2239 Commits (ad686571bf317b0116e4e2a369ad5fe9f5cb15bd)

Author	SHA1	Message	Date
Shlee	caffc40a45	Fix URL construction for API timeline request	2 weeks ago
Shlee	289251985a	Merge pull request #7199 from pixelfed/fix/story-publish-validation-exception ... Laravel 13 Prep: Stop swallowing overlay ValidationException into a generic 500	2 weeks ago
Your Name	62d3bc8406	Stop swallowing overlay ValidationException into a generic 500 ... publishNext() throws ValidationException::withMessages() for invalid story overlays (bad text/hashtag/mention/url/type), but the enclosing catch (\Exception $e) caught it too, since ValidationException extends Exception. Clients got a generic 500 "Failed to create story" instead of the intended 422 with field-level errors, and the log was flooded with ordinary user-input validation failures logged as server errors. Catch ValidationException separately, roll back, and rethrow it so Laravel's exception handler renders the normal 422 response.	2 weeks ago
Your Name	8fa18ff8c6	Fix dangling DB transactions in CustomFilterController ... store() and update() open a manual DB::beginTransaction() but had early return paths (duplicate keyword, keyword not found, per-filter keyword limit) that hit neither DB::commit() nor the catch block's rollback, leaving the transaction open past the end of the request. Add the missing DB::rollBack() call on each early-exit branch, matching the manual-transaction pattern used elsewhere in the app.	2 weeks ago
Shlee	140221fe90	Merge pull request #7192 from pixelfed/refactor/str-of-to-native ... Laravel 13 Prep: Replace Str::of() fluent chains with static Str::/native calls	2 weeks ago
Your Name	a424493420	Replace Str::of() fluent chains with static Str::/native calls ... Aligns with the app's dominant convention (171 static Str:: calls vs 24 Str::of() chains). Uses Str::afterLast() for the repeated "segment after last slash" pattern, Str::matchAll() where a Collection return is needed, and native explode()/substr() where a plain array/string suffices. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2 weeks ago
Your Name	277b8aa970	Use now() helper instead of Carbon::now() for current-time access ... Aligns with the app's dominant convention (413 now()/today() call sites vs 12 Carbon::now()). Carbon::parse() calls are untouched since they parse arbitrary date strings, not current-time access. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2 weeks ago
Daniel Supernault	7975ba9c75	Fix StoryCarousel cache invalidation	2 weeks ago
Daniel Supernault	915879ff57	Update account suggestions	2 weeks ago
Daniel Supernault	9aafa37364	Update ApiV1Controller.php	2 weeks ago
Daniel Supernault	6a33716870	Update ApiV1Controller, fix account suggestions	2 weeks ago
Your Name	ce073ffc92	Merge remote-tracking branch 'origin/staging' into feature/honeypot-spam-protection ... # Conflicts: # routes/web.php	2 weeks ago
Your Name	10559c23e3	Fix larastan noAuthFacadeInRequestScope in LoginController ... Replace Auth::check() with $request->user() !== null in confirmEmail(), which already has the request in scope, and drop the now-unused Auth facade import. Resolves the 2 remaining project-wide larastan errors.	2 weeks ago
Your Name	6496904293	Fix account storage limit not freeing on media deletion (#7169) ... users.storage_used only ever grew: uploads incremented it but no deletion path decremented it, so users hit the account size limit even when their real media usage was well below it. - Decrement storage_used in MediaDeletePipeline when media is removed - Add UserStorageService::increaseStorageUsed / decrementStorageUsed as the fast, symmetric hot-path counter updates (floor-based, clamped at zero) - Refactor the 6 upload call sites to use increaseStorageUsed instead of duplicated inline writes (also fixes ceil/floor drift vs the reconciler) - Add (user_id, size) covering index so per-user SUM(size) is not a full table scan (INPLACE/LOCK=NONE, skipped on sqlite) - Add user:storage:recalculate command to repair affected accounts, with a daily --stale=168 scheduled reconciler to correct any drift - Add regression tests for the pipeline and UserStorageService	2 weeks ago
