Tom Moor
593cf73118
test: Update jest configuration ( #3951 )
...
* Split shared tests
* Centralize and parallelize jest config
* ci
2022-08-10 13:26:36 -07:00
Tom Moor
e5c5e8907a
fix: Disallow data: URI's for images
2022-08-09 16:31:09 +02:00
dependabot[bot]
5640ec30cc
chore(deps): bump compressorjs from 1.0.7 to 1.1.1 ( #3943 )
...
Bumps [compressorjs](https://github.com/fengyuanchen/compressorjs ) from 1.0.7 to 1.1.1.
- [Release notes](https://github.com/fengyuanchen/compressorjs/releases )
- [Changelog](https://github.com/fengyuanchen/compressorjs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fengyuanchen/compressorjs/compare/v1.0.7...v1.1.1 )
---
updated-dependencies:
- dependency-name: compressorjs
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-08 09:13:03 -07:00
dependabot[bot]
da67486f2f
chore(deps): bump aws-sdk from 2.1044.0 to 2.1189.0 ( #3942 )
...
Bumps [aws-sdk](https://github.com/aws/aws-sdk-js ) from 2.1044.0 to 2.1189.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases )
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.1044.0...v2.1189.0 )
---
updated-dependencies:
- dependency-name: aws-sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-08 09:11:55 -07:00
Tom Moor
8c39487c80
Move various document menu actions to action definitions
2022-08-08 17:31:53 +02:00
dependabot[bot]
3ab9d7492e
chore(deps): bump react-merge-refs from 1.1.0 to 2.0.1 ( #3903 )
...
* chore(deps): bump react-merge-refs from 1.1.0 to 2.0.1
Bumps [react-merge-refs](https://github.com/gregberge/react-merge-refs ) from 1.1.0 to 2.0.1.
- [Release notes](https://github.com/gregberge/react-merge-refs/releases )
- [Changelog](https://github.com/gregberge/react-merge-refs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/gregberge/react-merge-refs/compare/v1.1.0...v2.0.1 )
---
updated-dependencies:
- dependency-name: react-merge-refs
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* tsc
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Moor <tom.moor@gmail.com >
2022-08-08 15:04:18 +01:00
dependabot[bot]
6a5d6ee3db
chore(deps): bump oy-vey from 0.10.0 to 0.11.2 ( #3902 )
...
* chore(deps): bump oy-vey from 0.10.0 to 0.11.2
Bumps [oy-vey](https://github.com/oysterbooks/oy ) from 0.10.0 to 0.11.2.
- [Release notes](https://github.com/oysterbooks/oy/releases )
- [Changelog](https://github.com/revivek/oy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/oysterbooks/oy/compare/0.10.0...0.11.2 )
---
updated-dependencies:
- dependency-name: oy-vey
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* tsc
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Moor <tom.moor@gmail.com >
2022-08-08 07:02:41 -07:00
Tom Moor
57f9871c22
Add NODE_ENV=production to env sample
2022-08-08 05:52:03 -07:00
Tom Moor
dca491fc28
test: Fix frontend test failures from upgrading Jest to v28
2022-08-08 13:31:34 +02:00
Tom Moor
e97cc61e2f
test: Mock bull, fix setInterval capturing memory in tests
...
Towards #3939
2022-08-08 13:15:06 +02:00
Tom Moor
ba385e1507
chore: Bump jest
2022-08-08 12:40:17 +02:00
Tom Moor
71c9fcf59b
test: Avoid creation of new server/app instance for each route test
2022-08-08 12:06:54 +02:00
Tom Moor
b45e6c504f
fix: Prevent webhook delivery for deleted teams
2022-08-08 11:15:04 +02:00
Tom Moor
1b00d51c74
fix: Check WebhookSubscription is not disabled before delivery attempt
2022-08-08 11:10:10 +02:00
Tom Moor
7923a7e071
Enforce user invites/request on server
2022-08-08 11:02:37 +02:00
Tom Moor
b37a848914
Add limit of 10 webhooks/team
2022-08-08 10:58:47 +02:00
github-actions[bot]
dca9bc1598
chore: Compressed inefficient images automatically ( #3933 )
...
