Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEeeed051a0f60: Fix detection of user follower collection being private (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE825ae46bfaba: Set Logger level to error (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE3c54f407c568: Conslidate log messages for object fetcher failures and leverage Logger.metadata (authored by Mark Felder <feld@feld.me>).

Restricted Repository Identity added a reverting change for rPUBEd472bafec19c: Mark instances as unreachable when returning a 403 from an object fetch: rPUBE30d63aaa6e55: Revert "Mark instances as unreachable when returning a 403 from an object fetch".

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe2b04fac5a9e: Skip remote fetch jobs for unreachable instances (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE4c29366fe503: Mark instances as unreachable when returning a 403 from an object fetch (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE132036f951ca: Cancel remote fetch jobs for deleted objects (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE4ff22a409a4f: Consolidate the HTTP status code checking into the private get_object/1 (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE160d113b3036: Changelogs (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE6d368808d31b: Remove mistaken duplicate fetch (authored by Mark Felder <feld@feld.me>).

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEf8a53fbe2f9c: bump dependencies.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe36c0f96fcb8: Merge pull request 'Add docker override file to docs and gitignore' (#621) from….

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEd910e8d7d135: Add test suite for elixir1.16.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEc241b5b09f46: Remove Fetcher.fetch_object_from_id!/2 (authored by Mark Felder <feld@feld.me>).

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE6f3c955aa0c5: Merge pull request 'elixir1.16 testing' (#742) from elixir1.16 into develop.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEac4cc619eae8: Fix Transmogrifier tests (authored by Mark Felder <feld@feld.me>).

Norm <normandy@biribiri.dev> committed rPUBE0cb3812ac03c: Add docker override file to docs and gitignore.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE4887df12d7cc: Merge pull request 'Allow for url to be a list' (#718) from helge/akkoma….

Oneric <oneric@oneric.stub> committed rPUBEfae0a14ee837: Use standard-compliant Accept header when fetching.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE024ffadd80ed: Merge pull request 'Don't list old accounts as aliases in WebFinger' (#713)….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE464db9ea0bf5: Don't list old accounts as aliases in WebFinger.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEdf25d86999cd: Cleaned up FEP-fffd commits a bit.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe2e4f53585e6: Merge pull request 'Use standard-compliant Accept header when fetching' (#740)….

Helge <helge.krueger@gmail.com> committed rPUBE5d89e0c9172b: Allow for url to be a list.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe6ca2b4d2a67: Merge pull request 'Fix array-less EmojiReacts' (#739) from Oneric/akkoma:tag….

Oneric <oneric@oneric.stub> committed rPUBEdebd68641889: Add tests for our own custom emoji format.

Oneric <oneric@oneric.stub> committed rPUBE462225880ab6: Accept EmojiReacts with non-array tag.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE6ba80aaff589: Merge pull request 'Check if data is visible before embedding it in OG tags'….

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE05f8179d0819: check if data is visible before embedding it in OG tags.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE8e6017746639: Merge pull request 'MRF.InlineQuotePolicy: Add link to post URL, not ID' (#733)….

Oneric <oneric@oneric.stub> committed rPUBEfc95519dbfdf: Allow fetching over IPv6.

Oneric <oneric@oneric.stub> committed rPUBEd7c8e9df272a: static-fe: don’t squeeze non-square avatars.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE090a77d1af18: Merge pull request 'static-fe: don’t squeeze non-square images' (#705) from….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE75d9e2b37514: MRF.InlineQuotePolicy: Add link to post URL, not ID.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE1135935cbe66: Merge remote-tracking branch 'oneric/ipv6' into develop.

Oneric <oneric@oneric.stub> committed rPUBE9598137d3293: Drop base_url special casing in test env.

Oneric <oneric@oneric.stub> committed rPUBEa0daec6ea10d: static-fe: don’t squeeze non-square emoji.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEb8393ad9ed00: Merge pull request 'context: add featured definition' (#717) from….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE8fbd771d6e1d: context: add featured & backgroundUrl definitions.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE0e066bddaefd: Merge pull request 'Drop base_url special casing in test env' (#737) from….

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE554f19a9eda4: Merge pull request 'Refresh Users much more aggressively when processing Move….

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE795524daf107: bump version.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE9c53a3390ec3: Ensure we have the emoji base path.

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBEf18e2ba42ce8: Refresh Users much more aggressively when processing Move activities.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE2d439034ca80: Ensure that spoof-inserted does not time out.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE087d88f78778: bump version.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE4cd299bd8380: Add extra warnings if the uploader is on the same domain as the main application.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBEb5d97e7d85ff: Don't error out if we're not using the local uploader.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBEf59209020650: Fix tests that relied on no base_url in the uploader.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE61621ebdbc5b: Add tests for extra warnings about media subdomains.

Oneric <oneric@oneric.stub> committed rPUBEd44110120073: Add mix task to detect uploaded spoof payloads.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE3650bb03709b: Changelog entry.

Oneric <oneric@oneric.stub> committed rPUBE8684964c5d03: Only allow exact id matches.

Oneric <oneric@oneric.stub> committed rPUBE61ec592d6689: Drop obsolete pixelfed workaround.

Oneric <oneric@oneric.stub> committed rPUBEee7d98b09365: Update Changelog.

Oneric <oneric@oneric.stub> committed rPUBE0648d9ebaa57: Add mix tasks to detect spoofed posts and users.

