Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update with v4.1 #471

Merged
merged 42 commits into from
Jan 3, 2025
Merged

update with v4.1 #471

merged 42 commits into from
Jan 3, 2025

Conversation

takayamaki
Copy link
Member

No description provided.

ClearlyClaire and others added 30 commits June 18, 2024 16:05
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
This should not change the set of words matched by `USERNAME_RE` but does
change the one matched by `MENTION_RE`. Indeed, the previous regexp allowed
a domain part to start with `.` or `-`, which the new regexp does not allow.

Co-authored-by: Claire <[email protected]>
@takayamaki takayamaki merged commit 4701a45 into imastodon-v4.1 Jan 3, 2025
18 checks passed
@takayamaki takayamaki deleted the update/v4.1.18 branch January 3, 2025 02:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants