Marie
c74e472041
merge: nicer SQL checks for blocked hosts ( !977 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/977
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-02 18:54:54 +00:00
dakkar
203cd7ad31
put widgets drawer back on the right hand side
2025-05-02 19:44:14 +01:00
dakkar
75ecbd22e3
use correct source for notficationClickable
2025-05-02 19:30:18 +01:00
dakkar
3f611fe234
honour blocked hosts in global-timeline
2025-05-02 15:57:56 +01:00
dakkar
31d93c8052
nicer SQL checks for blocked hosts
...
instead of passing a (possibly gigantic) array from JS, we get
PostgreSQL to look at the value in the `meta` table directly
tested the `federation/instances` endpoint, and the `QueryService`
methods; I have not tested the charts
2025-05-02 15:57:56 +01:00
Hazelnoot
54b5c930cb
enforce maxFileSize for remote users
2025-05-02 08:37:42 -04:00
Marie
d3a07a8c1c
merge: save draft early when doing "delete&edit" - fixes #638 ( !975 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/975
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:06:34 +00:00
Marie
f2f3ae0112
merge: collapse renotes of notes created by the logged-in user - fix #1037 ( !974 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/974
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:04:45 +00:00
Marie
d84509b7c3
merge: allow clearing a role's color - fixes #734 ( !976 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/976
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-01 23:02:13 +00:00
Hazelnoot
3199c309e2
make bubble timeline visibility checks match local timeline
2025-05-01 12:14:45 -04:00
Hazelnoot
2d4741603d
Merge remote-tracking branch 'origin/merge/2025-03-24' into merge/2025-03-24
2025-05-01 12:07:45 -04:00
Hazelnoot
8dce293dff
add setting to disable proxy account ( resolves #766 )
2025-05-01 12:07:38 -04:00
dakkar
bd72de2805
allow clearing a role's color - fixes #734
2025-05-01 14:23:51 +01:00
dakkar
07ff6a890b
save draft early when doing "delete&edit" - fixes #638
...
when the posting form gets shown, the original note is already gone,
and without this change, the note only exists in local variables
now, we save the draft as soon as the form is shown, so clicking on
the "post" (or reply, or quote) button will get you a form with the
draft data
2025-05-01 13:49:12 +01:00
dakkar
bc422fe36f
collapse renotes of my notes - fix #1037
2025-05-01 13:15:21 +01:00
dakkar
121f555fca
fix renoter avatar in SkNote
2025-05-01 13:12:05 +01:00
dakkar
4f26621f6e
honour "logo" in titlebar
...
I'm not completely sure this is a good idea…
2025-05-01 11:53:36 +01:00
dakkar
bf80b3d07f
fix reactions viewer styling in SkNote*
2025-05-01 11:48:10 +01:00
dakkar
46d1af5c56
fix note display style in timelines
2025-05-01 11:45:09 +01:00
dakkar
ec404fd3ce
remove leftover debug line
2025-04-30 20:30:52 +01:00
Hazelnoot
d18885eefc
fix type errors in e2e tests
2025-04-30 11:13:54 -04:00
Hazelnoot
6e4e4fdc33
fix type errors in mastodon API
2025-04-30 11:13:46 -04:00
Hazelnoot
4ea1b6aa4d
fix type errors in SponsorsService.ts
2025-04-30 11:13:38 -04:00
Hazelnoot
e7aeb4cdb9
fix type error in timeline.vue
2025-04-30 09:54:14 -04:00
Hazelnoot
5ef25058c4
Merge tag '2025.4.1' into merge/2025-03-24
...
# Conflicts:
# package.json
2025-04-30 09:46:30 -04:00
github-actions[bot]
979cfc1bcd
Release: 2025.4.1
2025-04-30 09:01:43 +00:00
github-actions[bot]
2bd4faafbc
Bump version to 2025.4.1-rc.0
2025-04-30 00:15:24 +00:00
Hazelnoot
dc087d4477
update @nestjs/platform-express to match other nestjs versions
2025-04-29 16:18:37 -04:00
Hazelnoot
a0f3ac8af3
fix megalodon user agent
2025-04-29 16:18:20 -04:00
Hazelnoot
25c96c1688
update broken SWC release ( https://github.com/swc-project/swc/issues/10413 )
2025-04-29 16:14:10 -04:00
Hazelnoot
dc9106dfb3
remove outdated packages from megalodon
2025-04-29 16:07:56 -04:00
Hazelnoot
9c301fa5aa
Merge branch 'misskey-develop' into merge/2025-03-24
...
