57a85df30d
Merge pull request 'Update module google.golang.org/grpc to v1.66.0 (forgejo)' ( #5157 ) from renovate/forgejo-google.golang.org-grpc-1.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5157
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-31 23:12:24 +00:00
500e0e8602
Merge pull request 'chore: Only implement used API of Redis client' ( #5173 ) from gusted/forgejo-redis-binary-size into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5173
Reviewed-by: Otto <otto@codeberg.org>
2024-08-31 23:08:17 +00:00
c71f8abcb1
Merge pull request 'Update dependency license-checker-rseidelsohn to v4.4.1 (forgejo)' ( #5185 ) from renovate/forgejo-license-checker-rseidelsohn-4.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5185
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-31 23:07:47 +00:00
a7eb18783c
Update module google.golang.org/grpc to v1.66.0
2024-08-31 22:18:34 +00:00
1530d34cff
chore: Fix import
2024-09-01 00:11:09 +02:00
de23443ded
Update dependency license-checker-rseidelsohn to v4.4.1
2024-09-01 00:11:07 +02:00
919ec88d2d
Merge pull request 'Update module github.com/buildkite/terminal-to-html/v3 to v3.15.0 (forgejo)' ( #5186 ) from renovate/forgejo-github.com-buildkite-terminal-to-html-v3-3.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5186
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-31 22:10:12 +00:00
a350d3ceff
Merge pull request 'Update dependency @stylistic/eslint-plugin-js to v2.7.1 (forgejo)' ( #5171 ) from renovate/forgejo-linters into forgejo
2024-08-31 07:30:57 +00:00
6e303dfcc9
Update linters
2024-08-31 06:03:36 +00:00
11bd49fe49
Merge pull request 'Update dependency happy-dom to v15.7.0 (forgejo)' ( #5184 ) from renovate/forgejo-happy-dom-15.x into forgejo
2024-08-31 04:27:32 +00:00
2eb8b94674
Update module github.com/buildkite/terminal-to-html/v3 to v3.15.0
2024-08-31 02:05:32 +00:00
6372a2e97a
Update dependency happy-dom to v15.7.0
2024-08-31 02:04:51 +00:00
baab1231b4
Merge pull request 'Update module github.com/felixge/fgprof to v0.9.5 (forgejo)' ( #5183 ) from renovate/forgejo-github.com-felixge-fgprof-0.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5183
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-31 01:31:54 +00:00
98e96a2235
Update module github.com/felixge/fgprof to v0.9.5
2024-08-31 00:04:17 +00:00
3521e44d78
Merge pull request 'Replace `create-user` in help with `user create`' ( #5175 ) from esainane/forgejo:tools-of-creation into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5175
Reviewed-by: Otto <otto@codeberg.org>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 23:02:03 +00:00
b573e0a621
Replace `create-user` in help with `user create`
...
0086279cb171db
2024-08-30 10:11:23 +00:00
293203cb64
Merge pull request 'chore(ci): Cache generated binary across jobs' ( #5130 ) from fnetx/runner-caching into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5130
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-30 05:47:01 +00:00
02622a48eb
Merge pull request 'Update dependency djlint to v1.35.2 (forgejo)' ( #5172 ) from renovate/forgejo-djlint-1.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5172
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 02:56:46 +00:00
c69cf81917
Merge pull request 'Update dependency @vitejs/plugin-vue to v5.1.3 (forgejo)' ( #5170 ) from renovate/forgejo-vitejs-plugin-vue-5.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5170
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 02:41:43 +00:00
9df10c5ac5
[FEAT] Only implement used API of Redis client
...
- Currently for the `nosql` module (which simply said provides a manager
for redis clients) returns the
[`redis.UniversalClient`](https://pkg.go.dev/github.com/redis/go-redis/v9#UniversalClient )
interface. The interfaces exposes all available commands.
- In generalm, dead code elimination should be able to take care of not
generating the machine code for methods that aren't being used. However
in this specific case, dead code elimination either is disabled or gives
up on trying because of exhaustive call stack the client by
`GetRedisClient` is used.
- Help the Go compiler by explicitly specifying which methods we use.
This reduces the binary size by ~400KB (397312 bytes). As Go no longer
generate machine code for commands that aren't being used.
