]> cat aescling's git repositories - mastodon.git/log
mastodon.git
4 years agoFix requiring an extra restart after recent post-deployment migrations (#17422)
Claire [Tue, 1 Feb 2022 19:57:39 +0000 (20:57 +0100)]
Fix requiring an extra restart after recent post-deployment migrations (#17422)

Follow-up to #16409

4 years agoFixed prototype pollution bug and only allow trusted origin (#17420)
Rohan Sharma [Tue, 1 Feb 2022 16:34:48 +0000 (22:04 +0530)]
Fixed prototype pollution bug and only allow trusted origin (#17420)

4 years agoBump version to 3.4.5 (#17402)
Claire [Mon, 31 Jan 2022 20:27:40 +0000 (21:27 +0100)]
Bump version to 3.4.5 (#17402)

4 years agoBump NODE_VER to 16.13.2, to solve security issues (#17399)
Daniel Jakots [Sun, 30 Jan 2022 23:32:03 +0000 (18:32 -0500)]
Bump NODE_VER to 16.13.2, to solve security issues (#17399)

Fixes CVE-2021-44532, CVE-2021-44533, and CVE-2022-21824.
See: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/

4 years agoAdd more advanced migration tests (#17393)
Claire [Sun, 30 Jan 2022 22:50:08 +0000 (23:50 +0100)]
Add more advanced migration tests (#17393)

- populate the database with some data when testing migrations
- try both one-step and two-step migrations (`SKIP_POST_DEPLOYMENT_MIGRATIONS`)

4 years agoChange index corruption warning to be a little less scary (#17395)
Claire [Sun, 30 Jan 2022 22:49:52 +0000 (23:49 +0100)]
Change index corruption warning to be a little less scary (#17395)

4 years agoFix edge case in migration helpers that caused crash because of PostgreSQL quirks...
Claire [Sun, 30 Jan 2022 21:34:54 +0000 (22:34 +0100)]
Fix edge case in migration helpers that caused crash because of PostgreSQL quirks (#17398)

4 years agoFix some old migration scripts (#17394)
Claire [Sun, 30 Jan 2022 20:38:54 +0000 (21:38 +0100)]
Fix some old migration scripts (#17394)

* Fix some old migration scripts

* Fix edge case in two-step migration from older releases

4 years agoChange public profile pages to be disabled for unconfirmed users (#17385)
Claire [Fri, 28 Jan 2022 13:24:37 +0000 (14:24 +0100)]
Change public profile pages to be disabled for unconfirmed users (#17385)

Fixes #17382

Note that unconfirmed and unapproved accounts can still be searched for
and their (empty) account retrieved using the REST API.

4 years agoRefactor and improve tests (#17386)
Claire [Thu, 27 Jan 2022 23:46:42 +0000 (00:46 +0100)]
Refactor and improve tests (#17386)

* Change account and user fabricators to simplify and improve tests

- `Fabricate(:account)` implicitly fabricates an associated `user` if
  no `domain` attribute is given (an account with `domain: nil` is
  considered a local account, but no user record was created), unless
  `user: nil` is passed
- `Fabricate(:account, user: Fabricate(:user))` should still be possible
  but is discouraged.

* Fix and refactor tests

- avoid passing unneeded attributes to `Fabricate(:user)` or
  `Fabricate(:account)`
- avoid embedding `Fabricate(:user)` into a `Fabricate(:account)` or the other
  way around
- prefer `Fabricate(:user, account_attributes: …)` to
  `Fabricate(:user, account: Fabricate(:account, …)`
- also, some tests were using remote accounts with local user records, which is
  not representative of production code.

4 years agoFix Sidekiq warnings about JSON serialization (#17381)
Claire [Thu, 27 Jan 2022 23:43:56 +0000 (00:43 +0100)]
Fix Sidekiq warnings about JSON serialization (#17381)

* Fix Sidekiq warnings about JSON serialization

This occurs on every symbol argument we pass, and every symbol key in hashes,
because Sidekiq expects strings instead.

See https://github.com/mperham/sidekiq/pull/5071

We do not need to change how workers parse their arguments because this has
not changed and we were already converting to symbols adequately or using
`with_indifferent_access`.

* Set Sidekiq to raise on unsafe arguments in test mode

In order to more easily catch issues that would produce warnings in production
code.

4 years agoFix some old database migrations (#17379)
Claire [Thu, 27 Jan 2022 17:13:41 +0000 (18:13 +0100)]
Fix some old database migrations (#17379)

4 years agoBump pg from 1.2.3 to 1.3.0 (#17349)
dependabot[bot] [Thu, 27 Jan 2022 11:26:40 +0000 (20:26 +0900)]
Bump pg from 1.2.3 to 1.3.0 (#17349)

Bumps [pg](https://github.com/ged/ruby-pg) from 1.2.3 to 1.3.0.
- [Release notes](https://github.com/ged/ruby-pg/releases)
- [Changelog](https://github.com/ged/ruby-pg/blob/master/History.rdoc)
- [Commits](https://github.com/ged/ruby-pg/compare/v1.2.3...v1.3.0)

---
updated-dependencies:
- dependency-name: pg
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump axios from 0.24.0 to 0.25.0 (#17354)
dependabot[bot] [Thu, 27 Jan 2022 11:26:18 +0000 (20:26 +0900)]
Bump axios from 0.24.0 to 0.25.0 (#17354)

