901 Commits

Author SHA1 Message Date
Half-Shot
eb16bb761a update default config 2025-02-04 10:30:14 +00:00
Half-Shot
a3b878f4ba Add feature 2025-02-04 10:11:07 +00:00
Half-Shot
d5ec37cafd Add ability to specify a legacy read-only key. 2025-02-04 10:09:46 +00:00
Half-Shot
50525b3bea Update 6.0.2 with CVEs 2025-01-23 08:06:42 +00:00
Half-Shot
80c87c4bfc 6.0.2 6.0.2 2025-01-23 07:57:43 +00:00
Will Hunt
e51d821023
Merge commit from fork 2025-01-23 07:55:20 +00:00
Will Hunt
a12ea4a930
Support building docker images for arm64 natively. (#1007)
* Try running arm builds on native platform and them combining them at the end.

* Rework flow for manifest making

* fix login action

* login to both

* Use a matrix loop

* try using json

* changelog
2025-01-17 15:53:02 +00:00
Half-Shot
d866355171 fix tests not working on Node v23 2025-01-17 15:43:55 +00:00
Half-Shot
c5332cc7f2 fix build failures 2025-01-17 15:26:43 +00:00
Half-Shot
bff68d8a6e 6.0.1 6.0.1 2024-11-29 13:13:09 +00:00
Half-Shot
ede6856347 build for all platforms upon release 2024-11-29 13:11:29 +00:00
Half-Shot
52eeb0b541 6.0.0 6.0.0 2024-11-29 09:57:56 +00:00
Will Hunt
424c475e2a
Update matrix-bot-sdk 0.7.1 element.7 (#996)
* @vector-im/matrix-bot-sdk@0.7.1-element.7

* newsfile

* sneak in a fix for devenv workflow
2024-11-29 09:51:01 +00:00
Will Hunt
283375c6c1
Retry E2E tests on failure if running in CI. (#995)
* Retry E2E tests in CI

* newsfile
2024-11-29 09:32:18 +00:00
Will Hunt
d550077f3e
Rewrite docker workflow. (#994)
* Rewrite docker workflow.

* tidy

* Create 994.misc

Signed-off-by: Will Hunt <will@half-shot.uk>

---------

Signed-off-by: Will Hunt <will@half-shot.uk>
2024-11-29 09:15:53 +00:00
Will Hunt
819c089aa4
Update minimum Node version to 22 (#990)
* Update dependencies

* Node 22 is now the new minimum version.

* changelog.

* Begin porting eslint to new config format.

* Make linter happy.

* Update reqwest to fix SSL issue?

* Fix test types

* quick check on ubuntu LTS 24.04

* Change cache key

* update rust action

* revert mocha due to esminess

* Remove the only usage of pqueue

* Use babel for TS transformations to get around ESM import bug.

* Dependency bundle upgrade

* Drop babel, not actually used.

* lint

* lint

* update default config (mostly sections moving around)
2024-11-28 15:04:01 +00:00
Will Hunt
745699abd3
Add devenv development files (#993)
* Add devenv config

* Use Node 20 for now.

* changelog
2024-11-28 10:49:11 +00:00
Will Hunt
052d42fca8
Stabilize E2EE support (#989)
* Deprecate legacy sled store

* Add e2ee test

* Add support for e2ee testing in e2e environment

* Tidy up redis support

* Attempt to get test working

* cleanup test

* opportunistic lint

* tiny bit of cleanup

* remove ref

* tweak to homerunner

* switch to nightly images for Synapse (to test E2EE)

* use nightly

* newsfile.

* Update bot sdk to support authenticated media (now that Synapse requires it)

* fix typings

* MatrixError

* one more

* Graduate the encryption property to stable.

* update test config

* Update encryption docs.

* fix some old config bits
2024-11-26 16:04:56 +00:00
Will Hunt
46b0004581
Skip newsfile CI check for dependabot. (#987)
* skip newsfile for dependabot.

* changelog
2024-11-19 10:53:03 +00:00
Will Hunt
6da67db058
Rename 987.misc to 985.misc
Signed-off-by: Will Hunt <will@half-shot.uk>
2024-11-19 10:52:54 +00:00
Will Hunt
eecf61f090
Rename 985.feature to 984.feature
Signed-off-by: Will Hunt <will@half-shot.uk>
2024-11-19 10:52:36 +00:00
Will Hunt
f0651a6cff
Reduce bundle size for widget room configs (#985)
* Add dynamic imports for room configs.

