Lain Soykaf
a35aa6551e
Fix Woodpecker path filters
2026-05-02 10:39:49 +04:00
Lain Soykaf
99b614a52e
Add spoofing fixes changelog entry
2026-05-01 23:06:16 +04:00
Lain Soykaf
4337e0eb1b
Fail closed on unresolved signed payloads
...
Reject unknown remote Update targets and invalidate signed payloads when their signer identity cannot be mapped, avoiding crashes and fail-open signature state.
2026-05-01 12:33:26 +04:00
Lain Soykaf
7756f491d5
Split failed-signature inbox retries
...
Route failed-signature ActivityPub inbox retries through a dedicated worker so legacy and malformed retry jobs fail closed before processing.
2026-05-01 08:43:42 +04:00
Lain Soykaf
bd45704dba
Clarify cross-domain spoofing regressions
2026-04-30 17:21:40 +04:00
Lain Soykaf
9c540995b4
Use Mox in spoofing regression tests
2026-04-30 15:36:55 +04:00
Lain Soykaf
80e72b79f5
Add spoofing regression tests
2026-04-30 14:31:06 +04:00
Phantasm
42683e79df
ReceiverWorker: Check that signature matches actor
2026-04-30 01:37:34 +02:00
Phantasm
da28a4c441
ReceiverWorker: Add cancels on actor does not match signature test
2026-04-30 01:37:33 +02:00
Phantasm
af6d12c0a5
UpdateValidator: Check Actor owns Object or updates itself
2026-04-30 01:36:58 +02:00
Phantasm
cb2271978e
UpdateValidator: fix tests
2026-04-30 00:17:59 +02:00
feld
683ab39160
Merge pull request 'Downgrade Hackney' ( #7860 ) from hackney-downgrade into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7860
2026-04-08 19:29:50 +00:00
Mark Felder
7582b71f46
Downgrade Hackney to 1.20.1, before connection performance regressions
...
It appears the implementation of Happy Eyeballs in 1.22.0 is the origin of
some pretty serious performance regressions that remain even in the latest
Hackney 3.0 branch.
Connection tests:
=== 1.22.0 ===
First call: 9434ms
Second call: 14ms
=== 1.21.0 ===
First call: 228ms
Second call: 16ms
We went back further to 1.20.1 though because of reported problems with the mail
client and ssl_options. That bug was not reproduced by a dev, though, but we'll
trust it for now.
2026-04-08 12:27:47 -07:00
feld
ebfa0d88df
Merge pull request 'Update Bandit' ( #7868 ) from bandit into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7868
2026-04-07 16:12:52 +00:00
Mark Felder
00265751cc
Update Bandit
2026-04-03 13:22:12 -07:00
feld
a3404e91bc
Merge pull request 'DigestEmailsWorker: Change Oban queue to "background"' ( #7865 ) from phnt/oban-digest-queue into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7865
2026-04-01 19:08:40 +00:00
Mark Felder
01ced6bea2
Fix the daily email digest job which was not executing
2026-04-01 11:59:23 -07:00
Phantasm
1405f5dc8b
Merge pull request 'PR Woodpecker CI workflow' ( #7825 ) from phnt/pleroma:woodpecker-pr-ci into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7825
2026-03-31 14:51:42 +00:00
Phantasm
fd7b809c54
Woodpecker CI: Only run lint and unit tests when relevant files changed
2026-03-31 14:32:52 +00:00
Phantasm
096c4ea980
Woodpecker CI: Run lint and unit tests also on push to default branch
2026-03-31 14:32:52 +00:00
Phantasm
072dc39d83
Woodpecker CI: Don't depend on changelog in lint workflow
2026-03-31 14:32:52 +00:00
Phantasm
7bba485397
Woodpecker CI: Disable cycles lint step for now since it always fails
2026-03-31 14:32:52 +00:00
Phantasm
1fe0970b64
woodpecker CI: Fix cycles in lint workflow
2026-03-31 14:32:52 +00:00
Phantasm
08bf6c8fed
Woodpecker CI: Explicitely exit with non-zero exit code on fail
2026-03-31 14:32:52 +00:00
Phantasm
cdcc432f31
Woodpecker CI: Lint workflow, don't use brackets in shell tests
