dc8f1fbd97
Merge pull request from GHSA-9928-3cp5-93fm
...
* Fix attachments getting processed despite failing content-type validation
* Add a restrictive ImageMagick security policy tailored for Mastodon
* Fix misdetection of MP3 files with large cover art
* Reject unprocessable audio/video files instead of keeping them unchanged
1 year ago
6d8e0fae3e
Merge pull request from GHSA-ccm4-vgcc-73hp
...
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
1 year ago
fed9cbfd2b
Add hardened headers to user-uploaded files ( #25756 )
1 year ago
c78280a8ce
Add translate="no" to outgoing mentions and links ( #25524 )
1 year ago
b5675e265e
Add coverage for `CLI::Feeds` command ( #25319 )
1 year ago
07933db788
Add coverage for `CLI::Cache` command ( #25238 )
1 year ago
c66250abf1
Autofix Rubocop Regex Style rules ( #23690 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
1 year ago
768b00c4d0
Consistently use middle dot (·) instead of bullet (•) to separate items ( #25248 )
1 year ago
cd4f0feab8
Extract verify options method in search cli ( #25121 )
1 year ago
35c1c3e57a
Add CLI area progress bar helper ( #25208 )
1 year ago
dc26140d54
Use thor methods instead of tty prompt in maintenance cli ( #25207 )
1 year ago
1baf40077b
Fix FormatStringToken cop in CLI ( #25122 )
1 year ago
80c7de9984
Fix Rails/WhereExists cop in CLI ( #25123 )
1 year ago
b7b96efd17
Extract helper method for error report in cli/accounts command ( #25119 )
1 year ago
2cecb2dc9e
Increment index which was previously not used in maintenance CLI loop ( #25118 )
1 year ago
ec9bc7e604
Consistent usage of CLI `dry_run?` method ( #25116 )
1 year ago
55785b1603
Extract methods for user de-duping in maintenance CLI ( #25117 )
1 year ago
1d588d58f1
Improve various queries against account domains ( #25126 )
1 year ago
384345b0de
Add CLI Base class for command line code ( #25106 )
2 years ago
b6b4ea4ca5
Move the mastodon/*_cli files to mastodon/cli/* ( #24139 )
2 years ago
99e2e9b81f
Fix minor typos in comments and spec names ( #21831 )
2 years ago
536dd046d4
Add ability to block sign-ups from IP using the CLI ( #24870 )
2 years ago
ffb3fef7db
Fix uncaught `ActiveRecord::StatementInvalid` in Mastodon::IpBlocksCLI ( #24861 )
2 years ago
830e6cefae
Add version suffixes to nightly & edge image builds ( #24823 )
2 years ago
569b39256b
Bump rubocop-rails 2.19.1 with update .rubocop_todo.yml ( #24469 )
2 years ago
da3bd913ae
Autofix Rubocop Style/HashSyntax ( #23754 )
2 years ago
2c6c398c60
Fix Performance/CollectionLiteralInLoop cop ( #24819 )
2 years ago
24491abf6d
Fix Rails/DeprecatedActiveModelErrorsMethods cop ( #24742 )
2 years ago
5e060e1f44
Fix Performance/Sum cop ( #24788 )
2 years ago
1ed0ff30d3
Fix `tootctl accounts cull` crashing when encountering a domain resolving to a private address ( #23378 )
2 years ago
88d33f361f
Fix Lint/DuplicateBranch cop ( #24766 )
2 years ago
e8fe941015
Fix `tootctl accounts approve --number N` not aproving N earliest registrations ( #24605 )
2 years ago
2e43461100
Fix Rails/Output cop ( #24687 )
2 years ago
60ac9e8634
Fix Rails/SquishedSQLHeredocs cop ( #24694 )
2 years ago
1d9969fadf
Fix `tootctl accounts create --reattach --force` not working with confirmed accounts ( #24680 )
2 years ago
528b8e7e3a
Fix crash in `tootctl accounts create --reattach --force` ( #24557 )
2 years ago
faf657d709
Fix uncaught ActiveRecord::StatementInvalid exception in `Mastodon::AccountsCLI#approve` ( #24590 )
