Commit graph

30885 commits

Author SHA1 Message Date
Marie
69448c0204 fix incorrect file extension for error image 2025-05-03 11:49:24 +00:00
dakkar
d41372f948 (manually) revert bc422fe36f
the fix for #1037 was wrong (it would collapse a boosted quote if the
quoted note was from the current user), and not
necessary (`appearNote.value.userId` _is_ the author of the boosted
note, no need to look inside `note.renote` at all)

so… I'm not sure why I even raised the issue 😕
2025-05-03 08:47:29 +01:00
dakkar
ae5b5e77cc fix "collapse renotes of my own notes" 2025-05-02 20:05:56 +01:00
Marie
c74e472041 merge: nicer SQL checks for blocked hosts (!977)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/977

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-02 18:54:54 +00:00
dakkar
203cd7ad31 put widgets drawer back on the right hand side 2025-05-02 19:44:14 +01:00
dakkar
75ecbd22e3 use correct source for notficationClickable 2025-05-02 19:30:18 +01:00
dakkar
3f611fe234 honour blocked hosts in global-timeline 2025-05-02 15:57:56 +01:00
dakkar
31d93c8052 nicer SQL checks for blocked hosts
instead of passing a (possibly gigantic) array from JS, we get
PostgreSQL to look at the value in the `meta` table directly

tested the `federation/instances` endpoint, and the `QueryService`
methods; I have not tested the charts
2025-05-02 15:57:56 +01:00
Hazelnoot
54b5c930cb enforce maxFileSize for remote users 2025-05-02 08:37:42 -04:00
Hazelnoot
805ec98ec0 update description of "enable proxy account" toggle 2025-05-02 08:32:39 -04:00
Marie
d3a07a8c1c merge: save draft early when doing "delete&edit" - fixes #638 (!975)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/975

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:06:34 +00:00
Marie
f2f3ae0112 merge: collapse renotes of notes created by the logged-in user - fix #1037 (!974)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/974

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:04:45 +00:00
Marie
d84509b7c3 merge: allow clearing a role's color - fixes #734 (!976)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/976

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:02:13 +00:00
Hazelnoot
3199c309e2 make bubble timeline visibility checks match local timeline 2025-05-01 12:14:45 -04:00
Hazelnoot
2d4741603d Merge remote-tracking branch 'origin/merge/2025-03-24' into merge/2025-03-24 2025-05-01 12:07:45 -04:00
Hazelnoot
8dce293dff add setting to disable proxy account (resolves #766) 2025-05-01 12:07:38 -04:00
dakkar
bd72de2805 allow clearing a role's color - fixes #734 2025-05-01 14:23:51 +01:00
dakkar
07ff6a890b save draft early when doing "delete&edit" - fixes #638
when the posting form gets shown, the original note is already gone,
and without this change, the note only exists in local variables

now, we save the draft as soon as the form is shown, so clicking on
the "post" (or reply, or quote) button will get you a form with the
draft data
2025-05-01 13:49:12 +01:00
dakkar
bc422fe36f collapse renotes of my notes - fix #1037 2025-05-01 13:15:21 +01:00
dakkar
121f555fca fix renoter avatar in SkNote 2025-05-01 13:12:05 +01:00
dakkar
4f26621f6e honour "logo" in titlebar
I'm not completely sure this is a good idea…
2025-05-01 11:53:36 +01:00
dakkar
bf80b3d07f fix reactions viewer styling in SkNote* 2025-05-01 11:48:10 +01:00
dakkar
46d1af5c56 fix note display style in timelines 2025-05-01 11:45:09 +01:00
Hazelnoot
b124c39ed2 Merge branch 'develop' into merge/2025-03-24 2025-04-30 11:28:43 -04:00
Hazelnoot
da7dbd02f4 merge: Added extra connection option and comment for statement_timeout - fix #1042 (!972)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/972

