Commit graph

328 commits

Author SHA1 Message Date
Julian Lam
a5c7d864c6 7.6.0 2025-09-18 13:32:35 -04:00
Julian Lam
1b32abbf11 fix: open redirection vulnerability 2025-09-18 13:32:28 -04:00
Barış Soner Uşaklı
75f297a041 7.5.10 2025-05-01 10:06:42 -04:00
Barış Soner Uşaklı
a4ce0a96fa upgrade eslint 2025-05-01 09:48:47 -04:00
Barış Soner Uşaklı
d8054e0137 7.5.9 2025-02-15 11:59:24 -05:00
Barış Soner Uşaklı
74eaed37aa https://github.com/NodeBB/NodeBB/issues/13147 2025-02-15 11:59:12 -05:00
Barış Soner Uşaklı
a756943437 7.5.8 2025-01-14 09:59:36 -05:00
Barış Soner Uşaklı
eb05fa00a7 https://github.com/NodeBB/NodeBB/issues/13047 2025-01-14 09:59:10 -05:00
dependabot[bot]
5af445aa94 chore(deps-dev): bump micromatch from 4.0.5 to 4.0.8
Bumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.5 to 4.0.8.
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.5...4.0.8)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-09 13:52:57 -05:00
Julian Lam
d4991c3987 7.5.7 2024-11-19 11:28:45 -05:00
dependabot[bot]
1f1f48f04f chore(deps): bump elliptic from 6.5.7 to 6.6.1
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.7 to 6.6.1.
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.7...v6.6.1)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-19 11:28:40 -05:00
dependabot[bot]
395cd45049 chore(deps-dev): bump cross-spawn from 7.0.3 to 7.0.6
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-19 11:05:12 -05:00
Julian Lam
aa9adc2538 7.5.6 2024-10-04 11:56:46 -04:00
Julian Lam
dd603cd69e fix: bug where admins without 2fa were sent to 2fa challenge on relogin 2024-10-04 11:56:46 -04:00
dependabot[bot]
36bd614244 chore(deps): bump elliptic from 6.5.4 to 6.5.7
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.4 to 6.5.7.
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.4...v6.5.7)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-14 09:11:21 -04:00
Julian Lam
4f5da919b1 7.5.5 2024-09-13 11:30:10 -04:00
Julian Lam
8a70d66425 fix: use req.uid instead of req.user.uid 2024-09-13 11:30:08 -04:00
Julian Lam
29401232b0 7.5.4 2024-08-08 14:53:03 -04:00
Julian Lam
759f8ee732 fix: regression (missing user data) caused by nodebb/nodebb@66adfa2999 2024-08-08 14:52:59 -04:00
dependabot[bot]
6d9d52acb3 chore(deps-dev): bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 16:26:31 -04:00
Barış Soner Uşaklı
5741dbda25 7.5.3 2024-06-09 13:53:33 -04:00
Barış Soner Uşaklı
4e8b12ffa4 perf: dont make db calls for guests and spiders 2024-06-09 13:52:24 -04:00
NavyStack
0911dc0157 translate fin 2024-05-15 11:58:13 -04:00
NavyStack
b82131dde7 korean reset hard 2024-05-15 11:58:13 -04:00
Julian Lam
201387057b 7.5.2 2024-05-15 11:52:06 -04:00
dependabot[bot]
ade302dc07 chore(deps): bump semver and @commitlint/cli
Bumps [semver](https://github.com/npm/node-semver) to 7.6.2 and updates ancestor dependency [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli). These dependencies need to be updated together.


Updates `semver` from 7.3.2 to 7.6.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.3.2...v7.6.2)

Updates `@commitlint/cli` from 9.1.2 to 19.3.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.3.0/@commitlint/cli)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
- dependency-name: "@commitlint/cli"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-15 11:51:59 -04:00
Julian Lam
0a15b13f6a 7.5.1 2024-05-14 12:36:56 -04:00
Sylwester Cyba
9c8ca638fe Update PL translation
EN to PL and minor fixes.
2024-05-14 12:36:33 -04:00
Julian Lam
3dcfb6f8be 7.5.0 2024-04-02 11:43:53 -04:00
Julian Lam
97a1cf398b fix: bump compatibility as client-side hook used is only in 3.8.0 2024-04-02 11:43:49 -04:00
Julian Lam
aac9997371 fix: have adjustRelogin only function for cold loads, use client-side hook for relogin hijack on ajaxify instead 2024-04-02 11:43:35 -04:00
Julian Lam
065963c139 7.4.0 2023-10-03 13:12:51 -04:00
Julian Lam
948984010a fix: #80, notify user if 2fa challenge fails 2023-10-03 13:12:47 -04:00
Julian Lam
b5a0d6aa3f fix: report socket access attempts if 2FA is required 2023-10-03 12:03:26 -04:00
Julian Lam
b2216bf32b 7.3.1 2023-09-21 14:43:19 -04:00
Julian Lam
5d110b75a2 feat: update ACP page to v3 styling 2023-09-21 14:43:14 -04:00
Julian Lam
da2b5a975e docs: update changelog 2023-09-21 14:35:59 -04:00
Julian Lam
baaa03ffcf 7.3.0 2023-09-20 12:31:03 -04:00
Julian Lam
5e13813f0e feat: remove blanket api/v3 prefix exemption, allow plugins to configure exemptions via hook 2023-09-20 12:31:00 -04:00
Julian Lam
33bc5c46ee 7.2.2 2023-09-11 15:10:12 -04:00
Julian Lam
268262c746 fix: #11946, add session on reroll after 2fa 2023-09-11 15:10:06 -04:00
Julian Lam
2437ed4ec4 7.2.1 2023-08-11 10:38:59 -04:00
idX401
f69ae92fec Create ru/2factor.json 2023-08-11 10:38:47 -04:00
Julian Lam
3e57f2ce92 7.2.0 2023-08-10 16:46:14 -04:00
Julian Lam
dcff743228 fix: #90, hide back button and show logout button instead, if there is only one choice 2023-08-10 16:21:30 -04:00
Julian Lam
45d912ae02 7.1.4 2023-08-10 16:08:12 -04:00
Julian Lam
79748c5bc3 fix: #88, allow reset and confirm routes to bypass 2fa check 2023-08-10 16:08:06 -04:00
Julian Lam
53ff25613d fix: #89, unable to back out of 2fa challenge 2023-08-10 14:12:11 -04:00
dependabot[bot]
d21af7f590 chore(deps-dev): bump word-wrap from 1.2.3 to 1.2.4
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-20 14:35:49 -04:00
dependabot[bot]
f85e63c1c4 chore(deps): bump semver from 5.7.1 to 5.7.2
Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-17 14:57:41 -04:00