48725f7228
[chore]: Bump github.com/microcosm-cc/bluemonday from 1.0.25 to 1.0.26 ( #2266 )
2023-10-16 09:02:31 +00:00
39e22a9703
[chore]: Bump golang.org/x/net from 0.16.0 to 0.17.0 ( #2262 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.16.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-15 14:34:07 +02:00
37fe8aea49
[chore]: Bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 ( #2258 )
2023-10-09 08:36:33 +00:00
274dfb5304
[chore]: Bump golang.org/x/image from 0.12.0 to 0.13.0 ( #2256 )
2023-10-09 08:25:41 +00:00
abd598e8f6
[chore]: Bump github.com/abema/go-mp4 from 1.0.0 to 1.1.1 ( #2257 )
...
Bumps [github.com/abema/go-mp4](https://github.com/abema/go-mp4 ) from 1.0.0 to 1.1.1.
- [Release notes](https://github.com/abema/go-mp4/releases )
- [Commits](https://github.com/abema/go-mp4/compare/v1.0.0...v1.1.1 )
---
updated-dependencies:
- dependency-name: github.com/abema/go-mp4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 10:13:37 +02:00
5aeceb5ff7
[chore]: Bump golang.org/x/net from 0.15.0 to 0.16.0 ( #2260 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.15.0 to 0.16.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.16.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 10:13:09 +02:00
d173fcdfa3
[chore] Convert some settings / admin panel JS to TypeScript ( #2247 )
...
* initial conversion of STUFF to typescript
* more stuff
* update babel deps, include commonjs transform
* update bundler & eslint configuration
* eslint --fix
* upgrade deps
* update docs, build stuff, peripheral stuff
---------
Co-authored-by: f0x <f0x@cthu.lu>
2023-10-05 16:06:19 +02:00
6e508830e1
updates markdown parsing to reduce allocations in the same way as the plain text formatter ( #2252 )
2023-10-05 13:22:40 +01:00
e0f0d320f6
[docs] statuses-query-pinned #2250 ( #2251 )
2023-10-04 14:19:24 +02:00
c6e00afc7c
[feature] tentatively start adding polls support ( #2249 )
2023-10-04 13:09:42 +01:00
297b6eeaaa
[chore] internal/ap: add pollable AS types, code reformatting, general niceties ( #2248 )
2023-10-03 14:59:30 +01:00
a1ab2c255a
[chore]: Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.18.0 to 1.19.0 ( #2246 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 15:46:24 +01:00
118b546d9f
[chore]: Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc ( #2244 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.18.0...v1.19.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 12:54:38 +01:00
21f051733a
[chore]: Bump modernc.org/sqlite from 1.25.0 to 1.26.0 ( #2243 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 10:24:17 +01:00
088daef6f8
[chore]: Bump go.opentelemetry.io/otel/sdk from 1.18.0 to 1.19.0 ( #2242 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 10:23:57 +01:00
0cce2c0838
[feature] Block a bunch of "AI" crawlers ( #2239 )
...
* [feature] Block Google Bard/AI crawlers
* [feature] Block the other OpenAI crawler
* [feature] Block Common Crawl crawler
This is used in research, but also gleefully advertises itself as the
training source used in all LLMs and GPT-3.
Fixes : #2240
* [feature] Block Omgilikebot
Used by some shady big web data engine company.
* [feature] Block Meta's language model crawler
* [feature] Block well-known.dev crawler
2023-09-30 20:44:57 +01:00
2b6b9cdf83
[bugfix] Fix paging for empty items ( #2236 )
...
* use minID properly for public timeline
* return paged response properly even when 0 items
* use gtserror
* page more consistently (for now)
* test
* aaa
2023-09-29 15:31:10 +02:00
736cd37caf
[frontend] Add `discoverable` flag to settings panel ( #2235 )
2023-09-29 13:01:36 +02:00
536d9e482d
[chore/bugfix] Deinterface text.Formatter, allow underscores in hashtags ( #2233 )
2023-09-29 10:39:56 +02:00
b6b8f82c87
[bugfix] Move follow.show_reblogs check further up to avoid showing unwanted reblogs in home timeline ( #2234 )
2023-09-29 10:39:35 +02:00
2a9927dfdc
[chore] Enable S256 code challenge ( #2224 )
...
For some reason we only had plain enabled. This adds S256.
2023-09-28 11:21:19 +02:00
e93cc7a9a8
[chore]: Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc ( #2221 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.17.0...v1.18.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-28 11:20:26 +02:00
d45a75e475
[chore]: Bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 ( #2223 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 11:52:59 +01:00
380d83f9a9
[chore]: Bump github.com/abema/go-mp4 from 0.13.0 to 1.0.0 ( #2222 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 11:33:10 +01:00
9f9fcf743d
[bugfix] support both CollectionPage AND OrderedCollectionPage in status replies ( #2220 )
2023-09-23 18:28:12 +01:00
8f67dd583d
[chore] deinterface the typeutils.Converter and update to use state structure ( #2217 )
...
* update typeconverter to use state structure
* deinterface the typeutils.TypeConverter -> typeutils.Converter
* finish copying over old type converter code comments
* fix cherry-pick merge issues, fix tests pointing to old typeutils interface type still
2023-09-23 18:44:11 +02:00
1b848aa1e5
[chore] fix typo in slice.go ( #2219 )
2023-09-23 18:42:34 +02:00
b987653cc9
[docs] ahs article milestone a ( #2218 )
2023-09-22 11:25:25 +02:00
183eaa5b29
[feature] Implement explicit domain allows + allowlist federation mode ( #2200 )
...
* love like winter! wohoah, wohoah
* domain allow side effects
* tests! logging! unallow!