Oneric <oneric@oneric.stub> committed rPUBE31f90bbb52db: Register APNG MIME type.

Oneric <oneric@oneric.stub> committed rPUBE9061d148bedb: Ensure object id doesn’t change on refetch.

Oneric <oneric@oneric.stub> committed rPUBE48b3a357930b: Update user reference after fetch.

Oneric <oneric@oneric.stub> committed rPUBEf07eb4cb55eb: Sanity check fetched user data.

Oneric <oneric@oneric.stub> committed rPUBE3e134b07fa4e: fetcher: return final URL after redirects from get_object.

Oneric <oneric@oneric.stub> committed rPUBEc4cf4d7f0bb1: Reject cross-domain redirects when fetching AP objects.

Oneric <oneric@oneric.stub> committed rPUBEbaaeffdebcf4: Update spoofed activity test.

Oneric <oneric@oneric.stub> committed rPUBEfee57eb376a4: Move actor check into fetch_and_contain_remote_object_from_id.

Oneric <oneric@oneric.stub> committed rPUBE59a142e0b0e6: Never fetch resource from ourselves.

Oneric <oneric@oneric.stub> committed rPUBEc806adbfdbea: Refactor Fetcher.get_object for readability.

Oneric <oneric@oneric.stub> committed rPUBE6d003e1acdf4: test/steal_emoji: consolidate configuration setup.

Oneric <oneric@oneric.stub> committed rPUBEddd79ff22d7e: Proactively harden emoji pack against path traversal.

Oneric <oneric@oneric.stub> committed rPUBE2bcf633dc286: Document Pleroma.Object.Fetcher.

Oneric <oneric@oneric.stub> committed rPUBEd1ce5fd91154: test/steal_emoji: reduce code duplication with mock macro.

Oneric <oneric@oneric.stub> committed rPUBE93ab6a018e96: mix: fix docs task.

Oneric <oneric@oneric.stub> committed rPUBEd6d838cbe83e: StealEmoji: check remote size before downloading.

Oneric <oneric@oneric.stub> committed rPUBEa4fa2ec9af76: StealEmoji: make final paths infeasible to predict.

Oneric <oneric@oneric.stub> committed rPUBEd1c4d0740467: Convert StealEmoji to pack.json.

Oneric <oneric@oneric.stub> committed rPUBEfa98b44acf9f: Fill out path for newly created packs.

Oneric <oneric@oneric.stub> committed rPUBEee5ce87825d5: test: use pack functions to check for emoji.

Oneric <oneric@oneric.stub> committed rPUBE5b126567bb6c: StealEmoji: drop superfluous basename.

Oneric <oneric@oneric.stub> committed rPUBE111cdb0d86f5: Split steal_emoji function for better readability.

Oneric <oneric@oneric.stub> committed rPUBEfb54c47f0b73: Update example nginx config.

Oneric <oneric@oneric.stub> committed rPUBEaf041db6dc44: Limit emoji stealer to alphanum, dash, or underscore characters (authored by Norm <normandy@biribiri.dev>).

Oneric <oneric@oneric.stub> committed rPUBEa8c6c780b4e0: StealEmoji: use Content-Type and reject non-images.

Oneric <oneric@oneric.stub> committed rPUBEfc36b0401630: Drop media proxy same-domain default for base_url.

Oneric <oneric@oneric.stub> committed rPUBEe88d0a28536c: Fix Content-Type of our schema.

Oneric <oneric@oneric.stub> committed rPUBEba558c0c242f: Limit instance emoji to image types.

Oneric <oneric@oneric.stub> committed rPUBE11ae8344eb62: Sanitise Content-Type of media proxy URLs.

Oneric <oneric@oneric.stub> committed rPUBE0ec62acb9dc1: Always insert Dedupe upload filter.

Oneric <oneric@oneric.stub> committed rPUBEbcc528b2e2c5: Never automatically assign privileged content types.

Oneric <oneric@oneric.stub> committed rPUBEfef773ca3524: Drop media base_url default and recommend different domain.

Oneric <oneric@oneric.stub> committed rPUBEbdefbb8fd992: plug/upload_media: query config only once on init.

Oneric <oneric@oneric.stub> committed rPUBE5d467af6c529: Update notes on security exploit handling.

Oneric <oneric@oneric.stub> committed rPUBE7ef93c0b6db4: Add set_content_type to Plug.StaticNoCT.

Oneric <oneric@oneric.stub> committed rPUBEdbb6091d0199: Import copy of Plug.Static from Plug 1.15.3.

Oneric <oneric@oneric.stub> committed rPUBEf7c979354271: Sanitise Content-Type of uploads.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE889b57df82b9: 2024.02 release.

Weblate <noreply@weblate.org> committed rPUBEcaaf2deb2235: Translated using Weblate (Polish).

Weblate <noreply@weblate.org> committed rPUBE34ffb92db4a8: Update translation files.

Weblate <noreply@weblate.org> committed rPUBEc6dceb1802d7: Translated using Weblate (Polish).

Restricted Repository Identity added a reverting change for rPUBE1d884fd9143d: Correct og:description tag in static-fe: rPUBE37e2a35b865e: Fix Twitter metadata.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE7d61fb09064a: Merge pull request 'Fix static-fe Twitter metadata / URL previews' (#700) from….

Oneric <oneric@oneric.stub> committed rPUBE37e2a35b865e: Fix Twitter metadata.