unified-ci-app[bot]
4ecc6a0141
Update latest patch version to 10.11.14 ( #35621 )
...
Automatic Merge
2026-03-16 09:25:21 +01:00
Mattermost Build
bc1a2b34b1
keeps plugin config on reenablement ( #35545 ) ( #35581 )
...
* keeps plugin config on reenablement
* fixes local config patch on plugin reenablement
(cherry picked from commit c9a4092ac0a20351e3c2e0ac0cb593cc28b5bc0e)
Co-authored-by: Carlos Garcia <carlos.garcia@mattermost.com >
2026-03-16 08:01:26 +02:00
Mattermost Build
8b7e26fa13
Automated cherry pick of #35269 ( #35459 )
...
* MM-67522 Add tests for syncing user statuses (#35269 )
* MM-67522 Add tests for syncing user statuses
* Clean up newly added tests
* Fix style
* Use SyncResponse.StatusErrors when statuses fail to sync
(cherry picked from commit 033867a3448875d84653c81026d31bddf3ce4c40)
* Rename rctx to c
---------
Co-authored-by: Harrison Healey <harrisonmhealey@gmail.com >
2026-03-06 15:39:06 +00:00
Mattermost Build
a8d44e5918
Use standard session handler for updateUserAuth endpoint ( #35488 ) ( #35505 )
...
Automatic Merge
2026-03-06 10:25:23 +01:00
Bill Gardner
fae6cc9001
update plugin-calls to v1.11.1 ( #35447 )
...
Automatic Merge
2026-03-03 10:55:20 +01:00
unified-ci-app[bot]
c29cf05d40
Update latest patch version to 10.11.13 ( #35390 )
...
Automatic Merge
2026-02-20 15:39:27 +02:00
Pablo Vélez
e1a78d1e91
Mm 66813 sso callback metadata ( #34955 ) ( #35383 )
...
Automatic Merge
2026-02-20 09:09:32 +02:00
Ibrahim Serdar Acikgoz
21ced4716b
[MM-67382] Improve mmctl output by filtering escape sequences #35191 ( #35334 )
...
Automatic Merge
2026-02-17 19:09:38 +02:00
Ibrahim Serdar Acikgoz
e68120775b
Cherry pick of a06d506 ( #35172 ) into release-10.11 ( #35332 )
...
Automatic Merge
2026-02-17 19:09:27 +02:00
catalintomai
25d7832030
MM-67099 - Membership Sync fix ( #35230 ) ( #35329 )
...
Automatic Merge
2026-02-17 18:09:27 +02:00
Julien Tant
dbd201f208
Update Makefile ( #35290 )
...
Automatic Merge
2026-02-16 13:09:27 +02:00
Mattermost Build
39ba0a3cd7
MM-66886 Add rate limiting to login endpoint ( #34943 ) ( #35314 )
...
Automatic Merge
2026-02-16 12:39:39 +02:00
Mattermost Build
eb8c99fe9c
Add fileSize limit to extractors ( #35200 ) ( #35280 )
...
Automatic Merge
2026-02-13 14:09:32 +02:00
Andre Vasconcelos
053dcf62b6
MM-67372: Improve link preview metadata handling and filtering ( #35178 ) ( #35222 )
...
Automatic Merge
2026-02-13 13:09:26 +02:00
Doug Lauder
a8db85c026
Cherry-pick MM-66789 (Include log viewer (system console) in log root path validation) ( #35253 )
...
Automatic Merge
2026-02-13 12:09:37 +02:00
Harrison Healey
f000a183fc
MM-67335 Fix export files having mismatched permissions ( #35182 ) (10.11) ( #35248 )
...
Automatic Merge
2026-02-13 11:39:35 +02:00
Just Nev
23eb77c102
chore: Update zoom version to 1.12.0 ( #35167 ) ( #35190 )
...
Automatic Merge
2026-02-13 11:09:36 +02:00
unified-ci-app[bot]
aa3240dd80
Update latest patch version to 10.11.12 ( #35272 )
...
Automatic Merge
2026-02-13 09:39:26 +02:00
Alejandro García Montoro
fddd4a70bc
Avoid simple config when doing FTS in Postgres ( #35063 ) ( #35179 )
...
