summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * enhance(frontend): ↵かっこかり2025-01-043-2/+18
| | | | | | | | ワードミュート・ハードワードミュートの説明を追加 (#15207)
| * 2025 (#15203)かっこかり2025-01-043-4/+4
| |
| * fix(frontend): ↵かっこかり2024-12-223-3/+3
| | | | | | | | serverContextの値を利用する条件が間違っていたのを修正 (#15166)
| * enhance(frontend): 照会の際にエラーを表示するように (#15147)かっこかり2024-12-197-20/+193
| | | | | | | | | | | | | | | | | | | | | | * enhance: 照会の失敗理由を表示するように * Update Changelog * fix * fix test * lookupErrors-> remoteLookupErrors
| * fix(frontend): serverContextの型エラーを修正 (#15131)かっこかり2024-12-164-13/+15
| | | | | | | | | | * fix(frontend): serverContextの型エラーを修正 * add comment
| * fix(frontend): ↵かっこかり2024-12-163-3/+5
| | | | | | | | | | | | | | | | | | 絵文字管理画面で絵文字が表示されないことがある問題を修正 (#15128) * fix(frontend): 絵文字管理画面で絵文字が表示されないことがある問題を修正 * Update Changelog * optimize
| * enhance(frontend): ↵かっこかり2024-12-163-6/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PC画面でチャンネルが複数列で表示されるように (#15129) * チャンネル一覧の列を最大3列にした (Otaku-Social#13) * fix * fix * fix * :art: * fix * :art: * Update Changelog * Update Changelog * 要らない_marginを消す --------- Co-authored-by: tmorio <morikapusan@morikapu-denki.com>
| * misskey-js: APIClientにURL末尾の/を除去する処理を追加 (#15132)FineArchs2024-12-161-1/+1
| |
| * fix(frontend): ↵かっこかり2024-12-102-0/+7
| | | | | | | | | | | | | | | | | | | | | | ノートがログインしているユーザーしか見れない場合にログインをキャンセルした場合その後の動線がなくなる問題を修正 (#15101) * fix(frontend): ノートがログインしているユーザーしか見れない場合にログインをキャンセルすると一切の処理が停止する問題を修正 * Update Changelog --------- Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
| * fix(frontend): ↵かっこかり2024-12-102-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | 公開範囲がホームのノートの埋め込みウィジェットが読み込まれない問題を修正 (#15102) * Resolve frontend/backend contradiction for home visibility embeds This now uses the same check from `packages/frontend/src/scripts/get-note-menu.ts` * Update Changelog --------- Co-authored-by: CenTdemeern1 <timo.herngreen@gmail.com>
| * fix(frontend): MiAuth認可画面のデザイン修正 (#15106)かっこかり2024-12-101-0/+1
| |
| * Merge branch 'develop' of https://github.com/misskey-dev/misskey into developsyuilo2024-11-308-62/+65
| |\
| | * Bump version to 2024.11.1-alpha.0github-actions[bot]2024-11-253-3/+3
| | |
| | * fix: unable to upload to local object storage (#15040)anatawa122024-11-241-1/+1
| | |
| | * fix(backend): ↵かっこかり2024-11-242-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 起動前の疎通チェックが機能しなくなっていた問題を修正 (#15043) * check harder for connectibility `allSettled` does not throw if a promise is rejected, so `check_connect` never actually failed * Update Changelog --------- Co-authored-by: dakkar <dakkar@thenautilus.net>
| | * fix(frontend): ↵かっこかり2024-11-242-1/+2
| | | | | | | | | | | | | | | | | | | | | サーバードキュメントとMisskey関連リソースとの間にdividerが入らないことがある問題を修正 (#15044) * fix(frontend): サーバードキュメントとMisskey関連リソースとの間にdividerが入らないことがある問題を修正 * Update Changelog
| | * fix(backend/misskey-js): タイポ修正 (#15046)かっこかり2024-11-242-56/+56
| | |
| * | Update about-misskey.vuesyuilo2024-11-301-0/+1
| |/
| * ci: do not run chromatic on fork repositories (#15041)anatawa122024-11-231-0/+2
| |
| * fix(backend): ↵おさむのひと2024-11-232-2/+5
| | | | | | | | | | | | | | アドレス入力で直接ユーザのプロフィールページを表示した際、前提データが足りず描画に失敗する (#15033) * fix(backend): アドレス入力で直接ユーザのプロフィールページを表示した際、前提データが足りず描画に失敗する * fix CHANGELOG.md
| * Update CHANGELOG.md (書き方を揃える)かっこかり2024-11-231-1/+1
| |
| * fix(frontend): ↵かっこかり2024-11-232-11/+13
| | | | | | | | | | | | | | | | | | 画面サイズが変わった際にnavbarが自動で折りたたまれない問題を修正 (#15042) * fix(frontend): 画面サイズが変わった際にnavbarが自動で折りたたまれない問題を修正 * Update Changelog * fix
| * fix(backend): use atomic command to improve securitysyuilo2024-11-231-3/+1
| |
| * Update CHANGELOG.md (typo)かっこかり2024-11-221-1/+1
| |
| * [skip ci] Update CHANGELOG.md (prepend template)github-actions[bot]2024-11-221-0/+12
| |
* | Merge pull request #14924 from misskey-dev/developmisskey-release-bot[bot]2024-11-22269-4851/+7219
|\| | | | | Release: 2024.11.0
| * Release: 2024.11.0github-actions[bot]2024-11-222-2/+2
| |
| * New Crowdin updates (#15027)syuilo2024-11-221-24/+24
| | | | | | | | | | * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Chinese Simplified)
| * fix(backend): ↵かっこかり2024-11-222-5/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Inboxのエラーをthrowせずreturnしている問題を修正 (#15022) * fix exception handling for Like activities (cherry picked from commit 8f42e8434eaebe3aba5d1980c57f49dd8ad0de91) * fix exception handling for Announce activities (cherry picked from commit cfc3ab4b045af0674122fa49176431860176358b) * fix exception handling for Undo activities * Update Changelog --------- Co-authored-by: Hazelnoot <acomputerdog@gmail.com>
