Make it possible to rename app passwords

Merge pull request #14037 from nextcloud/dependabot/npm_and_yarn/apps/oauth2/vue-and-vue-template-compiler

Bump vue and vue-template-compiler in /apps/oauth2

Make sure the relative path is always a string

[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/accessibility

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG)
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11

)

Signed-off-by: dependabot[bot] <support@dependabot.com>

Merge pull request #14036 from nextcloud/dependabot/npm_and_yarn/apps/updatenotification/vue-and-vue-template-compiler

Bump vue and vue-template-compiler in /apps/updatenotification

Repair step to remove "photo." files created by photocache

Bumps [vue](https://github.com/vuejs/vue) and [vue-template-compiler](https://github.com/vuejs/vue). These dependencies needed to be updated together.

Updates `vue` from 2.5.22 to 2.6.2
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.5.22...v2.6.2)

Updates `vue-template-compiler` from 2.5.22 to 2.6.2
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.5.22...v2.6.2

)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

update icewind/smb to 3.1.0

Merge pull request #13819 from nextcloud/bugfix/noid/unify-html-encoding-handling-with-other-ros-apps

Unify the HTML encoding handling with other ROS apps

Bumps [vue](https://github.com/vuejs/vue) and [vue-template-compiler](https://github.com/vuejs/vue). These dependencies needed to be updated together.

Updates `vue` from 2.5.22 to 2.6.2
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.5.22...v2.6.2)

Updates `vue-template-compiler` from 2.5.22 to 2.6.2
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.5.22...v2.6.2

)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

add event for inserting cache entries

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Before https://github.com/nextcloud/server/pull/13843

 a "photo." file could be created
for unsupported image formats by photocache. Because a file is present but not jpg, png or gif no
photo could be returned for this vcard. These invalid files are removed by this repair step.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

No need to emit additonalscript event on public pages

Signed-off-by: Robin Appelman <robin@icewind.nl>

this provides a reliable way for apps to listen to new files
without the need to of cache wrappers to hook into inserts themselves
(something which isn't 100% reliable)

Signed-off-by: Robin Appelman <robin@icewind.nl>

Fix: Check if `$this->params['user']` is an array

Merge pull request #14040 from nextcloud/dependabot/npm_and_yarn/apps/accessibility/vue-and-vue-template-compiler

Bump vue and vue-template-compiler in /apps/accessibility

Bump webpack from 4.29.0 to 4.29.1 in /apps/oauth2

Introduces avatars for guest users

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Signed-off-by: Michael Weimann <mail@michael-weimann.eu>

Signed-off-by: Michael Weimann <mail@michael-weimann.eu>

Signed-off-by: Joas Schilling <coding@schilljs.com>

[master] Make external storages browsable again in the web UI

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fixes #14022

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Signed-off-by: Robin Appelman <robin@icewind.nl>

Do not do redirect handling when loggin out

Ignore compiled assets in settings/

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[3rdparty] Bump phpseclib to 2.0.14

Fixes #12568
Since the clearing of the execution context causes another reload. We
should not do the redirect_uri handling as this results in redirecting
back to the logout page on login.

This adds a simple middleware that will just check if the
ClearExecutionContext session variable is set. If that is the case it
will just redirect back to the login page.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

This can be used by pages that do not have the full Nextcloud UI.
So notifications etc do not load there.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Do not load bundled jstimezonedetect