Commit Graph

2691 Commits

Author SHA1 Message Date
nachtjasmin c72697c2d2
Merge latest changes from 'stable-4.2' 2024-07-03 17:39:34 +02:00
nachtjasmin 424b01c6e4
Merge tag 'v4.2.9' into lets-bump-hometown-to-mastodon-4.2 2024-07-03 17:39:31 +02:00
Darius Kazemi fce9d945ef
Render hints with HTML for hometown preferences 2024-07-03 17:38:52 +02:00
Tim Rogers 17f69c0002 Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691) 2024-07-02 15:08:24 +02:00
Claire 9740c7eaea Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483) 2024-05-30 15:14:03 +02:00
Claire 8ab0ca7d64
Merge pull request from GHSA-c2r5-cfqr-c553
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
2024-05-30 14:24:29 +02:00
Claire 7920aa59e8
Merge pull request from GHSA-q3rg-xx5v-4mxh 2024-05-30 14:14:04 +02:00
Emelia Smith 186f916192 Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-29 16:39:26 +02:00
Tim Rogers e69780ec59 Fixed crash when supplying FFMPEG_BINARY environment variable (#30022) 2024-05-17 12:30:00 +02:00
nachtjasmin 922c627298
Merge tag 'v4.2.8' into lets-bump-hometown-to-mastodon-4.2 2024-02-23 16:29:25 +01:00
Claire 328a9b8157
Change registrations to be disabled by default for new servers (#29353) 2024-02-22 18:15:59 +01:00
Claire 28b666b0d5
Automatically switch from open to approved registrations in absence of moderators (#29337) 2024-02-22 14:39:42 +01:00
nachtjasmin e5c3025744
Merge tag 'v4.2.7' into lets-bump-hometown-to-mastodon-4.2 2024-02-16 12:24:25 +01:00
Claire 870ee80fd3 Fix user creation failure handling in OAuth paths (#29207) 2024-02-14 22:55:31 +01:00
nachtjasmin 74ff8df528
Merge remote-tracking branch 'mastodon/stable-4.2' into lets-bump-hometown-to-mastodon-4.2 2024-02-14 15:03:18 +01:00
Claire 1a33d348d0 Add `sidekiq_unique_jobs:delete_all_locks` task and disable `sidekiq-unique-jobs` UI by default (#29199) 2024-02-14 13:17:45 +01:00
Emelia Smith 6d43b63275 Disable administrative doorkeeper routes (#29187) 2024-02-14 11:03:21 +01:00
nachtjasmin eb24d8370c
Merge tag 'v4.2.4' into lets-bump-hometown-to-mastodon-4.2 2024-01-24 17:41:01 +01:00
Claire 6fe2a47357 Add rate-limit of TOTP authentication attempts at controller level (#28801) 2024-01-24 15:31:13 +01:00
nachtjasmin 4c01f78480
Automatic rubocop fixing 2023-12-29 17:14:35 +01:00
nachtjasmin a392a76660
Add Hometown menu entry to admin settings 2023-12-27 21:04:00 +01:00
nachtjasmin 27a1a044f7
Merge tag 'v4.2.2' into lets-bump-hometown-to-mastodon-4.2 2023-12-27 20:40:24 +01:00
Claire bece853e3c Fix error and incorrect URLs in `/api/v1/accounts/:id/featured_tags` for remote accounts (#27459) 2023-12-04 15:28:15 +01:00
Claire ef149674f0 Change Content-Security-Policy to be tighter on media paths (#26889) 2023-12-04 15:28:15 +01:00
nachtjasmin cc42aa5c08
Merge tag 'v4.2.1' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 17:00:16 +01:00
nachtjasmin 129d901649
Merge tag 'v4.2.0' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 16:59:50 +01:00
nachtjasmin a31fc74580
Merge tag 'v4.2.0-rc2' into lets-bump-hometown-to-mastodon-4.2
Conflict in lib/paperclip/transcoder.rb, using upstream version.
2023-11-18 16:59:27 +01:00
nachtjasmin 4033d28160
Merge tag 'v4.2.0-rc1' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- app/javascript/mastodon/features/compose/components/search_results.jsx:
   taken as is
- app/models/account.rb: use upstream SQL queries for filtering
- app/models/media_attachment.rb: use upstream ffmpeg settings
- config/locales/de.yml: merged
2023-11-18 16:55:55 +01:00
nachtjasmin d6f67e3d4e
Merge tag 'v4.2.0-beta3' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 01:25:59 +01:00
nachtjasmin dae0793b5e
Merge tag 'v4.2.0-beta2' into lets-bump-hometown-to-mastodon-4.2 2023-11-18 01:21:37 +01:00
nachtjasmin 9a629eba8a
Merge tag 'v4.2.0-beta1' into lets-bump-hometown-to-mastodon-4.2
- cli: followed upstream
- version.rb: followed upstream, since we can use environment variables for the suffix now
- lib/paperclip: chose their spoof detector
- lib/sanitize: merged h1-h6 into supported elements, allowed translated attribute
- config/environments: follow upstream
- config/initializers: follow upstream
- config/application.rb: follow upstream
- config/locales: translations with %{title} prefix were replaced with hardcoded "Mastodon:" prefixes, should be fixed afterwards
  it's inconsistent anyway right now
- config/settings: removed settings that were removed in upstream
- config/routes: followed upstream, due to API restructurings. Is there some hometown-specific API stuff that might be missing now?
- spec/: followed upstream, might have lost hometown-specific tests, but I haven't found any on a quick check

