Commit graph

1139 commits

Author SHA1 Message Date
KMY
c33fea88b2 Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.25-lts 2024-09-30 21:41:34 +09:00
Claire
245a74f9ca Add “A Mastodon update is available.” message on admin dashboard for non-bugfix updates (#32106) 2024-09-30 13:28:03 +02:00
Claire
20f06798a0 Change Mastodon to issue correctly-signed queries by default (#31994) 2024-09-30 13:28:03 +02:00
Claire
e66aaee1a4 Fix security context sometimes not being added in LD-Signed activities (#31871) 2024-09-30 13:28:03 +02:00
Claire
9bfbba3224 Fix issue when encountering reblog of deleted post in feed rebuild (#32001) 2024-09-30 13:28:03 +02:00
KMY
b6278e0d39 Fix: LD Signaturesで署名された投稿の検索許可(検索範囲)が改竄できる問題 2024-09-10 07:23:17 +09:00
KMY
3ab66262de Merge commit 'a02ff33f0e' into kb-draft-5.22-lts 2024-08-16 22:15:12 +09:00
Claire
a2c7f7f690 Fix division by zero on some video/GIF files (#30600) 2024-08-16 12:30:59 +02:00
Claire
13bab94265 Fix duplicate orderedItems in user archive's outbox.json (#31099) 2024-08-16 12:30:59 +02:00
Adam Niedzielski
161aa0f8f6 Select correct self link when parsing Webfinger response (#31110) 2024-08-16 12:30:59 +02:00
Claire
fe92b241b2 Fix status processing failing halfway when a remote post has a malformed replies attribute (#31246) 2024-08-16 12:30:59 +02:00
KMY
6896542a76 Merge commit 'a5b4a2b7e7' into kb-draft-5.21-lts 2024-07-05 06:40:30 +09:00
Claire
d4bf22b632
Merge pull request from GHSA-xjvf-fm67-4qc3 2024-07-04 16:45:52 +02:00
Claire
df974a912b
Merge pull request from GHSA-vp5r-5pgw-jwqx
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
2024-07-04 16:11:28 +02:00
David Roetzel
9b6219c48f Improve encoding detection for link cards (#30780) 2024-07-03 10:57:46 +02:00
Eugen Rochko
88b2d6eca5 Change search modifiers to be case-insensitive (#30865) 2024-07-03 10:57:46 +02:00
KMY
c2a19f8a81 Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.19-lts 2024-05-30 23:25:06 +09:00
Emelia Smith
186f916192 Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-29 16:39:26 +02:00
Claire
f9c41ae43b Normalize language code of incoming posts (#30403) 2024-05-29 15:31:26 +02:00
Tim Rogers
e69780ec59 Fixed crash when supplying FFMPEG_BINARY environment variable (#30022) 2024-05-17 12:30:00 +02:00
KMY
9190f53d7b Merge commit '7c8ca0c6d6' into kb-draft-5.16-lts 2024-02-15 08:15:29 +09:00
Claire
0b0c7af2c1
Merge pull request from GHSA-7w3c-p9j8-mq3x
* Ensure destruction of OAuth Applications notifies streaming

Due to doorkeeper using a dependent: delete_all relationship, the destroy of an OAuth Application bypassed the existing AccessTokenExtension callbacks for announcing destructing of access tokens.

* Ensure password resets revoke access to Streaming API

* Improve performance of deleting OAuth tokens

---------

Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
2024-02-14 15:15:34 +01:00
KMY
8a306337e5 Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.15-lts 2024-02-02 07:34:42 +09:00
Claire
a6641f828b
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to v4.2.5
2024-02-01 15:56:46 +01:00
KMY
1d42b6b82f Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.14-lts 2024-01-25 07:45:24 +09:00
Claire
3837ec2227 Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476) 2024-01-24 15:31:13 +01:00
Claire
c609b726cb Fix error when processing link preview with an array as inLanguage (#28252) 2024-01-24 15:31:13 +01:00
MitarashiDango
0a01bc01d2 Fix Undo Announce activity is not sent, when not followed by the reblogged post author (#18482)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-01-24 15:31:13 +01:00
Claire
a12b7551cf Fix N+1s because of association preloaders not actually getting called (#28339) 2024-01-24 15:31:13 +01:00
KMY(雪あすか)
eb280d93a9 Fix: ドメインブロックがOutboxにおいて動作しない問題 (LTS) 2024-01-24 21:35:54 +09:00
KMY
4a5f0f9259 Remove: reject_send_mediaも削除 2024-01-11 08:32:59 +09:00
KMY
5ba8141df9 Remove: #372 削除予定のドメインブロック項目をいったん削除 2024-01-10 18:46:14 +09:00
KMY
06123147d5 Fix: アンテナに登録された投稿がアンテナ削除時Redisから削除されない問題 (#417)
* Fix: アンテナに登録された投稿がRedisから削除されない問題

