mirrors/mostlymatter
1
0
Форкнуть 0
Код Задачи Запросы на слияние Действия Пакеты Проекты Релизы Вики Активность
21 090 коммитов 3 Ветки 0 Теги
4ecc6a014180cc4ceecf2e6286cf51cba641ea60
Граф коммитов

1401 Коммитов

Автор SHA1 Сообщение Дата
Mattermost Build
bc1a2b34b1 keeps plugin config on reenablement (#35545) (#35581) 
* keeps plugin config on reenablement

* fixes local config patch on plugin reenablement

(cherry picked from commit c9a4092ac0a20351e3c2e0ac0cb593cc28b5bc0e)

Co-authored-by: Carlos Garcia <carlos.garcia@mattermost.com>
 2026-03-16 08:01:26 +02:00
Mattermost Build
a8d44e5918 Use standard session handler for updateUserAuth endpoint (#35488) (#35505) 
Automatic Merge
 2026-03-06 10:25:23 +01:00
Pablo Vélez
e1a78d1e91 Mm 66813 sso callback metadata (#34955) (#35383) 
Automatic Merge
 2026-02-20 09:09:32 +02:00
Ibrahim Serdar Acikgoz
e68120775b Cherry pick of a06d506 (#35172) into release-10.11 (#35332) 
Automatic Merge
 2026-02-17 19:09:27 +02:00
catalintomai
25d7832030 MM-67099 - Membership Sync fix (#35230) (#35329) 
Automatic Merge
 2026-02-17 18:09:27 +02:00
Mattermost Build
39ba0a3cd7 MM-66886 Add rate limiting to login endpoint (#34943) (#35314) 
Automatic Merge
 2026-02-16 12:39:39 +02:00
Mattermost Build
eb8c99fe9c Add fileSize limit to extractors (#35200) (#35280) 
Automatic Merge
 2026-02-13 14:09:32 +02:00
Andre Vasconcelos
053dcf62b6 MM-67372: Improve link preview metadata handling and filtering (#35178) (#35222) 
Automatic Merge
 2026-02-13 13:09:26 +02:00
Doug Lauder
a8db85c026 Cherry-pick MM-66789 (Include log viewer (system console) in log root path validation) (#35253) 
Automatic Merge
 2026-02-13 12:09:37 +02:00
Alejandro García Montoro
fddd4a70bc Avoid simple config when doing FTS in Postgres (#35063) (#35179) 
This commit reverts PR #30214, which addressed bug MM-60790 but caused a
performance regression tracked by MM-66782.

This revert has two implications:

1. The performance issue is solved.
2. The original bug is re-introduced.

Re-introducing the original bug seems not to be ideal, but I argue that
the original PR did not actually fix the bug:

- Before that PR, looking for a quoted string would return additional
  results: the UX was slightly confusing, because when the user looked
  for the word "stateful", the results would contain matches like
  "states" (see MM-60790).
- After that PR, looking for a quoted string can timeout, so that the
  list of results becomes empty. The UX here may be less confusing,
  since the user simply doesn't find what they're looking for, and they
  may assume that string is not present in any post, but it's completely
  wrong: the result list is empty because the SQL query timed out and
  thus the endpoint returned 0 results.

The solution to the original issue should be addressed via
Elasticsearch, which should provide a more refined and precise search
results.

For more information on the investigation on this issue and the
motivation behind the revert, see
https://mattermost.atlassian.net/wiki/x/IYAk_w

Co-authored-by: Mattermost Build <build@mattermost.com>
 2026-02-04 13:00:44 +01:00
Doug Lauder
463f7a0511 Cherry-pick MM-66789: Restrict log downloads to a root path for support packets (#35164) 
Automatic Merge
 2026-02-02 21:23:28 +02:00
Ibrahim Serdar Acikgoz
d2594e5046 Patch MM-67126 issue (#35142) 
Automatic Merge
 2026-02-02 12:53:32 +02:00
Mattermost Build
83006ff8ca MM-67279: Fix private channel enumeration via /mute slash command (#35099) (#35149) 
Automatic Merge
 2026-01-30 18:23:33 +02:00
Christopher Poile
452bad21e9 manual cherry-pick: [MM-67202] Validate auth method in account switch (#34981) (#35143) 
* fix account authorization type switch

