ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								46283b489e 
								
							 
						 
						
							
							
								
								Fix dereferencing remote statuses not using the correct account ( #14656 )  
							
							... 
							
							
							
							Follow-up to #14359 
In the case of limited toots, the receiver may not be explicitly part of the
audience. If a specific user's inbox URI was specified, it makes sense to
dereference the toot from the corresponding user, instead of trying to find
someone in the explicit audience. 
							
						 
						
							2020-08-24 16:56:21 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									santiagorodriguez96 
								
							 
						 
						
							
							
							
							
								
							
							
								f142983484 
								
							 
						 
						
							
							
								
								Add WebAuthn as an alternative 2FA method ( #14466 )  
							
							... 
							
							
							
							* feat: add possibility of adding WebAuthn security keys to use as 2FA
This adds a basic UI for enabling WebAuthn 2FA. We did a little refactor
to the Settings page for editing the 2FA methods – now it will list the
methods that are available to the user (TOTP and WebAuthn) and from
there they'll be able to add or remove any of them.
Also, it's worth mentioning that for enabling WebAuthn it's required to
have TOTP enabled, so the first time that you go to the 2FA Settings
page, you'll be asked to set it up.
This work was inspired by the one donde by Github in their platform, and
despite it could be approached in different ways, we decided to go with
this one given that we feel that this gives a great UX.
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>
* feat: add request for WebAuthn as second factor at login if enabled
This commits adds the feature for using WebAuthn as a second factor for
login when enabled.
If users have WebAuthn enabled, now a page requesting for the use of a
WebAuthn credential for log in will appear, although a link redirecting
to the old page for logging in using a two-factor code will also be
present.
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>
* feat: add possibility of deleting WebAuthn Credentials
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>
* feat: disable WebAuthn when an Admin disables 2FA for a user
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>
* feat: remove ability to disable TOTP leaving only WebAuthn as 2FA
Following examples form other platforms like Github, we decided to make
Webauthn 2FA secondary to 2FA with TOTP, so that we removed the
possibility of removing TOTP authentication only, leaving users with
just WEbAuthn as 2FA. Instead, users will have to click on 'Disable 2FA'
in order to remove second factor auth.
The reason for WebAuthn being secondary to TOPT is that in that way,
users will still be able to log in using their code from their phone's
application if they don't have their security keys with them – or maybe
even lost them.
* We had to change a little the flow for setting up TOTP, given that now
  it's possible to setting up again if you already had TOTP, in order to
  let users modify their authenticator app – given that now it's not
  possible for them to disable TOTP and set it up again with another
  authenticator app.
  So, basically, now instead of storing the new `otp_secret` in the
  user, we store it in the session until the process of set up is
  finished.
  This was because, as it was before, when users clicked on 'Edit' in
  the new two-factor methods lists page, but then went back without
  finishing the flow, their `otp_secret` had been changed therefore
  invalidating their previous authenticator app, making them unable to
  log in again using TOTP.
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>
* refactor: fix eslint errors
The PR build was failing given that linting returning some errors.
This commit attempts to fix them.
* refactor: normalize i18n translations
The build was failing given that i18n translations files were not
normalized.
This commits fixes that.
* refactor: avoid having the webauthn gem locked to a specific version
* refactor: use symbols for routes without '/'
* refactor: avoid sending webauthn disabled email when 2FA is disabled
When an admins disable 2FA for users, we were sending two mails
to them, one notifying that 2FA was disabled and the other to notify
that WebAuthn was disabled.
As the second one is redundant since the first email includes it, we can
remove it and send just one email to users.
* refactor: avoid creating new env variable for webauthn_origin config
* refactor: improve flash error messages for webauthn pages
Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> 
							
						 
						
							2020-08-24 16:46:27 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Tdxdxoz 
								
							 
						 
						
							
							
							
							
								
							
							
								c950a85d9e 
								
							 
						 
						
							
							
								
								Fix: also use custom private boost icon for detailed status ( #14471 )  
							
							... 
							
							
							
							* use custom private boost icon for detail status
* only use className 
							
						 
						
							2020-08-24 14:13:44 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								4468fce63c 
								
							 
						 
						
							
							
								
								Add support for inlined objects in activity audience ( #14514 )  
							
							... 
							
							
							
							* Add support for inlined objects in activity audience
* Add tests 
							
						 
						
							2020-08-24 14:11:47 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Daigo 3 Dango 
								
							 
						 
						
							
							
							
							
								
							
							
								ec75a4f48b 
								
							 
						 
						
							
							
								
								Better manage subscriptionCounters ( #14608 )  
							
							... 
							
