chore: bump version to v1.1.0

Merge pull request #420 from opencloud-eu/binary-release
feat: add release build step
2025-12-24 22:59:51 -05:00 · 2025-03-18 14:36:04 +01:00 · 2025-03-18 14:12:00 +01:00 · 2025-03-18 13:55:17 +01:00 · 2025-03-18 12:31:59 +01:00 · 2025-03-18 12:15:36 +01:00
226 changed files with 9219 additions and 3906 deletions
--- a/.drone.env
+++ b/.drone.env
@@ -1,3 +0,0 @@
-# The test runner source for UI tests
-WEB_COMMITID=8222156ec19d5a201ba3eb9293c1cd4516329400
-WEB_BRANCH=stable-11.0
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -5,7 +5,6 @@ linters:
  disable:
    - contextcheck # FIXME: causes panic in graph service
    - lll # 760 issues in the codebase
-    - exhaustivestruct
    - exhaustruct
    - exhaustive # 634 issues in the codebase
    - wrapcheck # 398 issues in the codebase
@@ -16,14 +15,12 @@ linters:
    - forbidigo
    - gochecknoglobals
    - nlreturn
-    - nosnakecase  # each 100-200 issues in codebase
    - gci
    - godot
    - funlen
-    - gomnd
    - gofumpt
    - ireturn
-    - goerr113
+    - err113
    - containedctx
    - paralleltest
    - gocritic # each 50-100 issues in codebase
@@ -31,8 +28,6 @@ linters:
    - cyclop
    - noctx
    - testpackage
-    - maligned
-    - golint
    - forcetypeassert
    - nonamedreturns
    - dupl
--- a/.make/go.mk
+++ b/.make/go.mk
@@ -67,18 +67,6 @@ fmt:
 	@echo "- $(NAME): fmt"
 	gofmt -s -w $(SOURCES)

-.PHONY: golangci-lint-fix
-golangci-lint-fix: $(GOLANGCI_LINT)
-	$(GOLANGCI_LINT) run $(LINTERS) --fix
-
-.PHONY: golangci-lint
-golangci-lint: $(GOLANGCI_LINT)
-	$(GOLANGCI_LINT) run --path-prefix services/$(NAME)
-
-.PHONY: ci-golangci-lint
-ci-golangci-lint: $(GOLANGCI_LINT)
-	$(GOLANGCI_LINT) run --path-prefix services/$(NAME) --timeout 15m0s --issues-exit-code 0 --out-format checkstyle > checkstyle.xml
-
 .PHONY: test
 test:
 	@go test -v -tags '$(TAGS)' -coverprofile coverage.out ./...
--- a/.woodpecker.env
+++ b/.woodpecker.env
@@ -0,0 +1,3 @@
+# The test runner source for UI tests
+WEB_COMMITID=4a2f3a1d14009676a3a9dfef536ed4fd3e7f4c21
+WEB_BRANCH=main
--- a/.woodpecker.star
+++ b/.woodpecker.star
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -0,0 +1,2 @@
+# Table of Contents
+
--- a/22
+++ b/22
@@ -213,20 +213,16 @@ protobuf:
    done

 .PHONY: golangci-lint
-golangci-lint:
-	@for mod in $(OC_MODULES); do \
-        $(MAKE) --no-print-directory -C $$mod golangci-lint; \
-    done
+golangci-lint: $(GOLANGCI_LINT)
+	$(GOLANGCI_LINT) run --modules-download-mode vendor --timeout 15m0s --issues-exit-code 0 --out-format checkstyle > checkstyle.xml

 .PHONY: ci-golangci-lint
-ci-golangci-lint: $(GOLANGCI_LINT)
+ci-golangci-lint:
 	$(GOLANGCI_LINT) run --modules-download-mode vendor --timeout 15m0s --issues-exit-code 0 --out-format checkstyle > checkstyle.xml

 .PHONY: golangci-lint-fix
-golangci-lint-fix:
-	@for mod in $(OC_MODULES); do \
-        $(MAKE) --no-print-directory -C $$mod golangci-lint-fix; \
-    done
+golangci-lint-fix: $(GOLANGCI_LINT)
+	$(GOLANGCI_LINT) run --fix --modules-download-mode vendor --timeout 15m0s --issues-exit-code 0 --out-format checkstyle > checkstyle.xml

 .PHONY: test-gherkin-lint
 test-gherkin-lint:
@@ -241,13 +237,13 @@ bingo-update: $(BINGO)
 	$(BINGO) get -l -v -t 20

 .PHONY: check-licenses
-check-licenses: ci-go-check-licenses ci-node-check-licenses
+check-licenses: $(GO_LICENSES) ci-go-check-licenses ci-node-check-licenses

 .PHONY: save-licenses
-save-licenses: ci-go-save-licenses ci-node-save-licenses
+save-licenses: $(GO_LICENSES) ci-go-save-licenses ci-node-save-licenses

 .PHONY: ci-go-check-licenses
-ci-go-check-licenses: $(GO_LICENSES)
+ci-go-check-licenses:
 	$(GO_LICENSES) check ./...

 .PHONY: ci-node-check-licenses
@@ -257,7 +253,7 @@ ci-node-check-licenses:
    done

 .PHONY: ci-go-save-licenses
-ci-go-save-licenses: $(GO_LICENSES)
+ci-go-save-licenses:
 	@mkdir -p ./third-party-licenses/go/opencloud/third-party-licenses
 	$(GO_LICENSES) csv ./... > ./third-party-licenses/go/opencloud/third-party-licenses.csv
 	$(GO_LICENSES) save ./... --force --save_path="./third-party-licenses/go/opencloud/third-party-licenses"
--- a/README.md
+++ b/README.md
@@ -1,7 +1,8 @@
 ![OpenCloud logo](https://raw.githubusercontent.com/opencloud-eu/opencloud/refs/heads/main/opencloud_logo.png)

-[![Matrix](https://img.shields.io/matrix/opencloud%3Amatrix.org?logo=matrix)](https://app.element.io/#/room/#opencloud:matrix.org)
-[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![status-badge](https://ci.opencloud.eu/api/badges/3/status.svg)](https://ci.opencloud.eu/repos/3)
+ [![Matrix](https://img.shields.io/matrix/opencloud%3Amatrix.org?logo=matrix)](https://app.element.io/#/room/#opencloud:matrix.org)
+ [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)

 # Server Backend

--- a/go.mod
+++ b/go.mod
@@ -21,7 +21,7 @@ require (
 	github.com/egirna/icap-client v0.1.1
 	github.com/gabriel-vasile/mimetype v1.4.8
 	github.com/ggwhite/go-masker v1.1.0
-	github.com/go-chi/chi/v5 v5.2.0
+	github.com/go-chi/chi/v5 v5.2.1
 	github.com/go-chi/render v1.0.3
 	github.com/go-ldap/ldap/v3 v3.4.10
 	github.com/go-ldap/ldif v0.0.0-20200320164324-fd88d9b715b3
@@ -48,7 +48,7 @@ require (
 	github.com/jellydator/ttlcache/v3 v3.3.0
 	github.com/jinzhu/now v1.1.5
 	github.com/justinas/alice v1.2.0
-	github.com/kovidgoyal/imaging v1.6.3
+	github.com/kovidgoyal/imaging v1.6.4
 	github.com/leonelquinteros/gotext v1.7.1
 	github.com/libregraph/idm v0.5.0
 	github.com/libregraph/lico v0.65.1
@@ -62,22 +62,22 @@ require (
 	github.com/onsi/ginkgo v1.16.5
 	github.com/onsi/ginkgo/v2 v2.23.0
 	github.com/onsi/gomega v1.36.2
-	github.com/open-policy-agent/opa v1.1.0
-	github.com/opencloud-eu/reva/v2 v2.27.3-0.20250312134906-766c69c5d1be
+	github.com/open-policy-agent/opa v1.2.0
+	github.com/opencloud-eu/reva/v2 v2.28.0
 	github.com/orcaman/concurrent-map v1.0.0
 	github.com/owncloud/libre-graph-api-go v1.0.5-0.20240829135935-80dc00d6f5ea
 	github.com/pkg/errors v0.9.1
 	github.com/pkg/xattr v0.4.10
 	github.com/prometheus/client_golang v1.21.1
 	github.com/r3labs/sse/v2 v2.10.0
-	github.com/riandyrn/otelchi v0.12.0
+	github.com/riandyrn/otelchi v0.12.1
 	github.com/rogpeppe/go-internal v1.14.1
 	github.com/rs/cors v1.11.1
 	github.com/rs/zerolog v1.33.0
 	github.com/shamaton/msgpack/v2 v2.2.2
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/afero v1.12.0
-	github.com/spf13/cobra v1.8.1
+	github.com/spf13/cobra v1.9.1
 	github.com/stretchr/testify v1.10.0
 	github.com/test-go/testify v1.1.4
 	github.com/thejerf/suture/v4 v4.0.6
@@ -88,7 +88,7 @@ require (
 	github.com/xhit/go-simple-mail/v2 v2.16.0
 	go-micro.dev/v4 v4.11.0
 	go.etcd.io/bbolt v1.4.0
-	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0
+	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0
 	go.opentelemetry.io/contrib/zpages v0.57.0
 	go.opentelemetry.io/otel v1.35.0
@@ -120,10 +120,9 @@ require (
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/sprig v2.22.0+incompatible // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/OneOfOne/xxhash v1.2.8 // indirect
 	github.com/ProtonMail/go-crypto v1.1.5 // indirect
 	github.com/RoaringBitmap/roaring v1.9.3 // indirect
-	github.com/agnivade/levenshtein v1.2.0 // indirect
+	github.com/agnivade/levenshtein v1.2.1 // indirect
 	github.com/ajg/form v1.5.1 // indirect
 	github.com/alexedwards/argon2id v1.0.0 // indirect
 	github.com/amoghe/go-crypt v0.0.0-20220222110647-20eada5f5964 // indirect
@@ -160,7 +159,7 @@ require (
 	github.com/coreos/go-semver v0.3.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
 	github.com/cornelk/hashmap v1.0.8 // indirect
-	github.com/cpuguy83/go-md2man/v2 v2.0.5 // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.6 // indirect
 	github.com/crewjam/httperr v0.2.0 // indirect
 	github.com/crewjam/saml v0.4.14 // indirect
 	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
@@ -274,7 +273,7 @@ require (
 	github.com/pjbgf/sha1cd v0.3.2 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/pquerna/cachecontrol v0.2.0 // indirect
-	github.com/prometheus/alertmanager v0.27.0 // indirect
+	github.com/prometheus/alertmanager v0.28.1 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
@@ -289,8 +288,8 @@ require (
 	github.com/sercand/kuberesolver/v5 v5.1.1 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
 	github.com/sethvargo/go-password v0.3.1 // indirect
-	github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749 // indirect
-	github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546 // indirect
+	github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c // indirect
+	github.com/shurcooL/vfsgen v0.0.0-20230704071429-0000e147ea92 // indirect
 	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/spacewander/go-suffix-tree v0.0.0-20191010040751-0865e368c784 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
--- a/go.sum
+++ b/go.sum
@@ -84,8 +84,6 @@ github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA
 github.com/Nerzal/gocloak/v13 v13.9.0 h1:YWsJsdM5b0yhM2Ba3MLydiOlujkBry4TtdzfIzSVZhw=
 github.com/Nerzal/gocloak/v13 v13.9.0/go.mod h1:YYuDcXZ7K2zKECyVP7pPqjKxx2AzYSpKDj8d6GuyM10=
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
-github.com/OneOfOne/xxhash v1.2.8 h1:31czK/TI9sNkxIKfaUfGlU47BAxQ0ztGgd9vPyqimf8=
-github.com/OneOfOne/xxhash v1.2.8/go.mod h1:eZbhyaAYD41SGSSsnmcpxVoRiQ/MPUTjUdIIOT9Um7Q=
 github.com/OpenDNS/vegadns2client v0.0.0-20180418235048-a3fa4a771d87/go.mod h1:iGLljf5n9GjT6kc0HBvyI1nOKnGQbNB66VzSNbK5iks=
 github.com/ProtonMail/go-crypto v1.1.5 h1:eoAQfK2dwL+tFSFpr7TbOaPNUbPiJj4fLYwwGE1FQO4=
 github.com/ProtonMail/go-crypto v1.1.5/go.mod h1:rA3QumHc/FZ8pAHreoekgiAbzpNsfQAosU5td4SnOrE=
@@ -93,8 +91,8 @@ github.com/RoaringBitmap/roaring v1.9.3 h1:t4EbC5qQwnisr5PrP9nt0IRhRTb9gMUgQF4t4
 github.com/RoaringBitmap/roaring v1.9.3/go.mod h1:6AXUsoIEzDTFFQCe1RbGA6uFONMhvejWj5rqITANK90=
 github.com/Shopify/sarama v1.19.0/go.mod h1:FVkBWblsNy7DGZRfXLU0O9RCGt5g3g3yEuWXgklEdEo=
 github.com/Shopify/toxiproxy v2.1.4+incompatible/go.mod h1:OXgGpZ6Cli1/URJOF1DMxUHB2q5Ap20/P/eIdh4G0pI=
-github.com/agnivade/levenshtein v1.2.0 h1:U9L4IOT0Y3i0TIlUIDJ7rVUziKi/zPbrJGaFrtYH3SY=
-github.com/agnivade/levenshtein v1.2.0/go.mod h1:QVVI16kDrtSuwcpd0p1+xMC6Z/VfhtCyDIjcwga4/DU=
+github.com/agnivade/levenshtein v1.2.1 h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM=
+github.com/agnivade/levenshtein v1.2.1/go.mod h1:QVVI16kDrtSuwcpd0p1+xMC6Z/VfhtCyDIjcwga4/DU=
 github.com/ajg/form v1.5.1 h1:t9c7v8JUKu/XxOGBU0yjNpaMloxGEJhUkqFRq0ibGeU=
 github.com/ajg/form v1.5.1/go.mod h1:uL1WgH+h2mgNtvBq0339dVnzXdBETtL2LeUXaIv25UY=
 github.com/akamai/AkamaiOPEN-edgegrid-golang v1.1.0/go.mod h1:kX6YddBkXqqywAe8c9LyvgTCyFuZCTMF4cRPQhc3Fy8=
@@ -133,9 +131,8 @@ github.com/bbalet/stopwords v1.0.0/go.mod h1:sAWrQoDMfqARGIn4s6dp7OW7ISrshUD8IP2
 github.com/beevik/etree v1.1.0/go.mod h1:r8Aw8JqVegEf0w2fDnATrX9VpkMcyFeM0FhwO62wh+A=
 github.com/beevik/etree v1.5.0 h1:iaQZFSDS+3kYZiGoc9uKeOkUY3nYMXOKLl6KIJxiJWs=
 github.com/beevik/etree v1.5.0/go.mod h1:gPNJNaBGVZ9AwsidazFZyygnd+0pAU38N4D+WemwKNs=
+github.com/benbjohnson/clock v1.1.0 h1:Q92kusRqC1XV2MjkWETPvjJVqKetz1OzxZB7mHJLju8=
 github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
-github.com/benbjohnson/clock v1.3.5 h1:VvXlSJBzZpA/zum6Sj74hxwYI2DIxRWuNIoXAzHZz5o=
-github.com/benbjohnson/clock v1.3.5/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
 github.com/beorn7/perks v0.0.0-20160804104726-4c0e84591b9a/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
@@ -236,9 +233,8 @@ github.com/cornelk/hashmap v1.0.8/go.mod h1:RfZb7JO3RviW/rT6emczVuC/oxpdz4UsSB2L
 github.com/cpu/goacmedns v0.1.1/go.mod h1:MuaouqEhPAHxsbqjgnck5zeghuwBP1dLnPoobeGqugQ=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
-github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
-github.com/cpuguy83/go-md2man/v2 v2.0.5 h1:ZtcqGrnekaHpVLArFSe4HK5DoKx1T0rq2DwVB0alcyc=
-github.com/cpuguy83/go-md2man/v2 v2.0.5/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/cpuguy83/go-md2man/v2 v2.0.6 h1:XJtiaUW6dEEqVuZiMTn1ldk455QWwEIsMIJlo5vtkx0=
+github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/crewjam/httperr v0.2.0 h1:b2BfXR8U3AlIHwNeFFvZ+BV1LFvKLlzMjzaTnZMybNo=
 github.com/crewjam/httperr v0.2.0/go.mod h1:Jlz+Sg/XqBQhyMjdDiC+GNNRzZTD7x39Gu3pglZ5oH4=
@@ -338,8 +334,8 @@ github.com/go-asn1-ber/asn1-ber v1.4.1/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkPro
 github.com/go-asn1-ber/asn1-ber v1.5.7 h1:DTX+lbVTWaTw1hQ+PbZPlnDZPEIs0SS/GCZAl535dDk=
 github.com/go-asn1-ber/asn1-ber v1.5.7/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=
 github.com/go-chi/chi v4.0.2+incompatible/go.mod h1:eB3wogJHnLi3x/kFX2A+IbTBlXxmMeXJVKy9tTv1XzQ=
-github.com/go-chi/chi/v5 v5.2.0 h1:Aj1EtB0qR2Rdo2dG4O94RIU35w2lvQSj6BRA4+qwFL0=
-github.com/go-chi/chi/v5 v5.2.0/go.mod h1:DslCQbL2OYiznFReuXYUmQ2hGd1aDpCnlMNITLSKoi8=
+github.com/go-chi/chi/v5 v5.2.1 h1:KOIHODQj58PmL80G2Eak4WdvUzjSJSm0vG72crDCqb8=
+github.com/go-chi/chi/v5 v5.2.1/go.mod h1:L2yAIGWB3H+phAw1NxKwWM+7eUH/lU8pOMm5hHcoops=
 github.com/go-chi/render v1.0.3 h1:AsXqd2a1/INaIfUSKq3G5uA8weYx20FOsM7uSoCyyt4=
 github.com/go-chi/render v1.0.3/go.mod h1:/gr3hVkmYR0YlEy3LxCuVRFzEu9Ruok+gFqbIofjao0=
 github.com/go-cmd/cmd v1.0.5/go.mod h1:y8q8qlK5wQibcw63djSl/ntiHUHXHGdCkPk0j4QeW4s=
@@ -699,8 +695,8 @@ github.com/kolo/xmlrpc v0.0.0-20200310150728-e0350524596b/go.mod h1:o03bZfuBwAXH
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
-github.com/kovidgoyal/imaging v1.6.3 h1:iNPpv7ygiaB/NOztc6APMT7yr9UwBS+rOZwIbAdtyY8=
-github.com/kovidgoyal/imaging v1.6.3/go.mod h1:sHvcLOOVhJuto2IoNdPLEqnAUoL5ZfHEF0PpNH+882g=
+github.com/kovidgoyal/imaging v1.6.4 h1:K0idhRPXnRrJBKnBYcTfI1HTWSNDeAn7hYDvf9I0dCk=
+github.com/kovidgoyal/imaging v1.6.4/go.mod h1:bEIgsaZmXlvFfkv/CUxr9rJook6AQkJnpB5EPosRfRY=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
@@ -863,10 +859,10 @@ github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7J
 github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
 github.com/onsi/gomega v1.36.2 h1:koNYke6TVk6ZmnyHrCXba/T/MoLBXFjeC1PtvYgw0A8=
 github.com/onsi/gomega v1.36.2/go.mod h1:DdwyADRjrc825LhMEkD76cHR5+pUnjhUN8GlHlRPHzY=
-github.com/open-policy-agent/opa v1.1.0 h1:HMz2evdEMTyNqtdLjmu3Vyx06BmhNYAx67Yz3Ll9q2s=
-github.com/open-policy-agent/opa v1.1.0/go.mod h1:T1pASQ1/vwfTa+e2fYcfpLCvWgYtqtiUv+IuA/dLPQs=
-github.com/opencloud-eu/reva/v2 v2.27.3-0.20250312134906-766c69c5d1be h1:dxKsVUzdKIGf1hfGdr1GH6NFfo0xuIcPma/qjHNG8mU=
-github.com/opencloud-eu/reva/v2 v2.27.3-0.20250312134906-766c69c5d1be/go.mod h1:sqlExPoEnEd0KdfoSKogV8PrwEBY3l06icoa4gJnGnU=
+github.com/open-policy-agent/opa v1.2.0 h1:88NDVCM0of1eO6Z4AFeL3utTEtMuwloFmWWU7dRV1z0=
+github.com/open-policy-agent/opa v1.2.0/go.mod h1:30euUmOvuBoebRCcJ7DMF42bRBOPznvt0ACUMYDUGVY=
+github.com/opencloud-eu/reva/v2 v2.28.0 h1:ai7PRIESdw2SiM/MmK8Tc+C/GDHBwzlQp4MwCnqTl5Y=
+github.com/opencloud-eu/reva/v2 v2.28.0/go.mod h1:hbCaf73/SzHtbVlmVCU1Eheadds029am/X0Bff5k514=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/opentracing/opentracing-go v1.2.0 h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs=
 github.com/opentracing/opentracing-go v1.2.0/go.mod h1:GxEUsuufX4nBwe+T+Wl9TAgYrxe9dPLANfrWvHYVTgc=
@@ -911,8 +907,8 @@ github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndr
 github.com/pquerna/cachecontrol v0.2.0 h1:vBXSNuE5MYP9IJ5kjsdo8uq+w41jSPgvba2DEnkRx9k=
 github.com/pquerna/cachecontrol v0.2.0/go.mod h1:NrUG3Z7Rdu85UNR3vm7SOsl1nFIeSiQnrHV5K9mBcUI=
 github.com/pquerna/otp v1.3.0/go.mod h1:dkJfzwRKNiegxyNb54X/3fLwhCynbMspSyWKnvi1AEg=
-github.com/prometheus/alertmanager v0.27.0 h1:V6nTa2J5V4s8TG4C4HtrBP/WNSebCCTYGGv4qecA/+I=
-github.com/prometheus/alertmanager v0.27.0/go.mod h1:8Ia/R3urPmbzJ8OsdvmZvIprDwvwmYCmUbwBL+jlPOE=
+github.com/prometheus/alertmanager v0.28.1 h1:BK5pCoAtaKg01BYRUJhEDV1tqJMEtYBGzPw8QdvnnvA=
+github.com/prometheus/alertmanager v0.28.1/go.mod h1:0StpPUDDHi1VXeM7p2yYfeZgLVi/PPlt39vo9LQUHxM=
 github.com/prometheus/client_golang v0.8.0/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
 github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829/go.mod h1:p2iRAGwDERtqlqzRXnrOVns+ignqQo//hLXqYxZYVNs=
@@ -969,8 +965,8 @@ github.com/rainycape/memcache v0.0.0-20150622160815-1031fa0ce2f2/go.mod h1:7tZKc
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 h1:MkV+77GLUNo5oJ0jf870itWm3D0Sjh7+Za9gazKc5LQ=
 github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
-github.com/riandyrn/otelchi v0.12.0 h1:7aXphKyzut8849DDb/0LWyCPq4mfnikpggEmmW3b38U=
-github.com/riandyrn/otelchi v0.12.0/go.mod h1:weZZeUJURvtCcbWsdb7Y6F8KFZGedJlSrgUjq9VirV8=
+github.com/riandyrn/otelchi v0.12.1 h1:FdRKK3/RgZ/T+d+qTH5Uw3MFx0KwRF38SkdfTMMq/m8=
+github.com/riandyrn/otelchi v0.12.1/go.mod h1:weZZeUJURvtCcbWsdb7Y6F8KFZGedJlSrgUjq9VirV8=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
 github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
@@ -1010,11 +1006,11 @@ github.com/shamaton/msgpack/v2 v2.2.2 h1:GOIg0c9LV04VwzOOqZSrmsv/JzjNOOMxnS/HvOH
 github.com/shamaton/msgpack/v2 v2.2.2/go.mod h1:6khjYnkx73f7VQU7wjcFS9DFjs+59naVWJv1TB7qdOI=
 github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI=
 github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA=
-github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749 h1:bUGsEnyNbVPw06Bs80sCeARAlK8lhwqGyi6UT8ymuGk=
-github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749/go.mod h1:ZY1cvUeJuFPAdZ/B6v7RHavJWZn2YPVFQ1OSXhCGOkg=
+github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c h1:aqg5Vm5dwtvL+YgDpBcK1ITf3o96N/K7/wsRXQnUTEs=
+github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c/go.mod h1:owqhoLW1qZoYLZzLnBw+QkPP9WZnjlSWihhxAJC1+/M=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
-github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546 h1:pXY9qYc/MP5zdvqWEUH6SjNiu7VhSjuVFTFiTcphaLU=
-github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546/go.mod h1:TrYk7fJVaAttu97ZZKrO9UbRa8izdowaMIZcxYMbVaw=
+github.com/shurcooL/vfsgen v0.0.0-20230704071429-0000e147ea92 h1:OfRzdxCzDhp+rsKWXuOO2I/quKMJ/+TQwVbIP/gltZg=
+github.com/shurcooL/vfsgen v0.0.0-20230704071429-0000e147ea92/go.mod h1:7/OT02F6S6I7v6WXb+IjhMuZEYfH/RJ5RwEWnEo5BMg=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
@@ -1041,8 +1037,8 @@ github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4
 github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
 github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
 github.com/spf13/cobra v1.1.1/go.mod h1:WnodtKOvamDL/PwE2M4iKs8aMDBZ5Q5klgD3qfVJQMI=
-github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
-github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
+github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo=
+github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
@@ -1162,8 +1158,8 @@ go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
 go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
 go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA=
 go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A=
-go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 h1:rgMkmiGfix9vFJDcDi1PK8WEQP4FLQwLDfhp5ZLpFeE=
-go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0/go.mod h1:ijPqXp5P6IRRByFVVg9DY8P5HkxkHE5ARIa+86aXPf4=
+go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 h1:x7wzEgXfnzJcHDwStJT+mxOz4etr2EcexjqhBvmoakw=
+go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0/go.mod h1:rg+RlpR5dKwaS95IyyZqj5Wd4E13lk/msnTS0Xl9lJM=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 h1:sbiXRNDSWJOTobXh5HyQKjq6wUC5tNybqjIqDpAY4CU=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0/go.mod h1:69uWxva0WgAA/4bu2Yy70SLDBwZXuQ6PbBpbsa5iZrQ=
 go.opentelemetry.io/contrib/zpages v0.57.0 h1:mHFZlTkyrUJcuBhpytPSaVPiVkqri96RKUDk01d83eQ=
--- a/opencloud/Makefile
+++ b/opencloud/Makefile
@@ -30,16 +30,10 @@ dev-docker-multiarch:
 	docker buildx rm opencloudbuilder || true
 	docker buildx create --platform linux/arm64,linux/amd64 --name opencloudbuilder
 	docker buildx use opencloudbuilder
-	cd .. && docker buildx build --platform linux/arm64,linux/amd64 --output type=docker --file opencloud/docker/Dockerfile.linux.multiarch --tag opencloud-eu/opencloud:dev-multiarch .
+	cd .. && docker buildx build --platform linux/arm64,linux/amd64 --output type=docker --file opencloud/docker/Dockerfile.multiarch --tag opencloud-eu/opencloud:dev-multiarch .
 	docker buildx rm opencloudbuilder