Closes #1042

Approved-by: dakkar <dakkar@thenautilus.net>
Approved-by: Hazelnoot <acomputerdog@gmail.com>
2025-04-30 15:18:56 +00:00
Hazelnoot
d18885eefc fix type errors in e2e tests 2025-04-30 11:13:54 -04:00
Hazelnoot
6e4e4fdc33 fix type errors in mastodon API 2025-04-30 11:13:46 -04:00
Hazelnoot
4ea1b6aa4d fix type errors in SponsorsService.ts 2025-04-30 11:13:38 -04:00
Hazelnoot
e7aeb4cdb9 fix type error in timeline.vue 2025-04-30 09:54:14 -04:00
Hazelnoot
5ef25058c4 Merge tag '2025.4.1' into merge/2025-03-24
# Conflicts:
#	package.json
2025-04-30 09:46:30 -04:00
github-actions[bot]
979cfc1bcd Release: 2025.4.1 2025-04-30 09:01:43 +00:00
github-actions[bot]
2bd4faafbc Bump version to 2025.4.1-rc.0 2025-04-30 00:15:24 +00:00
Hazelnoot
a363576c36 update package-lock.yaml 2025-04-29 16:22:49 -04:00
Hazelnoot
dc087d4477 update @nestjs/platform-express to match other nestjs versions 2025-04-29 16:18:37 -04:00
Hazelnoot
a0f3ac8af3 fix megalodon user agent 2025-04-29 16:18:20 -04:00
Hazelnoot
25c96c1688 update broken SWC release (https://github.com/swc-project/swc/issues/10413) 2025-04-29 16:14:10 -04:00
Hazelnoot
dc9106dfb3 remove outdated packages from megalodon 2025-04-29 16:07:56 -04:00
Hazelnoot
9c301fa5aa Merge branch 'misskey-develop' into merge/2025-03-24
# Conflicts:
#	.github/workflows/api-misskey-js.yml
#	.github/workflows/changelog-check.yml
#	.github/workflows/check-misskey-js-autogen.yml
#	.github/workflows/get-api-diff.yml
#	.github/workflows/lint.yml
#	.github/workflows/locale.yml
#	.github/workflows/on-release-created.yml
#	.github/workflows/storybook.yml
#	.github/workflows/test-backend.yml
#	.github/workflows/test-federation.yml
#	.github/workflows/test-frontend.yml
#	.github/workflows/test-misskey-js.yml
#	.github/workflows/test-production.yml
#	.github/workflows/validate-api-json.yml
#	package.json
#	packages/backend/package.json
#	packages/backend/src/server/api/ApiCallService.ts
#	packages/backend/src/server/api/endpoints/drive/files/create.ts
#	packages/frontend-shared/js/url.ts
#	packages/frontend/package.json
#	packages/frontend/src/components/MkFileCaptionEditWindow.vue
#	packages/frontend/src/components/MkInfo.vue
#	packages/frontend/src/components/MkLink.vue
#	packages/frontend/src/components/MkNote.vue
#	packages/frontend/src/components/MkNotes.vue
#	packages/frontend/src/components/MkPageWindow.vue
#	packages/frontend/src/components/MkReactionsViewer.vue
#	packages/frontend/src/components/MkTimeline.vue
#	packages/frontend/src/components/MkUrlPreview.vue
#	packages/frontend/src/components/MkUserPopup.vue
#	packages/frontend/src/components/global/MkPageHeader.vue
#	packages/frontend/src/components/global/MkUrl.vue
#	packages/frontend/src/components/global/PageWithHeader.vue
#	packages/frontend/src/pages/about-misskey.vue
#	packages/frontend/src/pages/announcements.vue
#	packages/frontend/src/pages/antenna-timeline.vue
#	packages/frontend/src/pages/channel.vue
#	packages/frontend/src/pages/instance-info.vue
#	packages/frontend/src/pages/note.vue
#	packages/frontend/src/pages/page.vue
#	packages/frontend/src/pages/role.vue
#	packages/frontend/src/pages/tag.vue
#	packages/frontend/src/pages/timeline.vue
#	packages/frontend/src/pages/user-list-timeline.vue
#	packages/frontend/src/pages/user/followers.vue
#	packages/frontend/src/pages/user/following.vue
#	packages/frontend/src/pages/user/home.vue
#	packages/frontend/src/pages/user/index.vue
#	packages/frontend/src/ui/deck.vue
#	packages/misskey-js/generator/package.json
#	pnpm-lock.yaml
#	scripts/changelog-checker/package-lock.json
#	scripts/changelog-checker/package.json
2025-04-29 15:54:11 -04:00
Lilith
f0278dcf89 #1042 - Added extra connection option and comment for statement_timeout 2025-04-29 18:39:45 +00:00
zyoshoka
81739b1f82
chore: follow up on fixing Chromatic CI diff strategy (#15912) 2025-04-29 21:22:01 +09:00
Julia
583df3ec63
Merge commit from fork
none of our endpoints will ever contain `..` (they might, maybe, at
some point, contain `.`, as in `something/get.html`?), so every
`Mk:api()` call to an endpoint that contains `..` can't work: let's
reject it outright

Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 18:06:39 +09:00
github-actions[bot]
2cd3fbf1a3 Bump version to 2025.4.1-beta.9 2025-04-29 08:58:11 +00:00
かっこかり
f8b0863b8e
fix(frontend): fix lint (#15906)
* fix(frontend): attempt to fix lint

* fix lint
2025-04-29 15:54:57 +09:00
zyoshoka
41f09fa272
Update CHANGELOG.md 2025-04-29 13:17:01 +09:00
syuilo
813b57bbab fix style 2025-04-29 11:20:43 +09:00
syuilo
d6ae4c980b feat(frontend): タイトルバーを表示できるように 2025-04-29 09:43:15 +09:00
github-actions[bot]
2e91cd6d45 Bump version to 2025.4.1-beta.8 2025-04-28 23:26:26 +00:00
syuilo
4408d070df
Update CHANGELOG.md 2025-04-29 08:20:48 +09:00
Julia
d10fdfe973
Merge commit from fork
* SP-2025-03.1 always wrap icon&thumbnail URLs

if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch

* SP-2025-03.2 use object binding for more styles

interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS

* SP-2025-03.3 slightly more robust "self" URL handling

parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"

notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though

---------

Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 08:15:54 +09:00
syuilo
7407d51df8
New Crowdin updates (#15897)
* New translations ja-jp.yml (Thai)

* New translations ja-jp.yml (Spanish)

* New translations ja-jp.yml (Chinese Traditional)

* New translations ja-jp.yml (English)

* New translations ja-jp.yml (Catalan)

* New translations ja-jp.yml (Vietnamese)

* New translations ja-jp.yml (German)

* New translations ja-jp.yml (Vietnamese)

* New translations ja-jp.yml (Chinese Simplified)
2025-04-29 08:15:29 +09:00