcloud/bug/noid/fix-wonky-router-test-for-28

[stable28] test: run tests in child process

Merge pull request #46394 from nextcloud/backport/46320/stable28

[stable28] perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP

fix(theming): Don't reset the cachebuster value when we reset theming

Signed-off-by: Marcel Müller <marcel-mueller@gmx.de>

fix: Do not log an error when connecting to SFTP without a logged in user

When connecting to a SFTP server from a SFTP storage the host key is
checked against the known host keys stored in a file in the data
directory of the logged in Nextcloud user. The path to the file is
(indirectly) got using "OC_App::getStorage", which logs an error if
called when there is no logged in user; this can happen, for example, if
the storage is used from a background job or a command.

Not being able to read or write the file just causes the host key check
to be skipped, but it has no other consequence. Moreover, even with
logged in users it is likely that the file can not be read either and
the check is also skipped, as the file needs to have been manually
created by an admin.

Due to all that now the path to the file is directly created using a
View rather than relying on "OC_App::getStorage" to prevent the unneeded
error from being logged.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Merge pull request #45891 from nextcloud/automated/noid/stable28-fix-npm-audit

[stable28] Fix npm audit

fix: allows admin to edit global credentials

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>

Merge pull request #46411 from nextcloud/backport/46388/stable28

[stable28] fix(workflows): Fix file systemtag cache

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

test: run tests in child process

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

chore: Compile assets

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

test: Mock `_oc_webroot` for frontend unit tests

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

refactor: Use composable for `currentView` and `views` to make it reactive when shared with other Vue apps

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

chore(deps): Update `debounce` to 2.1.0

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

refactor(files): Update `@nextcloud/files` to v3.5.1

* Removed now duplicated code

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(deps): Fix npm audit

Signed-off-by: GitHub <noreply@github.com>

Merge pull request #46417 from nextcloud/fix/28-files-trashbin-init

[stable28] fix(files_trashbin): Make files view registering an init script

Merge pull request #45955 from nextcloud/backport/45228/stable28

[stable28] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root

Merge pull request #46067 from nextcloud/backport/45877/stable28

[stable28] fix: don't use custom certificate bundle if no customer certificates are configured

Merge pull request #45920 from nextcloud/backport/45582/stable28

[stable28] delete background jobs by id when cleaning up

Merge pull request #46011 from nextcloud/backport/45999/stable28

[stable28] fix(caldav): encode calendar URIs with umlauts for activities

fix(caldav): limit vevent size

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

Merge pull request #46313 from nextcloud/backport/46193/stable28

[stable28] fix(carddav): limit vcard size

fix(files_trashbin): Make files view registering an init script

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

fix(workflows): Fix file systemtag cache

Signed-off-by: Joas Schilling <coding@schilljs.com>

fix(carddav): limit vcard size

Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>

fix(caldav): encode calendar URIs with umlauts for activities

Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>

fix(tests): Strong type property $router in RouterTest

Co-authored-by: Kate <26026535+provokateurin@users.noreply.github.com>
Signed-off-by: Côme Chilliet <91878298+come-nc@users.noreply.github.com>

fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root

Signed-off-by: Steve Mokris <steve@kosada.com>

perf: Set session.cache_limiter at runtime to avoid clients caching static assets served by PHP

By default there is a Pragma: no-cache header set due to the default
value `no-cache` of session.cache-limiter, which will cause Chrome and
iOS to not cache even with a different Cache-Control header set on the
response.