- .ruby-version, Gemfile, etc.: upstream
- .github/workflows: upstream

- about: followed upstream, therefore the static homepage is gone :/
- credentials: moved federation into the settings_attributes
- lists: follow upstream, `:is_exclusive` -> `:exclusive`
- statuses: keep local only

- account_statuses_filter: still hide local only posts for anonymous users
- activitypub/activity/create:
  - keep activity_pub_type in params
  - text: use hometown's way for determining the content
  - spoiler: use hometown's mechanism
- feed_manager: use upstream exclusive list mechanism
- plain_text_formatter: use upstream way with html decoding, as I'm not sure whether we still have the Nokogiri library(?) available
    problem: might remove tags that we want to keep?
- text_formatter: follow upstream

- account: use upstream MENTION_RE expression
- backup: follow upstream for permission validation
- list: follow upstream, is_exclusive -> exclusive !! WE MIGHT NEED A MIGRATION!
- status: moved set_locality hook to the others
- user: delegates for settings (federation, autoplay, etc.) were removed upstream, follow them
- webhook: follow upstream

- initial_state_serializer: keep max_toot_chars
- list_serializer: follow rename of is_exclusive -> exclusive

Use upstream version, since the translation API got upgraded to v2.

Use upstream version of vote_validator.

- admin/webhooks/_form: add group for template
- settings/preferences/appearance/show: add new input for 'expand_usernames'
    check: missing translations, especially for hints
- settings/preferences/other/show: added input groups for no_rss and default_privacy
    check: missing translations, especially for hints
- settigngs/profiles: upstream removed verification banner, follow them

Followed upstream changes.

Incorporated upstream changes and put the local_only check back in the correct place.

Ignored hometown changes, take upstream version.