							
							
							Before this change:
- unsubscribe() was not called for a disconnection
- It seems that WebSocketClient calls connected() and reconnected().
  subscriptionCounters were incremented twice for a single reconnection,
  first from connected() and second from reconnected()
This might be a an additional change to
https://github.com/tootsuite/mastodon/pull/14579 
to recover subscriptions after a reconnect. 
							
						 
						
							2020-08-24 14:06:45 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									proxy 
								
							 
						 
						
							
							
							
							
								
							
							
								a455c84892 
								
							 
						 
						
							
							
								
								reword "boost to original audience" as per  #14596  ( #14598 )  
							
							
							
						 
						
							2020-08-23 00:08:31 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Takeshi Umeda 
								
							 
						 
						
							
							
							
							
								
							
							
								58f40e0786 
								
							 
						 
						
							
							
								
								Fix click range discrepancies in gifv ( #14615 )  
							
							
							
						 
						
							2020-08-23 00:08:12 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								ee032daa72 
								
							 
						 
						
							
							
								
								Bump jest-cli from 26.4.0 to 26.4.2 ( #14614 )  
							
							... 
							
							
							
							Bumps [jest-cli](https://github.com/facebook/jest/tree/HEAD/packages/jest-cli ) from 26.4.0 to 26.4.2.
- [Release notes](https://github.com/facebook/jest/releases )
- [Changelog](https://github.com/facebook/jest/blob/master/CHANGELOG.md )
- [Commits](https://github.com/facebook/jest/commits/v26.4.2/packages/jest-cli )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-22 23:09:18 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								8573954a4e 
								
							 
						 
						
							
							
								
								Bump jsdom from 16.3.0 to 16.4.0 ( #14587 )  
							
							... 
							
							
							
							Bumps [jsdom](https://github.com/jsdom/jsdom ) from 16.3.0 to 16.4.0.
- [Release notes](https://github.com/jsdom/jsdom/releases )
- [Changelog](https://github.com/jsdom/jsdom/blob/master/Changelog.md )
- [Commits](https://github.com/jsdom/jsdom/compare/16.3.0...16.4.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-22 22:48:23 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								b4d2063384 
								
							 
						 
						
							
							
								
								Fix scrolling issues when closing some dropdown menus ( #14606 )  
							
							
							
						 
						
							2020-08-21 14:14:28 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								755c76d19f 
								
							 
						 
						
							
							
								
								Bump simplecov from 0.18.5 to 0.19.0 ( #14590 )  
							
							... 
							
							
							
							Bumps [simplecov](https://github.com/simplecov-ruby/simplecov ) from 0.18.5 to 0.19.0.
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases )
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md )
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v0.18.5...v0.19.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:31:28 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								25330537b2 
								
							 
						 
						
							
							
								
								Bump duplexer from 0.1.1 to 0.1.2 ( #14593 )  
							
							... 
							
							
							
							Bumps [duplexer](https://github.com/Raynos/duplexer ) from 0.1.1 to 0.1.2.
- [Release notes](https://github.com/Raynos/duplexer/releases )
- [Commits](https://github.com/Raynos/duplexer/compare/v0.1.1...v0.1.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:29:36 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								fe43cb94cc 
								
							 
						 
						
							
							
								
								Bump portfinder from 1.0.26 to 1.0.28 ( #14594 )  
							
							... 
							
							
							
							Bumps [portfinder](https://github.com/http-party/node-portfinder ) from 1.0.26 to 1.0.28.
- [Release notes](https://github.com/http-party/node-portfinder/releases )
- [Commits](https://github.com/http-party/node-portfinder/compare/v1.0.26...v1.0.28 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:28:14 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								1d9e5b643a 
								
							 
						 
						
							
							
								
								Bump webpacker from 5.1.1 to 5.2.0 ( #14586 )  
							
							... 
							
							
							
							Bumps [webpacker](https://github.com/rails/webpacker ) from 5.1.1 to 5.2.0.
- [Release notes](https://github.com/rails/webpacker/releases )
- [Changelog](https://github.com/rails/webpacker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rails/webpacker/compare/v5.1.1...v5.2.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:23:52 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								759dff28a6 
								
							 
						 
						
							
							
								
								Bump intersection-observer from 0.10.0 to 0.11.0 ( #14589 )  
							
							... 
							
							
							
							Bumps [intersection-observer](https://github.com/w3c/IntersectionObserver ) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/w3c/IntersectionObserver/releases )
- [Commits](https://github.com/w3c/IntersectionObserver/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:16:57 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								c02d1d0fcc 
								
							 
						 
						
							
							
								
								Bump aws-sigv4 from 1.2.1 to 1.2.2 ( #14588 )  
							
							... 
							
