Ginger
931686e84e
fix: Fix panic in room creation
2026-09-30 18:49:03 +00:00
Ginger
eb602e83a1
chore: Fix clippy lints
2026-09-30 14:47:46 -04:00
timedout
58d135bc57
fix: Return the actual state at in !admin debug get-state-at
...
Previously this command actually returned the state *before*, which made debugging with it confusing.
2026-09-29 22:06:48 +01:00
Clubs
684820c7c1
fix: check for user account status before attemping to process email change.
2026-09-29 18:36:35 +00:00
Ginger
cbdf978b84
fix: Preserve custom fields in create event content
2026-09-29 17:52:32 +00:00
Ginger
38b7987335
fix: Add invitees as creators for v12+ trusted private chats
2026-09-29 17:52:32 +00:00
timedout
550dd0160a
fix: SEC8
...
Reviewed-By: Ginger <ginger@gingershaped.computer >
Reviewed-By: Jade <jade@ellis.link >
Reviewed-By: Jacob Taylor <jacob@explodie.org >
2026-09-28 02:00:37 +01:00
timedout
c0ad864d57
fix: Make unembed unsigned run in bg
2026-09-27 22:58:08 +01:00
timedout
a61026912c
feat: Add a migration to fix up unsigned data
2026-09-27 18:31:46 +01:00
timedout
05d6922351
style: Take an optional context instead of deconstructed parameters
2026-09-27 17:33:26 +01:00
timedout
f0a0596d12
fix: Remove undocumented prev_sender unsigned field
2026-09-27 17:32:47 +01:00
timedout
fbedf994db
fix: Don't unnecessarily embed prev_content in populate_unsigned
2026-09-27 17:32:47 +01:00
timedout
1de16fed9e
style: English is a difficult language
2026-09-27 17:32:47 +01:00
timedout
4812837d13
fix: Don't allow set_unsigned to panic
...
While an error in this function is probably bad, detonating a metric tonne of TNT on the call tree is probably worse
2026-09-27 17:32:47 +01:00
timedout
90793eaaf4
fix: Actually set unsigned in PDU after set_unsigned
2026-09-27 17:32:47 +01:00
timedout
744928b206
style: Update docstring for Pdu.set_unsigned
2026-09-27 17:32:47 +01:00
timedout
05ee24df7d
fix: Move helper to helpers.rs, rename field, don't recurse unsigned in redacted_because
...
Renamed `redacted_because_id` to `org.continuwuity.redacted_by` for proper namespacing; `get_unsigned_context` now lives in helpers.rs instead of `mod.rs`. The helper function also now explicitly wipes `unsigned` for `redacted_because` to avoid leaks (see comment).
2026-09-27 17:32:46 +01:00
timedout
89eecd2bf7
fix: Record redacted_because_id instead of redacted_because
2026-09-27 17:32:46 +01:00
timedout
b2072baf59
perf: Strip unsigned over federation and generate it on the fly locally
2026-09-27 17:32:46 +01:00
timedout
286897de88
feat: Don't send unsigned data over federation
2026-09-27 17:32:46 +01:00
Renovate Bot and Ginger
02d245afe5
chore(deps): Update ruma digest to e7384f0
...
Co-authored-by: Ginger <ginger@gingershaped.computer >
2026-09-24 14:16:55 -04:00
Ginger
4ea4e15edb
chore: Reformat with latest nightly
2026-09-24 09:53:59 -04:00
Erwan Leboucher
cee69b4c8d
fix: Walk auth events once instead of re-queueing parents
2026-09-22 21:19:25 +02:00
timedout
d3ed175264
fix(stateres): Inject dummy create event when none is available
...
I'm not sure how this doesn't cause more panics. When running an auth check on the create event during iterative auth checks, there's obviously no create event in the base state nor auth map, so the call to fetch_state() will return nothing and thus panic.
This just inserts the incoming event if it's a create event and there isn't an existing one in the auth state. It's not used for the create event checks anyway so this has no effect aside from plugging the panic.
