20.0.11 RC1

[blizzz]

• [Security] Bump handlebars from 4.7.6 to 4.7.7 #26900 Bump handlebars from 4.7.6 to 4.7.7
• [Security] Bump lodash from 4.17.20 to 4.17.21 #26909 Bump lodash from 4.17.20 to 4.17.21
• [Security] Bump hosted-git-info from 2.8.8 to 2.8.9 #26920 Bump hosted-git-info from 2.8.8 to 2.8.9
• [stable20] Don't break OCC if an app is breaking in it's Application class #26954 Don't break OCC if an app is breaking in it's Application class
• [stable20] Add bruteforce protection to the shareinfo endpoint #26956 Add bruteforce protection to the shareinfo endpoint
• [stable20] ignore readonly flag for directories #26965 Ignore readonly flag for directories
• [stable20] Throttle MountPublicLinkController when share is not found #26971 Throttle MountPublicLinkController when share is not found
• [stable20] Respect default share permissions for federated reshares #27001 Respect default share permissions for federated reshares
• [stable20] Harden apptoken check #27014 Harden apptoken check
• [stable20] Use parent wrapper to properly handle moves on the same source/target storage #27016 Use parent wrapper to properly handle moves on the same source/target storage
• [stable20] fix error when using CORS with no auth credentials #27027 Fix error when using CORS with no auth credentials
• [stable20] Bump patch dependencies #27183 Bump patch dependencies
• [stable20] Use noreply@ as email address for share emails #27209 Use noreply@ as email address for share emails
• [Security] Bump browserslist from 4.14.0 to 4.16.6 #27247 Bump browserslist from 4.14.0 to 4.16.6
• Bump webpack from 4.44.1 to 4.44.2 #27297 Bump webpack from 4.44.1 to 4.44.2
• [stable20] properly use limit and offset for search in Jail wrapper #27308 Properly use limit and offset for search in Jail wrapper
• [stable20] Make user:report command scale #27319 Make user:report command scale
• [stable20] Properly log expiration date removal in audit log #27325 Properly log expiration date removal in audit log
• [stable20] Propagate throttling on OCS response #27337 Propagate throttling on OCS response
• [stable20] Set umask before operations that create local files #27349 Set umask before operations that create local files
• [stable20] Escape filename in Content-Disposition #27360 Escape filename in Content-Disposition
• [stable20] Don't update statuses to offline again and again #27412 Don't update statuses to offline again and again
• [stable20] Header must contain a colon #27456 Header must contain a colon
• [stable20] Activate constraint check for oracle / pqsql also for 20 #27523 Activate constraint check for oracle / pqsql also for 20
• [Security] Bump ws from 7.3.1 to 7.5.0 #27570 Bump ws from 7.3.1 to 7.5.0
• [stable20] Properly cleanup entries of WebAuthn on user deletion #27596 Properly cleanup entries of WebAuthn on user deletion
• [stable20] Throttle on public DAV endpoint #27617 Throttle on public DAV endpoint
• files_pdfviewer#396 Remove encodeURI code
• notifications#998 Only ask for permissions on HTTPS
• photos#785 Fix sorting if one of the file name is only composed with number
• serverinfo#309 Update chart.js
• text#1611 Only return workspace property for top node in a propfind request
• text#1647 ViewerComponent: pass on autofocus to EditorWrapper
• viewer#924 Add fixup
• viewer#929 Fix: fullscreen for Firefox

Pending PRs:

• [stable20] make ILDAPProviderFactory usable when there is no ldap setup #26409 Make ILDAPProviderFactory usable when there is no ldap setup
• [stable20] add command to repair broken filesystem trees #26630 Add command to repair broken filesystem trees
• [stable20] fix return value of getStorageInfo when 'quota_include_external_storage' is enabled #27108 Fix return value of getStorageInfo when 'quota_include_external_storage' is enabled
• [stable20] better cleanup of filecache when deleting an external storage #27207 Better cleanup of filecache when deleting an external storage
• [stable20] avoid fread on directories and unencrypted files #27407 Avoid fread on directories and unencrypted files
• [stable20] Only allow removing existing shares that would not be allowed due to reshare restrictions #27552 Only allow removing existing shares that would not be allowed due to reshare restrictions