This commit reverts PR #30214 , which addressed bug MM-60790 but caused a
performance regression tracked by MM-66782.
This revert has two implications:
1. The performance issue is solved.
2. The original bug is re-introduced.
Re-introducing the original bug seems not to be ideal, but I argue that
the original PR did not actually fix the bug:
- Before that PR, looking for a quoted string would return additional
results: the UX was slightly confusing, because when the user looked
for the word "stateful", the results would contain matches like
"states" (see MM-60790).
- After that PR, looking for a quoted string can timeout, so that the
list of results becomes empty. The UX here may be less confusing,
since the user simply doesn't find what they're looking for, and they
may assume that string is not present in any post, but it's completely
wrong: the result list is empty because the SQL query timed out and
thus the endpoint returned 0 results.
The solution to the original issue should be addressed via
Elasticsearch, which should provide a more refined and precise search
results.
For more information on the investigation on this issue and the
motivation behind the revert, see
https://mattermost.atlassian.net/wiki/x/IYAk_w
Co-authored-by: Mattermost Build <build@mattermost.com >
2026-02-04 13:00:44 +01:00
Doug Lauder
463f7a0511
Cherry-pick MM-66789: Restrict log downloads to a root path for support packets ( #35164 )
...
Automatic Merge
2026-02-02 21:23:28 +02:00
Ibrahim Serdar Acikgoz
d2594e5046
Patch MM-67126 issue ( #35142 )
...
Automatic Merge
2026-02-02 12:53:32 +02:00
Mattermost Build
83006ff8ca
MM-67279: Fix private channel enumeration via /mute slash command ( #35099 ) ( #35149 )
...
Automatic Merge
2026-01-30 18:23:33 +02:00
Christopher Poile
452bad21e9
manual cherry-pick: [MM-67202] Validate auth method in account switch ( #34981 ) ( #35143 )
...
* fix account authorization type switch
* improve test clarity
* refactor tests for clarity
2026-01-30 16:36:57 +02:00
Mattermost Build
66fdb3f453
MM-67274: Fix panic in getBrowserVersion with empty User-Agent version ( #35098 ) ( #35133 )
...
Automatic Merge
2026-01-30 12:53:37 +02:00
Mattermost Build
e813c0e19e
MM-67268: Fix SSRF bypass via IPv4-mapped IPv6 literals ( #35097 ) ( #35130 )
...
Automatic Merge
2026-01-30 11:53:31 +02:00
Christopher Poile
f626d98799
manual cherrypick: [MM-67130] Fix permalink preview permissions ( #34909 ) ( #35114 )
...
* manual cherrypick: [MM-67130] Fix permalink preview permissions (#34909 )
* remove permalink embeds when user loses access to orginating channel
* remove posts & embeds on team_leave event; simplify preview index.ts
* cleanup
* remove dead code
* more dead code elimination
* linter
2026-01-29 20:41:37 +00:00
Christopher Poile
f894103741
manual cherrypick: [MM-67074] Integration Action memory use fix ( #34896 ) ( #35089 )
...
Automatic Merge
2026-01-28 18:53:28 +02:00
Carlos Garcia
20d28987a7
Manual cherry-pick MM-66167 fix ( #35061 ) ( #35087 )
...
Automatic Merge
2026-01-28 13:53:28 +02:00
Christopher Poile
f68ad45595
[MM-67052] manual cherrypick: update mscfb and msoleps deps ( #34910 ) ( #35076 )
...
Automatic Merge
2026-01-28 10:53:28 +02:00
Rajat Dabade
707f7ba42b
Cherry-pick PR for guest-user-file-upload-permission for release-10.11 ( #35073 )
...
Automatic Merge
2026-01-27 14:53:28 +02:00
Alejandro García Montoro
0655a63354
Check password length ( #35062 )
...
Automatic Merge
2026-01-27 08:53:29 +02:00
Christopher Poile
51f2e2fdd5
Manual cherrypick MM-67055: Fix permalink embeds in ws msg ( #34893 ) ( #35059 )
...