| * ci: reset prerelease number on release (#15024)anatawa122024-11-222-3/+5
| |
| * Bump version to 2024.11.0-beta.4github-actions[bot]2024-11-212-2/+2
| |
| * Update CHANGELOG.mdかっこかり2024-11-211-1/+1
| |
| * Update CHANGELOG.mdsyuilo2024-11-211-0/+1
| |
| * Bump version to 2024.11.0-alpha.3github-actions[bot]2024-11-212-2/+2
| |
| * fix(backend): fix apResolver (#15010)かっこかり2024-11-212-3/+5
| | | | | | | | | | | | | | | | | | * fix(backend): fix apResolver * fix * add comments * tweak comment
| * fix(backend): fix type error(s) in security fixes (#15009)かっこかり2024-11-215-19/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Fix type error in security fixes (cherry picked from commit fa3cf6c2996741e642955c5e2fca8ad785e83205) * Fix error in test function calls (cherry picked from commit 1758f29364eca3cbd13dbb5c84909c93712b3b3b) * Fix style error (cherry picked from commit 23c4aa25714af145098baa7edd74c1d217e51c1a) * Fix another style error (cherry picked from commit 36af07abe28bec670aaebf9f5af5694bb582c29a) * Fix `.punyHost` misuse (cherry picked from commit 6027b516e1c82324d55d6e54d0e17cbd816feb42) * attempt to fix test: make yaml valid --------- Co-authored-by: Julia Johannesen <julia@insertdomain.name>
| * fix(backend): fix security patches (#15008)かっこかり2024-11-212-3/+3
| |
| * fix ap/showsyuilo2024-11-211-1/+1
| |
| * fix(backend): use atomic command to improve securitysyuilo2024-11-211-3/+1
| | | | | | | | Co-Authored-By: Acid Chicken <root@acid-chicken.com>
| * Merge commit from forkrectcoordsystem2024-11-214-36/+123
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix(backend): check target IP before sending HTTP request * fix(backend): allow accessing private IP when testing * Apply suggestions from code review Co-authored-by: anatawa12 <anatawa12@icloud.com> * fix(backend): lint and typecheck * fix(backend): add isLocalAddressAllowed option to getAgentByUrl and send (HttpRequestService) * fix(backend): allow fetchSummaryFromProxy, trueMail to access local addresses --------- Co-authored-by: anatawa12 <anatawa12@icloud.com> Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
| * Merge commit from forkJulia2024-11-212-8/+23
| | | | | | | | | | | | | | | | | | * Fix poll update spoofing * fix: Disallow negative poll counts --------- Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
| * Merge commit from forkJulia2024-11-2115-76/+227
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * enhance: Add a few validation fixes from Sharkey See the original MR on the GitLab instance: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/484 Co-Authored-By: Dakkar <dakkar@thenautilus.net> * fix: primitive 2: acceptance of cross-origin alternate Co-Authored-By: Laura Hausmann <laura@hausmann.dev> * fix: primitive 3: validation of non-final url * fix: primitive 4: missing same-origin identifier validation of collection-wrapped activities * fix: primitives 5 & 8: reject activities with non string identifiers Co-Authored-By: Laura Hausmann <laura@hausmann.dev> * fix: primitive 6: reject anonymous objects that were fetched by their id * fix: primitives 9, 10 & 11: http signature validation doesn't enforce required headers or specify auth header name Co-Authored-By: Laura Hausmann <laura@hausmann.dev> * fix: primitive 14: improper validation of outbox, followers, following & shared inbox collections * fix: code style for primitive 14 * fix: primitive 15: improper same-origin validation for note uri and url Co-Authored-By: Laura Hausmann <laura@hausmann.dev> * fix: primitive 16: improper same-origin validation for user uri and url * fix: primitive 17: note same-origin identifier validation can be bypassed by wrapping the id in an array * fix: code style for primitive 17 * fix: check attribution against actor in notes While this isn't strictly required to fix the exploits at hand, this mirrors the fix in `ApQuestionService` for GHSA-5h8r-gq97-xv69, as a preemptive countermeasure. * fix: primitive 18: `ap/get` bypasses access checks One might argue that we could make this one actually preform access checks against the returned activity object, but I feel like that's a lot more work than just restricting it to administrators, since, to me at least, it