Claire
21b716db12
Merge pull request from GHSA-58x8-3qxw-6hm7
...
* Fix insufficient permission checking for public timeline endpoints
Note that this changes unauthenticated access failure code from 401 to 422
* Add more tests for public timelines
* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-05 07:10:33 +09:00
Claire
ca1e2e6131
Merge pull request from GHSA-vp5r-5pgw-jwqx
...
* Fix streaming sessions not being closed when revoking access to an app
* Add tests for GHSA-7w3c-p9j8-mq3x
2024-07-05 07:07:56 +09:00
Daniel M Brasil
e29c435011
fix: Return HTTP 422 when scheduled status time is less than 5 minutes ( #30584 )
2024-07-05 07:05:03 +09:00
David Roetzel
650875a820
Improve encoding detection for link cards ( #30780 )
2024-07-05 07:04:42 +09:00
KMY
0370a72dbd
Add size limit for link preview URLs ( #30854 )
2024-07-05 07:03:49 +09:00
KMY
f3ac508cf7
Fix /admin/accounts/:account_id/statuses/:id
for edited posts with media attachments ( #30819 )
2024-07-05 06:56:14 +09:00
Claire
1e2f401c98
Fix duplicate @context
attribute in user export ( #30653 )
2024-07-05 06:44:41 +09:00
KMY
0bd26af2dd
Fix: 絵文字リアクションに厳しいレートリミットが適用される問題
2024-06-02 11:19:00 +09:00
Claire
993bae2850
Merge pull request from GHSA-q3rg-xx5v-4mxh
2024-05-30 23:35:11 +09:00
Claire
4bfcf0d3f0
Merge pull request from GHSA-5fq7-3p3j-9vrf
2024-05-30 23:35:03 +09:00
Emelia Smith
8e788e260e
Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations ( #30316 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-30 23:34:50 +09:00
KMY
5ba5aa5c5c
Normalize language code of incoming posts ( #30403 )
2024-05-30 23:33:59 +09:00
KMY
ec7b51504b
Merge remote-tracking branch 'parent/main' into kb_development
2024-04-27 08:42:37 +09:00
Claire
91ca90e25b
Fix Idempotency-Key ignored when scheduling a post ( #30084 )
2024-04-26 13:19:02 +00:00
Claire
e845594878
Fix moderator account being exposed in account moderation notification ( #30082 )
2024-04-26 12:42:06 +00:00
KMY
c4017eb993
Merge remote-tracking branch 'parent/main' into upstream-20240426
2024-04-26 09:16:08 +09:00
Claire
4ef0b48b95
Add in-app notifications for moderation actions/warnings ( #30065 )
2024-04-25 17:26:05 +00:00
KMY
32a8f367a3
Merge remote-tracking branch 'parent/main' into upstream-20240424
2024-04-24 08:57:07 +09:00
Emelia Smith
049b159beb
Add read:me OAuth 2.0 scope, allowing more limited access to user data ( #29087 )
2024-04-23 11:47:00 +00:00
KMY(雪あすか)
f29f3c5c85
Add: fep-e232引用仕様 ( #725 )
...
* Add: fep-e232引用仕様
* Fix test
2024-04-23 19:48:16 +09:00
Matt Jankowski
a15139bc02
Fix intermittent order based failure in UpdateStatusService
spec ( #30008 )
2024-04-22 08:30:38 +00:00
KMY
d0890cc8a7
Remove rspec-retry
2024-04-22 13:07:42 +09:00
KMY
44f4a93430
Merge remote-tracking branch 'parent/main' into upstream-20240422
2024-04-22 08:58:37 +09:00
Matt Jankowski
f5d341382e
Add any_args
to have_enqueued_sidekiq_job call (quiets deprecation) ( #29999 )
2024-04-19 19:44:59 +00:00
KMY(雪あすか)
389ae9d339
Refactor: インスタンスで利用可能な機能を検出する処理 ( #721 )
2024-04-19 09:04:45 +09:00
Matt Jankowski
11e0049b08
Use enum-generated scopes/queries for BulkImport
( #29975 )
2024-04-18 10:13:35 +00:00
KMY(雪あすか)
f79fb3adae
Add: #483 特定の公開範囲を無効にするオプション ( #712 )
...
