]>
cat aescling's git repositories - mastodon.git/log
dependabot[bot] [Wed, 24 Oct 2018 14:22:18 +0000 (23:22 +0900)]
Bump capybara from 3.9.0 to 3.10.0 (#9077)
Bumps [capybara](https://github.com/teamcapybara/capybara) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/teamcapybara/capybara/releases)
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md)
- [Commits](https://github.com/teamcapybara/capybara/compare/3.9.0...3.10.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Wed, 24 Oct 2018 05:51:04 +0000 (07:51 +0200)]
Bump rspec-rails from 3.8.0 to 3.8.1 (#9078)
Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 3.8.0 to 3.8.1.
- [Release notes](https://github.com/rspec/rspec-rails/releases)
- [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md)
- [Commits](https://github.com/rspec/rspec-rails/compare/v3.8.0...v3.8.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Wed, 24 Oct 2018 05:50:34 +0000 (07:50 +0200)]
Bump i18n-tasks from 0.9.26 to 0.9.27 (#9079)
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks) from 0.9.26 to 0.9.27.
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/master/CHANGES.md)
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.26...v0.9.27)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Eugen Rochko [Tue, 23 Oct 2018 23:31:31 +0000 (01:31 +0200)]
Fix JS error when posting from page without router context (#9073)
Fix #9057
dependabot[bot] [Tue, 23 Oct 2018 21:11:37 +0000 (23:11 +0200)]
Bump i18n-tasks from 0.9.25 to 0.9.26 (#9071)
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks) from 0.9.25 to 0.9.26.
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/master/CHANGES.md)
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.25...v0.9.26)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Tue, 23 Oct 2018 06:17:26 +0000 (08:17 +0200)]
Bump parallel_tests from 2.23.0 to 2.24.0 (#9064)
Bumps [parallel_tests](https://github.com/grosser/parallel_tests) from 2.23.0 to 2.24.0.
- [Release notes](https://github.com/grosser/parallel_tests/releases)
- [Commits](https://github.com/grosser/parallel_tests/compare/v2.23.0...v2.24.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
ashleyhull-versent [Tue, 23 Oct 2018 03:21:28 +0000 (14:21 +1100)]
Update Dockerfile (#9026)
Eugen Rochko [Mon, 22 Oct 2018 22:43:18 +0000 (00:43 +0200)]
Fix public timelines not instantly updating on compose (#9050)
Fix #9034
Eugen Rochko [Mon, 22 Oct 2018 22:08:39 +0000 (00:08 +0200)]
Show suggested follows on search screen in mobile layout (#9010)
Reminder: Suggestions were added in #7918 and are based on who you
interact with who you do not follow. E.g. if you boost someone a lot
from seeing other people's boosts of that person, it makes sense you
might be interested in following the original source; or if you reply
to someone a lot, maybe you'd want to follow them
Each suggestion can be dismissed
Eugen Rochko [Mon, 22 Oct 2018 22:08:25 +0000 (00:08 +0200)]
Persist volumes by default in docker-compose (#9055)
Too many databases were lost to this
Eugen Rochko [Mon, 22 Oct 2018 21:23:00 +0000 (23:23 +0200)]
Revert "RTL: remove blank character inside bdi (#9038)" (#9056)
This reverts commit
c7e9f9ff1ed1def7f14f6ca4ac2836005eeefa47 .
