581 Commits (25d9753d87aa50e7e32a26501c608ab837897616)

Author	SHA1	Message	Date
Lily Cohen	c381362b3a	Fix Postgres backup connection and statuses nullability	2 days ago
Daniel Supernault	fc41a8f19c	Bump version	2 days ago
Daniel Supernault	bb7856387c	Add dm config	2 days ago
Daniel Supernault	a7d11e3889	Lint	3 days ago
Daniel Supernault	f5fb32d202	Add ide helper	3 days ago
Daniel Supernault	0e0de62dd9	Fix ActivityPub url resolution	4 days ago
Daniel Supernault	016749edf5	Lint	4 days ago
Daniel Supernault	7e5ccb6d26	Bump version to v0.14.1	4 days ago
Daniel Supernault	81e71a04f8	Update Helpers::validateUrl(), skip validation for app domain/url optionally	4 days ago
Shlee	bde2c5eb76	Update Pixelfed version to 0.14.0	4 days ago
Shlee	220f650898	Update session.php	4 days ago
Daniel Supernault	dedfa67b70	Add FEP-8fcf followers collection synchronization ... Sender: followers-only Create deliveries carry a signed Collection-Synchronization header scoped to the authority of each inbox, and the partial followers collection is served to authenticated instances at /users/{username}/followers_synchronization. Receiver: a signed Collection-Synchronization header whose digest differs from our copy queues FollowersSyncPipeline, which fetches the partial collection as the instance actor and reconciles followers, pending follow requests and unknown follows. Adds profiles.followers_url for the collectionId check.	5 days ago
Shlee	f0cfdf292c	Update pixelfed.php	6 days ago
Shlee	1c0af3ac7c	Update pixelfed.php	1 week ago
Shlee	9ec46005df	Merge pull request #7309 from pixelfed/feature/laravel-cap ... Refactor: Captcha provider - HCaptcha, Turnstile and Cap	1 week ago
Your Name	0aa4da98e3	larastan fix last commit	1 week ago
Your Name	262065a485	Temp language fallback	1 week ago
Your Name	8f4add2f1e	polish	1 week ago
Your Name	fc2ab59655	polish	1 week ago
Your Name	e8f4ee86bd	polish	1 week ago
Shlee	10198bf039	Update captcha.php	1 week ago
Your Name	40fc084167	polish	1 week ago
Your Name	136e79885b	polish	1 week ago
Your Name	2942fe5851	polish	1 week ago
Your Name	e18475f9d0	polish	1 week ago
Your Name	edde5b985f	polish	1 week ago
Your Name	566c5503d3	polish	1 week ago
Your Name	ababab30ed	polish	1 week ago
Your Name	abb2d8e5e9	polish	1 week ago
Your Name	163cd9f589	polish	1 week ago
Daniel Supernault	7edc6fe0bb	Bump version and changelog	1 week ago
Your Name	99c3f2f6ba	Default image driver to vips ... Switch IMAGE_DRIVER default from gd to vips in config/image.php and the shipped .env examples. libvips is faster, lower-memory, and has strong WebP/AVIF support; both libvips and the php-vips extension ship in the official Docker image. ImageDriverManager already maps 'vips' to the installed Intervention Vips driver, so no code change is needed. .env.testing stays on gd because the CI test runners install the gd extension, not php-vips.	1 week ago
Daniel Supernault	1cead5cf60	Update in-app registration	1 week ago
Daniel Supernault	5fc343dd40	Update federation fanout	2 weeks ago
Shlee	7e468230d6	Update horizon.php	2 weeks ago
Your Name	bbe7cfa8e1	Split Horizon into priority-based supervisors, add balanceCooldown ... and notification routing All 15 queues previously ran through one auto-balanced supervisor. Horizon's `balance: auto` does not honor queue array order for priority, so despite queue names implying priority ('high' vs 'low'), a burst on any one queue could starve any other sharing that supervisor - e.g. a burst of mmo (image/video optimization, 23 dispatch sites, CPU/IO heavy) could delay high-queue DM/follow delivery just as easily as it could delay low-queue background work. Split into 4 supervisors grouped by actual job characteristics (checked via grep across every ->onQueue() call site, not guessed): - supervisor-priority: high, inbox, pushnotify, follow, default, shared - user-facing federation/DM/notification delivery. - supervisor-fanout: feed, story, groups - bursty timeline/story fanout writes triggered by posts, likes, and follows. - supervisor-media: mmo - image/video optimize/resize/thumbnail. Runs a fixed worker pool (balance: false) instead of auto-scaling, so it can't claim workers away from the other pools under load. - supervisor-background: low, delete, adelete, move, intbg - imports, crawling, account deletion/migration; not time-sensitive. Moved the shared supervisor shape into `defaults` (keyed per supervisor name, per Horizon's own merge behavior) so `environments` only needs to override what actually differs, instead of each environment fully redefining supervisor-1 from scratch. Existing env vars (HORIZON_MAX_PROCESSES, HORIZON_MIN_PROCESSES, HORIZON_BALANCE_STRATEGY, HORIZON_SUPERVISOR_*) keep governing the priority supervisor for continuity with existing deployments; the three new supervisors get their own HORIZON_*_MAX_PROCESSES vars with conservative defaults. Also: - Added balanceCooldown: 3 explicitly (previously relied on SupervisorOptions' own constructor default of the same value - behavior is unchanged, just no longer implicit). - Wired LongWaitDetected notification routing (Horizon::routeMailNotificationsTo/routeSlackNotificationsTo) to new optional config('horizon.notification_routing') keys, sourced from env vars. Previously these were hardcoded, commented-out examples with nowhere to actually alert on the `waits` thresholds already configured below. Verified by actually starting `php artisan horizon` and inspecting `horizon:supervisors`: all 4 supervisors registered with exactly the intended queues, supervisor-media correctly running fixed (non-auto) balancing. Cross-checked every ->onQueue() call site in app/ against the new supervisor queue lists - exact match, no queue dropped or duplicated. Full test suite (715/715) and Larastan clean.	2 weeks ago