Bumps [axios](https://github.com/axios/axios) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/master/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rdf-normalize from 0.4.0 to 0.5.0 (#17226)
dependabot[bot] [Thu, 27 Jan 2022 11:25:18 +0000 (20:25 +0900)]
Bump rdf-normalize from 0.4.0 to 0.5.0 (#17226)

Bumps [rdf-normalize](https://github.com/ruby-rdf/rdf-normalize) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/ruby-rdf/rdf-normalize/releases)
- [Commits](https://github.com/ruby-rdf/rdf-normalize/compare/0.4.0...0.5.0)

---
updated-dependencies:
- dependency-name: rdf-normalize
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoFix local distribution of edited statuses (#17380)
Claire [Wed, 26 Jan 2022 19:53:50 +0000 (20:53 +0100)]
Fix local distribution of edited statuses (#17380)

Because `FanOutOnWriteService#update?` was broken, edits were considered as new
toots and a regular `update` payload was sent.

4 years agoAdd healthcheck for sidekiq (#17365)
Su Yang [Wed, 26 Jan 2022 17:08:49 +0000 (01:08 +0800)]
Add healthcheck for sidekiq (#17365)

4 years agoFix poll updates being saved as status edits (#17373)
Eugen Rochko [Wed, 26 Jan 2022 17:05:39 +0000 (18:05 +0100)]
Fix poll updates being saved as status edits (#17373)

Fix #17344

4 years agoBump sass from 1.48.0 to 1.49.0 (#17352)
dependabot[bot] [Tue, 25 Jan 2022 12:25:26 +0000 (21:25 +0900)]
Bump sass from 1.48.0 to 1.49.0 (#17352)

Bumps [sass](https://github.com/sass/dart-sass) from 1.48.0 to 1.49.0.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.48.0...1.49.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump json-ld-preloaded from 3.1.6 to 3.2.0 (#17353)
dependabot[bot] [Tue, 25 Jan 2022 12:23:42 +0000 (21:23 +0900)]
Bump json-ld-preloaded from 3.1.6 to 3.2.0 (#17353)

Bumps [json-ld-preloaded](https://github.com/ruby-rdf/json-ld-preloaded) from 3.1.6 to 3.2.0.
- [Release notes](https://github.com/ruby-rdf/json-ld-preloaded/releases)
- [Commits](https://github.com/ruby-rdf/json-ld-preloaded/compare/3.1.6...3.2.0)

---
updated-dependencies:
- dependency-name: json-ld-preloaded
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump fabrication from 2.23.1 to 2.24.0 (#17356)
dependabot[bot] [Tue, 25 Jan 2022 12:22:51 +0000 (21:22 +0900)]
Bump fabrication from 2.23.1 to 2.24.0 (#17356)

Bumps [fabrication](https://github.com/paulelliott/fabrication) from 2.23.1 to 2.24.0.
- [Release notes](https://github.com/paulelliott/fabrication/releases)
- [Changelog](https://github.com/paulelliott/fabrication/blob/master/Changelog.markdown)
- [Commits](https://github.com/paulelliott/fabrication/commits)

---
updated-dependencies:
- dependency-name: fabrication
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump sidekiq from 6.3.1 to 6.4.0 (#17350)
dependabot[bot] [Tue, 25 Jan 2022 12:22:10 +0000 (21:22 +0900)]
Bump sidekiq from 6.3.1 to 6.4.0 (#17350)

Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.3.1 to 6.4.0.
- [Release notes](https://github.com/mperham/sidekiq/releases)
- [Changelog](https://github.com/mperham/sidekiq/blob/main/Changes.md)
- [Commits](https://github.com/mperham/sidekiq/compare/v6.3.1...v6.4.0)

---
updated-dependencies:
- dependency-name: sidekiq
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/plugin-transform-runtime from 7.16.8 to 7.16.10 (#17361)
dependabot[bot] [Tue, 25 Jan 2022 11:52:40 +0000 (20:52 +0900)]
Bump @babel/plugin-transform-runtime from 7.16.8 to 7.16.10 (#17361)

Bumps [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) from 7.16.8 to 7.16.10.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.10/packages/babel-plugin-transform-runtime)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-runtime"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump cld3 from 3.4.3 to 3.4.4 (#17357)
dependabot[bot] [Tue, 25 Jan 2022 11:48:05 +0000 (20:48 +0900)]
Bump cld3 from 3.4.3 to 3.4.4 (#17357)

Bumps [cld3](https://github.com/akihikodaki/cld3-ruby) from 3.4.3 to 3.4.4.
- [Release notes](https://github.com/akihikodaki/cld3-ruby/releases)
- [Commits](https://github.com/akihikodaki/cld3-ruby/compare/v3.4.3...v3.4.4)

---
updated-dependencies:
- dependency-name: cld3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump aws-sdk-s3 from 1.111.1 to 1.111.3 (#17368)
dependabot[bot] [Tue, 25 Jan 2022 11:46:52 +0000 (20:46 +0900)]
Bump aws-sdk-s3 from 1.111.1 to 1.111.3 (#17368)

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.111.1 to 1.111.3.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump bootsnap from 1.10.1 to 1.10.2 (#17367)
dependabot[bot] [Tue, 25 Jan 2022 11:45:45 +0000 (20:45 +0900)]
Bump bootsnap from 1.10.1 to 1.10.2 (#17367)