 .PHONY: debug-docker
 debug-docker:
 	$(MAKE) --no-print-directory debug-linux-docker-$(GOARCH)
 	docker build -f docker/Dockerfile.linux.debug.$(GOARCH) -t opencloud-eu/opencloud:debug .
-
-.PHONY: node-generate-prod
-node-generate-prod: # opencloud needs assets of all other modules
-	@if [ $(MAKE_DEPTH) -le 1 ]; then \
-	$(MAKE) --no-print-directory -C .. node-generate-prod \
-	; fi;
--- a/opencloud/docker/Dockerfile.linux.multiarch
+++ b/opencloud/docker/Dockerfile.linux.multiarch
@@ -1,14 +1,15 @@
 FROM golang:alpine3.20 AS build
 ARG TARGETOS
 ARG TARGETARCH
+ARG VERSION
+ARG STRING

 RUN apk add bash make git curl gcc musl-dev libc-dev binutils-gold inotify-tools vips-dev

-COPY ./ /opencloud/
+COPY ../ /opencloud/

 WORKDIR /opencloud
 RUN GOOS="${TARGETOS:-linux}" GOARCH="${TARGETARCH:-amd64}" ; \
-    make go-generate ; \
    make -C opencloud release-linux-docker-${TARGETARCH} ENABLE_VIPS=true

 FROM alpine:3.20
--- a/pkg/version/version.go
+++ b/pkg/version/version.go
@@ -16,7 +16,7 @@ var (
 	// LatestTag is the latest released version plus the dev meta version.
 	// Will be overwritten by the release pipeline
 	// Needs a manual change for every tagged release
-	LatestTag = "1.0.0+dev"
+	LatestTag = "1.1.0+dev"

 	// Date indicates the build date.
 	// This has been removed, it looks like you can only replace static strings with recent go versions
--- a/services/antivirus/pkg/scanners/mocks/scanner.go
+++ b/services/antivirus/pkg/scanners/mocks/scanner.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/collaboration/mocks/connector_service.go
+++ b/services/collaboration/mocks/connector_service.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/collaboration/mocks/content_connector_service.go
+++ b/services/collaboration/mocks/content_connector_service.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/collaboration/mocks/file_connector_service.go
+++ b/services/collaboration/mocks/file_connector_service.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/collaboration/mocks/gateway_selector.go
+++ b/services/collaboration/mocks/gateway_selector.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/collaboration/mocks/lock_parser.go
+++ b/services/collaboration/mocks/lock_parser.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/Makefile
+++ b/services/graph/Makefile
@@ -14,7 +14,7 @@ include ../../.make/release.mk
 include ../../.make/docs.mk

 .PHONY: go-generate
-go-generate: $(MOCKERY)
+go-generate:
 	$(MOCKERY)

 .PHONY: l10n-pull
--- a/services/graph/mocks/base_graph_provider.go
+++ b/services/graph/mocks/base_graph_provider.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/drive_item_permissions_provider.go
+++ b/services/graph/mocks/drive_item_permissions_provider.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/drives_drive_item_provider.go
+++ b/services/graph/mocks/drives_drive_item_provider.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/gateway_selector.go
+++ b/services/graph/mocks/gateway_selector.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/http_client.go
+++ b/services/graph/mocks/http_client.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/permissions.go
+++ b/services/graph/mocks/permissions.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/publisher.go
+++ b/services/graph/mocks/publisher.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/mocks/role_service.go
+++ b/services/graph/mocks/role_service.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/pkg/identity/mocks/backend.go
+++ b/services/graph/pkg/identity/mocks/backend.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/pkg/identity/mocks/education_backend.go
+++ b/services/graph/pkg/identity/mocks/education_backend.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/graph/pkg/identity/mocks/ldapclient.go
+++ b/services/graph/pkg/identity/mocks/ldapclient.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/idp/package.json
+++ b/services/idp/package.json
@@ -105,11 +105,11 @@
    "web-vitals": "^3.5.2"
  },
  "devDependencies": {
-    "@babel/core": "7.26.9",
+    "@babel/core": "7.26.10",
    "@typescript-eslint/eslint-plugin": "^4.33.0",
    "@typescript-eslint/parser": "^4.33.0",
    "babel-eslint": "^10.1.0",
-    "babel-loader": "9.2.1",
+    "babel-loader": "10.0.0",
    "babel-plugin-named-asset-import": "^0.3.8",
    "babel-preset-react-app": "^10.1.0",
    "case-sensitive-paths-webpack-plugin": "2.4.0",
--- a/services/idp/pkg/config/config.go
+++ b/services/idp/pkg/config/config.go
@@ -99,7 +99,7 @@ type Settings struct {
 	IdentifierRegistrationConf        string `yaml:"-"`
 	IdentifierScopesConf              string `yaml:"-"` // unused
 	IdentifierDefaultBannerLogo       string
-	IdentifierDefaultSignInPageText   string
+	IdentifierDefaultSignInPageText   string `yaml:"default_sign_in_page_text" env:"IDP_DEFAULT_SIGNIN_PAGE_TEXT" desc:"" introductionVersion:"2.0.0"`
 	IdentifierDefaultUsernameHintText string
 	IdentifierUILocales               []string

--- a/services/idp/pnpm-lock.yaml
+++ b/services/idp/pnpm-lock.yaml
--- a/services/idp/src/containers/Login/Login.jsx
+++ b/services/idp/src/containers/Login/Login.jsx
@@ -1,209 +1,234 @@
-import React, {useEffect, useMemo} from 'react';
-import PropTypes from 'prop-types';
-import {connect} from 'react-redux';
+import React, { useEffect, useMemo } from "react";
+import PropTypes from "prop-types";
+import { connect } from "react-redux";

-import {useTranslation} from 'react-i18next';
+import { useTranslation } from "react-i18next";

-import {withStyles} from '@material-ui/core/styles';
-import Button from '@material-ui/core/Button';
-import CircularProgress from '@material-ui/core/CircularProgress';
-import green from '@material-ui/core/colors/green';
-import Typography from '@material-ui/core/Typography';
-import Link from '@material-ui/core/Link';
+import { withStyles } from "@material-ui/core/styles";
+import Button from "@material-ui/core/Button";
+import CircularProgress from "@material-ui/core/CircularProgress";
+import green from "@material-ui/core/colors/green";
+import Typography from "@material-ui/core/Typography";
+import Link from "@material-ui/core/Link";

-import TextInput from '../../components/TextInput'
+import TextInput from "../../components/TextInput";

-import {updateInput, executeLogonIfFormValid, advanceLogonFlow} from '../../actions/login';
-import {ErrorMessage} from '../../errors';
+import {
+  updateInput,
+  executeLogonIfFormValid,
+  advanceLogonFlow,
+} from "../../actions/login";
+import { ErrorMessage } from "../../errors";

-const styles = theme => ({
-    buttonProgress: {
-        color: green[500],
-        position: 'absolute',
-        top: '50%',
-        left: '50%',
-        marginTop: -12,
-        marginLeft: -12
-    },
-    main: {
-        width: '100%'
-    },
-    header: {
-        textAlign: 'center',
-        marginTop: 0,
-        marginBottom: theme.spacing(6)
-    },
-    wrapper: {
-        position: 'relative',
-        width: '100%',
-        textAlign: 'center'
-    },
-    message: {
-        marginTop: 5,
-        marginBottom: 5
-    }
+const styles = (theme) => ({
+  buttonProgress: {
+    color: green[500],
+    position: "absolute",
+    top: "50%",
+    left: "50%",
+    marginTop: -12,
+    marginLeft: -12,
+  },
+  main: {
+    width: "100%",
+  },
+  header: {
+    textAlign: "center",
+    marginTop: 0,
+    marginBottom: theme.spacing(6),
+  },
+  wrapper: {
+    position: "relative",
+    width: "100%",
+    textAlign: "center",
+  },
+  message: {
+    marginTop: 5,
+    marginBottom: 5,
+  },
 });

 function Login(props) {
-    const {
-        hello,
-        query,
-        dispatch,
-        history,
-        loading,
-        errors,
-        classes,
-        username,
-        password,
-        passwordResetLink,
-    } = props;
+  const {
+    hello,
+    query,
+    dispatch,
+    history,
+    loading,
+    errors,
+    classes,
+    username,
+    password,
+    passwordResetLink,
+    branding,
+  } = props;

-    const {t} = useTranslation();
-    const loginFailed = errors.http;
-    const hasError = errors.http || errors.username || errors.password;
-    const errorMessage = errors.http
-        ? <ErrorMessage error={errors.http}></ErrorMessage>
-        : (errors.username
-            ? <ErrorMessage error={errors.username}></ErrorMessage>
-            : <ErrorMessage error={errors.password}></ErrorMessage>);
-    const extraPropsUsername = {
-        "aria-invalid": (errors.username || errors.http) ? 'true' : 'false'
-    };
-    const extraPropsPassword = {
-        "aria-invalid": (errors.password || errors.http) ? 'true' : 'false',
-    };
+  const { t } = useTranslation();
+  const loginFailed = errors.http;
+  const hasError = errors.http || errors.username || errors.password;
+  const errorMessage = errors.http ? (
+    <ErrorMessage error={errors.http}></ErrorMessage>
+  ) : errors.username ? (
+    <ErrorMessage error={errors.username}></ErrorMessage>
+  ) : (
+    <ErrorMessage error={errors.password}></ErrorMessage>
+  );
+  const extraPropsUsername = {
+    "aria-invalid": errors.username || errors.http ? "true" : "false",
+  };
+  const extraPropsPassword = {
+    "aria-invalid": errors.password || errors.http ? "true" : "false",
+  };

-    if (errors.username || errors.http) {
-        extraPropsUsername['extraClassName'] = 'error';
-        extraPropsUsername['aria-describedby'] = 'oc-login-error-message';
+  if (errors.username || errors.http) {
+    extraPropsUsername["extraClassName"] = "error";
+    extraPropsUsername["aria-describedby"] = "oc-login-error-message";
+  }
+
+  if (errors.password || errors.http) {
+    extraPropsPassword["extraClassName"] = "error";
+    extraPropsPassword["aria-describedby"] = "oc-login-error-message";
+  }
+
+  useEffect(() => {
+    if (hello && hello.state && history.action !== "PUSH") {
+      if (!query.prompt || query.prompt.indexOf("select_account") === -1) {
+        dispatch(advanceLogonFlow(true, history));
+        return;
+      }
+
+      history.replace(
+        `/chooseaccount${history.location.search}${history.location.hash}`
+      );
+      return;
    }
+  });

-    if (errors.password || errors.http) {
-        extraPropsPassword['extraClassName'] = 'error';
-        extraPropsPassword['aria-describedby'] = 'oc-login-error-message';
-    }
+  const handleChange = (name) => (event) => {
+    dispatch(updateInput(name, event.target.value));
+  };

-    useEffect(() => {
-        if (hello && hello.state && history.action !== 'PUSH') {
-            if (!query.prompt || query.prompt.indexOf('select_account') === -1) {
-                dispatch(advanceLogonFlow(true, history));
-                return;
-            }
+  const handleNextClick = (event) => {
+    event.preventDefault();

-            history.replace(`/chooseaccount${history.location.search}${history.location.hash}`);
-            return;
+    dispatch(executeLogonIfFormValid(username, password, false)).then(
+      (response) => {
+        if (response.success) {
+          dispatch(advanceLogonFlow(response.success, history));
        }
-    });
-
-    const handleChange = (name) => (event) => {
-        dispatch(updateInput(name, event.target.value));
-    };
-
-    const handleNextClick = (event) => {
-        event.preventDefault();
-
-        dispatch(executeLogonIfFormValid(username, password, false)).then((response) => {
-            if (response.success) {
-                dispatch(advanceLogonFlow(response.success, history));
-            }
-        });
-    };
-
-    const usernamePlaceHolder = useMemo(() => {
-        if (hello?.details?.branding?.usernameHintText) {
-            switch (hello.details.branding.usernameHintText) {
-                case "Username":
-                    break;
-                case "Email":
-                    return t("konnect.login.usernameField.placeholder.email", "Email");
-                case "Identity":
-                    return t("konnect.login.usernameField.placeholder.identity", "Identity");
-                default:
-                    return hello.details.branding.usernameHintText;
-            }
-        }
-
-        return t("konnect.login.usernameField.placeholder.username", "Username");
-    }, [hello, t]);
-
-    return (
-        <div className={classes.main}>
-            <h1 className={classes.header}> {t("konnect.login.headline", "Sign in")}</h1>
-            <form action="" className="oc-login-form" onSubmit={(event) => handleNextClick(event)}>
-                <TextInput
-                    autoFocus
-                    autoCapitalize="off"
-                    spellCheck="false"
-                    value={username}
-                    onChange={handleChange('username')}
-                    autoComplete="kopano-account username"
-                    placeholder={t("konnect.login.usernameField.label", "Username")}
-                    label={t("konnect.login.usernameField.label", "Username")}
-                    id="oc-login-username"
-                    {...extraPropsUsername}
-                />
-                <TextInput
-                    type="password"
-                    margin="normal"
-                    onChange={handleChange('password')}
-                    autoComplete="kopano-account current-password"
-                    placeholder={t("konnect.login.passwordField.label", "Password")}
-                    label={t("konnect.login.passwordField.label", "Password")}
-                    id="oc-login-password"
-                    {...extraPropsPassword}
-                />
-                {hasError && <Typography id="oc-login-error-message" variant="subtitle2" component="span" color="error"
-                                         className={classes.message}>{errorMessage}</Typography>}
-                <div className={classes.wrapper}>
-                    {loginFailed && passwordResetLink && <Link id="oc-login-password-reset" href={passwordResetLink}
-                                                               variant="subtitle2">{"Reset password?"}</Link>}
-                    <Button
-                        type="submit"
-                        color="primary"
-                        variant="contained"
-                        className="oc-button-primary oc-mt-l"
-                        disabled={!!loading}
-                        onClick={handleNextClick}
-                    >
-                        {t("konnect.login.nextButton.label", "Log in")}
-                    </Button>
-                    {loading && <CircularProgress size={24} className={classes.buttonProgress}/>}
-                </div>
-            </form>
-        </div>
+      }
    );
+  };
+
+  return (
+    <div className={classes.main}>
+      <h1 className={classes.header}>
+        {" "}
+        {t("konnect.login.headline", "Sign in")}
+      </h1>
+      {branding?.signinPageText && (
+        <Typography
+          variant="body2"
+          dangerouslySetInnerHTML={{ __html: branding.signinPageText }}
+        />
+      )}
+      <form
+        action=""
+        className="oc-login-form"
+        onSubmit={(event) => handleNextClick(event)}
+      >
+        <TextInput
+          autoFocus
+          autoCapitalize="off"
+          spellCheck="false"
+          value={username}
+          onChange={handleChange("username")}
+          autoComplete="kopano-account username"
+          placeholder={t("konnect.login.usernameField.label", "Username")}
+          label={t("konnect.login.usernameField.label", "Username")}
+          id="oc-login-username"
+          {...extraPropsUsername}
+        />
+        <TextInput
+          type="password"
+          margin="normal"
+          onChange={handleChange("password")}
+          autoComplete="kopano-account current-password"
+          placeholder={t("konnect.login.passwordField.label", "Password")}
+          label={t("konnect.login.passwordField.label", "Password")}
+          id="oc-login-password"
+          {...extraPropsPassword}
+        />
+        {hasError && (
+          <Typography
+            id="oc-login-error-message"
+            variant="subtitle2"
+            component="span"
+            color="error"
+            className={classes.message}
+          >
+            {errorMessage}
+          </Typography>
+        )}
+        <div className={classes.wrapper}>
+          {loginFailed && passwordResetLink && (
+            <Link
+              id="oc-login-password-reset"
+              href={passwordResetLink}
+              variant="subtitle2"
+            >
+              {"Reset password?"}
+            </Link>
+          )}
+          <Button
+            type="submit"
+            color="primary"
+            variant="contained"
+            className="oc-button-primary oc-mt-l"
+            disabled={!!loading}
+            onClick={handleNextClick}
+          >
+            {t("konnect.login.nextButton.label", "Log in")}
+          </Button>
+          {loading && (
+            <CircularProgress size={24} className={classes.buttonProgress} />
+          )}
+        </div>
+      </form>
+    </div>
+  );
 }

 Login.propTypes = {
-    classes: PropTypes.object.isRequired,
+  classes: PropTypes.object.isRequired,

-    loading: PropTypes.string.isRequired,
-    username: PropTypes.string.isRequired,
-    password: PropTypes.string.isRequired,
-    passwordResetLink: PropTypes.string.isRequired,
-    errors: PropTypes.object.isRequired,
-    branding: PropTypes.object,
-    hello: PropTypes.object,
-    query: PropTypes.object.isRequired,
+  loading: PropTypes.string.isRequired,
+  username: PropTypes.string.isRequired,
+  password: PropTypes.string.isRequired,
+  passwordResetLink: PropTypes.string.isRequired,
+  errors: PropTypes.object.isRequired,
+  branding: PropTypes.object,
+  hello: PropTypes.object,
+  query: PropTypes.object.isRequired,

-    dispatch: PropTypes.func.isRequired,
-    history: PropTypes.object.isRequired
+  dispatch: PropTypes.func.isRequired,
+  history: PropTypes.object.isRequired,
 };

 const mapStateToProps = (state) => {
-    const {loading, username, password, errors} = state.login;
-    const {branding, hello, query, passwordResetLink} = state.common;
+  const { loading, username, password, errors } = state.login;
+  const { branding, hello, query, passwordResetLink } = state.common;

-    return {
-        loading,
-        username,
-        password,
-        errors,
-        branding,
-        hello,
-        query,
-        passwordResetLink
-    };
+  return {
+    loading,
+    username,
+    password,
+    errors,
+    branding,
+    hello,
+    query,
+    passwordResetLink,
+  };
 };

 export default connect(mapStateToProps)(withStyles(styles)(Login));
--- a/services/invitations/pkg/backends/keycloak/mocks/client.go
+++ b/services/invitations/pkg/backends/keycloak/mocks/client.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/proxy/pkg/user/backend/mocks/user_backend.go
+++ b/services/proxy/pkg/user/backend/mocks/user_backend.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/proxy/pkg/userroles/mocks/user_role_assigner.go
+++ b/services/proxy/pkg/userroles/mocks/user_role_assigner.go
@@ -1,4 +1,4 @@
-// Code generated by mockery v2.53.0. DO NOT EDIT.
+// Code generated by mockery v2.53.2. DO NOT EDIT.

 package mocks

--- a/services/storage-users/pkg/config/config.go
+++ b/services/storage-users/pkg/config/config.go
@@ -194,12 +194,14 @@ type OwnCloudSQLDriver struct {
 // PosixDriver is the storage driver configuration when using 'posix' storage driver
 type PosixDriver struct {
 	// Root is the absolute path to the location of the data
-	Root                      string        `yaml:"root" env:"STORAGE_USERS_POSIX_ROOT" desc:"The directory where the filesystem storage will store its data. If not defined, the root directory derives from $OC_BASE_DATA_PATH/storage/users." introductionVersion:"1.0.0"`
-	PersonalSpacePathTemplate string        `yaml:"personalspacepath_template" env:"STORAGE_USERS_POSIX_PERSONAL_SPACE_PATH_TEMPLATE" desc:"Template string to construct the paths of the personal space roots." introductionVersion:"1.0.0"`
-	GeneralSpacePathTemplate  string        `yaml:"generalspacepath_template" env:"STORAGE_USERS_POSIX_GENERAL_SPACE_PATH_TEMPLATE" desc:"Template string to construct the paths of the projects space roots." introductionVersion:"1.0.0"`
-	PermissionsEndpoint       string        `yaml:"permissions_endpoint" env:"STORAGE_USERS_PERMISSION_ENDPOINT;STORAGE_USERS_POSIX_PERMISSIONS_ENDPOINT" desc:"Endpoint of the permissions service. The endpoints can differ for 'decomposed', 'posix' and 'decomposeds3'." introductionVersion:"1.0.0"`
-	AsyncUploads              bool          `yaml:"async_uploads" env:"OC_ASYNC_UPLOADS" desc:"Enable asynchronous file uploads." introductionVersion:"1.0.0"`
-	ScanDebounceDelay         time.Duration `yaml:"scan_debounce_delay" env:"STORAGE_USERS_POSIX_SCAN_DEBOUNCE_DELAY" desc:"The time in milliseconds to wait before scanning the filesystem for changes after a change has been detected." introductionVersion:"1.0.0"`
+	Root                       string        `yaml:"root" env:"STORAGE_USERS_POSIX_ROOT" desc:"The directory where the filesystem storage will store its data. If not defined, the root directory derives from $OC_BASE_DATA_PATH/storage/users." introductionVersion:"1.0.0"`
+	PersonalSpaceAliasTemplate string        `yaml:"personalspacealias_template" env:"STORAGE_USERS_POSIX_PERSONAL_SPACE_ALIAS_TEMPLATE" desc:"Template string to construct personal space aliases." introductionVersion:"1.0.0"`
+	PersonalSpacePathTemplate  string        `yaml:"personalspacepath_template" env:"STORAGE_USERS_POSIX_PERSONAL_SPACE_PATH_TEMPLATE" desc:"Template string to construct the paths of the personal space roots." introductionVersion:"1.0.0"`
+	GeneralSpaceAliasTemplate  string        `yaml:"generalspacealias_template" env:"STORAGE_USERS_POSIX_GENERAL_SPACE_ALIAS_TEMPLATE" desc:"Template string to construct general space aliases." introductionVersion:"1.0.0"`
+	GeneralSpacePathTemplate   string        `yaml:"generalspacepath_template" env:"STORAGE_USERS_POSIX_GENERAL_SPACE_PATH_TEMPLATE" desc:"Template string to construct the paths of the projects space roots." introductionVersion:"1.0.0"`
+	PermissionsEndpoint        string        `yaml:"permissions_endpoint" env:"STORAGE_USERS_PERMISSION_ENDPOINT;STORAGE_USERS_POSIX_PERMISSIONS_ENDPOINT" desc:"Endpoint of the permissions service. The endpoints can differ for 'decomposed', 'posix' and 'decomposeds3'." introductionVersion:"1.0.0"`
+	AsyncUploads               bool          `yaml:"async_uploads" env:"OC_ASYNC_UPLOADS" desc:"Enable asynchronous file uploads." introductionVersion:"1.0.0"`
+	ScanDebounceDelay          time.Duration `yaml:"scan_debounce_delay" env:"STORAGE_USERS_POSIX_SCAN_DEBOUNCE_DELAY" desc:"The time in milliseconds to wait before scanning the filesystem for changes after a change has been detected." introductionVersion:"1.0.0"`

