SASAPIYO (SASAGAWA Kiyoshi)
ae5d2d40d7
fix(backend): skip inbox activities without an actor instead of throwing TypeError ( #17558 )
...
* fix(backend): skip inbox activities without an actor instead of throwing TypeError
- guard getApId() against null/undefined (and fix the 'detemine' typo)
- skip actor-less inbox activities early with Bull.UnrecoverableError
Fixes #17557
* fix(backend): reject actor-less inbox activities at enqueue time
Per review feedback (#17558 ), move the actor presence check to the inbox
HTTP handler and drop the processor-side guard.
- ActivityPubServerService.inbox(): validate the request body from the
loose (unknown) type and return 400 for structurally invalid activities
(non-object / missing actor) instead of enqueueing a job that can never
be authenticated. Avoids useless retries and TypeError noise.
- InboxProcessorService.process(): remove the actor null guard; IActivity.actor
is non-null, so the check is unnecessary once enqueue is validated.
- getApId(): widen the parameter to include undefined so the existing null
guard is type-honest (getOneApId can pass value[0] of an empty array).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-19 15:00:17 +09:00
かっこかり
420d1f0f95
fix(backend): リモートのノートのメンション数制限が実際に解決できたユーザー数になっている問題を修正 ( #17576 )
...
* fix(backend): リモートのノートのメンション数制限が実際に解決できたユーザー数になっている問題を修正
* Update Changelog
2026-06-18 20:35:16 +09:00
かっこかり
d7c11a61c5
fix(backend/oauth2): Token Grantエンドポイントのバリデーションを修正 ( #17580 )
2026-06-18 18:40:37 +09:00
Caleb Gates
b125ce1eb2
fix(backend): route fastify listen/ready/close errors through logger instead of unhandled rejection ( #17401 )
...
* fix(backend): route fastify listen/ready/close errors through logger instead of unhandled rejection
* Update CHANGELOG.md
---------
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-06-14 16:54:29 +09:00
Copilot
ec6b1cc6a8
Enhance ActivityPub image attachments with width/height metadata ( #17563 )
...
* Initial plan
* enhance(backend): include image dimensions in AP attachments
* fix(backend): guard AP attachment dimension properties
* fix(changelog): move AP dimensions note to 2026.6.0
* Update CHANGELOG.md
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-06-12 20:47:12 +09:00
おさむのひと
e093b32aa9
fix(backend): MemoryKVCacheのキャッシュGC処理においてキャッシュが期限切れにならないことがある問題を修正 ( #17512 )
...
* fix(backend): MemoryKVCacheのキャッシュGC処理においてキャッシュが期限切れにならないことがある問題を修正
* おためし
* fix
---------
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-06-11 20:03:38 +09:00
かっこかり
81b182460e
deps: update dependencies ( #17477 )
...
* deps: update dependencies
* fix archiver types not updated
* spdx
* update archiver types
* update deps
* fix test
2026-06-07 17:25:43 +09:00
anatawa12
a75f3adc36
fix: we cannot look up user profile url with self hostname ( #16488 )
2026-06-05 13:51:38 +09:00
SASAPIYO (SASAGAWA Kiyoshi)
3246dad53e
fix(chart): PerUserDriveChart.update で userId が null のシステム所有ファイルをスキップ ( #17499 )
...
fix(chart): PerUserDriveChart.update で userId が null のシステム所有ファイルをスキップ (#17498 )
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-06-04 10:28:26 +09:00
かっこかり
e50603e30b
fix: サーバー全体のアップロードサイズ上限とロールポリシーのアップロードサイズ上限に関する修正 ( #17389 )
...
* fix(backend): ロールポリシーのファイルサイズ制限の上限値をサーバー全体のファイルサイズ制限にする
* fix(frontend): サーバー全体のファイルサイズ制限に関する説明を追加
* fix: ベースロールしか与えられていないときにaggregateが走らない問題を修正
今までは問題なかったけど、maxFIleSizeMbで上限capするようになったため
2026-06-03 09:12:56 +09:00
おさむのひと
eed6c3654f
fix: コンパネからパスワードリセットした時に発生したエラーをダイアログで出す ( #17513 )
...
