Commit graph

3183 commits

Author SHA1 Message Date
David Mehren
86be1243f8
Ignore Postgres SSL errors on Heroku
The connection to Heroku's Postgres instances must use SSL,
 but not check the certificate.

 This adds the necessary configuration to the Heroku setup script.

Fixes #1245

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-07 21:43:06 +02:00
David Mehren
3e836d815b
Fix typo in release notes
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 22:37:47 +02:00
David Mehren
71841d7d35
Merge pull request #1239 from hedgedoc/release/1.8.1 2021-05-06 22:31:39 +02:00
David Mehren
a897ef7dea
Update example config
The development config now runs on http://localhost:3000 out-of-the-box.

The production config now makes clear that domain should be changed.

Both configs don't include `"linkifyHeaderStyle": "gfm"` anymore
to make the links on the homepage work.

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 22:24:02 +02:00
David Mehren
0555d01f4a
Bump version to 1.8.1
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 22:24:02 +02:00
David Mehren
62452cda9a
Update maintainers list
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 22:24:02 +02:00
David Mehren
1b1b328d49
Add release notes for 1.8.1
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 22:24:02 +02:00
David Mehren
2c12feb127
Fix 1.8.0 changelog
CVE-2021-29475 has been fixed since
HedgeDoc 1.5.0, instead of 1.6.0

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 21:34:30 +02:00
David Mehren
d9604ce134
Merge pull request #1240 from hedgedoc/renovate/master-pin-dependencies
Pin dependencies (master)
2021-05-06 21:34:04 +02:00
Renovate Bot
3a8b4c9634
Pin dependencies
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-05-06 19:28:40 +00:00
David Mehren
4625276ef7
Merge pull request #1227 from hedgedoc/enhancement/esbuild
Use esbuild to minify frontend JS
2021-05-06 21:27:33 +02:00
David Mehren
c243859c45
Merge pull request #1237 from hedgedoc/renovate/master-mkdocs-material-7.x
Update dependency mkdocs-material to v7.1.4 (master)
2021-05-06 21:26:47 +02:00
David Mehren
dfaa6b25a7
Merge pull request #1236 from hedgedoc/renovate/master-webpack-cli-4.x
Update dependency webpack-cli to v4.7.0 (master)
2021-05-06 21:26:07 +02:00
David Mehren
cec032d151
Merge pull request #1223 from hedgedoc/fix/useSSL
Automatically enable protocolUseSSL when useSSL is set
2021-05-06 21:24:49 +02:00
David Mehren
aece96f539
Automatically enable protocolUseSSL when useSSL is set
This makes the behavior consistent with the docs and
 saves the user from having to both set
 `useSSL` and `protocolUseSSL`.

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 21:19:14 +02:00
David Mehren
140b2c261c
Merge pull request #1222 from hedgedoc/fix/upgrade_insecure_requests
Fix upgradeInsecureRequests CSP directive
2021-05-06 21:18:46 +02:00
David Mehren
dc1f621eb8
Merge pull request #1233 from hedgedoc/fix/insertOnStartOfLines
Fix insertOnStartOfLines behaviour
2021-05-06 21:16:22 +02:00
David Mehren
41c86d1cf1
Use esbuild to minify frontend JS
This speeds up build times massively

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-06 21:13:56 +02:00
Renovate Bot
24e2f62f1c
Update dependency webpack-cli to v4.7.0
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-05-06 19:10:17 +00:00
Renovate Bot
0ec7daf5f7
Update dependency mkdocs-material to v7.1.4
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-05-06 19:09:54 +00:00
David Mehren
ad7fadee17
Merge pull request #1226 from hedgedoc/enhancement/devDependencies 2021-05-06 21:08:44 +02:00
David Mehren
9d3902d208
Merge pull request #1234 from hedgedoc/fix/numbered-task-lists
Fix click handler for numbered task lists
2021-05-06 21:07:21 +02:00
Erik Michelson
7f8be22e97
Fix click handler for numbered task lists
The regex for tasklists in 1.x didn't include upper-case x/X letters nor ordered lists (1. [ ] abc).
This commit changes the regex to allow both.

Signed-off-by: Erik Michelson <opensource@erik.michelson.eu>
2021-05-05 23:34:03 +02:00
David Mehren
e4b2b6ff73
Fix insertOnStartOfLines behaviour
A bug in insertOnStartOfLines lead to duplicated text,
if the cursor was not at the start of a line.

