1
0
mirror of https://github.com/misskey-dev/misskey.git synced 2026-07-25 15:35:14 +02:00
Commit Graph

2576 Commits

Author SHA1 Message Date
syuilo
1154bb5370 wip 2026-05-23 15:54:07 +09:00
syuilo
985dd72a7f Merge branch 'develop' into room 2026-05-21 16:15:27 +09:00
anatawa12
3191f8a72d Merge commit from fork
This issue was originally reported by sururu-k as part of a series of ai slop public pull requests.
Although the original pull request was closed as ai slop, I later confirmed one described a real security issue.
2026-05-21 08:50:43 +09:00
かっこかり
e400731bbe fix(backend): fix typo [ci skip] 2026-05-20 22:44:45 +09:00
かっこかり
04f18fe919 Merge commit from fork
* fix(backend): restrict chat room / chat message permissions

* spec: モデレーター以上の権限では全てを閲覧可能
2026-05-20 22:03:53 +09:00
Julia Johannesen
6c40c96369 Merge commit from fork
* fix: Prevent timing attacks and RDF-graph rewrites

* fix: Proper vuln fix, not a bandaid

* fix: Accidental removal

* fix: Explicitly check for null

* fix: Address issues

* clean up

* lint fixes

* fix: reset pnpm-lock.yaml to current develop

---------

Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
2026-05-20 22:02:25 +09:00
renovate[bot]
408e94f41f fix(deps): update dependency ws to v8.20.1 [security] (#17430)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-20 07:46:05 +09:00
syuilo
9e9ae54c26 Update package.json 2026-05-19 16:08:43 +09:00
syuilo
1a456998bc Merge branch 'develop' into room 2026-05-18 07:21:45 +09:00
かっこかり
9410bc5194 fix: move users/notify/list to following/list (#17416)
* fix: move `users/notify/list` to `following/list`

* fix

* fix lint

* fix test

* fix test

* fix test title
2026-05-17 18:51:10 +09:00
syuilo
bee415625a Update WorldRoomService.ts 2026-05-15 09:45:52 +09:00
renovate[bot]
08c6efb044 fix(deps): update dependency sanitize-html to v2.17.4 [security] [ci skip] (#17402)
* fix(deps): update dependency sanitize-html to v2.17.4 [security]

* fix minimumReleaseAgeExclude

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
2026-05-15 09:44:57 +09:00
syuilo
d0d3aef76c Merge branch 'develop' into room 2026-05-15 09:41:51 +09:00
syuilo
62b323b58b update re2 2026-05-15 09:39:57 +09:00
syuilo
93a46ae2d6 Merge branch 'develop' into room 2026-05-15 09:39:21 +09:00
かっこかり
a3227c99ed deps: update dependencies (#17400)
* deps: Update Dependencies

* run pnpm dedupe

* update some major packages

* update to pnpm v11

* update systeminformation

* fix indent

* fix: rollback sharp to 0.33
2026-05-14 22:51:57 +09:00
syuilo
170980a0a6 Update WorldRoomService.ts 2026-05-14 21:19:35 +09:00
syuilo
216fb56a4b wip 2026-05-14 21:08:50 +09:00
syuilo
8defcd9f9f wip 2026-05-14 19:35:50 +09:00
syuilo
d38f04c97f wip 2026-05-14 19:08:36 +09:00
syuilo
b582895ac6 up 2026-05-14 17:45:40 +09:00
syuilo
ab02a99a0e wip 2026-05-14 17:19:59 +09:00
syuilo
03481322a9 wip 2026-05-14 17:10:28 +09:00
4ster1sk
6665c398d6 feat: 投稿通知設定したユーザーをリストで見ることができるように (#17385)
* feat: 投稿通知を設定したユーザーをリストで見ることができるように

* test(e2e): 投稿通知のテスト追加

* chore: 不必要なコードの削除
2026-05-12 21:34:45 +09:00
Acid Chicken
b950f905e5 perf: rsa sign on slacc (#17322)
* perf: rsa sign on slacc

* fix: missing async/await

* fix: threadPoolSize is always number

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* test(backend): init slacc in unit setup and await ap-request signing

* test(backend): move slacc init to unit testEnvironment

* test(backend): delete unused file

* docs: update CHANGELOG

* docs: fix indent

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* chore: migrate to vitest

* fix

* fix: fix changelog

* chore: regenerate lockfile

* docs: changelog

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
2026-05-12 17:36:49 +09:00
かっこかり
a09a2c2eee enhance: 絵文字データの参照を自前ライブラリに変更 (#17381)
* wip

* enhance: 絵文字データの参照を自前ライブラリに変更

* fix

* update to v17.0.2

* fix assets handling

* fix

* update mfm-js

* update emoji library

* Update COPYING [ci skip]

* Update Changelog

* Update Changelog

* fix: 端末の絵文字にフォールバックできるように
2026-05-09 18:35:38 +09:00
Wonwoo Choi
35711fc8e1 fix(backend): Acquire lock of Announce object in announceNote even if it is from a relay actor (#17356)
fix(backend): Always acquire lock of Announce object in announceNote
2026-05-03 21:03:25 +09:00
かっこかり
45f140aa86 deps: Update dependencies [ci skip] (#17368)
* update deps

* update deps

* rollback got to v14

* Revert "rollback got to v14"

This reverts commit 780abdf7b6.

