Commit graph

20833 commits

Author SHA1 Message Date
Gusted 500e0e8602 Merge pull request 'chore: Only implement used API of Redis client' (#5173) from gusted/forgejo-redis-binary-size into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5173
Reviewed-by: Otto <otto@codeberg.org>
2024-08-31 23:08:17 +00:00
Gusted c71f8abcb1 Merge pull request 'Update dependency license-checker-rseidelsohn to v4.4.1 (forgejo)' (#5185) from renovate/forgejo-license-checker-rseidelsohn-4.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5185
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-31 23:07:47 +00:00
Renovate Bot a7eb18783c Update module google.golang.org/grpc to v1.66.0 2024-08-31 22:18:34 +00:00
Gusted 1530d34cff
chore: Fix import 2024-09-01 00:11:09 +02:00
Renovate Bot de23443ded
Update dependency license-checker-rseidelsohn to v4.4.1 2024-09-01 00:11:07 +02:00
Gusted 919ec88d2d Merge pull request 'Update module github.com/buildkite/terminal-to-html/v3 to v3.15.0 (forgejo)' (#5186) from renovate/forgejo-github.com-buildkite-terminal-to-html-v3-3.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5186
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-31 22:10:12 +00:00
forgejo-renovate-action a350d3ceff Merge pull request 'Update dependency @stylistic/eslint-plugin-js to v2.7.1 (forgejo)' (#5171) from renovate/forgejo-linters into forgejo 2024-08-31 07:30:57 +00:00
Renovate Bot 6e303dfcc9 Update linters 2024-08-31 06:03:36 +00:00
forgejo-renovate-action 11bd49fe49 Merge pull request 'Update dependency happy-dom to v15.7.0 (forgejo)' (#5184) from renovate/forgejo-happy-dom-15.x into forgejo 2024-08-31 04:27:32 +00:00
Renovate Bot 2eb8b94674 Update module github.com/buildkite/terminal-to-html/v3 to v3.15.0 2024-08-31 02:05:32 +00:00
Renovate Bot 6372a2e97a Update dependency happy-dom to v15.7.0 2024-08-31 02:04:51 +00:00
Gusted baab1231b4 Merge pull request 'Update module github.com/felixge/fgprof to v0.9.5 (forgejo)' (#5183) from renovate/forgejo-github.com-felixge-fgprof-0.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5183
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-31 01:31:54 +00:00
Renovate Bot 98e96a2235 Update module github.com/felixge/fgprof to v0.9.5 2024-08-31 00:04:17 +00:00
Otto 3521e44d78 Merge pull request 'Replace create-user in help with user create' (#5175) from esainane/forgejo:tools-of-creation into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5175
Reviewed-by: Otto <otto@codeberg.org>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 23:02:03 +00:00
Sai Nane b573e0a621 Replace create-user in help with user create
0086279 replaced most of these. This is the last reference to `create-user`,
which was replaced by `user create` in cb171db.
2024-08-30 10:11:23 +00:00
Earl Warren 293203cb64 Merge pull request 'chore(ci): Cache generated binary across jobs' (#5130) from fnetx/runner-caching into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5130
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-30 05:47:01 +00:00
Gusted 02622a48eb Merge pull request 'Update dependency djlint to v1.35.2 (forgejo)' (#5172) from renovate/forgejo-djlint-1.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5172
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 02:56:46 +00:00
Gusted c69cf81917 Merge pull request 'Update dependency @vitejs/plugin-vue to v5.1.3 (forgejo)' (#5170) from renovate/forgejo-vitejs-plugin-vue-5.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5170
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-30 02:41:43 +00:00
Gusted 9df10c5ac5
[FEAT] Only implement used API of Redis client
- Currently for the `nosql` module (which simply said provides a manager
for redis clients) returns the
[`redis.UniversalClient`](https://pkg.go.dev/github.com/redis/go-redis/v9#UniversalClient)
interface. The interfaces exposes all available commands.
- In generalm, dead code elimination should be able to take care of not
generating the machine code for methods that aren't being used. However
in this specific case, dead code elimination either is disabled or gives
up on trying because of exhaustive call stack the client by
`GetRedisClient` is used.
- Help the Go compiler by explicitly specifying which methods we use.
This reduces the binary size by ~400KB (397312 bytes). As Go no longer
generate machine code for commands that aren't being used.
- There's a **CAVEAT** with this, if a developer wants to use a new