2026-03-31 14:32:52 +00:00
Phantasm
b0de9bd3cd
Woodpecker CI: Make xref use fail stamp
2026-03-31 14:32:52 +00:00
Phantasm
56a25202b9
Woodpecker CI: Fix credo
2026-03-31 14:32:52 +00:00
Phantasm
265d3eeebc
Woodpecker CI: Fix syntax error in lint workflow
2026-03-31 14:32:52 +00:00
Phantasm
b224a2dacc
Woodpecker CI: Don't immediately fail whole lint workflow with one error
2026-03-31 14:32:52 +00:00
Phantasm
8640fcef22
Woodpecker CI: Fix compile error on Elixir 1.18 due to wrong OTP
2026-03-31 14:32:52 +00:00
Phantasm
0fd544722f
Woodpecker: Ensure correct workflow status in lint pipeline
2026-03-31 14:32:52 +00:00
Phantasm
b67d7c1106
changelog
2026-03-31 14:32:52 +00:00
Phantasm
6f8233d780
Woodpecker CI: Add linting pipeline
2026-03-31 14:32:52 +00:00
Phantasm
2880aac617
Woodpecker CI: Unit test using Elixir 1.15 and 1.18
2026-03-31 14:32:52 +00:00
Phantasm
4493d0d187
Woodpecker CI: Update check-changelog script for Woodpecker
2026-03-31 14:32:52 +00:00
Phantasm
1a0af1c0c0
Woodpecker CI: Add check-changelog workflow
2026-03-31 14:32:52 +00:00
Phantasm
88a349f3ab
Woodpecker CI: Retry failed tests using pleroma.test_runner
...
I didn't add the --cover option, but it would be useless right now
anyway
2026-03-31 14:32:52 +00:00
Phantasm
a9fe2fe4d8
Move main Woodpecker file to own directory
2026-03-31 14:32:52 +00:00
Phantasm
f138423814
Merge pull request 'lint-warnings' ( #7867 ) from phnt/pleroma:lint-warnings into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7867
2026-03-31 14:32:35 +00:00
Phantasm
eb69576154
fix test after embed route got added back
2026-03-31 16:23:21 +02:00
Phantasm
c8baad165b
lint: fix warnings throughout codebase
2026-03-31 16:23:11 +02:00
Phantasm
799199f6b5
DigestEmailsWorker: Change Oban queue to "background"
...
The mailer queue has been long gone and that left Oban jobs always
stuck in the "available" state that would never execute.
2026-03-26 22:38:26 +00:00
feld
9db47790bb
Merge pull request 'reverse_proxy,endpoint,uploaded_media: add immutable cache-control flag' ( #7835 ) from Yonle/pleroma:develop into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7835
2026-03-26 21:28:50 +00:00
nicole mikołajczyk
9e22baa66a
Merge pull request 'Federate votersCount correctly' ( #7858 ) from mkljczk/pleroma:poll-voters-count into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7858
2026-03-26 11:55:36 +00:00
nicole mikołajczyk
5aa3c8a06e
Federate votersCount correctly
...
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
Assisted-by: your mother
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2026-03-26 12:42:59 +01:00
feld
9af26e5fb5
Merge pull request 'Additional Search Indexing cleanup' ( #7864 ) from search-indexing into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7864
2026-03-25 22:05:55 +00:00
Mark Felder
f06a0eab50
Move object_to_search_data/1 to Pleroma.Search
...
This standardizes this functionality within the Search module so
it doesn't need to be imported by other search backends from Meilisearch
Also integrate its filtering rules into Search.indexable?/1 for consistency
2026-03-25 14:47:39 -07:00
Mark Felder
ea78e76837
Fix add_to_index/1 to adhere to the typespec
2026-03-25 14:46:38 -07:00
feld
1d819195b6
Merge pull request 'Search: filter indexable activities before inserting Oban jobs' ( #7538 ) from gitlab-mr-iid-4161 into develop
...
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/7538
2026-03-25 20:38:15 +00:00
Mark Felder
711b33d81c
Fix CommonAPI.favorite/2 arg order
2026-03-25 13:32:25 -07:00