 	UseSpaceGroups bool `yaml:"use_space_groups" env:"STORAGE_USERS_POSIX_USE_SPACE_GROUPS" desc:"Use space groups to manage permissions on spaces." introductionVersion:"1.0.0"`

--- a/services/storage-users/pkg/config/defaults/defaultconfig.go
+++ b/services/storage-users/pkg/config/defaults/defaultconfig.go
@@ -140,15 +140,17 @@ func DefaultConfig() *config.Config {
 				AsyncUploads:               true,
 			},
 			Posix: config.PosixDriver{
-				UseSpaceGroups:            false,
-				Root:                      filepath.Join(defaults.BaseDataPath(), "storage", "users"),
-				PersonalSpacePathTemplate: "users/{{.User.Username}}",
-				GeneralSpacePathTemplate:  "projects/{{.SpaceId}}",
-				PermissionsEndpoint:       "eu.opencloud.api.settings",
-				AsyncUploads:              true,
-				ScanDebounceDelay:         1 * time.Second,
-				WatchFS:                   false,
-				EnableFSRevisions:         false,
+				UseSpaceGroups:             false,
+				Root:                       filepath.Join(defaults.BaseDataPath(), "storage", "users"),
+				PersonalSpaceAliasTemplate: "{{.SpaceType}}/{{.User.Username | lower}}",
+				PersonalSpacePathTemplate:  "users/{{.User.Id.OpaqueId}}",
+				GeneralSpaceAliasTemplate:  "{{.SpaceType}}/{{.SpaceName | replace \" \" \"-\" | lower}}",
+				GeneralSpacePathTemplate:   "projects/{{.SpaceId}}",
+				PermissionsEndpoint:        "eu.opencloud.api.settings",
+				AsyncUploads:               true,
+				ScanDebounceDelay:          1 * time.Second,
+				WatchFS:                    false,
+				EnableFSRevisions:          false,
 			},
 		},
 		Events: config.Events{
--- a/services/userlog/pkg/service/conversion.go
+++ b/services/userlog/pkg/service/conversion.go
@@ -376,7 +376,7 @@ func composeMessage(nt NotificationTemplate, locale, defaultLocale, path string,

 func loadTemplates(nt NotificationTemplate, locale, defaultLocale, path string) (string, string) {
 	t := l10n.NewTranslatorFromCommonConfig(defaultLocale, _domain, path, _translationFS, "l10n/locale").Locale(locale)
-	return t.Get("%s", nt.Subject), t.Get(nt.Message)
+	return t.Get("%s", nt.Subject), t.Get("%s", nt.Message)
 }

 func executeTemplate(raw string, vars map[string]interface{}) (string, error) {
--- a/services/web/Makefile
+++ b/services/web/Makefile
@@ -1,6 +1,6 @@
 SHELL := bash
 NAME := web
-WEB_ASSETS_VERSION = v1.0.0
+WEB_ASSETS_VERSION = v2.0.0
 WEB_ASSETS_BRANCH = main

 ifneq (, $(shell command -v go 2> /dev/null)) # suppress `command not found warnings` for non go targets in CI
--- a/services/web/assets/themes/opencloud-dev/assets/favicon.ico
+++ b/services/web/assets/themes/opencloud-dev/assets/favicon.ico
--- a/services/web/assets/themes/opencloud-dev/assets/logo.svg
+++ b/services/web/assets/themes/opencloud-dev/assets/logo.svg
@@ -0,0 +1,14 @@
+<svg width="170" height="35" viewBox="0 0 170 35" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M45.1928 23.7428C42.5766 22.2684 41.0547 19.5569 41.0547 16.1555C41.0547 14.4433 41.4115 12.921 42.1485 11.589C43.5753 8.92532 46.2869 7.35547 49.6879 7.35547C51.377 7.35547 52.8514 7.73604 54.1593 8.47339C56.7523 9.97188 58.2508 12.7307 58.2508 16.1555C58.2508 17.8443 57.894 19.3663 57.1801 20.6748C55.753 23.315 53.042 24.8605 49.6879 24.8605C47.9992 24.8605 46.501 24.504 45.1928 23.7428ZM49.6641 22.1254C52.9942 22.1254 55.1824 19.7947 55.1824 16.1555C55.1824 12.4215 52.8755 10.0667 49.6641 10.0667C46.4534 10.0667 44.1224 12.4215 44.1224 16.1555C44.1224 19.771 46.3345 22.1254 49.6641 22.1254Z" fill="#E2BAFF"/>
+<path d="M62.0912 11.9934L63.6608 14.7522C65.0879 12.4929 66.967 11.9934 68.4176 11.9934C69.5828 11.9934 70.5821 12.255 71.4618 12.8259C72.3657 13.4202 73.0558 14.1814 73.5077 15.1328C74.0069 16.1318 74.2448 17.2259 74.2448 18.4387C74.2448 19.6518 74.0069 20.7697 73.5077 21.7687C73.0558 22.7201 72.3419 23.4813 71.4381 24.0283C70.5821 24.5989 69.5828 24.8605 68.4176 24.8605C67.6327 24.8605 66.8477 24.6943 66.0869 24.3613C65.3971 24.0283 64.7787 23.5526 64.2792 22.958V28.9992H61.3774V16.5599L59.5938 13.4443L62.0912 11.9934ZM64.2792 18.4387C64.2792 19.1764 64.4219 19.8658 64.7073 20.4605C65.0641 21.1027 65.4685 21.5546 65.9442 21.84C66.4913 22.1493 67.0856 22.292 67.7754 22.292C68.489 22.292 69.0836 22.1493 69.6069 21.84C70.1302 21.5308 70.5583 21.0789 70.8196 20.4605C71.1289 19.8658 71.2478 19.1764 71.2478 18.4387C71.2478 17.2497 70.9386 16.2983 70.3204 15.6323C69.6782 14.9187 68.8457 14.562 67.7516 14.562C66.7291 14.562 65.8728 14.9187 65.2306 15.6323C64.6122 16.2983 64.2792 17.2497 64.2792 18.4387Z" fill="#E2BAFF"/>
+<path d="M76.5405 15.133C77.0162 14.1812 77.7297 13.3966 78.7049 12.7782C79.7039 12.2311 80.7981 11.9695 82.0587 11.9695C83.319 11.9695 84.3656 12.2311 85.1981 12.7306C86.1017 13.3015 86.768 14.0626 87.2437 15.0137C87.6715 15.9892 87.9094 17.1544 87.9094 18.4386L87.8621 19.1286H78.6098C78.7049 20.1987 79.0855 21.0077 79.7515 21.6261C80.4175 22.1491 81.2976 22.387 82.3438 22.387C83.1528 22.387 83.8661 22.2446 84.5318 21.9826C85.1981 21.721 85.7925 21.388 86.2685 20.9836C86.3398 21.0553 87.505 23.1005 87.505 23.1005C86.768 23.6476 85.9352 24.0758 85.0316 24.4084C84.1991 24.7177 83.2239 24.8604 82.1535 24.8604C80.8694 24.8604 79.7277 24.599 78.8001 24.052C77.8962 23.5287 77.1589 22.7675 76.5642 21.7689C76.0409 20.7696 75.7793 19.6516 75.7793 18.4386C75.7793 17.2496 76.0172 16.1317 76.5405 15.133ZM78.6811 17.1544H85.0316C84.9365 16.203 84.6273 15.5373 84.104 15.1089C83.5331 14.6097 82.8671 14.348 82.0587 14.348C81.2259 14.348 80.5126 14.6097 79.8704 15.0616C79.2996 15.5135 78.919 16.203 78.6811 17.1544Z" fill="#E2BAFF"/>
+<path d="M102.054 17.0594V24.4799H99.1283V17.3211C99.1283 16.3459 98.9142 15.6561 98.4623 15.2042C98.0342 14.6809 97.3919 14.443 96.5121 14.443C95.9411 14.443 95.4656 14.5857 94.9899 14.895C94.538 15.1328 94.1812 15.5372 93.9433 16.0367C93.7293 16.5124 93.5866 17.0832 93.5866 17.773V24.4799H90.6371V16.5599L88.8535 13.4202L91.3745 11.9934L92.8492 14.5144C94.3477 12.2785 95.9648 11.9934 97.059 11.9934C98.2958 11.9934 99.0569 12.2072 99.5564 12.445C100.056 12.6832 100.508 12.9921 100.841 13.3727C101.649 14.2527 102.054 15.4896 102.054 17.0594Z" fill="#E2BAFF"/>
+<path d="M117.538 23.838C117.015 24.0999 116.325 24.3613 115.469 24.5991C114.684 24.7656 113.851 24.8608 112.971 24.8608C111.259 24.8608 109.737 24.4802 108.429 23.7669C107.144 23.0531 106.145 22.0303 105.408 20.6748C104.694 19.3663 104.338 17.8443 104.338 16.1083C104.338 14.4195 104.694 12.8972 105.384 11.5414C106.074 10.2097 107.144 9.16318 108.405 8.47339C109.713 7.71225 111.283 7.35547 113.138 7.35547C114.066 7.35547 114.874 7.42683 115.564 7.61711C116.373 7.80739 117.038 8.04525 117.514 8.33068C118.014 8.56854 118.608 8.90153 119.298 9.35346L117.8 11.8982C117.062 11.3987 116.349 11.0185 115.659 10.733C114.85 10.4238 113.994 10.2573 113.066 10.2573C111.83 10.2573 110.807 10.4952 109.999 10.9944C109.118 11.5414 108.476 12.2312 108.048 13.0875C107.62 14.0151 107.382 15.0379 107.382 16.1555C107.382 17.2738 107.62 18.2725 108.048 19.1525C108.476 20.0088 109.118 20.6986 109.999 21.1981C110.831 21.6735 111.854 21.9117 113.043 21.9117C113.733 21.9117 114.351 21.84 114.922 21.6973C115.54 21.5308 116.064 21.3408 116.491 21.103C117.086 20.7937 117.538 20.5083 117.871 20.2467L119.346 22.8152C118.632 23.2434 118.037 23.6001 117.538 23.838Z" fill="#E2BAFF"/>
+<rect x="121.127" y="7.23633" width="2.90154" height="17.2437" fill="#E2BAFF"/>
+<path d="M126.195 18.4387C126.195 14.6809 128.859 11.9934 132.688 11.9934C136.494 11.9934 139.134 14.6571 139.134 18.4152C139.134 22.2206 136.494 24.8605 132.664 24.8605C129.002 24.8605 126.195 22.3633 126.195 18.4387ZM132.664 22.3633C134.71 22.3633 136.113 20.9124 136.113 18.4152C136.113 15.9891 134.71 14.4671 132.664 14.4671C130.548 14.4671 129.192 16.0604 129.192 18.4152C129.192 20.8411 130.572 22.3633 132.664 22.3633Z" fill="#E2BAFF"/>
+<path d="M145.86 24.8606C144.456 24.8606 143.339 24.4324 142.482 23.5048C141.674 22.5774 141.27 21.3168 141.27 19.747V12.374H144.171V19.5329C144.171 20.4605 144.385 21.1741 144.837 21.6736C145.265 22.1493 145.931 22.3634 146.811 22.3634C147.382 22.3634 147.881 22.2444 148.334 21.9828C148.785 21.7212 149.118 21.3168 149.356 20.8173C149.618 20.294 149.737 19.6994 149.737 19.081V12.374H152.662V20.3654L154.422 23.4337L151.925 24.8606L150.522 22.4585C150.522 22.4585 149.974 23.1721 149.237 23.7905C148.334 24.5517 147.382 24.8606 145.86 24.8606Z" fill="#E2BAFF"/>
+<path d="M156.104 15.1328C156.651 14.0624 157.293 13.2775 158.173 12.8259C159.053 12.2788 160.076 11.9696 161.17 11.9696C162.098 11.9696 162.859 12.1599 163.525 12.4929C164.191 12.8259 164.809 13.254 165.309 13.8959V7.23657H168.21V20.3415L169.947 23.4099L167.449 24.837L165.927 22.1968C165.927 22.1968 164.88 23.6712 163.525 24.3375C162.954 24.623 162.05 24.837 161.194 24.837C160.076 24.837 159.053 24.5751 158.173 24.0045C157.317 23.5526 156.651 22.7677 156.104 21.7687C155.604 20.7697 155.391 19.6993 155.391 18.4387C155.391 17.1546 155.604 16.0604 156.104 15.1328ZM158.363 18.4387C158.363 19.2474 158.506 19.8896 158.792 20.437C159.125 21.1027 159.553 21.5073 160.004 21.7925C160.528 22.1017 161.098 22.2682 161.812 22.2682C162.526 22.2682 163.144 22.1017 163.644 21.7925C164.143 21.5073 164.571 21.0789 164.88 20.437C165.166 19.8896 165.309 19.2474 165.309 18.4387C165.309 17.2497 164.999 16.2507 164.333 15.6323C163.763 14.9187 162.883 14.5385 161.836 14.5385C160.766 14.5385 159.933 14.9187 159.339 15.6323C158.673 16.2507 158.363 17.2497 158.363 18.4387Z" fill="#E2BAFF"/>
+<path d="M13.4814 25.5141L14.9505 24.6659V18.5276L20.234 15.4772V13.785L18.7649 12.9368L13.4462 16.0076L8.20127 12.9794L6.73242 13.8273V15.5198L12.0159 18.5703V24.668L13.4814 25.5141Z" fill="#E2BAFF"/>
+<path d="M26.9649 7.78377L13.4828 0L0 7.78408V11.1725L13.4824 3.38806L26.9649 11.1721V7.78377Z" fill="#E2BAFF"/>
+<path d="M26.9646 23.8279L13.4821 31.612L0 23.8279V27.2163L13.4821 35L26.9646 27.2163V23.8279Z" fill="#E2BAFF"/>
+</svg>
--- a/services/web/assets/themes/opencloud-dev/theme.json
+++ b/services/web/assets/themes/opencloud-dev/theme.json
@@ -0,0 +1,258 @@
+{
+  "clients": {
+    "android": {},
+    "desktop": {},
+    "ios": {},
+    "web": {
+      "defaults": {
+        "appBanner": {},
+        "designTokens": {
+          "breakpoints": {
+            "large-default": "",
+            "large-max": "",
+            "medium-default": "",
+            "medium-max": "",
+            "small-default": "",
+            "small-max": "",
+            "xlarge": "",
+            "xsmall-max": ""
+          },
+          "fontSizes": {
+            "default": "",
+            "large": "",
+            "medium": ""
+          },
+          "sizes": {
+            "form-check-default": "",
+            "height-small": "",
+            "height-table-row": "",
+            "icon-default": "",
+            "max-height-logo": "",
+            "max-width-logo": "",
+            "tiles-default": "",
+            "tiles-resize-step": "",
+            "width-medium": ""
+          },
+          "spacing": {
+            "large": "",
+            "medium": "",
+            "small": "",
+            "xlarge": "",
+            "xsmall": "",
+            "xxlarge": ""
+          }
+        },
+        "logo": "themes/opencloud-dev/assets/logo.svg",
+        "favicon": "themes/opencloud-dev/assets/favicon.jpg"
+      },
+      "themes": [
+        {
+          "isDark": false,
+          "label": "Light Theme",
+          "designTokens": {
+            "roles": {
+              "primary": "#07677F",
+              "surfaceTint": "#07677F",
+              "onPrimary": "#FFFFFF",
+              "primaryContainer": "#B7EAFF",
+              "onPrimaryContainer": "#001F28",
+              "secondary": "#20434f",
+              "onSecondary": "#FFFFFF",
+              "secondaryContainer": "#f4e5ff",
+              "onSecondaryContainer": "#071E26",
+              "tertiary": "#5A5C7E",
+              "onTertiary": "#FFFFFF",
+              "tertiaryContainer": "#E0E0FF",
+              "onTertiaryContainer": "#171937",
+              "error": "#BA1A1A",
+              "onError": "#FFFFFF",
+              "errorContainer": "#FFDAD6",
+              "onErrorContainer": "#410002",
+              "background": "#F5FAFD",
+              "onBackground": "#171C1F",
+              "surface": "#FFFFFF",
+              "onSurface": "#171C1F",
+              "surfaceVariant": "#DBE4E8",
+              "onSurfaceVariant": "#40484C",
+              "outline": "#70787C",
+              "outlineVariant": "#BFC8CC",
+              "shadow": "#000000",
+              "scrim": "#000000",
+              "inverseSurface": "#2C3134",
+              "inverseOnSurface": "#EDF1F4",
+              "inversePrimary": "#88D1EC",
+              "primaryFixed": "#B7EAFF",
+              "onPrimaryFixed": "#001F28",
+              "primaryFixedDim": "#88D1EC",
+              "onPrimaryFixedVariant": "#004E60",
+              "secondaryFixed": "#CFE6F1",
+              "onSecondaryFixed": "#071E26",
+              "secondaryFixedDim": "#B3CAD4",
+              "onSecondaryFixedVariant": "#344A52",
+              "tertiaryFixed": "#E0E0FF",
+              "onTertiaryFixed": "#171937",
+              "tertiaryFixedDim": "#C3C3EB",
+              "onTertiaryFixedVariant": "#424465",
+              "surfaceDim": "#D6DBDE",
+              "surfaceBright": "#F5FAFD",
+              "surfaceContainerLowest": "#FFFFFF",
+              "surfaceContainerLow": "#EFF4F7",
+              "surfaceContainer": "#F1F3F4",
+              "surfaceContainerHigh": "#E4E9EC",
+              "surfaceContainerHighest": "#DEE3E6",
+              "chrome": "#20434f",
+              "onChrome": "#ffffff"
+            },
+            "colorPalette": {
+              "icon-archive": "#fbbe54",
+              "icon-audio": "#700460",
+              "icon-document": "#3b44a6",
+              "icon-folder": "#4d7eaf",
+              "icon-image": "#ee6b3b",
+              "icon-medical": "#0984db",
+              "icon-pdf": "#ec0d47",
+              "icon-presentation": "#ee6b3b",
+              "icon-spreadsheet": "#15c286",
+              "icon-video": "#045459"
+            }
+          }
+        },
+        {
+          "isDark": true,
+          "label": "Dark Theme",
+          "designTokens": {
+            "roles": {
+              "primary": "#DDB9F7",
+              "surfaceTint": "#DDB9F7",
+              "onPrimary": "#402357",
+              "primaryContainer": "#583A6F",
+              "onPrimaryContainer": "#F2DAFF",
+              "secondary": "#FFFFFF",
+              "onSecondary": "#372C3F",
+              "secondaryContainer": "#000000",
+              "onSecondaryContainer": "#EEDDF6",
+              "tertiary": "#F4B7BB",
+              "onTertiary": "#4C2529",
+              "tertiaryContainer": "#663A3F",
+              "onTertiaryContainer": "#FFDADB",
+              "error": "#FFB4AB",
+              "onError": "#690005",
+              "errorContainer": "#93000A",
+              "onErrorContainer": "#FFDAD6",
+              "background": "#151217",
+              "onBackground": "#FFFFFF",
+              "surface": "#19353f",
+              "onSurface": "#FFFFFF",
+              "surfaceVariant": "#4B454D",
+              "onSurfaceVariant": "#CDC3CE",
+              "outline": "#968E98",
+              "outlineVariant": "#4B454D",
+              "shadow": "#000000",
+              "scrim": "#000000",
+              "inverseSurface": "#FFFFFF",
+              "inverseOnSurface": "#332F35",
+              "inversePrimary": "#715289",
+              "primaryFixed": "#F2DAFF",
+              "onPrimaryFixed": "#2A0C41",
+              "primaryFixedDim": "#DDB9F7",
+              "onPrimaryFixedVariant": "#583A6F",
+              "secondaryFixed": "#EEDDF6",
+              "onSecondaryFixed": "#211829",
+              "secondaryFixedDim": "#D1C1D9",
+              "onSecondaryFixedVariant": "#4E4256",
+              "tertiaryFixed": "#FFDADB",
+              "onTertiaryFixed": "#321015",
+              "tertiaryFixedDim": "#F4B7BB",
+              "onTertiaryFixedVariant": "#663A3F",
+              "surfaceDim": "#151217",
+              "surfaceBright": "#3C383E",
+              "surfaceContainerLowest": "#100D12",
+              "surfaceContainerLow": "#1E1A20",
+              "surfaceContainer": "#082029",
+              "surfaceContainerHigh": "#2D292E",
+              "surfaceContainerHighest": "#383339",
+              "chrome": "#082029",
+              "onChrome": "#ffffff"
+            },
+            "colorPalette": {
+              "icon-archive": "rgb(255, 207, 1)",
+              "icon-audio": "rgb(208, 67, 236)",
+              "icon-document": "rgb(44, 101, 255)",
+              "icon-folder": "rgb(44, 101, 255)",
+              "icon-image": "rgb(255, 111, 0)",
+              "icon-medical": "rgb(9,132,219)",
+              "icon-pdf": "rgb(225, 5, 14)",
+              "icon-presentation": "rgb(255, 64, 6)",
+              "icon-spreadsheet": "rgb(0, 182, 87)",
+              "icon-video": "rgb(0, 187, 219)"
+            }
+          }
+        }
+      ]
+    }
+  },
+  "common": {
+    "logo": "themes/opencloud-dev/assets/logo.svg",
+    "name": "OpenCloud",
+    "shareRoles": {
+      "1c996275-f1c9-4e71-abdf-a42f6495e960": {
+        "iconName": "upload",
+        "label": "UnifiedRoleEditorLite"
+      },
+      "2d00ce52-1fc2-4dbc-8b95-a73b73395f5a": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleFileEditor"
+      },
+      "312c0871-5ef7-4b3a-85b6-0e4074c64049": {
+        "iconName": "user-star",
+        "label": "UnifiedRoleManager"
+      },
+      "3284f2d5-0070-4ad8-ac40-c247f7c1fb27": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleSpaceEditorWithoutVersions"
+      },
+      "58c63c02-1d89-4572-916a-870abc5a1b7d": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleSpaceEditor"
+      },
+      "63e64e19-8d43-42ec-a738-2b6af2610efa": {
+        "iconName": "stop-circle",
+        "label": "UnifiedRoleFullDenial"
+      },
+      "a8d5fe5e-96e3-418d-825b-534dbdf22b99": {
+        "iconName": "eye",
+        "label": "UnifiedRoleSpaceViewer"
+      },
+      "aa97fe03-7980-45ac-9e50-b325749fd7e6": {
+        "iconName": "shield",
+        "label": "UnifiedRoleSecureView"
+      },
+      "b1e2218d-eef8-4d4c-b82d-0f1a1b48f3b5": {
+        "iconName": "eye",
+        "name": "UnifiedRoleViewer"
+      },
+      "c1235aea-d106-42db-8458-7d5610fb0a67": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleFileEditorListGrants"
+      },
+      "d5041006-ebb3-4b4a-b6a4-7c180ecfb17d": {
+        "iconName": "eye",
+        "name": "UnifiedRoleViewerListGrants"
+      },
+      "e8ea8b21-abd4-45d2-b893-8d1546378e9e": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleEditorListGrants"
+      },
+      "fb6c3e19-e378-47e5-b277-9732f9de6e21": {
+        "iconName": "pencil",
+        "label": "UnifiedRoleEditor"
+      }
+    },
+    "slogan": "OpenCloud – Your friendly neighbourhood cloud",
+    "urls": {
+      "accessDeniedHelp": "",
+      "imprint": "",
+      "privacy": ""
+    }
+  }
+}
--- a/services/web/assets/themes/opencloud/theme.json
+++ b/services/web/assets/themes/opencloud/theme.json
@@ -93,6 +93,59 @@
          "isDark": false,
          "label": "Light Theme",
          "designTokens": {
+            "roles": {
+              "primary": "#07677F",
+              "surfaceTint": "#07677F",
+              "onPrimary": "#FFFFFF",
+              "primaryContainer": "#B7EAFF",
+              "onPrimaryContainer": "#001F28",
+              "secondary": "#20434f",
+              "onSecondary": "#FFFFFF",
+              "secondaryContainer": "#f4e5ff",
+              "onSecondaryContainer": "#071E26",
+              "tertiary": "#5A5C7E",
+              "onTertiary": "#FFFFFF",
+              "tertiaryContainer": "#E0E0FF",
+              "onTertiaryContainer": "#171937",
+              "error": "#BA1A1A",
+              "onError": "#FFFFFF",
+              "errorContainer": "#FFDAD6",
+              "onErrorContainer": "#410002",
+              "background": "#F5FAFD",
+              "onBackground": "#171C1F",
+              "surface": "#FFFFFF",
+              "onSurface": "#171C1F",
+              "surfaceVariant": "#DBE4E8",
+              "onSurfaceVariant": "#40484C",
+              "outline": "#70787C",
+              "outlineVariant": "#BFC8CC",
+              "shadow": "#000000",
+              "scrim": "#000000",
+              "inverseSurface": "#2C3134",
+              "inverseOnSurface": "#EDF1F4",
+              "inversePrimary": "#88D1EC",
+              "primaryFixed": "#B7EAFF",
+              "onPrimaryFixed": "#001F28",
+              "primaryFixedDim": "#88D1EC",
+              "onPrimaryFixedVariant": "#004E60",
+              "secondaryFixed": "#CFE6F1",
+              "onSecondaryFixed": "#071E26",
+              "secondaryFixedDim": "#B3CAD4",
+              "onSecondaryFixedVariant": "#344A52",
+              "tertiaryFixed": "#E0E0FF",
+              "onTertiaryFixed": "#171937",
+              "tertiaryFixedDim": "#C3C3EB",
+              "onTertiaryFixedVariant": "#424465",
+              "surfaceDim": "#D6DBDE",
+              "surfaceBright": "#F5FAFD",
+              "surfaceContainerLowest": "#FFFFFF",
+              "surfaceContainerLow": "#EFF4F7",
+              "surfaceContainer": "#F1F3F4",
+              "surfaceContainerHigh": "#E4E9EC",
+              "surfaceContainerHighest": "#DEE3E6",
+              "chrome": "#20434f",
+              "onChrome": "#ffffff"
+            },
            "colorPalette": {
              "background-accentuate": "rgba(255, 255, 5, 0.1)",
              "background-default": "#ffffff",
--- a/tests/acceptance/docker/src/acceptance.yml
+++ b/tests/acceptance/docker/src/acceptance.yml
@@ -1,10 +1,10 @@
 services:
  acceptance-tests:
    image: owncloudci/php:8.2
-    working_dir: /drone/src
+    working_dir: /woodpecker/src/github.com/opencloud-eu/opencloud
    command: /bin/bash /test/run-tests.sh
    environment:
-      OC_ROOT: /drone/src
+      OC_ROOT: /woodpecker/src/github.com/opencloud-eu/opencloud
      TEST_SERVER_URL: https://opencloud-server:9200
      OC_WRAPPER_URL: http://opencloud-server:5200
      STORAGE_DRIVER: $STORAGE_DRIVER
@@ -17,8 +17,8 @@ services:
      EMAIL_HOST: email
      EMAIL_PORT: 9000
    env_file:
-      - ../../../../.drone.env
+      - ../../../../.woodpecker.env
    volumes:
      - ./run-tests.sh:/test/run-tests.sh
-      - ../../../../:/drone/src
+      - ../../../../:/woodpecker/src/github.com/opencloud-eu/opencloud
      - ../../../../vendor-bin/behat/composer.json:/tmp/vendor-bin/behat/composer.json
--- a/tests/acceptance/docker/src/opencloud-base.yml
+++ b/tests/acceptance/docker/src/opencloud-base.yml
@@ -15,7 +15,7 @@ services:
      STORAGE_SYSTEM_DRIVER_OC_ROOT: /srv/app/tmp/opencloud/storage/metadata
      SHARING_USER_JSON_FILE: /srv/app/tmp/opencloud/shares.json
      PROXY_ENABLE_BASIC_AUTH: "true"
-      WEB_UI_CONFIG_FILE: /drone/src/tests/config/drone/opencloud-config.json
+      WEB_UI_CONFIG_FILE: /woodpecker/src/github.com/opencloud-eu/opencloud/tests/config/drone/opencloud-config.json
      ACCOUNTS_HASH_DIFFICULTY: 4
      OC_INSECURE: "true"
      IDM_CREATE_DEMO_USERS: "true"
@@ -52,11 +52,11 @@ services:
      SEARCH_EXTRACTOR_CS3SOURCE_INSECURE: "true"

