15883 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
floatingghost	ad92e504d7	Update mix.exs	2025-01-06 12:01:53 +00:00
Floatingghost	1ffbaa2924	don't allow a nil inbox to obliterate federation	2025-01-06 11:43:41 +00:00
Floatingghost	2e049037de	force CI build	2025-01-05 17:35:01 +00:00
Floatingghost	a2256b3f9e	add unreleased section	2025-01-05 17:30:32 +00:00
Floatingghost	054396a99e	ARM64	2025-01-05 17:23:52 +00:00
Floatingghost	a846e60d71	and the docs one	2025-01-05 16:39:30 +00:00
Floatingghost	1be18a9f4c	update deprecated CI config	2025-01-05 16:37:54 +00:00
Floatingghost	55fc410f80	bump version number	2025-01-05 16:25:42 +00:00
Floatingghost	ae40ccb8ca	add changelog entry	2025-01-05 16:23:09 +00:00
Floatingghost	7ed52838f4	fix test	2025-01-05 16:22:38 +00:00
floatingghost	fe23660a2d	Merge pull request 'openbsd: update service file' (#866) from Oneric/akkoma:openbsd-rcd-file into develop ... Reviewed-on: #866	2025-01-05 15:44:47 +00:00
Floatingghost	177d420ae7	Merge branch 'develop' of akkoma.dev:AkkomaGang/akkoma into develop	2025-01-05 15:44:15 +00:00
Floatingghost	b0f2ed6eaa	Merge remote-tracking branch 'oneric/changelog-3.13.4' into develop	2025-01-05 15:44:06 +00:00
floatingghost	39cef8b8d2	Merge pull request 'Set customize_hostname_check for Swoosh.Adapters.SMTP' (#861) from norm/akkoma:smtp-defaults-fix into develop ... Reviewed-on: #861	2025-01-05 15:43:16 +00:00
floatingghost	3ba743d635	Merge pull request 'Update hashtag prune to account for followed hashtags' (#844) from norm/akkoma:hashtag-prune into develop ... Reviewed-on: #844	2025-01-05 15:41:23 +00:00
Floatingghost	bd02c3d7de	Merge remote-tracking branch 'oneric/custom-source' into develop	2025-01-05 15:40:35 +00:00
floatingghost	8de373fa24	Merge pull request 'Fix various attachment cleanup issues' (#789) from Oneric/akkoma:attachcleanup-overeager into develop ... Reviewed-on: #789	2025-01-05 15:39:48 +00:00
floatingghost	d32c4e89bc	Merge pull request 'FEP-dc88: Formatting Mathematics' (#642) from pounce/akkoma:formatting-mathematics into develop ... Reviewed-on: #642	2025-01-05 15:39:31 +00:00
floatingghost	7c095a6b70	Merge pull request 'do not fetch if :limit_to_local_content is :all or :unauthenticated' (#582) from beerriot/akkoma:develop-no-fetch-with-local-limit into develop ... Reviewed-on: #582	2025-01-05 15:39:13 +00:00
Floatingghost	e0428a8f14	Merge branch 'develop' of akkoma.dev:AkkomaGang/akkoma into develop	2025-01-05 15:38:32 +00:00
Floatingghost	e5619c0895	Merge remote-tracking branch 'norm/improve-asdf-install' into develop	2025-01-05 15:38:25 +00:00
floatingghost	833d7661d6	Merge pull request 'update nsfwCensorImage suggestion in config/description.exs' (#837) from norm/akkoma:update-nsfwCensorImage into develop ... Reviewed-on: #837	2025-01-05 15:37:08 +00:00
eviloatmeal	d8c7ed70d0	openbsd: update service file ... Changes suggested and tested by eviloatmeal Fixes: #864	2025-01-03 21:22:38 +01:00
Oneric	e8bf4422ff	Delay attachment deletion ... Otherwise attachments have a high chance to disappear with akkoma-fe’s “delete & redraft” feature when cleanup is enabled in the backend. Since we don't know whether a deletion was intended to be part of a redraft process or even if whether the redraft was abandoned we still have to delete attachments eventually. A thirty minute delay should provide sufficient time for redrafting. Fixes: #775	2025-01-03 20:49:11 +01:00
Oneric	bcfbfbcff5	Don't try to cleanup remote attachments ... The cleanup attachment worker was run for every deleted post, even if it’s a remote post whose attachments we don't even store. This was especially bad due to attachment cleanup involving a particularly heavy query wasting a bunch of database perf for nil. This was uncovered by comparing statistics from #784 and #765 (comment)	2025-01-03 20:48:46 +01:00
Oneric	f2e45d4d4b	Teach admin-fe about custom source URLs ... Matching AkkomaGang/akkoma-fe#421	2025-01-03 20:43:52 +01:00
Oneric	7615a11a1e	changelog: fix shuffled and add missing entries	2025-01-03 20:33:41 +01:00
floatingghost	e3c8c4f24f	Merge pull request 'mrf/object_age: fix handling of non-public objects' (#851) from Oneric/akkoma:mrf-fix-oage into develop ... Reviewed-on: #851	2025-01-03 15:26:11 +00:00
floatingghost	67cdc38296	Merge pull request 'Only proxy HTTP and HTTP urls via Media Proxy' (#860) from nopjmp/akkoma:media-proxy-only-http into develop ... Reviewed-on: #860	2025-01-03 15:25:14 +00:00
floatingghost	89d209f486	Merge pull request 'Fix NodeInfo content-type' (#853) from Oneric/akkoma:nodeinfo-contenttype into develop ... Reviewed-on: #853	2025-01-03 15:24:25 +00:00