Co-authored-by: apoorv-mishra <apoorv-mishra@users.noreply.github.com >
2022-08-07 13:10:08 -07:00
Apoorv Mishra
982ab2b48e
feat(editor): support google form embeds ( #3930 )
...
Fixes #3129 and #3923
2022-08-07 12:41:30 +05:30
Nan Yu
74d9409cc3
fix: refactor auth flow to explicitly pass in a host ( #3909 )
...
* fix: refactor auth flow to explicitly pass in a host
* add new error handler to all SSO providers
* refactor passport error into middleware
2022-08-04 02:00:52 -07:00
Apoorv Mishra
0a6cfe5a6a
feat: Choose random color on collection creation ( #3912 )
...
Choose a random color from a shared color palette between backend
and frontend during collection creation.
2022-08-04 01:48:19 -07:00
Apoorv Mishra
4a16124a94
fix: Remove templatize action for trashed document ( #3922 )
2022-08-04 01:44:15 -07:00
Apoorv Mishra
294521f162
fix: Escape regex for embeds ( #3907 )
...
Fixes #3899
2022-08-02 01:40:11 -07:00
Apoorv Mishra
00481d2bfc
fix: Improve document delete confirmation message ( #3876 )
...
Modify document delete confirmation message to warn
about the number of expected nested documents to be deleted.
2022-08-01 15:51:30 -07:00
Tom Moor
eace258a86
Revert "chore(deps-dev): bump react-refresh from 0.9.0 to 0.14.0 ( #3901 )" ( #3908 )
...
This reverts commit de4b515e64 .
2022-08-01 15:43:47 -07:00
dependabot[bot]
de4b515e64
chore(deps-dev): bump react-refresh from 0.9.0 to 0.14.0 ( #3901 )
...
Bumps [react-refresh](https://github.com/facebook/react/tree/HEAD/packages/react ) from 0.9.0 to 0.14.0.
- [Release notes](https://github.com/facebook/react/releases )
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/facebook/react/commits/v0.14.0/packages/react )
---
updated-dependencies:
- dependency-name: react-refresh
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-01 13:57:32 -07:00
dependabot[bot]
c35c566fef
chore(deps-dev): bump concurrently from 6.2.1 to 7.3.0 ( #3905 )
...
Bumps [concurrently](https://github.com/open-cli-tools/concurrently ) from 6.2.1 to 7.3.0.
- [Release notes](https://github.com/open-cli-tools/concurrently/releases )
- [Commits](https://github.com/open-cli-tools/concurrently/compare/v6.2.1...v7.3.0 )
---
updated-dependencies:
- dependency-name: concurrently
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-01 11:56:14 -07:00
Pavlos
d9dc6aa2d7
Fix URL in huntr page link ( #3906 )
2022-08-01 18:51:38 +01:00
Spotlight
192802d360
feat: Expand highlighted languages ( #3891 )
...
Adds Elixir, Kotlin, and Swift to the list of available languages to be highlighted.
2022-07-31 11:23:59 -07:00
Tom Moor
cb9773ad85
chore: Add emailed confirmation code to account deletion ( #3873 )
...
* wip
* tests
2022-07-31 10:59:40 -07:00
Tom Moor
f9d9a82e47
fix: Cannot hit enter after sentance starting with forward slash
...
closes #3879
2022-07-29 09:15:48 +01:00
Tom Moor
383bac241e
fix: Suppress ForbiddenError in error tracker
2022-07-26 23:18:26 +01:00
Tom Moor
ea28dc46eb
fix: Error in WebhookProcessor when team is permanatly destroyed
2022-07-26 22:33:48 +01:00
Tom Moor
2794057738
fix: Sequelize rejectOnEmpty should result in 404 status
2022-07-26 22:06:47 +01:00
Tom Moor
b7b1f5e1fd
fix: Cleanup attachments uploaded to S3 when import fails ( #3868 )
2022-07-26 12:10:13 -07:00
Tom Moor
8fdd5bf734
fix: substitution of content when sending an image to a profile ( #3869 )
...