* Add: #483 特定の公開範囲を無効にするオプション
* Fix test partically
* Complete
2024-04-18 12:40:18 +09:00
Claire
8bece467f8
Change have_enqueued_sidekiq_job
usage to always make argument expectations explicit ( #29974 )
2024-04-17 11:13:52 +00:00
Matt Jankowski
650c548c31
Add not_featured_by
scope to Tag ( #28815 )
2024-04-17 10:05:38 +00:00
Matt Jankowski
9ce2db4136
Combine double subject runs and DRY up change check in bulk import service spec ( #29402 )
2024-04-17 08:23:25 +00:00
Matt Jankowski
6fed108703
Use Rails upsert
to generate update_count! query in Counters concern ( #28738 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-04-17 08:16:51 +00:00
KMY
51cf7b3eb4
Merge remote-tracking branch 'parent/main' into upstream-20240417
2024-04-17 12:51:32 +09:00
KMY(雪あすか)
1c054ed3a3
Add: #699 引用・参照対応サーバーをAPIで取得 ( #711 )
...
* Add: #699 引用・参照対応サーバーをAPIで取得
* Complete
* ごめん
2024-04-16 12:58:54 +09:00
Matt Jankowski
7fed4a9740
Pull out repeated setup to shared setup in statusus/show view spec ( #29927 )
2024-04-15 15:24:31 +00:00
Matt Jankowski
61d108f415
Extract header_tags
method in statuses/show view spec ( #29907 )
2024-04-12 09:50:46 +00:00
Matt Jankowski
da6b9238f5
Expand coverage for admin/metrics/measure/* classes ( #29914 )
2024-04-12 09:38:24 +00:00
Matt Jankowski
ec5a0e0f5e
Expand coverage for admin/metrics/dimension/* classes ( #29913 )
2024-04-12 09:18:35 +00:00
KMY
b7f3cba9b4
Merge remote-tracking branch 'parent/main' into upstream-20240412
2024-04-12 08:40:08 +09:00
Matt Jankowski
449f99e168
Fix repeated concat output buffer duplicating layout markup ( #29918 )
2024-04-11 23:37:07 +00:00
Matt Jankowski
576554b19b
Use fabrication sequence in domain values ( #29895 )
2024-04-11 08:59:01 +00:00
KMY
52c5784910
Merge remote-tracking branch 'parent/main' into upstream-20240409
2024-04-09 12:15:51 +09:00
KMY(雪あすか)
44af34f306
Fix : #703 NGワード、センシティブワード「無関係なフォロワーへのメンション」が、自分自身へのメンションにも適用される ( #704 )
2024-04-09 09:02:50 +09:00
Matt Jankowski
285f63c02e
Use composable query in User.active
scope ( #29775 )
2024-04-08 13:53:49 +00:00
Claire
babbf6017d
Remove caching in cache_collection
( #29862 )
2024-04-08 13:46:13 +00:00
KMY
45c5c7b055
Merge remote-tracking branch 'parent/main' into upstream-20240408
2024-04-08 07:44:47 +09:00
Claire
e73cf356d2
Move OAuth flow tests from feature tests to system tests ( #29837 )
2024-04-05 16:52:05 +00:00
Matt Jankowski
b61ae28f8d
Separate methods for theme style and meta color tags ( #29802 )
2024-04-05 09:52:43 +00:00
Matt Jankowski
59da591d13
Improve spec for dimension/languages admin metric ( #29842 )
2024-04-05 08:54:11 +00:00
Claire
38b9d31f63
Improve email address validation ( #29838 )
2024-04-05 07:48:45 +00:00
Claire
1f11aa5f04
Add stub for trending tags in user mailer spec ( #29850 )
2024-04-05 07:48:07 +00:00