* improve test clarity

* refactor tests for clarity
 2026-01-30 16:36:57 +02:00
Mattermost Build
66fdb3f453 MM-67274: Fix panic in getBrowserVersion with empty User-Agent version (#35098) (#35133) 
Automatic Merge
 2026-01-30 12:53:37 +02:00
Christopher Poile
f894103741 manual cherrypick: [MM-67074] Integration Action memory use fix (#34896) (#35089) 
Automatic Merge
 2026-01-28 18:53:28 +02:00
Rajat Dabade
707f7ba42b Cherry-pick PR for guest-user-file-upload-permission for release-10.11 (#35073) 
Automatic Merge
 2026-01-27 14:53:28 +02:00
Alejandro García Montoro
0655a63354 Check password length (#35062) 
Automatic Merge
 2026-01-27 08:53:29 +02:00
Christopher Poile
51f2e2fdd5 Manual cherrypick MM-67055: Fix permalink embeds in ws msg (#34893) (#35059) 
Automatic Merge
 2026-01-26 19:23:30 +02:00
Daniel Espino García
21a86506f9 Manual Cherrypick: Add audits for accessing posts without membership (#31266) (#35022) 
Automatic Merge
 2026-01-26 12:23:28 +02:00
Rajat Dabade
4b8b1e5ca0 Cherry picker search-api-filter-guest-permission to release-10.11 (#35018) 
Automatic Merge
 2026-01-22 12:18:51 +02:00
Mattermost Build
3b1b8d9114 Automated cherry pick of #34693 (#34972) 
Automatic Merge
 2026-01-22 07:18:51 +02:00
Pablo Vélez
43e797010b MM-66092 - enhance user permissions data structure validations (#34654) (#35006) 
Automatic Merge
 2026-01-21 12:48:52 +02:00
Christopher Poile
ebe1bd4e31 MM-67077: Remove PSD file previews (#34898) (#35000) 
Automatic Merge
 2026-01-21 12:18:54 +02:00
Mattermost Build
17635d33d8 MM-67049: Fix unauthorized access to public channels in private teams (#34886) (#34994) 
Automatic Merge
 2026-01-20 13:54:38 +02:00
Mattermost Build
06c6ee2566 [MM-66789] Restrict ImportSettings.Directory changes via API and add validation (#34653) (#34987) 
Automatic Merge
 2026-01-20 12:54:28 +02:00
Mattermost Build
ba27ba1f8c Automated cherry pick of #34715 (#34849) 
Automatic Merge
 2026-01-12 19:47:30 +02:00
M-ZubairAhmed
d6d3d5447e Cherry pick of #34679 (#34880) 
Automatic Merge
 2026-01-08 16:17:31 +02:00
Mattermost Build
fc8b22242d Automated cherry pick of #34441 (#34848) 
Automatic Merge
 2026-01-07 14:17:32 +02:00
Jesse Hallam
a07b1d7a8c MM-66424: Improve team filtering in common teams API (#34454) (#34854) 
Cherry-pick 6404ab29acc04901c5cb1cf5ad97fc3c0693e2cd into release-10.11
 2026-01-06 12:50:30 -04:00
Jesse Hallam
989f3a36dc MM-66757: Improve WebSocket user update events (#34600) (#34856) 
* improve TestUserUpdateEvents

* improve CheckUserSanitization

* check user sanitization in TestUserUpdateEvents

* minimally sanitize user sent to event creator
 2026-01-06 11:22:05 -05:00
Jesse Hallam
c9d60357db MM-65575: Fix server panic when bot posts trigger persistent notifications (#34174) (#34778) 
* reproduce panic with test