* Try to move code editor to imports

* Load code editor on demand to save a bundle load.

* Load fonts from npm

* changelog

* lint
2024-11-19 09:13:42 +00:00
dependabot[bot]
f630bcccb7
Bump cross-spawn from 7.0.3 to 7.0.6 (#986)
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-19 09:04:32 +00:00
dependabot[bot]
f1fe49f9f7
Bump axios from 1.7.4 to 1.7.5 (#983)
Bumps [axios](https://github.com/axios/axios) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.7.4...v1.7.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-19 09:04:22 +00:00
Will Hunt
80c7d35a18
Add an expiry time to inbound webhooks (#984)
* Add logic to enable generic hook expiry

* Add storage for hook expiry warnings.

* Migrate generic hooks / add expiry field

* Allow reporting a specific error and status code for generic webhooks

* Report the specific error when a message fails to send

* Refactor input class to better support datetime

* Remove single use of innerChild

* Add UI support for expiry configuration

* Add new packages

* Add warnings when the timer is about to expire.

* Add send expiry notice config option

* lint

* document new option s

* Fixup test

* Add tests for expiry

* Add textual command for setting a duration on a webhook.

* Add e2e test for inbound hooks.

* changelog

* Add a configuration option to force webhooks to expire.

* update config.sample.yml

* fix field not working
2024-11-18 17:08:52 +00:00
Will Hunt
6571b9f710
Fix challengehound duplication bug. (#982)
* Fix challengehound duplication bug.

* Missed a bit

* No-op if no hashes need to be pushed.

* changelog

* lint
2024-10-29 11:07:56 +00:00
dependabot[bot]
a9d8044633
Bump axios from 1.6.8 to 1.7.4 (#975)
Bumps [axios](https://github.com/axios/axios) from 1.6.8 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.6.8...v1.7.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-29 11:02:24 +00:00
dependabot[bot]
7fbd07316e
Bump express from 4.18.2 to 4.20.0 (#976)
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.20.0.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.20.0)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-29 11:02:04 +00:00
dependabot[bot]
ba793f1ca7
Bump rollup from 4.9.1 to 4.24.0 (#978)
Bumps [rollup](https://github.com/rollup/rollup) from 4.9.1 to 4.24.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.9.1...v4.24.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-29 11:01:52 +00:00
dependabot[bot]
5b88324727
Bump vite from 5.0.13 to 5.1.8 (#977)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.0.13 to 5.1.8.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.1.8/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.1.8/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-29 11:01:40 +00:00
dependabot[bot]
7083534b7b
Bump openssl from 0.10.64 to 0.10.66 (#968)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.64 to 0.10.66.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.64...openssl-v0.10.66)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 11:29:14 +01:00
dependabot[bot]
133f79c3ba
Bump micromatch from 4.0.5 to 4.0.8 (#970)
Bumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.5 to 4.0.8.
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.5...4.0.8)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 11:29:05 +01:00
Andrew Ferrazzutti
2763801d1b 5.4.1 5.4.1 2024-06-21 13:37:59 -04:00
Andrew Ferrazzutti
5c5e8ce767
Pin the Node minor version for Docker builds (#949)
* Pin the Node minor version for Docker builds

as 20.13 & 20.14 cause Hookshot to crash on startup (at least on arm64)

* Add changelog
2024-06-21 15:56:06 +00:00
Andrew Ferrazzutti
5dae23b2ad 5.4.0 5.4.0 2024-06-20 07:46:02 -04:00
Kévin Commaille
863065792e
Fix rendering of comments of GitLab merge requests (#937)
* Fix rendering of comments of GitLab merge requests

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

* Add changelog

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

* Change variable name to appease linter

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

---------

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
2024-06-19 17:28:51 +00:00
Will Hunt
7573d37527
Outbound Webhooks (#945)
* Initial support for outbound webhooks.

* Refactor outbound into it's own connection type.

* Add support for media / encrypted media.

* Ensure we configure a sensible User Agent

* Add a test for outbound webhooks

* Checkpoint for feature completeness.

