125 Commits (9704fd5a362fd54bbfe24cbba4b56c0f308b8e1c)

Author	SHA1	Message	Date
Your Name	6eea565bab	chore: add composer psalm:report script for a full local txt report ... Adds a psalm:report script that ignores the baseline and writes a full human-readable report to psalm-report.txt, including informational issues, so all outstanding items to fix are surfaced in one file.	4 weeks ago
Your Name	4e0c567ecd	Add vimeo/psalm and composer scripts	4 weeks ago
Your Name	1a234c3920	chore: add Psalm static analysis (plugin-laravel, baseline, CI) ... Port PR #6646 onto staging: add psalm/plugin-laravel with psalm.xml, a staging-generated baseline, and a CI workflow that emits GitHub annotations and uploads SARIF to Code Scanning. Fix the psalm.xml schema for Psalm 6.5 (drop unsupported ClassMustBeFinal handler) and ignore generated report artifacts in git/docker.	4 weeks ago
Daniel Supernault	1810caac2d	Update composer	4 weeks ago
Your Name	1696dfacaa	chore: remove unused direct dependencies ... - Remove endroid/qr-code: never imported in app code; only bacon/bacon-qr-code is used directly (for 2FA QR generation). - Remove nesbot/carbon: already pulled in transitively by laravel/framework, laravel/horizon, and laravel/pulse.	4 weeks ago
Your Name	0c849ca4e7	fix: unpin symfony/http-foundation to allow patch updates ... Changes constraint from exact '7.4.13' to '^7.4.13'. The pin was introduced for CVE-2026-48736 but is overly restrictive — any 7.4.x release >= 7.4.13 includes the fix. This allows future security patches to install via composer update. Note: Symfony 8.x is blocked by laravel/framework ^12 which requires symfony/http-foundation ^7.2.0. Symfony 8 support arrives with Laravel 13.	4 weeks ago
Your Name	8a2649b3ff	feat: add critical path test suite and fix auth/config issues ... Test Infrastructure: - Modernize phpunit.xml (bootstrap, source block, Laravel 12 env vars) - Configure tests/Pest.php with pest()->extend(TestCase::class)->in('Feature') - Add docker-compose.test.yml (Redis for test suite) - Add composer test/test:quick scripts - Rename CACHE_DRIVER to CACHE_STORE across config (backwards compatible) - Update .env.testing for in-memory SQLite + Docker Redis Test Coverage (190 tests): - CriticalRoutes: public routes, auth routes, API endpoints, middleware, schedule - Auth/LoginTest: login, logout, rate limiting, redirect behavior - Auth/RegisterTest: registration flow, validation, disabled registration - Auth/PasswordResetTest: reset request, token validation, password update - Auth/TwoFactorTest: 2FA checkpoint, setup behind password confirmation - Auth/PasswordConfirmationTest: sudo mode flow via Laravel password.confirm - Api/ScopeTest: scope enforcement, public endpoints, admin access Bugs Fixed: - Fix unauthenticated API returning 500 instead of 401 (AuthenticationException not handled in custom exception renderer in bootstrap/app.php) - Replace custom DangerZone middleware with Laravel password.confirm - Add HasFactory trait to Profile model for test factories Bugs Documented (known-bugs group): - Registration crashes with str_ends_with TypeError (RegisterController:82) - OAuth routes use legacy array syntax causing ReflectionFunction TypeError	4 weeks ago
Your Name	edb4368b08	refactor: replace deprecated laravel/helpers with native alternatives ... Replace all deprecated helper function calls: - str_slug() → Str::slug() - starts_with() → str_starts_with() - ends_with() → str_ends_with() - array_first() → Arr::first() - array_last() → Arr::last() - array_flatten() → Arr::flatten() Remove laravel/helpers package from composer.json as it is no longer needed and will not be maintained for Laravel 13.	4 weeks ago
Daniel Supernault	e4033b05bd	Update composer	4 weeks ago
Your Name	79541afaa0	Merge origin/staging, resolve conflicts keeping matomo/device-detector over jenssegers/agent	4 weeks ago
Your Name	552a55c2d2	Upgrade images to v4	4 weeks ago
