Commit Graph

708 Commits

Author SHA1 Message Date
Mike Barnes 372e262c4d Merge tag 'v4.1.15' 2024-02-17 10:52:48 +11:00
Claire b7b03e8d26 Bump version to v4.1.15 2024-02-16 11:57:15 +01:00
Claire 6499850ac4 Bump version to v4.1.14 2024-02-14 15:16:55 +01:00
Claire 2f6518cae2 Add `sidekiq_unique_jobs:delete_all_locks` task and disable `sidekiq-unique-jobs` UI by default (#29199) 2024-02-14 13:17:55 +01:00
Mike Barnes 1064e395cb Merge tag 'v4.1.13' 2024-02-02 02:13:17 +11:00
Claire 5799bc4af7
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to v4.1.13
2024-02-01 15:56:46 +01:00
Mike Barnes bd7ce0d5f9 Merge tag 'v4.1.12' 2024-01-30 21:39:45 +11:00
Claire fc4e2eca9f Bump version to v4.1.12 2024-01-24 15:31:06 +01:00
Claire e6072a8d13 Fix error when processing remote files with unusually long names (#28823) 2024-01-24 15:31:06 +01:00
Mike Barnes fc58fc207f Merge tag 'v4.1.11' into chinwag-4.1 2023-12-18 19:21:59 +11:00
Claire 363bedd050 Bump version to v4.1.11 2023-12-04 15:28:02 +01:00
Mike Barnes 9d4892ca17 Merge tag 'v4.1.10' into chinwag-4.1 2023-10-16 13:16:30 +11:00
Claire df60d04dc1 Bump version to v4.1.10 2023-10-10 13:51:56 +02:00
Claire e4c0aaf626
Bump version to v4.1.9 (#26997) 2023-09-20 17:25:05 +02:00
Mike Barnes d9dfd09ac8 Merge tag 'v4.1.8' into chinwag-4.1 2023-09-20 13:37:47 +10:00
Mike Barnes 04a0f875a3 Merge tag 'v4.0.10' 2023-09-20 05:42:47 +10:00
Claire 46bd58f74d Bump version to v4.1.8 2023-09-19 17:01:44 +02:00
yufushiro 7802837885 Fix unexpected audio stream transcoding when uploaded video is eligible to passthrough (#26608)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2023-09-19 17:01:44 +02:00
Claire 3d8ae6ab73 Bump version to v4.0.10 2023-09-19 17:01:32 +02:00
yufushiro bc4408db08 Fix unexpected audio stream transcoding when uploaded video is eligible to passthrough (#26608)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2023-09-19 17:01:32 +02:00
Mike Barnes 1ab59dee0e Chinwag 4.0.9-cw1 2023-09-19 13:46:25 +10:00
Mike 6f3094cfbd Merge tag 'v4.0.9' 2023-09-19 13:42:45 +10:00
Claire 5f88a2d70b Bump version to v4.1.7 2023-09-05 19:16:09 +02:00
Claire a9915c596b Bump version to v4.0.9 2023-09-05 18:51:01 +02:00
Claire e3c57f1add Bump version to v4.0.8 2023-07-31 14:33:14 +02:00
Claire ac7d40b561 Bump version to v4.1.6 2023-07-31 14:33:06 +02:00
Claire ebf4f034c2 Bump version to v4.1.5 2023-07-21 16:07:43 +02:00
Claire 10fcccedf2 Bump version to v4.0.7 2023-07-21 16:07:35 +02:00
Mike Barnes 81361b4393 Chinwag v4.0.6-cw2 2023-07-10 19:48:03 +10:00
Mike Barnes ebd731e02d Merge tag 'v4.0.6' 2023-07-09 21:45:33 +10:00
Claire 3f5af768c8 Bump version to v4.1.4 2023-07-07 19:37:21 +02:00
Claire 015ed99612 Fix branding:generate_app_icons failing because of disallowed ICO coder (#25794) 2023-07-07 19:37:21 +02:00
Claire 60b70755be Bump version to v4.0.6 2023-07-07 19:36:12 +02:00
Claire 237f2adfa6 Fix branding:generate_app_icons failing because of disallowed ICO coder (#25794) 2023-07-07 19:36:12 +02:00
Mike Barnes 9289211e21 Chinwag 4.0.5-cw1 2023-07-07 01:54:09 +10:00
Mike Barnes b45ba2d672 Merge tag 'v4.0.5' 2023-07-07 01:51:21 +10:00
Claire 8d7f6550f9 Bump version to v4.0.5 2023-07-06 15:07:46 +02:00
Claire 0d5781ca76 Bump version to v4.1.3 2023-07-06 15:07:20 +02:00
Claire 2119aadf0a
Merge pull request from GHSA-9928-3cp5-93fm
* Fix attachments getting processed despite failing content-type validation

* Add a restrictive ImageMagick security policy tailored for Mastodon

* Fix misdetection of MP3 files with large cover art

* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
Claire 0aa0b71f2c
Merge pull request from GHSA-9928-3cp5-93fm
* Fix attachments getting processed despite failing content-type validation

* Add a restrictive ImageMagick security policy tailored for Mastodon

* Fix misdetection of MP3 files with large cover art

* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
Claire 102ed6e8ca
Merge pull request from GHSA-ccm4-vgcc-73hp
* Tighten allowed HTML in oEmbed-based preview cards

* Sanitize preview cards at render time

* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
Claire c4f2609f7a
Merge pull request from GHSA-ccm4-vgcc-73hp
* Tighten allowed HTML in oEmbed-based preview cards

* Sanitize preview cards at render time

* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
Claire 9b6c0cac7d Add hardened headers to user-uploaded files (#25756) 2023-07-06 14:32:26 +02:00
Daniel M Brasil 995ad9602b Fix `tootctl accounts approve --number N` not aproving N earliest registrations (#24605) 2023-07-06 13:45:58 +02:00
Daniel M Brasil bd7cbeeadf Fix `tootctl accounts approve --number N` not aproving N earliest registrations (#24605) 2023-07-06 13:45:40 +02:00
Mike Barnes 2ea3e29a48 Version suffix bump 2023-07-05 22:15:08 +10:00
Mike Barnes d3d4497f09 Merge tag 'v4.0.4' 2023-07-05 21:13:10 +10:00
Claire 4b9e4f6398 Bump version to v4.1.2 2023-04-04 12:41:27 +02:00
Claire 4eaa6d58b2 Change root Chewy strategy to emit a warning instead of erroring out in production mode (#24327) 2023-04-04 12:41:27 +02:00
Claire 3c82c4e780 Fix crash in `tootctl` commands making use of parallelization when Elasticsearch is enabled (#24182) 2023-04-04 12:41:27 +02:00