github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-22 01:36:29 -05:00
Code Issues Projects Releases Packages Wiki Activity
6436 commits 39 branches 47 tags 112 MiB
Commit graph

1334 commits

Author SHA1 Message Date
renovate[bot]
5f438a7e27 fix(deps): update dependency picocolors to v1.0.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:16:30 +00:00
renovate[bot]
062d5b34b9 fix(deps): update dependency katex to v0.16.11 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:15:30 +00:00
renovate[bot]
7d4d69c3fd fix(deps): update dependency emoji-picker-element-data to v1.6.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:14:20 +00:00
renovate[bot]
c98fa9ca1a fix(deps): update dependency dompurify to v3.0.11 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:12:24 +00:00
renovate[bot]
179f671796 fix(deps): update dependency bootstrap to v5.3.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:11:31 +00:00
renovate[bot]
e83c083c65 fix(deps): update dependency @orama/orama to v2.0.23 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:10:51 +00:00
renovate[bot]
2fbc425bb3 fix(deps): update dependency @dicebear/core to v7.0.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 09:10:06 +00:00
renovate[bot]
180f1d7da3 chore(deps): update nextjs monorepo to v14.1.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 08:52:59 +00:00
renovate[bot]
b7c4e0c4a2 chore(deps): update testing-library 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 07:17:25 +00:00
renovate[bot]
e229d93cdd chore(deps): update linters 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 05:26:16 +00:00
renovate[bot]
e3b93ad9a1 chore(deps): update dependency yjs to v13.6.18 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 05:25:31 +00:00
renovate[bot]
58defe5b3a chore(deps): update dependency cypress to v13.6.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:52:41 +00:00
renovate[bot]
2cc71588fe fix(deps): update dependency ws to v8.17.1 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 00:43:05 +02:00
renovate[bot]
d31b2af368 chore(deps): update codemirror 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:41:17 +00:00
renovate[bot]
14fe9470dd chore(deps): update node.js to 1a526b9 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:07:27 +00:00
Erik Michelson
f9b6f6851b feat(editor): re-add editor mode buttons (edit/both/view) 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-08-23 18:13:58 +02:00
Erik Michelson
9cbd78f622 fix(frontend): do not hardcode example.org, do not prebuild motd 
The motd.md is user-supplied and should therefore not be prebuild during
the HedgeDoc build process. As that required the presence of the base
URL which is also not available in the build context, it fell back to
our fallback value example.org, thus breaking offline builds.
By removing the example.org domains and disabling the prebuild for the
motd, this seems fixed.

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-08-07 21:28:17 +02:00
Erik Michelson
1f1231a730 ci: remove netlify deployment workflow 
This workflow was used in an early stage of development of HedgeDoc 2.
It allowed the core developers to quickly check fixes, improvements or
new features to the HedgeDoc UI without the requirement to check-out
the branch locally. As not every pull request required a deployment,
this workflow was only triggered when the "ci: force deployment"
label was added. Since some time already, the frontend and backend
are so tightly coupled that the netfliy deployment doesn't make any
sense anymore and therefore hasn't been used anymore. This commit
therefore removes this leftover workflow.

@RedYetiDev contacted us privately and reported that this deployment
workflow could have been abused to invoke arbitrary commands, including
extraction of environment variables which include our tokens for the
turborepo build cache or the netlify deployment token. For this it
would have been required that somebody created a "safe" pull request,
which would have been labelled with the deployment label and then
changed afterwards since the workflow checks out the pull request
source repository, not the target. We assured that the label was only
added to pull requests from trusted members of the HedgeDoc core team.
There was never any malicious use of the workflow. Furthermore, no
released versions of HedgeDoc (1.x) could have been affected by this,
even in the worst-case scenario.

