summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFiles
2022-11-28[chore]: Bump codeberg.org/gruf/go-store/v2 from 2.0.9 to 2.0.10 (#1160)Libravatar dependabot[bot]10
Bumps codeberg.org/gruf/go-store/v2 from 2.0.9 to 2.0.10. --- updated-dependencies: - dependency-name: codeberg.org/gruf/go-store/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-27fix missing lookup cache key for invalid domain block (#1158)Libravatar kim1
2022-11-27[bugfix] Use Host domain for UA (#1156)Libravatar Daniele Sluijters1
In d6f4d196c978d81041ea99a32e2d6f63b0639472 we swapped to use the AccountDomain but that actually goes against the intent of the change. This reverts that change and uses the host domain again.
2022-11-26[chore] Set User-Agent header in transport (#1154)Libravatar Daniele Sluijters6
Currently requests set their own User-Agent. This moves it down to set it in the transport's do() method, to guarantee it's always set on all requests.
2022-11-26Tweak the User-Agent a bit (#1153)Libravatar Daniele Sluijters1
* [bugfix] Use AccountDomain for user agent By using the account domain we can pinpoint the source of the request more accurately when looking at the User-Agent header. * [chore] Align user-agent header with spec Based on RFC 7231, our User-Agent header doesn't quite match. It seems to always want Name [/ Version] pairs, with comments in parenthesis and multiple comments separated by a semicolon. Align our UA with that, using application name first by itself in case someone has customised it with the source instance in a comment. Follow that up with gotosocial/<version> and a comment pointing at the source code. This also drops the mention of gofed/activity since a fork is in use.
2022-11-26Additional IP range validations (#1152)Libravatar Daniele Sluijters4
* [bugfix] Ensure requests happen over TCP It's possible for the network to be udp4 or udp6. This is rather unlikely to occur, but since we're given the network anyway as part of the Sanitize function getting called we might as well check for it. * [chore] Align reserved v6 blocks to IANA registry * [chore] Add test for ValidateIP The net and netip packages diverge in that net.ParseIP will consider an IPv4-mapped address to be an IPv4 address and as such it would get caught by the IPv4Reserved list. However, netip considers it an IPv6 address, so we need to ensure the mapped range is in IPv6Reserved. * [chore] Align reserved v4 blocks to IANA registry This includes a number of tests for /32's explicitly called out in the registry to ensure we always consider those invalid.
2022-11-25[bugfix]: Fix IPv6 validation (#1150)Libravatar Daniele Sluijters1
* [bugfix]: Fix IPv6 validation The current code considers ff00::/8 valid, but contrary to the comment that's not the global unicast range. ff-prefixes in IPv6 denote multicast. This adapts the code to take the same approach as IPv4, explicitly blacklisting reserved internal/private ranges. * [chore] Add missing 4 in IPv4Reserved doc comment
2022-11-25[docs] Explain that before 0.6.0, account confirm was necessary. (#1149)Libravatar Phil Hagelberg2
Since the documentation site only shows the latest version of the docs, we need the docs to explain how to use the latest stable release, not just the latest git version.
2022-11-25[feature] Add `admin media prune orphaned` CLI command (#1146)Libravatar tobi11
* add FilePath regex * add `admin media prune orphaned` command * add prune orphaned function to media manager * don't mark flag as required * document admin media prune orphaned cmd * oh envparsing.sh you coy minx
2022-11-25[bugfix] Change emailVerified to true for admin account create (#1140)Libravatar Phil Hagelberg4
The NewSignup method was already being called with requireApproval=false, but it had emailVerified=false as well, which meant that it was required to use the `admin account confirm` command to verify the email before the newly-created user could log in. I think that was probably an oversight; effectively it did require approval anyway. Changing emailVerified to true allows you to just create the account and log in immediately, reducing the opportunity for manual error to sneak in. Also updated the docs to remove the mention of needing to confirm new accounts. However, I've left the confirmation command alone because I think once we have web signups, it will be needed in that context.
