Commit graph

6,905 commits

Author SHA1 Message Date
Lain Soykaf
7d1cc56a78
Merge remote-tracking branch 'origin/develop' into audit-mix-audit-report
Conflict resolution notes:

- mix.lock: kept this branch's versions for cowlib, h2, hackney and hpax.
  Those upgrades are the point of the branch; develop is still on hackney
  1.20.1.

- .woodpecker/docker-armv7.yaml: accepted develop's deletion. It only
  existed here to build mdex_native on armv7, and mdex was already
  replaced with earmark again.

- lib/pleroma/reverse_proxy.ex: took develop's version. It independently
  grew request_with_constraints/5 and the invalid-status close, which
  supersede the equivalent fixes on this branch. Re-applied this branch's
  recv_timeout seeding, which develop does not have.

- lib/pleroma/gun/connection_pool/worker.ex and
  lib/pleroma/reverse_proxy/client/tesla.ex: took develop's versions. The
  gun pool rework (#7934) already guards the demonitor and makes
  release_conn/cancel_stream exit-safe, and it splits the Tesla client's
  graceful release from its abort path, so this branch's changes there are
  obsolete.

That leaves the client leak fix as a Hackney-only concern, which
stream_body/1 now handles the same way the gun client does.
2026-07-25 19:54:48 +04:00
Lain Soykaf
24bdd9774a
fix(reverse_proxy): release the HTTP client on every outcome
Three paths obtained a client ref and abandoned it without closing:
the content-length rejection in call/3, the invalid-status clause in
request/4, and the success branch of response/6.

Under Hackney 4 an abandoned ref is a permanent process leak. A conn
that finishes or errors without an explicit stop parks in `closed` or
`connected` and never terminates: closed/3 only arms its stop timer for
pooled conns, `connected` gets no state_timeout when idle_timeout is
infinity, and a non-pooled conn monitors hackney_conn_sup rather than
its caller, so the owner-DOWN cleanup never fires. Each parked process
pins every refc binary it read, which for proxied video is tens of MB.

Releasing on every outcome means the gun client must stop releasing in
stream_body/1, or the ref would be removed twice.

