Commit graph

17,775 commits

Author SHA1 Message Date
Lain Soykaf
99b614a52e
Add spoofing fixes changelog entry 2026-05-01 23:06:16 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
Lain Soykaf
7756f491d5
Split failed-signature inbox retries
Route failed-signature ActivityPub inbox retries through a dedicated worker so legacy and malformed retry jobs fail closed before processing.
2026-05-01 08:43:42 +04:00
Lain Soykaf
bd45704dba
Clarify cross-domain spoofing regressions 2026-04-30 17:21:40 +04:00
Lain Soykaf
9c540995b4
Use Mox in spoofing regression tests 2026-04-30 15:36:55 +04:00
Lain Soykaf
80e72b79f5
Add spoofing regression tests 2026-04-30 14:31:06 +04:00
Phantasm
42683e79df
ReceiverWorker: Check that signature matches actor 2026-04-30 01:37:34 +02:00
Phantasm
da28a4c441
ReceiverWorker: Add cancels on actor does not match signature test 2026-04-30 01:37:33 +02:00
Phantasm
af6d12c0a5
UpdateValidator: Check Actor owns Object or updates itself 2026-04-30 01:36:58 +02:00
Phantasm
cb2271978e
UpdateValidator: fix tests 2026-04-30 00:17:59 +02:00
feld
683ab39160 Merge pull request 'Downgrade Hackney' (#7860) from hackney-downgrade into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7860
2026-04-08 19:29:50 +00:00
Mark Felder
7582b71f46 Downgrade Hackney to 1.20.1, before connection performance regressions
It appears the implementation of Happy Eyeballs in 1.22.0 is the origin of
some pretty serious performance regressions that remain even in the latest
Hackney 3.0 branch.

Connection tests:

