13011 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Claire	a1c7aae28a	Merge pull request from GHSA-xjvf-fm67-4qc3	2024-07-04 16:45:52 +02:00
Claire	34aeef3453	Merge pull request from GHSA-58x8-3qxw-6hm7 ... * Fix insufficient permission checking for public timeline endpoints Note that this changes unauthenticated access failure code from 401 to 422 * Add more tests for public timelines * Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`	2024-07-04 16:26:49 +02:00
Claire	122740047a	Merge pull request from GHSA-vp5r-5pgw-jwqx ... * Fix streaming sessions not being closed when revoking access to an app * Add tests for GHSA-7w3c-p9j8-mq3x	2024-07-04 16:11:28 +02:00
Claire	4b45333aff	fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584)	2024-07-03 11:13:40 +02:00
David Roetzel	6cf83a2a64	Improve encoding detection for link cards (#30780)	2024-07-03 11:13:40 +02:00
Eugen Rochko	2a5819e8bb	Change search modifiers to be case-insensitive (#30865)	2024-07-03 11:13:40 +02:00
David Roetzel	815680bd13	Add size limit for link preview URLs (#30854)	2024-07-03 11:13:40 +02:00
Claire	d8e8437a29	Update dependency rails	2024-07-02 16:20:04 +02:00
Tim Rogers	839147e099	Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691)	2024-07-02 16:20:04 +02:00
Claire	8e924e4338	Fix /admin/accounts/:account_id/statuses/:id for edited posts with media attachments (#30819)	2024-07-02 16:20:04 +02:00
Claire	2ee88a99d9	Change PWA start URL from /home to / (#27377)	2024-06-18 16:05:53 +02:00
Claire	1cad857f14	Bump version to v4.1.17 (#30472)	2024-05-30 15:49:14 +02:00
Claire	95ebcff98e	Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483)	2024-05-30 15:20:04 +02:00
Claire	d770b61a74	Merge pull request from GHSA-c2r5-cfqr-c553 ... * Add hardening monkey-patch to prevent IP spoofing on misconfigured installations * Remove rack-attack safelist	2024-05-30 14:24:29 +02:00
Claire	020228ddba	Merge pull request from GHSA-q3rg-xx5v-4mxh	2024-05-30 14:14:04 +02:00
Claire	e292a28933	Merge pull request from GHSA-5fq7-3p3j-9vrf	2024-05-30 14:03:13 +02:00
Claire	ba240cea0c	Normalize language code of incoming posts (#30403)	2024-05-29 15:31:34 +02:00
Claire	257f9abd56	Fix leaking Elasticsearch connections in Sidekiq processes (#30450)	2024-05-29 15:31:34 +02:00
Claire	b4e3a789b1	Update dependency rexml to 3.2.8	2024-05-29 15:31:34 +02:00
Claire	b39fbe7c83	Update dependency nokogiri to 1.16.5	2024-05-17 12:30:07 +02:00
Claire	c717b7da99	Update dependency puma to 5.6.8	2024-05-17 12:30:07 +02:00
Claire	13bbcdf4d4	Update dependency json-jwt to 1.15.3.1	2024-05-17 12:30:07 +02:00
Claire	3aec33f5a2	Fix off-by-one in tootctl media commands (#30306)	2024-05-17 12:30:07 +02:00
Emelia Smith	984d7d3dc8	Fix missing destory audit logs for Domain Allows (#30125)	2024-05-17 12:30:07 +02:00
Claire	33a50884e5	Fix not being able to block a subdomain of an already-blocked domain through the API (#30119)	2024-05-17 12:30:07 +02:00
Claire	70c4d70dbe	Fix Idempotency-Key ignored when scheduling a post (#30084)	2024-05-17 12:30:07 +02:00
Tim Rogers	a6089cdfca	Fixed crash when supplying FFMPEG_BINARY environment variable (#30022)	2024-05-17 12:30:07 +02:00
Claire	5973d7a4b6	Remove caching in cache_collection (#29862)	2024-05-17 12:30:07 +02:00
Claire	ba5551fd1d	Improve email address validation (#29838)	2024-05-17 12:30:07 +02:00
Matt Jankowski	8ce403a85b	Fix results/query in api/v1/featured_tags/suggestions (#29597)	2024-05-17 12:30:07 +02:00
Jeong Arm	3ff575f54c	Normalize idna domain before account unblock domain (#29530)	2024-05-17 12:30:07 +02:00
Claire	affbb10566	Fix admin account created by mastodon:setup not being auto-approved (#29379)	2024-05-17 12:30:07 +02:00
Emelia Smith	209632a0fd	Return domain block digests from admin domain blocks API (#29092)	2024-05-17 12:30:07 +02:00
Claire	079d3e5189	Add fallback redirection when getting a webfinger query WEB_DOMAIN@WEB_DOMAIN (#28592)	2024-05-17 12:30:07 +02:00
Matt Jankowski	57b72cccc4	Fix reference to non-existent var in CLI maintenance command (#28363)	2024-05-17 12:30:07 +02:00
Claire	37adb144db	Fix auto close registration mail (#30323)	2024-05-16 11:52:02 +02:00
Claire	142dd34b68	Fix CI not actually running ruby tests in 4.1 branch (#30321)	2024-05-16 11:28:04 +02:00
Claire	c2d8666bbf	Bump version to v4.1.16 (#29371)	2024-02-23 14:09:38 +01:00
Claire	d3c4441af8	Fix processing of Link objects in Image objects (#29364)	2024-02-23 09:53:09 +01:00
Claire	f0541adbd4	Fix link verifications when page size exceeds 1MB (#29362)	2024-02-22 19:12:57 +01:00
Claire	3fecb36739	Change registrations to be disabled by default for new servers (#29354)	2024-02-22 18:28:41 +01:00
Claire	c7312411b8	Fix auto-close email being sent to users with devops permissions instead of settings permissions (#29356)	2024-02-22 18:28:28 +01:00
Claire	2fc87611be	Automatically switch from open to approved registrations in absence of moderators (#29337)	2024-02-22 18:28:28 +01:00
Claire	1629ac4c81	Update dependencies (#29350)	2024-02-22 14:52:07 +01:00
Claire	54ae3d5ca5	Add basic CI to 4.1 branch (#29351)	2024-02-22 14:38:11 +01:00
Claire	b7b03e8d26	Bump version to v4.1.15	2024-02-16 11:57:15 +01:00
Claire	a07fff079b	Merge pull request from GHSA-jhrq-qvrm-qr36 ... * Fix insufficient Content-Type checking of fetched ActivityStreams objects * Allow JSON-LD documents with multiple profiles	2024-02-16 11:56:12 +01:00
Claire	6f29d50aa5	Update dependency pg to 1.5.5	2024-02-16 09:42:31 +01:00
Claire	9e5af6bb58	Fix user creation failure handling in OAuth paths (#29207) ... Co-authored-by: Matt Jankowski <matt@jankowski.online>	2024-02-14 23:16:39 +01:00
Claire	6499850ac4	Bump version to v4.1.14	2024-02-14 15:16:55 +01:00