Bumps [bootsnap](https://github.com/Shopify/bootsnap) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/Shopify/bootsnap/releases)
- [Changelog](https://github.com/Shopify/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Shopify/bootsnap/compare/v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump node-fetch from 2.6.1 to 2.6.7 (#17366)
dependabot[bot] [Tue, 25 Jan 2022 11:44:01 +0000 (20:44 +0900)]
Bump node-fetch from 2.6.1 to 2.6.7 (#17366)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump nanoid from 3.1.23 to 3.2.0 (#17342)
dependabot[bot] [Tue, 25 Jan 2022 11:41:22 +0000 (20:41 +0900)]
Bump nanoid from 3.1.23 to 3.2.0 (#17342)

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.23 to 3.2.0.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.1.23...3.2.0)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/preset-env from 7.16.8 to 7.16.11 (#17358)
dependabot[bot] [Tue, 25 Jan 2022 11:39:43 +0000 (20:39 +0900)]
Bump @babel/preset-env from 7.16.8 to 7.16.11 (#17358)

Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.16.8 to 7.16.11.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.11/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rubocop from 1.24.1 to 1.25.0 (#17322)
dependabot[bot] [Tue, 25 Jan 2022 11:39:08 +0000 (20:39 +0900)]
Bump rubocop from 1.24.1 to 1.25.0 (#17322)

Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.24.1 to 1.25.0.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.24.1...v1.25.0)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/core from 7.16.7 to 7.16.12 (#17360)
dependabot[bot] [Tue, 25 Jan 2022 11:34:55 +0000 (20:34 +0900)]
Bump @babel/core from 7.16.7 to 7.16.12 (#17360)

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.16.7 to 7.16.12.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.12/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rails from 6.1.4.1 to 6.1.4.4 (#17159)
dependabot[bot] [Tue, 25 Jan 2022 11:34:37 +0000 (20:34 +0900)]
Bump rails from 6.1.4.1 to 6.1.4.4 (#17159)

* Bump rails from 6.1.4.1 to 6.1.4.4

Bumps [rails](https://github.com/rails/rails) from 6.1.4.1 to 6.1.4.4.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](https://github.com/rails/rails/compare/v6.1.4.1...v6.1.4.4)

---
updated-dependencies:
- dependency-name: rails
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
* Revert marcel to 1.0.1

Avoid some regression that need to be investigated

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
4 years agodisable legacy XSS filtering (#17289)
Wonderfall [Mon, 24 Jan 2022 12:14:26 +0000 (13:14 +0100)]
disable legacy XSS filtering (#17289)

Browsers are phasing out X-XSS-Protection, but Safari and IE still support it.

4 years agoFix link_to_login argument handling when a block is passed (#17345)
Claire [Mon, 24 Jan 2022 02:29:03 +0000 (03:29 +0100)]
Fix link_to_login argument handling when a block is passed (#17345)

4 years agoFix error-prone SQL queries (#15828)
Claire [Sun, 23 Jan 2022 17:10:10 +0000 (18:10 +0100)]
Fix error-prone SQL queries (#15828)

* Fix error-prone SQL queries in Account search

While this code seems to not present an actual vulnerability, one could
easily be introduced by mistake due to how the query is built.

This PR parameterises the `to_tsquery` input to make the query more robust.

* Harden code for Status#tagged_with_all and Status#tagged_with_none

Those two scopes aren't used in a way that could be vulnerable to an SQL
injection, but keeping them unchanged might be a hazard.

* Remove unneeded spaces surrounding tsquery term

* Please CodeClimate

* Move advanced_search_for SQL template to its own function

This avoids one level of indentation while making clearer that the SQL template
isn't build from all the dynamic parameters of advanced_search_for.

* Add tests covering tagged_with, tagged_with_all and tagged_with_none

* Rewrite tagged_with_none to avoid multiple joins and make it more robust

* Remove obsolete brakeman warnings

* Revert "Remove unneeded spaces surrounding tsquery term"

The two queries are not strictly equivalent.

This reverts commit 86f16c537e06c6ba4a8b250f25dcce9f049023ff.

4 years agoChange `percent` to `rate` in retention metrics API (#16910)
Claire [Sun, 23 Jan 2022 15:01:25 +0000 (16:01 +0100)]
Change `percent` to `rate` in retention metrics API (#16910)

4 years agoAdd OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288)
Claire [Sun, 23 Jan 2022 14:52:58 +0000 (15:52 +0100)]
Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288)

* Remove support for OAUTH_REDIRECT_AT_SIGN_IN

Fixes #15959

Introduced in #6540, OAUTH_REDIRECT_AT_SIGN_IN allowed skipping the log-in form
to instead redirect to the external OmniAuth login provider.

However, it did not prevent the log-in form on /about introduced by #10232 from
appearing, and completely broke with the introduction of #15228.

As I restoring that previous log-in flow without introducing a security
vulnerability may require extensive care and knowledge of how OmniAuth works,
this commit removes support for OAUTH_REDIRECT_AT_SIGN_IN instead for the time
being.