Eugen Rochko [Mon, 22 Oct 2018 14:58:36 +0000 (16:58 +0200)]
Downgrade fog-openstack to 0.3.7 and fog-core to 2.1.0 (#9049)
Fix #8889
Eugen Rochko [Mon, 22 Oct 2018 14:58:08 +0000 (16:58 +0200)]
Fix cull tripping on nil in last_webfingered_at (#9051)
Fix #8741
Masoud Abkenar [Sun, 21 Oct 2018 23:04:32 +0000 (01:04 +0200)]
RTL: remove blank character inside bdi (#9038)
* RTL: remove blank character inside bdi
* Update app/javascript/mastodon/components/display_name.js
Co-Authored-By: mabkenar <ampbox@gmail.com>
Jeong Arm [Sun, 21 Oct 2018 20:52:27 +0000 (05:52 +0900)]
Fix tootctl cull on dead servers (#9041)
* Delete first 9 accounts on dead servers
* Clean up code by moving dead server culling to the end
ThibG [Sun, 21 Oct 2018 20:52:10 +0000 (22:52 +0200)]
Fix og:url on toots' public view (#9047)
Fixes #9045
Masoud Abkenar [Sun, 21 Oct 2018 16:37:57 +0000 (18:37 +0200)]
RTL: fix cardbar margins and alignment (#9044)
Masoud Abkenar [Sun, 21 Oct 2018 14:45:08 +0000 (16:45 +0200)]
RTL: fix admin account avatar margin in about page (#9039)
* RTL: fix admin account avatar margin in about page
* fix code style
Jeong Arm [Sun, 21 Oct 2018 14:42:22 +0000 (23:42 +0900)]
Handle if username is not found on tootctl feeds build (#9040)
Gomasy [Sun, 21 Oct 2018 14:41:33 +0000 (23:41 +0900)]
Fix crash when using UNIX socket (#9036)
Masoud Abkenar [Sun, 21 Oct 2018 11:31:40 +0000 (13:31 +0200)]
RTL: fix column settings toggle label (#9037)
kedama [Sun, 21 Oct 2018 05:35:25 +0000 (14:35 +0900)]
Fix domain label position and color (#9033)
* Fix position of the domain label
* Fix position of the domain label for RTL
- Fix color mismatch of linear gradient which assigned to "::after" pseudo class
Eugen Rochko [Sat, 20 Oct 2018 22:49:36 +0000 (00:49 +0200)]
Bump version to 2.6.0rc1 (#9025)
* Bump version to 2.6.0rc1
* Update AUTHORS.md
* Update CHANGELOG.md
takayamaki [Sat, 20 Oct 2018 15:28:04 +0000 (00:28 +0900)]
fix: Execute PAM authentication tests on CircleCI (#9029)
and use 'if' option of context block
Eugen Rochko [Sat, 20 Oct 2018 06:02:44 +0000 (08:02 +0200)]
Add option to block reports from domain (#8830)
Eugen Rochko [Sat, 20 Oct 2018 05:32:26 +0000 (07:32 +0200)]
Do not test PAM authentication by default (#9027)
* Do not test PAM authentication by default
* Disable PAM tests if PAM is not enabled
Eugen Rochko [Sat, 20 Oct 2018 00:39:39 +0000 (02:39 +0200)]
Add "disable" button to report screen (#9024)
* Add "disable" button to report screen
* i18n-tasks remove-unused
Eugen Rochko [Sat, 20 Oct 2018 00:25:25 +0000 (02:25 +0200)]
Check if port/socket is available before forking in Streaming API (#9023)
Previously, the server would attempt taking port/socket in worker
process, and if it was taken, fail, which made the master process
create a new worker. This led to really high CPU usage if the
streaming API was started when the port or socket were not
available.
Now, before clustering (forking) into worker processes, a test
server is created and then removed to check if it can be done.
Eugen Rochko [Sat, 20 Oct 2018 00:23:58 +0000 (02:23 +0200)]
Redesign direct messages column (#9022)
Masoud Abkenar [Fri, 19 Oct 2018 23:05:17 +0000 (01:05 +0200)]
RTL: fix preferences layout (#9021)
bsky [Fri, 19 Oct 2018 18:35:42 +0000 (03:35 +0900)]
Fix admin account avatar margin (#9020)
dependabot[bot] [Fri, 19 Oct 2018 16:51:40 +0000 (18:51 +0200)]
Bump strong_migrations from 0.3.0 to 0.3.1 (#9015)
Bumps [strong_migrations](https://github.com/ankane/strong_migrations) from 0.3.0 to 0.3.1.
- [Release notes](https://github.com/ankane/strong_migrations/releases)
- [Changelog](https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ankane/strong_migrations/compare/v0.3.0...v0.3.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Eugen Rochko [Fri, 19 Oct 2018 16:49:35 +0000 (18:49 +0200)]
Improve README (#9012)
* Improve README
* Update README.md
* Update README.md
* Update README.md
* Update README.md
Eugen Rochko [Fri, 19 Oct 2018 14:41:25 +0000 (16:41 +0200)]
Update CONTRIBUTING.md (#9014)
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
dependabot[bot] [Fri, 19 Oct 2018 11:20:07 +0000 (20:20 +0900)]
Bump tzinfo-data from 1.2018.5 to 1.2018.6 (#9016)
Bumps [tzinfo-data](https://github.com/tzinfo/tzinfo-data) from 1.2018.5 to 1.2018.6.