* allow bots in the profile map

* explicitly prevent sending notifications to bots

* persistent notifications: handle senders not in the channel
 2025-12-17 15:06:57 +00:00
Mattermost Build
46b5c436bb MM-66372: Improve OAuth state token validation (#34296) (#34300) 2025-10-28 00:46:33 +00:00
Mattermost Build
f361e7d75a Automated cherry pick of #34247 (#34257) 
Automatic Merge
 2025-10-27 12:59:15 +02:00
Ibrahim Serdar Acikgoz
9f54e5cdc3 [MM-65684] Sanitize teams for /api/v4/channels/{channel_id}/common_teams endpoint (#34110) (#34182) 2025-10-17 16:55:42 +03:00
Mattermost Build
83a5be3f9e MM-65743: Sanitize in email verification endpoint (#33914) (#34121) 
(cherry picked from commit 057efca74ee29862bca6ef6336bfbf3456f65bf6)

Co-authored-by: Jesse Hallam <jesse.hallam@gmail.com>
 2025-10-13 06:38:25 +00:00
JG Heithcock
375ce229f4 MM 65084 server-side (#33861) (#34006) (#34044) 
* MM 65084 server-side (#33861) (#34006)

Automatic Merge

* Add ConsumeOnce method to store layers

---------

Co-authored-by: Mattermost Build <build@mattermost.com>
 2025-10-06 15:20:08 -07:00
Jesse Hallam
9dd2c6f54f [MM-65837], [MM-65824] - Update Dependencies (#33972) (#34052) 
* Update github.com/mholt/archives

* Update github.com/spf13/viper

* make batch migration worker tests less flaky

---------

Co-authored-by: Eva Sarafianou <eva.sarafianou@gmail.com>
 2025-10-03 11:12:25 -03:00
Mattermost Build
fcd316844e Improve self checks when adding a new channel member (#33404) (#33925) 
Automatic Merge
 2025-09-18 10:19:15 +03:00
Mattermost Build
98acefe911 Sanatize LastViewedAt and LastUpdateAt for other users on channel member object (#33835) (#33905) 
Automatic Merge
 2025-09-16 13:19:10 +03:00
Mattermost Build
27fadafead Constant time comparison (#33588) (#33822) 
Automatic Merge
 2025-09-01 16:34:06 +03:00
Mattermost Build
ef896a4ea6 Mm 64925 - prevent slack import email auto validation for non admin users (#33609) (#33779) 
Automatic Merge
 2025-08-22 12:34:05 +03:00
Mattermost Build
e8c7e7d025 [MM-64453] Guest shouldn't discover public channels that they are not member of (#31327) (#33778) 
Automatic Merge
 2025-08-22 12:04:05 +03:00
Mattermost Build
24c4a3677b [MM-64445] api4/channels_test: Add tests cases for guest user private channels (#31319) (#33776) 
Automatic Merge
 2025-08-22 11:34:05 +03:00
Mattermost Build
2d5cdc6e21 [MM-64896][MM-64898] Pass inviteid/tokenid to relay state/props for external auth when auto-joining a team (#33545) (#33666) 
Automatic Merge
 2025-08-13 13:04:00 +03:00
Mattermost Build
e14175eb65 [MM-65015] Restore Mobile redirection on oauth login (#33626) (#33633) 2025-08-07 17:47:01 +00:00
Mattermost Build
8f6b6f1d0d [MM-64911] Ensure redirect URL is validated before redirecting (#33559) (#33596) 
Automatic Merge
 2025-07-31 09:34:00 +03:00
Mattermost Build
38208b8f06 MM-64755: Fix redirect in oauth login (#33388) (#33569) 
Automatic Merge
 2025-07-28 09:33:59 +03:00
Mattermost Build
f21005e359 Add URL validation to LinkMetadata cache and store (#31814) (#33453) 
Automatic Merge
 2025-07-17 20:58:42 +03:00
Mattermost Build
2fceeceba6 MM-64675: Enable modification of plugin settings in local mode (#33376) (#33452) 
Automatic Merge
 2025-07-17 20:28:42 +03:00