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-06-03 09:04:08 +09:00
Kisaragi
f17c93ec3b
fix: フォロワー投稿をダイレクトで引用したときにダイレクトにする ( #15961 )
...
Co-authored-by: Sayamame-beans <61457993+Sayamame-beans@users.noreply.github.com >
2026-05-31 18:08:38 +09:00
おさむのひと
863046ba8c
feat: 投稿日時の範囲を条件に加えてノート検索出来るようにする ( #16119 )
...
* feat: 投稿日時の範囲を条件に加えてノート検索出来るようにする
* simplify
* fix ui
* fix CHANGELOG.md
* fix
* fix
* add test
---------
Co-authored-by: Sayamame-beans <61457993+Sayamame-beans@users.noreply.github.com >
2026-05-30 19:05:31 +09:00
おさむのひと
2b016d670f
feat(backend): add indexes for noteId in note_favorite and user_note_pining tables ( #17511 )
...
* feat(backend): add indexes for noteId in note_favorite and user_note_pining tables
* reformat
2026-05-30 12:35:01 +09:00
かっこかり
d74b6462a8
fix(backend): follow-up of #17415 ( #17505 )
...
* fix(backend): follow-up of #17415
* fix
2026-05-29 20:39:58 +09:00
かっこかり
623700119c
enhance(backend/oauth2): oauth2orizeを削除 ( #17415 )
...
* wip
* fix
* fix tests
* fix: missing spec implementation
* fix test
* attempt to fix test
* fix
* Revert "fix: missing spec implementation"
This reverts commit ca5dc65b67 .
* update
2026-05-29 08:10:56 +09:00
おさむのひと
89ae64b077
feat: アンテナから特定のノートを手動で除去できるように ( #17463 )
...
* feat: アンテナから特定のノートを手動で除去できるように
* fix review
* regenerate
2026-05-28 21:27:07 +09:00
おさむのひと
9f2e806c20
feat: 管理画面のジョブキューページにresume/pauseボタンを用意 ( #17436 )
...
* feat: 管理画面のジョブキューページにresume/pauseボタンを用意
* fix review
2026-05-22 16:20:53 +09:00
かっこかり
43534d6213
deps(backend): update typeorm to v1 ( #17476 )
...
* deps(backend): update typeorm to v1
* fix
* fix
* attempt to fix test (to be reverted))
* Revert "attempt to fix test (to be reverted))"
This reverts commit 8adf2a1239 .
* attempt to fix test
* Revert "attempt to fix test"
This reverts commit 4cf0f5ec9e .
* attempt to fix test
* fix
* fix
2026-05-22 14:27:34 +09:00
おさむのひと
e7430057e6
fix(backend): 削除対象ノート検索処理の一部クエリを簡略化 ( #17422 )
...
* fix: update related tests
* fix CHANGELOG.md
* Update CHANGELOG.md
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com >
---------
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com >
2026-05-21 22:00:18 +09:00
anatawa12
3191f8a72d
Merge commit from fork
...
This issue was originally reported by sururu-k as part of a series of ai slop public pull requests.
Although the original pull request was closed as ai slop, I later confirmed one described a real security issue.
2026-05-21 08:50:43 +09:00
かっこかり
e400731bbe
fix(backend): fix typo [ci skip]
2026-05-20 22:44:45 +09:00
かっこかり
04f18fe919
Merge commit from fork
...
* fix(backend): restrict chat room / chat message permissions
* spec: モデレーター以上の権限では全てを閲覧可能
2026-05-20 22:03:53 +09:00
Julia Johannesen
6c40c96369
Merge commit from fork
...
