24.0.8 RC1

[blizzz]

• Update guzzlehttp/guzzle requirement from 7.4.5 to 7.5.0 in /build/integration #33888
• [stable24] Add rate limiting on lost password emails #34659
• [stable24] Emit typed event when preview is requested #34855
• [stable24] Avoid double ldap_unbind in Wizard.php #34942
• [stable24] Skip general login with email for non-valid addresses and LDAP #34947
• [stable24] Cleanup tempfiles after each cron job run #34949
• [stable24] Run session token renewals in a database transaction #34952
• [stable24] Fix invalid date in security.txt #34966
• [stable24] Avoid a crash when a PHP extension has no version #35005
• [stable24] Fix unsuccessful token login logged as error #35012
• [stable24] Only show cron warning after 24h due to time insensitive jobs #35018
• [stable24] Fix duplicate event email notifications #35019
• [stable24] Cast to int #35022
• [stable24] Add repair command to fix wrong share ownership #35039
• [stable24] Fix size calculation on copying the skeleton files #35049
• [stable24] Add description for calendar uri #35059
• [stable24] Fix sidebar not automatically hidden in Files app #35061
• [stable24] Fix top margin in empty versions list #35065
• [stable24] Make sure that path is normalized and then checked, #35088
• [stable24] Fix HTML entities not decoded in comment just added #35100
• [stable24] Fix PublicKeyTokenProviderTest import and mock #35101
• [stable24] Appropriate length check in Notification.php #35113
• [stable24] use the updated mariadb10.6 container in drone #35114
• [stable24] Fix distorted previews when using imaginary #35115
• [stable24] [LDAP] always create instance of own user manager #35131
• [stable24] Run integration tests on 3rdparty bump #35134
• Revert "[stable24] Appropriate length check in Notification.php" #35140
• [stable24] Detect weird local ips #35141
• [stable24] Make sure to not pass null to DateTime::createFromFormat #35162
• [stable24] Mark more config values as sensitive #35200
• [stable24] Fix settings for setting default expiration date #35215
• [stable24] Fix JSON error when comment has no reactions #35245
• [stable24] Properly compare quota against both float/int values #35250
• [stable24] delay updating setup providers untill we register the mounts #35258
• [stable24] Also cancel XHR when cancelling uploads #35266
• [stable24] Hide warning about missing apps for when shipped in the next version #35292
• Bump swiftmailer/swiftmailer to 6.3.0 in stable24 #35297
• [stable24] Don't use quota cache through user management #35313
• [stable24] Fix mentions rendering in comment editor #35321
• [stable24] Check quota on file copy #35328
• [stable24] Check quota on file copy #35332
• [stable24] Prevents the selection of encrypted folders when clicking on the "Select all" checkbox #35349
• [stable24] Handle badly named version files more gracefully and log information #35351
• [stable24] Fix forwarding the object id when searching comments #35356
• [stable24] Update cache when file size === 0 #35367
• [stable24] Fix UX of renaming token #35392
• [stable24] Update some libs #35395
• [stable24] Do not check quota for non Node #35409
• Add mlocati/ip-lib in stable24 3rdparty#1221
• Bump swiftmailer/swiftmailer to 6.3.0 in stable24 3rdparty#1237
• [stable24] Run NPM audit fix activity#1004
• [stable24] Update nextcloud/ocp dependency activity#993
• [stable24] Do not pass an instance of User where a string is expected activity#996
• [stable24] Update nextcloud/ocp dependency activity#999
• [stable24] re-activate getMember() circles#1204
• [stable24] refresh cache on demand circles#1215
• [stable24] Audit fix files_pdfviewer#682
• [stable24] Update nextcloud/ocp dependency firstrunwizard#753
• [stable24] Update some libs logreader#818
• [stable24] Update nextcloud/ocp dependency nextcloud_announcements#132
• [stable24] Update nextcloud/ocp dependency nextcloud_announcements#135
• [stable24] Still push notifications of twofactor_nextcloud_notification when in DND notifications#1356
• [stable24] Update nextcloud/ocp dependency notifications#1359
• [stable24] Update nextcloud/ocp dependency notifications#1364
• [stable24] Run NPM audit fix notifications#1372
• [stable24] Update user status with event data notifications#1378
• [stable24] Update some libs password_policy#412
• [stable24] Update nextcloud/ocp dependency photos#1442
• bump @vue/test-utils from 1.3.0 to 1.3.3 photos#1461
• Bump postcss from 8.4.18 to 8.4.19 photos#1479
• [stable24] Update nextcloud/ocp dependency photos#1480
• [stable24] Run npm audit fix photos#1496
• [stable24] Audit fix privacy#813
• Bump @nextcloud/dialogs from 3.1.2 to 3.1.4 privacy#816
• fix(deps): update dependency prosemirror-markdown to ^1.10.1 (stable24) text#3339
• [stable24] Update nextcloud/ocp dependency text#3341
• [stable24] Avoid saving without changes text#3351
• chore(deps): update dependency @cypress/webpack-preprocessor to ^5.15.3 (stable24) text#3360
• chore(deps): update dependency @vue/test-utils to ^1.3.3 (stable24) text#3361
• fix(deps): update tiptap to ^2.0.0-beta.202 (stable24) text#3362
• chore(deps): update dependency eslint-plugin-jsdoc to ^39.6.2 (stable24) text#3363
• [stable24] Update nextcloud/ocp dependency text#3366
• [stable24] DirectEditing: Set session user for DirectSession editing text#3372
• chore(deps): update dependency @cypress/webpack-preprocessor to ^5.15.4 (stable24) text#3387
• [stable24] Don't apply author annotations when in composition text#3396
• [stable24] Set IUserSession user in SessionController if available text#3398
• [stable24] Fix typo in serializePlainText text#3402
• [stable24] Disable rich workspace rendering when view is not visible text#3403
• chore(deps): update dependency @cypress/webpack-preprocessor to ^5.15.5 (stable24) text#3413
• [stable24] Update nextcloud/ocp dependency text#3418
• fix(deps): update dependency core-js to ^3.26.1 (stable24) text#3421
• fix(deps): update tiptap (stable24) text#3441
• chore(deps): update dependency regenerator-runtime to ^0.13.11 (stable24) text#3448
• fix(deps): update dependency prosemirror-model to ^1.18.3 (stable24) text#3457
• [stable24] Update npm dependencies text#3469
• [stable24] Bring back menubar without formatting on plain text mode text#3475
• [stable24] Audit fix viewer#1478

Pending PRs:

• [stable24] invalidate existing tokens when deleting an oauth client #35094 @individual-it
• Revert "[stable24] Fix quota type to int" #35334 @PVince81
• Bump php-opencloud/openstack from 3.1.0 to 3.2.1 3rdparty#1060
• Bump pear/pear-core-minimal from 1.10.10 to 1.10.11 3rdparty#1065
• Bump cweagans/composer-patches from 1.7.1 to 1.7.2 3rdparty#1067
• Bump doctrine/dbal from 3.1.4 to 3.3.7 3rdparty#1081
• Bump egulias/email-validator from 3.1.1 to 3.2.1 3rdparty#1085
• Bump symfony/event-dispatcher-contracts from 1.1.9 to 1.1.13 3rdparty#1099
• Bump symfony/routing from 4.4.30 to 4.4.44 3rdparty#1124

[nickvergessen]

Pr title is wrong as well