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](https://github.com/tzinfo/tzinfo-data/compare/v1.2018.5...v1.2018.6)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Masoud Abkenar [Fri, 19 Oct 2018 11:16:13 +0000 (13:16 +0200)]
RTL: fix user stats in about page (#9018)
Eugen Rochko [Thu, 18 Oct 2018 23:47:29 +0000 (01:47 +0200)]
Add unread indicator to conversations (#9009)
takayamaki [Thu, 18 Oct 2018 22:00:19 +0000 (07:00 +0900)]
fix: initial state of PrivacyDropdown is should not be null (#9008)
Daigo 3 Dango [Thu, 18 Oct 2018 20:32:47 +0000 (10:32 -1000)]
Use Ruby ==2.5.2== 2.5.3 (#9003)
* Use Ruby 2.5.2
* Specify 2.5.2p104 as RUBY VERSION
Heorku refers to RUBY VERSION in Gemfile.lock
* Use ruby-2.5.3
Masoud Abkenar [Thu, 18 Oct 2018 19:19:31 +0000 (21:19 +0200)]
RTL: fix domain append at signup form (#9007)
ThibG [Thu, 18 Oct 2018 17:52:00 +0000 (19:52 +0200)]
Fix fav/boosts hotkeys not working on detailed statuses (#9006)
Masoud Abkenar [Thu, 18 Oct 2018 12:35:49 +0000 (14:35 +0200)]
RTL: fix admin account margins in about page (#9005)
Eugen Rochko [Wed, 17 Oct 2018 20:04:40 +0000 (22:04 +0200)]
Do not show "limited" visibility in default visibility preference (#8999)
* Do not show "limited" visibility in default visibility preference
Fix regression from #8950
* Fix code style issue
Eugen Rochko [Wed, 17 Oct 2018 15:13:04 +0000 (17:13 +0200)]
Improve support for aspects/circles (#8950)
* Add silent column to mentions
* Save silent mentions in ActivityPub Create handler and optimize it
Move networking calls out of the database transaction
* Add "limited" visibility level masked as "private" in the API
Unlike DMs, limited statuses are pushed into home feeds. The access
control rules between direct and limited statuses is almost the same,
except for counter and conversation logic
* Ensure silent column is non-null, add spec
* Ensure filters don't check silent mentions for blocks/mutes
As those are "this person is also allowed to see" rather than "this
person is involved", therefore does not warrant filtering
* Clean up code
* Use Status#active_mentions to limit returned mentions
* Fix code style issues
* Use Status#active_mentions in Notification
And remove stream_entry eager-loading from Notification
dependabot[bot] [Wed, 17 Oct 2018 14:56:26 +0000 (16:56 +0200)]
Bump oj from 3.6.11 to 3.6.12 (#8996)
Bumps [oj](https://github.com/ohler55/oj) from 3.6.11 to 3.6.12.
- [Release notes](https://github.com/ohler55/oj/releases)
- [Changelog](https://github.com/ohler55/oj/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ohler55/oj/compare/v3.6.11...v3.6.12)
Signed-off-by: dependabot[bot] <support@dependabot.com>
ThibG [Wed, 17 Oct 2018 14:56:16 +0000 (16:56 +0200)]
Handle global hotkeys even when no element has focus (#8998)
This fixes hotkeys not working when pressing the column
“back” button, for instance.
Gomasy [Wed, 17 Oct 2018 14:54:59 +0000 (23:54 +0900)]
Add destroy_custom_emoji translation (#8997)
Includes Japanese and English
Quint Guvernator [Tue, 16 Oct 2018 21:42:55 +0000 (17:42 -0400)]
Fix some bad localization strings (#8994)
* fix finnish locale variable issue
* fix broken welsh localized string
Quint Guvernator [Tue, 16 Oct 2018 17:55:05 +0000 (13:55 -0400)]
always allow DMs from staff (#8993)
Julian [Tue, 16 Oct 2018 12:09:03 +0000 (14:09 +0200)]
one user i18n (#8992)
In german one female user is "Benutzerin" not "Benutzerinnen"
Eugen Rochko [Tue, 16 Oct 2018 12:07:54 +0000 (14:07 +0200)]
Improve form for selecting media display preference (#8965)
Regression from #8569
dependabot[bot] [Tue, 16 Oct 2018 05:50:09 +0000 (07:50 +0200)]
Bump strong_migrations from 0.2.3 to 0.3.0 (#8991)
Bumps [strong_migrations](https://github.com/ankane/strong_migrations) from 0.2.3 to 0.3.0.