* Lint tidy

* Finish up media tests.

* changelog

* Add outbound documentation

* update default config

* fix tests
2024-06-19 18:28:00 +01:00
Kévin Commaille
60ccc041b3
Fix the symbol used to prefix GitLab merge requests (#938)
* Fix the symbol used to prefix GitLab merge requests

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

* Add changelog

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

---------

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
2024-06-12 10:03:32 +01:00
Kévin Commaille
2bffd5c90e
Fix GitLab's ready for review hook (#936)
* Fix GitLab's ready for review hook

As far back as I could go in the docs (GitLab 14.10),
the keys for changes have been `previous` and `current`.

There is a `draft` change that
we can use directly
instead of guessing from the title.
The type of the value depends on
the key of the change.

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

* Add changelog

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

---------

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
Co-authored-by: Will Hunt <will@half-shot.uk>
2024-05-22 12:17:29 +00:00
Kévin Commaille
e5705e74c0
Add support for reopened GitLab MR (#935)
* Add support for reopened GitLab MR

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

* Add changelog

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

---------

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
2024-05-22 11:05:14 +00:00
Will Hunt
6b039c94bf
Add challengeHound to README (#932)
Signed-off-by: Will Hunt <will@half-shot.uk>
2024-04-19 08:42:40 +01:00
Will Hunt
600fe4a6ac
Fix CH docs
Signed-off-by: Will Hunt <will@half-shot.uk>
2024-04-17 11:22:15 +01:00
Half-Shot
ab918bd293 5.3.0
amend changelog
5.3.0
2024-04-17 11:19:12 +01:00
Will Hunt
cf689919a4
Fix tokens encrypted with Node crypto implementation being undecryptable in new Rust implementation. (#930)
* Encrypt with new padding algo when possible.

* formatting

* changelog
2024-04-17 10:00:00 +00:00
Will Hunt
79bfffc13a
Clarify permission system. (#925)
* Clarify permission system.

* Rename 925.docs to 925.doc

Signed-off-by: Will Hunt <will@half-shot.uk>

---------

Signed-off-by: Will Hunt <will@half-shot.uk>
2024-04-16 21:06:41 +00:00
Will Hunt
45060f2b58
Apply CSPs to generic hook responses. (#926)
* Add CSPs to generic hook response.

* changelog

* Apply suggestions from code review

Co-authored-by: davidegirardi <16451191+davidegirardi@users.noreply.github.com>
Signed-off-by: Will Hunt <github@half-shot.uk>

---------

Signed-off-by: Will Hunt <github@half-shot.uk>
Co-authored-by: davidegirardi <16451191+davidegirardi@users.noreply.github.com>
2024-04-16 21:06:33 +00:00
Will Hunt
ff200114a6
Fix PKCS1 handling (#929)
* Support pkcs1 format keys.

* Test pkcs1 support.

* changelog

* rust formatting
2024-04-16 21:05:36 +00:00
Will Hunt
4839340c86
Add support for edit tracking in challenge hound & fix a few bugs. (#927)
* Fix a namespace conflict.

* Add support for edits.

* Couple of bugfixes.

* changelog

* Support pkcs1 format keys.

* Add docs for official API.

* couple of cleanups

* Revert "Support pkcs1 format keys."

This reverts commit 157cc4ac1269ecdeb64529c51b79d11463cdbbfd.
2024-04-16 22:05:06 +01:00
Will Hunt
1b5e0a4c21
Add support for Challenge Hound (#924)
* Add challenge hound connection type

* Add config

* Add bridge bindings

* Add reader implementation.

* Obvious renames.

* bit more tidying

* refactor

* fix imports

* fix import

* Start feed reader and recognise service.

* Move to using IDs rather than URLs for better security.

* lint

* Validate that challenge exists.

* Drive-by refactors.

* Add add/remove commands for challenge hound.

* Add challenge hound docs.

* Refactor icons

* add some more activity definitions

* changelog

* cleanup feed work
2024-04-12 13:38:26 +01:00
dependabot[bot]
7f5bde990a
Bump axios from 0.21.4 to 1.6.8 (#923)
Bumps [axios](https://github.com/axios/axios) from 0.21.4 to 1.6.8.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v0.21.4...v1.6.8)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-08 16:03:11 +01:00