Yesterday
Yesterday
GitHub <noreply@github.com> committed rWF714d6efa424b: Bump alpine from 3.24.3 to 3.24.4 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump alpine from 3.24.3 to 3.24.4
GitHub <noreply@github.com> committed rWF2bbe3c70b9f3: Merge pull request #1782 from writefreely/dependabot/go_modules/github. (authored by matt).
Merge pull request #1782 from writefreely/dependabot/go_modules/github.
GitHub <noreply@github.com> committed rWF97a1da1c97ea: Merge pull request #1734 from writefreely/username-recovery (authored by matt).
Merge pull request #1734 from writefreely/username-recovery
GitHub <noreply@github.com> committed rWF74ea9daad728: Merge pull request #1765 from writefreely/dependabot/github_actions/docker/buil… (authored by matt).
Merge pull request #1765 from writefreely/dependabot/github_actions/docker/buil…
GitHub <noreply@github.com> committed rWF870238db4312: Merge pull request #1775 from writefreely/dependabot/go_modules/github. (authored by matt).
Merge pull request #1775 from writefreely/dependabot/go_modules/github.
GitHub <noreply@github.com> committed rWF4c2d98087a8e: Merge pull request #1785 from writefreely/dependabot/github_actions/docker/logi… (authored by matt).
Merge pull request #1785 from writefreely/dependabot/github_actions/docker/logi…
Tue, Nov 10
Tue, Nov 10
matt committed rWFa66a78926fe8: Replace Ace with CodeMirror 6 for the Custom CSS editor (authored by matt).
Replace Ace with CodeMirror 6 for the Custom CSS editor
Fix garbled RSS item descriptions
Update TestUpdatesRoundTrip
GitHub <noreply@github.com> committed rWF6a613dde8a70: Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0
GitHub <noreply@github.com> committed rWF8a6bd2c3525d: Merge pull request #1781 from writefreely/dependabot/go_modules/golang. (authored by matt).
Merge pull request #1781 from writefreely/dependabot/go_modules/golang.
Fix admin update check and badge
Mon, Nov 9
Mon, Nov 9
GitHub <noreply@github.com> committed rWF492bbd25ccfd: Bump golang from 1.26-alpine3.23 to 1.27-alpine3.23 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang from 1.26-alpine3.23 to 1.27-alpine3.23
Merge branch 'develop'
GitHub <noreply@github.com> committed rWFd2485910010b: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWFc9b7caf972a6: Always use authenticated user ID for collection updates (authored by matt).
Always use authenticated user ID for collection updates
GitHub <noreply@github.com> committed rWF1e213fd5bbbb: Merge pull request #1786 from writefreely/dependabot/docker/alpine-3.24.3 (authored by matt).
Merge pull request #1786 from writefreely/dependabot/docker/alpine-3.24.3
GitHub <noreply@github.com> committed rWF4769336eef3f: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.53 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.53
GitHub <noreply@github.com> committed rWFb3ad4f04aea8: Bump alpine from 3.18.4 to 3.24.3 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump alpine from 3.18.4 to 3.24.3
GitHub <noreply@github.com> committed rWFc51bba2cada4: Bump docker/login-action from 4.6.0 to 4.8.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/login-action from 4.6.0 to 4.8.0
Fix Dependabot Docker update directory
matt committed rWF50dedcd05a31: Remove deprecated `-d` flag from `go get` in Makefile (authored by matt).
Remove deprecated `-d` flag from `go get` in Makefile
Update Docker builds to Go 1.26
Sun, Nov 8
Sun, Nov 8
matt committed rWFffa7a10b70b6: Merge remote-tracking branch 'refs/remotes/origin/develop' into develop (authored by matt).
Merge remote-tracking branch 'refs/remotes/origin/develop' into develop
matt committed rWF37d5e01013f9: Prefer local lessc install over global in Makefile (authored by matt).
Prefer local lessc install over global in Makefile
Bump version to 0.17.3
GitHub <noreply@github.com> committed rWF6996e83619af: Merge pull request #1784 from writefreely/web-monetization-update (authored by matt).
Merge pull request #1784 from writefreely/web-monetization-update
GitHub <noreply@github.com> committed rWFc242ec0ee495: Merge branch 'develop' into web-monetization-update (authored by matt).
Merge branch 'develop' into web-monetization-update
李欣哲 <3022001754@tju.edu.cn> committed rWF51e05c7985a4: fix GHSA-7jv7-gf23-wcqq (authored by 李欣哲 <3022001754@tju.edu.cn>).
fix GHSA-7jv7-gf23-wcqq
GitHub <noreply@github.com> committed rWFe8cae8b935b4: Merge commit from fork (authored by matt).
Merge commit from fork
Sat, Nov 7
Sat, Nov 7
GitHub <noreply@github.com> committed rWF8ff3647e9a09: Merge pull request #1733 from writefreely/fix-ap-collections-first (authored by matt).