2 years ago
e98c86050a
Refactor `Cache-Control` and `Vary` definitions ( #24347 )
2 years ago
3afa1fda7a
Fix email confirmation skip option in `tootctl accounts modify USERNAME --email EMAIL --confirm` ( #24578 )
2 years ago
b0800d602e
tootctl: add --approve option to tootctl accounts create ( #24533 )
2 years ago
a2a66300d9
Clean up the post deployment migration generator ( #24233 )
2 years ago
3d8bd093b9
Bump version to v4.1.2 ( #24427 )
2 years ago
5c499f54e3
Change root Chewy strategy to emit a warning instead of erroring out in production mode ( #24327 )
2 years ago
2f7c3cb628
Update redis_config.rb to remove warning message ( #24352 )
2 years ago
a9b5598c97
Change user settings to be stored in a more optimal way ( #23630 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
0d70deee53
Add migration tests for user mail notification settings ( #24277 )
2 years ago
b9e34ef098
Migration warning helper, and only run in production env ( #24253 )
2 years ago
7f8e1bede4
Bump version to v4.1.1 ( #24201 )
2 years ago
bdeb6ff180
Fix crash in `tootctl` commands making use of parallelization when Elasticsearch is enabled ( #24182 )
2 years ago
aa947a143b
Regen rubocop-todo without Max shadowing ( #24076 )
2 years ago
f0e727f958
Add cache headers to static files served through Rails ( #24120 )
2 years ago
25d36b6edd
Autofix Rubocop Style/RedundantArgument ( #23798 )
2 years ago
1d0ad558ff
Change sidekiq-bulk's batch size from 10,000 to 1,000 jobs in one Redis call ( #24034 )
2 years ago
e762a14c0a
Enable Rubocop Performance/DeleteSuffix ( #24077 )
2 years ago
f432db7b9f
Fix sidekiq jobs not triggering Elasticsearch index updates ( #24046 )
2 years ago
b715bd8e53
Add refreshing many accounts at once with "tootctl accounts refresh" ( #23304 )
2 years ago
922837dc96
Upgrade to latest redis-rb 4.x and fix deprecations ( #23616 )
...
Co-authored-by: Jean Boussier <jean.boussier@gmail.com>
2 years ago
8784498ebf
Fix tootctl accounts migrate error due to typo ( #23567 )
2 years ago
3a6451c867
Add support for incoming rich text ( #23913 )
2 years ago
8fd3fc404d
Autofix Rubocop Rails/RootPathnameMethods ( #23760 )
2 years ago
0cfdd1a401
Enable Rubocop Style/StringConcatenation defaults ( #23792 )
2 years ago
59c8d43d94
Autofix Rubocop Style/RescueStandardError ( #23745 )
2 years ago
af4c95100c
Autofix Rubocop Style/FormatString ( #23743 )
2 years ago
717683d1c3
Autofix Rubocop remaining Layout rules ( #23679 )
2 years ago
d2dcb6c45a
Autofix Rubocop Style/UnpackFirst ( #23741 )
2 years ago
bf785df9fe
Audofix Rubocop Style/WordArray ( #23739 )
2 years ago
81ad6c2e39
Autofix Rubocop Style/StringLiterals ( #23695 )
2 years ago
2177daeae9
Autofix Rubocop Style/RedundantBegin ( #23703 )
2 years ago
ab7816a414
Autofix Rubocop Style/Lambda ( #23696 )
2 years ago
e2a3ebb271
Autofix Rubocop Style/IfUnlessModifier ( #23697 )
2 years ago
a6f77aa28a
Autofix Rubocop Lint/AmbiguousOperatorPrecedence ( #23681 )
2 years ago
e2567df860
Enable Lint/RedundantCopDisableDirective ( #23687 )
2 years ago
d65b2c1924
Apply Rubocop Style/RedundantConstantBase ( #23463 )
2 years ago
ac59d6f19f
Enable Rubocop Style/NumericLiterals ( #23647 )
2 years ago
669f6d2c0a
Run rubocop formatting except line length ( #23632 )
2 years ago
0c9d455ea5
Upgrade to Stylelint 15 with Prettier ( #23558 )
2 years ago
70c0d754a6
Bump version to 4.1.0 ( #23471 )
...