Hackney does reclaim a pooled connection itself for a response that
cannot carry a body (204, 304, HEAD), so those refs are marked and left
alone; stopping one would evict a connection another request may
already hold. The mark is gated on the request actually being pooled,
since a direct or proxy-tunnelled conn is never checked in and leaks
unless we stop it.
2026-07-25 18:46:43 +04:00
Lain Soykaf
99befcaf1b
fix(activitypub): deduplicate account favourites 2026-07-25 10:51:09 +04:00
Lain Soykaf
9a6c2f909d
Merge remote-tracking branch 'origin/develop' into issue-3379-favourites-order 2026-07-25 10:31:57 +04:00
lain
cc1b95c88e Merge pull request 'Rework Gun connection pooling' (#7934) from issue-2263-gun-validation into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7934
2026-07-25 05:44:39 +00:00
Lain Soykaf
d5f48101b8
fix(media-proxy): safely detect extensionless images 2026-07-25 00:06:03 +04:00
Lain Soykaf
465a81ecf2
Merge remote-tracking branch 'origin/develop' into review-pr-7933 2026-07-24 23:24:11 +04:00
lain
c2b8c67808 Merge pull request 'Improve RSS compliance' (#7932) from fix-rss into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7932
2026-07-24 17:33:40 +00:00
Lain Soykaf
5d8b5a73d2
style(feed): format Atom fallback assertion 2026-07-24 21:05:16 +04:00
Lain Soykaf
c5230d98c5
fix(feed): complete Atom XML metadata 2026-07-24 21:04:35 +04:00
Lain Soykaf
5f71532442
fix(feed): tighten enclosure metadata 2026-07-24 20:59:13 +04:00
Lain Soykaf
2d667e1d2a
style(feed): format enclosure fixtures 2026-07-24 20:44:58 +04:00
Lain Soykaf
c518319349
fix(feed): correct RSS permalink metadata 2026-07-24 20:43:40 +04:00
Lain Soykaf
ecd8a14435
fix(feed): correct Atom entry links 2026-07-24 20:38:25 +04:00
Lain Soykaf
d1a7e915ce
fix(feed): preserve standard media enclosures 2026-07-24 20:34:33 +04:00
Lain Soykaf
96f471a291
fix(feed): format RSS build dates 2026-07-24 20:21:54 +04:00
Lain Soykaf
d0c8ca92a5
fix(feed): escape self link URLs 2026-07-24 20:11:19 +04:00
Lain Soykaf
85a802282e
fix(feed): hide sensitive media previews 2026-07-24 20:08:04 +04:00
Lain Soykaf
a9bf7212d4
fix(feed): escape fallback content 2026-07-24 19:59:18 +04:00
lain
a790e08a6c Merge pull request 'hashtag-timeline-fix' (#7938) from mkljczk/pleroma:hashtag-timeline-fix into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7938
2026-07-24 15:29:25 +00:00
Lain Soykaf
77b5f3f485
test: cover multi-hashtag pagination 2026-07-24 18:49:44 +04:00
lain
c20c0ee867 Merge branch 'develop' into architecture-quick-wins 2026-07-24 14:09:44 +00:00
Lain Soykaf
0070b13130
test(workers): replace publisher mocks with Mox 2026-07-24 17:43:02 +04:00
Lain Soykaf
0862c8b88d
fix: advertise Chats feature flags correctly 2026-07-24 16:53:36 +04:00
Lain Soykaf
1a48466b85
style(tests): sort publisher worker aliases 2026-07-24 16:42:45 +04:00
Lain Soykaf
868723e371
fix(streaming): preserve followed domain exception 2026-07-24 16:01:46 +04:00
Lain Soykaf
3abe4ebfbd
perf(oauth): avoid duplicate user preload 2026-07-24 16:01:34 +04:00
Lain Soykaf
08c8571c59
fix(workers): avoid dynamic publisher atoms 2026-07-24 16:01:24 +04:00
Lain Soykaf
c3fe61c2f5
fix(user): correct cache key invalidation 2026-07-24 16:01:13 +04:00
nicole mikołajczyk
97b94a2f43 Update tests
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-07-24 01:05:12 +02:00
Lain Soykaf
bf477c1a53
fix(deps): replace mdex with earmark parser 2026-07-23 13:02:28 +04:00
Lain Soykaf
d090aeb2bb
fix(http): forward plain HTTP proxy requests 2026-07-22 20:35:51 +04:00
Lain Soykaf
77a7ba3a0e
fix(http): harden Hackney request lifecycle 2026-07-22 16:18:04 +04:00
Lain Soykaf
e63b7d6715
fix(formatter): preserve remote MFM mentions 2026-07-22 14:17:17 +04:00
nicole mikołajczyk
59269cf07a Fix hashtag timeline query
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-07-21 01:26:06 +02:00
nicole mikołajczyk
c772f9b40a Add a failing test
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-07-21 01:26:06 +02:00
Phantasm
1d6664b1f4 InstanceStaticPlug: Add more override and fallback tests 2026-07-20 15:18:49 +00:00
Phantasm
00ca971390 FrontendStaticPlug: Add test for static files outside of index 2026-07-20 15:18:49 +00:00
Phantasm
9129c65795 StaticNotFoundPlug: Move tests out from InstanceStatic 2026-07-20 15:18:49 +00:00
Phantasm
00c9059252
Remove unused require Logger 2026-07-19 22:23:20 +02:00
Phantasm
bbae94ddf3
Revert "Only warn about bad clear_config usage if warned usage is met"
What was I even thinking when writing that?

This reverts commit 3790e6786c.
2026-07-19 22:15:37 +02:00
Phantasm
0448ba5cd2
ApplicationTest: skip test spamming warnings from ExSyslogger
:warn log level is deprecated, but ExSyslogger hasn't been updated yet.
2026-07-19 22:15:20 +02:00
Phantasm
3ab8cc1eb9
ApplicationTest: make clear_config delete the whole env tree
clear_config([:logger, :backends], [value]) leaves the :logger env key
behind which breaks a ConfigDB test where the :logger key shouldn't be
stored and set.
2026-07-19 22:15:19 +02:00
Phantasm
e2f744bd68
Merge branch 'develop' into gitlab-mr-iid-4381 2026-07-18 20:47:03 +02:00
Phantasm
a89fe828d3
ConfigDB: Don't use a different config whitelist globally in tests 2026-07-18 20:45:51 +02:00
Phantasm
41ab347571
Lint 2026-07-18 16:13:39 +02:00
Phantasm
c688d09478
ConfigDB: Implement config update blacklist in AdminAPI 2026-07-18 16:06:11 +02:00
Phantasm
2d307c1487
ConfigDB: Support blacklisting whole config groups 2026-07-18 16:05:14 +02:00
Phantasm
ebd5596ba7
Elixir 1.19: Create ConfigDB blacklist and task for :pleroma, :logger
This option was never configurable with ConfigDB when it lived under
:logger, :backends; no need to be configurable now.
2026-07-17 23:32:43 +02:00
Lain Soykaf
b862254889
fix(deps): update Gun to 2.4.1 2026-07-17 21:09:13 +04:00