* Add OMNIAUTH_ONLY environment variable to enforce external log-in only

* Disable user registration when OMNIAUTH_ONLY is set to true

* Replace log-in links When OMNIAUTH_ONLY is set with exactly one OmniAuth provider

4 years agoRemove support for OAUTH_REDIRECT_AT_SIGN_IN (#17287)
Claire [Sun, 23 Jan 2022 14:50:41 +0000 (15:50 +0100)]
Remove support for OAUTH_REDIRECT_AT_SIGN_IN (#17287)

Fixes #15959

Introduced in #6540, OAUTH_REDIRECT_AT_SIGN_IN allowed skipping the log-in form
to instead redirect to the external OmniAuth login provider.

However, it did not prevent the log-in form on /about introduced by #10232 from
appearing, and completely broke with the introduction of #15228.

As I restoring that previous log-in flow without introducing a security
vulnerability may require extensive care and knowledge of how OmniAuth works,
this commit removes support for OAUTH_REDIRECT_AT_SIGN_IN instead for the time
being.

4 years agoRemove leftover database columns from Devise::Models::Rememberable (#17191)
Claire [Sun, 23 Jan 2022 14:46:30 +0000 (15:46 +0100)]
Remove leftover database columns from Devise::Models::Rememberable (#17191)

* Remove leftover database columns from Devise::Models::Rememberable

* Update fix-duplication maintenance script

* Improve errors/warnings in the fix-duplicates maintenance script

4 years agoRemove old duplicate index (#17245)
Claire [Sun, 23 Jan 2022 12:53:58 +0000 (13:53 +0100)]
Remove old duplicate index (#17245)

Some Mastodon versions (v1.1 and v1.2) had a duplicate index in `db/schema.rb`
without any migration script creating it. #2224 (included in v1.3) removed the
duplicate index from the file but did not provide a migration script to remove
it.

This means that any instance that was installed from v1.1 or v1.2's source code
has a duplicate index and a corresponding warning in PgHero. Instances set up
using an earlier or later Mastodon version do not have this issue.

This PR removes the duplicate index if it is present.

4 years agoFix text being incorrectly pre-selected in composer textarea on /share (#17339)
Claire [Thu, 20 Jan 2022 19:56:21 +0000 (20:56 +0100)]
Fix text being incorrectly pre-selected in composer textarea on /share (#17339)

Fixes #17295

4 years agoChange mastodon:webpush:generate_vapid_key task to not require functional env (#17338)
Claire [Thu, 20 Jan 2022 13:51:23 +0000 (14:51 +0100)]
Change mastodon:webpush:generate_vapid_key task to not require functional env (#17338)

Fixes #17297

4 years agoAdd post edited notice in admin and public UIs (#17335)
Claire [Thu, 20 Jan 2022 12:37:31 +0000 (13:37 +0100)]
Add post edited notice in admin and public UIs (#17335)

* Add edited toot flag on public pages

* Add toot edit flag to admin pages

4 years agoFix error when using raw distribution worker (#17334)
Eugen Rochko [Wed, 19 Jan 2022 22:05:59 +0000 (23:05 +0100)]
Fix error when using raw distribution worker (#17334)

Regression from #16697

4 years agoFix error when processing poll updates (#17333)
Eugen Rochko [Wed, 19 Jan 2022 21:50:01 +0000 (22:50 +0100)]
Fix error when processing poll updates (#17333)

Regression from #16697

4 years agoAdd support for editing for published statuses (#16697)
Eugen Rochko [Wed, 19 Jan 2022 21:37:27 +0000 (22:37 +0100)]
Add support for editing for published statuses (#16697)

* Add support for editing for published statuses

* Fix references to stripped-out code

* Various fixes and improvements

* Further fixes and improvements

* Fix updates being potentially sent to unauthorized recipients

* Various fixes and improvements

* Fix wrong words in test

* Fix notifying accounts that were tagged but were not in the audience

* Fix mistake

4 years agoFix NameError on ActivityPub::FetchFeaturedCollectionService (#17326)
Jeong Arm [Wed, 19 Jan 2022 03:08:46 +0000 (12:08 +0900)]
Fix NameError on ActivityPub::FetchFeaturedCollectionService (#17326)

Related: #16954

4 years agoBump json-ld from 3.1.10 to 3.2.0 (#17224)
dependabot[bot] [Wed, 19 Jan 2022 02:12:01 +0000 (11:12 +0900)]
Bump json-ld from 3.1.10 to 3.2.0 (#17224)

Bumps [json-ld](https://github.com/ruby-rdf/json-ld) from 3.1.10 to 3.2.0.
- [Release notes](https://github.com/ruby-rdf/json-ld/releases)
- [Commits](https://github.com/ruby-rdf/json-ld/compare/3.1.10...3.2.0)

---
updated-dependencies:
- dependency-name: json-ld
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump thor from 1.1.0 to 1.2.1 (#17250)
dependabot[bot] [Wed, 19 Jan 2022 02:07:37 +0000 (11:07 +0900)]
Bump thor from 1.1.0 to 1.2.1 (#17250)

Bumps [thor](https://github.com/rails/thor) from 1.1.0 to 1.2.1.
- [Release notes](https://github.com/rails/thor/releases)
- [Commits](https://github.com/rails/thor/compare/v1.1.0...v1.2.1)