This fixes the behaviour of insertOnStartOfLines to always use
the complete first and last line of the selection,
even if they were only partially selected.

Fixes #1231

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-05 22:57:49 +02:00
David Mehren
926493a983
Only install production dependencies in bin/setup
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-05 15:38:00 +02:00
David Mehren
317aba65d8
Move frontend-only deps to devDependencies
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-05 13:35:14 +02:00
David Mehren
0b61f48129
Fix upgradeInsecureRequests CSP directive
The `upgradeInsecureRequests` option of Helmets CSP middleware
was a boolean in Helmet 3, but with Helmet 4,
everything changed to lists.
This commit adjusts the addUpgradeUnsafeRequestsOptionTo
function accordingly.

Closes #1221

See also https://github.com/helmetjs/helmet/tree/v4.6.0/middlewares/content-security-policy

Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-04 11:10:53 +02:00
David Mehren
f48e36d205
Merge pull request #1219 from hedgedoc/release/1.8.0 2021-05-03 22:49:15 +02:00
David Mehren
e6d4ac5f9a
Remove mention of .sequelizerc from docs
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-03 22:26:08 +02:00
David Mehren
73e26e1d2d
Bump version to 1.8.0
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-03 22:26:08 +02:00
David Mehren
30a91b6fd7
Add release notes for 1.8.0
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-03 22:26:08 +02:00
Yannick Bungers
9d08eaec8f
Merge pull request #1213 from hedgedoc/renovate/master-lock-file-maintenance
Lock file maintenance (master)
2021-05-03 21:31:51 +02:00
Renovate Bot
de96462bc2
Lock file maintenance
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-05-03 19:25:15 +00:00
Yannick Bungers
c6590a84ed
Merge pull request #1218 from hedgedoc/maintenance/master/update_meta-marked
Update meta-marked
2021-05-03 21:21:47 +02:00
David Mehren
287928e8a8
Merge pull request #1210 from hedgedoc/renovate/master-mini-css-extract-plugin-1.x
Update dependency mini-css-extract-plugin to v1.6.0 (master)
2021-05-03 21:08:28 +02:00
David Mehren
d029d0bf41
Update meta-marked in yarn.lock
Signed-off-by: David Mehren <git@herrmehren.de>
2021-05-03 18:19:06 +02:00
Renovate Bot
5d8a499d52
Update dependency mini-css-extract-plugin to v1.6.0
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-04-30 12:46:00 +00:00
Yannick Bungers
f5d8d26728
Merge pull request #1204 from hedgedoc/renovate/master-mini-css-extract-plugin-1.x
Update dependency mini-css-extract-plugin to v1.5.1 (master)
2021-04-29 16:46:08 +02:00
Renovate Bot
ae71297ae1
Update dependency mini-css-extract-plugin to v1.5.1
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-04-28 14:18:36 +00:00
David Mehren
90a8aebb71
Merge pull request #1191 from hedgedoc/release/1.8.0-rc1 2021-04-26 22:20:57 +02:00
Erik Michelson
0d943d1284
Extract list of supported languages in separate file
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2021-04-26 21:45:31 +02:00
David Mehren
cf87499e38
Fix wrong placeholder in translations
Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:45:31 +02:00
David Mehren
0bf97f30c4
Add changelog for 1.8.0-rc1
Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:45:31 +02:00
David Mehren
837cf59ef9
Add support for freshly imported languages
New languages: bg, fa, gl, he, hu, oc, pt-br

Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:42:06 +02:00
David Mehren
e4c8f869f0
Add translators to the list of contributors for 1.8.0-rc1
Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:42:06 +02:00
David Mehren
f170dc2669
Update translations from POEditor.com
New languages: bg, fa, gl, he, hu, oc, pt-br
Updated languages: ar, en, eo, es, hi, ja, ko, pl, pt, tr, zh-TW

Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:42:06 +02:00
David Mehren
6cccc558e6
Bump version to 1.8.0-rc1
Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26 21:42:03 +02:00
David Mehren
75f1192dbe
Merge pull request #1196 from hedgedoc/renovate/master-lock-file-maintenance
Lock file maintenance (master)
2021-04-26 21:41:49 +02:00
Renovate Bot
3e27c4cfb3
Lock file maintenance
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-04-26 19:31:47 +00:00
David Mehren
7ea3357ba8
Merge pull request #1201 from hedgedoc/remove-polyfill 2021-04-26 21:30:06 +02:00