hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
18,506 commits 2 branches 0 tags 251 MiB
Commit graph

18,506 commits

This branch
This branch
All branches
Author SHA1 Message Date
Henry Jameson
ab9647458e Merge remote-tracking branch 'origin/media-management' into shigusegubu-new 2026-11-05 18:03:27 +02:00
Henry Jameson
d9e75192ad Merge remote-tracking branch 'origin/feature/bounded-retention' into shigusegubu-new 2026-11-05 18:01:42 +02:00
Henry Jameson
f55eb3a42c Merge branch 'oauth-mark' into shigusegubu-new 2026-11-05 17:59:49 +02:00
Henry Jameson
b36f860a43 Merge remote-tracking branch 'origin/develop' into shigusegubu-new 2026-11-05 17:59:26 +02:00
Henry Jameson
b748e8aea0 fix 2026-11-05 17:31:33 +02:00
Henry Jameson
a614fcba79 oops? 2026-11-05 16:56:50 +02:00
Henry Jameson
22a2890f2b manual lint 2026-11-05 16:31:58 +02:00
Henry Jameson
dfc21dc124 Revert "mix format" 
This reverts commit 573134ac6c.
 2026-11-05 16:31:02 +02:00
Henry Jameson
573134ac6c mix format 2026-11-05 16:25:43 +02:00
Henry Jameson
bcc8b1e296 Mark currently accessing token in oauth token management API 2026-11-05 16:16:38 +02:00
Ekaterina Vaartis
2d3bebda5f Add feature to tests 2026-11-04 20:58:44 +03:00
Ekaterina Vaartis
f8195b356d Linting 2026-11-04 20:38:28 +03:00
Ekaterina Vaartis
51bdc0596c Changelog for media management 2026-11-04 19:53:49 +03:00
Ekaterina Vaartis
6328e697b9 Add feature for user_media_management 2026-11-04 19:19:48 +03:00
Ekaterina Vaartis
0095a66198 Use limit and offset directly, otherwise the amount is wrong 
It will return less than 50 for some reason
 2026-11-04 19:19:32 +03:00
Ekaterina Vaartis
456dbf9997 Linting 2026-11-04 18:24:27 +03:00
Ekaterina Vaartis
0f21f6e802 Pagination and schema fixes for the media management endpoint 2026-11-04 18:18:08 +03:00
lain
b5726f6736 Merge pull request 'RichMedia: skip the quote fallback link when picking the card URL' (#8004) from lambadalambda/pleroma:fix/card-skip-quote-link into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8004
 2026-11-03 19:01:49 +00:00
Lain Soykaf
0667705b77
 		test: use sigils for HTML strings in quote link tests 2026-11-03 22:29:49 +04:00
lain
2c872cf474 Merge branch 'develop' into fix/card-skip-quote-link 2026-11-03 18:24:23 +00:00
Ekaterina Vaartis
70de22bf9b Output attachment objects when listing uploaded media, error if used 
Produce an error if the attachment is used in any posts
 2026-11-03 20:28:25 +03:00
Ekaterina Vaartis
e0dce797ad Work-in-progress media management 
Adds a way to list media files uploaded by the user and delete
them. Ideally needs to at least check if the attachment is used
somewhere before actually deleting it, still.
 2026-11-03 12:16:12 +03:00
lain
d2b89f5723 Merge pull request 'Federation: do not federate Undo Block when outgoing_blocks is off' (#8044) from lambadalambda/pleroma:fix/undo-block-outgoing-blocks into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8044
 2026-11-02 09:07:03 +00:00
lain
b1c51018a3 Merge pull request 'HTTP: back off from hosts that answer 429 or 503' (#8049) from lambadalambda/pleroma:feat/http-backoff into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8049
 2026-11-02 08:38:04 +00:00
Lain Soykaf
4070b7be21
 		fix(http): back off from the host that answered, and read Unix resets 
After a redirect the 429/503 came from the final host, but the backoff
was recorded for the requested one. X-RateLimit-Reset is also accepted
as a Unix timestamp or as seconds.
 2026-11-01 17:03:11 +04:00
lain
ec6c522ba6 Merge pull request 'Gun: connect to hosts that only have IPv6 addresses' (#8052) from lambadalambda/pleroma:fix/gun-ipv6-only-hosts into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8052
 2026-11-01 12:38:29 +00:00
lain
356daab6af Merge pull request 'Federation: refetch a stale Move target once' (#8051) from lambadalambda/pleroma:fix/move-refetch-target into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8051
 2026-11-01 10:56:52 +00:00
lain
f71474b10b Merge pull request 'Update ssl_verify_fun and phoenix_html for security advisories' (#8055) from lambadalambda/pleroma:build/advisory-bumps into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8055
 2026-11-01 09:58:19 +00:00
lain
23f9484a76 Merge pull request 'Akkoma fixes: context, polls, media proxy, ConfigDB, API params' (#8047) from lambadalambda/pleroma:fix/akkoma-tier2 into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8047
 2026-11-01 09:11:11 +00:00
Lain Soykaf
9b7c59bc21
 		build: update ssl_verify_fun and phoenix_html for advisories 
ssl_verify_fun 1.1.9 fixes partial-label wildcard matching
(EEF-CVE-2026-117666); Hackney uses its verify_fun for every HTTPS
request. phoenix_html 3.3.5 escapes attribute names
(EEF-CVE-2026-117645).
 2026-11-01 11:10:49 +04:00
lain
d3495ceead Merge pull request 'Rate limit C2S outbox posts and emoji reactions' (#8042) from lambadalambda/pleroma:fix/c2s-rate-limit into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8042
 2026-10-31 16:22:00 +00:00
lain
240bc1be1f Merge pull request 'Search: fetch remote statuses only when resolving is allowed' (#8031) from lambadalambda/pleroma:fix/search-remote-fetch into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8031
 2026-10-31 16:20:39 +00:00
lain
2f9252c858 Merge pull request 'CastAndValidate: keep replace_params: false when strict is off' (#8045) from lambadalambda/pleroma:fix/cast-and-validate-cast-opts into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8045
 2026-10-31 16:19:35 +00:00
lain
0157ade4d3 Merge pull request 'MRF: match domain rules literally' (#8046) from lambadalambda/pleroma:fix/mrf-domain-regex-escape into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8046
 2026-10-31 16:18:35 +00:00
lain
4b08f7a553 Merge pull request 'Akkoma interop fixes: emoji reacts, personal inbox, markers, data: URLs' (#8050) from lambadalambda/pleroma:fix/akkoma-interop into develop 
Reviewed-on: https://git.pleroma.social/pleroma/pleroma/pulls/8050
 2026-10-31 16:17:48 +00:00
Lain Soykaf
542f8b2aef
 		fix(media_proxy): do not proxy data: URLs 
Ported from Akkoma 7632765b4.