2022-11-25[chore] Fix frogend admin emoji patch (#1148)Libravatar f0x523
* fix className * fix unable to set category on new emoji * wrap emoji groups
2022-11-25[feature/frogend] modify local emoji (#1143)Libravatar f0x5211
* update danger button red * emoji category and image modification * debug bundles in dev * fix linting error
2022-11-24[feature] `PATCH /api/v1/admin/custom_emojis/{id}` endpoint (#1061)Libravatar tobi10
* start adding admin emoji PATCH stuff * updating works OK, now how about copying * allow emojis to be copied * update swagger docs * update admin processer to use non-interface storage driver * remove shortcode updating for local emojis * go fmt Co-authored-by: f0x52 <f0x@cthu.lu>
2022-11-24[bugfix] Fix status boosts giving 404 (#1137)Libravatar tobi3
We broke this at some point recently, and i'm not sure when. In any case, i updated some of the logic in there + added a test for it.
2022-11-24[bugfix] Prevent future statuses entering timelines (#1134)Libravatar tobi5
* [bugfix] Prevent future statuses entering timeline Statuses created more than 5 minutes into the future are now rejected in the visibility package. * Come on buddy
2022-11-24[chore] cleanup storage implementation, no need for multiple interface types ↵Libravatar kim35
(#1131) Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-23[feature/performance] Fail fast when doing remote transport calls inside ↵Libravatar tobi17
incoming request contexts (#1119) * [feature/performance] Fail fast when doing remote transport calls inside incoming request contexts * [chore] Reduce outgoing request timeout to 15s * log error messages when fastfailing * use context.Value() instead of wrapped context, wrap error with fastfail instead of extra log entry * add fast-fail context key test Signed-off-by: kim <grufwub@gmail.com> Co-authored-by: kim <grufwub@gmail.com>
2022-11-23[docs] Clarify that reverse proxy setups need trusted-proxies (#1127)Libravatar dx5
* [docs] Clarify that reverse proxy setups need trusted-proxies * Remove the jq usage
2022-11-23[chore/frogend] fix profile preview css, use role info (#1130)Libravatar f0x525
* fix profile preview css, use role info * remove unused redux selector
2022-11-23[chore/frontend] remove references to unused bundle.js (#1128)Libravatar tobi4
2022-11-22[feature] Prune timelines once per hour to plug memory leak (#1117)Libravatar tobi16
* export highest/lowest ULIDs as proper const * add stop + start to timeline manager, other small fixes * unexport unused interface funcs + tidy up * add LastGot func * add timeline Prune function * test prune * update lastGot
2022-11-22[docs] Document http/s/socks5 proxy use (#1118)Libravatar tobi1
2022-11-22[chore] fix broken buildx (whoops) (#1116)Libravatar tobi2
2022-11-22[chore] use kv.KVStore also for S3 storage (#1113)Libravatar kim7
* replace s3 storage implementation to also use kv.KVStore Signed-off-by: kim <grufwub@gmail.com> * pull in latest `go-store` fix Signed-off-by: kim <grufwub@gmail.com> * pull-in go-store v2.0.9 fixes, update s3 put chunk size to 5MiB Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-22[docs] Document non-buildx cross compilation for docker image (#1115)Libravatar Forest Johnson2
* Enable / document cross compilation for docker image * remove sudo * explain whats up with BUILDPLATFORM/TARGETPLATFORM
2022-11-22[chore] markdown: disable Smartypants rendering (#1111)Libravatar Norwin2
* [enhancement] markdown: disable SmartyPantsFractions fixes #1028 * some fractions are still converted to unicode to fix that, we might need to disable smartypants indeed in its entirety * disable smartypants completely for lack of a better simple solution
2022-11-21[docs] Add first draft of FAQ (#1086)Libravatar Phil Hagelberg4
* Clarify that gotosocial doesn't use recommendation algorithms It uses lots of algorithms. ~/src/gotosocial $ rgrep algorithm . | wc 856 8971 143395 * Add first draft of the FAQ. * Suggested FAQ changes. Mention backfill of posts as not yet being implemented; link to FAQ from readme/index. Mention that GtS does serve up some UI; just not most interaction.