* Bump version to 4.1.0
* Editorialize changelog some more and highlight API changes
* Update changelog
2 years ago
11557d1c5a
Apply Rubocop Rails/RootPublicPath ( #23447 )
2 years ago
f68bb52556
Apply Rubocop Style/NegatedIfElseCondition ( #23451 )
2 years ago
203739dd3a
Apply Rubocop Performance/StringIdentifierArgument ( #23444 )
2 years ago
c92e033cdd
Apply Rubocop Performance/BindCall ( #23437 )
2 years ago
79ca19e9b2
Bump version to 4.1.0rc3 ( #23384 )
2 years ago
2f112432e6
Bump version to 4.1.0rc2 ( #23220 )
2 years ago
8180f7ba19
Bump version to 4.1.0rc1 ( #23112 )
2 years ago
a5fd2fe1cb
Add Storj DCS to cloud object storage options ( #21929 )
...
* Add Storj DCS to cloud object storage options
More explanation here: https://forum.storj.io/t/object-storage-provider-for-mastodon-instance/11464/37
* more help for which command to use
2 years ago
cb4e28f405
Add `tootctl domains purge` options to select subdomains and keep domain blocks ( #22063 )
...
* Add --include-subdomains option to tootctl domains purge
* Add support for '*.' subdomain wildcard patterns in `tootctl domains purge`
* Fix custom emojis deletion not following subdomain and URI options
* Change `tootctl domains purge` to not purge domain blocks unless --purge-domain-blocks is passed
* Refactor `tootctl domains purge`
* Add feedback on deleted domain blocks
2 years ago
0e8f8a1a1c
Implement tootctl accounts prune ( #18397 )
...
* Implement tootctl accounts prune
* Optimise query
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
745bdb11a0
Add `tootctl accounts migrate` ( #22330 )
...
* Add tootctl accounts replay-migration
Fixes #22281
* Change `tootctl accounts replay-migration` to `tootctl accounts migrate`
2 years ago
a3a5aa1597
Fix incorrect env file generation in mastodon:setup ( #23072 )
...
Regression from #23012
2 years ago
15b88a83ab
Fix sanitizer parsing link text as HTML when stripping unsupported links ( #22558 )
2 years ago
a65f86ae55
Fix `$` not being escaped in `.env.production` file generated by `mastodon:setup` ( #23012 )
...
* Fix `$` not being escaped in `.env.production` file generated by `mastodon:setup`
* Improve robustness of dotenv escaping
2 years ago
558ac411c4
Expand Stylelint glob to include CSS files ( #22469 )
2 years ago
3d3429243f
Fix default S3_HOSTNAME used in mastodon:setup ( #19932 )
...
s3-us-east-1.amazonaws.com does not exist.
Co-authored-by: Effy Elden <effy@effy.space>
2 years ago
f239d31f23
Add --email and --dry-run options to `tootctl accounts delete` ( #22328 )
2 years ago
78ef635980
Add command to remove avatar and header images of inactive remote accounts from the local database ( #22149 )
...
* Add tootctl subcommand media remove-profile-media
* Trigger workflows
* Correcting external linting
* External linting error
* External linting fix
* Merging with remove command
* Linting
* Correct long option names
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
* Correct long option names
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
* Correct long option names
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
* Remove saving a list of purged accounts
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
55b210b3e5
Fix crash and incorrect behavior in tootctl domains crawl ( #19004 )
2 years ago
c52263f6f8
Fix deprecation warning in `tootctl accounts rotate` ( #22120 )
2 years ago
66a70ebb6e
Fix pre-4.0 admin action logs ( #22091 )
...
* Fix BackfillAdminActionLogs post-deployment migration
* Improve migration tests
* Backfill admin action logs again
2 years ago
098ced7420
Remove support for Ruby 2.6 ( #21477 )
...
As pointed out by https://github.com/mastodon/mastodon/pull/21297#discussion_r1028372193
at least one of our dependencies already dropped support for Ruby 2.6, and we
had removed Ruby 2.6 tests from the CI over a year ago (#16861 ).
So stop advertising Ruby 2.6 support, bump targeted version, and drop some
compatibility code.
2 years ago
d587a268fd
Add logging for Rails cache timeouts ( #21667 )
...
* Reduce redis cache store connect timeout from default 20 seconds to 5 seconds
* Log cache store errors
2 years ago
Claire
Matt Jankowski
Nick Schonning
Jed Fox
Daniel M Brasil
Renaud Chaput
Eugen Rochko
Alison Wheeler
9p4
Jean byroot Boussier
JT Olio
Jeong Arm
Dan Peterson
Evan