660880eac7
Merge pull request #7036 from pixelfed/fix/remote-auth-http-timeout
...
Add timeout, retry and error handling to remote auth HTTP calls
4 weeks ago
2ad6e28318
Add timeout, retry and error handling to remote auth HTTP calls
...
RemoteAuthService::getVerifyCredentials, getFollowing and getToken made
outbound HTTP requests to a user-controlled remote instance during the
Mastodon login flow with no timeout, no retry and no exception handling.
A slow or hostile instance could hang the request or surface an uncaught
exception.
Wrap all three in timeout(20)->retry(3, 750) with try/catch that returns
false on failure, matching the existing pattern in isDomainCompatible().
Callers already treat a falsy return as a failure; add the missing guard
at the one verify_credentials call site that accessed the result array
without checking it first.
Adds RemoteAuthServiceTest covering connection failure, server error and
success paths.
4 weeks ago
46580f3635
Merge pull request #7035 from pixelfed/fix/dm-read-bulk-update
...
Mark direct messages read with a single bulk update
4 weeks ago
fbfd26d775
Mark direct messages read with a single bulk update
...
DirectMessageController@read fetched every matching DirectMessage and
saved each one individually in a loop, issuing one UPDATE per row. On an
active thread this is N queries.
Pluck the matching ids and perform a single bulk update, preserving the
existing response (the list of affected message ids) and updated_at
behaviour.
Adds regression tests covering the marked-read ids, the status_id lower
bound, and sender isolation.
4 weeks ago
7b7392dcaf
Merge pull request #7034 from pixelfed/fix/avatar-upload-silent-failure
...
Fix silent failure in avatar upload endpoints
4 weeks ago
29280cd950
Fix silent failure in avatar upload endpoints
...
AvatarController@store and BaseApiController@avatarUpdate wrapped the
upload flow in an empty catch(\Exception) block and returned a success
response even when the upload or save failed.
Log the exception and return a real error response (500 JSON for the
API endpoint, a redirect with validation errors for the web endpoint).
Adds regression tests covering the failure path, the success path, and
non-image rejection.
4 weeks ago
2486817b78
Merge pull request #7024 from pixelfed/dependabot/npm_and_yarn/staging/blurhash-2.0.5
...
chore(deps)(deps): bump blurhash from 1.1.5 to 2.0.5
4 weeks ago
b130ef2bf3
Merge pull request #7013 from pixelfed/dependabot/npm_and_yarn/ip-address-10.7.0
...
chore(deps): bump ip-address from 10.2.0 to 10.7.0
4 weeks ago
b8e04e2038
Merge pull request #7010 from pixelfed/dependabot/npm_and_yarn/multi-c845c5b3f5
...
chore(deps): bump postcss-selector-parser
4 weeks ago
7332e251cd
Merge pull request #7006 from darkdi/fix/groups-topic-pf-type
...
Drop the no-op pf_type assignment in the group topic feed
4 weeks ago
f428ff6fb5
chore(deps)(deps): bump blurhash from 1.1.5 to 2.0.5
...
Bumps [blurhash](https://github.com/woltapp/blurhash ) from 1.1.5 to 2.0.5.
- [Commits](https://github.com/woltapp/blurhash/commits )
---
updated-dependencies:
- dependency-name: blurhash
dependency-version: 2.0.5
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
9e33bed630
Add only_reposts
4 weeks ago
6fa09e4b42
Merge pull request #7014 from pixelfed/dependabot/npm_and_yarn/browserslist-4.28.8
...
chore(deps): bump browserslist from 4.28.2 to 4.28.8
4 weeks ago
be2f22bc2e
Merge pull request #7019 from pixelfed/dependabot/npm_and_yarn/fast-uri-3.1.6
...
chore(deps): bump fast-uri from 3.1.2 to 3.1.6
4 weeks ago
1c1ea5bb17
Merge pull request #7016 from pixelfed/dependabot/composer/staging/laravel/telescope-5.23.0
...
chore(deps)(deps-dev): bump laravel/telescope from 5.22.1 to 5.23.0
4 weeks ago
1a2be969b8
Merge pull request #7017 from pixelfed/dependabot/composer/staging/laravel/tinker-3.0.2
...
chore(deps)(deps): bump laravel/tinker from 2.11.1 to 3.0.2
4 weeks ago
122f3bb485
Merge pull request #7020 from pixelfed/shleeable-patch-1
...
Shleeable patch 1
4 weeks ago
93e8c7d868
Update dependabot.yml
4 weeks ago
0eedf0deef
chore(deps): bump fast-uri from 3.1.2 to 3.1.6
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.1.2 to 3.1.6.
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.6 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
7eded54f1c
chore(deps)(deps): bump laravel/tinker from 2.11.1 to 3.0.2
...
Bumps [laravel/tinker](https://github.com/laravel/tinker ) from 2.11.1 to 3.0.2.
