12814 Commits (a142db87b4e63d7d760d5f1d337e9636c388e169)

 

All Branches   

Search

Author	SHA1	Message	Date
Your Name	a142db87b4	polish	4 weeks ago
Your Name	00dd5b3d92	refactor: replace Guzzle pool with Laravel HTTP client in StatusDelete ... Replace direct GuzzleHttp\Client and Pool usage in fanoutDelete() with Laravel's Http::pool() facade. This provides: - Testability via Http::fake() in tests - Consistent timeout/retry configuration - No direct Guzzle dependency in application code - Proper integration with Laravel's HTTP client features	4 weeks ago
Shlee	df9aebcf9b	Merge pull request #6888 from pixelfed/refactor/controller-return-types ... refactor: add return type declarations to controller methods	4 weeks ago
Your Name	17a5b5c3de	fix: resolve 6 Larastan errors in controller return types ... - DeckController: add missing View contract import - CuratedRegisterController::proceed(): add default switch case - GroupController::reportAction(): add default switch case - InstallController::checkDatabase/precheckDatabase: add missing return	4 weeks ago
Your Name	54cfdf3c2b	refactor: add return type declarations to controller methods ... Adds explicit return type declarations to 498 controller methods across 88 files. Types inferred from return statements: - JsonResponse for response()->json() returns - RedirectResponse for redirect()/back() returns - View (contract) for view() returns - Response for response() returns - void for methods with no return value - array for array returns - string/int/bool for scalar returns Also fixes 3 methods with incorrect bare returns: - AvatarController::deleteAvatar - bare return → json response - ImportPostController::checkPermissions - bare return → true - RemoteAuthController::accountToId - bare return → empty array	4 weeks ago
Shlee	89a0aa3bf7	Merge pull request #6887 from pixelfed/shleeable-patch-1 ... Move ValidateCsrfToken middleware to a new position	4 weeks ago
Shlee	46393bd9fc	Move ValidateCsrfToken middleware to a new position	4 weeks ago
Shlee	9aa2df66cb	Merge pull request #6885 from pixelfed/shleeable-patch-1 ... Revert ValidateCsrfToken to PreventRequestForgery change - wait for Laravel 13	4 weeks ago
Shlee	2c704d9a76	Update app.php	4 weeks ago
Shlee	e9dcbf70e3	Merge pull request #6884 from pixelfed/fix/test-improvements ... pint /tests	4 weeks ago
Your Name	412c29bb47	Improve test assertions and imports	4 weeks ago
Daniel Supernault	db636ee08a	Pint database/	4 weeks ago
Shlee	7fa0615448	Merge pull request #6883 from pixelfed/shleeable-patch-1 ... Revert strict tests in nonprod	4 weeks ago
Shlee	f13a891ff4	Update AppServiceProvider.php	4 weeks ago
Daniel Supernault	42f361540c	Pint config/	4 weeks ago
Daniel Supernault	33dce75f2c	Pint app/	4 weeks ago
dansup	e1b60d070b	Merge pull request #6882 from pixelfed/shleeable-patch-2 ... Refactor: Add additional strict modes for testing environments only	4 weeks ago
Shlee	de8de9251b	Update AppServiceProvider.php	4 weeks ago
Shlee	1ae0feb129	Update AppServiceProvider.php	4 weeks ago
dansup	8e99e0c316	Merge pull request #6880 from pixelfed/fix/cache-serializable-classes ... Laravel 13 prep: add serializable_classes to cache config	4 weeks ago
dansup	90af7d8a2d	Merge pull request #6879 from pixelfed/fix/csrf-middleware-rename ... Laravel 13 prep: rename VerifyCsrfToken to PreventRequestForgery	4 weeks ago
dansup	e0876c8a97	Merge pull request #6878 from pixelfed/fix/mysql-strict-mode ... fix: enable MySQL strict mode and remove defaultStringLength(191)	4 weeks ago
dansup	93553670e5	Merge pull request #6877 from pixelfed/fix/replace-request-get ... Laravel 13 prep: replace Symfony deprecated ->get() with ->input()	4 weeks ago
dansup	665221176b	Merge pull request #6874 from pixelfed/fix/api-throttle-middleware ... feat: add global throttle:api middleware to the api route	4 weeks ago
Shlee	c04fec21fc	Update model loading behavior in AppServiceProvider	4 weeks ago
Shlee	542434785c	Set strict mode to true in database configuration	4 weeks ago
Shlee	35cb9a9dcb	Change DB_STRICT environment variable to true	4 weeks ago
Shlee	323cfc9cf7	Update database.php	4 weeks ago
