lain
c7c453ca21
Merge branch 'develop' into gitlab-mr-iid-4426
2026-05-14 06:56:57 +00:00
lain
b90ac6b9c7
Merge branch 'develop' into host-verification
2026-05-14 06:01:31 +00:00
Lain Soykaf
c92d233233
Use upstream remote_ip package
2026-05-13 20:04:12 +04:00
lain
47ca427497
Merge pull request 'Better user search' ( #7793 ) from gitlab-mr-iid-4416 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7793
2026-05-13 09:53:52 +00:00
lain
ffff2098f0
Merge pull request 'Signatures: Only true is true.' ( #7892 ) from bump/http-signatures-0.1.3 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7892
2026-05-13 06:09:06 +00:00
Lain Soykaf
68e4bb53a2
Merge branch 'develop' into fix/reject-third-party-reports
2026-05-13 08:49:20 +04:00
nicole mikołajczyk
4d3aea1fce
Handle reports with just actor ap id as the object
...
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-05-13 00:56:56 +02:00
Phantasm
2b3ac2d7fe
lint
2026-05-13 00:44:33 +02:00
Phantasm
95b15190de
ActivityPubController: require validated host header
2026-05-13 00:32:57 +02:00
Phantasm
6c2d8209c9
SignatureRetryWorker: require validated host header
2026-05-13 00:32:54 +02:00
Phantasm
6f415cf3fc
EnsureHostMatchesPlug: Remove match against default scheme port
...
Checking against the default port of the Endpoint URL scheme is
redundant as normal instances will have the combination https/443
by default created by pleroma.instance gen, Tor-only instances should
have combination http/80 and local testing instances httt/XXXX.
The default scheme port doesn't add anything usefull in these configs.
2026-05-12 23:31:55 +02:00
Lain Soykaf
0cf865f025
Reject third-party remote reports
2026-05-12 23:50:30 +04:00
Phantasm
ea886dc36b
EnsureHostMatchesPlug: Ensure Host header matches instance URI
2026-05-12 16:50:28 +02:00
Lain Soykaf
71afba4825
Signature: Treat HTTP signature errors as invalid
2026-05-12 08:52:42 +04:00
Lain Soykaf
ab9fd33762
Fix Phoenix upstream migration regressions
2026-05-11 22:14:01 +04:00
Lain Soykaf
216a00f73f
Merge develop into Phoenix upstream migration
2026-05-11 22:13:46 +04:00
Lain Soykaf
47021b5aba
Fix MFM validator alias ordering
2026-05-11 16:37:59 +04:00
Lain Soykaf
6b86e31e5d
Add backend MFM support
2026-05-11 14:53:06 +04:00
Phantasm
4873991983
Update Pleroma-FE build artifacts URL
2026-05-06 13:55:45 +00:00
Lain Soykaf
727e9e7749
Fix votersCount inflation in multiple-choice polls
...
increase_vote_count/3 was incrementing votersCount on every vote
activity, causing inflation when a single voter picks multiple options.
Now only increments when the actor is a new unique voter, and preserves
existing votersCount otherwise.
Also adds is_integer guard to voters_count/1 to handle nil safely, and
adds tests for the voters_count clause ordering and edge cases.
2026-05-06 11:33:34 +04:00
Yonle
aec0deef8b
poll_view: try to read votersCount first, and then manually count local voters.
2026-05-05 13:50:11 +07:00
Lain Soykaf
621d86a31d
Validate WebFinger nicknames against actors
2026-05-03 18:02:59 +04:00
Lain Soykaf
00dd1b5103
Add failed-signature retry regression tests
2026-05-03 10:19:33 +04:00
Lain Soykaf
4acd8c4e72
Log failed-signature retry rejections
2026-05-02 21:08:04 +04:00
Lain Soykaf
a1f7413832
Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into update-spoofing
2026-05-02 16:10:33 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
...
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
Lain Soykaf
7756f491d5
Split failed-signature inbox retries
...
Route failed-signature ActivityPub inbox retries through a dedicated worker so legacy and malformed retry jobs fail closed before processing.
2026-05-01 08:43:42 +04:00
Phantasm
42683e79df
ReceiverWorker: Check that signature matches actor
2026-04-30 01:37:34 +02:00
Phantasm
af6d12c0a5
UpdateValidator: Check Actor owns Object or updates itself
2026-04-30 01:36:58 +02:00
Phantasm
7f97e21910
pleroma_ctl: Properly handle user arguments with whitespace
...
When user supplied arguments to pleroma_ctl include whitespace
that has been properly quoted, all arguments were sent to
ReleaseTasks in one string, which then String.split/1 the input on any
whitespace. This broke Mix tasks that accept certain user input like
instance gen and user management.
To fix this, pleroma_ctl now sends the arguments in list
form. Additionally pleroma_ctl arguments now need to be pre-processed.