method that isn't specified, they will have to know about this
hack (by following the definition of existing Redis methods) and add the
method definition from the Redis library to the `RedisClient` interface.
2024-08-30 04:33:15 +02:00
Renovate Bot f4f5efdea8 Update dependency djlint to v1.35.2 2024-08-30 02:04:02 +00:00
Renovate Bot 4a26254cca Update dependency @vitejs/plugin-vue to v5.1.3 2024-08-30 00:04:23 +00:00
Otto 1004ecd56b Merge pull request 'fix: WIP toggle by reducing max issue title' (#5143) from fnetx/wip-toggle-workaround into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5143
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 21:05:35 +00:00
Gusted 38076a44d7 Merge pull request 'Update module github.com/go-webauthn/webauthn to v0.11.2 (forgejo)' (#5147) from renovate/forgejo-github.com-go-webauthn-webauthn-0.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5147
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-by: Otto <otto@codeberg.org>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 20:35:23 +00:00
Gusted 738bbc5cf3 Merge pull request 'fix: arch OptDepends version check and add gzip compression' (#5121) from dragon/forgejo:bugfix-arch into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5121
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-08-29 19:21:11 +00:00
Exploding Dragon 6eb88be6e8 Merge branch 'forgejo' into bugfix-arch 2024-08-29 12:39:16 +00:00
forgejo-renovate-action 4999239cd8 Merge pull request 'Update dependency @stylistic/eslint-plugin-js to v2.6.5 (forgejo)' (#5164) from renovate/forgejo-patch-linters into forgejo 2024-08-29 11:34:53 +00:00
Renovate Bot a18b0ba973 Update dependency @stylistic/eslint-plugin-js to v2.6.5 2024-08-29 10:03:41 +00:00
Michael Kriese 91a9d479d5 Merge pull request 'chore(renovate): fix rule matching' (#5163) from viceice/forgejo:chore/renovate/automerge-dev-deps into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5163
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-29 09:14:22 +00:00
Michael Kriese ebd8c607bb Merge pull request 'Update linters (forgejo)' (#5155) from renovate/forgejo-linters into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5155
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 08:31:45 +00:00
Michael Kriese b54f15cf8d
chore(renovate): fix rule matching 2024-08-29 10:17:53 +02:00
Gusted 63736e8301
[FEAT] Add support for webauthn credential level 3
- For WebAuthn Credential level 3, the `backup_eligible` and
`backup_state` flags are checked if they are consistent with the values
given on login. Forgejo never stored this data, so add a database
migration that makes all webauthn credentials 'legacy' and on the next
first use capture the values of `backup_eligible` and `backup_state`.
As suggested in https://github.com/go-webauthn/webauthn/discussions/219#discussioncomment-10429662
- Adds unit tests.
- Add E2E test.
2024-08-29 10:05:03 +02:00
Renovate Bot 28c3f1e254
Update module github.com/go-webauthn/webauthn to v0.11.2 2024-08-29 10:05:00 +02:00
Gusted c87655b7ff Merge pull request '[CHORE] Move cache & captcha library' (#5146) from gusted/forgejo-captcha into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5146
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-29 08:02:09 +00:00
Renovate Bot d0ec8d574e Update linters 2024-08-29 07:24:19 +00:00
Michael Kriese 6c69b5da03 Merge pull request 'Update dependency djlint to v1.34.2 (forgejo)' (#5154) from renovate/forgejo-djlint-1.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5154
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 06:55:47 +00:00
Michael Kriese 8cda274438 Merge pull request 'Update dependency happy-dom to v15.3.1 (forgejo)' (#5156) from renovate/forgejo-happy-dom-15.x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5156
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 06:36:46 +00:00
Earl Warren cb62fa81d5 Merge pull request 'docs: add links to the v7.0.8 & v8.0.2 release notes' (#5160) from earl-warren/forgejo:wip-release-notes into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5160
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-08-29 05:08:25 +00:00
Codeberg Translate 45198cef64 i18n: update of translations from Codeberg Translate (#5070)
Translations update from [Codeberg Translate](https://translate.codeberg.org) for [Forgejo/forgejo](https://translate.codeberg.org/projects/forgejo/forgejo/).