* Fix test

* Tootctlに変更

* 処理を共通化
2024-01-04 15:32:58 +09:00
KMY
9310c1c81b Merge remote-tracking branch 'parent/stable-4.2' into upstream-4.2.2-lts 2023-12-05 09:05:29 +09:00
Claire
1076a6cd62 Fix incoming status creation date not being restricted to standard ISO8601 (#27655) 2023-12-04 15:28:15 +01:00
Claire
de86e822f4 Fix error when trying to delete already-deleted file with OpenStack Swift (#27569) 2023-12-04 15:28:15 +01:00
Claire
4c38706474 Fix batch attachment deletion when using OpenStack Swift (#27554) 2023-12-04 15:28:15 +01:00
Claire
c66ade7de8 Fix processing LDSigned activities from actors with unknown public keys (#27474) 2023-12-04 15:28:15 +01:00
Claire
13205b54fd Fix handling of inLanguage attribute in preview card processing (#27423) 2023-12-04 15:28:15 +01:00
KMY(雪あすか)
8be33d4316 Fix when unfollow a tag, my post also disappears from the home timeline (#27391) 2023-12-04 15:28:15 +01:00
Claire
aa69ca74ed Fix incorrect serialization of regional languages in contentMap (#27207) 2023-12-04 15:28:15 +01:00
KMY(雪あすか)
8383288219
Change: サークルの送り先アカウント指定方法をaccount_username(Fedibirdと同様)に変更 (#283) (LTS) (#308)
* Change: サークルの送り先アカウント指定方法を`account_username`(Fedibirdと同様)に変更 (#283)

* Change: サークルの送り先アカウント指定方法を`account_username`(Fedibirdと同様)に変更

* Test: テストを追加

* Maybe Fix: Fedibirdで自分限定と認識される問題

* Fix test
2023-11-28 12:54:03 +09:00
KMY(雪あすか)
e7390317f5
Fix: リモートから来たスタンプの保存に失敗した時、Sidekiqジョブが再試行される問題 (#257) 2023-11-08 13:32:20 +09:00
KMY(雪あすか)
e6ad0ec41a Merge pull request from GHSA-c7p6-c688-fhgp
* FixSec: スタンプを経由してカスタム絵文字のデータを改竄できる問題

* Fix: 相乗り絵文字が受け取れない問題とテスト

* Change: 相乗りスタンプは常にオリジナルの情報を参照

* Fix: uriまで偽装した場合に対応
2023-10-26 08:45:34 +09:00
KMY
7c5b99df61 Fix: #172 他のサーバーからの相乗り絵文字削除が反映されない 2023-10-26 08:45:34 +09:00
KMY
6cce68fda4 Fix: リモートから自分のサーバーの絵文字を使ってスタンプをつけられた時、既存の絵文字が消えてしまう場合がある問題 2023-10-16 19:09:09 +09:00
KMY(雪あすか)
b896ab294b Fix when unfollow a tag, my post also disappears from the home timeline (#27391) 2023-10-15 12:51:16 +09:00
KMY
38370c1d3d Fix: LoginOnlyの名前空間も変更 2023-10-10 21:45:02 +09:00
KMY
e61350c703 Fix: #78 検索許可のas:Limitedkmyblue:Limitedに変更 2023-10-10 21:40:55 +09:00
Claire
0619ec1592 Fix boosts of local users being filtered in account timelines (#27204) 2023-10-10 13:52:41 +02:00