- [Release notes](https://github.com/laravel/tinker/releases )
- [Changelog](https://github.com/laravel/tinker/blob/3.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/tinker/compare/v2.11.1...v3.0.2 )
---
updated-dependencies:
- dependency-name: laravel/tinker
dependency-version: 3.0.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
447b76fede
chore(deps)(deps-dev): bump laravel/telescope from 5.22.1 to 5.23.0
...
Bumps [laravel/telescope](https://github.com/laravel/telescope ) from 5.22.1 to 5.23.0.
- [Release notes](https://github.com/laravel/telescope/releases )
- [Changelog](https://github.com/laravel/telescope/blob/5.x/CHANGELOG.md )
- [Commits](https://github.com/laravel/telescope/compare/v5.22.1...v5.23.0 )
---
updated-dependencies:
- dependency-name: laravel/telescope
dependency-version: 5.23.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
ec8fa5f619
chore(deps): bump browserslist from 4.28.2 to 4.28.8
...
Bumps [browserslist](https://github.com/browserslist/browserslist ) from 4.28.2 to 4.28.8.
- [Release notes](https://github.com/browserslist/browserslist/releases )
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/browserslist/browserslist/compare/4.28.2...4.28.8 )
---
updated-dependencies:
- dependency-name: browserslist
dependency-version: 4.28.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
66f8b61ef7
chore(deps): bump ip-address from 10.2.0 to 10.7.0
...
Bumps [ip-address](https://github.com/beaugunderson/ip-address ) from 10.2.0 to 10.7.0.
- [Release notes](https://github.com/beaugunderson/ip-address/releases )
- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.7.0 )
---
updated-dependencies:
- dependency-name: ip-address
dependency-version: 10.7.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
e5bda87a10
chore(deps): bump postcss-selector-parser
...
Bumps and [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser ). These dependencies needed to be updated together.
Updates `postcss-selector-parser` from 7.1.1 to 7.1.5
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases )
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/v7.1.1...7.1.5 )
Updates `postcss-selector-parser` from 6.1.2 to 6.1.4
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases )
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/v7.1.1...7.1.5 )
---
updated-dependencies:
- dependency-name: postcss-selector-parser
dependency-version: 7.1.5
dependency-type: indirect
- dependency-name: postcss-selector-parser
dependency-version: 6.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 weeks ago
febbb23be2
Merge pull request #7004 from pixelfed/staging
...
Staging
4 weeks ago
4c4a457fe4
Update ApiV1Controller, fix napi in timelines
4 weeks ago
71cade540a
Drop the no-op pf_type assignment in the group topic feed
4 weeks ago
50cdff3bbe
Merge pull request #7005 from pixelfed/shleeable-patch-1
...
Shleeable patch 1
4 weeks ago
07b5c1fd34
Update dependabot.yml
4 weeks ago
fbbdf884d2
Merge pull request #7003 from pixelfed/staging-snapshot-20260901
...
composer
4 weeks ago
595620e5b8
composer
4 weeks ago
1a49fb5873
Merge pull request #7002 from pixelfed/staging
...
Fix reblog handling
4 weeks ago
a6117a2407
Fix reblog handling
4 weeks ago
926282e5b2
Merge pull request #7001 from pixelfed/staging
...
Update ASF
4 weeks ago
5468eaeb56
Update ASF
4 weeks ago
76af4322c9
Merge pull request #6997 from pixelfed/staging
...
Staging
4 weeks ago
ccac8b31bd
Update Report endpoint, add support for optional message
4 weeks ago
2f826759f8
Merge pull request #6996 from pixelfed/shleeable-patch-1
...
Update composer.json
4 weeks ago
8a0368ab00
Update composer.json
4 weeks ago
a9113541c7
Merge pull request #6995 from pixelfed/staging
...
Staging
4 weeks ago
26d3b9f532
Merge pull request #6991 from pixelfed/fix/remote-status-delete-media-cleanup
...
Fix/remote status delete media cleanup
4 weeks ago
32bec52edb
Merge pull request #6985 from pixelfed/chore/laravel12-skeleton-uplift-v2
...
Laravel 12 skeleton uplift v2
4 weeks ago
c19fd269b1
Lint
4 weeks ago
843c67656d
Merge pull request #6994 from pixelfed/staging
...
Create 2019_12_14_000001_create_personal_access_tokens_table.php
4 weeks ago
8e7b368ea2
Create 2019_12_14_000001_create_personal_access_tokens_table.php
4 weeks ago
445acaf027
Merge pull request #6993 from pixelfed/staging
...
Add Sanctum support
4 weeks ago
584ce27f71
Add Sanctum support
4 weeks ago
9b3e063e3e
Merge pull request #6941 from pixelfed/staging
...
Staging (Good to merge)
4 weeks ago
c623a7afbf
Remove 'true' argument from usernameToId call
4 weeks ago
7c3644c3e1
Update ApiV1Controller.php
4 weeks ago
Shlee
Your Name
dansup
dependabot[bot]
Dmitry Rantovov