- [Release notes](https://github.com/ankane/strong_migrations/releases)
- [Changelog](https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ankane/strong_migrations/compare/v0.2.3...v0.3.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Eugen Rochko [Tue, 16 Oct 2018 01:02:01 +0000 (03:02 +0200)]
Fix feature request issue template
Eugen Rochko [Tue, 16 Oct 2018 01:01:07 +0000 (03:01 +0200)]
Update issue templates (#8989)
* Update issue templates
* Update bug_report.md
* Update feature_request.md
* Update support.md
* Update feature_request.md
Masoud Abkenar [Mon, 15 Oct 2018 14:09:08 +0000 (16:09 +0200)]
Fixes 8987 broken alignment at "Remote interaction dialog" (#8988)
Masoud Abkenar [Mon, 15 Oct 2018 02:39:20 +0000 (04:39 +0200)]
undo part of PR 8202 to fix RTL (#8979)
jooops [Mon, 15 Oct 2018 02:38:41 +0000 (04:38 +0200)]
fix invites in italian language (#8982)
* fix invites in italian language
* fix invites in italian language
mayaeh [Sat, 13 Oct 2018 15:00:15 +0000 (00:00 +0900)]
Fix description about custom mascot. (#8974)
Eugen Rochko [Fri, 12 Oct 2018 23:51:30 +0000 (01:51 +0200)]
Improve style of notice/alert messages (#8973)
Eugen Rochko [Fri, 12 Oct 2018 23:51:14 +0000 (01:51 +0200)]
Weblate translations (2018-10-12) (#8972)
* Translated using Weblate (Welsh)
Currently translated at 64.4% (448 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/cy/
* Translated using Weblate (Arabic)
Currently translated at 98.0% (682 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/ar/
* Translated using Weblate (French)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/fr/
* Translated using Weblate (Arabic)
Currently translated at 94.3% (82 of 87 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/ar/
* Translated using Weblate (Welsh)
Currently translated at 88.7% (297 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/cy/
* Translated using Weblate (French)
Currently translated at 100.0% (335 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/fr/
* Translated using Weblate (French)
Currently translated at 100,0% (87 of 87 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/fr/
* Translated using Weblate (Czech)
Currently translated at 100.0% (335 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/cs/
* Translated using Weblate (Czech)
Currently translated at 100.0% (87 of 87 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/cs/
* Translated using Weblate (Czech)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/cs/
* Translated using Weblate (Persian)
Currently translated at 100.0% (335 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/fa/
* Translated using Weblate (Arabic)
Currently translated at 94.6% (88 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/ar/
* Translated using Weblate (Arabic)
Currently translated at 100.0% (335 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/ar/
* Translated using Weblate (Czech)
Currently translated at 100.0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/cs/
* Translated using Weblate (Galician)
Currently translated at 100,0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/gl/
* Translated using Weblate (Galician)
Currently translated at 100,0% (696 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/gl/
* Translated using Weblate (Greek)
Currently translated at 100.0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/el/
* Translated using Weblate (Greek)
Currently translated at 98.8% (331 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/el/
* Translated using Weblate (Greek)
Currently translated at 99.7% (694 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/el/
* Translated using Weblate (Persian)
Currently translated at 100.0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/fa/
* Translated using Weblate (Czech)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/cs/
* Translated using Weblate (French)
Currently translated at 100,0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/fr/
* Translated using Weblate (French)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/fr/
* Translated using Weblate (Japanese)
Currently translated at 99.4% (692 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/ja/
* Translated using Weblate (Corsican)
Currently translated at 100.0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/co/
* Translated using Weblate (Corsican)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/co/
* Translated using Weblate (German)
Currently translated at 99.6% (693 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/de/
* Translated using Weblate (German)
Currently translated at 100,0% (93 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/de/
* Translated using Weblate (Japanese)
Currently translated at 99.4% (692 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/ja/
* Translated using Weblate (Japanese)
Currently translated at 99.9% (695 of 696 strings)
Translation: Mastodon/Backend
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/backend/ja/
* Translated using Weblate (Japanese)
Currently translated at 100.0% (335 of 335 strings)
Translation: Mastodon/React
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/frontend/ja/
* Translated using Weblate (Japanese)
Currently translated at 94.6% (88 of 93 strings)
Translation: Mastodon/Preferences
Translate-URL: https://weblate.joinmastodon.org/projects/mastodon/simple_form/ja/
* i18n-tasks normalize
* yarn manage:translations
dependabot[bot] [Fri, 12 Oct 2018 20:48:16 +0000 (22:48 +0200)]
Bump pundit from 1.1.0 to 2.0.0 (#8873)
Bumps [pundit](https://github.com/varvet/pundit) from 1.1.0 to 2.0.0.
