Lain Soykaf <lain@lain.com> committed rPUBE524f67741eed: Sec: Update bandit to version 1.14.1.

Lain Soykaf <lain@lain.com> committed rPUBE385af2a4d16f: Sec: Update jose to version 1.11.13.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBE95e210646b55: Merge pull request 'Sec: Update bandit to 1.14.1 and jose to 1.11.13' (#8037)….

Lain Soykaf <lain@lain.com> committed rPUBEf57e97bf18a2: feat(signature): add a freshness and coverage policy for incoming signatures.

Lain Soykaf <lain@lain.com> committed rPUBEe5481b4c2849: fix(federation): enforce the signature policy on incoming requests.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEca4402892801: Merge pull request 'Federation: reject stale and incomplete HTTP signatures'….

Lain Soykaf <lain@lain.com> committed rPUBEe417cd13830e: test(signature): build test signatures with sigils for credo.

Lain Soykaf <lain@lain.com> committed rPUBEf26a760f86b9: ci: fetch only the target branch tip trees in check-changelog.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEa17da1a43156: Merge pull request 'CI: make the changelog check fetch only the target branch….

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEa9bea940a40a: Merge pull request 'Search: set gin_fuzzy_search_limit only for search queries'….

Lain Soykaf <lain@lain.com> committed rPUBEfa8541309c7f: fix(search): set gin_fuzzy_search_limit only for search queries.

Lain Soykaf <lain@lain.com> committed rPUBE1c8c6048ded1: fix(http): treat an empty proxy_url as no proxy.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBE24038667b21e: Merge pull request 'fix(http): treat an empty proxy_url as no proxy' (#8010)….

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEdca6c0763152: Merge pull request 'Federation: always prefer the shared inbox' (#8029) from….

Lain Soykaf <lain@lain.com> committed rPUBE5a5f4794d3ef: perf(federation): always prefer the shared inbox.

Lain Soykaf <lain@lain.com> committed rPUBE3890fbc1277d: feat(api): add the Mastodon quote entity to statuses.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEa019cb7466b3: Merge pull request 'Mastodon API: add the quote entity to statuses' (#8035)….

Lain Soykaf <lain@lain.com> committed rPUBE695dd340dec2: fix(federation): reject actors that point at other hosts.

Lain Soykaf <lain@lain.com> committed rPUBE20354e0aeeee: fix(fetcher): require fetched documents to have the fetched id.

Lain Soykaf <lain@lain.com> committed rPUBEf1337d815933: fix(fetcher): keep id and author fixed when refetching objects.

Lain Soykaf <lain@lain.com> committed rPUBEf22caeff530b: fix(user): update the known user when fetched from a display URL.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEecd20c758727: Merge pull request 'Federation: validate actor hosts and fetched object ids'….

Lain Soykaf <lain@lain.com> committed rPUBE90e330e5b375: fix(containment): return nil for actor shapes without an id.

Lain Soykaf <lain@lain.com> committed rPUBEc81b1261dc93: fix(federation): treat empty actor fields as missing.

Lain Soykaf <lain@lain.com> committed rPUBE0006a478bb03: chore: add changelog entry for network-path media proxy fix.

Lain Soykaf <lain@lain.com> committed rPUBE5cd6894a66aa: mediaproxy: proxy network-path references (authored by Oneric <oneric@oneric.stub>).

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBE24738790c3b6: Merge pull request 'MediaProxy: proxy network-path URLs (//host/path)' (#8027)….

tusooa requested review of D377: Allow playing video in media viewer.

Phantasm <phantasm@centrum.cz> committed rPUBEf660242f4d11: changelog.

Phantasm <phantasm@centrum.cz> committed rPUBEdf9e9c5be97e: Docs Gentoo OTP: Fix wrong permissions on Pleroma config (unreadable).

Phantasm <phantasm@centrum.cz> committed rPUBE950657d75b6e: Docs OTP Gentoo: Drop shell language marker.

Lain Soykaf <lain@lain.com> committed rPUBE9443aba06cee: api/view: handle explicitly zero dimensions in attachments (authored by Oneric <oneric@oneric.stub>).

Lain Soykaf <lain@lain.com> committed rPUBE283035ad4f9d: test(status_view): cover attachments with zero dimensions.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEd54ff52691d7: Merge pull request 'StatusView: handle attachments with zero width or height'….

Lain Soykaf <lain@lain.com> committed rPUBEf5898ab0fb25: Fix malformed is_active qualifiers in User.Query usages (authored by Oneric <oneric@oneric.stub>).

Lain Soykaf <lain@lain.com> committed rPUBE555d93bc33aa: fix(user): use deactivated: false for familiar followers.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBE7ccdd4713498: Merge pull request 'User: stop passing the ignored is_active key to User.Query'….

Lain Soykaf <lain@lain.com> committed rPUBEa76633567942: fix(federation): do not deliver to instances rejected by SimplePolicy.

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBEc2bdfb6a3475: Merge pull request 'Federation: do not deliver to instances rejected by….

lain <lambadalambda@noreply.git.pleroma.social> committed rPUBE9d2c8d384e55: Merge branch 'develop' into fix/federation-reject-instances.