* rollback rolldown to v1.0.0-rc.15
2026-05-03 18:24:53 +09:00
renovate[bot]
22ce7b58ca chore(deps): update [docker] update dependencies [ci skip] (#17369)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-03 18:22:37 +09:00
かっこかり
723d8add2f refactor: パスキーまわりのライブラリを更新 (#17354)
* refactor: パスキーまわりのライブラリを更新

* fix
2026-05-03 17:16:06 +09:00
Copilot
37412f0e1b enhance: Add canCreateChannel role policy (#17121)
* Initial plan

* Add canCreateChannel role policy to control channel creation

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

* Add canCreateChannel to getUserPolicies return value

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

* Add canCreateChannel translations for en-US and ja-JP

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

* Add canCreateChannel to misskey-js rolePolicies array

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

* Add frontend UI for canCreateChannel policy configuration

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

* fix: build autogen files

* 🎨

* migrate

* fix: unnecessary changes to non-Japanese locales

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
2026-05-03 17:10:17 +09:00
かっこかり
39032c4b1b fix: update summaly (#17355)
* fix: update summaly

* Update Changelog
2026-05-03 15:48:22 +09:00
かっこかり
f5a3d8996d fix(backend): 公開範囲がフォロワーの投稿が通知されない問題を修正 (#17363)
* fix(backend): 公開範囲がフォロワーの投稿が通知されない問題を修正

* Udpate Changelog
2026-05-03 15:43:39 +09:00
mq1
6229ac365e fix(backend): ULID使用時にnotificationTimelineへのXADDが失敗し続け、通知が約10秒遅延する問題を修正 (#17358) 2026-05-02 20:23:10 +09:00
かっこかり
93bd9d551d fix: review fixes for v2026.5.0 release (#17350)
* fix/perf: NotificationManager in NoteCreateService

* fix: treat skip as successful return in InboxProcessorService

* chore: remove comment

* fix: simplify ReactionPicker/EmojiPicker by importing components directly

* refactor: move filename parsing to setup in MkUploaderItems

* refactor
2026-05-02 10:03:34 +09:00
かっこかり
b45f18cd14 fix(backend): ノート通知で公開範囲を考慮するように (#17335)
* fix(backend): ノート通知で公開範囲を考慮するように

* refactor: remove unused imports

* Update Changelog

* Update Changelog

* fix: フォロワー限定ノートは通知

---------

Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com>
2026-04-27 10:26:13 +09:00
かっこかり
0f5da63328 fix(backend): ブロックしたインスタンスのInboxジョブが蓄積し続ける問題を修正 (#17336)
* fix(backend): ブロックしたインスタンスのInboxジョブが蓄積し続ける問題を修正

* refactor

* Upddate changelog

---------

Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2026-04-26 11:40:55 +09:00
Evan Prodromou
23715c649c fix: change bare activity.actor to getApId(activity.actor) in InboxPr… (#17340)
* fix: change bare activity.actor to getApId(activity.actor) in InboxProcessorService (closes #17338)

* doc: update CHANGELOG.md to note fix for #17338

* fix: additional activity.actor wrappers in ApInboxService

* Update CHANGELOG.md

---------

Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2026-04-26 11:39:16 +09:00
かっこかり
1dc5c60b2b fix(backend): meilisearchを使用していない場合のnoteSearchableScopeの値が誤っている問題を修正 (#17341)
* fix(backend): meilisearchを使用していない場合のnoteSearchableScopeの値が誤っている問題を修正

* Update Changelog
2026-04-26 11:37:26 +09:00
かっこかり
3a3057a1b1 fix(backend): RoleService.getAdministratorIds でユーザーIDが重複する問題を修正 (#17334)
* fix(backend): adminロールが複数付いてても通知が重複しないように

* add tests

* Update Changelog

* ✌️

Co-Authored-by: lqvp <183242690+lqvp@users.noreply.github.com>

---------

Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com>
2026-04-24 17:56:52 +09:00
かっこかり
bda98ba1d9 deps: update security dependencies (#17330)
* deps: update security dependencies

* deps: update some major dependencies

* attempt to fix tsconfig

* attempt to fix tsconfig

* attempt to fix tsconfig

* fix build
2026-04-22 11:46:45 +09:00
かっこかり
6d15fe32d0 enhance(backend/test): Migrate tests to vitest (#16935)
* wip

* update fake-timers and migrate

* fix

* remove jest-mock

* fix

* fix

* fix

* fix

* attempt to fix unit tests

* attempt to fix e2e tests

* fix federation test [ci skip]

* attempt to fix e2e tests

* fix typecheck

* fix unit tests

* fix

* attempt to fix e2e

* fix

* Revert "attempt to fix e2e"

This reverts commit b7b7b05d85.