- [Release notes](https://github.com/varvet/pundit/releases)
- [Changelog](https://github.com/varvet/pundit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/varvet/pundit/compare/v1.1.0...v2.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
ThibG [Fri, 12 Oct 2018 17:07:30 +0000 (19:07 +0200)]
Add manifest_src to CSP, add blob to connect_src (#8967)
Eugen Rochko [Fri, 12 Oct 2018 02:04:08 +0000 (04:04 +0200)]
Display customized mascot in web UI and fix admin form for it (#8964)
Follow-up to #8766
Eugen Rochko [Fri, 12 Oct 2018 00:19:10 +0000 (02:19 +0200)]
Fix missing protocol in dns-prefetch, improve code style (#8963)
Regression from #8942
Eugen Rochko [Fri, 12 Oct 2018 00:04:07 +0000 (02:04 +0200)]
Fix microformats on statuses according to updated spec (#8958)
Eugen Rochko [Thu, 11 Oct 2018 23:43:09 +0000 (01:43 +0200)]
Fix CSP headers blocking media and development environment (#8962)
Regression from #8957
Eugen Rochko [Thu, 11 Oct 2018 23:36:51 +0000 (01:36 +0200)]
Fix type of conversation ID in conversations API (#8961)
Eugen Rochko [Thu, 11 Oct 2018 22:24:09 +0000 (00:24 +0200)]
Bump version to 2.5.2 (#8960)
Eugen Rochko [Thu, 11 Oct 2018 22:15:55 +0000 (00:15 +0200)]
Improve signature verification safeguards (#8959)
* Downcase signed_headers string before building the signed string
The HTTP Signatures draft does not mandate the “headers” field to be downcased,
but mandates the header field names to be downcased in the signed string, which
means that prior to this patch, Mastodon could fail to process signatures from
some compliant clients. It also means that it would not actually check the
Digest of non-compliant clients that wouldn't use a lowercased Digest field
name.
Thankfully, I don't know of any such client.
* Revert "Remove dead code (#8919)"
This reverts commit
a00ce8c92c06f42109aad5cfe65d46862cf037bb .
* Restore time window checking, change it to 12 hours
By checking the Date header, we can prevent replaying old vulnerable
signatures. The focus is to prevent replaying old vulnerable requests
from software that has been fixed in the meantime, so a somewhat long
window should be fine and accounts for timezone misconfiguration.
* Escape users' URLs when formatting them
Fixes possible HTML injection
* Escape all string interpolations in Formatter class
Slightly improve performance by reducing class allocations
from repeated Formatter#encode calls
* Fix code style issues
ThibG [Thu, 11 Oct 2018 18:35:46 +0000 (20:35 +0200)]
Set Content-Security-Policy rules through RoR's config (#8957)
* Set CSP rules in RoR's configuration
* Override CSP setting in the embed controller to allow frames
dependabot[bot] [Thu, 11 Oct 2018 17:26:39 +0000 (19:26 +0200)]
Bump doorkeeper from 5.0.0 to 5.0.1 (#8954)
Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/master/NEWS.md)
- [Commits](https://github.com/doorkeeper-gem/doorkeeper/compare/v5.0.0...v5.0.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Eugen Rochko [Thu, 11 Oct 2018 17:24:43 +0000 (19:24 +0200)]
Add check for missing tag param in streaming API (#8955)
* Add check for missing tag param in streaming API
Fixes error:
```
TypeError: Cannot read property 'toLowerCase' of undefined
at app.get (.../streaming/index.js:493:50)
```
* Fix code style issues
Eugen Rochko [Thu, 11 Oct 2018 00:29:32 +0000 (02:29 +0200)]
Bump version to 2.5.1 (#8953)
Eugen Rochko [Thu, 11 Oct 2018 00:10:15 +0000 (02:10 +0200)]
Fix typo in ActivityPub Create handler (#8952)
Regression from #8951
Eugen Rochko [Wed, 10 Oct 2018 23:31:03 +0000 (01:31 +0200)]
Do not push DMs into the home feed (#8940)
* Do not push DMs into the home feed
* Show DMs column after sending a DM, if DMs column is not already shown
Eugen Rochko [Wed, 10 Oct 2018 22:50:18 +0000 (00:50 +0200)]
Move network calls out of transaction in ActivityPub handler (#8951)
Mention and emoji code may perform network calls, but does not need
to do that inside the database transaction. This may improve availability
of database connections when using pgBouncer in transaction mode.