      # fonts map for txt thumbnails (including unicode support)
-      THUMBNAILS_TXT_FONTMAP_FILE: "/drone/src/tests/config/drone/fontsMap.json"
+      THUMBNAILS_TXT_FONTMAP_FILE: "/woodpecker/src/github.com/opencloud-eu/opencloud/tests/config/drone/fontsMap.json"
    ports:
      - '9200:9200'
      - '5200:5200' ## ocwrapper
      - '9174:9174' ## notifications debug
    volumes:
-      - ../../../config:/drone/src/tests/config
+      - ../../../config:/woodpecker/src/github.com/opencloud-eu/opencloud/tests/config
      - ../../../ocwrapper/bin/ocwrapper:/usr/bin/ocwrapper
--- a/tests/acceptance/expected-failures-localAPI-on-decomposed-storage.md
+++ b/tests/acceptance/expected-failures-localAPI-on-decomposed-storage.md
@@ -196,10 +196,23 @@
 - [apiAntivirus/antivirus.feature:309](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L309)
 - [apiAntivirus/antivirus.feature:310](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L310)
 - [apiAntivirus/antivirus.feature:311](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L311)
+- [apiAntivirus/antivirus.feature:312](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L312)
+- [apiAntivirus/antivirus.feature:313](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L313)
+- [apiAntivirus/antivirus.feature:314](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L314)
+- [apiNotification/deprovisioningNotification.feature:126](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/deprovisioningNotification.feature#L126)
 - [apiNotification/deprovisioningNotification.feature:127](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/deprovisioningNotification.feature#L127)
+- [apiNotification/notification.feature:282](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/notification.feature#L282)
+- [apiNotification/notification.feature:283](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/notification.feature#L283)
 - [apiNotification/notification.feature:284](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/notification.feature#L284)
 - [apiNotification/notification.feature:285](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/notification.feature#L285)
+- [apiNotification/notification.feature:288](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/notification.feature#L288)
+- [apiNotification/spaceNotification.feature:434](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/spaceNotification.feature#L434)
 - [apiNotification/spaceNotification.feature:435](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/spaceNotification.feature#L435)
+- [apiNotification/emailNotification.feature:84](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/emailNotification.feature#L84)
+- [apiNotification/emailNotification.feature:117](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/emailNotification.feature#L117)
+- [apiNotification/emailNotification.feature:150](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/emailNotification.feature#L150)
+- [apiNotification/emailNotification.feature:205](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiNotification/emailNotification.feature#L205)
+- [apiActivities/activities.feature:2598](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiActivities/activities.feature#L2598)


 #### [Missing properties in REPORT response](https://github.com/owncloud/ocis/issues/9780), [d:getetag property has empty value in REPORT response](https://github.com/owncloud/ocis/issues/9783)
@@ -211,6 +224,27 @@
 - [apiSearch1/search.feature:466](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L466)
 - [apiSearch1/search.feature:467](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L467)

+#### [No notification triggered for .zip virus file](https://github.com/opencloud-eu/opencloud/issues/382)
+- [apiAntivirus/antivirus.feature:41](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L41)
+- [apiAntivirus/antivirus.feature:43](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L43)
+- [apiAntivirus/antivirus.feature:45](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L45)
+- [apiAntivirus/antivirus.feature:69](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L69)
+- [apiAntivirus/antivirus.feature:71](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L71)
+- [apiAntivirus/antivirus.feature:73](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L73)
+- [apiAntivirus/antivirus.feature:115](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L115)
+- [apiAntivirus/antivirus.feature:117](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L117)
+- [apiAntivirus/antivirus.feature:119](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L119)
+- [apiAntivirus/antivirus.feature:141](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L141)
+- [apiAntivirus/antivirus.feature:143](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L143)
+- [apiAntivirus/antivirus.feature:145](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L145)
+- [apiAntivirus/antivirus.feature:169](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L169)
+- [apiAntivirus/antivirus.feature:171](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L171)
+- [apiAntivirus/antivirus.feature:173](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L173)
+- [apiAntivirus/antivirus.feature:199](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L199)
+- [apiAntivirus/antivirus.feature:201](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L201)
+- [apiAntivirus/antivirus.feature:203](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L203)
+- [apiAntivirus/antivirus.feature:228](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L228)
+- [apiAntivirus/antivirus.feature:253](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L253)

 Note: always have an empty line at the end of this file.
 The bash script that processes this file requires that the last line has a newline on the end.
--- a/tests/acceptance/expected-failures-without-remotephp.md
+++ b/tests/acceptance/expected-failures-without-remotephp.md
@@ -36,14 +36,9 @@
 - [apiSearch1/search.feature:321](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L321)
 - [apiSearch1/search.feature:324](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L324)
 - [apiSearch1/search.feature:356](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L356)
+- [apiSearch1/search.feature:369](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L369)
 - [apiSearch1/search.feature:396](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L396)
 - [apiSearch1/search.feature:410](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L410)
- [apiSearch1/search.feature:437](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L437)
- [apiSearch1/search.feature:438](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L438)
- [apiSearch1/search.feature:439](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L439)
- [apiSearch1/search.feature:465](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L465)
- [apiSearch1/search.feature:466](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L466)
- [apiSearch1/search.feature:467](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch1/search.feature#L467)
 - [apiSearch2/mediaTypeSearch.feature:31](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch2/mediaTypeSearch.feature#L31)
 - [apiSearch2/mediaTypeSearch.feature:32](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch2/mediaTypeSearch.feature#L32)
 - [apiSearch2/mediaTypeSearch.feature:33](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSearch2/mediaTypeSearch.feature#L33)
@@ -154,7 +149,7 @@
 - [apiSpacesShares/shareSubItemOfSpaceViaPublicLink.feature:147](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpacesShares/shareSubItemOfSpaceViaPublicLink.feature#L147)
 - [apiSharingNgLinkSharePermission/createLinkShare.feature:473](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkSharePermission/createLinkShare.feature#L473)
 - [apiSharingNgLinkSharePermission/createLinkShare.feature:1208](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkSharePermission/createLinkShare.feature#L1208)
- [apiSharingNgLinkSharePermission/updateLinkShare.feature:203](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkSharePermission/updateLinkShare.feature#L203)
+- [apiSharingNgLinkSharePermission/updateLinkShare.feature:204](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkSharePermission/updateLinkShare.feature#L204)
 - [apiSharingNgLinkSharePermission/updateLinkShare.feature:282](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkSharePermission/updateLinkShare.feature#L282)
 - [apiSharingNgLinkShareRoot/updateLinkShare.feature:10](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkShareRoot/updateLinkShare.feature#L10)
 - [apiSharingNgLinkShareRoot/updateLinkShare.feature:42](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSharingNgLinkShareRoot/updateLinkShare.feature#L42)
@@ -193,7 +188,7 @@
 - [apiSpaces/uploadSpaces.feature:95](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpaces/uploadSpaces.feature#L95)
 - [apiSpaces/uploadSpaces.feature:112](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpaces/uploadSpaces.feature#L112)
 - [apiSpaces/uploadSpaces.feature:129](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpaces/uploadSpaces.feature#L129)
- [apiSpacesShares/shareSpacesViaLink.feature:61](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpacesShares/shareSpacesViaLink.feature#L61)
+- [apiSpacesShares/shareSpacesViaLink.feature:58](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiSpacesShares/shareSpacesViaLink.feature#L58)
 - [apiDepthInfinity/propfind.feature:74](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiDepthInfinity/propfind.feature#L74)
 - [apiDepthInfinity/propfind.feature:124](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiDepthInfinity/propfind.feature#L124)
 - [apiLocks/lockFiles.feature:490](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiLocks/lockFiles.feature#L490)
@@ -208,20 +203,12 @@
 - [apiLocks/unlockFiles.feature:321](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiLocks/unlockFiles.feature#L321)
 - [apiLocks/unlockFiles.feature:322](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiLocks/unlockFiles.feature#L322)
 - [apiLocks/unlockFiles.feature:323](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiLocks/unlockFiles.feature#L323)
- [apiActivities/shareActivities.feature:1956](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiActivities/shareActivities.feature#L1956)
- [apiActivities/shareActivities.feature:2095](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiActivities/shareActivities.feature#L2095)
 - [apiAntivirus/antivirus.feature:114](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L114)
- [apiAntivirus/antivirus.feature:115](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L115)
 - [apiAntivirus/antivirus.feature:116](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L116)
- [apiAntivirus/antivirus.feature:117](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L117)
 - [apiAntivirus/antivirus.feature:118](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L118)
- [apiAntivirus/antivirus.feature:119](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L119)
 - [apiAntivirus/antivirus.feature:140](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L140)
- [apiAntivirus/antivirus.feature:141](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L141)
 - [apiAntivirus/antivirus.feature:142](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L142)
- [apiAntivirus/antivirus.feature:143](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L143)
 - [apiAntivirus/antivirus.feature:144](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L144)
- [apiAntivirus/antivirus.feature:145](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L145)
 - [apiAntivirus/antivirus.feature:356](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L356)
 - [apiAntivirus/antivirus.feature:357](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L357)
 - [apiAntivirus/antivirus.feature:358](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiAntivirus/antivirus.feature#L358)
@@ -312,6 +299,8 @@
 - [coreApiWebdavOperations/propfind.feature:55](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavOperations/propfind.feature#L55)
 - [coreApiWebdavOperations/propfind.feature:69](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavOperations/propfind.feature#L69)
 - [coreApiWebdavUpload/uploadFile.feature:376](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUpload/uploadFile.feature#L376)
+- [apiActivities/shareActivities.feature:1956](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiActivities/shareActivities.feature#L1956)
+- [apiActivities/shareActivities.feature:2095](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/apiActivities/shareActivities.feature#L2095)

 #### [Cannot create new TUS upload resource using /webdav without remote.php - returns html instead](https://github.com/owncloud/ocis/issues/10346)

--- a/tests/acceptance/features/apiActivities/activities.feature
+++ b/tests/acceptance/features/apiActivities/activities.feature
@@ -2594,7 +2594,7 @@ Feature: check activities
      }
      """

-  @issue-9856 @issue-10127
+  @issue-9856 @issue-10127 @issue-369
  Scenario: check activity message with different language
    Given user "Alice" has uploaded file with content "OpenCloud test text file" to "textfile.txt"
    And user "Alice" has switched the system language to "de" using the Graph API
--- a/tests/acceptance/features/apiActivities/shareActivities.feature
+++ b/tests/acceptance/features/apiActivities/shareActivities.feature
@@ -737,7 +737,7 @@ Feature: check share activity
                              "required": ["id","name"],
                              "properties": {
                                "name": {
-                                  "const": "Alice Hansen"
+                                  "const": "FOLDER"
                                }
                              }
                            },
@@ -2357,7 +2357,7 @@ Feature: check share activity
                              "required": ["id","name"],
                              "properties": {
                                "name": {
-                                  "const": "Alice Hansen"
+                                  "const": "FOLDER"
                                }
                              }
                            },
--- a/tests/acceptance/features/apiAntivirus/antivirus.feature
+++ b/tests/acceptance/features/apiAntivirus/antivirus.feature
@@ -33,7 +33,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Alice" file "<new-file-name>" should not exist
    Examples:
      | dav-path-version | file-name     | new-file-name  |
@@ -54,7 +54,7 @@ Feature: antivirus
    And the HTTP status code should be "201"
    And user "Alice" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Alice" file "<new-file-name>" should not exist
    But as "Alice" file "/normalfile.txt" should exist
    And the content of file "/normalfile.txt" for user "Alice" should be:
@@ -107,7 +107,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Alice" file "/uploadFolder/<new-file-name>" should not exist
    Examples:
      | dav-path-version | file-name     | new-file-name  |
@@ -133,7 +133,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Alice" file "/uploadFolder/<new-file-name>" should not exist
    Examples:
      | dav-path-version | file-name     | new-file-name  |
@@ -160,7 +160,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Brian" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Brian" file "/Shares/uploadFolder/<new-file-name>" should not exist
    And as "Alice" file "/uploadFolder/<new-file-name>" should not exist
    Examples:
@@ -190,7 +190,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Brian" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And as "Brian" file "/Shares/uploadFolder/<new-file-name>" should not exist
    And as "Alice" file "/uploadFolder/<new-file-name>" should not exist
    Examples:
@@ -212,14 +212,14 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification for resource "<new-file-name>" with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And for user "Alice" folder "uploadFolder" of the space "new-space" should not contain these entries:
      | <new-file-name> |
    When user "Alice" uploads a file "filesForUpload/filesWithVirus/<file-name>" to "/<new-file-name>" in space "new-space" using the WebDAV API
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification for resource "<new-file-name>" with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And for user "Alice" the space "new-space" should not contain these entries:
      | /<new-file-name> |
    Examples:
@@ -242,7 +242,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Brian" should get a notification with subject "Virus found" and message:
      | message                                                                          |
-      | Virus found in <new-file-name>. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in <new-file-name>. Upload not possible. Virus: Eicar-Signature |
    And for user "Brian" the space "new-space" should not contain these entries:
      | /<new-file-name> |
    And for user "Alice" the space "new-space" should not contain these entries:
@@ -273,7 +273,7 @@ Feature: antivirus
    Then the HTTP status code should be "201"
    And user "Alice" should get a notification with subject "Virus found" and message:
      | message                                                                             |
-      | Virus found in aFileWithVirus.txt. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | Virus found in aFileWithVirus.txt. Upload not possible. Virus: Eicar-Signature |
    And as "Alice" file "/aFileWithVirus.txt" should not exist
    Examples:
      | dav-path-version |
@@ -294,7 +294,7 @@ Feature: antivirus
      | new              |
      | spaces           |

-  @issue-enterprise-5706 @issue-183
+  @issue-enterprise-5706 @issue-183 @issue-369
  Scenario Outline: upload a file with virus and get notification in different languages
    Given user "Alice" has switched the system language to "<language>" using the Graph API
    And using <dav-path-version> DAV path
@@ -305,13 +305,13 @@ Feature: antivirus
      | <message> |
    And as "Alice" file "/aFileWithVirus.txt" should not exist
    Examples:
-      | dav-path-version | language | subject          | message                                                                                                                        |
-      | old              | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Virus: Win.Test.EICAR_HDB-1                              |
-      | new              | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Virus: Win.Test.EICAR_HDB-1                              |
-      | spaces           | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Virus: Win.Test.EICAR_HDB-1                              |
-      | old              | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Win.Test.EICAR_HDB-1 |
-      | new              | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Win.Test.EICAR_HDB-1 |
-      | spaces           | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Win.Test.EICAR_HDB-1 |
+      | dav-path-version | language | subject          | message                                                                                                                   |
+      | old              | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Virus: Eicar-Signature                              |
+      | new              | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Virus: Eicar-Signature                              |
+      | spaces           | es       | Virus encontrado | Virus encontrado en aFileWithVirus.txt. La subida no ha sido posible. Eicar-Signature                                     |
+      | old              | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Eicar-Signature |
+      | new              | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Eicar-Signature |
+      | spaces           | de       | Virus gefunden   | In aFileWithVirus.txt wurde potenziell schädlicher Code gefunden. Das Hochladen wurde abgebrochen. Grund: Eicar-Signature |

  @issue-enterprise-5709
  Scenario Outline: try to create a version of file by uploading virus content
@@ -477,7 +477,7 @@ Feature: antivirus
    When user "Brian" uploads a file "filesForUpload/filesWithVirus/eicar.com" to "text.txt" in space "new-space" using the WebDAV API
    Then the HTTP status code should be "204"
    And user "Brian" should get a notification with subject "Virus found" and message:
-      | message                                                                   |
-      | Virus found in text.txt. Upload not possible. Virus: Win.Test.EICAR_HDB-1 |
+      | message                                                              |
+      | Virus found in text.txt. Upload not possible. Virus: Eicar-Signature |
    And for user "Brian" the content of the file "/text.txt" of the space "new-space" should be "hello world"
    And for user "Alice" the content of the file "/text.txt" of the space "new-space" should be "hello world"
--- a/tests/acceptance/features/apiGraph/enforcePasswordPublicLink.feature
+++ b/tests/acceptance/features/apiGraph/enforcePasswordPublicLink.feature
@@ -256,7 +256,7 @@ Feature: enforce password on public link


  Scenario Outline: update a public link with a password that is listed in the Banned-Password-List
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using OCS API version "2"
    And user "Alice" has been created with default attributes
    And user "Alice" has uploaded file with content "test file" to "/testfile.txt"
@@ -272,14 +272,14 @@ Feature: enforce password on public link
    And the OCS status code should be "<ocs-status-code>"
    And the OCS status message should be "<message>"
    Examples:
-      | password | http-status-code | ocs-status-code | message                                                                                               |
-      | 123      | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
-      | password | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
+      | password  | http-status-code | ocs-status-code | message                                                                                               |
+      | 123       | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
+      | password  | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
      | OpenCloud | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |


  Scenario Outline: create  a public link with a password that is listed in the Banned-Password-List
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using OCS API version "2"
    And user "Alice" has been created with default attributes
    And user "Alice" has uploaded file with content "test file" to "/testfile.txt"
@@ -291,7 +291,7 @@ Feature: enforce password on public link
    And the OCS status code should be "<ocs-status-code>"
    And the OCS status message should be "<message>"
    Examples:
-      | password | http-status-code | ocs-status-code | message                                                                                               |
-      | 123      | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
-      | password | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
+      | password  | http-status-code | ocs-status-code | message                                                                                               |
+      | 123       | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
+      | password  | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
      | OpenCloud | 400              | 400             | Unfortunately, your password is commonly used. please pick a harder-to-guess password for your safety |
--- a/tests/acceptance/features/apiSharingNgLinkSharePermission/createLinkShare.feature
+++ b/tests/acceptance/features/apiSharingNgLinkSharePermission/createLinkShare.feature
@@ -502,7 +502,7 @@ Feature: Create a link share for a resource


  Scenario Outline: create a file's link share with a password that is listed in the Banned-Password-List using permissions endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And user "Alice" has uploaded file with content "other data" to "text.txt"
    When user "Alice" creates the following resource link share using the Graph API:
      | resource        | text.txt          |
@@ -757,7 +757,7 @@ Feature: Create a link share for a resource


  Scenario Outline: create a link share of a folder inside project-space with a password that is listed in the Banned-Password-List using permissions endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using spaces DAV path
    And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API
    And user "Alice" has created a space "projectSpace" with the default quota using the Graph API
@@ -799,16 +799,16 @@ Feature: Create a link share for a resource
      | banned-password | permissions-role |
      | 123             | view             |
      | password        | view             |
-      | OpenCloud        | view             |
+      | OpenCloud       | view             |
      | 123             | edit             |
      | password        | edit             |
-      | OpenCloud        | edit             |
+      | OpenCloud       | edit             |
      | 123             | upload           |
      | password        | upload           |
-      | OpenCloud        | upload           |
+      | OpenCloud       | upload           |
      | 123             | createOnly       |
      | password        | createOnly       |
-      | OpenCloud        | createOnly       |
+      | OpenCloud       | createOnly       |

  @env-config @issue-7879
  Scenario Outline: create a link share of a file inside project-space without password using permissions endpoint
@@ -1157,7 +1157,7 @@ Feature: Create a link share for a resource


  Scenario Outline: create a link share of a file inside project-space with a password that is listed in the Banned-Password-List using permissions endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using spaces DAV path
    And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API
    And user "Alice" has created a space "projectSpace" with the default quota using the Graph API
@@ -1199,10 +1199,10 @@ Feature: Create a link share for a resource
      | banned-password | permissions-role |
      | 123             | view             |
      | password        | view             |
-      | OpenCloud        | view             |
+      | OpenCloud       | view             |
      | 123             | edit             |
      | password        | edit             |
-      | OpenCloud        | edit             |
+      | OpenCloud       | edit             |

  @env-config @issue-9724 @issue-10331
  Scenario: set password on a existing link share of a file inside project-space using permissions endpoint
@@ -1612,7 +1612,7 @@ Feature: Create a link share for a resource


