Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump vimeo/psalm from 4.1.1 to 4.2.0

Bumps [vimeo/psalm](https://github.com/vimeo/psalm) from 4.1.1 to 4.2.0.
- [Release notes](https://github.com/vimeo/psalm/releases)
- [Commits](https://github.com/vimeo/psalm/compare/4.1.1...4.2.0

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

[Automated] Update psalm-baseline.xml

Signed-off-by: GitHub <noreply@github.com>

Make the expire shares cron job actually expire the shares

Use regex when searching on single file shares

Fix setting images through occ for theming

allow selecting multiple columns with SELECT DISTINCT

Only check path for being accessible when the storage is a object home

Allow lazy app registration

Only attempt to move to trash if a file is not in appdata

Fix DataResponse typehints

We use this already in several places where we just pass strings or
numbers.
This all works because we just convert it to a json response in the end.
So better to have the typehints reflect this.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Right now we just delete the shares from the DB. Which is efficient
sure. But doesn't trigger any real cleanup. So no Admin audit entries or
any other post processing is done.

This makes sure we really trigger this.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Merge pull request #24135 from medical-cloud/fix/23357-nextcloud-logo-in-email-notifications-is-misaligned-in-version-20

Fix nextcloud logo in email notifications misalignment 

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

missing level in ScopedPsrLogger

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Signed-off-by: medcloud <42641918+medcloud@users.noreply.github.com>

Signed-off-by: Maxence Lange <maxence@artificial-owl.com>

Set frame-ancestors to none if none are filled

Only setup filesystem if needed for dashboard background service

Move the password fiels of chaging passwords to post

frame-ancestors doesn't fall back to default-src. So when we apply a
very restricted CSP we should make sure to set it to 'none' and not
leave it empty.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Julius Härtl <jus@bitgrid.net>

During app installation we run migration steps. Those steps may use
services the app registers or classes from composer. Hence we have to
make sure the app runs through the registration.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Remove some IRouter methods

Move the global password for files external to post

Bump jquery from 3.2 to 3.3

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Bump jquery from 3.1 to 3.2

Again more false positives in some scanners

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

* This is not actually used with GET (obviously). But else some scanners
  trip on it

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

This is not the end. IRouter needs to burn.
But it is a start.

 we didn't start the fire 



Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Check quota of subdirectories when uploading to them