Compare commits

..

4 commits

Author SHA1 Message Date
Johannes Zellner 25292a86b4 Make tests language independent 2024-02-14 18:05:43 +01:00
Vladimir D 146b5ac17e OIDC auth implemented, tests updated 2024-02-14 18:05:43 +01:00
Johannes Zellner fdc4e20c77 Bump version 2024-02-14 18:05:43 +01:00
Johannes Zellner 886f27ec9a Update to 4.2.6 2024-02-14 18:02:59 +01:00
4 changed files with 14 additions and 4 deletions

View file

@ -438,3 +438,13 @@
* [Full changelog](https://github.com/mastodon/mastodon/releases/tag/v4.2.5)
* Fix insufficient origin validation (CVE-2024-23832, GHSA-3fjr-858r-92rw)
[1.12.6]
* Update Mastodon to 4.2.6
* This release is an important security release fixing several security issue.
* [Full changelog](https://github.com/mastodon/mastodon/releases/tag/v4.2.6)
* Change external authentication behavior to never reattach a new identity to an existing user by default (GHSA-vm39-j3vx-pch3)
* Update the nokogiri dependency (see GHSA-xc9x-jj77-9p9j)
* Disable administrative Doorkeeper routes (ThisIsMissEm)
* Fix ongoing streaming sessions not being invalidated when applications get deleted in some cases (GHSA-7w3c-p9j8-mq3x)
* Update the sidekiq-unique-jobs dependency (see GHSA-cmh9-rx85-xj38)

View file

@ -5,8 +5,8 @@
"description": "file://DESCRIPTION.md",
"changelog": "file://CHANGELOG",
"tagline": "Federated social network",
"version": "1.12.5",
"upstreamVersion": "4.2.5",
"version": "1.12.6",
"upstreamVersion": "4.2.6",
"healthCheckPath": "/about",
"httpPort": 8000,
"memoryLimit": 1610612736,

View file

@ -33,7 +33,7 @@ RUN gem install --no-document bundler
ENV RAILS_ENV production
ENV NODE_ENV production
ARG VERSION=4.2.5
ARG VERSION=4.2.6
RUN curl -L https://github.com/tootsuite/mastodon/archive/v${VERSION}.tar.gz | tar -xz --strip-components 1 -f - && \
bundle config --local set deployment 'true' && \

View file

@ -95,7 +95,7 @@ describe('Application life cycle test', function () {
await browser.findElement(By.xpath('//input[@name="username"]')).sendKeys(username);
await browser.findElement(By.xpath('//input[@name="password"]')).sendKeys(password);
await browser.sleep(2000);
await browser.findElement(By.xpath('//button[@type="submit" and contains(text(), "Sign in")]')).click();
await browser.findElement(By.id('loginSubmitButton')).click();
await browser.sleep(2000);
athenticated_by_oidc = true;