dependabot[bot] [Wed, 10 Oct 2018 17:36:41 +0000 (19:36 +0200)]
Bump better_errors from 2.4.0 to 2.5.0 (#8946)
Bumps [better_errors](https://github.com/BetterErrors/better_errors) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/BetterErrors/better_errors/releases)
- [Changelog](https://github.com/BetterErrors/better_errors/blob/master/CHANGELOG.md)
- [Commits](https://github.com/BetterErrors/better_errors/compare/v2.4.0...v2.5.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Wed, 10 Oct 2018 13:09:53 +0000 (22:09 +0900)]
Bump bullet from 5.7.5 to 5.7.6 (#8947)
Bumps [bullet](https://github.com/flyerhzm/bullet) from 5.7.5 to 5.7.6.
- [Release notes](https://github.com/flyerhzm/bullet/releases)
- [Changelog](https://github.com/flyerhzm/bullet/blob/master/CHANGELOG.md)
- [Commits](https://github.com/flyerhzm/bullet/compare/5.7.5...5.7.6)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Wed, 10 Oct 2018 13:09:23 +0000 (22:09 +0900)]
Bump scss_lint from 0.57.0 to 0.57.1 (#8948)
Bumps [scss_lint](https://github.com/brigade/scss-lint) from 0.57.0 to 0.57.1.
- [Release notes](https://github.com/brigade/scss-lint/releases)
- [Changelog](https://github.com/brigade/scss-lint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brigade/scss-lint/compare/v0.57.0...v0.57.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Eugen Rochko [Wed, 10 Oct 2018 00:21:30 +0000 (02:21 +0200)]
Add description meta tag additionally to og:description (#8941)
Fix #8685
Eugen Rochko [Tue, 9 Oct 2018 23:31:10 +0000 (01:31 +0200)]
Add dns-prefetch if using different host for assets or uploads (#8942)
dependabot[bot] [Tue, 9 Oct 2018 17:43:26 +0000 (19:43 +0200)]
Bump capistrano-rails from 1.3.1 to 1.4.0 (#8936)
Bumps [capistrano-rails](https://github.com/capistrano/rails) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/capistrano/rails/releases)
- [Changelog](https://github.com/capistrano/rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/capistrano/rails/compare/v1.3.1...v1.4.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Tue, 9 Oct 2018 17:43:05 +0000 (19:43 +0200)]
Bump dotenv-rails from 2.2.2 to 2.5.0 (#8934)
Bumps [dotenv-rails](https://github.com/bkeepers/dotenv) from 2.2.2 to 2.5.0.
- [Release notes](https://github.com/bkeepers/dotenv/releases)
- [Changelog](https://github.com/bkeepers/dotenv/blob/master/Changelog.md)
- [Commits](https://github.com/bkeepers/dotenv/compare/v2.2.2...v2.5.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
mayaeh [Tue, 9 Oct 2018 17:36:13 +0000 (02:36 +0900)]
Fix that the copy button of verify link did not work. (#8938)
Eugen Rochko [Tue, 9 Oct 2018 17:35:14 +0000 (19:35 +0200)]
Track historical space stats in PgHero to determine PostgreSQL growth (#8906)
dependabot[bot] [Tue, 9 Oct 2018 10:59:34 +0000 (19:59 +0900)]
Bump faker from 1.8.7 to 1.9.1 (#8935)
Bumps [faker](https://github.com/stympy/faker) from 1.8.7 to 1.9.1.