* fix: Prevent timing attacks and RDF-graph rewrites
* fix: Proper vuln fix, not a bandaid
* fix: Accidental removal
* fix: Explicitly check for null
* fix: Address issues
* clean up
* lint fixes
* fix: reset pnpm-lock.yaml to current develop
---------
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com >
2026-05-20 22:02:25 +09:00
かっこかり
9410bc5194
fix: move users/notify/list to following/list ( #17416 )
...
* fix: move `users/notify/list` to `following/list`
* fix
* fix lint
* fix test
* fix test
* fix test title
2026-05-17 18:51:10 +09:00
4ster1sk
6665c398d6
feat: 投稿通知設定したユーザーをリストで見ることができるように ( #17385 )
...
* feat: 投稿通知を設定したユーザーをリストで見ることができるように
* test(e2e): 投稿通知のテスト追加
* chore: 不必要なコードの削除
2026-05-12 21:34:45 +09:00
Acid Chicken
b950f905e5
perf: rsa sign on slacc ( #17322 )
...
* perf: rsa sign on slacc
* fix: missing async/await
* fix: threadPoolSize is always number
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* test(backend): init slacc in unit setup and await ap-request signing
* test(backend): move slacc init to unit testEnvironment
* test(backend): delete unused file
* docs: update CHANGELOG
* docs: fix indent
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* chore: migrate to vitest
* fix
* fix: fix changelog
* chore: regenerate lockfile
* docs: changelog
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com >
2026-05-12 17:36:49 +09:00
かっこかり
a09a2c2eee
enhance: 絵文字データの参照を自前ライブラリに変更 ( #17381 )
...
* wip
* enhance: 絵文字データの参照を自前ライブラリに変更
* fix
* update to v17.0.2
* fix assets handling
* fix
* update mfm-js
* update emoji library
* Update COPYING [ci skip]
* Update Changelog
* Update Changelog
* fix: 端末の絵文字にフォールバックできるように
2026-05-09 18:35:38 +09:00
Wonwoo Choi
35711fc8e1
fix(backend): Acquire lock of Announce object in announceNote even if it is from a relay actor ( #17356 )
...
fix(backend): Always acquire lock of Announce object in announceNote
2026-05-03 21:03:25 +09:00
かっこかり
723d8add2f
refactor: パスキーまわりのライブラリを更新 ( #17354 )
...
* refactor: パスキーまわりのライブラリを更新
* fix
2026-05-03 17:16:06 +09:00
Copilot
37412f0e1b
enhance: Add canCreateChannel role policy ( #17121 )
...
* Initial plan
* Add canCreateChannel role policy to control channel creation
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
* Add canCreateChannel to getUserPolicies return value
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
* Add canCreateChannel translations for en-US and ja-JP
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
* Add canCreateChannel to misskey-js rolePolicies array
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
* Add frontend UI for canCreateChannel policy configuration
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
* fix: build autogen files
* 🎨
* migrate
* fix: unnecessary changes to non-Japanese locales
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com >
2026-05-03 17:10:17 +09:00
かっこかり
39032c4b1b
fix: update summaly ( #17355 )
...
* fix: update summaly
* Update Changelog
2026-05-03 15:48:22 +09:00
かっこかり
f5a3d8996d
fix(backend): 公開範囲がフォロワーの投稿が通知されない問題を修正 ( #17363 )
...
* fix(backend): 公開範囲がフォロワーの投稿が通知されない問題を修正
* Udpate Changelog
2026-05-03 15:43:39 +09:00
mq1
6229ac365e
fix(backend): ULID使用時にnotificationTimelineへのXADDが失敗し続け、通知が約10秒遅延する問題を修正 ( #17358 )
2026-05-02 20:23:10 +09:00
かっこかり
93bd9d551d
fix: review fixes for v2026.5.0 release ( #17350 )
...
