b9c1f93dae
Merge tag 'v3.5.19' into hometown-1.0.8-security
2 years ago
23cdd0cd4f
Merge tag 'v3.5.18' into hometown-1.0.8-security
2 years ago
e9123ad691
Bump version to v3.5.19
2 years ago
c397c1a9e3
Merge pull request from GHSA-jhrq-qvrm-qr36
...
* Fix insufficient Content-Type checking of fetched ActivityStreams objects
* Allow JSON-LD documents with multiple profiles
2 years ago
d509b6b342
Fix user creation failure handling in OmniAuth paths ( #29207 )
...
Co-authored-by: Matt Jankowski <matt@jankowski.online>
2 years ago
44c265e4c7
Bump version to v3.5.18
2 years ago
4a57e44809
Merge pull request from GHSA-vm39-j3vx-pch3
...
* Prevent different identities from a same SSO provider from accessing a same account
* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`
* Rename methods to avoid confusion between OAuth and OmniAuth
2 years ago
47c6079d8d
Merge pull request from GHSA-7w3c-p9j8-mq3x
...
* Ensure destruction of OAuth Applications notifies streaming
Due to doorkeeper using a dependent: delete_all relationship, the destroy of an OAuth Application bypassed the existing AccessTokenExtension callbacks for announcing destructing of access tokens.
* Ensure password resets revoke access to Streaming API
* Improve performance of deleting OAuth tokens
---------
Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
2 years ago
69205dff9a
Add `sidekiq_unique_jobs:delete_all_locks` task and disable `sidekiq-unique-jobs` UI by default ( #29199 )
2 years ago
d187195f2c
Disable administrative doorkeeper routes ( #29187 )
2 years ago
3387868dd9
Update dependency sidekiq-unique-jobs to 7.1.33
2 years ago
3ba6ed76ea
Update dependency nokogiri to 1.16.2
2 years ago
3fd984f95c
Merge security fixes of v3.5.17 ( #1341 )
...
_todo_
---------
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Co-authored-by: Essem <smswessem@gmail.com>
Co-authored-by: Jakob Gillich <jakob@gillich.me>
Co-authored-by: David Aaron <1858430+suddjian@users.noreply.github.com>
Co-authored-by: Matt Jankowski <matt@jankowski.online>
Co-authored-by: Jonathan de Jong <jonathandejong02@gmail.com>
2 years ago
b1ed009c65
Merge pull request from GHSA-3fjr-858r-92rw
...
* Fix insufficient origin validation
* Bump version to v3.5.17
2 years ago
35f21191ee
Bump version to v3.5.16
2 years ago
2ffce0d5f7
Fix processing LDSigned activities from actors with unknown public keys ( #27474 )
2 years ago
688defd60d
Change GIF max matrix size error to explicitly mention GIF files ( #27927 )
2 years ago
d9b05f6860
Have `Follow` activities bypass availability ( #27586 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
f3fd8d8695
Clamp dates when serializing to Elasticsearch API ( #28081 )
2 years ago
49693fe42f
Fix incoming status creation date not being restricted to standard ISO8601 ( #27655 )
2 years ago
16262f815d
Fix posts from force-sensitized accounts being able to trend ( #27620 )
2 years ago
d4e0a12b27
Change Content-Security-Policy to be tighter on media paths ( #26889 )
2 years ago
db59d8486b
Bump version to v3.5.15
2 years ago
7fb3ee0bc6
Dont match mention in url query string ( #25656 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
9bd027823d
Change min age of backup policy from 1 week to 6 days ( #27200 )
2 years ago
57d4d46050
Fix importer returning negative row estimates ( #27258 )
2 years ago
c91116f780
Fix filtering audit log for entries about disabling 2FA ( #27186 )
2 years ago
f45b5f5006
Properly remove tIME chunk from PNG uploads ( #27111 )
2 years ago
47441e51f3
Fix crash when filtering for “dormant” relationships ( #27306 )
2 years ago
af02650322
Fix inefficient queries in “Follows and followers” as well as several admin pages ( #27116 )
2 years ago
1eaaff303c
Merge tag 'v3.5.14' into hometown-3.5.14-merge
3 years ago
75346a71f7
Bump version to v3.5.14
3 years ago
49af3e26dc
Fix moderator rights inconsistencies ( #26729 )
3 years ago
412c3e13ec
Fix crash when encountering invalid URL ( #26814 )
3 years ago
31c5e63a58
Fix cached posts including stale stats ( #26409 )
3 years ago
e8eeb746ac
Fix `frame_rate` for videos where `ffprobe` reports 0/0 ( #26500 )
3 years ago
0158c31c02
Fix unexpected audio stream transcoding when uploaded video is eligible to passthrough ( #26608 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
9deb178126
Merge pull request from GHSA-v3xf-c9qf-j667
3 years ago
8e6fe19225
Change Dockerfile to upgrade packages when building ( #26931 )
...
Co-authored-by: Renaud Chaput <renchap@gmail.com>
3 years ago
4eb709ea7e
Update actions for stable-3.5 ( #26804 )
...
Co-authored-by: Renaud Chaput <renchap@gmail.com>
3 years ago
86a31fc019
Fix Dockerfile installing incompatible npm version ( #26803 )
3 years ago
16e47e1aae
Bump version to v3.5.13
3 years ago
dcffd6b3d7
Allow reports with long comments from remote instances, but truncate ( #25028 )
3 years ago
8de0f7e198
Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled ( #26237 )
3 years ago
e37551421e
Fix blocking subdomains of an already-blocked domain ( #26392 )
3 years ago
2e0eab9d18
Change text extraction in `PlainTextFormatter` to be faster ( #26727 )
3 years ago
ce75c175cd
Backport container build changes to the stable-3.5 branch ( #26742 )
...
Co-authored-by: Renaud Chaput <renchap@gmail.com>
3 years ago
a3d31ffc1e
Bump version to v3.5.12
3 years ago
50f4af28b0
Fix: Streaming server memory leak in HTTP EventSource cleanup ( #26228 )
3 years ago
e655b35d7e
Fix incorrect connect timeout in outgoing requests ( #26116 )
3 years ago
Darius Kazemi
Claire
Emelia Smith
blah
Jasmin
Jonathan de Jong
Matt Jankowski
David Aaron
Jakob Gillich
Essem
Nicolai Søborg
yufushiro
Daniel M Brasil