Co-authored-by: nopjmp <nop@unearthly.dev>
 2026-10-31 18:47:54 +04:00
Lain Soykaf
13663cba71
 		fix(mastodon_api): use the Mastodon date format for marker updated_at 
Ported from Akkoma 720785b4c.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 18:47:54 +04:00
Lain Soykaf
d601a94c69
 		fix(api_spec): drop every unexpected query param in permissive mode 
Ported from Akkoma 7e6efb235.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 18:47:27 +04:00
Lain Soykaf
88a9562a9b
 		fix(config): skip ConfigDB settings for modules that no longer exist 
Ported from Akkoma af7c3fab9; the rescue is in the Ecto type load so
admin input is still validated.

Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
 2026-10-31 18:47:26 +04:00
Lain Soykaf
6f31149d21
 		fix(gun): connect to hosts that only have IPv6 addresses 
Gun resolves host names over IPv4 only unless :inet6 is in tcp_opts.
When the A lookup finds nothing, retry once with :inet6. Gun now runs
under its supervisor, so a failed connect no longer kills the pool
worker through the link; the worker still links after a successful open.
 2026-10-31 15:53:51 +04:00
Lain Soykaf
3cd201c365
 		fix(activitypub): refetch a stale Move target once 
A Move usually follows right after the alias was added, and the cached
remote target may not have it yet. Refetch the target when the alias is
missing instead of rejecting the Move. Same issue as Akkoma f18e2ba42.
 2026-10-31 15:53:41 +04:00
Lain Soykaf
e0546f188d
 		fix(activitypub): do not require the personal inbox owner to be addressed 
Bridgy Fed delivers Follow and Accept to the personal inbox addressed
only to Public. Any server can already address a local user directly,
so the check gave no protection. Ported from Akkoma 2b885288f.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 15:37:41 +04:00
Lain Soykaf
654a41b2c9
 		fix(activitypub): accept emoji reactions with a single tag object 
Ported from Akkoma 462225880.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 15:37:41 +04:00
Lain Soykaf
b29d9d0981
 		fix(workers): snooze incoming jobs while a host is backed off 
With 5 attempts and Oban's short retry delays, an incoming activity from
an unknown actor on a backed-off host was discarded without a request.
ReceiverWorker and SignatureRetryWorker now snooze for up to 2 hours.
Also lowercase backoff host keys and log backed-off user fetches at debug.
 2026-10-31 14:35:58 +04:00
Lain Soykaf
8ce283f966
 		feat(http): back off from hosts that answer 429 or 503 
Object fetches and WebFinger stop sending requests to a host until
Retry-After or X-RateLimit-Reset (default 5 minutes, max 1 hour).
Ported from Akkoma's Pleroma.HTTP.Backoff.

Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 14:18:45 +04:00
Lain Soykaf
58a6534a44
 		fix(media_proxy): serve static previews instead of redirecting to the main host 
Ported from Akkoma 4a810bb2e.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 13:43:59 +04:00
Lain Soykaf
c3fb297b89
 		fix(activitypub): apply the Note fixups to incoming Questions 
Ported from Akkoma 678f6fdb7.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 13:43:59 +04:00
Lain Soykaf
b486a84fef
 		fix(context): show local-only replies to local users 
Ported from Akkoma 7869030e0.

Co-authored-by: Oneric <oneric@oneric.stub>
 2026-10-31 13:43:59 +04:00
Lain Soykaf
7e157d8cc9
 		fix(mrf): match domain rules literally 
Escape the domain so `.` only matches a dot, and use an optional
group for the `*.` prefix, which matches the same hosts without
exponential backtracking. Bad entries now match nothing instead of
raising on every check.
 2026-10-31 13:17:50 +04:00
Lain Soykaf
163c49c649
 		fix(api_spec): pass cast options on the first permissive cast 
Without them replace_params: false was ignored when strict is off, so
conn.params got atom keys and RateLimiter params: ["id"] buckets
collapsed to one per user.
 2026-10-31 13:12:15 +04:00