							
							
							Bumps [aws-sigv4](https://github.com/aws/aws-sdk-ruby ) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sigv4/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.2.1...1.2.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:16:10 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								2e2d8e1c73 
								
							 
						 
						
							
							
								
								Bump redis-rack from 2.1.2 to 2.1.3 ( #14584 )  
							
							... 
							
							
							
							Bumps [redis-rack](http://redis-store.org/redis-rack ) from 2.1.2 to 2.1.3.
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:15:38 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								b1b2627d8e 
								
							 
						 
						
							
							
								
								Bump aws-sdk-s3 from 1.76.0 to 1.78.0 ( #14583 )  
							
							... 
							
							
							
							Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby ) from 1.76.0 to 1.78.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:14:30 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								aa21664a93 
								
							 
						 
						
							
							
								
								Bump jest from 26.2.2 to 26.4.0 ( #14585 )  
							
							... 
							
							
							
							Bumps [jest](https://github.com/facebook/jest ) from 26.2.2 to 26.4.0.
- [Release notes](https://github.com/facebook/jest/releases )
- [Changelog](https://github.com/facebook/jest/blob/master/CHANGELOG.md )
- [Commits](https://github.com/facebook/jest/compare/v26.2.2...v26.4.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:12:03 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								5a9cc35a3e 
								
							 
						 
						
							
							
								
								Bump bootsnap from 1.4.7 to 1.4.8 ( #14581 )  
							
							... 
							
							
							
							Bumps [bootsnap](https://github.com/Shopify/bootsnap ) from 1.4.7 to 1.4.8.
- [Release notes](https://github.com/Shopify/bootsnap/releases )
- [Changelog](https://github.com/Shopify/bootsnap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Shopify/bootsnap/compare/v1.4.7...v1.4.8 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:11:37 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								79c6f940ab 
								
							 
						 
						
							
							
								
								Bump har-validator from 5.1.3 to 5.1.5 ( #14580 )  
							
							... 
							
							
							
							Bumps [har-validator](https://github.com/ahmadnassri/node-har-validator ) from 5.1.3 to 5.1.5.
- [Release notes](https://github.com/ahmadnassri/node-har-validator/releases )
- [Changelog](https://github.com/ahmadnassri/node-har-validator/blob/master/.releaserc )
- [Commits](https://github.com/ahmadnassri/node-har-validator/compare/v5.1.3...v5.1.5 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-21 05:11:09 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								4e292c23d6 
								
							 
						 
						
							
							
								
								Fix not being able to unbookmark toots when blocked by their author ( #14604 )  
							
							... 
							
							
							
							* Fix not being able to unbookmark toots when blocked by their author
* Add tests 
							
						 
						
							2020-08-19 19:02:06 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								9a6ec27a87 
								
							 
						 
						
							
							
								
								Fix client-side form validation not accepting handles with uppercase letters ( #14599 )  
							
							
							
						 
						
							2020-08-19 19:00:47 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								94af542cab 
								
							 
						 
						
							
							
								
								Bump aws-partitions from 1.353.0 to 1.356.0 ( #14578 )  
							
							... 
							
							
							
							Bumps [aws-partitions](https://github.com/aws/aws-sdk-ruby ) from 1.353.0 to 1.356.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-partitions/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 03:37:55 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								774123fbc6 
								
							 
						 
						
							
							
								
								Bump tty-color from 0.5.1 to 0.5.2 ( #14547 )  
							
							... 
							
							
							
							Bumps [tty-color](https://github.com/piotrmurach/tty-color ) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/piotrmurach/tty-color/releases )
- [Changelog](https://github.com/piotrmurach/tty-color/blob/master/CHANGELOG.md )
- [Commits](https://github.com/piotrmurach/tty-color/compare/v0.5.1...v0.5.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:32:28 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								3d42e6cd6e 
								
							 
						 
						
							
							
								
								Bump abab from 2.0.3 to 2.0.4 ( #14550 )  
							
							... 
							
							
							
							Bumps [abab](https://github.com/jsdom/abab ) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/jsdom/abab/releases )
- [Changelog](https://github.com/jsdom/abab/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jsdom/abab/compare/2.0.3...2.0.4 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:32:06 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								836c9d1695 
								
							 
						 
						
							
							
								
								Bump fugit from 1.3.6 to 1.3.8 ( #14548 )  
							
							... 
							
