Commit graph

3893 commits

Author SHA1 Message Date
Hazelnoot
fd5a3eb3f8 add logging.verbose option to enable debug logging in production. (same function as MK_VERBOSE environment variable) 2025-05-08 11:23:20 -04:00
Hazelnoot
7cd181df71 improve type checks in POST /api/v1/apps endpoint 2025-05-08 11:23:20 -04:00
Hazelnoot
317f5602fe temporary: add recursive error handler to MastodonApiServerService.ts 2025-05-08 11:23:20 -04:00
Hazelnoot
cd4fbc851b improve compatibility with multipart/form-data mastodon API requests 2025-05-08 11:23:20 -04:00
Hazelnoot
1a19301c90 merge: Add missing paused state (!992)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/992

Approved-by: dakkar <dakkar@thenautilus.net>
Approved-by: Hazelnoot <acomputerdog@gmail.com>
2025-05-08 14:05:52 +00:00
Hazelnoot
3fc2cc125b merge: when creating a note as a side-effect, make it silent - fixes #986 (!932)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/932

Closes #986

Approved-by: Marie <github@yuugi.dev>
Approved-by: Hazelnoot <acomputerdog@gmail.com>
2025-05-08 14:05:16 +00:00
Marie
239bfd3b62
add missing state
ref: https://github.com/misskey-dev/misskey/issues/15992
2025-05-08 11:45:36 +02:00
Marie
a72610c8d6 merge: Reorder relay activities to avoid delivery race condition (resolves #989) (!986)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/986

Closes #989

Approved-by: dakkar <dakkar@thenautilus.net>
Approved-by: Marie <github@yuugi.dev>
2025-05-08 09:17:07 +00:00
Marie
0d6b52ab3a merge: Fix polls not rendering properly in Schedule List (!990)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/990

Closes #1049

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: dakkar <dakkar@thenautilus.net>
2025-05-08 09:16:09 +00:00
Marie
cfad5999b2
Fix polls not rendering properly in Schedule List 2025-05-08 01:26:56 +02:00
Marie
0195810b6a revert back to old check 2025-05-07 19:10:34 +00:00
Hazelnoot
b66a486036 merge: Show all files for Drive Cleaner (!982)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/982

Closes #1033

Approved-by: dakkar <dakkar@thenautilus.net>
Approved-by: Hazelnoot <acomputerdog@gmail.com>
2025-05-07 17:14:41 +00:00
Hazelnoot
c302a5c2d7 reorder relay activities to avoid delivery race condition 2025-05-07 12:40:01 -04:00
Hazelnoot
d39a56c1b7 merge: Merge upstream 2025.4.1 (!955)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/955

Closes #638, #1037, #734, and #766

Approved-by: dakkar <dakkar@thenautilus.net>
Approved-by: Marie <github@yuugi.dev>
2025-05-07 16:33:18 +00:00
Marie
4eab54d2ca merge: Add BunnyCDN Edge Storage support (!952)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/952

Closes #1020

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: dakkar <dakkar@thenautilus.net>
2025-05-07 08:49:50 +00:00
Marie
6b6dd372cb
up 2025-05-07 10:48:09 +02:00
Marie
da54742291
add boolean to ignore folderId sorting, show all files on drive cleaner 2025-05-07 09:06:50 +02:00
Hazelnoot
95cd19b049 Merge branch 'develop' into merge/2025-03-24 2025-05-06 11:20:46 -04:00
Marie
216ab3aea7 merge: remove http/https protocol in uri on masto api (!980)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/980

Closes #1046

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: dakkar <dakkar@thenautilus.net>
2025-05-06 08:33:19 +00:00
Marie
893f964def merge: check signatures with and without query - fix #1036 (!966)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/966

Closes #1036

Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: Marie <github@yuugi.dev>
2025-05-05 23:23:30 +00:00
Marie
142b3b552e update comment 2025-05-05 23:04:43 +00:00
Marie
621f2e2ee4
upd: add logger, check hostname, add catch 2025-05-06 01:02:27 +02:00
Marie
cb3f5f598d Update instance.ts 2025-05-05 17:33:27 +00:00
Marie
e2be44fb99 change regex to include a zero-length match 2025-05-05 13:03:39 +00:00
Marie
581cc2b513 remove http/https protocol 2025-05-05 13:00:31 +00:00
Hazelnoot
76597d1a4c check role assignments in featured timeline 2025-05-04 08:55:57 -04:00
Hazelnoot
f6eb3148f3 use bucket rate limit for featured timeline 2025-05-04 08:55:26 -04:00
Hazelnoot
e87afe5804 fix more type errors because TS can't make up its mind 2025-05-03 22:21:38 -04:00
Hazelnoot
ff8b22ce60 apply optimized domain block pattern to silence and bubble checks 2025-05-03 21:54:25 -04:00
Hazelnoot
f4dafd709c check suspended users/hosts in following feed 2025-05-03 21:43:53 -04:00
dakkar
3f611fe234 honour blocked hosts in global-timeline 2025-05-02 15:57:56 +01:00
dakkar
31d93c8052 nicer SQL checks for blocked hosts
instead of passing a (possibly gigantic) array from JS, we get
PostgreSQL to look at the value in the `meta` table directly

