2246 Commits (252dea7016b961e81fb692730d6001412f878dda)

Author	SHA1	Message	Date
Your Name	252dea7016	Track media storage quota via an explicit lifecycle enum ... Charge the raw upload size immediately (enforce on raw, never under-count), correct down to the optimized size in the finalize job, and refund on delete. Each transition is guarded by media.quota_status so retries can't double-apply.	1 week ago
Your Name	9d839f7b5a	Fix missing email verification dispatch on settings email change	1 week ago
Daniel Supernault	fbd52dd8fc	Improve federation handling	2 weeks ago
Daniel Supernault	a3160cdd23	Update PublicApiController, fix getStatus to use database check	2 weeks ago
Daniel Supernault	1e6ce226e0	Refactor StatusController	2 weeks ago
Your Name	7a420112bf	Normalize cropped story images to the 1080x1920 canvas (#7215) ... cropPhoto() used coverDown(1080, 1920), which only downscales, so an undersized crop was stored at its original size (e.g. 110x196). Remote servers then dropped the image story for not matching expected story dimensions while videos federated. Use cover() so small crops are scaled up to fill the canvas. Note: the complementary remote-side validator relaxation (StoryFetch validateImageFile) is tracked separately and not included here.	2 weeks ago
Your Name	8aa3144745	Fix story video upload probe path (#7203) ... apiV1Add passed an absolute path to FFMpeg::open(), which laravel-ffmpeg resolves relative to the local disk root, producing a doubled path and an ffprobe 'Unable to probe / No such file or directory' failure. Open the file via the disk instead: FFMpeg::fromDisk('local')->open($path) for local storage, and an on-demand local disk rooted at the temp dir for cloud storage. Adds feature tests that pin the disk-relative path resolution.	2 weeks ago
Shlee	caffc40a45	Fix URL construction for API timeline request	2 weeks ago
Shlee	289251985a	Merge pull request #7199 from pixelfed/fix/story-publish-validation-exception ... Laravel 13 Prep: Stop swallowing overlay ValidationException into a generic 500	2 weeks ago
Your Name	62d3bc8406	Stop swallowing overlay ValidationException into a generic 500 ... publishNext() throws ValidationException::withMessages() for invalid story overlays (bad text/hashtag/mention/url/type), but the enclosing catch (\Exception $e) caught it too, since ValidationException extends Exception. Clients got a generic 500 "Failed to create story" instead of the intended 422 with field-level errors, and the log was flooded with ordinary user-input validation failures logged as server errors. Catch ValidationException separately, roll back, and rethrow it so Laravel's exception handler renders the normal 422 response.	2 weeks ago
Your Name	8fa18ff8c6	Fix dangling DB transactions in CustomFilterController ... store() and update() open a manual DB::beginTransaction() but had early return paths (duplicate keyword, keyword not found, per-filter keyword limit) that hit neither DB::commit() nor the catch block's rollback, leaving the transaction open past the end of the request. Add the missing DB::rollBack() call on each early-exit branch, matching the manual-transaction pattern used elsewhere in the app.	2 weeks ago
Shlee	140221fe90	Merge pull request #7192 from pixelfed/refactor/str-of-to-native ... Laravel 13 Prep: Replace Str::of() fluent chains with static Str::/native calls	2 weeks ago
Your Name	a424493420	Replace Str::of() fluent chains with static Str::/native calls ... Aligns with the app's dominant convention (171 static Str:: calls vs 24 Str::of() chains). Uses Str::afterLast() for the repeated "segment after last slash" pattern, Str::matchAll() where a Collection return is needed, and native explode()/substr() where a plain array/string suffices. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2 weeks ago
Your Name	277b8aa970	Use now() helper instead of Carbon::now() for current-time access ... Aligns with the app's dominant convention (413 now()/today() call sites vs 12 Carbon::now()). Carbon::parse() calls are untouched since they parse arbitrary date strings, not current-time access. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2 weeks ago
Daniel Supernault	7975ba9c75	Fix StoryCarousel cache invalidation	2 weeks ago
Daniel Supernault	915879ff57	Update account suggestions	2 weeks ago
Daniel Supernault	9aafa37364	Update ApiV1Controller.php	2 weeks ago
Daniel Supernault	6a33716870	Update ApiV1Controller, fix account suggestions	2 weeks ago
Your Name	ce073ffc92	Merge remote-tracking branch 'origin/staging' into feature/honeypot-spam-protection ... # Conflicts: # routes/web.php	2 weeks ago
