Lain Soykaf
a1f7413832
Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into update-spoofing
2026-05-02 16:10:33 +04:00
Lain Soykaf
ee18feef7c
Woodpecker CI: Allow manual develop release runs
2026-05-02 15:04:40 +04:00
lain
93c155e4fa
Merge pull request 'woodpecker-releases' ( #7878 ) from woodpecker-releases into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7878
2026-05-02 10:46:15 +00:00
Lain Soykaf
47e6dbfade
Woodpecker CI: Work around script entrypoint truncation
2026-05-02 13:38:56 +04:00
Lain Soykaf
da9cbc8e2f
Merge origin/develop into woodpecker-releases
2026-05-02 12:47:13 +04:00
Lain Soykaf
3dbc570471
Woodpecker CI: Publish update-compatible OTP releases
2026-05-02 11:57:04 +04:00
Lain Soykaf
a35aa6551e
Fix Woodpecker path filters
2026-05-02 10:39:49 +04:00
Lain Soykaf
99b614a52e
Add spoofing fixes changelog entry
2026-05-01 23:06:16 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
...
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
Lain Soykaf
7756f491d5
Split failed-signature inbox retries
...
Route failed-signature ActivityPub inbox retries through a dedicated worker so legacy and malformed retry jobs fail closed before processing.
2026-05-01 08:43:42 +04:00
Lain Soykaf
bd45704dba
Clarify cross-domain spoofing regressions
2026-04-30 17:21:40 +04:00
Lain Soykaf
9c540995b4
Use Mox in spoofing regression tests
2026-04-30 15:36:55 +04:00
Lain Soykaf
80e72b79f5
Add spoofing regression tests
2026-04-30 14:31:06 +04:00
Phantasm
42683e79df
ReceiverWorker: Check that signature matches actor
2026-04-30 01:37:34 +02:00
Phantasm
da28a4c441
ReceiverWorker: Add cancels on actor does not match signature test
2026-04-30 01:37:33 +02:00
Phantasm
af6d12c0a5
UpdateValidator: Check Actor owns Object or updates itself
2026-04-30 01:36:58 +02:00
Phantasm
cb2271978e
UpdateValidator: fix tests
2026-04-30 00:17:59 +02:00
Phantasm
e4632eced3
Woodpecker CI: Only run stable release pipelines on tag events
...
Removes possible races when uploading images/bundles and purposeful
pipeline failures when both a push and tag happened (OTP bundles do not
allow overwriting).
2026-04-25 13:40:53 +02:00
Phantasm
a996d25b84
Woodpecker CI Docker: label workflow as high memory
2026-04-25 11:08:28 +02:00
Phantasm
25e543d44d
changelog
2026-04-24 23:38:29 +02:00
Phantasm
cafd75b072
Woodpecker CI docker-combine: Hoist docker_settings anchor
2026-04-24 23:15:00 +02:00
Phantasm
95a33855d1
pleroma_ctl: Update update logic to Gitea API
2026-04-24 22:02:01 +02:00
Phantasm
7f97e21910
pleroma_ctl: Properly handle user arguments with whitespace
...
When user supplied arguments to pleroma_ctl include whitespace
that has been properly quoted, all arguments were sent to
ReleaseTasks in one string, which then String.split/1 the input on any
whitespace. This broke Mix tasks that accept certain user input like
instance gen and user management.
To fix this, pleroma_ctl now sends the arguments in list
form. Additionally pleroma_ctl arguments now need to be pre-processed.
Fixes pleroma/pleroma#7874
2026-04-24 18:04:31 +02:00
Phantasm
209b9c0a1e
Woodpecker CI: Shorten zip archive names further
...
Hopefully this will also help with the workflows randomly failing to
create the zip archive due to the Woodpecker bug.
2026-04-23 17:06:31 +02:00
Phantasm
16b7a95c48
Woodpecker CI: Run Docker image workflows also on Dockerfile changes
2026-04-23 17:06:31 +02:00
Phantasm
2e968890de
Woodpecker CI: Remove branch requirement for tag
...
Tag events don't have CI_COMMIT_BRANCH set, and neither can they be
restricted to specific branches. The branch condition is ignored on
tags.
2026-04-23 17:06:31 +02:00
Phantasm
5229e8ae65
Woodpecker CI: Unify OTP builds into a single worfklow
2026-04-23 17:06:29 +02:00
Phantasm
d8b8cbbb8d
Woodpecker CI: Shorten commit sha to eight chars
...
