Bump version

CHANGELOG.md

@@ -305,3 +305,9 @@ Update web browsers support list:
 * Fix invalid remote live state change notification that causes the player to reload
 * Don't apply big play button skin to settings menu
 * Fix downloading video files from object storage with some video names (that include emojis, quotes etc)
+
+[2.15.2]
+* Update PeerTube to 6.0.4
+* [Full changelog](https://github.com/Chocobozzz/PeerTube/releases/tag/v6.0.4)
+* Important: Prevent XSS injection in embed. Thanks Syst3m0ver!
+

CloudronManifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "2.15.1",
-  "upstreamVersion": "6.0.3",
+  "version": "2.15.2",
+  "upstreamVersion": "6.0.4",
   "id": "org.joinpeertube.cloudronapp",
   "title": "PeerTube",
   "author": "PeerTube developers",

Dockerfile

@@ -5,7 +5,7 @@ WORKDIR /app/code/server
 
 RUN apt update && apt install -y prosody && rm -rf /var/cache/apt /var/lib/apt/lists
 
-ARG VERSION=6.0.3
+ARG VERSION=6.0.4
 
 # install peertube. the chown is required for some reason for ffmpeg. it fails with EROFS without it when transcoding
 RUN curl -sL https://github.com/Chocobozzz/PeerTube/releases/download/v${VERSION}/peertube-v${VERSION}.tar.xz | tar --strip-components 1 -Jxvf - && \

test/package.json

@@ -10,11 +10,11 @@
   "license": "ISC",
   "devDependencies": {
     "expect.js": "^0.3.1",
-    "mocha": "^10.2.0"
+    "mocha": "^10.4.0"
   },
   "dependencies": {
-    "chromedriver": "^120.0.1",
+    "chromedriver": "^123.0.1",
     "safetydance": "^2.4.0",
-    "selenium-webdriver": "^4.16.0"
+    "selenium-webdriver": "^4.19.0"
   }
 }

test/test.js

@@ -88,12 +88,10 @@ describe('Application life cycle test', function () {
         await browser.sleep(2000);
 
         if (!athenticated_by_oidc) {
-            await waitForElement(By.xpath('//input[@name="username"]'));
-            await browser.findElement(By.xpath('//input[@name="username"]')).sendKeys(username);
-            await browser.findElement(By.xpath('//input[@name="password"]')).sendKeys(password);
-            await browser.sleep(2000);
-            await browser.findElement(By.xpath('//button[@type="submit" and contains(text(), "Sign in")]')).click();
-            await browser.sleep(2000);
+            await waitForElement(By.id('inputUsername'));
+            await browser.findElement(By.id('inputUsername')).sendKeys(username);
+            await browser.findElement(By.id('inputPassword')).sendKeys(password);
+            await browser.findElement(By.id('loginSubmitButton')).click();
 
             athenticated_by_oidc = true;
         }