15.0.11 RC1

[rullzer]

• [stable15] Prevent undefined offset 0 in findByUserIdOrMail #16326 Prevent undefined offset 0 in findByUserIdOrMail
• [Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /settings #16344 Bump lodash.mergewith from 4.6.1 to 4.6.2 in /settings
• [Security] Bump lodash.merge from 4.6.1 to 4.6.2 in /settings #16345 Bump lodash.merge from 4.6.1 to 4.6.2 in /settings
• [Security] Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build #16346 Bump lodash.mergewith from 4.6.1 to 4.6.2 in /build
• [Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/accessibility #16348 Bump lodash from 4.17.11 to 4.17.14 in /apps/accessibility
• [Security] Bump lodash from 4.17.11 to 4.17.13 in /settings #16350 Bump lodash from 4.17.11 to 4.17.13 in /settings
• [Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/updatenotification #16351 Bump lodash from 4.17.11 to 4.17.14 in /apps/updatenotification
• [Security] Bump lodash from 4.17.11 to 4.17.14 in /build #16353 Bump lodash from 4.17.11 to 4.17.14 in /build
• [Security] Bump lodash from 4.17.11 to 4.17.14 in /apps/oauth2 #16357 Bump lodash from 4.17.11 to 4.17.14 in /apps/oauth2
• [stable15] Only prevent disabling encrytion via the API #16426 Only prevent disabling encrytion via the API
• [stable15] Do not keep searching for recent #16433 Do not keep searching for recent
• [stable15] Fix File#putContents(string) on ObjectStorage #16445 Fix File#putContents(string) on ObjectStorage
• [stable15] allow to provide supported calendar component set internally as a string #16537 Allow to provide supported calendar component set internally as a string
• [Security] Bump fstream from 1.0.11 to 1.0.12 in /build #16548 Bump fstream from 1.0.11 to 1.0.12 in /build
• [Security] Bump fstream from 1.0.11 to 1.0.12 in /settings #16549 Bump fstream from 1.0.11 to 1.0.12 in /settings
• [stable15] use a pattern to identify sensitive config keys #16565 Use a pattern to identify sensitive config keys
• [stable15] Change send to sent #16568 Change send to sent
• [stable15] Set proper defaults for v-tooltip usages #16608 Set proper defaults for v-tooltip usages
• [stable15] Fix/xss/on favorite file #16611 Fix/xss/on favorite file
• [stable15] Make sure we only fetch the file by id for the actual owner #16631 Make sure we only fetch the file by id for the actual owner
• [stable15] Properly return an int in the getId function of the cache #16690 Properly return an int in the getId function of the cache
• files_pdfviewer#146 Fix download button shown in public share page with hidden downloads
• notifications#377 Bump lodash from 4.17.10 to 4.17.14
• notifications#385 Trim the subject before encrypting the subject

Pending PRs:

• [stable15] dont use part files for dav writes when the target folder doesn't have create permissions #16224 Dont use part files for dav writes when the target folder doesn't have create permissions @backportbot-nextcloud
• [stable15] Fix enable/disable user audit message #16692 Fix enable/disable user audit message @backportbot-nextcloud