Commit graph

9721 commits

Author SHA1 Message Date
Hazelnoot
9c301fa5aa Merge branch 'misskey-develop' into merge/2025-03-24
# Conflicts:
#	.github/workflows/api-misskey-js.yml
#	.github/workflows/changelog-check.yml
#	.github/workflows/check-misskey-js-autogen.yml
#	.github/workflows/get-api-diff.yml
#	.github/workflows/lint.yml
#	.github/workflows/locale.yml
#	.github/workflows/on-release-created.yml
#	.github/workflows/storybook.yml
#	.github/workflows/test-backend.yml
#	.github/workflows/test-federation.yml
#	.github/workflows/test-frontend.yml
#	.github/workflows/test-misskey-js.yml
#	.github/workflows/test-production.yml
#	.github/workflows/validate-api-json.yml
#	package.json
#	packages/backend/package.json
#	packages/backend/src/server/api/ApiCallService.ts
#	packages/backend/src/server/api/endpoints/drive/files/create.ts
#	packages/frontend-shared/js/url.ts
#	packages/frontend/package.json
#	packages/frontend/src/components/MkFileCaptionEditWindow.vue
#	packages/frontend/src/components/MkInfo.vue
#	packages/frontend/src/components/MkLink.vue
#	packages/frontend/src/components/MkNote.vue
#	packages/frontend/src/components/MkNotes.vue
#	packages/frontend/src/components/MkPageWindow.vue
#	packages/frontend/src/components/MkReactionsViewer.vue
#	packages/frontend/src/components/MkTimeline.vue
#	packages/frontend/src/components/MkUrlPreview.vue
#	packages/frontend/src/components/MkUserPopup.vue
#	packages/frontend/src/components/global/MkPageHeader.vue
#	packages/frontend/src/components/global/MkUrl.vue
#	packages/frontend/src/components/global/PageWithHeader.vue
#	packages/frontend/src/pages/about-misskey.vue
#	packages/frontend/src/pages/announcements.vue
#	packages/frontend/src/pages/antenna-timeline.vue
#	packages/frontend/src/pages/channel.vue
#	packages/frontend/src/pages/instance-info.vue
#	packages/frontend/src/pages/note.vue
#	packages/frontend/src/pages/page.vue
#	packages/frontend/src/pages/role.vue
#	packages/frontend/src/pages/tag.vue
#	packages/frontend/src/pages/timeline.vue
#	packages/frontend/src/pages/user-list-timeline.vue
#	packages/frontend/src/pages/user/followers.vue
#	packages/frontend/src/pages/user/following.vue
#	packages/frontend/src/pages/user/home.vue
#	packages/frontend/src/pages/user/index.vue
#	packages/frontend/src/ui/deck.vue
#	packages/misskey-js/generator/package.json
#	pnpm-lock.yaml
#	scripts/changelog-checker/package-lock.json
#	scripts/changelog-checker/package.json
2025-04-29 15:54:11 -04:00
Julia
583df3ec63
Merge commit from fork
none of our endpoints will ever contain `..` (they might, maybe, at
some point, contain `.`, as in `something/get.html`?), so every
`Mk:api()` call to an endpoint that contains `..` can't work: let's
reject it outright

Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 18:06:39 +09:00
github-actions[bot]
2cd3fbf1a3 Bump version to 2025.4.1-beta.9 2025-04-29 08:58:11 +00:00
かっこかり
f8b0863b8e
fix(frontend): fix lint (#15906)
* fix(frontend): attempt to fix lint

* fix lint
2025-04-29 15:54:57 +09:00
syuilo
813b57bbab fix style 2025-04-29 11:20:43 +09:00
syuilo
d6ae4c980b feat(frontend): タイトルバーを表示できるように 2025-04-29 09:43:15 +09:00
github-actions[bot]
2e91cd6d45 Bump version to 2025.4.1-beta.8 2025-04-28 23:26:26 +00:00
Julia
d10fdfe973
Merge commit from fork
* SP-2025-03.1 always wrap icon&thumbnail URLs

if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch

* SP-2025-03.2 use object binding for more styles

interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS

* SP-2025-03.3 slightly more robust "self" URL handling

parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"

notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though

---------

Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 08:15:54 +09:00
おさむのひと
7e8cc4d7c0
fix: 添付ファイルのあるリクエストを受けたときの初動を改善 (#15896)
* wip

* ロールポリシーの値も参照するように

* エンドポイントのテストを追加

* fix review

* add spdx

* fix CHANGELOG.md

* fix test

* regenerate

* add log

* Revert "add log"

This reverts commit 4b2bf59a609b85ca0bfcc9b71438db782f11983d.