  Scenario Outline: try to create a link share of a project-space with a password that is listed in the Banned-Password-List using permissions endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using spaces DAV path
    And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API
    And user "Alice" has created a space "projectSpace" with the default quota using the Graph API
--- a/tests/acceptance/features/apiSharingNgLinkSharePermission/updateLinkShare.feature
+++ b/tests/acceptance/features/apiSharingNgLinkSharePermission/updateLinkShare.feature
@@ -232,7 +232,7 @@ Feature: Update a link share for a resource


  Scenario Outline: update a file's link share with a password that is listed in the Banned-Password-List using permissions endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And user "Alice" has uploaded file with content "other data" to "text.txt"
    And user "Alice" has created the following resource link share:
      | resource        | text.txt |
@@ -276,7 +276,7 @@ Feature: Update a link share for a resource
      | banned-password |
      | 123             |
      | password        |
-      | OpenCloud        |
+      | OpenCloud       |

  @env-config @issue-9724 @issue-10331
  Scenario: set password on a existing link share of a folder inside project-space using permissions endpoint
--- a/tests/acceptance/features/apiSharingNgLinkShareRoot/createLinkShare.feature
+++ b/tests/acceptance/features/apiSharingNgLinkShareRoot/createLinkShare.feature
@@ -349,7 +349,7 @@ Feature: Create a link share for a resource

  @issue-7879 @skip-local-run
  Scenario Outline: try to create a link share of a project-space drive with a password that is listed in the Banned-Password-List using root endpoint
-    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/drone/banned-password-list.txt"
+    Given the config "OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST" has been set to path "config/woodpecker/banned-password-list.txt"
    And using spaces DAV path
    And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API
    And user "Alice" has created a space "projectSpace" with the default quota using the Graph API
@@ -389,21 +389,21 @@ Feature: Create a link share for a resource
      | banned-password | permissions-role |
      | 123             | view             |
      | password        | view             |
-      | OpenCloud        | view             |
+      | OpenCloud       | view             |
      | 123             | edit             |
      | password        | edit             |
-      | OpenCloud        | edit             |
+      | OpenCloud       | edit             |
      | 123             | upload           |
      | password        | upload           |
-      | OpenCloud        | upload           |
+      | OpenCloud       | upload           |
      | 123             | createOnly       |
      | password        | createOnly       |
-      | OpenCloud        | createOnly       |
+      | OpenCloud       | createOnly       |

  @env-config @issue-7879
  Scenario Outline: create a link share of a project-space drive without password using root endpoint
    Given the following configs have been set:
-      | config                                       | value |
+      | config                                     | value |
      | OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD | false |
    And using spaces DAV path
    And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API
--- a/tests/acceptance/filesForUpload/filesWithVirus/eicar.com
+++ b/tests/acceptance/filesForUpload/filesWithVirus/eicar.com
@@ -0,0 +1 @@
+X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
--- a/tests/config/woodpecker/check_go_bin_cache.sh
+++ b/tests/config/woodpecker/check_go_bin_cache.sh
@@ -15,13 +15,17 @@ BINGO_DIR="$ROOT_PATH/.bingo"
 BINGO_HASH=$(cat "$BINGO_DIR"/* | sha256sum | cut -d ' ' -f 1)

 URL="$CACHE_ENDPOINT/$CACHE_BUCKET/opencloud/go-bin/$BINGO_HASH/$2"
-if curl --output /dev/null --silent --head --fail "$URL"; then
+
+mc alias set s3 "$MC_HOST" "$AWS_ACCESS_KEY_ID" "$AWS_SECRET_ACCESS_KEY"
+
+if mc ls --json s3/"$CACHE_BUCKET"/opencloud/go-bin/"$BINGO_HASH"/$2 | grep "\"status\":\"success\""; then
    echo "[INFO] Go bin cache with has '$BINGO_HASH' exists."
-    # https://discourse.drone.io/t/how-to-exit-a-pipeline-early-without-failing/3951
-    # exit a Pipeline early without failing
-    exit 78
+    ENV="BIN_CACHE_FOUND=true\n"
 else
    # stored hash of a .bingo folder to '.bingo_hash' file
    echo "$BINGO_HASH" >"$ROOT_PATH/.bingo_hash"
    echo "[INFO] Go bin cache with has '$BINGO_HASH' does not exist."
+    ENV="BIN_CACHE_FOUND=false\n"
 fi
+
+echo -e $ENV >> .env
--- a/tests/config/woodpecker/check_web_cache.sh
+++ b/tests/config/woodpecker/check_web_cache.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-source .drone.env
+source .woodpecker.env

 # if no $1 is supplied end the script
 # Can be web, acceptance or e2e
@@ -10,16 +10,15 @@ fi

 echo "Checking web version - $WEB_COMMITID in cache"

-URL="$CACHE_ENDPOINT/$CACHE_BUCKET/opencloud/web-test-runner/$WEB_COMMITID/$1.tar.gz"
+mc alias set s3 "$MC_HOST" "$AWS_ACCESS_KEY_ID" "$AWS_SECRET_ACCESS_KEY"