* document federation modes
* linty linterson
* test
* further adventures in documentation
* finish up domain block documentation (i think)
* change wording a wee little bit
* docs, example
* consolidate shared domainPermission code
* call mode once
* fetch federation mode within domain blocked func
* read domain perm import in streaming manner
* don't use pointer to slice for domain perms
* don't bother copying blocks + allows before deleting
* admonish!
* change wording just a scooch
* update docs
2023-09-21 12:12:04 +02:00
d6add4ef93
[docs] Add a note on cluster support ( #2214 )
...
* [docs] Callout no cluster/multi-node support
Though we have a GitHub issue for this, we don't mention it anywhere in
the docs. This adds it to the deployment considerations so hopefully
folks will see it when standing up their own instance.
* [docs] Add daenney as a developer
2023-09-20 18:12:31 +02:00
fc11deeb83
[feature] add paging to AP following / followers endpoints ( #2198 )
2023-09-20 16:49:46 +01:00
c6fdcd52fa
[chore]: Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.17.0 to 1.18.0 ( #2207 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 13:47:28 +01:00
f302ebb8e5
[chore]: Bump github.com/miekg/dns from 1.1.55 to 1.1.56 ( #2204 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 13:45:20 +01:00
ba0a31d224
[bugfix] fix flakey paging test ( #2210 )
2023-09-18 13:45:10 +01:00
50b713e37a
[chore] bump bun (and related libraries) versions to v1.1.16 ( #2209 )
2023-09-18 11:38:56 +01:00
7293d6029b
[feature] add paging to account follows, followers and follow requests endpoints ( #2186 )
2023-09-12 14:00:35 +01:00
4b594516ec
[feature] Allow admins to expire remote public keys; refetch expired keys on demand ( #2183 )
2023-09-12 10:43:12 +01:00
2cac5a4613
[feature] Support Actor URIs for webfinger queries ( #2187 )
...
* [feature] Support Actor URIs for webfinger queries
It's now possible to pass an Actor URI as the resource to query for when
doing a webfinger query. The code now extracts the username and domain
from the URI. The URI needs to be fully qualified, including having a
scheme of http or https to be recognised as such.
The acct scheme is handled as we used to, including dealing with an
erroneous leading @ on the username. We retain the ability to handle
resources without a scheme by parsing them again with the acct scheme if
the original parse failed. This can happen due to parsing ambiguities
when dealing with a string like user@domain.tld:port.
* [bugfix] Remove debugging changes
* [chore] Make TestExtractNamestring table-driven
* [chore] Unnest Trim and Split for readability
2023-09-11 18:38:31 +02:00
7011f57b09
[chore] bump bun v1.1.14 -> v1.1.15 ( #2195 )
2023-09-11 15:16:52 +02:00
23dd6f664c
[chore]: Bump golang.org/x/net from 0.14.0 to 0.15.0 ( #2193 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.14.0 to 0.15.0.
- [Commits](https://github.com/golang/net/compare/v0.14.0...v0.15.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 12:47:44 +02:00
ecbce17655
[chore]: Bump github.com/tdewolff/minify/v2 from 2.12.8 to 2.12.9 ( #2194 )
2023-09-11 09:50:58 +00:00
f0a3fcae85
[chore]: Bump golang.org/x/crypto from 0.12.0 to 0.13.0 ( #2190 )
2023-09-11 09:50:37 +00:00
79906f969d
[docs] add fail2ban regex in the doc ( #2189 )
2023-09-11 09:43:31 +02:00
b093947d84
[chore] much improved paging package ( #2182 )
2023-09-07 15:58:37 +01:00
14ef098099
[feature] Support OTLP HTTP, drop Jaeger ( #2184 )
...
* [feature] Add http trace exporter, drop Jaeger
Jaeger supports ingesting traces using the OpenTelemetry gRPC or HTTP
methods. The Jaeger project has deprecated the old jaeger transport.
* Add support for submitting traces over HTTP
* Drop support for the old Jaeger protocol
* Upgrade the trace libraries to v1.17
Fixes : #2176
Fixes : #2179
2023-09-07 13:20:37 +02:00
916c6d07ba
[bugfix] fix checks for deref the same status descendants / ascendants ( #2181 )
2023-09-05 11:22:02 +01:00
9f2199f9a9
[chore] Add script for downloading latest snapshot tar.gz ( #2157 )
...
* [chore] Add script for downloading latest snapshot tar.gz
* Update scripts/get_latest_snapshot.sh
Co-authored-by: Daenney <daenney@users.noreply.github.com>
* Update scripts/get_latest_snapshot.sh
Co-authored-by: Daenney <daenney@users.noreply.github.com>
* update comment
---------
Co-authored-by: Daenney <daenney@users.noreply.github.com>
2023-09-04 19:18:39 +02:00
5f10885dde
[feature] Don't trace non-existing routes ( #2172 )
...
c.FullPath() is the empty string if a request doesn't match any route on
our mux. In those cases, there's no value in emitting a trace. The trace
will be empty, containing no other information beyond the fact that we
didn't match a route. Since Gin breaks off the processing early we don't
need to trace this request as it won't do anything and consumes no
further resources.
The 404 will still be emitted by our logs and will be visible from a
reverse proxy too.
2023-09-04 17:15:14 +02:00
3ed1ca68e5
[feature] Store admin actions in the db, prevent conflicting actions ( #2167 )
2023-09-04 14:55:17 +01:00
4f3daeebcb
[chore]: Bump golang.org/x/image from 0.11.0 to 0.12.0 ( #2178 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04 12:51:12 +01:00
dependabot[bot]