b80629abed
Merge upstream
2025-05-16 08:00:55 +09:00
あわわわとーにゅ
8cd2e3273c
fix(webp): GIFがループしない問題を修正2 (MisskeyIO#1004)
...
* Revert "fix(webp): GIFがループしない問題を修正 (MisskeyIO#988)"
This reverts commit 44f2f12dce
2025-05-14 05:45:49 +09:00
あわわわとーにゅ
daa940b131
chore(dev): 開発環境でPostgreSQL 17が使われるように (MisskeyIO#1002)
2025-05-14 03:45:43 +09:00
dependabot[bot]
ebd8930aa6
update deps (MisskeyIO#997)
...
Co-authored-by: あわわわとーにゅ <17376330+u1-liquid@users.noreply.github.com>
2025-05-14 02:52:03 +09:00
dependabot[bot]
20e65cea51
chore(deps): bump @aws-sdk/client-s3 from 3.806.0 to 3.808.0 (MisskeyIO#996)
...
Bumps [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3 ) from 3.806.0 to 3.808.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.808.0/clients/client-s3 )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
dependency-version: 3.808.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-14 02:15:07 +09:00
あわわわとーにゅ
84a0568f88
update deps (MisskeyIO#993)
2025-05-13 06:34:39 +09:00
あわわわとーにゅ
44f2f12dce
fix(webp): GIFがループしない問題を修正 (MisskeyIO#988)
2025-05-12 22:01:50 +09:00
あわわわとーにゅ
9b79304ae7
update deps (MisskeyIO#983)
2025-05-01 22:24:17 +09:00
あわわわとーにゅ
695bbf02ca
Merge commit from fork
...
(cherry picked from commit d10fdfe9738b17a9d81037c031b40a2cc4cb8038)
* SP-2025-03.1 always wrap icon&thumbnail URLs
if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch
* SP-2025-03.2 use object binding for more styles
interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS
* SP-2025-03.3 slightly more robust "self" URL handling
parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"
notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though
---------
Co-authored-by: Julia <julia@insertdomain.name>
Co-authored-by: dakkar <dakkar@thenautilus.net>
2025-05-01 21:29:39 +09:00
あわわわとーにゅ
e0e4ea0c0c
update deps (MisskeyIO#978)
2025-04-22 05:56:50 +09:00
あわわわとーにゅ
c94e5d7e22
feat(SSO): メールアドレスのnormalizeを設定可能にする (MisskeyIO#971)
2025-04-22 00:14:13 +09:00
あわわわとーにゅ
17e14bb87e
spec(test): DragonflyDBのフラグ見直し (MisskeyIO#977)
2025-04-16 09:55:33 +09:00
Laica Lunasys
a89bf002db
feat(signup): 招待制モードを環境変数でも設定できるように (MisskeyIO#976)
...
INFRA-85
2025-04-15 20:56:46 +09:00
Laica Lunasys
bc1fe0e203
feat(frontend): headタグに任意のタグを追加できるようにする (MisskeyIO#973)
...
INFRA-84
2025-04-12 21:01:03 +09:00
Laica Lunasys
d55cc2a240
spec(monitoring): Instanaの導入 (MisskeyIO#970)
2025-04-11 19:40:33 +09:00
3e0bcd2b5b
Merge upstream
2025-04-04 16:00:58 +09:00
あわわわとーにゅ
abc5e05607
fix(SSO/SAML): JWK関数の仕様変更に対応 (MisskeyIO#966)
2025-04-01 06:37:33 +09:00
あわわわとーにゅ
a31cafee58
update deps (MisskeyIO#963)
2025-04-01 05:14:40 +09:00
あわわわとーにゅ
eb5e94dbf8
fix(SSO): JWK関数の仕様変更に対応 (MisskeyIO#959)
...