Daniel Supernault	194c881cb2	Update ResetPasswordController	2 weeks ago
Daniel Supernault	1d96c94054	Refactor Auth, remove expensive middleware	2 weeks ago
Daniel Supernault	13aa36efb4	Update ApiV1Controller.php	2 weeks ago
Shlee	519b1b94dc	Refactor comments in DangerZone middleware ... Removed redundant comments to clarify code functionality.	2 weeks ago
Shlee	5d38faa257	Merge pull request #7166 from shleeable/fix/dangerzone-logout-clear-2fa-session ... Invalidate session on DangerZone forced logout to clear 2FA state	2 weeks ago
Your Name	58e8a4922d	Invalidate session on DangerZone forced logout to clear 2FA state	2 weeks ago
Your Name	742c1a6bc8	Require dangerzone sudo mode on curated register, shadow filter and page admin controllers	2 weeks ago
Shlee	97b5d2f180	Merge pull request #7159 from shleeable/fix/directory-exclude-private-profiles ... Exclude private profiles from public directory and clear suggestable on going private	2 weeks ago
Your Name	1581863093	Exclude private profiles from public directory and clear suggestable on going private	2 weeks ago
Shlee	903c191f10	Merge pull request #7158 from shleeable/fix/2fa-logout-session-cleanup ... Clear 2FA session state on forced logout after failed attempts	2 weeks ago
Your Name	97f1a097ff	Clear 2FA session state on forced logout after failed attempts	2 weeks ago
Shlee	eaadf425f2	Merge pull request #7157 from shleeable/fix/dangerzone-oidc-per-user ... Scope DangerZone OIDC sudo bypass to OIDC-registered users	2 weeks ago
Your Name	7483a4b05b	Scope DangerZone OIDC sudo bypass to OIDC-registered users	2 weeks ago
Your Name	917a13d4a7	Filter null-account statuses from non-cached network timeline	2 weeks ago
Shlee	fc80bce460	Update StoryApiV1Controller.php	2 weeks ago
Your Name	0234a305ae	Use intended-redirect session for authorize_interaction guest login	2 weeks ago
Shlee	46fb9613e3	Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle ... Rate limit and audit-log 2FA checkpoint verification	2 weeks ago
Your Name	8cebb24c04	Rate limit and audit-log 2FA checkpoint verification	2 weeks ago
Shlee	0ebe1f8fb1	Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store ... Check media blocklist before storing uploads to prevent orphaned files	2 weeks ago
Your Name	ec6827bae2	Check media blocklist before storing uploads to prevent orphaned files	2 weeks ago
Shlee	cecdad5b53	Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike ... Use ILIKE for case-insensitive search on PostgreSQL	2 weeks ago
Your Name	613cf413de	Use ILIKE for case-insensitive search on PostgreSQL	2 weeks ago
Shlee	173abef5c5	Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch ... Only dispatch SharePipeline for newly-created reblogs	2 weeks ago
Your Name	d190ba7b66	Only dispatch SharePipeline for newly-created reblogs	2 weeks ago
Shlee	a5cbea834f	Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri ... Detect OOB oauth client when redirect_uri omitted on authorize	2 weeks ago
Shlee	ae31ed8e66	Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache ... Invalidate latest-story cache on remote story expiry and null-guard l…	2 weeks ago
Your Name	53ad34b321	Ignore own row when validating email update uniqueness	2 weeks ago
Your Name	462b4bc0da	Detect OOB oauth client when redirect_uri omitted on authorize	2 weeks ago
Your Name	9850aac676	Invalidate latest-story cache on remote story expiry and null-guard latest()	2 weeks ago
Shlee	9c5be0e271	Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl ... Fix custom filter rate-limit counter never expiring	2 weeks ago
Your Name	63e3c95fae	Fix custom filter rate-limit counter never expiring	2 weeks ago
Your Name	afcb68c183	Fix registration form redirecting when max_users is falsy	2 weeks ago
Shlee	daf83fd564	Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch ... Enforce pat_enabled kill-switch on personal access token renew	2 weeks ago
Your Name	d2b11a71b3	Enforce pat_enabled kill-switch on personal access token renew	2 weeks ago
Shlee	13a441af93	Merge pull request #7131 from shleeable/fix/login-activity-groupby ... Fix login activity groupBy returning stale rows and 500 on strict DBs	2 weeks ago
Your Name	3cb5b6e1ff	Fix login activity groupBy returning stale rows and 500 on strict DBs	2 weeks ago