* fix/perf: NotificationManager in NoteCreateService
* fix: treat skip as successful return in InboxProcessorService
* chore: remove comment
* fix: simplify ReactionPicker/EmojiPicker by importing components directly
* refactor: move filename parsing to setup in MkUploaderItems
* refactor
2026-05-02 10:03:34 +09:00
かっこかり
b45f18cd14
fix(backend): ノート通知で公開範囲を考慮するように ( #17335 )
...
* fix(backend): ノート通知で公開範囲を考慮するように
* refactor: remove unused imports
* Update Changelog
* Update Changelog
* fix: フォロワー限定ノートは通知
---------
Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com >
2026-04-27 10:26:13 +09:00
かっこかり
0f5da63328
fix(backend): ブロックしたインスタンスのInboxジョブが蓄積し続ける問題を修正 ( #17336 )
...
* fix(backend): ブロックしたインスタンスのInboxジョブが蓄積し続ける問題を修正
* refactor
* Upddate changelog
---------
Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-04-26 11:40:55 +09:00
Evan Prodromou
23715c649c
fix: change bare activity.actor to getApId(activity.actor) in InboxPr… ( #17340 )
...
* fix: change bare activity.actor to getApId(activity.actor) in InboxProcessorService (closes #17338 )
* doc: update CHANGELOG.md to note fix for #17338
* fix: additional activity.actor wrappers in ApInboxService
* Update CHANGELOG.md
---------
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-04-26 11:39:16 +09:00
かっこかり
1dc5c60b2b
fix(backend): meilisearchを使用していない場合のnoteSearchableScopeの値が誤っている問題を修正 ( #17341 )
...
* fix(backend): meilisearchを使用していない場合のnoteSearchableScopeの値が誤っている問題を修正
* Update Changelog
2026-04-26 11:37:26 +09:00
かっこかり
3a3057a1b1
fix(backend): RoleService.getAdministratorIds でユーザーIDが重複する問題を修正 ( #17334 )
...
* fix(backend): adminロールが複数付いてても通知が重複しないように
* add tests
* Update Changelog
* ✌️
Co-Authored-by: lqvp <183242690+lqvp@users.noreply.github.com >
---------
Co-authored-by: lqvp <183242690+lqvp@users.noreply.github.com >
2026-04-24 17:56:52 +09:00
かっこかり
6d15fe32d0
enhance(backend/test): Migrate tests to vitest ( #16935 )
...
* wip
* update fake-timers and migrate
* fix
* remove jest-mock
* fix
* fix
* fix
* fix
* attempt to fix unit tests
* attempt to fix e2e tests
* fix federation test [ci skip]
* attempt to fix e2e tests
* fix typecheck
* fix unit tests
* fix
* attempt to fix e2e
* fix
* Revert "attempt to fix e2e"
This reverts commit b7b7b05d85 .
* attempt to fix e2e
* revert attempt to fix e2e
* update deps
* update vitest
* migrate
* attempt to fix e2e
* update
* fix
* remove vite swc plugin as oxc parser can handle decorators
* attempt to fix drive/files/create test
* Revert "attempt to fix drive/files/create test"
This reverts commit 4715153375 .
* fix: エンドポイントにまつわるテストをunitからe2eに移動
* attempt to fix e2e
* remove swc
* attempt to fix e2e
* Revert "attempt to fix e2e"
This reverts commit 9fb86a4076 .
* add logs for debug
* attempt to fix e2e
* Partially revert "attempt to fix e2e"
This reverts commit fb0008c85a .
* attempt to fix test
* fix: attempt to fix test
* Revert "fix: attempt to fix test"
This reverts commit ed2f5c40e8 .
* Revert "attempt to fix test"
This reverts commit d7329c46f1 .
* attempt to fix e2e
* fix: surpass eventemitter warning by increasing defaultMaxListeners
* attempt to fix e2e
* fix
* fix e2e not ending properly
* exp: add hanging-process reporter for investigation
* Revert "exp: add hanging-process reporter for investigation"
This reverts commit 26851f8282 .
* update changelog
2026-04-20 14:57:29 +09:00
かっこかり
37bfcb604f
enhance(backend): bundle backend using Rolldown ( #17068 )
...