Shlee	833c34e3a7	Merge branch 'staging' into shleeable-patch-6	4 weeks ago
Your Name	9a9726af7c	Install Larastan for static analysis ... - Add larastan/larastan v3.10 (dev dependency) - Configure phpstan.neon at level 0 with Laravel extension - Generate baseline for existing errors (711 items) - Exclude files with missing class references - Fix one non-ignorable return type error in BearerTokenResponse - Add composer analyse script Usage: composer analyse	4 weeks ago
Shlee	64eb52596b	Add linting scripts to composer.json	4 weeks ago
Your Name	651f0de74f	Replace jenssegers/agent with matomo/device-detector ... - Remove unmaintained jenssegers/agent package (no releases since 2021) - Add matomo/device-detector v6.5 as actively maintained replacement - Create App\Services\UserAgentService wrapper for drop-in compatibility - Update UserDevice model and ApiV1Dot1Controller to use new service	4 weeks ago
Severin	971b3b7ac1	Update symfony/http-foundation requirement due CVE-2026-48736 ... Pushing symfony/http-foundation to the newest 7.x version that fixes the CVE (see also https://packagist.org/security-advisories/PKSA-y6py-qpv1-h52p)	3 months ago
Daniel Supernault	a78a022283	Update passport. Fixes #6480	7 months ago
Ramon van Belzen	373aa01dfc	composer: accept php 8.5	9 months ago
Daniel Supernault	09bb93af51	Update composer	10 months ago
Daniel Supernault	a3532c2e21	Update composer, fix deps	10 months ago
dansup	d4cf6b9f62	Merge branch 'staging' into laravellock1	10 months ago
dansup	eae2dafcac	Merge branch 'staging' into intervention-laravel-clean	10 months ago
dansup	35285b73a3	Merge branch 'staging' into predis	10 months ago
Your Name	6a931d6516	update	10 months ago
Your Name	26f1af3bcd	update	10 months ago
Your Name	c05cf8a824	update	10 months ago
Shlee	064e98be50	Update composer.json	10 months ago
Your Name	cea1076c9c	Update	10 months ago
Your Name	7c8b40ecf5	Upgrade predis from v2.0 to v3.2	10 months ago
Your Name	bad8d62f80	Upgrade predis from v2.0 to v3.2 ... - Update predis/predis from ^2.0 to ^3.2 - Predis v3.2.0 includes RESP3 support, improved pipeline abstractions - No code changes required, configuration remains compatible - Tested successfully with tinker	10 months ago
Your Name	827088351e	update	10 months ago
dansup	d1a874f3bb	Merge branch 'staging' into guzzlehttp	11 months ago
dansup	c0008d31d8	Merge branch 'staging' into carbon-upgrade	11 months ago
dansup	f2757e5d7a	Merge pull request #6310 from pixelfed/shleeable-patch-22 ... Refactor: Remove dbal (dead code)	11 months ago
dansup	67eb0d125e	Merge pull request #6305 from pixelfed/vips ... Refactor: Add VIPS image driver support - missing composer package - Low risk	11 months ago
dansup	b7813cca7d	Merge pull request #6286 from pixelfed/shleeable-patch-17 ... Refactor: Update Crypto to phpseclib3 - Low risk	11 months ago
Your Name	9ecfc80619		11 months ago
Your Name	0ef1a598d5	fix	11 months ago
Your Name	a648880662		11 months ago
Shlee	35b4655fb7	Update composer.json	11 months ago
Shlee	88f7584428	Update composer.json	11 months ago
Your Name	37ecd06b13	Add VIPS image driver support	11 months ago
Shlee	ada1059592	Update composer.json - drop php 8.2	11 months ago
Daniel Supernault	71e3fa7aff	Use pest for tests	1 year ago
Daniel Supernault	9d93f67e0d	Update collision to fix tests 🤞	1 year ago
Daniel Supernault	98ba874081	Update composer deps, remove libvips by default and make it optional	1 year ago
Daniel Supernault	4e938a8ffa	Fix heic, avif, webp support and add libvips driver	1 year ago
Daniel Supernault	ab9c13fe0d	New supported formats, Preserve ICC Color Profiles, libvips support ... Update image pipeline to handle avif, heic and webp and preserve ICC color profiles and added libvips support.	1 year ago
Gavin Mogan	441c8e0d4c	Generic OIDC Support ... * Everything should be configurable by env variables * Basic request tests	1 year ago
Daniel Supernault	883df8a72e	Update laravel to v12	2 years ago