Your Name	10559c23e3	Fix larastan noAuthFacadeInRequestScope in LoginController ... Replace Auth::check() with $request->user() !== null in confirmEmail(), which already has the request in scope, and drop the now-unused Auth facade import. Resolves the 2 remaining project-wide larastan errors.	2 weeks ago
Your Name	6496904293	Fix account storage limit not freeing on media deletion (#7169) ... users.storage_used only ever grew: uploads incremented it but no deletion path decremented it, so users hit the account size limit even when their real media usage was well below it. - Decrement storage_used in MediaDeletePipeline when media is removed - Add UserStorageService::increaseStorageUsed / decrementStorageUsed as the fast, symmetric hot-path counter updates (floor-based, clamped at zero) - Refactor the 6 upload call sites to use increaseStorageUsed instead of duplicated inline writes (also fixes ceil/floor drift vs the reconciler) - Add (user_id, size) covering index so per-user SUM(size) is not a full table scan (INPLACE/LOCK=NONE, skipped on sqlite) - Add user:storage:recalculate command to repair affected accounts, with a daily --stale=168 scheduled reconciler to correct any drift - Add regression tests for the pipeline and UserStorageService	2 weeks ago
Daniel Supernault	194c881cb2	Update ResetPasswordController	2 weeks ago
Daniel Supernault	1d96c94054	Refactor Auth, remove expensive middleware	2 weeks ago
Daniel Supernault	13aa36efb4	Update ApiV1Controller.php	2 weeks ago
Shlee	519b1b94dc	Refactor comments in DangerZone middleware ... Removed redundant comments to clarify code functionality.	2 weeks ago
Shlee	5d38faa257	Merge pull request #7166 from shleeable/fix/dangerzone-logout-clear-2fa-session ... Invalidate session on DangerZone forced logout to clear 2FA state	2 weeks ago
Your Name	58e8a4922d	Invalidate session on DangerZone forced logout to clear 2FA state	2 weeks ago
Your Name	742c1a6bc8	Require dangerzone sudo mode on curated register, shadow filter and page admin controllers	2 weeks ago
Shlee	97b5d2f180	Merge pull request #7159 from shleeable/fix/directory-exclude-private-profiles ... Exclude private profiles from public directory and clear suggestable on going private	2 weeks ago
Your Name	1581863093	Exclude private profiles from public directory and clear suggestable on going private	2 weeks ago
Shlee	903c191f10	Merge pull request #7158 from shleeable/fix/2fa-logout-session-cleanup ... Clear 2FA session state on forced logout after failed attempts	2 weeks ago
Your Name	97f1a097ff	Clear 2FA session state on forced logout after failed attempts	2 weeks ago
Shlee	eaadf425f2	Merge pull request #7157 from shleeable/fix/dangerzone-oidc-per-user ... Scope DangerZone OIDC sudo bypass to OIDC-registered users	2 weeks ago
Your Name	7483a4b05b	Scope DangerZone OIDC sudo bypass to OIDC-registered users	2 weeks ago
Your Name	917a13d4a7	Filter null-account statuses from non-cached network timeline	2 weeks ago
Shlee	fc80bce460	Update StoryApiV1Controller.php	2 weeks ago
Your Name	0234a305ae	Use intended-redirect session for authorize_interaction guest login	2 weeks ago
Shlee	46fb9613e3	Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle ... Rate limit and audit-log 2FA checkpoint verification	2 weeks ago
Your Name	8cebb24c04	Rate limit and audit-log 2FA checkpoint verification	2 weeks ago
Shlee	0ebe1f8fb1	Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store ... Check media blocklist before storing uploads to prevent orphaned files	2 weeks ago
Your Name	ec6827bae2	Check media blocklist before storing uploads to prevent orphaned files	2 weeks ago
Shlee	cecdad5b53	Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike ... Use ILIKE for case-insensitive search on PostgreSQL	2 weeks ago
Your Name	613cf413de	Use ILIKE for case-insensitive search on PostgreSQL	2 weeks ago
Shlee	173abef5c5	Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch ... Only dispatch SharePipeline for newly-created reblogs	2 weeks ago
Your Name	d190ba7b66	Only dispatch SharePipeline for newly-created reblogs	2 weeks ago
Shlee	a5cbea834f	Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri ... Detect OOB oauth client when redirect_uri omitted on authorize	2 weeks ago
Shlee	ae31ed8e66	Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache ... Invalidate latest-story cache on remote story expiry and null-guard l…	2 weeks ago
Your Name	53ad34b321	Ignore own row when validating email update uniqueness	2 weeks ago
Your Name	462b4bc0da	Detect OOB oauth client when redirect_uri omitted on authorize	2 weeks ago
Your Name	9850aac676	Invalidate latest-story cache on remote story expiry and null-guard latest()	2 weeks ago