Commit Graph

15813 Commits

Author SHA1 Message Date
Claire 9fee5e8526
Merge pull request from GHSA-jhrq-qvrm-qr36
* Fix insufficient Content-Type checking of fetched ActivityStreams objects

* Allow JSON-LD documents with multiple profiles
2024-02-16 11:56:12 +01:00
renovate[bot] a8ee6fdd62
Update dependency pg to v1.5.5 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-16 08:12:10 +00:00
Matt Jankowski a9f9b0097b
Reduce `RSpec/MultipleExpectations` in captcha feature spec () 2024-02-16 07:52:57 +00:00
Matt Jankowski 4b7f04e3ea
Reduce `RSpec/MultipleExpectations` in post_status_service spec () 2024-02-16 07:52:29 +00:00
github-actions[bot] 1c93d625c6
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-16 07:51:13 +00:00
Matt Jankowski ed4939296a
Reduce `RSpec/MultipleExpectations` in ap/activity/create spec () 2024-02-16 07:43:00 +00:00
Matt Jankowski 1df2ffc3ee
Use `subject` in blacklist email validator spec () 2024-02-16 07:42:03 +00:00
Matt Jankowski fc4f823464
Avoid local block var assignment in ap/process_status_update_service spec () 2024-02-16 07:41:25 +00:00
Claire d4d0565b0f
Fix user creation failure handling in OAuth paths () 2024-02-14 21:49:45 +00:00
Matt Jankowski 844aa59bdf
Doc update about ruby version 3.0+ () 2024-02-14 16:44:27 +00:00
Claire bbbbf00084
Fix OmniAuth tests () 2024-02-14 14:57:49 +00:00
Claire 8e8e0f104f
Bump version to v4.3.0-alpha.2 () 2024-02-14 14:20:02 +00:00
Claire b31af34c97
Merge pull request from GHSA-vm39-j3vx-pch3
* Prevent different identities from a same SSO provider from accessing a same account

* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`

* Rename methods to avoid confusion between OAuth and OmniAuth
2024-02-14 15:16:07 +01:00
Emelia Smith 68eaa804c9
Merge pull request from GHSA-7w3c-p9j8-mq3x
* Ensure destruction of OAuth Applications notifies streaming

Due to doorkeeper using a dependent: delete_all relationship, the destroy of an OAuth Application bypassed the existing AccessTokenExtension callbacks for announcing destructing of access tokens.

* Ensure password resets revoke access to Streaming API

* Improve performance of deleting OAuth tokens

---------

Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-02-14 15:15:34 +01:00
Claire 554e2a019e
Add `sidekiq_unique_jobs:delete_all_locks` task and disable `sidekiq-unique-jobs` UI by default () 2024-02-14 12:12:13 +00:00
Emelia Smith 46142cdbdd
Disable administrative doorkeeper routes () 2024-02-13 18:11:47 +00:00
Emelia Smith e8b66a0525
Ignore legacy moderator and admin columns on User model () 2024-02-13 17:14:49 +00:00
Nicolas Hoffmann 476a043fc5
Fix modal container bounds () 2024-02-13 12:58:21 +00:00
github-actions[bot] 5de1ce23c3
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-13 09:08:55 +00:00
renovate[bot] e25d9dfb25
Update dependency dotenv to v16.4.3 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-13 08:02:55 +00:00
renovate[bot] b244e5cb81
Update dependency sidekiq-unique-jobs to v7.1.33 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-13 07:56:46 +00:00
renovate[bot] 819ede190e
Update dependency dotenv to v16.4.2 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 10:39:31 +00:00
renovate[bot] cf0d6bef8b
Update eslint (non-major) ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 10:21:17 +00:00
renovate[bot] 58918844a9
Update peter-evans/create-pull-request action to v6 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-12 10:20:54 +00:00
github-actions[bot] 6482948547
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-12 09:59:05 +00:00
Claire 8125dae5a8
Rename `ES_CA_CERT` to `ES_CA_FILE` for consistency () 2024-02-12 09:54:06 +00:00
github-actions[bot] c07028b2fa
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-09 09:55:30 +00:00
Claire ca8fbda5d0
Add end-to-end test for OCR in media uploads () 2024-02-08 19:13:44 +00:00
Matt Jankowski a9e91eb955
Add common stub setup for resolv dns in email mx validator spec () 2024-02-08 14:26:45 +00:00
Claire 67ec192d7d
Clean up some unused CSS definitions () 2024-02-08 11:40:22 +00:00
renovate[bot] d4db1c497b
Update dependency pghero to v3.4.1 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-08 10:03:39 +00:00
renovate[bot] 13840d685c
Update dependency irb to v1.11.2 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-08 10:03:30 +00:00
Matt Jankowski 15437e4ad9
Add `context` and `before` to lengthy tag manager spec examples () 2024-02-08 10:03:04 +00:00
Matt Jankowski 5271131658
Extract helper method for repeated form fill in admin/domain_blocks feature spec () 2024-02-08 10:02:53 +00:00
renovate[bot] 52986f35b8
Update dependency postcss to v8.4.35 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-08 09:49:24 +00:00
github-actions[bot] 2a362d62a8
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-08 09:43:02 +00:00
Claire eff447a455
Rewrite signature verification using regexps and `StringScanner` () 2024-02-07 17:24:42 +00:00
Matt Jankowski 79b4b94f3a
Configure `CountAsOne` value for `RSpec/ExampleLength` cop () 2024-02-07 14:54:40 +00:00
Matt Jankowski 95da28d201
Add common `ThreadingHelper` module for specs () 2024-02-07 14:53:29 +00:00
renovate[bot] dbafec88e5
Update dependency @reduxjs/toolkit to v2.1.0 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-07 14:10:38 +00:00
Matt Jankowski b2133fee5f
Update artifact preservation to use `save_path` value () 2024-02-07 13:37:10 +00:00
Claire 7efc33b909
Move HTTP Signature parsing code to its own class () 2024-02-07 13:35:37 +00:00
github-actions[bot] 17052714a2
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-07 12:38:37 +00:00
Claire 2912829411
Add support for specifying custom CA cert for Elasticsearch () 2024-02-07 12:09:43 +00:00
Claire eeabf9af72
Fix compatibility with Redis <6.2 () 2024-02-07 11:52:38 +00:00
Matt Jankowski da50217b88
Combine repeated requests in `admin/accounts` controller spec () 2024-02-07 10:59:32 +00:00
renovate[bot] 492e25da06
Update dependency webmock to v3.20.0 ()
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-07 10:56:52 +00:00
Claire aaa58d4807
Fix tagging of manual security nightly builds () 2024-02-06 20:48:11 +00:00
github-actions[bot] 90ccf7beb2
New Crowdin Translations (automated) ()
Co-authored-by: GitHub Actions <noreply@github.com>
2024-02-06 18:47:44 +00:00
Claire 7ee93b7431
Change `source` attribute of `Suggestion` entity in `/api/v2/suggestions` back to a string () 2024-02-06 17:10:17 +00:00