Hazelnoot
76597d1a4c
check role assignments in featured timeline
2025-05-04 08:55:57 -04:00
Hazelnoot
f6eb3148f3
use bucket rate limit for featured timeline
2025-05-04 08:55:26 -04:00
Hazelnoot
2294c22e35
fix scrolling in following feed on mobile
2025-05-04 08:47:38 -04:00
Hazelnoot
e87afe5804
fix more type errors because TS can't make up its mind
2025-05-03 22:21:38 -04:00
Hazelnoot
ff8b22ce60
apply optimized domain block pattern to silence and bubble checks
2025-05-03 21:54:25 -04:00
Hazelnoot
f4dafd709c
check suspended users/hosts in following feed
2025-05-03 21:43:53 -04:00
Marie
01d8159bc9
fix padding/margin on tabs as --margin no longer exists
2025-05-03 22:46:12 +00:00
Marie
a7fa4100be
fix background transparency on notes
2025-05-03 22:39:49 +00:00
Marie
69448c0204
fix incorrect file extension for error image
2025-05-03 11:49:24 +00:00
dakkar
d41372f948
(manually) revert bc422fe36f
...
the fix for #1037 was wrong (it would collapse a boosted quote if the
quoted note was from the current user), and not
necessary (`appearNote.value.userId` _is_ the author of the boosted
note, no need to look inside `note.renote` at all)
so… I'm not sure why I even raised the issue 😕
2025-05-03 08:47:29 +01:00
dakkar
ae5b5e77cc
fix "collapse renotes of my own notes"
2025-05-02 20:05:56 +01:00
Marie
c74e472041
merge: nicer SQL checks for blocked hosts ( !977 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/977
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-02 18:54:54 +00:00
dakkar
203cd7ad31
put widgets drawer back on the right hand side
2025-05-02 19:44:14 +01:00
dakkar
75ecbd22e3
use correct source for notficationClickable
2025-05-02 19:30:18 +01:00
dakkar
3f611fe234
honour blocked hosts in global-timeline
2025-05-02 15:57:56 +01:00
dakkar
31d93c8052
nicer SQL checks for blocked hosts
...
instead of passing a (possibly gigantic) array from JS, we get
PostgreSQL to look at the value in the `meta` table directly
tested the `federation/instances` endpoint, and the `QueryService`
methods; I have not tested the charts
2025-05-02 15:57:56 +01:00
Hazelnoot
54b5c930cb
enforce maxFileSize for remote users
2025-05-02 08:37:42 -04:00
Marie
d3a07a8c1c
merge: save draft early when doing "delete&edit" - fixes #638 ( !975 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/975
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:06:34 +00:00
Marie
f2f3ae0112
merge: collapse renotes of notes created by the logged-in user - fix #1037 ( !974 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/974
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:04:45 +00:00
Marie
d84509b7c3
merge: allow clearing a role's color - fixes #734 ( !976 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/976
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:02:13 +00:00
Hazelnoot
3199c309e2
make bubble timeline visibility checks match local timeline
2025-05-01 12:14:45 -04:00
Hazelnoot
2d4741603d
Merge remote-tracking branch 'origin/merge/2025-03-24' into merge/2025-03-24
2025-05-01 12:07:45 -04:00
Hazelnoot
8dce293dff
add setting to disable proxy account ( resolves #766 )
2025-05-01 12:07:38 -04:00
dakkar
bd72de2805
allow clearing a role's color - fixes #734
2025-05-01 14:23:51 +01:00
dakkar
07ff6a890b
save draft early when doing "delete&edit" - fixes #638
...
when the posting form gets shown, the original note is already gone,
and without this change, the note only exists in local variables
now, we save the draft as soon as the form is shown, so clicking on
the "post" (or reply, or quote) button will get you a form with the
draft data
2025-05-01 13:49:12 +01:00
dakkar
bc422fe36f
collapse renotes of my notes - fix #1037
2025-05-01 13:15:21 +01:00
dakkar
121f555fca
fix renoter avatar in SkNote
2025-05-01 13:12:05 +01:00
dakkar
4f26621f6e
honour "logo" in titlebar
...
I'm not completely sure this is a good idea…
2025-05-01 11:53:36 +01:00
dakkar
bf80b3d07f
fix reactions viewer styling in SkNote*
2025-05-01 11:48:10 +01:00
dakkar
46d1af5c56
fix note display style in timelines
2025-05-01 11:45:09 +01:00
Hazelnoot
d18885eefc
fix type errors in e2e tests
2025-04-30 11:13:54 -04:00
Hazelnoot
6e4e4fdc33
fix type errors in mastodon API
2025-04-30 11:13:46 -04:00
Hazelnoot
4ea1b6aa4d
fix type errors in SponsorsService.ts
2025-04-30 11:13:38 -04:00
Hazelnoot
e7aeb4cdb9
fix type error in timeline.vue
2025-04-30 09:54:14 -04:00
Hazelnoot
5ef25058c4
Merge tag '2025.4.1' into merge/2025-03-24
...