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46238 from nextcloud/dependabot/npm_and_yarn/stable28/nextcloud/calendar-availability-vue-2.2.2

build(deps): Bump @nextcloud/calendar-availability-vue from 2.2.0 to 2.2.2

Merge pull request #46316 from nextcloud/backport28SidebarOffTags

[stable28] sidebar: allow turning off tags view by default

build(deps): Bump @nextcloud/calendar-availability-vue

Bumps [@nextcloud/calendar-availability-vue](https://github.com/nextcloud/calendar-availability-vue) from 2.2.0 to 2.2.2.
- [Release notes](https://github.com/nextcloud/calendar-availability-vue/releases)
- [Changelog](https://github.com/nextcloud/calendar-availability-vue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nextcloud/calendar-availability-vue/compare/v2.2.0...v2.2.2)

---
updated-dependencies:
- dependency-name: "@nextcloud/calendar-availability-vue"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

sidebar: allow turning off tags view by default

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
sidebar: allow turning off tags view by default

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #46191 from nextcloud/backport/45804/stable28

[stable28] fix(cron): Log long running jobs

Merge pull request #46297 from nextcloud/backport/46174/stable28

[stable28] fix(IntegrityCheck): Ensure the check is run if no results are available

Merge pull request #46302 from nextcloud/fix/noid/jsm-check-pickiness

[stable28] fix(SetupCheck): jsm test shall not give up with first no-response

Merge pull request #46364 from nextcloud/backport/46321/stable28

[stable28] fix(SharingDetailsView): Prevent illegal unselection of read permissions

Merge pull request #46366 from nextcloud/backport/46317/stable28

[stable28] fix(s3): Don't wait indefinitely for S3 to return

fix(SharingDetailsView): Prevent illegal unselection of read permissions

With the exception of "file drop" on link shares all other shares need the read permissions at least.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(s3): Don't wait indefinitely for S3 to return

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: lint

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: use AwsException

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: Throw on connection failure

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: Wrap all in try catch block

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: use RequestTimeout error message

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
log: use OCP Server class

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: Handle connect timeout only

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
fix: Handle errors more generically

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>

Merge pull request #46118 from nextcloud/backport/46030/stable28

[stable28] fix(FilesView): Update files view upon share creation/delete

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

refactor(SharingDetailsView): Use NC logger

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(FilesView): Update files view upon share creation/delete

Resolves : https://github.com/nextcloud/server/issues/44961

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #46341 from nextcloud/backport/46276/stable28

[stable28] chore(mp3info): apply upstream patch for invalid array access

feat: log file id and path when extracting the mp3 cover fails

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

chore(mp3info): apply upstream patch for invalid array access

Patch: wapmorgan/Mp3Info#36

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46335 from nextcloud/dependabot/npm_and_yarn/stable28/dompurify-3.1.6

chore(deps): bump dompurify from 3.1.4 to 3.1.6

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.1.4 to 3.1.6.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.1.4...3.1.6)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

Merge pull request #46337 from nextcloud/dependabot/npm_and_yarn/stable28/mime-4.0.4

chore(deps-dev): bump mime from 4.0.1 to 4.0.4

Merge pull request #46338 from nextcloud/dependabot/npm_and_yarn/stable28/ts-jest-29.1.5

chore(deps-dev): bump mime from 4.0.1 to 4.0.4

Bumps [mime](https://github.com/broofa/mime) from 4.0.1 to 4.0.4.
- [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md)
- [Commits](https://github.com/broofa/mime/compare/v4.0.1...v4.0.4)

---
updated-dependencies:
- dependency-name: mime
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #46336 from nextcloud/dependabot/npm_and_yarn/stable28/jsdoc-4.0.3

chore(deps-dev): bump ts-jest from 29.1.2 to 29.1.5

Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.1.5.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.1.5)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): bump jsdoc from 4.0.2 to 4.0.3

Bumps [jsdoc](https://github.com/jsdoc/jsdoc) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/jsdoc/jsdoc/releases)
- [Changelog](https://github.com/jsdoc/jsdoc/blob/4.0.3/CHANGES.md)
- [Commits](https://github.com/jsdoc/jsdoc/compare/4.0.2...4.0.3)