seems more like a debugging tool than anything else. * fix: primitive 19 & 20: respect blocks and hide more Ideally, the user property should also be hidden (as leaving it in leaks information slightly), but given the schema of the note endpoint, I don't think that would be possible without introducing some kind of "ghost" user, who is attributed for posts by users who have you blocked. * fix: primitives 21, 22, and 23: reuse resolver This also increases the default `recursionLimit` for `Resolver`, as it theoretically will go higher that it previously would and could possibly fail on non-malicious collection activities. * fix: primitives 25-33: proper local instance checks * revert: fix: primitive 19 & 20 This reverts commit 465a9fe6591de90f78bd3d084e3c01e65dc3cf3c. --------- Co-authored-by: Dakkar <dakkar@thenautilus.net> Co-authored-by: Laura Hausmann <laura@hausmann.dev> Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
| * New Crowdin updates (#15000)syuilo2024-11-216-2/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | * New translations ja-jp.yml (Catalan) * New translations ja-jp.yml (English) * New translations ja-jp.yml (Korean) * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Chinese Traditional) * New translations ja-jp.yml (German)
| * Fix: ↵Sayamame-beans2024-11-212-4/+15
| | | | | | | | | | | | | | リノートミュートが新規投稿通知に対して作用していなかった問題を修正 (#15006) * fix(backend): renoteMute doesn't work for note notification * docs(changelog): update changelog
| * perf(frontend): reduce api requests for non-logged-in enviroment (#15001)syuilo2024-11-217-7/+77
| | | | | | | | | | | | | | * wip * Update CHANGELOG.md * wip
| * feat: 絵文字のポップアップメニューに編集を追加 (#15004)鴇峰 朔華2024-11-202-5/+52
| | | | | | | | | | | | | | | | | | * Mod: 絵文字のポップアップメニューに編集を追加 * fix: code styleの修正 * fix: code styleの修正 * fix
| * Fix(backend): ↵zawa-ch.2024-11-193-3/+4
| | | | | | | | | | | | | | アカウント削除のモデレーションログが動作していないのを修正 (#14996) (#14997) * アカウント削除のモデレーションログが動作していないのを修正 * update CHANGELOG
| * Bump version to 2024.11.0-alpha.2github-actions[bot]2024-11-192-2/+2
| |
| * New Crowdin updates (#14965)syuilo2024-11-1929-39/+404
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Chinese Traditional) * New translations ja-jp.yml (German) * New translations ja-jp.yml (Catalan) * New translations ja-jp.yml (German) * New translations ja-jp.yml (German) * New translations ja-jp.yml (German) * New translations ja-jp.yml (Swedish) * New translations ja-jp.yml (English) * New translations ja-jp.yml (Catalan) * New translations ja-jp.yml (Chinese Traditional) * New translations ja-jp.yml (Korean) * New translations ja-jp.yml (German) * New translations ja-jp.yml (Swedish) * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Romanian) * New translations ja-jp.yml (French) * New translations ja-jp.yml (Spanish) * New translations ja-jp.yml (Arabic) * New translations ja-jp.yml (Czech) * New translations ja-jp.yml (Italian) * New translations ja-jp.yml (Dutch) * New translations ja-jp.yml (Norwegian) * New translations ja-jp.yml (Polish) * New translations ja-jp.yml (Portuguese) * New translations ja-jp.yml (Russian) * New translations ja-jp.yml (Slovak) * New translations ja-jp.yml (Turkish) * New translations ja-jp.yml (Ukrainian) * New translations ja-jp.yml (Vietnamese) * New translations ja-jp.yml (Indonesian) * New translations ja-jp.yml (Bengali) * New translations ja-jp.yml (Thai) * New translations ja-jp.yml (Uzbek) * New translations ja-jp.yml (Lao) * New translations ja-jp.yml (Japanese, Kansai) * New translations ja-jp.yml (Korean (Gyeongsang)) * New translations ja-jp.yml (Chinese Traditional) * New translations ja-jp.yml (German) * New translations ja-jp.yml (English) * New translations ja-jp.yml (German) * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (German) * New translations ja-jp.yml (English) * New translations ja-jp.yml (German) * New translations ja-jp.yml (German) * New translations ja-jp.yml (Polish) * New translations ja-jp.yml (Catalan) * New translations ja-jp.yml (Swedish) * New translations ja-jp.yml (French) * New translations ja-jp.yml (French) * New translations ja-jp.yml (French) * New translations ja-jp.yml (French) * New translations ja-jp.yml (Swedish) * New translations ja-jp.yml (Korean) * New translations ja-jp.yml (Chinese Simplified)
| * refactor(backend): ↵おさむのひと2024-11-195-29/+63
| | | | | | | | SystemWebhookで送信されるペイロードの型を追加 (#14980)