Phantasm
6f415cf3fc
EnsureHostMatchesPlug: Remove match against default scheme port
...
Checking against the default port of the Endpoint URL scheme is
redundant as normal instances will have the combination https/443
by default created by pleroma.instance gen, Tor-only instances should
have combination http/80 and local testing instances httt/XXXX.
The default scheme port doesn't add anything usefull in these configs.
2026-05-12 23:31:55 +02:00
Lain Soykaf
0cf865f025
Reject third-party remote reports
2026-05-12 23:50:30 +04:00
Phantasm
35b5447f3f
EnsureHostMatchesPlug: Add more tests
2026-05-12 17:02:28 +02:00
Phantasm
90e390e45b
fix tests
2026-05-12 16:50:35 +02:00
Phantasm
d6d0ce7260
EnsureHostMatchesPlug: Add tests
2026-05-12 16:50:35 +02:00
Lain Soykaf
71afba4825
Signature: Treat HTTP signature errors as invalid
2026-05-12 08:52:42 +04:00
lain
bab24878c7
Merge branch 'develop' into mastodon-admin-api
2026-05-11 19:14:51 +00:00
Lain Soykaf
8a56cf5c0f
Clarify websocket token precedence test
2026-05-11 22:19:45 +04:00
Lain Soykaf
ab9fd33762
Fix Phoenix upstream migration regressions
2026-05-11 22:14:01 +04:00
Lain Soykaf
592be493c8
Use published Pleroma MFM parser package
2026-05-11 19:13:01 +04:00
Lain Soykaf
6b86e31e5d
Add backend MFM support
2026-05-11 14:53:06 +04:00
lain
133fc64472
Merge branch 'develop' into webhooks
2026-05-06 07:53:46 +00:00
Lain Soykaf
727e9e7749
Fix votersCount inflation in multiple-choice polls
...
increase_vote_count/3 was incrementing votersCount on every vote
activity, causing inflation when a single voter picks multiple options.
Now only increments when the actor is a new unique voter, and preserves
existing votersCount otherwise.
Also adds is_integer guard to voters_count/1 to handle nil safely, and
adds tests for the voters_count clause ordering and edge cases.
2026-05-06 11:33:34 +04:00
nicole mikołajczyk
11281d740a
make GET /api/v1/admin/reports match Mastodon admin API
...
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-05-04 13:49:40 +02:00
Lain Soykaf
621d86a31d
Validate WebFinger nicknames against actors
2026-05-03 18:02:59 +04:00
Lain Soykaf
6ae02d71bd
Align inbox controller tests with signer mapping
2026-05-03 10:33:42 +04:00
Lain Soykaf
00dd1b5103
Add failed-signature retry regression tests
2026-05-03 10:19:33 +04:00
Lain Soykaf
4acd8c4e72
Log failed-signature retry rejections
2026-05-02 21:08:04 +04:00
Lain Soykaf
a1f7413832
Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into update-spoofing
2026-05-02 16:10:33 +04:00
Lain Soykaf
3dbc570471
Woodpecker CI: Publish update-compatible OTP releases
2026-05-02 11:57:04 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
...
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
Lain Soykaf
7756f491d5
Split failed-signature inbox retries
...
Route failed-signature ActivityPub inbox retries through a dedicated worker so legacy and malformed retry jobs fail closed before processing.