2026-09-22 02:04:39 +01:00
timedout
7924e96589
chore: add todo to fix
2026-09-22 00:16:27 +00:00
timedout
d1b1274900
style: Unchain if statement
2026-09-22 00:16:27 +00:00
timedout
6299df3552
style: Document fetch_and_handle_auth_events control flow
2026-09-22 00:16:27 +00:00
Erwan Leboucher
20d146bd5e
fix: Throttle client-triggered remote event fetches
2026-09-22 00:16:27 +00:00
Erwan Leboucher
03f60c7002
fix: Don't re-fetch auth events that can never be resolved
2026-09-22 00:16:27 +00:00
Erwan Leboucher
ed1e634579
feat(push): Add MSC4174 web push
2026-09-21 23:35:05 +00:00
timedout
8891adfba3
fix(stateres): Enforce state ownership checks against creators too
...
Previously being a room creator short-circuited the `can_send_event`
check, which allowed creators to send state events "owned" (state key
starting with @ but not being the sender's user ID), in effect skipping
auth check 9 in v12 rooms. This removes that short circuit condition,
since `Infinite < Int` always returns false anyway, allowing the state
key check block to execute.
Fixes #2266
2026-09-18 18:57:57 +01:00
timedout
1a8e5ccc09
fix: Gracefully handle extremityless rooms when gapfilling
...
See also: #2259
2026-09-17 00:06:17 +01:00
Allinen
d52d5003b1
refactor: cleaned up code
2026-09-16 17:57:11 +00:00
Allinen
bdaa78340e
style: fix typo
2026-09-16 17:57:11 +00:00
Allinen
89e07ae239
feat(config): connection_uri_file added to config
2026-09-16 17:57:11 +00:00
Jade
ffcf152016
revert d330930bb5
...
revert feat: Add timestamp to event endpoint
This implementation unfortunately resulted in resource exhaustion when run on some rooms.
2026-09-16 13:05:45 +00:00
timedout
77d47f268e
fix(stateres): Don't panic when the create event goes missing
...
I have no idea how this can even happen and frankly I'm scared to look
however that's a problem for another time.
Panicking causes entire transactions to explode, this just makes one
event explode.
2026-09-14 18:14:22 +01:00
timedout
5f31f3fb10
Merge remote-tracking branch 'origin/main' into lake/feature/shear-unused-deps
2026-09-13 19:57:41 +01:00
Erwan Leboucher
ac8b17db1b
fix: Only count non-outlier prev_events in get_missing_events assertion
2026-09-13 18:50:38 +00:00
Erwan Leboucher
9bb203abe8
fix(sync): Omit empty room account data from sliding sync responses
2026-09-13 18:50:26 +00:00
Lake
8ab842b198
deps: shear the dependencies again
2026-09-12 15:07:42 -05:00
Lake
439f266d8f
chore: resolve conflicts with main
2026-09-12 15:07:35 -05:00
ginger
c6f2c5eb39
fix: Log new password when using reset-password --convert-to-local-account
2026-09-12 16:23:46 +00:00
Henry-Hiles
b221a49b77
chore: upgrade argon2
2026-09-11 16:13:03 -04:00
Jade Ellis
71e101a4dc
style: Run formatting
2026-09-11 15:54:42 +01:00
Jade Ellis
0f97eea31f
style: Run formatting
2026-09-11 15:39:54 +01:00
Erwan Leboucher
d330930bb5
feat: Add timestamp to event endpoint
2026-09-11 14:22:11 +00:00
stratself
5fbd4914ca
fix: Disable unauthenticated media by default
2026-09-11 14:21:08 +00:00
Erwan Leboucher
aa92bf8814
fix(federation): Read the backoff window once when gating requests
2026-09-11 14:17:45 +00:00
Erwan Leboucher
9d7c8be390
fix(sender): Only claim a destination when the send is allowed
2026-09-11 14:17:45 +00:00
Ginger