252 Commits (dev)

Author	SHA1	Message	Date
Daniel Supernault	f044d14c8d	Lint	12 hours ago
Daniel Supernault	91f54c0d0f	Fix Direct Message shims. Fixes #7441	12 hours ago
Your Name	139b29733e	fix: serve Pulse and Horizon dashboards under admin/ to avoid username route collisions ... - Pulse: set PULSE_PATH default to admin/pulse; Pulse::ignoreRoutes() in AppServiceProvider and register the dashboard explicitly in routes/web-admin.php so it is matched before the {username} profile catch-all. - Horizon: set horizon.path to admin/horizon (all Horizon routes follow); add an explicit base-path GET mirroring Horizon's own HomeController@index for clarity. - Remove now-unneeded 'horizon' reservation from RestrictedNames. - Add PULSE_ENABLED-gated Pulse links to admin sidenav and topnav. - Replace HorizonRedirectTest with HorizonDashboardTest (base path now renders the dashboard directly instead of redirecting).	1 day ago
Daniel Supernault	12a7c3ecfe	Fix AccountDelete federation	2 days ago
Daniel Supernault	a4c176d520	Fix deletes, again	2 days ago
Daniel Supernault	e3f0573eba	Fix tests	2 days ago
Daniel Supernault	9c81a75ad3	Refactor Direct Messages, add Group Chat support and proper context threading with Mastodon	2 days ago
Daniel Supernault	56b96359c3	Fix fetching by properly retrying certain error responses	2 days ago
Daniel Supernault	15da72dd94	Refactor blurhash	3 days ago
Daniel Supernault	b6f30de378	Fix tests	3 days ago
Daniel Supernault	e1f90b9704	Update tests	3 days ago
Daniel Supernault	5d00f2e69b	More dusting (cleanup + lint)	3 days ago
Daniel Supernault	80f792038c	Fix federation comment threading	4 days ago
Daniel Supernault	823efcaad7	Add FEP-044f: Consent-respecting quote posts	4 days ago
Daniel Supernault	e3e5a05b47	Lint licker	5 days ago
Daniel Supernault	dedfa67b70	Add FEP-8fcf followers collection synchronization ... Sender: followers-only Create deliveries carry a signed Collection-Synchronization header scoped to the authority of each inbox, and the partial followers collection is served to authenticated instances at /users/{username}/followers_synchronization. Receiver: a signed Collection-Synchronization header whose digest differs from our copy queues FollowersSyncPipeline, which fetches the partial collection as the instance actor and reconciles followers, pending follow requests and unknown follows. Adds profiles.followers_url for the collectionId check.	5 days ago
Your Name	5e76ed99bf	fix #7328	1 week ago
Shlee	9ec46005df	Merge pull request #7309 from pixelfed/feature/laravel-cap ... Refactor: Captcha provider - HCaptcha, Turnstile and Cap	1 week ago
Your Name	0aa4da98e3	larastan fix last commit	1 week ago
Your Name	262065a485	Temp language fallback	1 week ago
Your Name	d1d15c76f9	fix i18n cache on about/guidelines	1 week ago
Your Name	8aadedb56c	Added i18n tests	1 week ago
Your Name	611f41bc59	polish	1 week ago
Your Name	e8f4ee86bd	polish	1 week ago
Your Name	1e78f9e93f	polish	1 week ago
Your Name	f144ea627c	polish	1 week ago
Your Name	b716a5aa5d	polish	1 week ago
Your Name	afe2bb6d1d	polish	1 week ago
Your Name	40fc084167	polish	1 week ago
Your Name	136e79885b	polish	1 week ago
Your Name	edde5b985f	polish	1 week ago
Your Name	d0f056058b	polish	1 week ago
Your Name	566c5503d3	polish	1 week ago
Your Name	ababab30ed	polish	1 week ago
Your Name	163cd9f589	polish	1 week ago
Shlee	79ad664159	Update ImageThumbnailSupersedeTest.php	1 week ago
Your Name	ddc617a8d2	Install libvips on CI runners and test on the vips driver ... The vips driver uses jcupitt/vips (FFI binding), which needs ext-ffi plus the libvips shared library at runtime - not the PECL vips extension. Add a libvips apt install step and enable ffi in both test workflows, then switch .env.testing to vips so CI exercises the new default driver. Guard ImageThumbnailSupersedeTest to skip when the configured driver's runtime is unavailable, so contributors without libvips are not blocked.	1 week ago