-echo "Checking for the web cache at '$URL'."
-
-if curl --output /dev/null --silent --head --fail "$URL"
+if mc ls --json s3/"$CACHE_BUCKET"/opencloud/web-test-runner/"$WEB_COMMITID"/"$1".tar.gz | grep "\"status\":\"success\"";
 then
 	echo "$1 cache with commit id $WEB_COMMITID already available."
-	# https://discourse.drone.io/t/how-to-exit-a-pipeline-early-without-failing/3951
-	# exit a Pipeline early without failing
-	exit 78
+	ENV="WEB_CACHE_FOUND=true\n"
 else
 	echo "$1 cache with commit id $WEB_COMMITID was not available."
+	ENV="WEB_CACHE_FOUND=false\n"
 fi
+
+echo -e $ENV >> .woodpecker.env
--- a/tests/config/woodpecker/fontsMap.json
+++ b/tests/config/woodpecker/fontsMap.json
@@ -1,3 +1,3 @@
 {
-  "defaultFont": "/drone/src/tests/config/drone/NotoSans.ttf"
+  "defaultFont": "/woodpecker/src/github.com/opencloud-eu/opencloud/tests/config/woodpecker/NotoSans.ttf"
 }
--- a/vendor/github.com/OneOfOne/xxhash/.gitignore
+++ b/vendor/github.com/OneOfOne/xxhash/.gitignore
@@ -1,4 +0,0 @@
-*.txt
-*.pprof
-cmap2/
-cache/
--- a/vendor/github.com/OneOfOne/xxhash/.travis.yml
+++ b/vendor/github.com/OneOfOne/xxhash/.travis.yml
@@ -1,13 +0,0 @@
-language: go
-sudo: false
-
-go:
-  - "1.10"
-  - "1.11"
-  - "1.12"
-  - master
-
-script:
-  - go test -tags safe ./...
-  - go test ./...
-  -
--- a/vendor/github.com/OneOfOne/xxhash/LICENSE
+++ b/vendor/github.com/OneOfOne/xxhash/LICENSE
@@ -1,187 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
--- a/vendor/github.com/OneOfOne/xxhash/README.md
+++ b/vendor/github.com/OneOfOne/xxhash/README.md
@@ -1,74 +0,0 @@
-# xxhash [![GoDoc](https://godoc.org/github.com/OneOfOne/xxhash?status.svg)](https://godoc.org/github.com/OneOfOne/xxhash) [![Build Status](https://travis-ci.org/OneOfOne/xxhash.svg?branch=master)](https://travis-ci.org/OneOfOne/xxhash) [![Coverage](https://gocover.io/_badge/github.com/OneOfOne/xxhash)](https://gocover.io/github.com/OneOfOne/xxhash)
-
-This is a native Go implementation of the excellent [xxhash](https://github.com/Cyan4973/xxHash)* algorithm, an extremely fast non-cryptographic Hash algorithm, working at speeds close to RAM limits.
-
-* The C implementation is ([Copyright](https://github.com/Cyan4973/xxHash/blob/master/LICENSE) (c) 2012-2014, Yann Collet)
-
-## Install
-
-    go get github.com/OneOfOne/xxhash
-
-## Features
-
-* On Go 1.7+ the pure go version is faster than CGO for all inputs.
-* Supports ChecksumString{32,64} xxhash{32,64}.WriteString, which uses no copies when it can, falls back to copy on appengine.
-* The native version falls back to a less optimized version on appengine due to the lack of unsafe.
-* Almost as fast as the mostly pure assembly version written by the brilliant [cespare](https://github.com/cespare/xxhash), while also supporting seeds.
-* To manually toggle the appengine version build with `-tags safe`.
-
-## Benchmark
-
-### Core i7-4790 @ 3.60GHz, Linux 4.12.6-1-ARCH (64bit), Go tip (+ff90f4af66 2017-08-19)
-
-```bash
-➤ go test -bench '64' -count 5 -tags cespare | benchstat /dev/stdin
-name                          time/op
-
-# https://github.com/cespare/xxhash
-XXSum64Cespare/Func-8          160ns ± 2%
-XXSum64Cespare/Struct-8        173ns ± 1%
-XXSum64ShortCespare/Func-8    6.78ns ± 1%
-XXSum64ShortCespare/Struct-8  19.6ns ± 2%
-
-# this package (default mode, using unsafe)
-XXSum64/Func-8                 170ns ± 1%
-XXSum64/Struct-8               182ns ± 1%
-XXSum64Short/Func-8           13.5ns ± 3%
-XXSum64Short/Struct-8         20.4ns ± 0%
-
-# this package (appengine, *not* using unsafe)
-XXSum64/Func-8                 241ns ± 5%
-XXSum64/Struct-8               243ns ± 6%
-XXSum64Short/Func-8           15.2ns ± 2%
-XXSum64Short/Struct-8         23.7ns ± 5%
-
-CRC64ISO-8                    1.23µs ± 1%
-CRC64ISOString-8              2.71µs ± 4%
-CRC64ISOShort-8               22.2ns ± 3%
-
-Fnv64-8                       2.34µs ± 1%
-Fnv64Short-8                  74.7ns ± 8%
-```
-
-## Usage
-
-```go
-	h := xxhash.New64()
-	// r, err := os.Open("......")
-	// defer f.Close()
-	r := strings.NewReader(F)
-	io.Copy(h, r)
-	fmt.Println("xxhash.Backend:", xxhash.Backend)
-	fmt.Println("File checksum:", h.Sum64())
-```
-
-[<kbd>playground</kbd>](https://play.golang.org/p/wHKBwfu6CPV)
-
-## TODO
-
-* Rewrite the 32bit version to be more optimized.
-* General cleanup as the Go inliner gets smarter.
-
-## License
-
-This project is released under the Apache v2. license. See [LICENSE](LICENSE) for more details.
--- a/vendor/github.com/OneOfOne/xxhash/xxhash.go
+++ b/vendor/github.com/OneOfOne/xxhash/xxhash.go
@@ -1,294 +0,0 @@
-package xxhash
-
-import (
-	"encoding/binary"
-	"errors"
-	"hash"
-)
-
-const (
-	prime32x1 uint32 = 2654435761
-	prime32x2 uint32 = 2246822519
-	prime32x3 uint32 = 3266489917
-	prime32x4 uint32 = 668265263
-	prime32x5 uint32 = 374761393
-
-	prime64x1 uint64 = 11400714785074694791
-	prime64x2 uint64 = 14029467366897019727
-	prime64x3 uint64 = 1609587929392839161
-	prime64x4 uint64 = 9650029242287828579
-	prime64x5 uint64 = 2870177450012600261
-
-	maxInt32 int32 = (1<<31 - 1)
-
-	// precomputed zero Vs for seed 0
-	zero64x1 = 0x60ea27eeadc0b5d6
-	zero64x2 = 0xc2b2ae3d27d4eb4f
-	zero64x3 = 0x0
-	zero64x4 = 0x61c8864e7a143579
-)
-
-const (
-	magic32         = "xxh\x07"
-	magic64         = "xxh\x08"
-	marshaled32Size = len(magic32) + 4*7 + 16
-	marshaled64Size = len(magic64) + 8*6 + 32 + 1
-)
-
-func NewHash32() hash.Hash { return New32() }
-func NewHash64() hash.Hash { return New64() }
-
-// Checksum32 returns the checksum of the input data with the seed set to 0.
-func Checksum32(in []byte) uint32 {
-	return Checksum32S(in, 0)
-}
-
-// ChecksumString32 returns the checksum of the input data, without creating a copy, with the seed set to 0.
-func ChecksumString32(s string) uint32 {
-	return ChecksumString32S(s, 0)
-}
-
-type XXHash32 struct {
-	mem            [16]byte
-	ln, memIdx     int32
-	v1, v2, v3, v4 uint32
-	seed           uint32
-}
-
-// Size returns the number of bytes Sum will return.
-func (xx *XXHash32) Size() int {
-	return 4
-}
-
-// BlockSize returns the hash's underlying block size.
-// The Write method must be able to accept any amount
-// of data, but it may operate more efficiently if all writes
-// are a multiple of the block size.
-func (xx *XXHash32) BlockSize() int {
-	return 16
-}
-
-// NewS32 creates a new hash.Hash32 computing the 32bit xxHash checksum starting with the specific seed.
-func NewS32(seed uint32) (xx *XXHash32) {
-	xx = &XXHash32{
-		seed: seed,
-	}
-	xx.Reset()
-	return
-}
-
-// New32 creates a new hash.Hash32 computing the 32bit xxHash checksum starting with the seed set to 0.
-func New32() *XXHash32 {
-	return NewS32(0)
-}
-
-func (xx *XXHash32) Reset() {
-	xx.v1 = xx.seed + prime32x1 + prime32x2
-	xx.v2 = xx.seed + prime32x2
-	xx.v3 = xx.seed
-	xx.v4 = xx.seed - prime32x1
-	xx.ln, xx.memIdx = 0, 0
-}
-
-// Sum appends the current hash to b and returns the resulting slice.
-// It does not change the underlying hash state.
-func (xx *XXHash32) Sum(in []byte) []byte {
-	s := xx.Sum32()
-	return append(in, byte(s>>24), byte(s>>16), byte(s>>8), byte(s))
-}
-
-// MarshalBinary implements the encoding.BinaryMarshaler interface.
-func (xx *XXHash32) MarshalBinary() ([]byte, error) {
-	b := make([]byte, 0, marshaled32Size)
-	b = append(b, magic32...)
-	b = appendUint32(b, xx.v1)
-	b = appendUint32(b, xx.v2)
-	b = appendUint32(b, xx.v3)
-	b = appendUint32(b, xx.v4)
-	b = appendUint32(b, xx.seed)
-	b = appendInt32(b, xx.ln)
-	b = appendInt32(b, xx.memIdx)
-	b = append(b, xx.mem[:]...)
-	return b, nil
-}
-
-// UnmarshalBinary implements the encoding.BinaryUnmarshaler interface.
-func (xx *XXHash32) UnmarshalBinary(b []byte) error {
-	if len(b) < len(magic32) || string(b[:len(magic32)]) != magic32 {
-		return errors.New("xxhash: invalid hash state identifier")
-	}
-	if len(b) != marshaled32Size {
-		return errors.New("xxhash: invalid hash state size")
-	}
-	b = b[len(magic32):]
-	b, xx.v1 = consumeUint32(b)
-	b, xx.v2 = consumeUint32(b)
-	b, xx.v3 = consumeUint32(b)
-	b, xx.v4 = consumeUint32(b)
-	b, xx.seed = consumeUint32(b)
-	b, xx.ln = consumeInt32(b)
-	b, xx.memIdx = consumeInt32(b)
-	copy(xx.mem[:], b)
-	return nil
-}
-
-// Checksum64 an alias for Checksum64S(in, 0)
-func Checksum64(in []byte) uint64 {
-	return Checksum64S(in, 0)
-}
-
-// ChecksumString64 returns the checksum of the input data, without creating a copy, with the seed set to 0.
-func ChecksumString64(s string) uint64 {
-	return ChecksumString64S(s, 0)
-}
-
-type XXHash64 struct {
-	v1, v2, v3, v4 uint64
-	seed           uint64
-	ln             uint64
-	mem            [32]byte
-	memIdx         int8
-}
-
-// Size returns the number of bytes Sum will return.
-func (xx *XXHash64) Size() int {
-	return 8
-}
-
-// BlockSize returns the hash's underlying block size.
-// The Write method must be able to accept any amount
-// of data, but it may operate more efficiently if all writes
-// are a multiple of the block size.
-func (xx *XXHash64) BlockSize() int {
-	return 32
-}
-
-// NewS64 creates a new hash.Hash64 computing the 64bit xxHash checksum starting with the specific seed.
-func NewS64(seed uint64) (xx *XXHash64) {
-	xx = &XXHash64{
-		seed: seed,
-	}
-	xx.Reset()
-	return
-}
-
-// New64 creates a new hash.Hash64 computing the 64bit xxHash checksum starting with the seed set to 0x0.
-func New64() *XXHash64 {
-	return NewS64(0)
-}
-
-func (xx *XXHash64) Reset() {
-	xx.ln, xx.memIdx = 0, 0
-	xx.v1, xx.v2, xx.v3, xx.v4 = resetVs64(xx.seed)
-}
-
-// Sum appends the current hash to b and returns the resulting slice.
-// It does not change the underlying hash state.
-func (xx *XXHash64) Sum(in []byte) []byte {
-	s := xx.Sum64()
-	return append(in, byte(s>>56), byte(s>>48), byte(s>>40), byte(s>>32), byte(s>>24), byte(s>>16), byte(s>>8), byte(s))
-}
-
-// MarshalBinary implements the encoding.BinaryMarshaler interface.
-func (xx *XXHash64) MarshalBinary() ([]byte, error) {
-	b := make([]byte, 0, marshaled64Size)
-	b = append(b, magic64...)
-	b = appendUint64(b, xx.v1)
-	b = appendUint64(b, xx.v2)
-	b = appendUint64(b, xx.v3)
-	b = appendUint64(b, xx.v4)
-	b = appendUint64(b, xx.seed)
-	b = appendUint64(b, xx.ln)
-	b = append(b, byte(xx.memIdx))
-	b = append(b, xx.mem[:]...)
-	return b, nil
-}
-
-// UnmarshalBinary implements the encoding.BinaryUnmarshaler interface.
-func (xx *XXHash64) UnmarshalBinary(b []byte) error {
-	if len(b) < len(magic64) || string(b[:len(magic64)]) != magic64 {
-		return errors.New("xxhash: invalid hash state identifier")
-	}
-	if len(b) != marshaled64Size {
-		return errors.New("xxhash: invalid hash state size")
-	}
-	b = b[len(magic64):]
-	b, xx.v1 = consumeUint64(b)
-	b, xx.v2 = consumeUint64(b)
-	b, xx.v3 = consumeUint64(b)
-	b, xx.v4 = consumeUint64(b)
-	b, xx.seed = consumeUint64(b)
-	b, xx.ln = consumeUint64(b)
-	xx.memIdx = int8(b[0])
-	b = b[1:]
-	copy(xx.mem[:], b)
-	return nil
-}
-
-func appendInt32(b []byte, x int32) []byte { return appendUint32(b, uint32(x)) }
-
-func appendUint32(b []byte, x uint32) []byte {
-	var a [4]byte
-	binary.LittleEndian.PutUint32(a[:], x)
-	return append(b, a[:]...)
-}
-
-func appendUint64(b []byte, x uint64) []byte {
-	var a [8]byte
-	binary.LittleEndian.PutUint64(a[:], x)
-	return append(b, a[:]...)
-}
-
-func consumeInt32(b []byte) ([]byte, int32)   { bn, x := consumeUint32(b); return bn, int32(x) }
-func consumeUint32(b []byte) ([]byte, uint32) { x := u32(b); return b[4:], x }
-func consumeUint64(b []byte) ([]byte, uint64) { x := u64(b); return b[8:], x }
-
-// force the compiler to use ROTL instructions
-
-func rotl32_1(x uint32) uint32  { return (x << 1) | (x >> (32 - 1)) }
-func rotl32_7(x uint32) uint32  { return (x << 7) | (x >> (32 - 7)) }
-func rotl32_11(x uint32) uint32 { return (x << 11) | (x >> (32 - 11)) }
-func rotl32_12(x uint32) uint32 { return (x << 12) | (x >> (32 - 12)) }
-func rotl32_13(x uint32) uint32 { return (x << 13) | (x >> (32 - 13)) }
-func rotl32_17(x uint32) uint32 { return (x << 17) | (x >> (32 - 17)) }
-func rotl32_18(x uint32) uint32 { return (x << 18) | (x >> (32 - 18)) }
-
-func rotl64_1(x uint64) uint64  { return (x << 1) | (x >> (64 - 1)) }
-func rotl64_7(x uint64) uint64  { return (x << 7) | (x >> (64 - 7)) }
-func rotl64_11(x uint64) uint64 { return (x << 11) | (x >> (64 - 11)) }
-func rotl64_12(x uint64) uint64 { return (x << 12) | (x >> (64 - 12)) }
-func rotl64_18(x uint64) uint64 { return (x << 18) | (x >> (64 - 18)) }
-func rotl64_23(x uint64) uint64 { return (x << 23) | (x >> (64 - 23)) }
-func rotl64_27(x uint64) uint64 { return (x << 27) | (x >> (64 - 27)) }
-func rotl64_31(x uint64) uint64 { return (x << 31) | (x >> (64 - 31)) }
-
-func mix64(h uint64) uint64 {
-	h ^= h >> 33
-	h *= prime64x2
-	h ^= h >> 29
-	h *= prime64x3
-	h ^= h >> 32
-	return h
-}
-
-func resetVs64(seed uint64) (v1, v2, v3, v4 uint64) {
-	if seed == 0 {
-		return zero64x1, zero64x2, zero64x3, zero64x4
-	}
-	return (seed + prime64x1 + prime64x2), (seed + prime64x2), (seed), (seed - prime64x1)
-}
-
-// borrowed from cespare
-func round64(h, v uint64) uint64 {
-	h += v * prime64x2
-	h = rotl64_31(h)
-	h *= prime64x1
-	return h
-}
-
-func mergeRound64(h, v uint64) uint64 {
-	v = round64(0, v)
-	h ^= v
-	h = h*prime64x1 + prime64x4
-	return h
-}
--- a/vendor/github.com/OneOfOne/xxhash/xxhash_go17.go
+++ b/vendor/github.com/OneOfOne/xxhash/xxhash_go17.go
@@ -1,161 +0,0 @@
-package xxhash
-
-func u32(in []byte) uint32 {
-	return uint32(in[0]) | uint32(in[1])<<8 | uint32(in[2])<<16 | uint32(in[3])<<24
-}
-
-func u64(in []byte) uint64 {
-	return uint64(in[0]) | uint64(in[1])<<8 | uint64(in[2])<<16 | uint64(in[3])<<24 | uint64(in[4])<<32 | uint64(in[5])<<40 | uint64(in[6])<<48 | uint64(in[7])<<56
-}
-
-// Checksum32S returns the checksum of the input bytes with the specific seed.
-func Checksum32S(in []byte, seed uint32) (h uint32) {
-	var i int
-
-	if len(in) > 15 {
-		var (
-			v1 = seed + prime32x1 + prime32x2
-			v2 = seed + prime32x2
-			v3 = seed + 0
-			v4 = seed - prime32x1
-		)
-		for ; i < len(in)-15; i += 16 {
-			in := in[i : i+16 : len(in)]
-			v1 += u32(in[0:4:len(in)]) * prime32x2
-			v1 = rotl32_13(v1) * prime32x1
-
-			v2 += u32(in[4:8:len(in)]) * prime32x2
-			v2 = rotl32_13(v2) * prime32x1
-
-			v3 += u32(in[8:12:len(in)]) * prime32x2
-			v3 = rotl32_13(v3) * prime32x1
-
-			v4 += u32(in[12:16:len(in)]) * prime32x2
-			v4 = rotl32_13(v4) * prime32x1
-		}
-
-		h = rotl32_1(v1) + rotl32_7(v2) + rotl32_12(v3) + rotl32_18(v4)
-
-	} else {
-		h = seed + prime32x5
-	}
-
-	h += uint32(len(in))
-	for ; i <= len(in)-4; i += 4 {
-		in := in[i : i+4 : len(in)]
-		h += u32(in[0:4:len(in)]) * prime32x3
-		h = rotl32_17(h) * prime32x4
-	}
-
-	for ; i < len(in); i++ {
-		h += uint32(in[i]) * prime32x5
-		h = rotl32_11(h) * prime32x1
-	}
-
-	h ^= h >> 15
-	h *= prime32x2
-	h ^= h >> 13
-	h *= prime32x3
-	h ^= h >> 16
-
-	return
-}
-
-func (xx *XXHash32) Write(in []byte) (n int, err error) {
-	i, ml := 0, int(xx.memIdx)
-	n = len(in)
-	xx.ln += int32(n)
-
-	if d := 16 - ml; ml > 0 && ml+len(in) > 16 {
-		xx.memIdx += int32(copy(xx.mem[xx.memIdx:], in[:d]))
-		ml, in = 16, in[d:len(in):len(in)]
-	} else if ml+len(in) < 16 {
-		xx.memIdx += int32(copy(xx.mem[xx.memIdx:], in))
-		return
-	}
-
-	if ml > 0 {
-		i += 16 - ml
-		xx.memIdx += int32(copy(xx.mem[xx.memIdx:len(xx.mem):len(xx.mem)], in))
-		in := xx.mem[:16:len(xx.mem)]
-
-		xx.v1 += u32(in[0:4:len(in)]) * prime32x2
-		xx.v1 = rotl32_13(xx.v1) * prime32x1
-
-		xx.v2 += u32(in[4:8:len(in)]) * prime32x2
-		xx.v2 = rotl32_13(xx.v2) * prime32x1
-
-		xx.v3 += u32(in[8:12:len(in)]) * prime32x2
-		xx.v3 = rotl32_13(xx.v3) * prime32x1
-
-		xx.v4 += u32(in[12:16:len(in)]) * prime32x2
-		xx.v4 = rotl32_13(xx.v4) * prime32x1
-
-		xx.memIdx = 0
-	}
-
-	for ; i <= len(in)-16; i += 16 {
-		in := in[i : i+16 : len(in)]
-		xx.v1 += u32(in[0:4:len(in)]) * prime32x2
-		xx.v1 = rotl32_13(xx.v1) * prime32x1
-
-		xx.v2 += u32(in[4:8:len(in)]) * prime32x2
-		xx.v2 = rotl32_13(xx.v2) * prime32x1
-
-		xx.v3 += u32(in[8:12:len(in)]) * prime32x2
-		xx.v3 = rotl32_13(xx.v3) * prime32x1
-
-		xx.v4 += u32(in[12:16:len(in)]) * prime32x2
-		xx.v4 = rotl32_13(xx.v4) * prime32x1
-	}
-
-	if len(in)-i != 0 {
-		xx.memIdx += int32(copy(xx.mem[xx.memIdx:], in[i:len(in):len(in)]))
-	}
-
-	return
-}
-
-func (xx *XXHash32) Sum32() (h uint32) {
-	var i int32
-	if xx.ln > 15 {
-		h = rotl32_1(xx.v1) + rotl32_7(xx.v2) + rotl32_12(xx.v3) + rotl32_18(xx.v4)
-	} else {
-		h = xx.seed + prime32x5
-	}
-
-	h += uint32(xx.ln)
-
-	if xx.memIdx > 0 {
-		for ; i < xx.memIdx-3; i += 4 {
-			in := xx.mem[i : i+4 : len(xx.mem)]
-			h += u32(in[0:4:len(in)]) * prime32x3
-			h = rotl32_17(h) * prime32x4
-		}
-
-		for ; i < xx.memIdx; i++ {
-			h += uint32(xx.mem[i]) * prime32x5
-			h = rotl32_11(h) * prime32x1
-		}
-	}
-	h ^= h >> 15
-	h *= prime32x2
-	h ^= h >> 13
-	h *= prime32x3
-	h ^= h >> 16
-
-	return
-}
-
-// Checksum64S returns the 64bit xxhash checksum for a single input
-func Checksum64S(in []byte, seed uint64) uint64 {
-	if len(in) == 0 && seed == 0 {
-		return 0xef46db3751d8e999
-	}
-
-	if len(in) > 31 {
-		return checksum64(in, seed)
-	}
-
-	return checksum64Short(in, seed)
-}
--- a/vendor/github.com/OneOfOne/xxhash/xxhash_safe.go
+++ b/vendor/github.com/OneOfOne/xxhash/xxhash_safe.go
@@ -1,183 +0,0 @@
-// +build appengine safe ppc64le ppc64be mipsle mips s390x
-
-package xxhash
-
-// Backend returns the current version of xxhash being used.
-const Backend = "GoSafe"
-
-func ChecksumString32S(s string, seed uint32) uint32 {
-	return Checksum32S([]byte(s), seed)
-}
-
-func (xx *XXHash32) WriteString(s string) (int, error) {
-	if len(s) == 0 {
-		return 0, nil
-	}
-	return xx.Write([]byte(s))
-}
-
-func ChecksumString64S(s string, seed uint64) uint64 {
-	return Checksum64S([]byte(s), seed)
-}
-
-func (xx *XXHash64) WriteString(s string) (int, error) {
-	if len(s) == 0 {
-		return 0, nil
-	}
-	return xx.Write([]byte(s))
-}
-
-func checksum64(in []byte, seed uint64) (h uint64) {
-	var (
-		v1, v2, v3, v4 = resetVs64(seed)
-
-		i int
-	)
-
-	for ; i < len(in)-31; i += 32 {
-		in := in[i : i+32 : len(in)]
-		v1 = round64(v1, u64(in[0:8:len(in)]))
-		v2 = round64(v2, u64(in[8:16:len(in)]))
-		v3 = round64(v3, u64(in[16:24:len(in)]))
-		v4 = round64(v4, u64(in[24:32:len(in)]))
-	}
-
-	h = rotl64_1(v1) + rotl64_7(v2) + rotl64_12(v3) + rotl64_18(v4)
-
-	h = mergeRound64(h, v1)
-	h = mergeRound64(h, v2)
-	h = mergeRound64(h, v3)
-	h = mergeRound64(h, v4)
-
-	h += uint64(len(in))
-
-	for ; i < len(in)-7; i += 8 {
-		h ^= round64(0, u64(in[i:len(in):len(in)]))
-		h = rotl64_27(h)*prime64x1 + prime64x4
-	}
-
-	for ; i < len(in)-3; i += 4 {
-		h ^= uint64(u32(in[i:len(in):len(in)])) * prime64x1
-		h = rotl64_23(h)*prime64x2 + prime64x3
-	}
-
-	for ; i < len(in); i++ {
-		h ^= uint64(in[i]) * prime64x5
-		h = rotl64_11(h) * prime64x1
-	}
-
-	return mix64(h)
-}
-
-func checksum64Short(in []byte, seed uint64) uint64 {
-	var (
-		h = seed + prime64x5 + uint64(len(in))
-		i int
-	)
-
-	for ; i < len(in)-7; i += 8 {
-		k := u64(in[i : i+8 : len(in)])
-		h ^= round64(0, k)
-		h = rotl64_27(h)*prime64x1 + prime64x4
-	}
-
-	for ; i < len(in)-3; i += 4 {
-		h ^= uint64(u32(in[i:i+4:len(in)])) * prime64x1
-		h = rotl64_23(h)*prime64x2 + prime64x3
-	}
-
-	for ; i < len(in); i++ {
-		h ^= uint64(in[i]) * prime64x5
-		h = rotl64_11(h) * prime64x1
-	}
-
-	return mix64(h)
-}
-
-func (xx *XXHash64) Write(in []byte) (n int, err error) {
-	var (
-		ml = int(xx.memIdx)
-		d  = 32 - ml
-	)
-
-	n = len(in)
-	xx.ln += uint64(n)
-
-	if ml+len(in) < 32 {
-		xx.memIdx += int8(copy(xx.mem[xx.memIdx:len(xx.mem):len(xx.mem)], in))
-		return
-	}
-
-	i, v1, v2, v3, v4 := 0, xx.v1, xx.v2, xx.v3, xx.v4
-	if ml > 0 && ml+len(in) > 32 {
-		xx.memIdx += int8(copy(xx.mem[xx.memIdx:len(xx.mem):len(xx.mem)], in[:d:len(in)]))
-		in = in[d:len(in):len(in)]
-
-		in := xx.mem[0:32:len(xx.mem)]
-
-		v1 = round64(v1, u64(in[0:8:len(in)]))
-		v2 = round64(v2, u64(in[8:16:len(in)]))
-		v3 = round64(v3, u64(in[16:24:len(in)]))
-		v4 = round64(v4, u64(in[24:32:len(in)]))
-
-		xx.memIdx = 0
-	}
-
-	for ; i < len(in)-31; i += 32 {
-		in := in[i : i+32 : len(in)]
-		v1 = round64(v1, u64(in[0:8:len(in)]))
-		v2 = round64(v2, u64(in[8:16:len(in)]))
-		v3 = round64(v3, u64(in[16:24:len(in)]))
-		v4 = round64(v4, u64(in[24:32:len(in)]))
-	}
-
-	if len(in)-i != 0 {
-		xx.memIdx += int8(copy(xx.mem[xx.memIdx:], in[i:len(in):len(in)]))
-	}
-
-	xx.v1, xx.v2, xx.v3, xx.v4 = v1, v2, v3, v4
-
-	return
-}
-
-func (xx *XXHash64) Sum64() (h uint64) {
-	var i int
-	if xx.ln > 31 {
-		v1, v2, v3, v4 := xx.v1, xx.v2, xx.v3, xx.v4
-		h = rotl64_1(v1) + rotl64_7(v2) + rotl64_12(v3) + rotl64_18(v4)
-
-		h = mergeRound64(h, v1)
-		h = mergeRound64(h, v2)
-		h = mergeRound64(h, v3)
-		h = mergeRound64(h, v4)
-	} else {
-		h = xx.seed + prime64x5
-	}
-
-	h += uint64(xx.ln)
-	if xx.memIdx > 0 {
-		in := xx.mem[:xx.memIdx]
-		for ; i < int(xx.memIdx)-7; i += 8 {
-			in := in[i : i+8 : len(in)]
-			k := u64(in[0:8:len(in)])
-			k *= prime64x2
-			k = rotl64_31(k)
-			k *= prime64x1
-			h ^= k
-			h = rotl64_27(h)*prime64x1 + prime64x4
-		}
-
-		for ; i < int(xx.memIdx)-3; i += 4 {
-			in := in[i : i+4 : len(in)]
-			h ^= uint64(u32(in[0:4:len(in)])) * prime64x1
-			h = rotl64_23(h)*prime64x2 + prime64x3
-		}
-
-		for ; i < int(xx.memIdx); i++ {
-			h ^= uint64(in[i]) * prime64x5
-			h = rotl64_11(h) * prime64x1
-		}
-	}
-
-	return mix64(h)
-}
--- a/vendor/github.com/OneOfOne/xxhash/xxhash_unsafe.go
+++ b/vendor/github.com/OneOfOne/xxhash/xxhash_unsafe.go
@@ -1,240 +0,0 @@
-// +build !safe
-// +build !appengine
-// +build !ppc64le
-// +build !mipsle
-// +build !ppc64be
-// +build !mips
-// +build !s390x
-
-package xxhash
-
-import (
-	"reflect"
-	"unsafe"
-)
-
-// Backend returns the current version of xxhash being used.
-const Backend = "GoUnsafe"
-
-// ChecksumString32S returns the checksum of the input data, without creating a copy, with the specific seed.
-func ChecksumString32S(s string, seed uint32) uint32 {
-	if len(s) == 0 {
-		return Checksum32S(nil, seed)
-	}
-	ss := (*reflect.StringHeader)(unsafe.Pointer(&s))
-	return Checksum32S((*[maxInt32]byte)(unsafe.Pointer(ss.Data))[:len(s):len(s)], seed)
-}
-
-func (xx *XXHash32) WriteString(s string) (int, error) {
-	if len(s) == 0 {
-		return 0, nil
-	}
-
-	ss := (*reflect.StringHeader)(unsafe.Pointer(&s))
-	return xx.Write((*[maxInt32]byte)(unsafe.Pointer(ss.Data))[:len(s):len(s)])
-}
-
-// ChecksumString64S returns the checksum of the input data, without creating a copy, with the specific seed.
-func ChecksumString64S(s string, seed uint64) uint64 {
-	if len(s) == 0 {
-		return Checksum64S(nil, seed)
-	}
-
-	ss := (*reflect.StringHeader)(unsafe.Pointer(&s))
-	return Checksum64S((*[maxInt32]byte)(unsafe.Pointer(ss.Data))[:len(s):len(s)], seed)
-}
-
-func (xx *XXHash64) WriteString(s string) (int, error) {
-	if len(s) == 0 {
-		return 0, nil
-	}
-	ss := (*reflect.StringHeader)(unsafe.Pointer(&s))
-	return xx.Write((*[maxInt32]byte)(unsafe.Pointer(ss.Data))[:len(s):len(s)])
-}
-
-//go:nocheckptr
-func checksum64(in []byte, seed uint64) uint64 {
-	var (
-		wordsLen = len(in) >> 3
-		words    = ((*[maxInt32 / 8]uint64)(unsafe.Pointer(&in[0])))[:wordsLen:wordsLen]
-
-		v1, v2, v3, v4 = resetVs64(seed)
-
-		h uint64
-		i int
-	)
-
-	for ; i < len(words)-3; i += 4 {
-		words := (*[4]uint64)(unsafe.Pointer(&words[i]))
-
-		v1 = round64(v1, words[0])
-		v2 = round64(v2, words[1])
-		v3 = round64(v3, words[2])
-		v4 = round64(v4, words[3])
-	}
-
-	h = rotl64_1(v1) + rotl64_7(v2) + rotl64_12(v3) + rotl64_18(v4)
-
-	h = mergeRound64(h, v1)
-	h = mergeRound64(h, v2)
-	h = mergeRound64(h, v3)
-	h = mergeRound64(h, v4)
-
-	h += uint64(len(in))
-
-	for _, k := range words[i:] {
-		h ^= round64(0, k)
-		h = rotl64_27(h)*prime64x1 + prime64x4
-	}
-
-	if in = in[wordsLen<<3 : len(in) : len(in)]; len(in) > 3 {
-		words := (*[1]uint32)(unsafe.Pointer(&in[0]))
-		h ^= uint64(words[0]) * prime64x1
-		h = rotl64_23(h)*prime64x2 + prime64x3
-
-		in = in[4:len(in):len(in)]
-	}
-
-	for _, b := range in {
-		h ^= uint64(b) * prime64x5
-		h = rotl64_11(h) * prime64x1
-	}
-
-	return mix64(h)
-}
-
-//go:nocheckptr
-func checksum64Short(in []byte, seed uint64) uint64 {
-	var (
-		h = seed + prime64x5 + uint64(len(in))
-		i int
-	)
-
-	if len(in) > 7 {
-		var (
-			wordsLen = len(in) >> 3
-			words    = ((*[maxInt32 / 8]uint64)(unsafe.Pointer(&in[0])))[:wordsLen:wordsLen]
-		)
-
-		for i := range words {
-			h ^= round64(0, words[i])
-			h = rotl64_27(h)*prime64x1 + prime64x4
-		}
-
-		i = wordsLen << 3
-	}
-
-	if in = in[i:len(in):len(in)]; len(in) > 3 {
-		words := (*[1]uint32)(unsafe.Pointer(&in[0]))
-		h ^= uint64(words[0]) * prime64x1
-		h = rotl64_23(h)*prime64x2 + prime64x3
-
-		in = in[4:len(in):len(in)]
-	}
-
-	for _, b := range in {
-		h ^= uint64(b) * prime64x5
-		h = rotl64_11(h) * prime64x1
-	}
-
-	return mix64(h)
-}
-
-func (xx *XXHash64) Write(in []byte) (n int, err error) {
-	mem, idx := xx.mem[:], int(xx.memIdx)
-
-	xx.ln, n = xx.ln+uint64(len(in)), len(in)
-
-	if idx+len(in) < 32 {
-		xx.memIdx += int8(copy(mem[idx:len(mem):len(mem)], in))
-		return
-	}
-
-	var (
-		v1, v2, v3, v4 = xx.v1, xx.v2, xx.v3, xx.v4
-
-		i int
-	)
-
-	if d := 32 - int(idx); d > 0 && int(idx)+len(in) > 31 {
-		copy(mem[idx:len(mem):len(mem)], in[:len(in):len(in)])
-
-		words := (*[4]uint64)(unsafe.Pointer(&mem[0]))
-
-		v1 = round64(v1, words[0])
-		v2 = round64(v2, words[1])
-		v3 = round64(v3, words[2])
-		v4 = round64(v4, words[3])
-
-		if in, xx.memIdx = in[d:len(in):len(in)], 0; len(in) == 0 {
-			goto RET
-		}
-	}
-
-	for ; i < len(in)-31; i += 32 {
-		words := (*[4]uint64)(unsafe.Pointer(&in[i]))
-
-		v1 = round64(v1, words[0])
-		v2 = round64(v2, words[1])
-		v3 = round64(v3, words[2])
-		v4 = round64(v4, words[3])
-	}
-
-	if len(in)-i != 0 {
-		xx.memIdx += int8(copy(mem[xx.memIdx:len(mem):len(mem)], in[i:len(in):len(in)]))
-	}
-
-RET:
-	xx.v1, xx.v2, xx.v3, xx.v4 = v1, v2, v3, v4
-
-	return
-}
-
-func (xx *XXHash64) Sum64() (h uint64) {
-	if seed := xx.seed; xx.ln > 31 {
-		v1, v2, v3, v4 := xx.v1, xx.v2, xx.v3, xx.v4
-		h = rotl64_1(v1) + rotl64_7(v2) + rotl64_12(v3) + rotl64_18(v4)
-
-		h = mergeRound64(h, v1)
-		h = mergeRound64(h, v2)
-		h = mergeRound64(h, v3)
-		h = mergeRound64(h, v4)
-	} else if seed == 0 {
-		h = prime64x5
-	} else {
-		h = seed + prime64x5
-	}
-
-	h += uint64(xx.ln)
-
-	if xx.memIdx == 0 {
-		return mix64(h)
-	}
-
-	var (
-		in       = xx.mem[:xx.memIdx:xx.memIdx]
-		wordsLen = len(in) >> 3
-		words    = ((*[maxInt32 / 8]uint64)(unsafe.Pointer(&in[0])))[:wordsLen:wordsLen]
-	)
-
-	for _, k := range words {
-		h ^= round64(0, k)
-		h = rotl64_27(h)*prime64x1 + prime64x4
-	}
-
-	if in = in[wordsLen<<3 : len(in) : len(in)]; len(in) > 3 {
-		words := (*[1]uint32)(unsafe.Pointer(&in[0]))
-
-		h ^= uint64(words[0]) * prime64x1
-		h = rotl64_23(h)*prime64x2 + prime64x3
-
-		in = in[4:len(in):len(in)]
-	}
-
-	for _, b := range in {
-		h ^= uint64(b) * prime64x5
-		h = rotl64_11(h) * prime64x1
-	}
-
-	return mix64(h)
-}
--- a/vendor/github.com/cpuguy83/go-md2man/v2/md2man/roff.go
+++ b/vendor/github.com/cpuguy83/go-md2man/v2/md2man/roff.go
@@ -104,7 +104,7 @@ func (r *roffRenderer) RenderNode(w io.Writer, node *blackfriday.Node, entering
 			node.Parent.Prev.Type == blackfriday.Heading &&
 			node.Parent.Prev.FirstChild != nil &&
 			bytes.EqualFold(node.Parent.Prev.FirstChild.Literal, []byte("NAME")) {
-			before, after, found := bytes.Cut(node.Literal, []byte(" - "))
+			before, after, found := bytesCut(node.Literal, []byte(" - "))
 			escapeSpecialChars(w, before)
 			if found {
 				out(w, ` \- `)
@@ -406,3 +406,12 @@ func escapeSpecialCharsLine(w io.Writer, text []byte) {
 		w.Write([]byte{'\\', text[i]}) // nolint: errcheck
 	}
 }
+
+// bytesCut is a copy of [bytes.Cut] to provide compatibility with go1.17
+// and older. We can remove this once we drop support  for go1.17 and older.
+func bytesCut(s, sep []byte) (before, after []byte, found bool) {
+	if i := bytes.Index(s, sep); i >= 0 {
+		return s[:i], s[i+len(sep):], true
+	}
+	return s, nil, false
+}
--- a/vendor/github.com/kovidgoyal/imaging/.goreleaser.yaml
+++ b/vendor/github.com/kovidgoyal/imaging/.goreleaser.yaml
@@ -6,7 +6,7 @@
 # yaml-language-server: $schema=https://goreleaser.com/static/schema.json
 # vim: set ts=2 sw=2 tw=0 fo=cnqoj

-version: 1
+version: 2

 before:
  hooks:
@@ -34,8 +34,4 @@ archives:
        format: zip

 changelog:
-  sort: asc
-  filters:
-    exclude:
-      - "^docs:"
-      - "^test:"
+  disable: true
--- a/vendor/github.com/kovidgoyal/imaging/publish.py
+++ b/vendor/github.com/kovidgoyal/imaging/publish.py
@@ -22,7 +22,7 @@ def main():
    os.environ['GITHUB_TOKEN'] = open(os.path.join(os.environ['PENV'], 'github-token')).read().strip()
    run('git', 'tag', '-a', 'v' + version, '-m', f'version {version}')
    run('git', 'push')
-    run('goreleaser', 'release')
+    run('goreleaser', 'release', '--clean')


 if __name__ == '__main__':
--- a/vendor/github.com/open-policy-agent/opa/ast/annotations.go
+++ b/vendor/github.com/open-policy-agent/opa/ast/annotations.go
@@ -31,3 +31,7 @@ type (
 func NewAnnotationsRef(a *Annotations) *AnnotationsRef {
 	return v1.NewAnnotationsRef(a)
 }
+
+func BuildAnnotationSet(modules []*Module) (*AnnotationSet, Errors) {
+	return v1.BuildAnnotationSet(modules)
+}
--- a/vendor/github.com/open-policy-agent/opa/ast/parser_ext.go
+++ b/vendor/github.com/open-policy-agent/opa/ast/parser_ext.go
@@ -5,6 +5,7 @@
 package ast

 import (
+	"errors"
 	"fmt"

 	v1 "github.com/open-policy-agent/opa/v1/ast"
@@ -279,7 +280,7 @@ func ParseStatement(input string) (Statement, error) {
 		return nil, err
 	}
 	if len(stmts) != 1 {
-		return nil, fmt.Errorf("expected exactly one statement")
+		return nil, errors.New("expected exactly one statement")
 	}
 	return stmts[0], nil
 }
--- a/vendor/github.com/open-policy-agent/opa/ast/policy.go
+++ b/vendor/github.com/open-policy-agent/opa/ast/policy.go
@@ -184,7 +184,7 @@ func RefHead(ref Ref, args ...*Term) *Head {
 }

 // DocKind represents the collection of document types that can be produced by rules.
-type DocKind int
+type DocKind = v1.DocKind

 const (
 	// CompleteDoc represents a document that is completely defined by the rule.
--- a/vendor/github.com/open-policy-agent/opa/capabilities/v1.2.0.json
+++ b/vendor/github.com/open-policy-agent/opa/capabilities/v1.2.0.json
--- a/vendor/github.com/open-policy-agent/opa/internal/bundle/utils.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/bundle/utils.go
@@ -6,6 +6,7 @@ package bundle

 import (
 	"context"
+	"errors"
 	"fmt"
 	"io"
 	"os"
@@ -97,7 +98,7 @@ func LoadBundleFromDiskForRegoVersion(regoVersion ast.RegoVersion, path, name st

 	_, err := os.Stat(bundlePath)
 	if err == nil {
-		f, err := os.Open(filepath.Join(bundlePath))
+		f, err := os.Open(bundlePath)
 		if err != nil {
 			return nil, err
 		}
@@ -132,7 +133,7 @@ func SaveBundleToDisk(path string, raw io.Reader) (string, error) {
 	}

 	if raw == nil {
-		return "", fmt.Errorf("no raw bundle bytes to persist to disk")
+		return "", errors.New("no raw bundle bytes to persist to disk")
 	}

 	dest, err := os.CreateTemp(path, ".bundle.tar.gz.*.tmp")
--- a/vendor/github.com/open-policy-agent/opa/internal/cidr/merge/merge.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/cidr/merge/merge.go
@@ -114,7 +114,7 @@ func GetAddressRange(ipNet net.IPNet) (net.IP, net.IP) {
 	copy(lastIPMask, ipNet.Mask)
 	for i := range lastIPMask {
 		lastIPMask[len(lastIPMask)-i-1] = ^lastIPMask[len(lastIPMask)-i-1]
-		lastIP[net.IPv6len-i-1] = lastIP[net.IPv6len-i-1] | lastIPMask[len(lastIPMask)-i-1]
+		lastIP[net.IPv6len-i-1] |= lastIPMask[len(lastIPMask)-i-1]
 	}

 	return firstIP, lastIP
--- a/vendor/github.com/open-policy-agent/opa/internal/compiler/utils.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/compiler/utils.go
@@ -5,6 +5,9 @@
 package compiler

 import (
+	"errors"
+	"sync"
+
 	"github.com/open-policy-agent/opa/v1/ast"
 	"github.com/open-policy-agent/opa/v1/schemas"
 	"github.com/open-policy-agent/opa/v1/util"
@@ -16,12 +19,35 @@ const (
 	AuthorizationPolicySchema SchemaFile = "authorizationPolicy.json"
 )