Automatic Merge
2026-01-26 19:23:30 +02:00
Daniel Espino García
21a86506f9
Manual Cherrypick: Add audits for accessing posts without membership ( #31266 ) ( #35022 )
...
Automatic Merge
2026-01-26 12:23:28 +02:00
Mattermost Build
12dce033d6
MM-64725 - channel settings modal do not update url automatically ( #33500 ) ( #35052 )
...
Automatic Merge
2026-01-26 11:53:39 +02:00
Rajat Dabade
4b8b1e5ca0
Cherry picker search-api-filter-guest-permission to release-10.11 ( #35018 )
...
Automatic Merge
2026-01-22 12:18:51 +02:00
Mattermost Build
3b1b8d9114
Automated cherry pick of #34693 ( #34972 )
...
Automatic Merge
2026-01-22 07:18:51 +02:00
Pablo Vélez
43e797010b
MM-66092 - enhance user permissions data structure validations ( #34654 ) ( #35006 )
...
Automatic Merge
2026-01-21 12:48:52 +02:00
Christopher Poile
ebe1bd4e31
MM-67077: Remove PSD file previews ( #34898 ) ( #35000 )
...
Automatic Merge
2026-01-21 12:18:54 +02:00
Rajat Dabade
a75d26b4ac
Upgraded board prepacked version to v9.2.2 ( #34999 )
...
Automatic Merge
2026-01-21 11:48:53 +02:00
Mattermost Build
17635d33d8
MM-67049: Fix unauthorized access to public channels in private teams ( #34886 ) ( #34994 )
...
Automatic Merge
2026-01-20 13:54:38 +02:00
Mattermost Build
06c6ee2566
[MM-66789] Restrict ImportSettings.Directory changes via API and add validation ( #34653 ) ( #34987 )
...
Automatic Merge
2026-01-20 12:54:28 +02:00
unified-ci-app[bot]
30aec66862
Update latest patch version to 10.11.11 ( #34938 )
...
Automatic Merge
2026-01-15 15:54:24 +02:00
Mattermost Build
ba27ba1f8c
Automated cherry pick of #34715 ( #34849 )
...
Automatic Merge
2026-01-12 19:47:30 +02:00
M-ZubairAhmed
d6d3d5447e
Cherry pick of #34679 ( #34880 )
...
Automatic Merge
2026-01-08 16:17:31 +02:00
Mattermost Build
fc8b22242d
Automated cherry pick of #34441 ( #34848 )
...
Automatic Merge
2026-01-07 14:17:32 +02:00
Jesse Hallam
a07b1d7a8c
MM-66424: Improve team filtering in common teams API ( #34454 ) ( #34854 )
...
Cherry-pick 6404ab29acc04901c5cb1cf5ad97fc3c0693e2cd into release-10.11
2026-01-06 12:50:30 -04:00
Jesse Hallam
989f3a36dc
MM-66757: Improve WebSocket user update events ( #34600 ) ( #34856 )
...
* improve TestUserUpdateEvents
* improve CheckUserSanitization
* check user sanitization in TestUserUpdateEvents
* minimally sanitize user sent to event creator
2026-01-06 11:22:05 -05:00
Andre Vasconcelos
f423bea281
Manual cherry-pick on #34803 ( #34817 )
...
* Bumping prepackaged Jira Plugin version to v4.5.0 (#34803 )
# Conflicts:
# server/Makefile
* Fixing linter error that fails e2e smoke tests
2025-12-22 17:23:01 +02:00
Just Nev
ccc7fde051
Update Zoom prepackaged version to 1.11.0 ( #34734 ) ( #34765 )
...
Co-authored-by: Nevyana Angelova <nevyangelova@Nevy-Macbook-16-2025.local >
2025-12-17 18:22:57 +02:00
Jesse Hallam
c9d60357db
MM-65575: Fix server panic when bot posts trigger persistent notifications ( #34174 ) ( #34778 )
...
* reproduce panic with test
* allow bots in the profile map
* explicitly prevent sending notifications to bots
* persistent notifications: handle senders not in the channel
2025-12-17 15:06:57 +00:00