* fix: Limit public uploads to basic image types
* test
2022-07-26 12:10:00 -07:00
Tom Moor
086c3ec2d8
fix: Allow more flexible SMTP connection when SSL is not required. Do not fail on self-signed certs
2022-07-25 23:44:20 +01:00
Tom Moor
f370b0296b
fix: File operation cleanup task should also remove import data
2022-07-25 21:10:37 +01:00
Tom Moor
9b837763e6
0.65.2
2022-07-25 19:25:23 +01:00
dependabot[bot]
3d9a8be867
chore(deps-dev): bump typescript from 4.4.4 to 4.7.4 ( #3866 )
...
* chore(deps-dev): bump typescript from 4.4.4 to 4.7.4
Bumps [typescript](https://github.com/Microsoft/TypeScript ) from 4.4.4 to 4.7.4.
- [Release notes](https://github.com/Microsoft/TypeScript/releases )
- [Commits](https://github.com/Microsoft/TypeScript/compare/v4.4.4...v4.7.4 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* tsc
* tsc
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Moor <tom.moor@gmail.com >
2022-07-25 11:21:04 -07:00
dependabot[bot]
c8caeebdba
chore(deps): bump react-window from 1.8.6 to 1.8.7 ( #3865 )
...
Bumps [react-window](https://github.com/bvaughn/react-window ) from 1.8.6 to 1.8.7.
- [Release notes](https://github.com/bvaughn/react-window/releases )
- [Changelog](https://github.com/bvaughn/react-window/blob/master/CHANGELOG.md )
- [Commits](https://github.com/bvaughn/react-window/commits )
---
updated-dependencies:
- dependency-name: react-window
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 11:09:47 -07:00
dependabot[bot]
2c7d5ac3d8
chore(deps-dev): bump @types/jsonwebtoken from 8.5.5 to 8.5.8 ( #3864 )
...
Bumps [@types/jsonwebtoken](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsonwebtoken ) from 8.5.5 to 8.5.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsonwebtoken )
---
updated-dependencies:
- dependency-name: "@types/jsonwebtoken"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-25 11:09:32 -07:00
Tom Moor
30190866f8
test: Flakey test
2022-07-25 08:59:30 +01:00
Tom Moor
53a08cf307
chore: Basic protection against zip bombs
2022-07-24 23:51:04 +01:00
dependabot[bot]
1c5864deee
chore(deps-dev): bump eslint-config-prettier from 8.3.0 to 8.5.0 ( #3807 )
...
Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier ) from 8.3.0 to 8.5.0.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases )
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.3.0...v8.5.0 )
---
updated-dependencies:
- dependency-name: eslint-config-prettier
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-24 13:11:11 -07:00
Tom Moor
865e6d048e
fix: 'Export' option missing in collection menu for admins
2022-07-24 20:29:59 +01:00
Tom Moor
5e852170f9
perf: Read attachment buffers only when neccessary, closes #3849
2022-07-24 19:15:34 +01:00
Tom Moor
71da57773e
docs
2022-07-24 14:09:43 +01:00
Tom Moor
ec35af4bc5
Refactor validations
2022-07-24 13:40:04 +01:00
Nan Yu
870d9ed41e
feat: allow external SSO methods to log into teams as long as emails match ( #3813 )
...
* wip
* wip
* fix comments
* better separation of conerns
* fix up tests
* fix semantics
* fixup tsc
* fix some tests
* the old semantics were easier to use
* add db:reset to scripts
* explicitly throw for unauthorized external authorization
* fix minor bug
* add additional tests for user creator and team creator
* yank the email matching logic out of teamcreator
* renaming
* fix type and test errors
* adds test to ensure that accountProvisioner works with email matching
* remove only
* fix comments
* recreate changes to allow self hosted to make teams
2022-07-24 04:55:30 -07:00
Apoorv Mishra
24170e8684
chore: Remove updatedAt column from events table ( #3841 )
2022-07-24 01:57:21 -07:00