- actions/lists: follow exclusive list naming
- components/column_back_button: follow upstream router refactoring
- components/column_header: follow upstream router refactoring
- components/hashtag: keep hometown behaviour, add href to links
- components/media_gallery: merge alt text indicator into upstream
- components/status: merge timestamp click -> original page
- components/status_action_bar: upstream removed the share button, follow them
- components/status_content:
  - still make remote usernames => check: does the new href work?
  - make translate button always visible like upstream
  - keep hometown-specific changes for Articles and other posts
- features/header: keep header link
- features/account_gallery/components/media_item: keep link
- features/audio/index: keep no media description indicator, merge upstream styles
- features/compose/components/compose_form:
  - merge max chars logic
  - merge federation dropdown
- features/compose/components/navigation_bar: keep href to profile
- features/compose/components/poll_form: keep "is multiple" toggle
- features/compose/index: keep column header
- features/follow_requests/components/account_authorize: keep external link
- features/list_editor/components/edit_list_form: overwritten from upstream
- features/list_timeline/index: overwritten from upstream
- features/components/follow_request: keep external link
- features/components/notification: keep external link
- features/picture_in_picture/components/footer: keep external link
- features/status/components/detailed_status: keep external link
- features/ui/components/boost_modal: keep external link
- features/ui/index: merge upstream changes
- features/video/: keep no media description indicator
- containers/status_container: overwrite with upstream
- locales: best-effort merge, but I wouldn't trust it. should be normalized in some way.
2023-11-18 01:14:04 +01:00
nachtjasmin 633b9e995b
Merge tag 'v4.1.5' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- chose their content_security_policy_spec.rb
- reordered options in app/lib/request.rb, should reduce conflicts
2023-11-16 23:20:13 +01:00
nachtjasmin cc9dc8d902
Merge tag 'v4.1.3' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution: only the streaming API is interesting. The
filtering for local statuses is done before the other filters even kick
in to be sure.
2023-11-16 23:17:27 +01:00
nachtjasmin f945d16236
Merge tag 'v4.1.2' into lets-bump-hometown-to-mastodon-4.2 2023-11-16 22:56:20 +01:00
nachtjasmin f978ed560a
Merge tag 'v4.1.1' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- ignored changed to README
- reverted all changes to the navigation panel, follow upstream
2023-11-16 22:55:34 +01:00
nachtjasmin c6cc5e212a
Merge tag 'v4.1.0' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

- kept README unchanged
- added status page link to footer
2023-11-16 22:44:18 +01:00
nachtjasmin af5be0a677
Merge tag 'v4.1.0rc3' into lets-bump-hometown-to-mastodon-4.2
Conflict resolution:

1. decided to add the build-image workflow, we can adjust it later
2. JS conflicts are just missing semicolons, added them
3. en_GB translations were removed upstream, following them.
2023-11-16 22:39:33 +01:00
nachtjasmin 1e75579468
Merge tag 'v4.1.0rc2' into lets-bump-hometown-to-mastodon-4.2
The build-image workflow is kept deleted.
2023-11-16 22:34:54 +01:00
nachtjasmin dbf4adb848
Merge tag 'v4.1.0rc1' into lets-bump-hometown-to-mastodon-4.2
There were quite a couple of conflicts, they were resolved in the
following manner:

- Translations: Moved to "publish" as translation, aligns with other
  languages
- Options: `trends_as_landing_page` is kept false
- UI: clicking the display name opens the original profile

Potential problems:

1. Not all translations for mails and stuff are prefixed with
   `%{title}`, some are, some are hardcoded to `Mastodon`.
2023-11-16 22:31:22 +01:00
Claire eea2654236
Fix format-dependent redirects being cached regardless of requested format (#27634) 2023-11-13 17:58:00 +01:00
github-actions[bot] 4262cfbe41 New Crowdin Translations (automated) (#27347)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 5a33b81479 New Crowdin Translations (automated) (#27321)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 2e2936eb64 New Crowdin Translations (automated) (#27304)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 88fc73dbbc New Crowdin Translations (automated) (#27277)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] aba0c5abd9 New Crowdin Translations (automated) (#27270)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 7c6f41039d New Crowdin Translations (automated) (#27260)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 7b86708980 New Crowdin Translations (automated) (#27220)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 2cd969cca7 New Crowdin Translations (automated) (#27202)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] 4e5791bba1 New Crowdin Translations (automated) (#27168)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00
github-actions[bot] aed930b629 New Crowdin Translations (automated) (#27144)
Co-authored-by: GitHub Actions <noreply@github.com>
2023-10-10 13:52:41 +02:00