- [Release notes](https://github.com/stympy/faker/releases)
- [Changelog](https://github.com/stympy/faker/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stympy/faker/compare/v1.8.7...v1.9.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Tue, 9 Oct 2018 10:39:46 +0000 (19:39 +0900)]
Bump memory_profiler from 0.9.11 to 0.9.12 (#8937)
Bumps [memory_profiler](https://github.com/SamSaffron/memory_profiler) from 0.9.11 to 0.9.12.
- [Release notes](https://github.com/SamSaffron/memory_profiler/releases)
- [Changelog](https://github.com/SamSaffron/memory_profiler/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SamSaffron/memory_profiler/compare/v0.9.11...v0.9.12)
Signed-off-by: dependabot[bot] <support@dependabot.com>
Sascha [Tue, 9 Oct 2018 01:02:52 +0000 (03:02 +0200)]
add ffmpeg initializer (#8855)
* add ffmpeg initializer
* use different expression to check for environment var
mayaeh [Mon, 8 Oct 2018 22:12:37 +0000 (07:12 +0900)]
Add Japanese translations. (#8927)
mayaeh [Mon, 8 Oct 2018 12:43:38 +0000 (21:43 +0900)]
Fixed error occurrence when pinning the DM column. (#8922)
dependabot[bot] [Mon, 8 Oct 2018 05:45:31 +0000 (07:45 +0200)]
Bump capybara from 3.8.2 to 3.9.0 (#8924)
Bumps [capybara](https://github.com/teamcapybara/capybara) from 3.8.2 to 3.9.0.
- [Release notes](https://github.com/teamcapybara/capybara/releases)
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md)
- [Commits](https://github.com/teamcapybara/capybara/compare/3.8.2...3.9.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Mon, 8 Oct 2018 05:45:08 +0000 (07:45 +0200)]
Bump tty-prompt from 0.17.0 to 0.17.1 (#8925)
Bumps [tty-prompt](https://github.com/piotrmurach/tty-prompt) from 0.17.0 to 0.17.1.
- [Release notes](https://github.com/piotrmurach/tty-prompt/releases)
- [Changelog](https://github.com/piotrmurach/tty-prompt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/piotrmurach/tty-prompt/compare/v0.17.0...v0.17.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Mon, 8 Oct 2018 05:44:53 +0000 (07:44 +0200)]
Bump aws-sdk-s3 from 1.20.0 to 1.21.0 (#8926)
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.20.0 to 1.21.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)
Signed-off-by: dependabot[bot] <support@dependabot.com>
dependabot[bot] [Mon, 8 Oct 2018 05:24:07 +0000 (14:24 +0900)]
Bump i18n-tasks from 0.9.21 to 0.9.25 (#8923)
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks) from 0.9.21 to 0.9.25.
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/master/CHANGES.md)
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.21...v0.9.25)
Signed-off-by: dependabot[bot] <support@dependabot.com>
ashleyhull-versent [Mon, 8 Oct 2018 02:50:11 +0000 (13:50 +1100)]
rubocop issues - Cleaning up (#8912)
* cleanup pass
* undo mistakes
* fixed.
* revert
Eugen Rochko [Mon, 8 Oct 2018 02:48:54 +0000 (04:48 +0200)]
Remove dead code (#8919)
SignatureVerification#matches_time_window? is not called anywhere.
ashleyhull-versent [Sun, 7 Oct 2018 22:20:45 +0000 (09:20 +1100)]
Replace SVG asset with Custom mascot (#8766)
Eugen Rochko [Sun, 7 Oct 2018 21:44:58 +0000 (23:44 +0200)]
Add conversations API (#8832)
* Add conversations API
* Add web UI for conversations
* Add test for conversations API
* Add tests for ConversationAccount
* Improve web UI
* Rename ConversationAccount to AccountConversation
* Remove conversations on block and mute
* Change last_status_id to be a denormalization of status_ids
* Add optimistic locking
ThibG [Sun, 7 Oct 2018 17:45:40 +0000 (19:45 +0200)]
Ensure only toots from the reported users are reported (#8916)
Eugen Rochko [Sun, 7 Oct 2018 16:26:26 +0000 (18:26 +0200)]
Add POST /api/v1/notifications/:id/dismiss (#8905)
POST /api/v1/notifications/dismiss was a mistake in #2251