2026-05-01 08:43:42 +04:00
Lain Soykaf
bd45704dba
Clarify cross-domain spoofing regressions
2026-04-30 17:21:40 +04:00
Lain Soykaf
9c540995b4
Use Mox in spoofing regression tests
2026-04-30 15:36:55 +04:00
Lain Soykaf
80e72b79f5
Add spoofing regression tests
2026-04-30 14:31:06 +04:00
Phantasm
42683e79df
ReceiverWorker: Check that signature matches actor
2026-04-30 01:37:34 +02:00
Phantasm
da28a4c441
ReceiverWorker: Add cancels on actor does not match signature test
2026-04-30 01:37:33 +02:00
Phantasm
cb2271978e
UpdateValidator: fix tests
2026-04-30 00:17:59 +02:00
Phantasm
eb69576154
fix test after embed route got added back
2026-03-31 16:23:21 +02:00
Phantasm
c8baad165b
lint: fix warnings throughout codebase
2026-03-31 16:23:11 +02:00
Mark Felder
9fdc1a8d3b
Merge remote-tracking branch 'origin/develop' into paradedb-search-backend
2026-03-26 21:29:11 +00:00
feld
9db47790bb
Merge pull request 'reverse_proxy,endpoint,uploaded_media: add immutable cache-control flag' ( #7835 ) from Yonle/pleroma:develop into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7835
2026-03-26 21:28:50 +00:00
nicole mikołajczyk
9e22baa66a
Merge pull request 'Federate votersCount correctly' ( #7858 ) from mkljczk/pleroma:poll-voters-count into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7858
2026-03-26 11:55:36 +00:00
nicole mikołajczyk
5aa3c8a06e
Federate votersCount correctly
...
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
Assisted-by: your mother
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-03-26 12:42:59 +01:00
Mark Felder
2cc7b8356c
Merge remote-tracking branch 'origin/develop' into paradedb-search-backend
2026-03-25 15:09:19 -07:00
feld
1d819195b6
Merge pull request 'Search: filter indexable activities before inserting Oban jobs' ( #7538 ) from gitlab-mr-iid-4161 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7538
2026-03-25 20:38:15 +00:00
Mark Felder
711b33d81c
Fix CommonAPI.favorite/2 arg order
2026-03-25 13:32:25 -07:00
Mark Felder
7cc9ba6f06
Merge remote-tracking branch 'origin/develop' into gitlab-mr-iid-4161
2026-03-25 13:31:07 -07:00
feld
63c9c7ea92
Merge pull request 'Harden rate limiter to deal with configuration issues' ( #7795 ) from gitlab-mr-iid-4418 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7795
2026-03-25 19:55:08 +00:00
feld
d1bd24ba64
Merge pull request 'ReverseProxy: Follow redirects recursively until redirect_limit' ( #7812 ) from gitlab-mr-iid-4435 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7812
2026-03-25 19:53:47 +00:00
feld
eabfb2bd47
Merge pull request 'Fix LiveDashboard redirect not working when user added a path segment' ( #7830 ) from live-dashboard-fix-redirect into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7830
2026-03-25 19:49:40 +00:00
feld
876913d2af
Merge pull request 'Fix error codes for missing static files' ( #7850 ) from shibao/pleroma:static-fix into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7850
Reviewed-by: Phantasm <phnt@noreply.git.pleroma.social>
2026-03-25 19:49:05 +00:00
Phantasm
01b139c633
Elixir 1.19: Add note to deprecation warnings test
...
The Logger does not get reconfigured when running in the test env,
the added and on_exit removed settings below should have no effect
besides triggering the deprecation warnings. To make breakage even less
possible, async is turned off for these tests.
TransferTask test does almost the same with the Application env.
2026-03-25 19:35:46 +00:00
Phantasm
f44774d387
lint
2026-03-25 19:35:46 +00:00
Phantasm
1743a837dd
Elixir 1.19: Set merged logger config correctly, remove log level test
2026-03-25 19:35:46 +00:00
Phantasm
0ac1b65ba9
Elixir 1.19: Fix improper deprecation warning wording
2026-03-25 19:35:46 +00:00
Phantasm
829a60ce93
Elixir 1.19 MRFTest: Replace matchable_regexes with regexes_match! func
2026-03-25 19:35:46 +00:00
Phantasm
02fc770e36
Elixir 1.19: Improve DeprecationWarningsTest Logger reconfiguration test
2026-03-25 19:35:46 +00:00
Phantasm
0f262bb2f3
Elixir 1.19: Replace ugly old logger config checks with config merging
...
Side note: Going up in log levels doesn't work properly.
- debug->info works
- info->debug does not work
2026-03-25 19:35:46 +00:00
Phantasm
aed0eb3333
Elixir 1.19: Warn on old config of :console Logger and conflicts
2026-03-25 19:35:46 +00:00