2022-11-21[chore] update readme with kim's links (#1093)Libravatar kim1
* add kim's code and fediverse profiles Signed-off-by: kim <grufwub@gmail.com> * fix words Signed-off-by: kim <grufwub@gmail.com> * undo my accidental inclusion of custom version string... Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-21[chore]: Bump github.com/minio/minio-go/v7 from 7.0.43 to 7.0.44 (#1107)Libravatar dependabot[bot]8
Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.43 to 7.0.44. - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](https://github.com/minio/minio-go/compare/v7.0.43...v7.0.44) --- updated-dependencies: - dependency-name: github.com/minio/minio-go/v7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-20[chore] simplify logging to remove "safetywriter" given os.File has ↵Libravatar kim2
concurrency protection (#1083) Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-20[chore] improve errors returned fetching account/statues from DB (#1084)Libravatar kim2
Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-20[performance] add account block DB cache and remove block query joins (#1085)Libravatar kim11
* add account block DB cache and remove reliance on relational joins * actually include cache key arguments... * add a PutBlock() method which also updates the block cache, update tests accordingly * use `PutBlock` instead of `Put(ctx, block)` * add + use functions for deleting + invalidating blocks Signed-off-by: kim <grufwub@gmail.com> Co-authored-by: tsmethurst <tobi.smethurst@protonmail.com>
2022-11-20[bugfix] fix possible infinite loop on federated AP profile delete (#1091)Libravatar kim1
* refactor federator account statuses delete to better catch errors, ensure next maxID is always set Signed-off-by: kim <grufwub@gmail.com> * fix error statement missing 2nd format operator Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-20[docs] update forking instructions (#1080)Libravatar tobi1
2022-11-19[chore] Little Dockerfile updates (#1071)Libravatar tobi1
* [chore] Little Dockerfile updates * update comment on USER directive (thanks chris)
2022-11-19[feature] Support markdown format for Account bio/note (#1037)Libravatar Michael Manfre6
* [feature] Status format also controls bio format * test
2022-11-19[docs] Move and document logs (#1076)Libravatar Leonora Tindall2
Rather than a single access log and no error logging, put the logs in /var/log/gotosocial/, and document creating and owning that directory
2022-11-19[docs] Remove trailing / from proxy_pass for nginx (#1077)Libravatar Leonora Tindall1
The trailing / can break relative URLs.
2022-11-18[performance] replace account emojis relational query with separate calls to ↵Libravatar kim2
emojiDB to rely on cache (#1074) Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-18[performance] replace status query relationals with separate calls in order ↵Libravatar kim2
to rely on caches more (#1073) Signed-off-by: kim <grufwub@gmail.com> Signed-off-by: kim <grufwub@gmail.com>
2022-11-18[performance] don't use relations to select notification structs, use caches ↵Libravatar tobi3
instead (#1072)
2022-11-17[docs] Add AUR Reference (#1054)Libravatar Jelle van der Waa1
The AUR is the Arch unofficial repository, where users can upload PKGBUILD's for Arch Linux users to build a package.
2022-11-17[docs] add account domain documentation (#1065)Libravatar tobi5
* [docs] add account domain documentation * add note about parent/subdomain
2022-11-17[chore] Replace blocking Floc with Topics. (#1068)Libravatar psa1
Google abandoned Floc in favour of Topics and changed the necessary permissions policy. Currently, the Floc policy will block Topics. This change includes switching to the updated policy to be ahead of Google abandoning recognising the Floc policy. Update the function documentation to include the current relevant documentation.
2022-11-17[docs] Update docker.md with docker tag / version stuff (#1067)Libravatar tobi1
2022-11-17[chore] cicd: snapshot `snapshot` instead of latest (#1066)Libravatar tobi2
2022-11-16[frogend] upgrade deps (#1063)Libravatar f0x522
2022-11-16[frogend] Emoji categories (#1051)Libravatar f0x5210
* emoji category combobox * emoji categorizing * dropdown entry separation * emoji filtering/sorting * add some explaining comments * remove unneeded default-value code * remove wrongly created package.json * configurable ComboBox label+placeHolder
2022-11-16[chore] reversion: use specific columns for updating user again (#1059)Libravatar tobi4
2022-11-15[chore] update database caching library (#1040)Libravatar kim55
* convert most of the caches to use result.Cache{} * add caching of emojis * fix issues causing failing tests * update go-cache/v2 instances with v3 * fix getnotification * add a note about the left-in StatusCreate comment * update EmojiCategory db access to use new result.Cache{} * fix possible panic in getstatusparents * further proof that kim is not stinky
generated by cgit v1.2.3 (git 2.46.0) at 2025-08-04 20:09:39 +0000