Merge pull request #1733 from writefreely/fix-ap-collections-first
Fri, Nov 6
Fri, Nov 6
GitHub <noreply@github.com> committed rWFff759572b3f0: Bump golang.org/x/net from 0.60.0 to 0.62.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.60.0 to 0.62.0
GitHub <noreply@github.com> committed rWF2d7371958f1b: Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0
GitHub <noreply@github.com> committed rWF90d321a1a870: Merge pull request #1780 from writefreely/dependabot/go_modules/golang. (authored by matt).
Merge pull request #1780 from writefreely/dependabot/go_modules/golang.
Sun, Nov 1
Sun, Nov 1
GitHub <noreply@github.com> committed rWFe755fb35ae94: Bump golang.org/x/crypto from 0.54.0 to 0.58.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.58.0
GitHub <noreply@github.com> committed rWF6709500f8584: Bump golang.org/x/net from 0.57.0 to 0.62.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.62.0
GitHub <noreply@github.com> committed rWFade8a4d15c72: Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/xhit/go-simple-mail/v2 from 2.16.0 to 2.17.0
Mon, Oct 26
Mon, Oct 26
GitHub <noreply@github.com> committed rWF4593827c3fac: Bump docker/login-action from 4.6.0 to 4.7.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/login-action from 4.6.0 to 4.7.0
Oct 1 2026
Oct 1 2026
GitHub <noreply@github.com> committed rWFffd098085bfc: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.52 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.52
GitHub <noreply@github.com> committed rWF7e207d097ace: Bump golang.org/x/crypto from 0.54.0 to 0.57.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.57.0
GitHub <noreply@github.com> committed rWF0498fff7395a: Bump github.com/go-sql-driver/mysql from 1.8.1 to 1.10.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/go-sql-driver/mysql from 1.8.1 to 1.10.1
GitHub <noreply@github.com> committed rWFa592568c0ea2: Bump golang.org/x/net from 0.57.0 to 0.59.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.59.0
GitHub <noreply@github.com> committed rWF271ae417d734: Bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0
Sep 28 2026
Sep 28 2026
GitHub <noreply@github.com> committed rWF5d1bc057e86a: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWFb7f9d20cdd87: Prevent IPv6 transition-address bypass in federation guards (authored by matt).
Prevent IPv6 transition-address bypass in federation guards
GitHub <noreply@github.com> committed rWF4dc99d9fb5e6: Merge commit from fork (authored by matt).
Merge commit from fork
Fix open-redirect in the login flow
GitHub <noreply@github.com> committed rWF500a04e1100c: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWF7cbdf19d88f0: Prevent creation of more blogs than max limit via API (authored by matt).
Prevent creation of more blogs than max limit via API
GitHub <noreply@github.com> committed rWF5eb85c743051: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWFcd3f40855edf: Prevent unauthorized users from updating collection attributes (authored by matt).
Prevent unauthorized users from updating collection attributes
Sep 21 2026
Sep 21 2026
GitHub <noreply@github.com> committed rWFbe9afc3efaf4: Bump docker/setup-buildx-action from 4.2.0 to 4.4.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.4.1
Sep 18 2026
Sep 18 2026
GitHub <noreply@github.com> committed rWF80c6aed00a56: Bump docker/build-push-action from 7.3.0 to 7.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/build-push-action from 7.3.0 to 7.4.0
GitHub <noreply@github.com> committed rWF7acb60784c91: Bump docker/setup-buildx-action from 4.2.0 to 4.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.4.0
GitHub <noreply@github.com> committed rWF2b73c40ca03b: Bump docker/setup-qemu-action from 4.0.0 to 4.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-qemu-action from 4.0.0 to 4.4.0
Sep 4 2026
Sep 4 2026
GitHub <noreply@github.com> committed rWFfd35043738e4: Bump docker/setup-qemu-action from 4.0.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-qemu-action from 4.0.0 to 4.3.0
Sep 1 2026
Sep 1 2026
GitHub <noreply@github.com> committed rWF2396a2d261c6: Bump golang.org/x/net from 0.57.0 to 0.58.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.58.0
GitHub <noreply@github.com> committed rWF0b9504a26045: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50
GitHub <noreply@github.com> committed rWFfeff25c835e0: Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/stretchr/testify from 1.11.1 to 1.12.1
GitHub <noreply@github.com> committed rWFbfafee3ef90f: Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.55.0
Aug 28 2026
Aug 28 2026
GitHub <noreply@github.com> committed rWF049aa2a25af4: Merge pull request #1731 from writefreely/improve-missing-dir-errors (authored by matt).
Merge pull request #1731 from writefreely/improve-missing-dir-errors
GitHub <noreply@github.com> committed rWF5398325629f9: Merge pull request #1748 from writefreely/fix-signup-paths (authored by matt).