							
							
							Bumps [fugit](https://github.com/floraison/fugit ) from 1.3.6 to 1.3.8.
- [Release notes](https://github.com/floraison/fugit/releases )
- [Changelog](https://github.com/floraison/fugit/blob/master/CHANGELOG.md )
- [Commits](https://github.com/floraison/fugit/compare/v1.3.6...v1.3.8 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:29:34 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								f70cfd823c 
								
							 
						 
						
							
							
								
								Bump jest-haste-map from 26.1.0 to 26.2.2 ( #14552 )  
							
							... 
							
							
							
							Bumps [jest-haste-map](https://github.com/facebook/jest/tree/HEAD/packages/jest-haste-map ) from 26.1.0 to 26.2.2.
- [Release notes](https://github.com/facebook/jest/releases )
- [Changelog](https://github.com/facebook/jest/blob/master/CHANGELOG.md )
- [Commits](https://github.com/facebook/jest/commits/v26.2.2/packages/jest-haste-map )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:29:10 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								312579ea56 
								
							 
						 
						
							
							
								
								Bump pkg-config from 1.4.1 to 1.4.2 ( #14549 )  
							
							... 
							
							
							
							Bumps [pkg-config](https://github.com/ruby-gnome/pkg-config ) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/ruby-gnome/pkg-config/releases )
- [Changelog](https://github.com/ruby-gnome/pkg-config/blob/master/NEWS )
- [Commits](https://github.com/ruby-gnome/pkg-config/compare/1.4.1...1.4.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:25:21 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								f9c349c2d5 
								
							 
						 
						
							
							
								
								Bump premailer from 1.12.1 to 1.13.1 ( #14544 )  
							
							... 
							
							
							
							Bumps [premailer](https://github.com/premailer/premailer ) from 1.12.1 to 1.13.1.
- [Release notes](https://github.com/premailer/premailer/releases )
- [Changelog](https://github.com/premailer/premailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/premailer/premailer/compare/v1.12.1...v1.13.1 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:24:46 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								992b4a8472 
								
							 
						 
						
							
							
								
								Bump chunky_png from 1.3.11 to 1.3.12 ( #14545 )  
							
							... 
							
							
							
							Bumps [chunky_png](https://github.com/wvanbergen/chunky_png ) from 1.3.11 to 1.3.12.
- [Release notes](https://github.com/wvanbergen/chunky_png/releases )
- [Changelog](https://github.com/wvanbergen/chunky_png/blob/master/CHANGELOG.rdoc )
- [Commits](https://github.com/wvanbergen/chunky_png/compare/v1.3.11...v1.3.12 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:22:35 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								134b1f14e4 
								
							 
						 
						
							
							
								
								Bump rdf from 3.1.4 to 3.1.5 ( #14543 )  
							
							... 
							
							
							
							Bumps [rdf](https://github.com/ruby-rdf/rdf ) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/ruby-rdf/rdf/releases )
- [Changelog](https://github.com/ruby-rdf/rdf/blob/develop/CHANGES.md )
- [Commits](https://github.com/ruby-rdf/rdf/compare/3.1.4...3.1.5 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:21:52 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								06004417d8 
								
							 
						 
						
							
							
								
								Bump use-latest from 1.0.0 to 1.1.0 ( #14541 )  
							
							... 
							
							
							
							Bumps [use-latest](https://github.com/Andarist/use-latest ) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/Andarist/use-latest/releases )
- [Commits](https://github.com/Andarist/use-latest/compare/v1.0.0...v1.1.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:20:01 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								7892a04c05 
								
							 
						 
						
							
							
								
								Bump aws-sdk-s3 from 1.75.0 to 1.76.0 ( #14542 )  
							
							... 
							
							
							
							Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby ) from 1.75.0 to 1.76.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:18:25 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								249ed885bf 
								
							 
						 
						
							
							
								
								Bump brakeman from 4.8.2 to 4.9.0 ( #14540 )  
							
							... 
							
							
							
							Bumps [brakeman](https://github.com/presidentbeef/brakeman ) from 4.8.2 to 4.9.0.
- [Release notes](https://github.com/presidentbeef/brakeman/releases )
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md )
- [Commits](https://github.com/presidentbeef/brakeman/compare/v4.8.2...v4.9.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:17:00 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								63fc960206 
								
							 
						 
						
							
							
								
								Bump concurrent-ruby from 1.1.6 to 1.1.7 ( #14539 )  
							
							... 
							
							
							
							Bumps [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby ) from 1.1.6 to 1.1.7.
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases )
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.1.6...v1.1.7 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:16:12 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								b3e9b0bb25 
								
							 
						 
						
							
							
								
								Bump @babel/core from 7.10.5 to 7.11.1 ( #14554 )  
							
							... 
							