floatingghost	087ada3b2e	Merge pull request 'Update supported OTP version to 27 in docs' (#849) from norm/akkoma:docs/otp-27 into develop ... Reviewed-on: #849	2025-01-03 15:23:59 +00:00
floatingghost	91bedcfa68	Merge pull request 'Completely omit id for anonymous objects' (#850) from Oneric/akkoma:ap-anonymous-errata into develop ... Reviewed-on: #850	2025-01-03 15:23:03 +00:00
Norm	f19d5d1380	Set customize_hostname_check for Swoosh.Adapters.SMTP ... This should hopefully fix issues with connecting to SMTP servers with wildcard TLS certificates. Taken from https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl Fixes #660	2024-12-18 14:37:27 -05:00
nopjmp	ff5d197341	Update CHANGELOG.md	2024-12-16 20:35:12 -06:00
nopjmp	7632765b43	Only proxy HTTP and HTTP urls via Media Proxy ... We make an assumption that we are only proxying HTTP/HTTPS hosted media through the media proxy endpoint. Fixes: #859	2024-12-16 20:35:12 -06:00
Oneric	294de939cb	signing_key: refactor nested case into with statement ... The error branches were already effectively identical before. This change is purely cosmetic.	2024-12-08 20:43:57 +00:00
Oneric	7583eceb38	Make SigningKey data migration future-proof ... Bug originally discovered by tudbut	2024-12-08 20:43:10 +00:00
Floatingghost	834edfcf96	add changelog	2024-11-26 09:50:04 +00:00
Floatingghost	79b282dea6	bump version	2024-11-26 09:36:20 +00:00
Floatingghost	d1d82782db	add signing key index	2024-11-26 09:35:56 +00:00
Haelwenn (lanodan) Monnier	2b1a252cc7	User: truncate remote user fields instead of rejecting	2024-11-26 09:29:44 +00:00
Calvin Lee	f048e0cf1b	Allow MathML core tags in sanitized content	2024-11-25 23:18:52 +00:00
Oneric	416aebb76a	Fix NodeInfo content-type ... Fixes: #852	2024-11-19 19:25:31 +01:00
Oneric	932810c35e	mrf/object_age: fix handling of non-public objects ... Current logic unconditionally adds public adressing to "cc" and follower adressing to "to" after attempting to strip it from the other one. This creates serious problems: First the bug prompting this investigation and fix, unconditional addition creates duplicates when adressing URIs already were in their intended final field; e.g. this is prominently the case for all "unlisted" posts. Since List.delete only removes the first occurence, this then broke follower-adress stripping later on making the policy ineffective. It’s also just not safe in general wrt to non-public adressing: e.g. pre-existing duplicates didn’t get fully stripped, bespoke adressing modes with only one of public addressing or follower addressing are mangled — and most importantly: any belatedly received DM or follower-only post also got public adressing added! Shockingly this last point was actually asserted as "correct" in tests; it appears to be a mistake from mindless match adjustments while fixing crashes on nil adressing in 10c792110e. Clean up this sloppy logic up, making sure no more duplicates are added by us, all instances of relevant adresses are purged and only readded when they actually existed to begin with.	2024-11-17 00:44:51 +01:00
Norm	4c7ef1e027	Update supported OTP version to 27 in docs ... The minor incompatibility should have been fixed with commit bee10eab5e and PRs #839 and #841.	2024-11-09 18:24:53 -05:00
Oneric	0f9c9aac38	Completely omit id for anonymous objects ... Current AP spec demands anonymous objects to have an id value, but explicitly set it to JSON null. Howeveras it turns out this is incompatible with JSON-LD requiring `@id` to be a string and thus AP spec is incompatible iwth the Ativity Streams spec it is based on. This is an issue for (the few) AP implementers actually performing JSON-LD processing, like IceShrimp.NET. This was uncovered by IceShrimp.NET’s zotan due to our adoption of anonymous objects for emoj in f101886709. The issues is being discussed by W3C, and will most likely be resolved via an errata redefining anonymous objects to completely omit the id field just like transient objects already do. See: https://github.com/w3c/activitypub/issues/476 Fixes: #848	2024-11-09 19:29:29 +01:00
Floatingghost	c0a99df06a	Merge remote-tracking branch 'oneric/varfixes' into develop	2024-10-30 15:15:00 +00:00
floatingghost	0cb4c35ee4	Merge pull request 'Extract keys to their own table, match keyID' (#816) from keys-extraction into develop ... Reviewed-on: #816	2024-10-30 15:08:11 +00:00
Floatingghost	c9b3fcc1d3	allow for OTP code changes in :zip	2024-10-30 14:43:18 +00:00
Floatingghost	11c5838947	standardise local key id generation	2024-10-30 12:44:01 +00:00