Phantasm
4810d2536e
ActivityPubController: Use valid signatures in Host header test
2026-05-13 12:16:27 +02:00
Phantasm
2b3ac2d7fe
lint
2026-05-13 00:44:33 +02:00
Phantasm
95eef879d7
ActivityPubController: add mismatched host test
2026-05-13 00:40:53 +02:00
Phantasm
c19bdf3814
SignatureRetryWorker: add mismatched host test, fix tests
2026-05-13 00:33:09 +02:00
Phantasm
95b15190de
ActivityPubController: require validated host header
2026-05-13 00:32:57 +02:00
Phantasm
6c2d8209c9
SignatureRetryWorker: require validated host header
2026-05-13 00:32:54 +02:00
Phantasm
6f415cf3fc
EnsureHostMatchesPlug: Remove match against default scheme port
...
Checking against the default port of the Endpoint URL scheme is
redundant as normal instances will have the combination https/443
by default created by pleroma.instance gen, Tor-only instances should
have combination http/80 and local testing instances httt/XXXX.
The default scheme port doesn't add anything usefull in these configs.
2026-05-12 23:31:55 +02:00
Phantasm
35b5447f3f
EnsureHostMatchesPlug: Add more tests
2026-05-12 17:02:28 +02:00
Phantasm
90e390e45b
fix tests
2026-05-12 16:50:35 +02:00
Phantasm
d6d0ce7260
EnsureHostMatchesPlug: Add tests
2026-05-12 16:50:35 +02:00
Phantasm
ea886dc36b
EnsureHostMatchesPlug: Ensure Host header matches instance URI
2026-05-12 16:50:28 +02:00
lain
960c730706
Merge pull request 'Update http_signatures to 0.1.3' ( #7891 ) from bump/http-signatures-0.1.3 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7891
2026-05-11 18:15:21 +00:00
Lain Soykaf
7f4890b6a9
Add changelog for http_signatures update
2026-05-11 21:12:34 +04:00
Lain Soykaf
61feb3dfcd
Update http_signatures to 0.1.3
2026-05-11 21:01:59 +04:00
lain
f579dc099c
Merge pull request 'Use published Pleroma MFM parser package' ( #7890 ) from lambadalambda/pleroma:mfm-backend-hex into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7890
2026-05-11 15:35:12 +00:00
Lain Soykaf
592be493c8
Use published Pleroma MFM parser package
2026-05-11 19:13:01 +04:00
lain
e1b2e788d9
Merge pull request 'Add backend MFM support' ( #7889 ) from lambadalambda/pleroma:mfm-backend into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7889
2026-05-11 13:30:03 +00:00
Lain Soykaf
47021b5aba
Fix MFM validator alias ordering
2026-05-11 16:37:59 +04:00
Lain Soykaf
c780298ce7
Add changelog for MFM support
2026-05-11 15:05:00 +04:00
Lain Soykaf
6b86e31e5d
Add backend MFM support
2026-05-11 14:53:06 +04:00
Phantasm
ebcc7684c1
Merge pull request 'Update Pleroma-FE build artifacts URL' ( #7885 ) from phnt/pleroma:fe-build-link into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7885
2026-05-06 13:56:10 +00:00
Phantasm
4873991983
Update Pleroma-FE build artifacts URL
2026-05-06 13:55:45 +00:00
lain
2082bf729a
Merge pull request 'poll_view: try to read votersCount first, and then manually count local voters.' ( #7883 ) from Yonle/pleroma:pf1 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7883
2026-05-06 09:55:03 +00:00
Lain Soykaf
c62d191986
Add changelog for votersCount inflation fix
2026-05-06 11:48:20 +04:00
lain
f1249d830f
Merge branch 'develop' into pf1
2026-05-06 07:45:50 +00:00
Lain Soykaf
727e9e7749
Fix votersCount inflation in multiple-choice polls
...
increase_vote_count/3 was incrementing votersCount on every vote
activity, causing inflation when a single voter picks multiple options.
Now only increments when the actor is a new unique voter, and preserves
existing votersCount otherwise.
Also adds is_integer guard to voters_count/1 to handle nil safely, and
adds tests for the voters_count clause ordering and edge cases.
2026-05-06 11:33:34 +04:00
lain
86a5213523
Merge pull request 'litepub-0.1.jsonld cleanup' ( #7871 ) from mkljczk/pleroma:context-cleanup into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7871
2026-05-05 08:22:29 +00:00
Yonle
aec0deef8b
poll_view: try to read votersCount first, and then manually count local voters.
2026-05-05 13:50:11 +07:00
lain
4230887d7e
Merge pull request 'Prepare 2.10.2 release' ( #7880 ) from release/2.10.2 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7880
2026-05-03 16:27:21 +00:00
Lain Soykaf
8ccdd98914
Prepare 2.10.2 release
2026-05-03 20:23:35 +04:00
Lain Soykaf
78aef1b875
Merge branch 'stable' of ssh://git.pleroma.com/pleroma/pleroma into develop
2026-05-03 20:19:40 +04:00
Lain Soykaf
78a41dfdcd
Merge branch 'update-spoofing' of ssh://git.pleroma.social:22/pleroma-secteam/pleroma into develop
2026-05-03 20:07:00 +04:00
Lain Soykaf
621d86a31d
Validate WebFinger nicknames against actors
2026-05-03 18:02:59 +04:00
lain
2c7095d300
Merge pull request 'Prepare 2.10.1 release' ( #7879 ) from release/2.10.1 into stable
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7879
2026-05-03 13:18:52 +00:00
Lain Soykaf
6553ba24aa
Prepare 2.10.1 release
2026-05-03 16:56:01 +04:00
Lain Soykaf
1a8d585cbf
Woodpecker CI: Allow rerunning OTP package uploads
2026-05-03 12:10:23 +04:00
Lain Soykaf
6ae02d71bd
Align inbox controller tests with signer mapping
2026-05-03 10:33:42 +04:00
Lain Soykaf
00dd1b5103
Add failed-signature retry regression tests
2026-05-03 10:19:33 +04:00
Lain Soykaf
4acd8c4e72
Log failed-signature retry rejections
2026-05-02 21:08:04 +04:00
Lain Soykaf
50651284a2
Woodpecker CI: Run generic workflows on amd64
2026-05-02 17:21:37 +04:00
Lain Soykaf
9fdad779b5
Woodpecker CI: Run Docker manifest combine on amd64
2026-05-02 16:12:47 +04:00
Lain Soykaf
a1f7413832
Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into update-spoofing
2026-05-02 16:10:33 +04:00
Lain Soykaf
ee18feef7c
Woodpecker CI: Allow manual develop release runs
2026-05-02 15:04:40 +04:00
lain
93c155e4fa
Merge pull request 'woodpecker-releases' ( #7878 ) from woodpecker-releases into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7878
2026-05-02 10:46:15 +00:00
Lain Soykaf
47e6dbfade
Woodpecker CI: Work around script entrypoint truncation
2026-05-02 13:38:56 +04:00
Lain Soykaf
da9cbc8e2f
Merge origin/develop into woodpecker-releases
2026-05-02 12:47:13 +04:00
Lain Soykaf
3dbc570471
Woodpecker CI: Publish update-compatible OTP releases
2026-05-02 11:57:04 +04:00
Lain Soykaf
a35aa6551e
Fix Woodpecker path filters
2026-05-02 10:39:49 +04:00
Lain Soykaf
99b614a52e
Add spoofing fixes changelog entry
2026-05-01 23:06:16 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
...
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
