~technomancy/gotosocial

[performance] ffmpeg ffprobe wrapper improvements (#3225)

* use a single instance of wazero runtime and compiled modules

* remove test output :facepalm:

* undo process-{media,emoji} changes

* update test runner to include wazero compilation cache

* sign drone.yml

---------

Co-authored-by: tobi <tobi.smethurst@protonmail.com>
[feature] Use `local_only` field, deprecate `federated` field (#3222)

* [feature] Use `local_only` field, deprecate `federated` field

* use `deprecated` comment for form.Federated

* nolint
[bugfix/frontend] Small safari + gnome web fixes (#3219)

* [bugfix/frontend] Small safari + gnome web fixes

* wee

* update comment
[bugfix/frontend] Fix error on submitting domain perm with enter key (#3218)

[performance] use native Go code to probe JPEGs (#3206)

* use native Go code to probe JPEGs

* add note about copying from github.com/disintegration/imaging

* add more code comments
[chore] update default http client timeout to 30s (#3214)

c78c3d5e — dependabot[bot] 5 months ago
[chore]: Bump github.com/miekg/dns from 1.1.61 to 1.1.62 (#3209)

c28a18b6 — dependabot[bot] 5 months ago
[chore]: Bump github.com/minio/minio-go/v7 from 7.0.74 to 7.0.75 (#3208)

6ff8376d — dependabot[bot] 5 months ago
[chore]: Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 (#3210)

[bugfix] permit unspecified orientation data (#3205)

update go-sqlite3 to v0.18.0 (#3204)

update go-ffmpreg to v0.2.5 (pulls in latest tetratelabs/wazero) (#3203)

update go-fastcopy to v1.1.3 (#3200)

update go-structr to v0.8.8 (#3199)

[security] harden account update logic (#3198)

* on account update, ensure that public key has not changed

* change expected error message

* also support the case of changing account keys when expired (not waiting for handshake)

* tweak account update hardening logic, add tests for updating account with pubkey expired

* add check for whether incoming data was via federator, accepting keys if so

* use freshest window for federated account updates + comment about it
[bugfix] relax missing preferred_username, instead using webfingered username (#3189)

* support no preferred_username, instead using webfingered username

* add tests for the new preferred_username behaviour
[bugfix] incorrect AP serialize function used serializing worker data (#3196)

871d062b — dependabot[bot] 6 months ago
[chore]: Bump golang.org/x/image from 0.18.0 to 0.19.0 (#3191)

745b8025 — dependabot[bot] 6 months ago
[chore]: Bump golang.org/x/net from 0.27.0 to 0.28.0 (#3194)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/net/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[bugfix] updated pinned counts on status delete (#3188)

* include pinned status when incrementing / decrementing status counts

* remove the pinned increment on status creation

* code comments

* microoptimize decr
Next
Do not follow this link