Claire 18c61f286f Merge commit from fork ...

* Fix GHSA-7jvv-fhmg-wpfw

* Fix GHSA-vwhj-3g83-v276

* Bump version to v4.5.14

2026-07-27 16:02:01 +02:00

..

activitypub

Merge commit from fork

2026-02-03 14:59:53 +01:00

admin

Fix: Admin invite autofollow option is ignored (#39819)

2026-07-16 14:47:46 +02:00

api

Merge commit from fork

2026-07-27 16:02:01 +02:00

auth

Update devise to version 5.0 (#37419)

2026-03-24 15:36:06 +01:00

concerns

Fix Vary parsing in cache control enforcement (#37426)

2026-01-19 11:37:34 +01:00

disputes

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

filters

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

oauth

Move layout setup for OAuth views to controllers (#35176)

2025-06-25 13:26:17 +00:00

redirect

Move redirect/base body class to view (#31796)

2024-09-12 13:31:50 +00:00

settings

Change “Posting defaults” settings page to enforce nobody quote policy for private default visibility (#36040)

2025-09-05 18:51:08 +00:00

well_known

Update OAuth inflection to match spec (#35160)

2025-06-25 07:52:30 +00:00

about_controller.rb

Simplify instance presenter view access (#26046)

2023-09-28 16:52:37 +02:00

accounts_controller.rb

Redirect to short account URLs when requesting HTML for one of the AP endpoints (#38056)

2026-03-09 11:39:36 +01:00

application_controller.rb

Replace unprocessable_entity -> unprocessable_content (#35658)

2025-08-05 07:42:08 +00:00

authorize_interactions_controller.rb

Merge commit from fork

2025-12-08 15:44:08 +01:00

backups_controller.rb

Change media attachments in moderated posts to not be accessible (#34872)

2025-06-12 08:53:02 +00:00

custom_css_controller.rb

Extend custom CSS cache time with digest paths (#33207)

2025-01-08 08:48:45 +00:00

emojis_controller.rb

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

filters_controller.rb

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

follower_accounts_controller.rb

Add support for numeric-based URIs for local accounts (#32724)

2025-09-29 12:05:48 +00:00

following_accounts_controller.rb

Add support for numeric-based URIs for local accounts (#32724)

2025-09-29 12:05:48 +00:00

health_controller.rb

Disable Rails/ApplicationController for HealthController (#28705)

2024-01-12 09:08:17 +00:00

home_controller.rb

Simplify instance presenter view access (#26046)

2023-09-28 16:52:37 +02:00

instance_actors_controller.rb

Move common module inclusion in sub classes to ActivityPub::BaseController (#29560)

2024-03-15 10:40:21 +00:00

intents_controller.rb

Remove redundant return in IntentsController (#29099)

2024-02-06 12:56:22 +00:00

invites_controller.rb

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

mail_subscriptions_controller.rb

Fix contrast between background and form elements on some pages (#31266)

2024-08-02 13:55:31 +00:00

manifests_controller.rb

Fix some user-independent endpoints potentially reading session cookies (#24650)

2023-04-25 22:14:44 +02:00

media_controller.rb

Merge commit from fork

2025-12-08 15:44:08 +01:00

media_proxy_controller.rb

Change media attachments in moderated posts to not be accessible (#34872)

2025-06-12 08:53:02 +00:00

privacy_controller.rb

Simplify instance presenter view access (#26046)

2023-09-28 16:52:37 +02:00

relationships_controller.rb

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

remote_interaction_helper_controller.rb

Change interaction modal in web UI (#26075)

2023-07-27 16:11:17 +02:00

severed_relationships_controller.rb

Merge commit from fork

2026-01-07 14:15:14 +01:00

shares_controller.rb

Move shares/modal body class to layout (#31789)

2024-09-06 16:46:55 +00:00

statuses_cleanup_controller.rb

Remove duplicate cache header setting before action (#33833)

2025-02-05 09:19:08 +00:00

statuses_controller.rb

Redirect to short account URLs when requesting HTML for one of the AP endpoints (#38056)

2026-03-09 11:39:36 +01:00

tags_controller.rb

Rename cache_* methods to preload_* in controller concern (#30209)

2024-05-16 08:03:46 +00:00

terms_of_service_controller.rb

Add interstitial for Terms of Service updates (#34527)

2025-05-16 14:03:05 +00:00