Commit Graph

1035 Commits

Author SHA1 Message Date
Darius Kazemi 441dca176d Merge tag 'v4.2.10' into hometown-4.2-merge 2024-07-04 08:13:56 -07:00
Claire d4bf22b632
Merge pull request from GHSA-xjvf-fm67-4qc3 2024-07-04 16:45:52 +02:00
Claire df974a912b
Merge pull request from GHSA-vp5r-5pgw-jwqx
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
2024-07-04 16:11:28 +02:00
nachtjasmin c72697c2d2
Merge latest changes from 'stable-4.2' 2024-07-03 17:39:34 +02:00
nachtjasmin 424b01c6e4
Merge tag 'v4.2.9' into lets-bump-hometown-to-mastodon-4.2 2024-07-03 17:39:31 +02:00
David Roetzel 9b6219c48f Improve encoding detection for link cards (#30780) 2024-07-03 10:57:46 +02:00
Eugen Rochko 88b2d6eca5 Change search modifiers to be case-insensitive (#30865) 2024-07-03 10:57:46 +02:00
Emelia Smith 186f916192 Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-29 16:39:26 +02:00
Claire f9c41ae43b Normalize language code of incoming posts (#30403) 2024-05-29 15:31:26 +02:00
Tim Rogers e69780ec59 Fixed crash when supplying FFMPEG_BINARY environment variable (#30022) 2024-05-17 12:30:00 +02:00
nachtjasmin c33c1b7f0c
Merge tag 'v4.2.6' into lets-bump-hometown-to-mastodon-4.2 2024-02-14 15:28:42 +01:00
Claire 0b0c7af2c1
Merge pull request from GHSA-7w3c-p9j8-mq3x
* Ensure destruction of OAuth Applications notifies streaming

Due to doorkeeper using a dependent: delete_all relationship, the destroy of an OAuth Application bypassed the existing AccessTokenExtension callbacks for announcing destructing of access tokens.