* enhance(backend): bundle backend using rolldown
* fix
* fix [ci skip]
* remove unused build script
* fix
* enhance: 起動からlistenまでかかる時間を減らす (MisskeyIO#1410)
* ✌️
* fix
* update rolldown
* fix(backend): extract static error classes to avoid rolldown design:paramtypes omission
* update rolldown
* Revert "fix(backend): extract static error classes to avoid rolldown design:paramtypes omission"
This reverts commit e2243c9dc3 .
* fix
* perf: avoid generating sourcemap in production
* fix
* fix
* fix
* fix paths
* fix
* fix
* fix
* fix
* fix
* enhance: バックエンドの開発サーバー制御をrolldown側で行うように
* remove nodemon
* Update Changelog
* tweak config
* fix
* fix
* fix
* clean up
---------
Co-authored-by: あわわわとーにゅ <17376330+u1-liquid@users.noreply.github.com >
Co-authored-by: bab <mashirohira@gmail.com >
2026-04-16 12:44:50 +09:00
Jaehong Kang
277a1ef31f
fix(backend): handle relay-delivered Announce activities correctly ( #17308 )
...
* fix(backend): handle relay-delivered Announce activities correctly
Relay Announce activities now use the target note URI instead of the
Announce URI for federation allowlist checks, dedup locking, and
existence lookups. Notes delivered via relay are published directly to
the notes stream without creating a renote.
Closes #11056
* Update packages/backend/src/core/RelayService.ts
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
---------
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-04-15 23:05:36 +09:00
るちーか
360e805638
enhance: アバターデコレーションへのカテゴリの導入 ( #17034 )
...
* feat(backend): AvatarDecorationにcategoryを追加し、関連APIのプロパティ・戻り値にも反映
* feat(frontend): アバターデコレーションのカテゴリ設定機能
* chore(frontend): 管理画面とユーザー側の画面で、アバターデコレーションのグループ化のコードをある程度統一
* CHANGELOGを更新
* fix: group-avatar-decorations.tsを使用するよう修正
* chore: コーディング規約への準拠
* 型エラーを解消
2026-04-15 20:29:17 +09:00
Copilot
12e590a63f
fix(backend): Prevent retry of inbox jobs with role-based validation errors ( #17167 )
...
* Initial plan
* Handle too many mentions error in inbox without retry
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com >
2026-04-15 11:39:49 +09:00
かっこかり
a5b1f839ac
fix(backend): fix flaky e2e test on recursive drive folder check ( #17311 )
2026-04-15 11:38:38 +09:00
かっこかり
55b0fbd172
fix(backend): robots.txtで返却する内容の調整 ( #17165 )
...
* fix(backend): robots.txtで返却する内容の調整
* Update Changelog
* fix: add paths
* Update Changleog
2026-04-15 09:56:07 +09:00
mq1
5dc508346c
fix(backend): ULIDを正しく処理できない問題を修正 ( #17310 )
...
fix(backend): fix parseUlidFull to correctly handle Crockford Base32 chars W/X/Y/Z
2026-04-15 09:02:43 +09:00
かっこかり
4d6256e91d
deps: Update dependencies ( #17304 )
...
* update deps
* update dependencies (major)
* fix: migrate meilisearch
* fix: migrate color-convert types
* fix cypress?
* rollback ts v5 as it is not supported by cypress
* fix fake-timers
2026-04-12 00:57:16 +09:00
かっこかり
29cecd750f
fix(backend): 存在しないActorに対するDeleteアクティビティは無視するように ( #17294 )
...
* fix(backend): 存在しないActorに対するDeleteアクティビティは無視するように
* Update Changelog
* fix
* Revert "fix"
This reverts commit 985feea326 .
* fix?
* fix
* fix
* fix
* fix
* refactor: remove unused imports
* fix
* Update CHANGELOG.md [ci skip]
2026-04-11 14:45:11 +09:00