Translation update (lt)

Translation update (fr)

make PHP_CodeSniffer rules compatible with v2

Update register.txt (Arabic) - Fix spelling mistake

Add deprecated tag to mail_send, _mail_send_action, mail_encode_address

These functions are already deprecated and replaced by the Mailer::
class. The deprecated tag was simply missing.

Translation update (bn)

Translation update (pt)

Plugingroups

Translation update (ko)

Translation update (cs)

Translation update (es)

Update toolbar.js

Translation update (ne)

When the picker button is near the border of the screen, then an opening panel of picker buttons can go over the screen edge. That's not convenient. So we should add a check in a `function pickerToggle()` and shift picker buttons position if needed.

Test

indexer.php: slow page loads on lighttpd due to missing ob_flush()

it seems that different zlib versions behave different with corrupted files.
Some return false, some return whatever they still can read from the
file. the file now should no longer be readable by any version.

The user properties (login, real name, etc) where not properly escaped
in the user manager's edit form. This allowed a XSS attack on the
superuser by registered users.

Thanks to Filippo Cavallarin from www.segment.technology for discovering
this bug.

This also reverses the order of crypto protocols tried again. Using TLS
first again. related to #915

The code reading .bz2 compressed files did not correctly check for
possible read errors. In case of a corrupted file this could have led to
an infinite loop.

Thanks to Filippo Cavallarin from www.segment.technology for dicovering
this bug.

Translation update (he)

Translation update (da)