* Ensure password resets revoke access to Streaming API

* Improve performance of deleting OAuth tokens

---------

Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
2024-02-14 15:15:34 +01:00
nachtjasmin fd9c7ae563
Merge tag 'v4.2.5' into lets-bump-hometown-to-mastodon-4.2 2024-02-01 16:02:33 +01:00
Claire a6641f828b
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to v4.2.5
2024-02-01 15:56:46 +01:00
nachtjasmin eb24d8370c
Merge tag 'v4.2.4' into lets-bump-hometown-to-mastodon-4.2 2024-01-24 17:41:01 +01:00
Claire 3837ec2227 Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476) 2024-01-24 15:31:13 +01:00
Claire c609b726cb Fix error when processing link preview with an array as `inLanguage` (#28252) 2024-01-24 15:31:13 +01:00
MitarashiDango 0a01bc01d2 Fix Undo Announce activity is not sent, when not followed by the reblogged post author (#18482)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-01-24 15:31:13 +01:00
Claire a12b7551cf Fix N+1s because of association preloaders not actually getting called (#28339) 2024-01-24 15:31:13 +01:00
nachtjasmin 15d191f50c
Allow non-public posts to be pinned 2023-12-29 17:14:35 +01:00
nachtjasmin 07cfc26116
Ensure correct functionality of new ActivityPub messages 2023-12-29 17:14:35 +01:00
nachtjasmin 4c01f78480
Automatic rubocop fixing 2023-12-29 17:14:35 +01:00
nachtjasmin 27a1a044f7
Merge tag 'v4.2.2' into lets-bump-hometown-to-mastodon-4.2 2023-12-27 20:40:24 +01:00
Claire 7efc85c2f7
Fix incoming status creation date not being restricted to standard ISO8601 (#27655) 2023-12-27 01:14:46 +01:00
nachtjasmin 66ff566453
Fix several merge errors (whitespace, duplicate lines)
- Align webfinger_controller with upstream
- Remove validation from webhook (It's not in v4.2.1, I don't know where it came from)
- Remove show_application from other view (merge error)
- Remove duplicate display name from account header
- Fix misspelled className for navigation bar
2023-12-27 01:14:46 +01:00
Claire 1076a6cd62 Fix incoming status creation date not being restricted to standard ISO8601 (#27655) 2023-12-04 15:28:15 +01:00
Claire de86e822f4 Fix error when trying to delete already-deleted file with OpenStack Swift (#27569) 2023-12-04 15:28:15 +01:00
Claire 4c38706474 Fix batch attachment deletion when using OpenStack Swift (#27554) 2023-12-04 15:28:15 +01:00
Claire c66ade7de8 Fix processing LDSigned activities from actors with unknown public keys (#27474) 2023-12-04 15:28:15 +01:00
Claire 13205b54fd Fix handling of `inLanguage` attribute in preview card processing (#27423) 2023-12-04 15:28:15 +01:00
KMY(雪あすか) 8be33d4316 Fix when unfollow a tag, my post also disappears from the home timeline (#27391) 2023-12-04 15:28:15 +01:00
Claire aa69ca74ed Fix incorrect serialization of regional languages in `contentMap` (#27207) 2023-12-04 15:28:15 +01:00
nachtjasmin 57477c9f65
Fix forgot merge marker in libre_translate 2023-11-18 17:03:18 +01:00
nachtjasmin cc42aa5c08
Merge tag 'v4.2.1' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 17:00:16 +01:00
nachtjasmin a31fc74580
Merge tag 'v4.2.0-rc2' into lets-bump-hometown-to-mastodon-4.2
Conflict in lib/paperclip/transcoder.rb, using upstream version.
2023-11-18 16:59:27 +01:00
nachtjasmin 4033d28160
Merge tag 'v4.2.0-rc1' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- app/javascript/mastodon/features/compose/components/search_results.jsx:
   taken as is
- app/models/account.rb: use upstream SQL queries for filtering
- app/models/media_attachment.rb: use upstream ffmpeg settings
- config/locales/de.yml: merged
2023-11-18 16:55:55 +01:00
nachtjasmin d6f67e3d4e
Merge tag 'v4.2.0-beta3' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 01:25:59 +01:00
nachtjasmin dae0793b5e
Merge tag 'v4.2.0-beta2' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 01:21:37 +01:00
nachtjasmin 9a629eba8a
Merge tag 'v4.2.0-beta1' into lets-bump-hometown-to-mastodon-4.2
- cli: followed upstream
- version.rb: followed upstream, since we can use environment variables for the suffix now
- lib/paperclip: chose their spoof detector
- lib/sanitize: merged h1-h6 into supported elements, allowed translated attribute
- config/environments: follow upstream
- config/initializers: follow upstream
- config/application.rb: follow upstream
- config/locales: translations with %{title} prefix were replaced with hardcoded "Mastodon:" prefixes, should be fixed afterwards
  it's inconsistent anyway right now
- config/settings: removed settings that were removed in upstream
- config/routes: followed upstream, due to API restructurings. Is there some hometown-specific API stuff that might be missing now?
- spec/: followed upstream, might have lost hometown-specific tests, but I haven't found any on a quick check

- .ruby-version, Gemfile, etc.: upstream
- .github/workflows: upstream

- about: followed upstream, therefore the static homepage is gone :/
- credentials: moved federation into the settings_attributes
- lists: follow upstream, `:is_exclusive` -> `:exclusive`
- statuses: keep local only

- account_statuses_filter: still hide local only posts for anonymous users
- activitypub/activity/create:
  - keep activity_pub_type in params
  - text: use hometown's way for determining the content
  - spoiler: use hometown's mechanism
- feed_manager: use upstream exclusive list mechanism
- plain_text_formatter: use upstream way with html decoding, as I'm not sure whether we still have the Nokogiri library(?) available
    problem: might remove tags that we want to keep?
- text_formatter: follow upstream

- account: use upstream MENTION_RE expression
- backup: follow upstream for permission validation
- list: follow upstream, is_exclusive -> exclusive !! WE MIGHT NEED A MIGRATION!
- status: moved set_locality hook to the others
- user: delegates for settings (federation, autoplay, etc.) were removed upstream, follow them
- webhook: follow upstream

- initial_state_serializer: keep max_toot_chars
- list_serializer: follow rename of is_exclusive -> exclusive

Use upstream version, since the translation API got upgraded to v2.

Use upstream version of vote_validator.

- admin/webhooks/_form: add group for template
- settings/preferences/appearance/show: add new input for 'expand_usernames'
    check: missing translations, especially for hints
- settings/preferences/other/show: added input groups for no_rss and default_privacy
    check: missing translations, especially for hints
- settigngs/profiles: upstream removed verification banner, follow them

Followed upstream changes.