---
updated-dependencies:
- dependency-name: jsdoc
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

fix(IntegrityCheck): Ensure the check is run if no results are available

If there are no cached results the current implementation was also returning an empty array,
but this was the same as when there was a successful run.
So to distinguish this we return `null` if there are *no* results.
In this case we need to rerun the integrity checker.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46239 from nextcloud/dependabot/npm_and_yarn/stable28/nextcloud/vue-8.11.3

build(deps): Bump @nextcloud/vue from 8.11.2 to 8.14.0

Bumps [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue) from 8.11.2 to 8.11.3.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nextcloud-libraries/nextcloud-vue/compare/v8.11.2...v8.11.3)

---
updated-dependencies:
- dependency-name: "@nextcloud/vue"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(SetupCheck): jsm test shall not give up with first no-response

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #45770 from nextcloud/backport/45765/stable28

[stable28] fix(settings): Use axios directly for health check to preven URL sanitizing

Merge pull request #46221 from nextcloud/backport/46219/stable28

[stable28] fix(DAV): offset not applied

Merge pull request #46280 from nextcloud/backport/46068/stable28

[stable28] fix(ExternalSharing): Handle template shares from external sources

chore(assets): Recompile assets

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

fix(settings): Use axios directly for health check to preven URL sanitizing

When using Apache with `DirectorySlash` it will respond with 301 and the URL with trailing slash.
But when using traefik as the reverse proxy it can not rewrite redirects, this leads to the problem
that the Apache response is using HTTP in the redirect but the real server (traefik) is only listening on HTTPS.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>

refactor(SharingInput): Remove unused addShare

The new sharing flow since NC27 requires that users open the sharing details tab and

customize their share before creating it.

In https://github.com/nextcloud/server/pull/39472 the work of `addShare` was handed down to

`openSharingDetails` that opens the sharing details tab for the user to customize and manually

creat their share.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

fix(ExternalSharing): Handle template share from external sources

The new sharing flow requires or implies that users should edit share before creating.
External sources should not created the share IF we would upon sharing details tab on first request.

Signed-off-by: fenn-cs <fenn25.fn@gmail.com>

Merge pull request #46236 from nextcloud/fix/npm-nextcloud-files

fix: downgrade `@nextcloud/files` to 3.4.1

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

chore: compile assets

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

chore: upgrade `@nextcloud/sharing`

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

chore: upgrade `@nextcloud/files`

Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

Merge pull request #46265 from nextcloud/automated/noid/stable28-update-ca-cert-bundle

[stable28] fix(security): Update CA certificate bundle

fix(security): Update CA certificate bundle

Signed-off-by: GitHub <noreply@github.com>

Fix(l10n): Update translations from Transifex

Signed-off-by: Nextcloud bot <bot@nextcloud.com>

Merge pull request #46223 from nextcloud/backport/46190/stable28

[stable28] fix(setupchecks): skip check when disk_free_space is disabled

Merge pull request #46245 from nextcloud/dependabot/npm_and_yarn/stable28/cypress-13.7.3

Merge pull request #46243 from nextcloud/dependabot/npm_and_yarn/stable28/types/dockerode-3.3.29

Merge pull request #46241 from nextcloud/dependabot/npm_and_yarn/stable28/karma-coverage-2.2.1

build(deps-dev): Bump cypress from 13.7.2 to 13.7.3

Bumps [cypress](https://github.com/cypress-io/cypress) from 13.7.2 to 13.7.3.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/cypress-io/cypress/compare/v13.7.2...v13.7.3)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps-dev): Bump @types/dockerode from 3.3.28 to 3.3.29

Bumps [@types/dockerode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dockerode) from 3.3.28 to 3.3.29.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dockerode)

---
updated-dependencies:
- dependency-name: "@types/dockerode"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps-dev): Bump karma-coverage from 2.2.0 to 2.2.1

Bumps [karma-coverage](https://github.com/karma-runner/karma-coverage) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/karma-runner/karma-coverage/releases)
- [Changelog](https://github.com/karma-runner/karma-coverage/blob/master/CHANGELOG.md)
- [Commits](https://github.com/karma-runner/karma-coverage/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: karma-coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>