							
							
							Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core ) from 7.10.5 to 7.11.1.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.11.1/packages/babel-core )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-17 02:08:26 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								6436b1f77b 
								
							 
						 
						
							
							
								
								Remove dependency on unused and unmaintained http_parser.rb gem ( #14574 )  
							
							... 
							
							
							
							It seems that years ago, the “http” gem dependend on the “http_parser.rb” gem
(it now depends on the “http-parser” gem), and, still years ago, we pulled
it from git in order to benefit from a bugfix that wasn't released yet (#7467 ). 
							
						 
						
							2020-08-14 18:04:00 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								191fc742e9 
								
							 
						 
						
							
							
								
								Fix hardcoded non-breaking space in public view ( #14568 )  
							
							
							
						 
						
							2020-08-13 12:04:28 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Eugen Rochko 
								
							 
						 
						
							
							
							
							
								
							
							
								0043da909b 
								
							 
						 
						
							
							
								
								Fix destructuring error when unsubscribing without subscribing ( #14566 )  
							
							
							
						 
						
							2020-08-12 15:36:07 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								8baad22f68 
								
							 
						 
						
							
							
								
								Improve email address validation ( #14565 )  
							
							... 
							
							
							
							* Increase DNS timeout from 1 second to 5 seconds for MX check
1 seconds is rather short when using a recursive DNS resolver which
hasn't got a cached result already available. Use 5 seconds instead,
which is the timeout value we use for outgoing HTTP queries.
* Add more precise error messages for invalid e-mail addresses 
							
						 
						
							2020-08-12 12:40:25 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								ef710bbff6 
								
							 
						 
						
							
							
								
								Add client-side validation in password change forms ( #14564 )  
							
							... 
							
							
							
							* Fix client-side username validation at registration
It used the Account::USERNAME_RE regexp which is for *remote* users,
local user validation is stricter. Also take into account max username length.
* Add client-side form validation for password change
* Add client-side form validation to dedicated registration form
Previous changes only applied to the /about page, not the dedicated form on
/auth 
							
						 
						
							2020-08-12 12:11:15 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								22aba16386 
								
							 
						 
						
							
							
								
								Add HTML form validation for the registration form ( #14560 )  
							
							... 
							
							
							
							* Add HTML-level validation of username in sign-up form
* Make required fields with incorrect values more visible
* Enable HTML form validation for the registration form
* Mark agreement checkbox as required client-side
* Add minimum length to password
* Add client-side password confirmation validation 
							
						 
						
							2020-08-11 23:09:13 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Eugen Rochko 
								
							 
						 
						
							
							
							
							
								
							
							
								3d32dacbcb 
								
							 
						 
						
							
							
								
								Add support for managing multiple stream subscriptions in a single connection ( #14524 )  
							
							
							
						 
						
							2020-08-11 18:24:59 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								ccb975df83 
								
							 
						 
						
							
							
								
								Fix tootctl media commands not handling snowflake ids for media_attachments ( #14536 )  
							
							
							
						 
						
							2020-08-10 01:51:06 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									niwatori24 
								
							 
						 
						
							
							
							
							
								
							
							
								ba50bc2427 
								
							 
						 
						
							
							
								
								Use default :edit routing ( #14535 )  
							
							
							
						 
						
							2020-08-10 01:50:43 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									niwatori24 
								
							 
						 
						
							
							
							
							
								
							
							
								65c9d28fa1 
								
							 
						 
						
							
							
								
								Cache result of SQL ( #14534 )  
							
							
							
						 
						
							2020-08-09 15:23:42 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									ThibG 
								
							 
						 
						
							
							
							
							
								
							
							
								09b322872a 
								
							 
						 
						
							
							
								
								Fix crash when failing to load emoji picker ( #14525 )  
							
							... 
							
							
							
							Fixes  #14523  
						
							2020-08-08 17:57:56 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									abcang 
								
							 
						 
						
							
							
							
							
								
							
							
								739ea05d30 
								
							 
						 
						
							
							
								
								Fix eslint error ( #14521 )  
							
							
							
						 
						
							2020-08-07 10:40:33 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									dependabot[bot] 
								
							 
						 
						
							
							
							
							
								
							
							
								6b527f042f 
								
							 
						 
						
							
							
								
								Bump node-notifier from 7.0.1 to 7.0.2 ( #14499 )  
							
							... 
							
							
							
							Bumps [node-notifier](https://github.com/mikaelbr/node-notifier ) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/mikaelbr/node-notifier/releases )
- [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mikaelbr/node-notifier/compare/v7.0.1...v7.0.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 
							
						 
						
							2020-08-07 00:41:07 +09:00