This will hopefully help with avoiding:
https://github.com/woodpecker-ci/woodpecker/issues/5450
2026-04-23 17:05:27 +02:00
Phantasm
89a78d765c
Woodpecker CI: Unify Docker image workflows
2026-04-23 17:05:27 +02:00
Phantasm
dd29b9c11b
Woodpecker CI OTP: use CI_COMMIT_BRANCH variable instead of stable
2026-04-23 17:05:27 +02:00
Phantasm
eea01b54b7
Woodpecker CI: Allow running stable release jobs manually
...
Also allows Docker images to be tagged with a version in manual jobs
when CI_COMMIT_TAG is manually specified
2026-04-23 17:05:27 +02:00
Phantasm
42eb9706a5
Woodpecker CI: Build stable OTP releases
2026-04-23 17:05:27 +02:00
Phantasm
97a2e8c764
Woodpecker CI: Tag stable docker release with version tag
2026-04-23 17:05:27 +02:00
Phantasm
e002650e23
Woodpecker CI: Add Docker stable releases
2026-04-23 17:05:26 +02:00
Phantasm
f00c13602d
Woodpecker CI Develop: Also tag images using commit sha
...
With the commit sha being present, `tags` now has to be a list instead
of an array, otherwise Woodpecker raises a yaml compiler warning:
yaml: line 17: did not find expected ',' or ']'
2026-04-23 17:05:26 +02:00
Phantasm
13d6246ed9
Woodpecker CI: Cleanup develop releases CI code duplication
2026-04-23 17:05:24 +02:00
Phantasm
67e7f788c9
Woodpecker CI Docker Develop combine: Switch to plugin
...
Replaces manual tagging handling with a plugin, mostly to avoid dealing
with echoed out secrets in the job log, which should be censored
automatically, but who knows when that breaks...
2026-04-23 17:01:41 +02:00
Phantasm
e2adc796c4
Woodpecker CI: Multiplatform Docker image manifests
2026-04-23 17:01:40 +02:00
Phantasm
d2f7c9252f
Woodpecker CI Docker develop: Switch to kaniko
2026-04-23 17:01:40 +02:00
Phantasm
5351cd4ce9
Woodpecker CI: Add OTP develop pipeline
...
musl and glibc builds need to be split due to workspace polution.
Workflow's steps share the same workspace, so two separate build steps
can't be in the same workflow since they share the buld artifacts, deps.
2026-04-23 17:01:25 +02:00
Phantasm
fc5aea73ff
Woodpecker CI: Add develop Docker image build pipeline
2026-04-23 16:56:21 +02:00
feld
683ab39160
Merge pull request 'Downgrade Hackney' ( #7860 ) from hackney-downgrade into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7860
2026-04-08 19:29:50 +00:00
Mark Felder
7582b71f46
Downgrade Hackney to 1.20.1, before connection performance regressions
...
It appears the implementation of Happy Eyeballs in 1.22.0 is the origin of
some pretty serious performance regressions that remain even in the latest
Hackney 3.0 branch.
Connection tests:
=== 1.22.0 ===
First call: 9434ms
Second call: 14ms
=== 1.21.0 ===
First call: 228ms
Second call: 16ms
We went back further to 1.20.1 though because of reported problems with the mail
client and ssl_options. That bug was not reproduced by a dev, though, but we'll
trust it for now.
2026-04-08 12:27:47 -07:00
feld
ebfa0d88df
Merge pull request 'Update Bandit' ( #7868 ) from bandit into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7868
2026-04-07 16:12:52 +00:00
Mark Felder
00265751cc
Update Bandit
2026-04-03 13:22:12 -07:00
feld
a3404e91bc
Merge pull request 'DigestEmailsWorker: Change Oban queue to "background"' ( #7865 ) from phnt/oban-digest-queue into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7865
2026-04-01 19:08:40 +00:00
Mark Felder
01ced6bea2
Fix the daily email digest job which was not executing
2026-04-01 11:59:23 -07:00
Phantasm
1405f5dc8b
Merge pull request 'PR Woodpecker CI workflow' ( #7825 ) from phnt/pleroma:woodpecker-pr-ci into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7825
2026-03-31 14:51:42 +00:00
Phantasm
fd7b809c54
Woodpecker CI: Only run lint and unit tests when relevant files changed
2026-03-31 14:32:52 +00:00
Phantasm
096c4ea980
Woodpecker CI: Run lint and unit tests also on push to default branch
2026-03-31 14:32:52 +00:00