Your Name	a14fba166f	Fix cached-page 500s and flaky smoke/API tests ... - terms/privacy/community-guidelines views accessed the cached page as an object ($page->title), but cachedPage() returns an array, causing a 500 whenever a custom Page row existed. Switch to array access. - PublicRouteSmokeTest: enable open_registration before hitting /register, which 404s by default when registration is disabled. - Api/AccountTest: derive sanctum.stateful domain from app.url instead of hardcoding pixelfed.test, so the first-party auth test is environment independent.	1 week ago
Your Name	7b11b72e1d	test(federation): run AP delivery tests in production env ... ActivityPubDeliveryService::pool() and queueDelivery() only perform HTTP delivery when app()->environment('production'); outside production they log and return. The pool/job delivery tests were written before that guard was added (commit 868e09b64) and never forced production, so no requests were made and every assertSent/assertSentCount failed (6 failing tests). Wrap the delivery-exercising tests in a forged production environment (restored afterwards) and seed the public-ips DNS cache plus an empty banned-domains cache so validateDestination() passes without a real DNS lookup or DB query. Seed after factory creation, since the lazy DB refresh can flush the cache store. Also fix a by-value capture bug in the onError assertions: the $errors array was captured through an arrow-fn wrapper, so the inner callback's by-reference mutations never reached the assertion. Use a regular closure. No production code changed; the production delivery gate is intended behavior.	1 week ago
Your Name	729396302a	fix(federation): swallow ConnectionException on synchronous AP delivery ... queueDelivery() runs synchronously from the v1 follow/unfollow endpoints (via Helpers::sendSignedObject), which commit local state before delivery and have no try/catch. After the Http::send() rewrite, a ConnectionException from a momentarily-unreachable remote was rethrown out of queueDelivery(), turning a best-effort delivery into a 500 for the user after the follow/ unfollow was already persisted. For unfollows, a retry then hit the isFollowing==false branch and never re-sent the Undo, diverging state. Treat transport failures (ConnectionException) as best-effort on this single-delivery path: log, record host health, and return without propagating. Other exception types (invalid sender/destination, signing, serialization) still throw, matching pre-rewrite precondition behavior. Also widen SendUpdateActor's per-user catch from HttpException to Throwable so a single bad host no longer aborts a fleet-wide actor update (the old HttpException catch is dead for ConnectionException/invalid-destination).	1 week ago
Your Name	8a4567a5c2	Isolate fanout delivery failures from StatusDelete local cleanup	1 week ago
Shlee	a1abf10010	Merge pull request #7254 from pixelfed/fix/oidc-dangerzone-lockout ... Mark OIDC login session password-confirmed to fix dangerzone lockout	1 week ago
Your Name	fbca487bcd	Mark OIDC login session password-confirmed to fix dangerzone lockout	1 week ago
Shlee	78447646b8	Merge pull request #7253 from pixelfed/fix/remote-update-media-validate-before-orphan ... Validate remote update attachments before detaching existing media	1 week ago
Your Name	9b829ca56e	Validate remote update attachments before detaching existing media	1 week ago
Shlee	1d7ee48f2e	Merge pull request #7252 from pixelfed/fix/v2-media-can-post-role ... Enforce can-post role check on POST /api/v2/media	1 week ago
Your Name	3a23606573	Enforce can-post role check on POST /api/v2/media	1 week ago
Shlee	a510682122	Merge pull request #7251 from pixelfed/fix/delete-account-purge-status-edits ... Purge status_edits on account and status deletion	1 week ago
Your Name	60284a871e	Purge status_edits on account and status deletion	1 week ago
Your Name	7b90bc8699	Fix remove-all follower purge chunkById key and gate the route behind dangerzone	1 week ago