We're thankful for putting this risk at our attention!
If you too encounter something unusual regarding security in HedgeDoc
itself or our toolchain around it, don't hesitate to contact us.
Details on this are wriiten in our SECURITY.md in the root of the
repository.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-07-30 08:48:38 +02:00
renovate[bot]
3513377d2d fix(deps): update dependency next to v14.1.1 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-10 07:42:49 +00:00
Erik Michelson
6bb2452705 feat(sidebar): add media browser 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-18 22:11:49 +02:00
Erik Michelson
8693edbf6a refactor(media): add media redirection endpoint 
Previous versions of HedgeDoc suffered from the problem
that changing the media backend required manipulation of
the media links in all created notes. We discussed in
#3704 that it's favourable to have an endpoint that
redirects to the image's original URL. When changing the
media backend, the link stays the same but just the
redirect changes.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-18 22:11:49 +02:00
renovate[bot]
662de1e9f8 fix(deps): update dependency reveal.js to v5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-04-09 11:40:15 +02:00
Erik Michelson
f7c70ebee1 test(utils): add tests for updateObject util 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-09 10:55:38 +02:00
Erik Michelson
d840a6f0b1 refactor(redux): migrate to RTK2 store definition 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-09 10:55:38 +02:00
renovate[bot]
8b501915f5 chore(deps): upgrade redux packages 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-04-09 10:55:38 +02:00
Erik Michelson
0db5a0856b feat(sidebar): add gitlab snippet and github gist export 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-04 00:36:48 +02:00
Erik Michelson
5fd8c02637 enhancement(sidebar): remove useless import from clipboard btn 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-04 00:36:48 +02:00
Erik Michelson
2473075a33 fix(notifications): use translation hook to eval replacements 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-04 00:36:48 +02:00
Erik Michelson
1f60a7dedf enhancement(notifications): add possibility to show catched error message 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-04 00:36:48 +02:00
Erik Michelson
4755af4ac5 enhancement(sidebar): hide note deletion button when not being owner 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-04 00:36:48 +02:00
Erik Michelson
4b8f6da78a enhancement(renderer): custom uri protocols in links except scripts 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:45:40 +02:00
Erik Michelson
9d55c5ee53 fix(sidebar): remove double borders from sidebar menus 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:44:42 +02:00
Erik Michelson
1e8590da6c enhancement(renderer): improve accessibility of links 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:44:42 +02:00
Erik Michelson
1fd6e4e1b1 fix(loading-screen): do not show empty errorMessage when being null 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:44:42 +02:00
Erik Michelson
e3ae6a174f fix(renderer-style): remove duplicated css styles 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:44:42 +02:00
Erik Michelson
c7cb4ae7d3 fix(renderer-style): reduce table line breaks 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-04-03 23:44:42 +02:00
renovate[bot]
ad3859c9df fix(deps): update dependency katex to v0.16.10 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-25 23:21:37 +00:00
renovate[bot]
a6c2bbe1e7 fix(deps): update dependency copy-webpack-plugin to v12 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-23 01:36:41 +01:00
yamashush
c5d8341c45 fix(frontend): improves UI/UX of aliases modal 
Signed-off-by: yamashush <38120991+yamashush@users.noreply.github.com>
 2024-03-01 18:33:02 +01:00
renovate[bot]
f56abf74e0 fix(deps): update dependency sass to v1.71.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-01 18:10:49 +01:00
renovate[bot]
61bf3adf99 chore(deps): update linters 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-01 17:51:22 +01:00
renovate[bot]
5775b07b2d chore(deps): update dependency @types/node to v20.11.18 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 15:34:38 +00:00
renovate[bot]
fc7b6f8d3d fix(deps): update dependency @orama/orama to v2.0.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-13 21:34:53 +00:00
renovate[bot]
3dad5fce2c fix(deps): update dependency twemoji-colr-font to v15 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 12:47:14 +01:00
Erik Michelson
38e2fe24a4 fix(types): fix types for markdown-it-emoji 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-02-12 00:46:57 +01:00
renovate[bot]
b47d728698 fix(deps): update dependency markdown-it-emoji to v3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-12 00:46:57 +01:00
renovate[bot]
144b8e29d8 fix(deps): update dependency react-i18next to v14 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-11 23:58:52 +01:00
Tilman Vatteroth
8388793a77 test: update snapshot of abc-frame 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 18:00:34 +01:00
renovate[bot]
663faaf8f7 chore(deps): update yarn to v4.1.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 18:00:34 +01:00
renovate[bot]
a090070c79 fix(deps): update dependency mermaid to v10.8.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 18:00:34 +01:00