Current translation status:

![Weblate translation status](https://translate.codeberg.org/widget/forgejo/forgejo/horizontal-auto.svg)

<!--start release-notes-assistant-->

## Draft release notes
<!--URL:https://codeberg.org/forgejo/forgejo-->
- Localization
  - [PR](https://codeberg.org/forgejo/forgejo/pulls/5070): <!--number 5070 --><!--line 0 --><!--description aTE4bjogdXBkYXRlIG9mIHRyYW5zbGF0aW9ucyBmcm9tIENvZGViZXJnIFRyYW5zbGF0ZQ==-->i18n: update of translations from Codeberg Translate<!--description-->
<!--end release-notes-assistant-->

Co-authored-by: earl-warren <earl-warren@users.noreply.translate.codeberg.org>
Co-authored-by: Xinayder <Xinayder@users.noreply.translate.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-authored-by: Kita Ikuyo <searinminecraft@courvix.com>
Co-authored-by: Fjuro <fjuro@alius.cz>
Co-authored-by: 0ko <0ko@users.noreply.translate.codeberg.org>
Co-authored-by: hugoalh <hugoalh@users.noreply.translate.codeberg.org>
Co-authored-by: Outbreak2096 <Outbreak2096@users.noreply.translate.codeberg.org>
Co-authored-by: Eryk Michalak <gnu.ewm@protonmail.com>
Co-authored-by: Caesar Schinas <caesar@caesarschinas.com>
Co-authored-by: hankskyjames777 <hankskyjames777@users.noreply.translate.codeberg.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5070
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Codeberg Translate <translate@noreply.codeberg.org>
Co-committed-by: Codeberg Translate <translate@noreply.codeberg.org>
2024-08-29 04:54:39 +00:00
Earl Warren ece6300ebd
docs: add links to the v7.0.8 & v8.0.2 release notes 2024-08-29 06:47:26 +02:00
Renovate Bot 6dbc79f161 Update dependency happy-dom to v15.3.1 2024-08-29 02:03:29 +00:00
Renovate Bot deb8039d53 Update dependency djlint to v1.34.2 2024-08-29 00:04:07 +00:00
Otto Richter 7eac5feb74 fix: WIP toggle by reducing max issue title
- when the PR title has the maximum length, the WIP toggle switch does nothing
- work around this by slightly reducing the max input size (- 10 characters for eventually long prefixes)
- test WIP toggling edge case in playwright

fix(e2e): increase timeouts

A look at recent runs suggests they should be increased globally. The timeouts in the config file have no timeout by default.
2024-08-29 01:36:58 +02:00
Exploding Dragon 95f6cb7513 Merge branch 'forgejo' into bugfix-arch 2024-08-28 10:48:33 +00:00
Gusted 06d42e6f03 Merge pull request '[SEC] Ensure propagation of API scopes for Conan and Container authentication' (#5149) from gusted/forgejo-api-scope into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5149
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-28 08:43:01 +00:00
Gusted 5a871f6095
[SEC] Ensure propagation of API scopes for Conan and Container authentication
- The Conan and Container packages use a different type of
authentication. It first authenticates via the regular way (api tokens
or user:password, handled via `auth.Basic`) and then generates a JWT
token that is used by the package software (such as Docker) to do the
action they wanted to do. This JWT token didn't properly propagate the
API scopes that the token was generated for, and thus could lead to a
'scope escalation' within the Conan and Container packages, read
access to write access.
- Store the API scope in the JWT token, so it can be propagated on
subsequent calls that uses that JWT token.
- Integration test added.
- Resolves #5128
2024-08-28 10:33:32 +02:00
Exploding Dragon 3a55604d3c Merge branch 'forgejo' into bugfix-arch 2024-08-28 00:38:10 +00:00
Gusted bf0d100b84
[CHORE] Move cache library
- This is in the spirit of #5090.
- Move to a fork of gitea.com/go-chi/cache,
code.forgejo.org/go-chi/cache. It removes unused code (a lot of
adapters, that can't be used by Forgejo) and unused dependencies (see
go.sum). Also updates existing dependencies.
8c64f1a362..main
2024-08-27 21:28:56 +02:00
Gusted 0404662e99
[CHORE] Move captcha library
- This is a fork of https://github.com/dchest/captcha, as
https://gitea.com/go-chi/captcha is a fork of
github.com/go-macaron/captcha which is a fork (although not properly
credited) of a older version of https://github.com/dchest/captcha. Hence
why I've just forked the original.
- The fork includes some QoL improvements (uses standard library for
determistic RNG instead of rolling your own crypto), and removal of
audio support (500KiB unused data that bloated the binary otherwise).
Flips the image over the x-asis.
47270f2b55..main
- This move is needed for the next commit, because
gitea.com/go-chi/captcha included the gitea.com/go-chi/cache dependency.
2024-08-27 21:28:16 +02:00
Otto 8d0530650e Merge pull request 'Remove 15 unused strings' (#5139) from 0ko/forgejo:i18n-cleanup-15x into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5139
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: Otto <otto@codeberg.org>
2024-08-27 11:06:13 +00:00
Earl Warren 9addaedaf3 Merge pull request '[gitea] week 2024-35 cherry pick (gitea/main -> forgejo)' (#5109) from algernon/wcp/2024-35 into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5109
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-08-27 06:09:19 +00:00