---
updated-dependencies:
- dependency-name: thor
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump nokogiri from 1.12.5 to 1.13.1 (#17306)
dependabot[bot] [Wed, 19 Jan 2022 02:06:17 +0000 (11:06 +0900)]
Bump nokogiri from 1.12.5 to 1.13.1 (#17306)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.12.5 to 1.13.1.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.12.5...v1.13.1)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump aws-sdk-s3 from 1.109.0 to 1.111.1 (#17277)
dependabot[bot] [Wed, 19 Jan 2022 02:04:34 +0000 (11:04 +0900)]
Bump aws-sdk-s3 from 1.109.0 to 1.111.1 (#17277)

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.109.0 to 1.111.1.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump prop-types from 15.7.2 to 15.8.1 (#17278)
dependabot[bot] [Wed, 19 Jan 2022 02:04:24 +0000 (11:04 +0900)]
Bump prop-types from 15.7.2 to 15.8.1 (#17278)

Bumps [prop-types](https://github.com/facebook/prop-types) from 15.7.2 to 15.8.1.
- [Release notes](https://github.com/facebook/prop-types/releases)
- [Changelog](https://github.com/facebook/prop-types/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/prop-types/compare/v15.7.2...v15.8.1)

---
updated-dependencies:
- dependency-name: prop-types
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump ed25519 from 1.2.4 to 1.3.0 (#17310)
dependabot[bot] [Wed, 19 Jan 2022 02:04:11 +0000 (11:04 +0900)]
Bump ed25519 from 1.2.4 to 1.3.0 (#17310)

Bumps [ed25519](https://github.com/RubyCrypto/ed25519) from 1.2.4 to 1.3.0.
- [Release notes](https://github.com/RubyCrypto/ed25519/releases)
- [Changelog](https://github.com/RubyCrypto/ed25519/blob/main/CHANGES.md)
- [Commits](https://github.com/RubyCrypto/ed25519/compare/v1.2.4...v1.3.0)

---
updated-dependencies:
- dependency-name: ed25519
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump bootsnap from 1.9.3 to 1.10.1 (#17311)
dependabot[bot] [Wed, 19 Jan 2022 02:03:28 +0000 (11:03 +0900)]
Bump bootsnap from 1.9.3 to 1.10.1 (#17311)

Bumps [bootsnap](https://github.com/Shopify/bootsnap) from 1.9.3 to 1.10.1.
- [Release notes](https://github.com/Shopify/bootsnap/releases)
- [Changelog](https://github.com/Shopify/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Shopify/bootsnap/compare/v1.9.3...v1.10.1)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump sass from 1.45.2 to 1.48.0 (#17315)
dependabot[bot] [Wed, 19 Jan 2022 02:01:18 +0000 (11:01 +0900)]
Bump sass from 1.45.2 to 1.48.0 (#17315)

Bumps [sass](https://github.com/sass/dart-sass) from 1.45.2 to 1.48.0.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.45.2...1.48.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump babel-jest from 27.4.5 to 27.4.6 (#17280)
dependabot[bot] [Wed, 19 Jan 2022 01:53:39 +0000 (10:53 +0900)]
Bump babel-jest from 27.4.5 to 27.4.6 (#17280)

Bumps [babel-jest](https://github.com/facebook/jest/tree/HEAD/packages/babel-jest) from 27.4.5 to 27.4.6.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v27.4.6/packages/babel-jest)

---
updated-dependencies:
- dependency-name: babel-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/plugin-transform-runtime from 7.16.7 to 7.16.8 (#17314)
dependabot[bot] [Wed, 19 Jan 2022 01:53:26 +0000 (10:53 +0900)]
Bump @babel/plugin-transform-runtime from 7.16.7 to 7.16.8 (#17314)

Bumps [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) from 7.16.7 to 7.16.8.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.8/packages/babel-plugin-transform-runtime)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-runtime"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump ws from 8.3.0 to 8.4.2 (#17318)
dependabot[bot] [Wed, 19 Jan 2022 01:53:12 +0000 (10:53 +0900)]
Bump ws from 8.3.0 to 8.4.2 (#17318)

Bumps [ws](https://github.com/websockets/ws) from 8.3.0 to 8.4.2.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.3.0...8.4.2)

---
updated-dependencies:
- dependency-name: ws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rubocop-rails from 2.13.0 to 2.13.2 (#17321)
dependabot[bot] [Wed, 19 Jan 2022 01:53:03 +0000 (10:53 +0900)]
Bump rubocop-rails from 2.13.0 to 2.13.2 (#17321)

Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.13.0 to 2.13.2.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.13.0...v2.13.2)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump redis from 4.0.1 to 4.0.2 (#17309)
dependabot[bot] [Tue, 18 Jan 2022 13:39:12 +0000 (22:39 +0900)]
Bump redis from 4.0.1 to 4.0.2 (#17309)

Bumps [redis](https://github.com/redis/node-redis) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@4.0.1...redis@4.0.2)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump bullet from 7.0.0 to 7.0.1 (#17312)
dependabot[bot] [Tue, 18 Jan 2022 13:38:54 +0000 (22:38 +0900)]
Bump bullet from 7.0.0 to 7.0.1 (#17312)

Bumps [bullet](https://github.com/flyerhzm/bullet) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/flyerhzm/bullet/releases)
- [Changelog](https://github.com/flyerhzm/bullet/blob/master/CHANGELOG.md)
- [Commits](https://github.com/flyerhzm/bullet/compare/7.0.0...7.0.1)