Shlee	2f466b02d7	Update database.php	4 weeks ago
Your Name	ba90d1bd20	feat: add serializable_classes to cache config for Laravel 13 prep ... Laravel 13 defaults serializable_classes to false, blocking arbitrary PHP object unserialization from cache. This project caches CustomFilter model instances (in getCachedFiltersForAccount), so it must be explicitly allowlisted. All other cache usage in this project stores scalars, arrays, or Fractal-transformed array output — no other classes need allowlisting.	4 weeks ago
Your Name	9958b095dd	refactor: rename VerifyCsrfToken to PreventRequestForgery ... Prepares for Laravel 13 where VerifyCsrfToken is deprecated in favor of PreventRequestForgery. The old class remains as an alias in v13 but will be removed in a future version.	4 weeks ago
Your Name	4320231c1f	fix: replace deprecated $request->get() with $request->input() ... Symfony 8.0 removes Request::get(). Laravel 13 will support Symfony 8, so these 11 usages would break on upgrade. Using $request->input() which checks both query string and request body (same behavior as the old get() method).	4 weeks ago
Your Name	1b64c59beb	fix: enable MySQL strict mode and remove defaultStringLength(191) ... - Enable strict mode for MySQL connection to prevent silent data truncation, zero-date insertion, and division-by-zero errors. - Remove Schema::defaultStringLength(191) which was a MySQL 5.7 workaround no longer needed on MySQL 8.0+ / MariaDB 10.3+.	4 weeks ago
Shlee	08cdac1ef6	Merge pull request #6876 from pixelfed/fix/remove-unused-deps ... chore: remove unused direct dependencies	4 weeks ago
Your Name	1696dfacaa	chore: remove unused direct dependencies ... - Remove endroid/qr-code: never imported in app code; only bacon/bacon-qr-code is used directly (for 2FA QR generation). - Remove nesbot/carbon: already pulled in transitively by laravel/framework, laravel/horizon, and laravel/pulse.	4 weeks ago
Shlee	1f3e472a7e	Merge pull request #6875 from pixelfed/fix/unpin-symfony-http-foundation ... fix: unpin symfony/http-foundation to allow patch updates	4 weeks ago
Your Name	0c849ca4e7	fix: unpin symfony/http-foundation to allow patch updates ... Changes constraint from exact '7.4.13' to '^7.4.13'. The pin was introduced for CVE-2026-48736 but is overly restrictive — any 7.4.x release >= 7.4.13 includes the fix. This allows future security patches to install via composer update. Note: Symfony 8.x is blocked by laravel/framework ^12 which requires symfony/http-foundation ^7.2.0. Symfony 8 support arrives with Laravel 13.	4 weeks ago
Shlee	0837968fad	Update AppServiceProvider.php	4 weeks ago
Your Name	ed90e619fb	feat: add throttle:api middleware to the api route group ... Adds a global rate limiter (240 req/min per user or IP) to all API routes. Previously rate limiting was only applied ad-hoc on individual routes, leaving some endpoints unprotected.	4 weeks ago
Shlee	f81d7ba666	Merge pull request #6873 from pixelfed/fix/deprecated-starts-with ... fix: replace deprecated starts_with() with str_starts_with()	4 weeks ago
Your Name	26b8a0a6b0	fix: replace deprecated starts_with() with str_starts_with() ... The starts_with() helper was removed in Laravel 6. Use PHP 8's native str_starts_with() instead.	4 weeks ago
Shlee	cf714c6fb7	Merge pull request #6872 from pixelfed/larastan0 ... refactor: replace $fillable with $guarded = [] across all models	4 weeks ago
Your Name	570a30d037	refactor: replace $fillable with $guarded = [] across all models ... Aligns all models with the project convention (see .ai/rules/models.md). Model::shouldBeStrict() in non-production will catch any issues early.	4 weeks ago
Shlee	2fbb9fa428	Merge pull request #6871 from pixelfed/larastan0 ... polish	4 weeks ago
Your Name	c891f34df6	polish	4 weeks ago
Shlee	b5c9f2d062	Merge pull request #6870 from pixelfed/shleeable-patch-1 ... Update DOCKER_COMPOSE_SETUP.md	4 weeks ago
Shlee	4086f07783	Fix duplicate command in Docker Compose setup	4 weeks ago
Shlee	e2c6162b35	Update DOCKER_COMPOSE_SETUP.md	4 weeks ago
Shlee	1b3c8150b0	Merge pull request #6869 from pixelfed/larastan0 ... Larastan0	4 weeks ago
Your Name	f54e6280bc	comment dead code	4 weeks ago