# Conflicts:
# .github/workflows/api-misskey-js.yml
# .github/workflows/changelog-check.yml
# .github/workflows/check-misskey-js-autogen.yml
# .github/workflows/get-api-diff.yml
# .github/workflows/lint.yml
# .github/workflows/locale.yml
# .github/workflows/on-release-created.yml
# .github/workflows/storybook.yml
# .github/workflows/test-backend.yml
# .github/workflows/test-federation.yml
# .github/workflows/test-frontend.yml
# .github/workflows/test-misskey-js.yml
# .github/workflows/test-production.yml
# .github/workflows/validate-api-json.yml
# package.json
# packages/backend/package.json
# packages/backend/src/server/api/ApiCallService.ts
# packages/backend/src/server/api/endpoints/drive/files/create.ts
# packages/frontend-shared/js/url.ts
# packages/frontend/package.json
# packages/frontend/src/components/MkFileCaptionEditWindow.vue
# packages/frontend/src/components/MkInfo.vue
# packages/frontend/src/components/MkLink.vue
# packages/frontend/src/components/MkNote.vue
# packages/frontend/src/components/MkNotes.vue
# packages/frontend/src/components/MkPageWindow.vue
# packages/frontend/src/components/MkReactionsViewer.vue
# packages/frontend/src/components/MkTimeline.vue
# packages/frontend/src/components/MkUrlPreview.vue
# packages/frontend/src/components/MkUserPopup.vue
# packages/frontend/src/components/global/MkPageHeader.vue
# packages/frontend/src/components/global/MkUrl.vue
# packages/frontend/src/components/global/PageWithHeader.vue
# packages/frontend/src/pages/about-misskey.vue
# packages/frontend/src/pages/announcements.vue
# packages/frontend/src/pages/antenna-timeline.vue
# packages/frontend/src/pages/channel.vue
# packages/frontend/src/pages/instance-info.vue
# packages/frontend/src/pages/note.vue
# packages/frontend/src/pages/page.vue
# packages/frontend/src/pages/role.vue
# packages/frontend/src/pages/tag.vue
# packages/frontend/src/pages/timeline.vue
# packages/frontend/src/pages/user-list-timeline.vue
# packages/frontend/src/pages/user/followers.vue
# packages/frontend/src/pages/user/following.vue
# packages/frontend/src/pages/user/home.vue
# packages/frontend/src/pages/user/index.vue
# packages/frontend/src/ui/deck.vue
# packages/misskey-js/generator/package.json
# pnpm-lock.yaml
# scripts/changelog-checker/package-lock.json
# scripts/changelog-checker/package.json
2025-04-29 15:54:11 -04:00
Julia
583df3ec63
Merge commit from fork
...
none of our endpoints will ever contain `..` (they might, maybe, at
some point, contain `.`, as in `something/get.html`?), so every
`Mk:api()` call to an endpoint that contains `..` can't work: let's
reject it outright
Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 18:06:39 +09:00
github-actions[bot]
2cd3fbf1a3
Bump version to 2025.4.1-beta.9
2025-04-29 08:58:11 +00:00
かっこかり
f8b0863b8e
fix(frontend): fix lint ( #15906 )
...
* fix(frontend): attempt to fix lint
* fix lint
2025-04-29 15:54:57 +09:00
syuilo
813b57bbab
fix style
2025-04-29 11:20:43 +09:00
syuilo
d6ae4c980b
feat(frontend): タイトルバーを表示できるように
2025-04-29 09:43:15 +09:00
github-actions[bot]
2e91cd6d45
Bump version to 2025.4.1-beta.8
2025-04-28 23:26:26 +00:00
Julia
d10fdfe973
Merge commit from fork
...
* SP-2025-03.1 always wrap icon&thumbnail URLs
if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch
* SP-2025-03.2 use object binding for more styles
interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS
* SP-2025-03.3 slightly more robust "self" URL handling
parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"
notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though
---------
Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 08:15:54 +09:00
おさむのひと
7e8cc4d7c0
fix: 添付ファイルのあるリクエストを受けたときの初動を改善 ( #15896 )
...
* wip
* ロールポリシーの値も参照するように
* エンドポイントのテストを追加
* fix review
* add spdx
* fix CHANGELOG.md
* fix test
* regenerate
* add log
* Revert "add log"
This reverts commit 4b2bf59a609b85ca0bfcc9b71438db782f11983d.
* add log
* fix
* Revert "add log"
This reverts commit c5a73d57da0f30ec5215e08a8b4d78785cce48d1.
2025-04-29 08:15:09 +09:00
dakkar
4981e5ba36
Merge branch 'develop' into merge/2025-03-24
2025-04-28 15:31:28 +01:00
syuilo
e5fcb5b53f
enhance(frontend): disable router view transition
...
Fix #15723
2025-04-28 21:25:47 +09:00
zyoshoka
aaa31c9d64
fix(backend): correct response schema of chat endpoints ( #15904 )
2025-04-28 18:58:08 +09:00
github-actions[bot]
01230f6990
Bump version to 2025.4.1-beta.7
2025-04-28 04:08:47 +00:00
syuilo
cf07e1e4b9
perf(frontend): improve timeline performance
2025-04-28 12:53:58 +09:00
renovate[bot]
e8eb4e1965
fix(deps): update [frontend] update dependencies ( #15809 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 11:41:23 +09:00
かっこかり
b5268fa240
fix(test): fix federation test ( #15900 )
2025-04-28 11:24:26 +09:00
github-actions[bot]
5d71a5bc23
Bump version to 2025.4.1-beta.6
2025-04-28 01:17:27 +00:00
syuilo
4054f1a0c4
🎨
2025-04-28 10:07:23 +09:00
syuilo
76bd33f4c8
Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop
2025-04-28 09:46:43 +09:00