---
updated-dependencies:
- dependency-name: bullet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump react-select from 5.2.1 to 5.2.2 (#17313)
dependabot[bot] [Tue, 18 Jan 2022 13:38:45 +0000 (22:38 +0900)]
Bump react-select from 5.2.1 to 5.2.2 (#17313)

Bumps [react-select](https://github.com/JedWatson/react-select) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/JedWatson/react-select/releases)
- [Changelog](https://github.com/JedWatson/react-select/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/JedWatson/react-select/compare/react-select@5.2.1...react-select@5.2.2)

---
updated-dependencies:
- dependency-name: react-select
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/preset-env from 7.16.7 to 7.16.8 (#17317)
dependabot[bot] [Tue, 18 Jan 2022 13:38:12 +0000 (22:38 +0900)]
Bump @babel/preset-env from 7.16.7 to 7.16.8 (#17317)

Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.16.7 to 7.16.8.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.8/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump pkg-config from 1.4.6 to 1.4.7 (#17307)
dependabot[bot] [Tue, 18 Jan 2022 13:36:39 +0000 (22:36 +0900)]
Bump pkg-config from 1.4.6 to 1.4.7 (#17307)

Bumps [pkg-config](https://github.com/ruby-gnome/pkg-config) from 1.4.6 to 1.4.7.
- [Release notes](https://github.com/ruby-gnome/pkg-config/releases)
- [Changelog](https://github.com/ruby-gnome/pkg-config/blob/master/NEWS)
- [Commits](https://github.com/ruby-gnome/pkg-config/compare/1.4.6...1.4.7)

---
updated-dependencies:
- dependency-name: pkg-config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump active_model_serializers from 0.10.12 to 0.10.13 (#17305)
dependabot[bot] [Tue, 18 Jan 2022 13:36:22 +0000 (22:36 +0900)]
Bump active_model_serializers from 0.10.12 to 0.10.13 (#17305)

Bumps [active_model_serializers](https://github.com/rails-api/active_model_serializers) from 0.10.12 to 0.10.13.
- [Release notes](https://github.com/rails-api/active_model_serializers/releases)
- [Changelog](https://github.com/rails-api/active_model_serializers/blob/v0.10.13/CHANGELOG.md)
- [Commits](https://github.com/rails-api/active_model_serializers/compare/v0.10.12...v0.10.13)

---
updated-dependencies:
- dependency-name: active_model_serializers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump follow-redirects from 1.14.4 to 1.14.7 (#17285)
dependabot[bot] [Tue, 18 Jan 2022 13:36:11 +0000 (22:36 +0900)]
Bump follow-redirects from 1.14.4 to 1.14.7 (#17285)

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.4 to 1.14.7.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.4...v1.14.7)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump jest from 27.4.5 to 27.4.7 (#17279)
dependabot[bot] [Tue, 18 Jan 2022 13:35:31 +0000 (22:35 +0900)]
Bump jest from 27.4.5 to 27.4.7 (#17279)

Bumps [jest](https://github.com/facebook/jest) from 27.4.5 to 27.4.7.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/compare/v27.4.5...v27.4.7)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rspec_junit_formatter from 0.5.0 to 0.5.1 (#17275)
dependabot[bot] [Tue, 18 Jan 2022 13:35:15 +0000 (22:35 +0900)]
Bump rspec_junit_formatter from 0.5.0 to 0.5.1 (#17275)

Bumps [rspec_junit_formatter](https://github.com/sj26/rspec_junit_formatter) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/sj26/rspec_junit_formatter/releases)
- [Changelog](https://github.com/sj26/rspec_junit_formatter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sj26/rspec_junit_formatter/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: rspec_junit_formatter
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rubocop-rails from 2.13.0 to 2.13.1 (#17274)
dependabot[bot] [Tue, 18 Jan 2022 13:35:02 +0000 (22:35 +0900)]
Bump rubocop-rails from 2.13.0 to 2.13.1 (#17274)

Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.13.0...v2.13.1)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump scenic from 1.5.4 to 1.5.5 (#17193)
dependabot[bot] [Tue, 18 Jan 2022 13:34:45 +0000 (22:34 +0900)]
Bump scenic from 1.5.4 to 1.5.5 (#17193)

Bumps [scenic](https://github.com/scenic-views/scenic) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/scenic-views/scenic/releases)
- [Changelog](https://github.com/scenic-views/scenic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scenic-views/scenic/compare/v1.5.4...v1.5.5)

---
updated-dependencies:
- dependency-name: scenic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoFix `pinned` attribute not being set for private self-posts (#17304)
Claire [Mon, 17 Jan 2022 10:59:46 +0000 (11:59 +0100)]
Fix `pinned` attribute not being set for private self-posts (#17304)

4 years agoAdd notifications for statuses deleted by moderators (#17204)
Eugen Rochko [Mon, 17 Jan 2022 08:41:33 +0000 (09:41 +0100)]
Add notifications for statuses deleted by moderators (#17204)

4 years agoAdd support for private pinned posts (#16954)
Claire [Sun, 16 Jan 2022 23:49:55 +0000 (00:49 +0100)]
Add support for private pinned posts (#16954)

* Add support for private pinned toots

* Allow local user to pin private toots

* Change wording to avoid "direct message"

4 years agoFix admin interface crash when displaying deleted user (#17301)
Claire [Sun, 16 Jan 2022 19:57:37 +0000 (20:57 +0100)]
Fix admin interface crash when displaying deleted user (#17301)

4 years agoAdd line about using vagrant-hostsupdater in the Vagrant short guide (#17243)
Claire [Sun, 16 Jan 2022 15:55:41 +0000 (16:55 +0100)]
Add line about using vagrant-hostsupdater in the Vagrant short guide (#17243)

This is documented in the Vagrantfile, but not in the README. As far as I know,
following the short guide without installing this plugin will not make the
container accessible at mastodon.local, thus breaking the last step of the
guide.