# Conflicts:
# package.json
2025-04-30 09:46:30 -04:00
github-actions[bot]
979cfc1bcd
Release: 2025.4.1
2025-04-30 09:01:43 +00:00
github-actions[bot]
2bd4faafbc
Bump version to 2025.4.1-rc.0
2025-04-30 00:15:24 +00:00
Hazelnoot
dc087d4477
update @nestjs/platform-express to match other nestjs versions
2025-04-29 16:18:37 -04:00
Hazelnoot
a0f3ac8af3
fix megalodon user agent
2025-04-29 16:18:20 -04:00
Hazelnoot
25c96c1688
update broken SWC release ( https://github.com/swc-project/swc/issues/10413 )
2025-04-29 16:14:10 -04:00
Hazelnoot
dc9106dfb3
remove outdated packages from megalodon
2025-04-29 16:07:56 -04:00
Hazelnoot
9c301fa5aa
Merge branch 'misskey-develop' into merge/2025-03-24
...
# Conflicts:
# .github/workflows/api-misskey-js.yml
# .github/workflows/changelog-check.yml
# .github/workflows/check-misskey-js-autogen.yml
# .github/workflows/get-api-diff.yml
# .github/workflows/lint.yml
# .github/workflows/locale.yml
# .github/workflows/on-release-created.yml
# .github/workflows/storybook.yml
# .github/workflows/test-backend.yml
# .github/workflows/test-federation.yml
# .github/workflows/test-frontend.yml
# .github/workflows/test-misskey-js.yml
# .github/workflows/test-production.yml
# .github/workflows/validate-api-json.yml
# package.json
# packages/backend/package.json
# packages/backend/src/server/api/ApiCallService.ts
# packages/backend/src/server/api/endpoints/drive/files/create.ts
# packages/frontend-shared/js/url.ts
# packages/frontend/package.json
# packages/frontend/src/components/MkFileCaptionEditWindow.vue
# packages/frontend/src/components/MkInfo.vue
# packages/frontend/src/components/MkLink.vue
# packages/frontend/src/components/MkNote.vue
# packages/frontend/src/components/MkNotes.vue
# packages/frontend/src/components/MkPageWindow.vue
# packages/frontend/src/components/MkReactionsViewer.vue
# packages/frontend/src/components/MkTimeline.vue
# packages/frontend/src/components/MkUrlPreview.vue
# packages/frontend/src/components/MkUserPopup.vue
# packages/frontend/src/components/global/MkPageHeader.vue
# packages/frontend/src/components/global/MkUrl.vue
# packages/frontend/src/components/global/PageWithHeader.vue
# packages/frontend/src/pages/about-misskey.vue
# packages/frontend/src/pages/announcements.vue
# packages/frontend/src/pages/antenna-timeline.vue
# packages/frontend/src/pages/channel.vue
# packages/frontend/src/pages/instance-info.vue
# packages/frontend/src/pages/note.vue
# packages/frontend/src/pages/page.vue
# packages/frontend/src/pages/role.vue
# packages/frontend/src/pages/tag.vue
# packages/frontend/src/pages/timeline.vue
# packages/frontend/src/pages/user-list-timeline.vue
# packages/frontend/src/pages/user/followers.vue
# packages/frontend/src/pages/user/following.vue
# packages/frontend/src/pages/user/home.vue
# packages/frontend/src/pages/user/index.vue
# packages/frontend/src/ui/deck.vue
# packages/misskey-js/generator/package.json
# pnpm-lock.yaml
# scripts/changelog-checker/package-lock.json
# scripts/changelog-checker/package.json
2025-04-29 15:54:11 -04:00
Julia
583df3ec63
Merge commit from fork
...
none of our endpoints will ever contain `..` (they might, maybe, at
some point, contain `.`, as in `something/get.html`?), so every
`Mk:api()` call to an endpoint that contains `..` can't work: let's
reject it outright
Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 18:06:39 +09:00
github-actions[bot]
2cd3fbf1a3
Bump version to 2025.4.1-beta.9
2025-04-29 08:58:11 +00:00
かっこかり
f8b0863b8e
fix(frontend): fix lint ( #15906 )
...
* fix(frontend): attempt to fix lint
* fix lint
2025-04-29 15:54:57 +09:00
syuilo
813b57bbab
fix style
2025-04-29 11:20:43 +09:00
syuilo
d6ae4c980b
feat(frontend): タイトルバーを表示できるように
2025-04-29 09:43:15 +09:00
github-actions[bot]
2e91cd6d45
Bump version to 2025.4.1-beta.8
2025-04-28 23:26:26 +00:00
Julia
d10fdfe973
Merge commit from fork
...
* SP-2025-03.1 always wrap icon&thumbnail URLs
if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch
* SP-2025-03.2 use object binding for more styles
interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS
* SP-2025-03.3 slightly more robust "self" URL handling
parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"
notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though
---------
Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 08:15:54 +09:00
おさむのひと
7e8cc4d7c0
fix: 添付ファイルのあるリクエストを受けたときの初動を改善 ( #15896 )
...
* wip
* ロールポリシーの値も参照するように
* エンドポイントのテストを追加
* fix review
* add spdx
* fix CHANGELOG.md
* fix test
* regenerate
* add log
* Revert "add log"
This reverts commit 4b2bf59a609b85ca0bfcc9b71438db782f11983d.
* add log
* fix
* Revert "add log"
This reverts commit c5a73d57da0f30ec5215e08a8b4d78785cce48d1.
2025-04-29 08:15:09 +09:00