* add log

* fix

* Revert "add log"

This reverts commit c5a73d57da0f30ec5215e08a8b4d78785cce48d1.
2025-04-29 08:15:09 +09:00
dakkar
4981e5ba36 Merge branch 'develop' into merge/2025-03-24 2025-04-28 15:31:28 +01:00
syuilo
e5fcb5b53f enhance(frontend): disable router view transition
Fix #15723
2025-04-28 21:25:47 +09:00
zyoshoka
aaa31c9d64
fix(backend): correct response schema of chat endpoints (#15904) 2025-04-28 18:58:08 +09:00
github-actions[bot]
01230f6990 Bump version to 2025.4.1-beta.7 2025-04-28 04:08:47 +00:00
syuilo
cf07e1e4b9 perf(frontend): improve timeline performance 2025-04-28 12:53:58 +09:00
renovate[bot]
e8eb4e1965
fix(deps): update [frontend] update dependencies (#15809)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 11:41:23 +09:00
かっこかり
b5268fa240
fix(test): fix federation test (#15900) 2025-04-28 11:24:26 +09:00
github-actions[bot]
5d71a5bc23 Bump version to 2025.4.1-beta.6 2025-04-28 01:17:27 +00:00
syuilo
4054f1a0c4 🎨 2025-04-28 10:07:23 +09:00
syuilo
76bd33f4c8 Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop 2025-04-28 09:46:43 +09:00
syuilo
c99f4dc4ce enhance(frontend): add drive tip 2025-04-28 09:46:41 +09:00
renovate[bot]
0c06e5bef5
chore(deps): update [misskey-js] update dependencies (#15791)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 09:35:37 +09:00
renovate[bot]
b94ff3590b
fix(deps): update [backend] update dependencies (#15811)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 09:29:52 +09:00
syuilo
7c23e53034 refactor 2025-04-28 09:28:23 +09:00
syuilo
e0fd1c8f48 tweak custom-emojis-manager 2025-04-28 08:49:37 +09:00
anatawa12
ec92bf47f1
Exclude blocked instance note from most timelines (#15792)
* Exclude blocked instance note from most timelines

* Exclude blocked instance note from FTT timelines

* Exclude blocked instance note from featured

* fix type
2025-04-28 07:21:00 +09:00
Julia Johannesen
ac905118cc
Merge branch 'stable' into merge-stable-into-develop 2025-04-27 16:19:44 -04:00
Julia Johannesen
b25f869a7a
Fix linter issue
ESLint my beloathed
2025-04-27 15:42:19 -04:00
Julia Johannesen
db9c8d8786
Update version 2025-04-27 13:33:09 -04:00
Julia Johannesen
35df3944c1
Update summaly 2025-04-27 13:31:27 -04:00
Julia Johannesen
0bb4e57b0c
Security fixes
Co-Authored-By: dakkar <dakkar@thenautilus.net>
2025-04-27 13:05:09 -04:00
github-actions[bot]
7bc536c948 Bump version to 2025.4.1-beta.5 2025-04-27 12:27:19 +00:00
syuilo
3f08e41818 🎨 2025-04-27 21:14:59 +09:00
syuilo
04b7dd0948 fix(frontend): tweak spacer style 2025-04-27 20:51:57 +09:00
syuilo
ddb41ba821 Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop 2025-04-27 20:42:43 +09:00
syuilo
ee49c42410 fix lint 2025-04-27 20:42:41 +09:00
github-actions[bot]
8670ddaffd Bump version to 2025.4.1-beta.4 2025-04-27 11:08:50 +00:00
syuilo
cb2948bf94 Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop 2025-04-27 20:04:15 +09:00
syuilo
83893ce52f fix syntax errors 2025-04-27 20:04:13 +09:00
github-actions[bot]
0083386882 Bump version to 2025.4.1-beta.3 2025-04-27 10:58:53 +00:00
syuilo
03e5502d63 add todo 2025-04-27 19:57:19 +09:00
syuilo
0a1ff77f23 perf(frontend): use css-native implementation for spacer rather than vue component 2025-04-27 19:55:56 +09:00
github-actions[bot]
5e294f4c65 Bump version to 2025.4.1-beta.2 2025-04-27 08:44:59 +00:00
syuilo
0f9dff0521 enhance(frontend): improve usability 2025-04-27 17:43:30 +09:00
syuilo
14d3439a42 enhance(frontend): タイムラインをスワイプで切り替えられるように
Resolve #15722
2025-04-27 17:38:48 +09:00
syuilo
889295d621 fix(frontend): スワイプが効かないなど、不具合の元になるmarginをgapに置き換え 2025-04-27 17:29:17 +09:00
syuilo
5b5756d4eb Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop 2025-04-27 17:16:54 +09:00
syuilo
e24a2362fd refactor(frontend): PageWithHeaderにMkSwiperを持たせるように 2025-04-27 17:16:51 +09:00
github-actions[bot]
2e03c0f425 Bump version to 2025.4.1-beta.1 2025-04-27 05:59:23 +00:00
syuilo
66187174d4 🎨 2025-04-27 13:41:41 +09:00
syuilo
73b86d9276 enhance(frontend): improve new emojis manager 2025-04-27 13:31:07 +09:00