4 years agoRemove IP tracking columns from users table (#16409)
Eugen Rochko [Sun, 16 Jan 2022 12:23:50 +0000 (13:23 +0100)]
Remove IP tracking columns from users table (#16409)

4 years agoFix SMTP_ENABLE_STARTTLS_AUTO/SMTP_TLS/SMTP_SSL environment variables don't work...
tkr [Thu, 13 Jan 2022 11:05:22 +0000 (20:05 +0900)]
Fix SMTP_ENABLE_STARTTLS_AUTO/SMTP_TLS/SMTP_SSL environment variables don't work (#17216)

#17215

4 years agoFix media API limit (#17272)
Jeong Arm [Mon, 10 Jan 2022 13:25:24 +0000 (22:25 +0900)]
Fix media API limit (#17272)

4 years agoGradually increase retry waiting for media processing (#17271)
Jeong Arm [Mon, 10 Jan 2022 13:25:08 +0000 (22:25 +0900)]
Gradually increase retry waiting for media processing (#17271)

4 years agohelm: upgrade elasticsearch to 7.x (#17262)
Alexandra Catalina [Sun, 9 Jan 2022 02:21:19 +0000 (18:21 -0800)]
helm: upgrade elasticsearch to 7.x (#17262)

4 years agoFix timeline streaming stopping for multiple sessions instead of one (#17259)
Claire [Fri, 7 Jan 2022 18:50:12 +0000 (19:50 +0100)]
Fix timeline streaming stopping for multiple sessions instead of one (#17259)

* Fix timeline streaming stopping for multiple sessions instead of one

Fixes #17256.

In updating the code for a newer version of node-redis, #17183 also broke
redis subscription management when multiple streaming clients subscribe to the
same channel.

This commit restores the redis subscription management code.

* Let node-redis actually handle the subscriptions

4 years agoBump rspec_junit_formatter from 0.4.1 to 0.5.0 (#17249)
dependabot[bot] [Thu, 6 Jan 2022 01:35:42 +0000 (10:35 +0900)]
Bump rspec_junit_formatter from 0.4.1 to 0.5.0 (#17249)

Bumps [rspec_junit_formatter](https://github.com/sj26/rspec_junit_formatter) from 0.4.1 to 0.5.0.
- [Release notes](https://github.com/sj26/rspec_junit_formatter/releases)
- [Changelog](https://github.com/sj26/rspec_junit_formatter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sj26/rspec_junit_formatter/compare/v0.4.1...v0.5.0)

---
updated-dependencies:
- dependency-name: rspec_junit_formatter
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/plugin-transform-react-inline-elements from 7.16.5 to 7.16.7 (#17233)
dependabot[bot] [Thu, 6 Jan 2022 01:35:23 +0000 (10:35 +0900)]
Bump @babel/plugin-transform-react-inline-elements from 7.16.5 to 7.16.7 (#17233)

Bumps [@babel/plugin-transform-react-inline-elements](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-inline-elements) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-plugin-transform-react-inline-elements)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-react-inline-elements"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump eslint-plugin-react from 7.27.1 to 7.28.0 (#17200)
dependabot[bot] [Thu, 6 Jan 2022 01:28:18 +0000 (10:28 +0900)]
Bump eslint-plugin-react from 7.27.1 to 7.28.0 (#17200)

Bumps [eslint-plugin-react](https://github.com/yannickcr/eslint-plugin-react) from 7.27.1 to 7.28.0.
- [Release notes](https://github.com/yannickcr/eslint-plugin-react/releases)
- [Changelog](https://github.com/yannickcr/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yannickcr/eslint-plugin-react/compare/v7.27.1...v7.28.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-react
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump oj from 3.13.10 to 3.13.11 (#17251)
dependabot[bot] [Thu, 6 Jan 2022 01:27:30 +0000 (10:27 +0900)]
Bump oj from 3.13.10 to 3.13.11 (#17251)

Bumps [oj](https://github.com/ohler55/oj) from 3.13.10 to 3.13.11.
- [Release notes](https://github.com/ohler55/oj/releases)
- [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/ohler55/oj/compare/v3.13.10...v3.13.11)

---
updated-dependencies:
- dependency-name: oj
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rubocop from 1.23.0 to 1.24.1 (#17228)
dependabot[bot] [Thu, 6 Jan 2022 01:26:53 +0000 (10:26 +0900)]
Bump rubocop from 1.23.0 to 1.24.1 (#17228)

Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.23.0 to 1.24.1.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.23.0...v1.24.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/core from 7.16.5 to 7.16.7 (#17238)
dependabot[bot] [Thu, 6 Jan 2022 01:25:52 +0000 (10:25 +0900)]
Bump @babel/core from 7.16.5 to 7.16.7 (#17238)