tested the `federation/instances` endpoint, and the `QueryService`
methods; I have not tested the charts
2025-05-02 15:57:56 +01:00
Hazelnoot
54b5c930cb enforce maxFileSize for remote users 2025-05-02 08:37:42 -04:00
Hazelnoot
3199c309e2 make bubble timeline visibility checks match local timeline 2025-05-01 12:14:45 -04:00
Hazelnoot
8dce293dff add setting to disable proxy account (resolves #766) 2025-05-01 12:07:38 -04:00
dakkar
ec404fd3ce remove leftover debug line 2025-04-30 20:30:52 +01:00
Hazelnoot
d18885eefc fix type errors in e2e tests 2025-04-30 11:13:54 -04:00
Hazelnoot
6e4e4fdc33 fix type errors in mastodon API 2025-04-30 11:13:46 -04:00
Hazelnoot
4ea1b6aa4d fix type errors in SponsorsService.ts 2025-04-30 11:13:38 -04:00
Hazelnoot
dc087d4477 update @nestjs/platform-express to match other nestjs versions 2025-04-29 16:18:37 -04:00
Hazelnoot
25c96c1688 update broken SWC release (https://github.com/swc-project/swc/issues/10413) 2025-04-29 16:14:10 -04:00
Hazelnoot
dc9106dfb3 remove outdated packages from megalodon 2025-04-29 16:07:56 -04:00
Hazelnoot
9c301fa5aa Merge branch 'misskey-develop' into merge/2025-03-24
# Conflicts:
#	.github/workflows/api-misskey-js.yml
#	.github/workflows/changelog-check.yml
#	.github/workflows/check-misskey-js-autogen.yml
#	.github/workflows/get-api-diff.yml
#	.github/workflows/lint.yml
#	.github/workflows/locale.yml
#	.github/workflows/on-release-created.yml
#	.github/workflows/storybook.yml
#	.github/workflows/test-backend.yml
#	.github/workflows/test-federation.yml
#	.github/workflows/test-frontend.yml
#	.github/workflows/test-misskey-js.yml
#	.github/workflows/test-production.yml
#	.github/workflows/validate-api-json.yml
#	package.json
#	packages/backend/package.json
#	packages/backend/src/server/api/ApiCallService.ts
#	packages/backend/src/server/api/endpoints/drive/files/create.ts
#	packages/frontend-shared/js/url.ts
#	packages/frontend/package.json
#	packages/frontend/src/components/MkFileCaptionEditWindow.vue
#	packages/frontend/src/components/MkInfo.vue
#	packages/frontend/src/components/MkLink.vue
#	packages/frontend/src/components/MkNote.vue
#	packages/frontend/src/components/MkNotes.vue
#	packages/frontend/src/components/MkPageWindow.vue
#	packages/frontend/src/components/MkReactionsViewer.vue
#	packages/frontend/src/components/MkTimeline.vue
#	packages/frontend/src/components/MkUrlPreview.vue
#	packages/frontend/src/components/MkUserPopup.vue
#	packages/frontend/src/components/global/MkPageHeader.vue
#	packages/frontend/src/components/global/MkUrl.vue
#	packages/frontend/src/components/global/PageWithHeader.vue
#	packages/frontend/src/pages/about-misskey.vue
#	packages/frontend/src/pages/announcements.vue
#	packages/frontend/src/pages/antenna-timeline.vue
#	packages/frontend/src/pages/channel.vue
#	packages/frontend/src/pages/instance-info.vue
#	packages/frontend/src/pages/note.vue
#	packages/frontend/src/pages/page.vue
#	packages/frontend/src/pages/role.vue
#	packages/frontend/src/pages/tag.vue
#	packages/frontend/src/pages/timeline.vue
#	packages/frontend/src/pages/user-list-timeline.vue
#	packages/frontend/src/pages/user/followers.vue
#	packages/frontend/src/pages/user/following.vue
#	packages/frontend/src/pages/user/home.vue
#	packages/frontend/src/pages/user/index.vue
#	packages/frontend/src/ui/deck.vue
#	packages/misskey-js/generator/package.json
#	pnpm-lock.yaml
#	scripts/changelog-checker/package-lock.json
#	scripts/changelog-checker/package.json
2025-04-29 15:54:11 -04:00
syuilo
d6ae4c980b feat(frontend): タイトルバーを表示できるように 2025-04-29 09:43:15 +09:00
Julia
d10fdfe973
Merge commit from fork
* SP-2025-03.1 always wrap icon&thumbnail URLs

if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch

* SP-2025-03.2 use object binding for more styles

interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS

* SP-2025-03.3 slightly more robust "self" URL handling

parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"

notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though

---------

Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-04-29 08:15:54 +09:00
おさむのひと
7e8cc4d7c0
fix: 添付ファイルのあるリクエストを受けたときの初動を改善 (#15896)
* wip

* ロールポリシーの値も参照するように

* エンドポイントのテストを追加

* fix review

* add spdx

* fix CHANGELOG.md

* fix test

* regenerate

* add log

* Revert "add log"

This reverts commit 4b2bf59a609b85ca0bfcc9b71438db782f11983d.

* add log

* fix

* Revert "add log"

This reverts commit c5a73d57da0f30ec5215e08a8b4d78785cce48d1.
2025-04-29 08:15:09 +09:00
dakkar
4981e5ba36 Merge branch 'develop' into merge/2025-03-24 2025-04-28 15:31:28 +01:00
zyoshoka
aaa31c9d64
fix(backend): correct response schema of chat endpoints (#15904) 2025-04-28 18:58:08 +09:00
かっこかり
b5268fa240
fix(test): fix federation test (#15900) 2025-04-28 11:24:26 +09:00
renovate[bot]
b94ff3590b
fix(deps): update [backend] update dependencies (#15811)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 09:29:52 +09:00