Fixes pleroma/pleroma#7874
2026-04-24 18:04:31 +02:00
feld
a3404e91bc
Merge pull request 'DigestEmailsWorker: Change Oban queue to "background"' ( #7865 ) from phnt/oban-digest-queue into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7865
2026-04-01 19:08:40 +00:00
Phantasm
c8baad165b
lint: fix warnings throughout codebase
2026-03-31 16:23:11 +02:00
Phantasm
799199f6b5
DigestEmailsWorker: Change Oban queue to "background"
...
The mailer queue has been long gone and that left Oban jobs always
stuck in the "available" state that would never execute.
2026-03-26 22:38:26 +00:00
feld
9db47790bb
Merge pull request 'reverse_proxy,endpoint,uploaded_media: add immutable cache-control flag' ( #7835 ) from Yonle/pleroma:develop into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7835
2026-03-26 21:28:50 +00:00
nicole mikołajczyk
9e22baa66a
Merge pull request 'Federate votersCount correctly' ( #7858 ) from mkljczk/pleroma:poll-voters-count into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7858
2026-03-26 11:55:36 +00:00
nicole mikołajczyk
5aa3c8a06e
Federate votersCount correctly
...
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
Assisted-by: your mother
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-03-26 12:42:59 +01:00
Mark Felder
f06a0eab50
Move object_to_search_data/1 to Pleroma.Search
...
This standardizes this functionality within the Search module so
it doesn't need to be imported by other search backends from Meilisearch
Also integrate its filtering rules into Search.indexable?/1 for consistency
2026-03-25 14:47:39 -07:00
Mark Felder
ea78e76837
Fix add_to_index/1 to adhere to the typespec
2026-03-25 14:46:38 -07:00
feld
1d819195b6
Merge pull request 'Search: filter indexable activities before inserting Oban jobs' ( #7538 ) from gitlab-mr-iid-4161 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7538
2026-03-25 20:38:15 +00:00
Mark Felder
7cc9ba6f06
Merge remote-tracking branch 'origin/develop' into gitlab-mr-iid-4161
2026-03-25 13:31:07 -07:00
feld
63c9c7ea92
Merge pull request 'Harden rate limiter to deal with configuration issues' ( #7795 ) from gitlab-mr-iid-4418 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7795
2026-03-25 19:55:08 +00:00
feld
d1bd24ba64
Merge pull request 'ReverseProxy: Follow redirects recursively until redirect_limit' ( #7812 ) from gitlab-mr-iid-4435 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7812
2026-03-25 19:53:47 +00:00
feld
106a52eb2e
Merge pull request 'Restore embed route' ( #7857 ) from mkljczk/pleroma:restore-embeds into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7857
2026-03-25 19:52:16 +00:00
feld
eabfb2bd47
Merge pull request 'Fix LiveDashboard redirect not working when user added a path segment' ( #7830 ) from live-dashboard-fix-redirect into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7830
2026-03-25 19:49:40 +00:00
feld
876913d2af
Merge pull request 'Fix error codes for missing static files' ( #7850 ) from shibao/pleroma:static-fix into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7850
Reviewed-by: Phantasm <phnt@noreply.git.pleroma.social>
2026-03-25 19:49:05 +00:00
feld
93d05efdb1
Merge pull request 'credo: fix ordering of aliases missed in pleroma/pleroma!7841' ( #7852 ) from phnt/pleroma:credo-alias-fixes into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7852
2026-03-25 19:48:02 +00:00
Phantasm
750266f2e3
ActivityDraft: Add missing __MODULE__ matches and drop unneeded ones
2026-03-25 11:16:12 -07:00
Phantasm
ee55764501
lint
2026-03-25 11:14:42 -07:00
Phantasm
531041041a
Elixir 1.19: Fix deprecation warning when invoking ParallelCompiler
...
warning: you must pass return_diagnostics: true when invoking Kernel.ParallelCompiler functions
(elixir 1.19.5) lib/kernel/parallel_compiler.ex:324: Kernel.ParallelCompiler.spawn_workers/3
(pleroma 2.10.0-7-ga7a74d5e-elixir-1-19+test) lib/pleroma/html.ex:13: Pleroma.HTML.compile_scrubbers/0
(pleroma 2.10.0-7-ga7a74d5e-elixir-1-19+test) lib/pleroma/application.ex:48: Pleroma.Application.start/2
(kernel 10.5) application_master.erl:299: :application_master.start_it_old/4
warning: you must pass return_diagnostics: true when invoking Kernel.ParallelCompiler functions
(elixir 1.19.5) lib/kernel/parallel_compiler.ex:324: Kernel.ParallelCompiler.spawn_workers/3
(pleroma 2.10.0-7-ga7a74d5e-elixir-1-19+test) lib/pleroma/application.ex:121: Pleroma.Application.load_custom_modules/0
(pleroma 2.10.0-7-ga7a74d5e-elixir-1-19+test) lib/pleroma/application.ex:60: Pleroma.Application.start/2
(kernel 10.5) application_master.erl:299: :application_master.start_it_old/4
2026-03-25 11:11:38 -07:00
Phantasm
f60a317c2f
Elixir 1.19: Only match once on structs
...
Second match is not needed and a simple Map update is recommended by
the compiler
2026-03-25 11:11:17 -07:00