Incorporated upstream changes and put the local_only check back in the correct place.

Ignored hometown changes, take upstream version.

- actions/lists: follow exclusive list naming
- components/column_back_button: follow upstream router refactoring
- components/column_header: follow upstream router refactoring
- components/hashtag: keep hometown behaviour, add href to links
- components/media_gallery: merge alt text indicator into upstream
- components/status: merge timestamp click -> original page
- components/status_action_bar: upstream removed the share button, follow them
- components/status_content:
  - still make remote usernames => check: does the new href work?
  - make translate button always visible like upstream
  - keep hometown-specific changes for Articles and other posts
- features/header: keep header link
- features/account_gallery/components/media_item: keep link
- features/audio/index: keep no media description indicator, merge upstream styles
- features/compose/components/compose_form:
  - merge max chars logic
  - merge federation dropdown
- features/compose/components/navigation_bar: keep href to profile
- features/compose/components/poll_form: keep "is multiple" toggle
- features/compose/index: keep column header
- features/follow_requests/components/account_authorize: keep external link
- features/list_editor/components/edit_list_form: overwritten from upstream
- features/list_timeline/index: overwritten from upstream
- features/components/follow_request: keep external link
- features/components/notification: keep external link
- features/picture_in_picture/components/footer: keep external link
- features/status/components/detailed_status: keep external link
- features/ui/components/boost_modal: keep external link
- features/ui/index: merge upstream changes
- features/video/: keep no media description indicator
- containers/status_container: overwrite with upstream
- locales: best-effort merge, but I wouldn't trust it. should be normalized in some way.
2023-11-18 01:14:04 +01:00
nachtjasmin ee8aeef386
Merge tag 'v4.1.8' into lets-bump-hometown-to-mastodon-4.2
Conflicts in app/services/translate_status_service.rb, followed
upstream.
2023-11-16 23:30:37 +01:00
nachtjasmin 68c82f9ba2
Merge tag 'v4.1.7' into lets-bump-hometown-to-mastodon-4.2
Conflicts in the GitHub Actions, followed upstream.
2023-11-16 23:29:25 +01:00
nachtjasmin 633b9e995b
Merge tag 'v4.1.5' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- chose their content_security_policy_spec.rb
- reordered options in app/lib/request.rb, should reduce conflicts
2023-11-16 23:20:13 +01:00
nachtjasmin dfe48bcccf
Merge tag 'v4.1.4' into lets-bump-hometown-to-mastodon-4.2 2023-11-16 23:17:48 +01:00
nachtjasmin cc9dc8d902
Merge tag 'v4.1.3' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution: only the streaming API is interesting. The
filtering for local statuses is done before the other filters even kick
in to be sure.
2023-11-16 23:17:27 +01:00
nachtjasmin f978ed560a
Merge tag 'v4.1.1' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- ignored changed to README
- reverted all changes to the navigation panel, follow upstream
2023-11-16 22:55:34 +01:00
nachtjasmin c6cc5e212a
Merge tag 'v4.1.0' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- kept README unchanged
- added status page link to footer
2023-11-16 22:44:18 +01:00
nachtjasmin af5be0a677
Merge tag 'v4.1.0rc3' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

1. decided to add the build-image workflow, we can adjust it later
2. JS conflicts are just missing semicolons, added them
3. en_GB translations were removed upstream, following them.
2023-11-16 22:39:33 +01:00
nachtjasmin dbf4adb848
Merge tag 'v4.1.0rc1' into lets-bump-hometown-to-mastodon-4.2
There were quite a couple of conflicts, they were resolved in the
following manner:

- Translations: Moved to "publish" as translation, aligns with other
  languages
- Options: `trends_as_landing_page` is kept false
- UI: clicking the display name opens the original profile

Potential problems:

1. Not all translations for mails and stuff are prefixed with
   `%{title}`, some are, some are hardcoded to `Mastodon`.
2023-11-16 22:31:22 +01:00
nachtjasmin 625a5e7b2c
Merge tag 'v4.0.12' into lets-bump-hometown-to-mastodon-4.2 2023-11-16 20:20:52 +01:00
nachtjasmin 009a1b7301
Merge tag 'v4.0.11' into lets-bump-hometown-to-mastodon-4.2 2023-11-16 20:20:17 +01:00