* attempt to fix e2e

* revert attempt to fix e2e

* update deps

* update vitest

* migrate

* attempt to fix e2e

* update

* fix

* remove vite swc plugin as oxc parser can handle decorators

* attempt to fix drive/files/create test

* Revert "attempt to fix drive/files/create test"

This reverts commit 4715153375.

* fix: エンドポイントにまつわるテストをunitからe2eに移動

* attempt to fix e2e

* remove swc

* attempt to fix e2e

* Revert "attempt to fix e2e"

This reverts commit 9fb86a4076.

* add logs for debug

* attempt to fix e2e

* Partially revert "attempt to fix e2e"

This reverts commit fb0008c85a.

* attempt to fix test

* fix: attempt to fix test

* Revert "fix: attempt to fix test"

This reverts commit ed2f5c40e8.

* Revert "attempt to fix test"

This reverts commit d7329c46f1.

* attempt to fix e2e

* fix: surpass eventemitter warning by increasing defaultMaxListeners

* attempt to fix e2e

* fix

* fix e2e not ending properly

* exp: add hanging-process reporter for investigation

* Revert "exp: add hanging-process reporter for investigation"

This reverts commit 26851f8282.

* update changelog
2026-04-20 14:57:29 +09:00
かっこかり
c640aeb27a deps: update security dependencies (#17318) 2026-04-16 16:32:17 +09:00
かっこかり
0be3142d54 fix(backend): devサーバーの起動に失敗することがある問題を修正 (#17317)
* fix(backend): devサーバーの起動に失敗することがある問題を修正?

* fix
2026-04-16 14:33:36 +09:00
かっこかり
37bfcb604f enhance(backend): bundle backend using Rolldown (#17068)
* enhance(backend): bundle backend using rolldown

* fix

* fix [ci skip]

* remove unused build script

* fix

* enhance: 起動からlistenまでかかる時間を減らす (MisskeyIO#1410)

* ✌️

* fix

* update rolldown

* fix(backend): extract static error classes to avoid rolldown design:paramtypes omission

* update rolldown

* Revert "fix(backend): extract static error classes to avoid rolldown design:paramtypes omission"

This reverts commit e2243c9dc3.

* fix

* perf: avoid generating sourcemap in production

* fix

* fix

* fix

* fix paths

* fix

* fix

* fix

* fix

* fix

* enhance: バックエンドの開発サーバー制御をrolldown側で行うように

* remove nodemon

* Update Changelog

* tweak config

* fix

* fix

* fix

* clean up

---------

Co-authored-by: あわわわとーにゅ <17376330+u1-liquid@users.noreply.github.com>
Co-authored-by: bab <mashirohira@gmail.com>
2026-04-16 12:44:50 +09:00
Jaehong Kang
277a1ef31f fix(backend): handle relay-delivered Announce activities correctly (#17308)
* fix(backend): handle relay-delivered Announce activities correctly

Relay Announce activities now use the target note URI instead of the
Announce URI for federation allowlist checks, dedup locking, and
existence lookups. Notes delivered via relay are published directly to
the notes stream without creating a renote.

Closes #11056

* Update packages/backend/src/core/RelayService.ts

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

---------

Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2026-04-15 23:05:36 +09:00
るちーか
360e805638 enhance: アバターデコレーションへのカテゴリの導入 (#17034)
* feat(backend): AvatarDecorationにcategoryを追加し、関連APIのプロパティ・戻り値にも反映

* feat(frontend): アバターデコレーションのカテゴリ設定機能

* chore(frontend): 管理画面とユーザー側の画面で、アバターデコレーションのグループ化のコードをある程度統一

* CHANGELOGを更新

* fix: group-avatar-decorations.tsを使用するよう修正

* chore: コーディング規約への準拠

* 型エラーを解消
2026-04-15 20:29:17 +09:00
Copilot
12e590a63f fix(backend): Prevent retry of inbox jobs with role-based validation errors (#17167)
* Initial plan

* Handle too many mentions error in inbox without retry

Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
2026-04-15 11:39:49 +09:00
かっこかり
a5b1f839ac fix(backend): fix flaky e2e test on recursive drive folder check (#17311) 2026-04-15 11:38:38 +09:00
かっこかり
d7ceaa9c88 fix(backend): attempt to fix flaky e2e test on home timeline streaming (#17312) 2026-04-15 11:37:20 +09:00