Merge pull request #1748 from writefreely/fix-signup-paths
GitHub <noreply@github.com> committed rWF5d98e0be7ac9: Merge pull request #1736 from writefreely/fix-robots-txt (authored by matt).
Merge pull request #1736 from writefreely/fix-robots-txt
Aug 27 2026
Aug 27 2026
matt committed rWCae8cb3ea3a74: memo: fix double-close race in Get() when Invalidate races (authored by matt).
memo: fix double-close race in Get() when Invalidate races
Aug 26 2026
Aug 26 2026
GitHub <noreply@github.com> committed rWF71d6410b0e28: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWF7fb71bc17918: Prevent access to private / password-protected blogs via ActivityPub (authored by matt).
Prevent access to private / password-protected blogs via ActivityPub
Aug 20 2026
Aug 20 2026
GitHub <noreply@github.com> committed rWF77cabca4bb5e: Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
sNullp <snullp@bsql.me> committed rWF2681d08da9a5: Fix shadowed .Username on collection customize page (authored by sNullp <snullp@bsql.me>).
Fix shadowed .Username on collection customize page
GitHub <noreply@github.com> committed rWF3efbc692750e: Merge pull request #1738 from c7io-dev/fix-customize-username-shadow (authored by matt).
Merge pull request #1738 from c7io-dev/fix-customize-username-shadow
matt committed rWFdd2de20d3332: Enforce signup checks consistently across all registration paths (authored by matt).
Enforce signup checks consistently across all registration paths
GitHub <noreply@github.com> committed rWFec745e3ffdc4: Merge commit from fork (authored by matt).
Merge commit from fork
matt committed rWF3e56d3ab17bb: Prevent SSRF via ActivityPub inbox actor/object IRI resolution (authored by matt).
Prevent SSRF via ActivityPub inbox actor/object IRI resolution
Revert webfinger changes
GitHub <noreply@github.com> committed rWF2c6c02405a00: Merge commit from fork (authored by matt).
Merge commit from fork
Block SSRF in webfinger RemoteLookup
GitHub <noreply@github.com> committed rWF5110ba343ed1: Merge pull request #1730 from writefreely/fix-uppercase-usernames (authored by matt).
Merge pull request #1730 from writefreely/fix-uppercase-usernames
Aug 19 2026
Aug 19 2026
GitHub <noreply@github.com> committed rWFe9ec650611a2: Merge pull request #1727 from writefreely/fix-password-protected (authored by matt).
Merge pull request #1727 from writefreely/fix-password-protected
Aug 15 2026
Aug 15 2026
GitHub <noreply@github.com> committed rWF47488e93fa13: Merge pull request #1729 from writefreely/fedi-image-description (authored by matt).
Merge pull request #1729 from writefreely/fedi-image-description
Aug 11 2026
Aug 11 2026
matt committed rWF16b70a82f228: Support serving robots.txt on single-user instances (authored by matt).
Support serving robots.txt on single-user instances
matt updated the task description for T939: Automated username recovery.
Add TestAPCollectionPage
Fix whitespace in activitypub.go
matt committed rWFad7cd45b97d6: Add Cache-Control headers on Followers, Following collections (authored by matt).
Add Cache-Control headers on Followers, Following collections
Return correct followers length in collection
GitHub <noreply@github.com> committed rWF37254560029a: Merge branch 'develop' into fix-ap-collections-first (authored by matt).
Merge branch 'develop' into fix-ap-collections-first
Return actual list of followers
matt committed rWF6de840311ef5: Support retrieving username from email automatically (authored by matt).
Support retrieving username from email automatically
matt updated the task description for T636: Support missing collection attributes for import.
Cross-posting has very low usage, as far as I know.
matt lowered the priority of T896: Support changing username to secondary blog from Medium-High to Low.
Still need to fix the Snap.as issue, but this hasn't come up lately.
Deployed this on Write.as and confirmed it worked. Now built into WriteFreely v0.17.2, so we can close.
matt committed rWF07214a925202: Output friendly error when templates directories not found (authored by matt).
Output friendly error when templates directories not found
matt committed rWFc21aafb9ecd2: Output friendly error when keys haven't been found (authored by matt).
Output friendly error when keys haven't been found
matt committed rWF3ad305f1d232: Output friendly error when no configuration file (authored by matt).
Output friendly error when no configuration file
matt committed rWFd34c775ed881: On startup, log notification of migrations needed (authored by matt).
On startup, log notification of migrations needed
GitHub <noreply@github.com> committed rWFfb49d83cc33d: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49
GitHub <noreply@github.com> committed rWFaa0143148ebc: Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi… (authored by matt).
Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi…
GitHub <noreply@github.com> committed rWF130d1cb33307: Merge pull request #1714 from writefreely/dependabot/go_modules/github. (authored by matt).
Merge pull request #1714 from writefreely/dependabot/go_modules/github.
Panel Used By
Panel Used By
| Dashboard | My Dashboard |