- There's a **CAVEAT** with this, if a developer wants to use a new
method that isn't specified, they will have to know about this
hack (by following the definition of existing Redis methods) and add the
method definition from the Redis library to the `RedisClient` interface.
2024-08-30 04:33:15 +02:00
f4f5efdea8
Update dependency djlint to v1.35.2
2024-08-30 02:04:02 +00:00
4a26254cca
Update dependency @vitejs/plugin-vue to v5.1.3
2024-08-30 00:04:23 +00:00
1004ecd56b
Merge pull request 'fix: WIP toggle by reducing max issue title' ( #5143 ) from fnetx/wip-toggle-workaround into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5143
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 21:05:35 +00:00
38076a44d7
Merge pull request 'Update module github.com/go-webauthn/webauthn to v0.11.2 (forgejo)' ( #5147 ) from renovate/forgejo-github.com-go-webauthn-webauthn-0.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5147
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-by: Otto <otto@codeberg.org>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 20:35:23 +00:00
738bbc5cf3
Merge pull request 'fix: arch OptDepends version check and add gzip compression' ( #5121 ) from dragon/forgejo:bugfix-arch into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5121
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 19:21:11 +00:00
6eb88be6e8
Merge branch 'forgejo' into bugfix-arch
2024-08-29 12:39:16 +00:00
4999239cd8
Merge pull request 'Update dependency @stylistic/eslint-plugin-js to v2.6.5 (forgejo)' ( #5164 ) from renovate/forgejo-patch-linters into forgejo
2024-08-29 11:34:53 +00:00
a18b0ba973
Update dependency @stylistic/eslint-plugin-js to v2.6.5
2024-08-29 10:03:41 +00:00
91a9d479d5
Merge pull request 'chore(renovate): fix rule matching' ( #5163 ) from viceice/forgejo:chore/renovate/automerge-dev-deps into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5163
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-29 09:14:22 +00:00
ebd8c607bb
Merge pull request 'Update linters (forgejo)' ( #5155 ) from renovate/forgejo-linters into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5155
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 08:31:45 +00:00
b54f15cf8d
chore(renovate): fix rule matching
2024-08-29 10:17:53 +02:00
63736e8301
[FEAT] Add support for webauthn credential level 3
...
- For WebAuthn Credential level 3, the `backup_eligible` and
`backup_state` flags are checked if they are consistent with the values
given on login. Forgejo never stored this data, so add a database
migration that makes all webauthn credentials 'legacy' and on the next
first use capture the values of `backup_eligible` and `backup_state`.
As suggested in https://github.com/go-webauthn/webauthn/discussions/219#discussioncomment-10429662
- Adds unit tests.
- Add E2E test.
2024-08-29 10:05:03 +02:00
28c3f1e254
Update module github.com/go-webauthn/webauthn to v0.11.2
2024-08-29 10:05:00 +02:00
c87655b7ff
Merge pull request '[CHORE] Move `cache` & `captcha` library' ( #5146 ) from gusted/forgejo-captcha into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5146
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-29 08:02:09 +00:00
d0ec8d574e
Update linters
2024-08-29 07:24:19 +00:00
6c69b5da03
Merge pull request 'Update dependency djlint to v1.34.2 (forgejo)' ( #5154 ) from renovate/forgejo-djlint-1.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5154
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 06:55:47 +00:00
8cda274438
Merge pull request 'Update dependency happy-dom to v15.3.1 (forgejo)' ( #5156 ) from renovate/forgejo-happy-dom-15.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5156
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 06:36:46 +00:00
cb62fa81d5
Merge pull request 'docs: add links to the v7.0.8 & v8.0.2 release notes' ( #5160 ) from earl-warren/forgejo:wip-release-notes into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5160
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 05:08:25 +00:00
45198cef64
i18n: update of translations from Codeberg Translate ( #5070 )
...
Translations update from [Codeberg Translate](https://translate.codeberg.org ) for [Forgejo/forgejo](https://translate.codeberg.org/projects/forgejo/forgejo/ ).