Shlee	4f06102741	Update queue.php	2 weeks ago
Your Name	582083a7fa	Fix Redis queue retry_after being shorter than Horizon's timeout ... config/queue.php's redis connection defaulted retry_after to 90s, while config/horizon.php's supervisor-1 defaults to a 300s timeout in both environments. Per Horizon's documented timeout-chain requirement (job timeout < supervisor timeout < retry_after), this was backwards: any job legitimately running between 90s and 300s would get treated as dead by the queue driver and picked up by a second worker before Horizon's own supervisor had a chance to time it out, causing the same job to run twice concurrently. Bumps the default to 330s (a 30s margin over the supervisor timeout) and documents the relationship inline so it doesn't regress if either value is tuned later.	2 weeks ago
Your Name	42620e584b	Upgrade to Laravel 13 ... - laravel/framework ^12.0 -> ^13.0 - spatie/laravel-backup ^9.2.9 -> ^10.0 (forced: 9.x pins illuminate/notifications ^12.40, incompatible with L13) - Drop psalm/plugin-laravel + vimeo/psalm (dev-only static analysis): the only version chain compatible with L13's testbench-core needs vimeo/psalm ^7.0.0-beta, which requires narrowing the project's declared PHP floor (composer platform.php is pinned to 8.3.0 to keep composer.lock installable on the oldest supported PHP patch; the psalm 7 betas require specific 8.3.16+/8.4.3+/8.5.0+ floors). Its CI workflow (.github/workflows/php-psalm.yml) was already disabled (`on: []`, "too many errors"). Larastan/PHPStan remains as the project's static analysis tool, unaffected. - Rename VerifyCsrfToken/ValidateCsrfToken -> PreventRequestForgery in bootstrap/app.php and config/sanctum.php (the L13 rename; old classes remain as deprecated aliases but new code should reference the new name), and validateCsrfTokens() -> preventRequestForgery() in the middleware config. Everything else (cache serializable_classes, cache/session/redis key prefixes, upsert() uniqueBy, JobAttempted/QueueBusy event properties, pagination view names, Manager::extend bindings, model-boot nested instantiation) was checked against the app's actual code and found to be either already handled, already using the new convention, or not applicable to any pattern in this codebase. All 715 tests pass (verified against a clean baseline with Redis available locally via Docker); Pint and Larastan (the project's configured `composer analyse` scope) are both clean.	2 weeks ago
Daniel Supernault	fb3e218d64	Bump version	2 weeks ago
Your Name	ce073ffc92	Merge remote-tracking branch 'origin/staging' into feature/honeypot-spam-protection ... # Conflicts: # routes/web.php	2 weeks ago
Your Name	219ce0ca2b	Move account_storage_reconcile flag to config/scheduledtasks.php ... Introduce a dedicated config/scheduledtasks.php for scheduled-task toggles and relocate the reconciler flag there (ACCOUNT_STORAGE_RECONCILE), reading it via config() in routes/scheduledtasks.php. Removed the setting from config/pixelfed.php. Verified both states with schedule:list.	2 weeks ago
Your Name	4f284e0893	Gate storage reconciler schedule behind a disabled-by-default flag ... The upload/delete/read paths now self-heal stale storage_used counters and the upgrade backfill migration repairs existing accounts, so the weekly reconciler is no longer required. Gate it behind pixelfed.account_storage_ reconcile (ACCOUNT_STORAGE_RECONCILE), defaulting off, so operators can opt in to the background hygiene job without editing source.	2 weeks ago
Your Name	ce4343e3e2	Replace custom register token with spatie/laravel-honeypot ... Swap the custom 'rt' register token anti-spam mechanism for spatie/laravel-honeypot on the registration and parental-controls invite flows. - Add spatie/laravel-honeypot and publish config/honeypot.php - Remove getRegisterToken() and the rt validation rule from RegisterController - Replace the rt hidden field with the @honeypot directive in both forms - Attach ProtectAgainstSpam middleware to POST /register and the parental-controls invite register route - Update RegisterTest to disable honeypot for the valid registration case	2 weeks ago
Daniel Supernault	c07706a415	Lint	2 weeks ago
Daniel Supernault	d7cfd07204	Fix PostEditModal. Closes #7084	2 weeks ago
Your Name	95e316e86f	Apply staged formatting and session config changes	3 weeks ago
Shlee	19c8bea00b	Update queue.php	3 weeks ago
Shlee	1d712e1478	Update default mailer configuration to use MAIL_DRIVER	3 weeks ago
Shlee	690d710693	Update database.php	3 weeks ago