Do not use replace on the group id

Do not allow transfer ownership when the user isn't the owner

Bump phpseclib/phpseclib from 2.0.23 to 2.0.25

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Always use status 200 for avatar response

Bump pear/archive_tar from 1.4.8 to 1.4.9

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Fetch translate for Tags from files app

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Add message for DoesNotExistException

Don't try to format deleted shares

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Bump aws/aws-sdk-php from 3.93.9 to 3.133.23

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Fixes #15455

The issue is that we have a fallback for shares to use the target. So
when the target exists again we happily format it (not that the shares
are still invalid).

This just tries to get the node. If we can't then boom.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Bump sinon from 8.1.1 to 9.0.0

Allow single file downloads so the video player works again

Don't try to resize a svg uploaded as background image

image* are gd functions without support for svg hence we are not able to resize svg.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Bump @babel/core from 7.8.4 to 7.8.6

Bumps [@babel/core](https://github.com/babel/babel) from 7.8.4 to 7.8.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.8.4...v7.8.6

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump vue-router from 3.1.5 to 3.1.6

Bumps [vue-router](https://github.com/vuejs/vue-router) from 3.1.5 to 3.1.6.
- [Release notes](https://github.com/vuejs/vue-router/releases)
- [Changelog](https://github.com/vuejs/vue-router/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-router/compare/v3.1.5...v3.1.6

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Bump babel-eslint from 10.0.3 to 10.1.0

Bump @babel/preset-env from 7.8.3 to 7.8.6

As discussed in #18603 caching a 201 response is hard. It's now possible to distinguish between generated and uploaded avatars by reading the X-NC-IsCustomAvatar (0 = generated, 1 = uploaded) header.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Bumps [@babel/preset-env](https://github.com/babel/babel) from 7.8.3 to 7.8.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.8.3...v7.8.6

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>

Fix non-centered no javascript message

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [babel-eslint](https://github.com/babel/babel-eslint) from 10.0.3 to 10.1.0.
- [Release notes](https://github.com/babel/babel-eslint/releases)
- [Commits](https://github.com/babel/babel-eslint/compare/v10.0.3...v10.1.0

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Signed-off-by: Gary Kim <gary@garykim.dev>

Revive the "send email to new users" toggle for the user form