Current translation status:
<!--start release-notes-assistant-->
## Draft release notes
<!--URL:https://codeberg.org/forgejo/forgejo-- >
- Localization
- [PR](https://codeberg.org/forgejo/forgejo/pulls/5070 ): <!--number 5070 --><!--line 0 --><!--description aTE4bjogdXBkYXRlIG9mIHRyYW5zbGF0aW9ucyBmcm9tIENvZGViZXJnIFRyYW5zbGF0ZQ==-->i18n: update of translations from Codeberg Translate<!--description-->
<!--end release-notes-assistant-->
Co-authored-by: earl-warren <earl-warren@users.noreply.translate.codeberg.org>
Co-authored-by: Xinayder <Xinayder@users.noreply.translate.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-authored-by: Kita Ikuyo <searinminecraft@courvix.com>
Co-authored-by: Fjuro <fjuro@alius.cz>
Co-authored-by: 0ko <0ko@users.noreply.translate.codeberg.org>
Co-authored-by: hugoalh <hugoalh@users.noreply.translate.codeberg.org>
Co-authored-by: Outbreak2096 <Outbreak2096@users.noreply.translate.codeberg.org>
Co-authored-by: Eryk Michalak <gnu.ewm@protonmail.com>
Co-authored-by: Caesar Schinas <caesar@caesarschinas.com>
Co-authored-by: hankskyjames777 <hankskyjames777@users.noreply.translate.codeberg.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5070
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Codeberg Translate <translate@noreply.codeberg.org>
Co-committed-by: Codeberg Translate <translate@noreply.codeberg.org>
2024-08-29 04:54:39 +00:00
ece6300ebd
docs: add links to the v7.0.8 & v8.0.2 release notes
2024-08-29 06:47:26 +02:00
6dbc79f161
Update dependency happy-dom to v15.3.1
2024-08-29 02:03:29 +00:00
deb8039d53
Update dependency djlint to v1.34.2
2024-08-29 00:04:07 +00:00
7eac5feb74
fix: WIP toggle by reducing max issue title
...
- when the PR title has the maximum length, the WIP toggle switch does nothing
- work around this by slightly reducing the max input size (- 10 characters for eventually long prefixes)
- test WIP toggling edge case in playwright
fix(e2e): increase timeouts
A look at recent runs suggests they should be increased globally. The timeouts in the config file have no timeout by default.
2024-08-29 01:36:58 +02:00
95f6cb7513
Merge branch 'forgejo' into bugfix-arch
2024-08-28 10:48:33 +00:00
06d42e6f03
Merge pull request '[SEC] Ensure propagation of API scopes for Conan and Container authentication' ( #5149 ) from gusted/forgejo-api-scope into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5149
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-28 08:43:01 +00:00
5a871f6095
[SEC] Ensure propagation of API scopes for Conan and Container authentication
...
- The Conan and Container packages use a different type of
authentication. It first authenticates via the regular way (api tokens
or user:password, handled via `auth.Basic`) and then generates a JWT
token that is used by the package software (such as Docker) to do the
action they wanted to do. This JWT token didn't properly propagate the
API scopes that the token was generated for, and thus could lead to a
'scope escalation' within the Conan and Container packages, read
access to write access.
- Store the API scope in the JWT token, so it can be propagated on
subsequent calls that uses that JWT token.
- Integration test added.
- Resolves #5128
2024-08-28 10:33:32 +02:00
3a55604d3c
Merge branch 'forgejo' into bugfix-arch
2024-08-28 00:38:10 +00:00
bf0d100b84
[CHORE] Move cache library
...
- This is in the spirit of #5090 .
- Move to a fork of gitea.com/go-chi/cache,
code.forgejo.org/go-chi/cache. It removes unused code (a lot of
adapters, that can't be used by Forgejo) and unused dependencies (see
go.sum). Also updates existing dependencies.
8c64f1a362
2024-08-27 21:28:56 +02:00
0404662e99
[CHORE] Move captcha library
...
- This is a fork of https://github.com/dchest/captcha , as
https://gitea.com/go-chi/captcha is a fork of
github.com/go-macaron/captcha which is a fork (although not properly
credited) of a older version of https://github.com/dchest/captcha . Hence
why I've just forked the original.
- The fork includes some QoL improvements (uses standard library for
determistic RNG instead of rolling your own crypto), and removal of
audio support (500KiB unused data that bloated the binary otherwise).
Flips the image over the x-asis.
47270f2b55
2024-08-27 21:28:16 +02:00
8d0530650e
Merge pull request 'Remove 15 unused strings' ( #5139 ) from 0ko/forgejo:i18n-cleanup-15x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5139
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: Otto <otto@codeberg.org>
2024-08-27 11:06:13 +00:00
Gusted