-var schemaDefinitions = map[SchemaFile]interface{}{}
+var schemaDefinitions = map[SchemaFile]any{}
+
+var loadOnce = sync.OnceValue(func() error {
+	cont, err := schemas.FS.ReadFile(string(AuthorizationPolicySchema))
+	if err != nil {
+		return err
+	}
+
+	if len(cont) == 0 {
+		return errors.New("expected authorization policy schema file to be present")
+	}
+
+	var schema any
+	if err := util.Unmarshal(cont, &schema); err != nil {
+		return err
+	}
+
+	schemaDefinitions[AuthorizationPolicySchema] = schema
+
+	return nil
+})

 // VerifyAuthorizationPolicySchema performs type checking on rules against the schema for the Authorization Policy
 // Input document.
 // NOTE: The provided compiler should have already run the compilation process on the input modules
 func VerifyAuthorizationPolicySchema(compiler *ast.Compiler, ref ast.Ref) error {
+	if err := loadOnce(); err != nil {
+		panic(err)
+	}

 	rules := getRulesWithDependencies(compiler, ref)

@@ -67,26 +93,3 @@ func transitiveDependencies(compiler *ast.Compiler, rule *ast.Rule, deps map[*as
 		transitiveDependencies(compiler, other, deps)
 	}
 }
-
-func loadAuthorizationPolicySchema() {
-
-	cont, err := schemas.FS.ReadFile(string(AuthorizationPolicySchema))
-	if err != nil {
-		panic(err)
-	}
-
-	if len(cont) == 0 {
-		panic("expected authorization policy schema file to be present")
-	}
-
-	var schema interface{}
-	if err := util.Unmarshal(cont, &schema); err != nil {
-		panic(err)
-	}
-
-	schemaDefinitions[AuthorizationPolicySchema] = schema
-}
-
-func init() {
-	loadAuthorizationPolicySchema()
-}
--- a/vendor/github.com/open-policy-agent/opa/internal/compiler/wasm/wasm.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/compiler/wasm/wasm.go
@@ -340,7 +340,7 @@ func (c *Compiler) initModule() error {
 		// two times. But let's deal with that when it happens.
 		if _, ok := c.funcs[name]; ok { // already seen
 			c.debug.Printf("function name duplicate: %s (%d)", name, fn.Index)
-			name = name + ".1"
+			name += ".1"
 		}
 		c.funcs[name] = fn.Index
 	}
@@ -348,7 +348,7 @@ func (c *Compiler) initModule() error {
 	for _, fn := range c.policy.Funcs.Funcs {

 		params := make([]types.ValueType, len(fn.Params))
-		for i := 0; i < len(params); i++ {
+		for i := range params {
 			params[i] = types.I32
 		}

@@ -827,7 +827,7 @@ func (c *Compiler) compileFunc(fn *ir.Func) error {
 	memoize := len(fn.Params) == 2

 	if len(fn.Params) == 0 {
-		return fmt.Errorf("illegal function: zero args")
+		return errors.New("illegal function: zero args")
 	}

 	c.nextLocal = 0
@@ -996,12 +996,16 @@ func (c *Compiler) compileBlock(block *ir.Block) ([]instruction.Instruction, err
 	for _, stmt := range block.Stmts {
 		switch stmt := stmt.(type) {
 		case *ir.ResultSetAddStmt:
-			instrs = append(instrs, instruction.GetLocal{Index: c.lrs})
-			instrs = append(instrs, instruction.GetLocal{Index: c.local(stmt.Value)})
-			instrs = append(instrs, instruction.Call{Index: c.function(opaSetAdd)})
+			instrs = append(instrs,
+				instruction.GetLocal{Index: c.lrs},
+				instruction.GetLocal{Index: c.local(stmt.Value)},
+				instruction.Call{Index: c.function(opaSetAdd)},
+			)
 		case *ir.ReturnLocalStmt:
-			instrs = append(instrs, instruction.GetLocal{Index: c.local(stmt.Source)})
-			instrs = append(instrs, instruction.Return{})
+			instrs = append(instrs,
+				instruction.GetLocal{Index: c.local(stmt.Source)},
+				instruction.Return{},
+			)
 		case *ir.BlockStmt:
 			for i := range stmt.Blocks {
 				block, err := c.compileBlock(stmt.Blocks[i])
@@ -1029,8 +1033,10 @@ func (c *Compiler) compileBlock(block *ir.Block) ([]instruction.Instruction, err
 				return instrs, err
 			}
 		case *ir.AssignVarStmt:
-			instrs = append(instrs, c.instrRead(stmt.Source))
-			instrs = append(instrs, instruction.SetLocal{Index: c.local(stmt.Target)})
+			instrs = append(instrs,
+				c.instrRead(stmt.Source),
+				instruction.SetLocal{Index: c.local(stmt.Target)},
+			)
 		case *ir.AssignVarOnceStmt:
 			instrs = append(instrs, instruction.Block{
 				Instrs: []instruction.Instruction{
@@ -1360,7 +1366,7 @@ func (c *Compiler) compileUpsert(local ir.Local, path []int, value ir.Operand, _
 	// Initialize the locals that specify the path of the upsert operation.
 	lpath := make(map[int]uint32, len(path))

-	for i := 0; i < len(path); i++ {
+	for i := range path {
 		lpath[i] = c.genLocal()
 		instrs = append(instrs, instruction.I32Const{Value: c.opaStringAddr(path[i])})
 		instrs = append(instrs, instruction.SetLocal{Index: lpath[i]})
@@ -1369,10 +1375,10 @@ func (c *Compiler) compileUpsert(local ir.Local, path []int, value ir.Operand, _
 	// Generate a block that traverses the path of the upsert operation,
 	// shallowing copying values at each step as needed. Stop before the final
 	// segment that will only be inserted.
-	var inner []instruction.Instruction
+	inner := make([]instruction.Instruction, 0, len(path)*21+1)
 	ltemp := c.genLocal()

-	for i := 0; i < len(path)-1; i++ {
+	for i := range len(path) - 1 {

 		// Lookup the next part of the path.
 		inner = append(inner, instruction.GetLocal{Index: lcopy})
@@ -1408,10 +1414,10 @@ func (c *Compiler) compileUpsert(local ir.Local, path []int, value ir.Operand, _
 	inner = append(inner, instruction.Br{Index: uint32(len(path) - 1)})

 	// Generate blocks that handle missing nodes during traversal.
-	var block []instruction.Instruction
+	block := make([]instruction.Instruction, 0, len(path)*10)
 	lval := c.genLocal()

-	for i := 0; i < len(path)-1; i++ {
+	for i := range len(path) - 1 {
 		block = append(block, instruction.Block{Instrs: inner})
 		block = append(block, instruction.Call{Index: c.function(opaObject)})
 		block = append(block, instruction.SetLocal{Index: lval})
@@ -1535,8 +1541,7 @@ func (c *Compiler) compileExternalCall(stmt *ir.CallStmt, ef externalFunc, resul
 	}

 	instrs := *result
-	instrs = append(instrs, instruction.I32Const{Value: ef.ID})
-	instrs = append(instrs, instruction.I32Const{Value: 0}) // unused context parameter
+	instrs = append(instrs, instruction.I32Const{Value: ef.ID}, instruction.I32Const{Value: 0}) // unused context parameter

 	for _, arg := range stmt.Args {
 		instrs = append(instrs, c.instrRead(arg))
@@ -1545,9 +1550,11 @@ func (c *Compiler) compileExternalCall(stmt *ir.CallStmt, ef externalFunc, resul
 	instrs = append(instrs, instruction.Call{Index: c.function(builtinDispatchers[len(stmt.Args)])})

 	if ef.Decl.Result() != nil {
-		instrs = append(instrs, instruction.TeeLocal{Index: c.local(stmt.Result)})
-		instrs = append(instrs, instruction.I32Eqz{})
-		instrs = append(instrs, instruction.BrIf{Index: 0})
+		instrs = append(instrs,
+			instruction.TeeLocal{Index: c.local(stmt.Result)},
+			instruction.I32Eqz{},
+			instruction.BrIf{Index: 0},
+		)
 	} else {
 		instrs = append(instrs, instruction.Drop{})
 	}
@@ -1678,7 +1685,7 @@ func (c *Compiler) genLocal() uint32 {
 func (c *Compiler) function(name string) uint32 {
 	fidx, ok := c.funcs[name]
 	if !ok {
-		panic(fmt.Sprintf("function not found: %s", name))
+		panic("function not found: " + name)
 	}
 	return fidx
 }
--- a/vendor/github.com/open-policy-agent/opa/internal/edittree/bitvector/bitvector.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/edittree/bitvector/bitvector.go
@@ -36,7 +36,7 @@ func (vector *BitVector) Length() int {
 // position of the last byte in the slice.
 // This returns the bit that was shifted off of the last byte.
 func shiftLower(bit byte, b []byte) byte {
-	bit = bit << 7
+	bit <<= 7
 	for i := len(b) - 1; i >= 0; i-- {
 		newByte := b[i] >> 1
 		newByte |= bit
--- a/vendor/github.com/open-policy-agent/opa/internal/edittree/edittree.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/edittree/edittree.go
@@ -146,6 +146,7 @@
 package edittree

 import (
+	"errors"
 	"fmt"
 	"math/big"
 	"sort"
@@ -335,13 +336,13 @@ func (e *EditTree) deleteChildValue(hash int) {
 // Insert creates a new child of e, and returns the new child EditTree node.
 func (e *EditTree) Insert(key, value *ast.Term) (*EditTree, error) {
 	if e.value == nil {
-		return nil, fmt.Errorf("deleted node encountered during insert operation")
+		return nil, errors.New("deleted node encountered during insert operation")
 	}
 	if key == nil {
-		return nil, fmt.Errorf("nil key provided for insert operation")
+		return nil, errors.New("nil key provided for insert operation")
 	}
 	if value == nil {
-		return nil, fmt.Errorf("nil value provided for insert operation")
+		return nil, errors.New("nil value provided for insert operation")
 	}

 	switch x := e.value.Value.(type) {
@@ -367,7 +368,7 @@ func (e *EditTree) Insert(key, value *ast.Term) (*EditTree, error) {
 			return nil, err
 		}
 		if idx < 0 || idx > e.insertions.Length() {
-			return nil, fmt.Errorf("index for array insertion out of bounds")
+			return nil, errors.New("index for array insertion out of bounds")
 		}
 		return e.unsafeInsertArray(idx, value), nil
 	default:
@@ -457,10 +458,10 @@ func (e *EditTree) unsafeInsertArray(idx int, value *ast.Term) *EditTree {
 // already present in e. It then returns the deleted child EditTree node.
 func (e *EditTree) Delete(key *ast.Term) (*EditTree, error) {
 	if e.value == nil {
-		return nil, fmt.Errorf("deleted node encountered during delete operation")
+		return nil, errors.New("deleted node encountered during delete operation")
 	}
 	if key == nil {
-		return nil, fmt.Errorf("nil key provided for delete operation")
+		return nil, errors.New("nil key provided for delete operation")
 	}

 	switch e.value.Value.(type) {
@@ -531,7 +532,7 @@ func (e *EditTree) Delete(key *ast.Term) (*EditTree, error) {
 			return nil, err
 		}
 		if idx < 0 || idx > e.insertions.Length()-1 {
-			return nil, fmt.Errorf("index for array delete out of bounds")
+			return nil, errors.New("index for array delete out of bounds")
 		}

 		// Collect insertion indexes above the delete site for rewriting.
@@ -552,14 +553,14 @@ func (e *EditTree) Delete(key *ast.Term) (*EditTree, error) {
 		}
 		// Do rewrites to clear out the newly-removed element.
 		e.deleteChildValue(idx)
-		for i := 0; i < len(rewritesScalars); i++ {
+		for i := range rewritesScalars {
 			originalIdx := rewritesScalars[i]
 			rewriteIdx := rewritesScalars[i] - 1
 			v := e.childScalarValues[originalIdx]
 			e.deleteChildValue(originalIdx)
 			e.setChildScalarValue(rewriteIdx, v)
 		}
-		for i := 0; i < len(rewritesComposites); i++ {
+		for i := range rewritesComposites {
 			originalIdx := rewritesComposites[i]
 			rewriteIdx := rewritesComposites[i] - 1
 			v := e.childCompositeValues[originalIdx]
@@ -591,7 +592,7 @@ func (e *EditTree) Delete(key *ast.Term) (*EditTree, error) {
 //gcassert:inline
 func sumZeroesBelowIndex(index int, bv *bitvector.BitVector) int {
 	zeroesSeen := 0
-	for i := 0; i < index; i++ {
+	for i := range index {
 		if bv.Element(i) == 0 {
 			zeroesSeen++
 		}
@@ -601,7 +602,7 @@ func sumZeroesBelowIndex(index int, bv *bitvector.BitVector) int {

 func findIndexOfNthZero(n int, bv *bitvector.BitVector) (int, bool) {
 	zeroesSeen := 0
-	for i := 0; i < bv.Length(); i++ {
+	for i := range bv.Length() {
 		if bv.Element(i) == 0 {
 			zeroesSeen++
 		}
@@ -637,7 +638,7 @@ func (e *EditTree) Unfold(path ast.Ref) (*EditTree, error) {
 	}
 	// 1+ path segment case.
 	if e.value == nil {
-		return nil, fmt.Errorf("nil value encountered where composite value was expected")
+		return nil, errors.New("nil value encountered where composite value was expected")
 	}

 	// Switch behavior based on types.
@@ -831,7 +832,7 @@ func (e *EditTree) Render() *ast.Term {
 		// original array. We build a new Array with modified/deleted keys.
 		out := make([]*ast.Term, 0, e.insertions.Length())
 		eIdx := 0
-		for i := 0; i < e.insertions.Length(); i++ {
+		for i := range e.insertions.Length() {
 			// If the index == 0, that indicates we should look up the next
 			// surviving original element.
 			// If the index == 1, that indicates we should look up that
@@ -879,7 +880,7 @@ func (e *EditTree) Render() *ast.Term {
 // Returns the inserted EditTree node.
 func (e *EditTree) InsertAtPath(path ast.Ref, value *ast.Term) (*EditTree, error) {
 	if value == nil {
-		return nil, fmt.Errorf("cannot insert nil value into EditTree")
+		return nil, errors.New("cannot insert nil value into EditTree")
 	}

 	if len(path) == 0 {
@@ -910,7 +911,7 @@ func (e *EditTree) DeleteAtPath(path ast.Ref) (*EditTree, error) {
 	// Root document case:
 	if len(path) == 0 {
 		if e.value == nil {
-			return nil, fmt.Errorf("deleted node encountered during delete operation")
+			return nil, errors.New("deleted node encountered during delete operation")
 		}
 		e.value = nil
 		e.childKeys = nil
@@ -1046,7 +1047,7 @@ func toIndex(arrayLength int, term *ast.Term) (int, error) {
 	switch v := term.Value.(type) {
 	case ast.Number:
 		if i, ok = v.Int(); !ok {
-			return 0, fmt.Errorf("invalid number type for indexing")
+			return 0, errors.New("invalid number type for indexing")
 		}
 	case ast.String:
 		if v == "-" {
@@ -1054,13 +1055,13 @@ func toIndex(arrayLength int, term *ast.Term) (int, error) {
 		}
 		num := ast.Number(v)
 		if i, ok = num.Int(); !ok {
-			return 0, fmt.Errorf("invalid string for indexing")
+			return 0, errors.New("invalid string for indexing")
 		}
 		if v != "0" && strings.HasPrefix(string(v), "0") {
-			return 0, fmt.Errorf("leading zeros are not allowed in JSON paths")
+			return 0, errors.New("leading zeros are not allowed in JSON paths")
 		}
 	default:
-		return 0, fmt.Errorf("invalid type for indexing")
+		return 0, errors.New("invalid type for indexing")
 	}

 	return i, nil
@@ -1179,5 +1180,5 @@ func (e *EditTree) Filter(paths []ast.Ref) *ast.Term {
 type termSlice []*ast.Term

 func (s termSlice) Less(i, j int) bool { return ast.Compare(s[i].Value, s[j].Value) < 0 }
-func (s termSlice) Swap(i, j int)      { x := s[i]; s[i] = s[j]; s[j] = x }
+func (s termSlice) Swap(i, j int)      { s[i], s[j] = s[j], s[i] }
 func (s termSlice) Len() int           { return len(s) }
--- a/vendor/github.com/open-policy-agent/opa/internal/future/filter_imports.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/future/filter_imports.go
@@ -19,12 +19,14 @@ func FilterFutureImports(imps []*ast.Import) []*ast.Import {
 	return ret
 }

+var keywordsTerm = ast.StringTerm("keywords")
+
 // IsAllFutureKeywords returns true if the passed *ast.Import is `future.keywords`
 func IsAllFutureKeywords(imp *ast.Import) bool {
 	path := imp.Path.Value.(ast.Ref)
 	return len(path) == 2 &&
 		ast.FutureRootDocument.Equal(path[0]) &&
-		path[1].Equal(ast.StringTerm("keywords"))
+		path[1].Equal(keywordsTerm)
 }

 // IsFutureKeyword returns true if the passed *ast.Import is `future.keywords.{kw}`
@@ -32,7 +34,7 @@ func IsFutureKeyword(imp *ast.Import, kw string) bool {
 	path := imp.Path.Value.(ast.Ref)
 	return len(path) == 3 &&
 		ast.FutureRootDocument.Equal(path[0]) &&
-		path[1].Equal(ast.StringTerm("keywords")) &&
+		path[1].Equal(keywordsTerm) &&
 		path[2].Equal(ast.StringTerm(kw))
 }

@@ -40,7 +42,7 @@ func WhichFutureKeyword(imp *ast.Import) (string, bool) {
 	path := imp.Path.Value.(ast.Ref)
 	if len(path) == 3 &&
 		ast.FutureRootDocument.Equal(path[0]) &&
-		path[1].Equal(ast.StringTerm("keywords")) {
+		path[1].Equal(keywordsTerm) {
 		if str, ok := path[2].Value.(ast.String); ok {
 			return string(str), true
 		}
--- a/vendor/github.com/open-policy-agent/opa/internal/future/parser_opts.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/future/parser_opts.go
@@ -5,6 +5,7 @@
 package future

 import (
+	"errors"
 	"fmt"

 	"github.com/open-policy-agent/opa/v1/ast"
@@ -33,7 +34,7 @@ func ParserOptionsFromFutureImports(imports []*ast.Import) (ast.ParserOptions, e
 		}
 		if len(path) == 3 {
 			if imp.Alias != "" {
-				return popts, fmt.Errorf("alias not supported")
+				return popts, errors.New("alias not supported")
 			}
 			popts.FutureKeywords = append(popts.FutureKeywords, string(path[2].Value.(ast.String)))
 		}
--- a/vendor/github.com/open-policy-agent/opa/internal/gqlparser/ast/dumper.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/gqlparser/ast/dumper.go
@@ -40,10 +40,10 @@ func (d *dumper) dump(v reflect.Value) {
 			d.WriteString("false")
 		}
 	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
-		d.WriteString(fmt.Sprintf("%d", v.Int()))
+		d.WriteString(strconv.FormatInt(v.Int(), 10))

 	case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64:
-		d.WriteString(fmt.Sprintf("%d", v.Uint()))
+		d.WriteString(strconv.FormatUint(v.Uint(), 10))

 	case reflect.Float32, reflect.Float64:
 		d.WriteString(fmt.Sprintf("%.2f", v.Float()))
@@ -88,7 +88,7 @@ func typeName(t reflect.Type) string {
 func (d *dumper) dumpArray(v reflect.Value) {
 	d.WriteString("[" + typeName(v.Type().Elem()) + "]")

-	for i := 0; i < v.Len(); i++ {
+	for i := range v.Len() {
 		d.nl()
 		d.WriteString("- ")
 		d.indent++
@@ -102,7 +102,7 @@ func (d *dumper) dumpStruct(v reflect.Value) {
 	d.indent++

 	typ := v.Type()
-	for i := 0; i < v.NumField(); i++ {
+	for i := range v.NumField() {
 		f := v.Field(i)
 		if typ.Field(i).Tag.Get("dump") == "-" {
 			continue
@@ -132,13 +132,13 @@ func isZero(v reflect.Value) bool {
 			return true
 		}
 		z := true
-		for i := 0; i < v.Len(); i++ {
+		for i := range v.Len() {
 			z = z && isZero(v.Index(i))
 		}
 		return z
 	case reflect.Struct:
 		z := true
-		for i := 0; i < v.NumField(); i++ {
+		for i := range v.NumField() {
 			z = z && isZero(v.Field(i))
 		}
 		return z
--- a/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/rules/no_fragment_cycles.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/rules/no_fragment_cycles.go
@@ -51,7 +51,7 @@ func init() {
 						}
 						var via string
 						if len(fragmentNames) != 0 {
-							via = fmt.Sprintf(" via %s", strings.Join(fragmentNames, ", "))
+							via = " via " + strings.Join(fragmentNames, ", ")
 						}
 						addError(
 							Message(`Cannot spread fragment "%s" within itself%s.`, spreadName, via),
--- a/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/rules/values_of_correct_type.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/rules/values_of_correct_type.go
@@ -159,8 +159,6 @@ func unexpectedTypeMessageOnly(v *ast.Value) ErrorOption {
 		return Message(`Float cannot represent non numeric value: %s`, v.String())
 	case "ID", "ID!":
 		return Message(`ID cannot represent a non-string and non-integer value: %s`, v.String())
-	//case "Enum":
-	//		return Message(`Enum "%s" cannot represent non-enum value: %s`, v.ExpectedType.String(), v.String())
 	default:
 		if v.Definition.Kind == ast.Enum {
 			return Message(`Enum "%s" cannot represent non-enum value: %s.`, v.ExpectedType.String(), v.String())
--- a/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/vars.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/gqlparser/validator/vars.go
@@ -2,6 +2,7 @@ package validator

 import (
 	"encoding/json"
+	"errors"
 	"fmt"
 	"reflect"
 	"strconv"
@@ -11,7 +12,7 @@ import (
 	"github.com/open-policy-agent/opa/internal/gqlparser/gqlerror"
 )

-var ErrUnexpectedType = fmt.Errorf("Unexpected Type")
+var ErrUnexpectedType = errors.New("Unexpected Type")

 // VariableValues coerces and validates variable values
 func VariableValues(schema *ast.Schema, op *ast.OperationDefinition, variables map[string]interface{}) (map[string]interface{}, error) {
@@ -106,7 +107,7 @@ func (v *varValidator) validateVarType(typ *ast.Type, val reflect.Value) (reflec
 			slc = reflect.Append(slc, val)
 			val = slc
 		}
-		for i := 0; i < val.Len(); i++ {
+		for i := range val.Len() {
 			resetPath()
 			v.path = append(v.path, ast.PathIndex(i))
 			field := val.Index(i)
@@ -222,7 +223,7 @@ func (v *varValidator) validateVarType(typ *ast.Type, val reflect.Value) (reflec
 				if fieldDef.Type.NonNull && field.IsNil() {
 					return val, gqlerror.ErrorPathf(v.path, "cannot be null")
 				}
-				//allow null object field and skip it
+				// allow null object field and skip it
 				if !fieldDef.Type.NonNull && field.IsNil() {
 					continue
 				}
--- a/vendor/github.com/open-policy-agent/opa/internal/json/patch/patch.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/json/patch/patch.go
@@ -37,8 +37,8 @@ func ParsePatchPathEscaped(str string) (path storage.Path, ok bool) {
 		// the substitutions in this order, an implementation avoids the error of
 		// turning '~01' first into '~1' and then into '/', which would be
 		// incorrect (the string '~01' correctly becomes '~1' after transformation)."
-		path[i] = strings.Replace(path[i], "~1", "/", -1)
-		path[i] = strings.Replace(path[i], "~0", "~", -1)
+		path[i] = strings.ReplaceAll(path[i], "~1", "/")
+		path[i] = strings.ReplaceAll(path[i], "~0", "~")
 	}

 	return
--- a/vendor/github.com/open-policy-agent/opa/internal/jwx/jwk/jwk.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/jwx/jwk/jwk.go
@@ -114,7 +114,7 @@ func parse(jwkSrc string) (*Set, error) {