MisskeyIO#950
2025-04-01 01:53:25 +09:00
f761a454d3
Merge upstream
2025-03-31 16:22:07 +09:00
あわわわとーにゅ
9262571e81
spec(redirect): 絵文字のaliasのリダイレクトを302に変更 (MisskeyIO#955)
2025-03-31 10:42:34 +09:00
あわわわとーにゅ
97f7415c6d
spec(Search/ES): マルチテナント対応 (MisskeyIO#951)
2025-03-31 09:57:23 +09:00
あわわわとーにゅ
60684568e5
update deps (MisskeyIO#950)
2025-03-31 08:05:23 +09:00
あわわわとーにゅ
b85f6e9b75
fix(typescript:S6544): MSKY-85 (MisskeyIO#949)
2025-03-31 04:18:44 +09:00
まっちゃてぃー。
abdaa18666
enhance(sensitive-flag):センシティブフラグの機能の強化 (MisskeyIO#936)
2025-03-18 03:22:08 +09:00
まっちゃてぃー。
7a94724098
fix(backend/DriveService): variationが付いたMIMEを正常にパースできるように (MisskeyIO#942)
2025-03-18 03:21:18 +09:00
bc9acabd6c
Merge upstream
2025-02-13 16:13:52 +09:00
あわわわとーにゅ
16ad48a1eb
spec(backend/fastify): set maxParamLength to 1024 (MisskeyIO#933)
2025-02-02 08:33:59 +09:00
あわわわとーにゅ
155ce4094f
spec(MisskeyIO#922): ' https://'を省略するように (MisskeyIO#931)
2025-02-02 04:32:39 +09:00
あわわわとーにゅ
a55ee2c03c
fix(MisskeyIO#927): tabler-icons-filledのフォントを参照できない問題を修正 (MisskeyIO#929)
2025-02-02 02:15:09 +09:00
あわわわとーにゅ
1d9a54e1ca
perf(frontend/tabler-icons): アイコンの読み込みに異常に時間がかかる問題の緩和 (MisskeyIO#927)
2025-02-02 01:03:42 +09:00
あわわわとーにゅ
0bbe61d139
update deps (MisskeyIO#925)
2025-02-01 23:32:04 +09:00
あわわわとーにゅ
fc19699a49
chore(database/log): DBへのクエリーログをverboseモードでのみ出力するように (MisskeyIO#923)
2025-02-01 23:03:18 +09:00
あわわわとーにゅ
6462968b9d
spec(media-proxy): urlをクエリではなくパラメータで指定するように (MisskeyIO#922)
2025-02-01 22:57:44 +09:00
まっちゃてぃー。
ff85d650bf
feat(account-migration): アカウント移行ログのフィルターを追加 (MisskeyIO#919)
2025-02-01 22:57:18 +09:00
あわわわとーにゅ
020c4f1716
spec(backend/stream): モデレーターにも一般ユーザーと同じく通常の投稿はcdn経由で配信するように (MisskeyIO#920)
2025-01-29 07:30:05 +09:00
あわわわとーにゅ
d18599458c
revert(dev): フロントエンド・バックエンドを分離する開発モードを廃止
...
(cherry picked from commit 35104d87d5174a080143d3604e50bbef974ab04e)
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2025-01-26 06:47:36 +09:00
dependabot[bot]
eda6d6f455
update deps (MisskeyIO#916)
2025-01-26 06:33:07 +09:00
オスカー、
63087a8e48
Merge upstream
2025-01-17 23:07:52 +09:00
あわわわとーにゅ
c4fafbdca7
perf(stream): 必要のない既読処理のメッセージが発生しないように (MisskeyIO#907)
2025-01-17 18:35:08 +09:00
あわわわとーにゅ
8821e3e81b
spec(role/ScheduledNote): ロールで予約投稿の個数・予約の最大日数を制御できるように (MisskeyIO#906)
2025-01-17 17:08:13 +09:00
あわわわとーにゅ
f0f86f1121
spec(backend/queue/ScheduledNote): 予約時間が過ぎる前にチェックするように (MisskeyIO#905)
2025-01-17 16:50:01 +09:00
あわわわとーにゅ
71c2921b9d
fix(backend/SigninApiService): ログインのレートリミット時、意図したものと違うエラーメッセージが表示される可能性がある問題を修正 (MisskeyIO#903)
2025-01-17 16:49:16 +09:00
あわわわとーにゅ
bcb85f2237
fix(backend/object-storage): disable data integrity protections (MisskeyIO#895)
...
Cloudflare R2 does not support 'x-amz-checksum-*'
2025-01-17 04:50:58 +09:00
あわわわとーにゅ
cbe80fdd26
feat(note): 予約投稿 (MisskeyIO#890)
2025-01-16 22:35:27 +09:00
あわわわとーにゅ
509f385402
update deps (MisskeyIO#891)
2025-01-16 19:46:20 +09:00
あわわわとーにゅ
68c3eb5b5d
update deps (MisskeyIO#889)
...
- メンテナンスされないredis-lockを自前実装に変更
- 既にロックされている場合のリトライ間隔を調整
2025-01-15 03:24:33 +09:00
あわわわとーにゅ
9792ea0223
update deps (MisskeyIO#887)
...
(cherry picked from commit f7da2bad6f0b25652ded11e6a9f86efc40872200)
(cherry picked from commit d60c307c4e4c3eaba2a40b46ba41c4d684d5d370)
Co-authored-by: おさむのひと <46447427+samunohito@users.noreply.github.com>
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
2025-01-14 02:19:05 +09:00
オスカー、
67f9e3efd1
Merge upstream
2025-01-12 21:58:27 +09:00
あわわわとーにゅ
8a0b98aa26
Sync charts one-at-a-time to reduce database contention and timeouts (MisskeyIO#880)
...
(cherry picked from https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/830 )
Co-authored-by: Hazelnoot <acomputerdog@gmail.com>
2025-01-10 15:16:28 +09:00