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/preset-react from 7.16.5 to 7.16.7 (#17235)
dependabot[bot] [Thu, 6 Jan 2022 01:25:38 +0000 (10:25 +0900)]
Bump @babel/preset-react from 7.16.5 to 7.16.7 (#17235)

Bumps [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-preset-react)

---
updated-dependencies:
- dependency-name: "@babel/preset-react"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/plugin-transform-runtime from 7.16.5 to 7.16.7 (#17239)
dependabot[bot] [Thu, 6 Jan 2022 01:25:22 +0000 (10:25 +0900)]
Bump @babel/plugin-transform-runtime from 7.16.5 to 7.16.7 (#17239)

Bumps [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-plugin-transform-runtime)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-runtime"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump bufferutil from 4.0.5 to 4.0.6 (#17225)
dependabot[bot] [Thu, 6 Jan 2022 01:14:35 +0000 (10:14 +0900)]
Bump bufferutil from 4.0.5 to 4.0.6 (#17225)

Bumps [bufferutil](https://github.com/websockets/bufferutil) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/websockets/bufferutil/releases)
- [Commits](https://github.com/websockets/bufferutil/compare/v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: bufferutil
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump sass from 1.45.1 to 1.45.2 (#17237)
dependabot[bot] [Thu, 6 Jan 2022 01:11:25 +0000 (10:11 +0900)]
Bump sass from 1.45.1 to 1.45.2 (#17237)

Bumps [sass](https://github.com/sass/dart-sass) from 1.45.1 to 1.45.2.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.45.1...1.45.2)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/plugin-proposal-decorators from 7.16.5 to 7.16.7 (#17229)
dependabot[bot] [Thu, 6 Jan 2022 01:10:00 +0000 (10:10 +0900)]
Bump @babel/plugin-proposal-decorators from 7.16.5 to 7.16.7 (#17229)

Bumps [@babel/plugin-proposal-decorators](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-plugin-proposal-decorators)

---
updated-dependencies:
- dependency-name: "@babel/plugin-proposal-decorators"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump i18n-tasks from 0.9.35 to 0.9.37 (#17227)
dependabot[bot] [Thu, 6 Jan 2022 01:01:31 +0000 (10:01 +0900)]
Bump i18n-tasks from 0.9.35 to 0.9.37 (#17227)

Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks) from 0.9.35 to 0.9.37.
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/main/CHANGES.md)
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.35...v0.9.37)

---
updated-dependencies:
- dependency-name: i18n-tasks
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/runtime from 7.16.5 to 7.16.7 (#17236)
dependabot[bot] [Thu, 6 Jan 2022 00:58:12 +0000 (09:58 +0900)]
Bump @babel/runtime from 7.16.5 to 7.16.7 (#17236)

Bumps [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-runtime)

---
updated-dependencies:
- dependency-name: "@babel/runtime"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump eslint-plugin-import from 2.25.3 to 2.25.4 (#17234)
dependabot[bot] [Thu, 6 Jan 2022 00:56:33 +0000 (09:56 +0900)]
Bump eslint-plugin-import from 2.25.3 to 2.25.4 (#17234)

Bumps [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) from 2.25.3 to 2.25.4.
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.25.3...v2.25.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump utf-8-validate from 5.0.7 to 5.0.8 (#17231)
dependabot[bot] [Thu, 6 Jan 2022 00:56:20 +0000 (09:56 +0900)]
Bump utf-8-validate from 5.0.7 to 5.0.8 (#17231)

Bumps [utf-8-validate](https://github.com/websockets/utf-8-validate) from 5.0.7 to 5.0.8.
- [Release notes](https://github.com/websockets/utf-8-validate/releases)
- [Commits](https://github.com/websockets/utf-8-validate/compare/v5.0.7...v5.0.8)

---
updated-dependencies:
- dependency-name: utf-8-validate
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump @babel/preset-env from 7.16.5 to 7.16.7 (#17230)
dependabot[bot] [Thu, 6 Jan 2022 00:55:17 +0000 (09:55 +0900)]
Bump @babel/preset-env from 7.16.5 to 7.16.7 (#17230)

Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.16.5 to 7.16.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump yargs from 17.3.0 to 17.3.1 (#17199)
dependabot[bot] [Thu, 6 Jan 2022 00:54:51 +0000 (09:54 +0900)]
Bump yargs from 17.3.0 to 17.3.1 (#17199)

Bumps [yargs](https://github.com/yargs/yargs) from 17.3.0 to 17.3.1.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs/compare/v17.3.0...v17.3.1)

---
updated-dependencies:
- dependency-name: yargs
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump kaminari from 1.2.1 to 1.2.2 (#17197)
dependabot[bot] [Thu, 6 Jan 2022 00:54:38 +0000 (09:54 +0900)]
Bump kaminari from 1.2.1 to 1.2.2 (#17197)

Bumps [kaminari](https://github.com/kaminari/kaminari) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/kaminari/kaminari/releases)
- [Changelog](https://github.com/kaminari/kaminari/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kaminari/kaminari/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: kaminari
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years agoBump rubocop-rails from 2.12.4 to 2.13.0 (#17195)
dependabot[bot] [Thu, 6 Jan 2022 00:51:46 +0000 (09:51 +0900)]
Bump rubocop-rails from 2.12.4 to 2.13.0 (#17195)

Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.12.4 to 2.13.0.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.12.4...v2.13.0)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>