 // ParseBytes parses JWK from the incoming byte buffer.
 func ParseBytes(buf []byte) (*Set, error) {
-	return parse(string(buf[:]))
+	return parse(string(buf))
 }

 // ParseString parses JWK from the incoming string.
--- a/vendor/github.com/open-policy-agent/opa/internal/jwx/jwk/key_ops.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/jwx/jwk/key_ops.go
@@ -2,6 +2,7 @@ package jwk

 import (
 	"encoding/json"
+	"errors"
 	"fmt"
 )

@@ -53,12 +54,12 @@ func (keyOperationList *KeyOperationList) UnmarshalJSON(data []byte) error {
 	var tempKeyOperationList []string
 	err := json.Unmarshal(data, &tempKeyOperationList)
 	if err != nil {
-		return fmt.Errorf("invalid key operation")
+		return errors.New("invalid key operation")
 	}
 	for _, value := range tempKeyOperationList {
 		_, ok := keyOps[value]
 		if !ok {
-			return fmt.Errorf("unknown key operation")
+			return errors.New("unknown key operation")
 		}
 		*keyOperationList = append(*keyOperationList, KeyOperation(value))
 	}
--- a/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/jws.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/jws.go
@@ -111,7 +111,7 @@ func Verify(buf []byte, alg jwa.SignatureAlgorithm, key interface{}) (ret []byte
 		return nil, errors.New(`attempt to verify empty buffer`)
 	}

-	parts, err := SplitCompact(string(buf[:]))
+	parts, err := SplitCompact(string(buf))
 	if err != nil {
 		return nil, fmt.Errorf("failed extract from compact serialization format: %w", err)
 	}
@@ -164,7 +164,7 @@ func VerifyWithJWKSet(buf []byte, keyset *jwk.Set) (payload []byte, err error) {

 // ParseByte parses a JWS value serialized via compact serialization and provided as []byte.
 func ParseByte(jwsCompact []byte) (m *Message, err error) {
-	return parseCompact(string(jwsCompact[:]))
+	return parseCompact(string(jwsCompact))
 }

 // ParseString parses a JWS value serialized via compact serialization and provided as string.
--- a/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/sign/sign.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/sign/sign.go
@@ -3,6 +3,7 @@ package sign
 import (
 	"crypto/x509"
 	"encoding/pem"
+	"errors"
 	"fmt"

 	"github.com/open-policy-agent/opa/internal/jwx/jwa"
@@ -30,7 +31,7 @@ func GetSigningKey(key string, alg jwa.SignatureAlgorithm) (interface{}, error)
 	case jwa.RS256, jwa.RS384, jwa.RS512, jwa.PS256, jwa.PS384, jwa.PS512:
 		block, _ := pem.Decode([]byte(key))
 		if block == nil {
-			return nil, fmt.Errorf("failed to parse PEM block containing the key")
+			return nil, errors.New("failed to parse PEM block containing the key")
 		}

 		priv, err := x509.ParsePKCS1PrivateKey(block.Bytes)
@@ -45,7 +46,7 @@ func GetSigningKey(key string, alg jwa.SignatureAlgorithm) (interface{}, error)
 	case jwa.ES256, jwa.ES384, jwa.ES512:
 		block, _ := pem.Decode([]byte(key))
 		if block == nil {
-			return nil, fmt.Errorf("failed to parse PEM block containing the key")
+			return nil, errors.New("failed to parse PEM block containing the key")
 		}

 		priv, err := x509.ParseECPrivateKey(block.Bytes)
--- a/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/verify/verify.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/jwx/jws/verify/verify.go
@@ -5,6 +5,7 @@ import (
 	"crypto/rsa"
 	"crypto/x509"
 	"encoding/pem"
+	"errors"
 	"fmt"

 	"github.com/open-policy-agent/opa/internal/jwx/jwa"
@@ -33,7 +34,7 @@ func GetSigningKey(key string, alg jwa.SignatureAlgorithm) (interface{}, error)
 	case jwa.RS256, jwa.RS384, jwa.RS512, jwa.PS256, jwa.PS384, jwa.PS512, jwa.ES256, jwa.ES384, jwa.ES512:
 		block, _ := pem.Decode([]byte(key))
 		if block == nil {
-			return nil, fmt.Errorf("failed to parse PEM block containing the key")
+			return nil, errors.New("failed to parse PEM block containing the key")
 		}

 		pub, err := x509.ParsePKIXPublicKey(block.Bytes)
--- a/vendor/github.com/open-policy-agent/opa/internal/planner/planner.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/planner/planner.go
@@ -223,7 +223,7 @@ func (p *Planner) planRules(rules []*ast.Rule) (string, error) {
 	}

 	// Initialize parameters for functions.
-	for i := 0; i < len(rules[0].Head.Args); i++ {
+	for range len(rules[0].Head.Args) {
 		fn.Params = append(fn.Params, p.newLocal())
 	}

@@ -385,7 +385,7 @@ func (p *Planner) planRules(rules []*ast.Rule) (string, error) {
 							return nil
 						})
 					default:
-						return fmt.Errorf("illegal rule kind")
+						return errors.New("illegal rule kind")
 					}
 				})
 			})
@@ -497,7 +497,6 @@ func (p *Planner) planDotOr(obj ir.Local, key ir.Operand, or stmtFactory, iter p

 func (p *Planner) planNestedObjects(obj ir.Local, ref ast.Ref, iter planLocalIter) error {
 	if len(ref) == 0 {
-		//return fmt.Errorf("nested object construction didn't create object")
 		return iter(obj)
 	}

@@ -991,8 +990,7 @@ func (p *Planner) planExprCall(e *ast.Expr, iter planiter) error {
 		op := e.Operator()

 		if replacement := p.mocks.Lookup(operator); replacement != nil {
-			switch r := replacement.Value.(type) {
-			case ast.Ref:
+			if r, ok := replacement.Value.(ast.Ref); ok {
 				if !r.HasPrefix(ast.DefaultRootRef) && !r.HasPrefix(ast.InputRootRef) {
 					// replacement is builtin
 					operator = r.String()
@@ -1147,7 +1145,7 @@ func (p *Planner) planExprCallFunc(name string, arity int, void bool, operands [
 		})

 	default:
-		return fmt.Errorf("impossible replacement, arity mismatch")
+		return errors.New("impossible replacement, arity mismatch")
 	}
 }

@@ -1173,7 +1171,7 @@ func (p *Planner) planExprCallValue(value *ast.Term, arity int, operands []*ast.
 			})
 		})
 	default:
-		return fmt.Errorf("impossible replacement, arity mismatch")
+		return errors.New("impossible replacement, arity mismatch")
 	}
 }

@@ -1750,7 +1748,7 @@ func (p *Planner) planRef(ref ast.Ref, iter planiter) error {

 	head, ok := ref[0].Value.(ast.Var)
 	if !ok {
-		return fmt.Errorf("illegal ref: non-var head")
+		return errors.New("illegal ref: non-var head")
 	}

 	if head.Compare(ast.DefaultRootDocument.Value) == 0 {
@@ -1767,7 +1765,7 @@ func (p *Planner) planRef(ref ast.Ref, iter planiter) error {

 	p.ltarget, ok = p.vars.GetOp(head)
 	if !ok {
-		return fmt.Errorf("illegal ref: unsafe head")
+		return errors.New("illegal ref: unsafe head")
 	}

 	return p.planRefRec(ref, 1, iter)
--- a/vendor/github.com/open-policy-agent/opa/internal/planner/rules.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/planner/rules.go
@@ -111,7 +111,7 @@ func (t *ruletrie) Rules() []*ast.Rule {

 func (t *ruletrie) Push(key ast.Ref) {
 	node := t
-	for i := 0; i < len(key)-1; i++ {
+	for i := range len(key) - 1 {
 		node = node.Get(key[i].Value)
 		if node == nil {
 			return
@@ -123,7 +123,7 @@ func (t *ruletrie) Push(key ast.Ref) {

 func (t *ruletrie) Pop(key ast.Ref) {
 	node := t
-	for i := 0; i < len(key)-1; i++ {
+	for i := range len(key) - 1 {
 		node = node.Get(key[i].Value)
 		if node == nil {
 			return
--- a/vendor/github.com/open-policy-agent/opa/internal/providers/aws/crypto/compare.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/providers/aws/crypto/compare.go
@@ -1,6 +1,6 @@
 package crypto

-import "fmt"
+import "errors"

 // ConstantTimeByteCompare is a constant-time byte comparison of x and y. This function performs an absolute comparison
 // if the two byte slices assuming they represent a big-endian number.
@@ -11,7 +11,7 @@ import "fmt"
 //	  +1 if x >  y
 func ConstantTimeByteCompare(x, y []byte) (int, error) {
 	if len(x) != len(y) {
-		return 0, fmt.Errorf("slice lengths do not match")
+		return 0, errors.New("slice lengths do not match")
 	}

 	xLarger, yLarger := 0, 0
--- a/vendor/github.com/open-policy-agent/opa/internal/providers/aws/crypto/ecc.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/providers/aws/crypto/ecc.go
@@ -7,6 +7,7 @@ import (
 	"crypto/hmac"
 	"encoding/asn1"
 	"encoding/binary"
+	"errors"
 	"fmt"
 	"hash"
 	"math"
@@ -82,7 +83,7 @@ func HMACKeyDerivation(hash func() hash.Hash, bitLen int, key []byte, label, con

 	// verify the requested bit length is not larger then the length encoding size
 	if int64(bitLen) > 0x7FFFFFFF {
-		return nil, fmt.Errorf("bitLen is greater than 32-bits")
+		return nil, errors.New("bitLen is greater than 32-bits")
 	}

 	fixedInput := bytes.NewBuffer(nil)
--- a/vendor/github.com/open-policy-agent/opa/internal/providers/aws/signing_v4.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/providers/aws/signing_v4.go
@@ -8,6 +8,7 @@ import (
 	"bytes"
 	"crypto/hmac"
 	"crypto/sha256"
+	"encoding/hex"
 	"errors"
 	"fmt"
 	"io"
@@ -189,7 +190,7 @@ func SignV4(headers map[string][]string, method string, theURL *url.URL, body []
 	authHeader := "AWS4-HMAC-SHA256 Credential=" + awsCreds.AccessKey + "/" + dateNow
 	authHeader += "/" + awsCreds.RegionName + "/" + service + "/aws4_request,"
 	authHeader += "SignedHeaders=" + headerList + ","
-	authHeader += "Signature=" + fmt.Sprintf("%x", signature)
+	authHeader += "Signature=" + hex.EncodeToString(signature)

 	return authHeader, awsHeaders
 }
--- a/vendor/github.com/open-policy-agent/opa/internal/providers/aws/signing_v4a.go
+++ b/vendor/github.com/open-policy-agent/opa/internal/providers/aws/signing_v4a.go
@@ -9,7 +9,7 @@ import (
 	"crypto/rand"
 	"crypto/sha256"
 	"encoding/hex"
-	"fmt"
+	"errors"
 	"hash"
 	"io"
 	"math/big"
@@ -107,7 +107,7 @@ func deriveKeyFromAccessKeyPair(accessKey, secretKey string) (*ecdsa.PrivateKey,

 		counter++
 		if counter > 0xFF {
-			return nil, fmt.Errorf("exhausted single byte external counter")
+			return nil, errors.New("exhausted single byte external counter")
 		}
 	}
 	d = d.Add(d, one)
@@ -146,7 +146,7 @@ func retrievePrivateKey(symmetric Credentials) (v4aCredentials, error) {

 	privateKey, err := deriveKeyFromAccessKeyPair(symmetric.AccessKey, symmetric.SecretKey)
 	if err != nil {
-		return v4aCredentials{}, fmt.Errorf("failed to derive asymmetric key from credentials")
+		return v4aCredentials{}, errors.New("failed to derive asymmetric key from credentials")
 	}

 	creds := v4aCredentials{
@@ -216,7 +216,7 @@ func (s *httpSigner) Build() (signedRequest, error) {

 	signedHeaders, signedHeadersStr, canonicalHeaderStr := s.buildCanonicalHeaders(host, v4Internal.IgnoredHeaders, unsignedHeaders, s.Request.ContentLength)

-	rawQuery := strings.Replace(query.Encode(), "+", "%20", -1)
+	rawQuery := strings.ReplaceAll(query.Encode(), "+", "%20")

 	canonicalURI := v4Internal.GetURIPath(req.URL)

@@ -314,7 +314,7 @@ func (s *httpSigner) buildCanonicalHeaders(host string, rule v4Internal.Rule, he
 	var canonicalHeaders strings.Builder
 	n := len(headers)
 	const colon = ':'
-	for i := 0; i < n; i++ {
+	for i := range n {
 		if headers[i] == hostHeader {
 			canonicalHeaders.WriteString(hostHeader)
 			canonicalHeaders.WriteRune(colon)
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Benedikt Kulmann	431963b2e0	chore: bump version to v1.1.0	2025-03-18 14:36:04 +01:00
Benedikt Kulmann	8b001a671e	Merge pull request #420 from opencloud-eu/binary-release feat: add release build step	2025-03-18 14:12:00 +01:00
Michael Barz	02c1ff9bee	feat: add release build step	2025-03-18 13:55:17 +01:00
Michael Barz	205e12c516	Merge pull request #417 from opencloud-eu/chore/bump-web-v2.0.0 chore: bump web to v2.0.0	2025-03-18 12:31:59 +01:00
Michael Barz	c6a8dde4c7	Merge pull request #418 from opencloud-eu/optimize-docker-build feat: optimize docker build	2025-03-18 12:15:36 +01:00
Michael Barz	29f701efa2	feat: optimize docker build	2025-03-18 12:15:16 +01:00
Jannik Stehle	b40f4ba398	chore: bump web to v2.0.0	2025-03-18 10:53:43 +01:00
Viktor Scharf	49a44fd4bc	Merge pull request #405 from opencloud-eu/runTestwithPosix run test with posix	2025-03-18 10:48:36 +01:00
Viktor Scharf	a7b0911363	run test with posix	2025-03-18 09:55:46 +01:00
Artur Neumann	4e8cad8df3	fix finding existing caches in CI (#381 )	2025-03-18 13:45:33 +05:45
Ralf Haferkamp	1a48cda106	Merge pull request #410 from opencloud-eu/dependabot/npm_and_yarn/services/idp/babel/core-7.26.10 build(deps-dev): bump @babel/core from 7.26.9 to 7.26.10 in /services/idp	2025-03-18 08:13:19 +01:00
Ralf Haferkamp	d03bcf784a	Merge pull request #412 from opencloud-eu/dependabot/go_modules/github.com/open-policy-agent/opa-1.2.0 build(deps): bump github.com/open-policy-agent/opa from 1.1.0 to 1.2.0	2025-03-18 08:12:50 +01:00
Ralf Haferkamp	1f259397bc	Merge pull request #374 from opencloud-eu/dependabot/go_modules/github.com/riandyrn/otelchi-0.12.1 build(deps): bump github.com/riandyrn/otelchi from 0.12.0 to 0.12.1	2025-03-18 08:11:16 +01:00
Artur Neumann	3655b04258	fix finding existing caches in CI	2025-03-18 12:52:10 +05:45
Artur Neumann	648a7b8a59	Merge pull request #380 from opencloud-eu/enableMoreE2Etests [full-ci] run more E2E tests in CI	2025-03-18 09:54:48 +05:45
dependabot[bot]	871fdd15d7	build(deps): bump github.com/open-policy-agent/opa from 1.1.0 to 1.2.0 Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.2.0) --- updated-dependencies: - dependency-name: github.com/open-policy-agent/opa dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-17 17:29:55 +00:00
dependabot[bot]	4275ba2dcd	build(deps-dev): bump @babel/core in /services/idp Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.26.9 to 7.26.10. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-core) --- updated-dependencies: - dependency-name: "@babel/core" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-17 16:43:48 +00:00
Ralf Haferkamp	98bce5e215	Merge pull request #409 from opencloud-eu/dependabot/npm_and_yarn/services/idp/babel-loader-10.0.0 build(deps-dev): bump babel-loader from 9.2.1 to 10.0.0 in /services/idp	2025-03-17 17:42:06 +01:00
dependabot[bot]	0d48832f3c	build(deps-dev): bump babel-loader from 9.2.1 to 10.0.0 in /services/idp Bumps [babel-loader](https://github.com/babel/babel-loader) from 9.2.1 to 10.0.0. - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel-loader/compare/v9.2.1...v10.0.0) --- updated-dependencies: - dependency-name: babel-loader dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-17 15:07:19 +00:00
Ralf Haferkamp	43c3b814cc	Merge pull request #401 from rhafer/posixfs-template-userid posixfs: Use userid as the foldername for personal space	2025-03-17 15:54:50 +01:00
Viktor Scharf	19ccfe2678	Merge pull request #386 from opencloud-eu/removeExpectedToFailDublications [full-ci] delete dublicated lines from expected-failures	2025-03-17 15:34:44 +01:00
Viktor Scharf	1183f7d274	Merge pull request #407 from opencloud-eu/revaBump2.28 bump reva 2.28	2025-03-17 15:29:09 +01:00
Viktor Scharf	e15989e993	bump reva 2.28	2025-03-17 14:49:17 +01:00
Artur Neumann	e70ff761e6	fix expected to fail files format	2025-03-17 18:56:56 +05:45
Artur Neumann	0d505db241	move tests that fail in both with/without remote.php	2025-03-17 18:39:02 +05:45
Artur Neumann	3a48c54618	adjust / fix lines in expected to fail that were forgotten	2025-03-17 18:36:28 +05:45
Artur Neumann	8ef69ed68b	[full-ci] delete dublicated lines from expected-failures	2025-03-17 18:13:13 +05:45
Viktor Scharf	69c0da8715	Merge pull request #404 from opencloud-eu/test/apiTests-in-CI Run OCM tests pipeline in CI	2025-03-17 12:40:26 +01:00
prashant-gurung899	bb45a2b10b	run OCM tests in CI Signed-off-by: prashant-gurung899 <prasantgrg777@gmail.com>	2025-03-17 16:53:11 +05:45
Artur Neumann	8c49265c56	Merge pull request #400 from opencloud-eu/test/more-localApiTests-CI Run more local API tests in CI	2025-03-17 15:43:32 +05:45
Ralf Haferkamp	90328a7ed1	posixfs: Use userid as the foldername for personal space This avoids loosing the user's personal space after renaming the user. Closes: #192	2025-03-17 10:54:52 +01:00
prashant-gurung899	24e9aacfdf	run more local api tests in CI Signed-off-by: prashant-gurung899 <prasantgrg777@gmail.com>	2025-03-17 14:25:06 +05:45
Ralf Haferkamp	f8e7a9af6c	Merge pull request #373 from opencloud-eu/dependabot/go_modules/github.com/kovidgoyal/imaging-1.6.4 build(deps): bump github.com/kovidgoyal/imaging from 1.6.3 to 1.6.4	2025-03-17 09:02:12 +01:00
Michael Barz	5c730cebda	fix: quay readme secret	2025-03-15 10:20:33 +01:00
Viktor Scharf	f3f39c9b46	Merge pull request #396 from opencloud-eu/updateWebCommit update web commit	2025-03-15 08:59:53 +01:00
Viktor Scharf	e11b7dafb3	update web commit	2025-03-15 07:57:11 +01:00
Michael Barz	b94a5a943f	Merge pull request #393 from opencloud-eu/test-release chore: bump version	2025-03-14 22:43:46 +01:00
Michael Barz	319f4dc372	fix: quay readme push	2025-03-14 21:18:21 +01:00
Michael Barz	209e20f3cd	chore: bump version	2025-03-14 19:29:17 +01:00
Michael Barz	b5f2ecd9b4	Merge pull request #379 from opencloud-eu/test/api-tests-ci Run more localApiTests pipelines in CI	2025-03-14 17:03:25 +01:00
Michael Barz	3367daea29	fix: push to quay	2025-03-14 15:46:15 +01:00
Michael Barz	ce7bfb2a4a	Merge pull request #387 from opencloud-eu/fix-container-build fix: container builds	2025-03-14 15:15:22 +01:00
Benedikt Kulmann	7f1f686b0e	Merge pull request #385 from fschade/fix-re-build-node-artifacts fix: make re-build node artifacts	2025-03-14 14:54:27 +01:00
Michael Barz	8726de0532	fix: container builds	2025-03-14 14:42:30 +01:00
prashant-gurung899	baf4a7a8c5	run local Api Tests in CI Signed-off-by: prashant-gurung899 <prasantgrg777@gmail.com>	2025-03-14 17:34:23 +05:45
Florian Schade	09776528cf	fix: make re-build node artifacts	2025-03-14 11:34:01 +01:00
Jörn Friedrich Dreyer	54ab714a8f	add sign in page text (#377 ) Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> Co-authored-by: Alex <abackermann91@gmail.com> Co-authored-by: Michael Barz <mbarz@owncloud.com>	2025-03-14 10:50:58 +01:00
Michael Barz	98cfc48953	Merge pull request #378 from opencloud-eu/container-ci feat: add container builds	2025-03-14 10:30:48 +01:00
Michael Barz	917012cc94	feat: add container builds	2025-03-14 09:37:05 +01:00
Andre Duffeck	ed3cac485e	Merge pull request #375 from aduffeck/fix-303 Make space aliases configure for the posix driver	2025-03-13 22:17:50 +01:00
Michael Barz	2d97adb6d6	Add woodopecker badge	2025-03-13 16:10:00 +01:00
openclouders	f0b9f442e5	Automated changelog update [skip ci]	2025-03-13 15:01:36 +00:00
Michael Barz	bad59d67a1	fix: remove leftovers	2025-03-13 16:00:29 +01:00
Michael Barz	66d54795c6	fix: starlark fix	2025-03-13 15:53:22 +01:00
Michael Barz	516af285c3	fix: binaries and changelog steps	2025-03-13 15:50:52 +01:00
André Duffeck	916c79e856	Make space aliases configure for the posix driver	2025-03-13 15:35:45 +01:00
dependabot[bot]	e4e7dffdb7	build(deps): bump github.com/riandyrn/otelchi from 0.12.0 to 0.12.1 Bumps [github.com/riandyrn/otelchi](https://github.com/riandyrn/otelchi) from 0.12.0 to 0.12.1. - [Release notes](https://github.com/riandyrn/otelchi/releases) - [Changelog](https://github.com/riandyrn/otelchi/blob/master/CHANGELOG.md) - [Commits](https://github.com/riandyrn/otelchi/compare/v0.12.0...v0.12.1) --- updated-dependencies: - dependency-name: github.com/riandyrn/otelchi dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-13 14:28:48 +00:00
dependabot[bot]	fe8d6e3aa9	build(deps): bump github.com/kovidgoyal/imaging from 1.6.3 to 1.6.4 Bumps [github.com/kovidgoyal/imaging](https://github.com/kovidgoyal/imaging) from 1.6.3 to 1.6.4. - [Release notes](https://github.com/kovidgoyal/imaging/releases) - [Changelog](https://github.com/kovidgoyal/imaging/blob/master/.goreleaser.yaml) - [Commits](https://github.com/kovidgoyal/imaging/compare/v1.6.3...v1.6.4) --- updated-dependencies: - dependency-name: github.com/kovidgoyal/imaging dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-13 14:28:36 +00:00
Michael Barz	e3fd582be8	Merge pull request #361 from opencloud-eu/test-go-bin test: extract go bin	2025-03-13 14:32:02 +01:00
Artur Neumann	f7471b3a26	Merge pull request #370 from opencloud-eu/test/api-basic-ci Run Api Tests in CI	2025-03-13 19:16:44 +05:45
Artur Neumann	9e80334e8d	Merge pull request #360 from opencloud-eu/runE2EInCI Run E2E tests in CI	2025-03-13 19:08:45 +05:45
Benedikt Kulmann	66508c2518	Merge pull request #372 from opencloud-eu/material-theme Material theme	2025-03-13 14:10:03 +01:00
Michael Barz	22fb783724	test: extract go bin	2025-03-13 14:04:14 +01:00
prashant-gurung899	1638871265	run Api Tests in CI Signed-off-by: prashant-gurung899 <prasantgrg777@gmail.com>	2025-03-13 17:47:53 +05:45
Benedikt Kulmann	e18f288d76	feat(web): add secondary theme with light and dark mode	2025-03-13 12:12:59 +01:00
Benedikt Kulmann	d841a51fd2	feat(web): add material color roles to theme	2025-03-13 12:12:37 +01:00
				`@@ -0,0 +1 @@`
				`X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*`