=== 1.22.0 ===
First call:  9434ms
Second call: 14ms

=== 1.21.0 ===
First call:  228ms
Second call: 16ms

We went back further to 1.20.1 though because of reported problems with the mail
client and ssl_options. That bug was not reproduced by a dev, though, but we'll
trust it for now.
2026-04-08 12:27:47 -07:00
feld
ebfa0d88df Merge pull request 'Update Bandit' (#7868) from bandit into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7868
2026-04-07 16:12:52 +00:00
Mark Felder
00265751cc Update Bandit 2026-04-03 13:22:12 -07:00
feld
a3404e91bc Merge pull request 'DigestEmailsWorker: Change Oban queue to "background"' (#7865) from phnt/oban-digest-queue into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7865
2026-04-01 19:08:40 +00:00
Mark Felder
01ced6bea2 Fix the daily email digest job which was not executing 2026-04-01 11:59:23 -07:00
Phantasm
1405f5dc8b Merge pull request 'PR Woodpecker CI workflow' (#7825) from phnt/pleroma:woodpecker-pr-ci into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7825
2026-03-31 14:51:42 +00:00
Phantasm
fd7b809c54 Woodpecker CI: Only run lint and unit tests when relevant files changed 2026-03-31 14:32:52 +00:00
Phantasm
096c4ea980 Woodpecker CI: Run lint and unit tests also on push to default branch 2026-03-31 14:32:52 +00:00
Phantasm
072dc39d83 Woodpecker CI: Don't depend on changelog in lint workflow 2026-03-31 14:32:52 +00:00
Phantasm
7bba485397 Woodpecker CI: Disable cycles lint step for now since it always fails 2026-03-31 14:32:52 +00:00
Phantasm
1fe0970b64 woodpecker CI: Fix cycles in lint workflow 2026-03-31 14:32:52 +00:00
Phantasm
08bf6c8fed Woodpecker CI: Explicitely exit with non-zero exit code on fail 2026-03-31 14:32:52 +00:00
Phantasm
cdcc432f31 Woodpecker CI: Lint workflow, don't use brackets in shell tests 2026-03-31 14:32:52 +00:00
Phantasm
b0de9bd3cd Woodpecker CI: Make xref use fail stamp 2026-03-31 14:32:52 +00:00
Phantasm
56a25202b9 Woodpecker CI: Fix credo 2026-03-31 14:32:52 +00:00
Phantasm
265d3eeebc Woodpecker CI: Fix syntax error in lint workflow 2026-03-31 14:32:52 +00:00
Phantasm
b224a2dacc Woodpecker CI: Don't immediately fail whole lint workflow with one error 2026-03-31 14:32:52 +00:00
Phantasm
8640fcef22 Woodpecker CI: Fix compile error on Elixir 1.18 due to wrong OTP 2026-03-31 14:32:52 +00:00
Phantasm
0fd544722f Woodpecker: Ensure correct workflow status in lint pipeline 2026-03-31 14:32:52 +00:00
Phantasm
b67d7c1106 changelog 2026-03-31 14:32:52 +00:00
Phantasm
6f8233d780 Woodpecker CI: Add linting pipeline 2026-03-31 14:32:52 +00:00
Phantasm
2880aac617 Woodpecker CI: Unit test using Elixir 1.15 and 1.18 2026-03-31 14:32:52 +00:00
Phantasm
4493d0d187 Woodpecker CI: Update check-changelog script for Woodpecker 2026-03-31 14:32:52 +00:00
Phantasm
1a0af1c0c0 Woodpecker CI: Add check-changelog workflow 2026-03-31 14:32:52 +00:00
Phantasm
88a349f3ab Woodpecker CI: Retry failed tests using pleroma.test_runner
I didn't add the --cover option, but it would be useless right now
anyway
2026-03-31 14:32:52 +00:00
Phantasm
a9fe2fe4d8 Move main Woodpecker file to own directory 2026-03-31 14:32:52 +00:00
Phantasm
f138423814 Merge pull request 'lint-warnings' (#7867) from phnt/pleroma:lint-warnings into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7867
2026-03-31 14:32:35 +00:00
Phantasm
eb69576154
fix test after embed route got added back 2026-03-31 16:23:21 +02:00
Phantasm
c8baad165b
lint: fix warnings throughout codebase 2026-03-31 16:23:11 +02:00
Phantasm
799199f6b5 DigestEmailsWorker: Change Oban queue to "background"
The mailer queue has been long gone and that left Oban jobs always
stuck in the "available" state that would never execute.
2026-03-26 22:38:26 +00:00
feld
9db47790bb Merge pull request 'reverse_proxy,endpoint,uploaded_media: add immutable cache-control flag' (#7835) from Yonle/pleroma:develop into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7835
2026-03-26 21:28:50 +00:00
nicole mikołajczyk
9e22baa66a Merge pull request 'Federate votersCount correctly' (#7858) from mkljczk/pleroma:poll-voters-count into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7858
2026-03-26 11:55:36 +00:00
nicole mikołajczyk
5aa3c8a06e Federate votersCount correctly
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
Assisted-by: your mother
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-03-26 12:42:59 +01:00
feld
9af26e5fb5 Merge pull request 'Additional Search Indexing cleanup' (#7864) from search-indexing into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7864
2026-03-25 22:05:55 +00:00
Mark Felder
f06a0eab50 Move object_to_search_data/1 to Pleroma.Search
This standardizes this functionality within the Search module so
it doesn't need to be imported by other search backends from Meilisearch

Also integrate its filtering rules into Search.indexable?/1 for consistency
2026-03-25 14:47:39 -07:00
Mark Felder
ea78e76837 Fix add_to_index/1 to adhere to the typespec 2026-03-25 14:46:38 -07:00
feld
1d819195b6 Merge pull request 'Search: filter indexable activities before inserting Oban jobs' (#7538) from gitlab-mr-iid-4161 into develop
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7538
2026-03-25 20:38:15 +00:00
Mark Felder
711b33d81c Fix CommonAPI.favorite/2 arg order 2026-03-25 13:32:25 -07:00
Mark Felder
7cc9ba6f06 Merge remote-tracking branch 'origin/develop' into gitlab-mr-iid-4161 2026-03-25 13:31:07 -07:00