- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Thu, Oct 1
Thu, Oct 1
GitHub <noreply@github.com> committed rWFffd098085bfc: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.52 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.52
GitHub <noreply@github.com> committed rWF7e207d097ace: Bump golang.org/x/crypto from 0.54.0 to 0.57.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.57.0
GitHub <noreply@github.com> committed rWF0498fff7395a: Bump github.com/go-sql-driver/mysql from 1.8.1 to 1.10.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/go-sql-driver/mysql from 1.8.1 to 1.10.1
GitHub <noreply@github.com> committed rWFa592568c0ea2: Bump golang.org/x/net from 0.57.0 to 0.59.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.59.0
GitHub <noreply@github.com> committed rWF271ae417d734: Bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0
Mon, Sep 28
Mon, Sep 28
Merge commit from fork
matt committed rWFb7f9d20cdd87: Prevent IPv6 transition-address bypass in federation guards (authored by matt).
Prevent IPv6 transition-address bypass in federation guards
Merge commit from fork
Fix open-redirect in the login flow
Merge commit from fork
matt committed rWF7cbdf19d88f0: Prevent creation of more blogs than max limit via API (authored by matt).
Prevent creation of more blogs than max limit via API
Merge commit from fork
matt committed rWFcd3f40855edf: Prevent unauthorized users from updating collection attributes (authored by matt).
Prevent unauthorized users from updating collection attributes
Mon, Sep 21
Mon, Sep 21
GitHub <noreply@github.com> committed rWFbe9afc3efaf4: Bump docker/setup-buildx-action from 4.2.0 to 4.4.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.4.1
Fri, Sep 18
Fri, Sep 18
GitHub <noreply@github.com> committed rWF80c6aed00a56: Bump docker/build-push-action from 7.3.0 to 7.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/build-push-action from 7.3.0 to 7.4.0
GitHub <noreply@github.com> committed rWF7acb60784c91: Bump docker/setup-buildx-action from 4.2.0 to 4.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.4.0
GitHub <noreply@github.com> committed rWF2b73c40ca03b: Bump docker/setup-qemu-action from 4.0.0 to 4.4.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-qemu-action from 4.0.0 to 4.4.0
Sep 4 2026
Sep 4 2026
GitHub <noreply@github.com> committed rWFfd35043738e4: Bump docker/setup-qemu-action from 4.0.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-qemu-action from 4.0.0 to 4.3.0
Sep 1 2026
Sep 1 2026
GitHub <noreply@github.com> committed rWF2396a2d261c6: Bump golang.org/x/net from 0.57.0 to 0.58.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.58.0
GitHub <noreply@github.com> committed rWF0b9504a26045: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50
GitHub <noreply@github.com> committed rWFfeff25c835e0: Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/stretchr/testify from 1.11.1 to 1.12.1
GitHub <noreply@github.com> committed rWFbfafee3ef90f: Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.55.0
Aug 28 2026
Aug 28 2026
GitHub <noreply@github.com> committed rWF049aa2a25af4: Merge pull request #1731 from writefreely/improve-missing-dir-errors (authored by matt).
Merge pull request #1731 from writefreely/improve-missing-dir-errors
GitHub <noreply@github.com> committed rWF5398325629f9: Merge pull request #1748 from writefreely/fix-signup-paths (authored by matt).
Merge pull request #1748 from writefreely/fix-signup-paths
GitHub <noreply@github.com> committed rWF5d98e0be7ac9: Merge pull request #1736 from writefreely/fix-robots-txt (authored by matt).
Merge pull request #1736 from writefreely/fix-robots-txt
Aug 27 2026
Aug 27 2026
matt committed rWCae8cb3ea3a74: memo: fix double-close race in Get() when Invalidate races (authored by matt).
memo: fix double-close race in Get() when Invalidate races
Aug 26 2026
Aug 26 2026
Merge commit from fork
matt committed rWF7fb71bc17918: Prevent access to private / password-protected blogs via ActivityPub (authored by matt).
Prevent access to private / password-protected blogs via ActivityPub
Aug 20 2026
Aug 20 2026
GitHub <noreply@github.com> committed rWF77cabca4bb5e: Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
sNullp <snullp@bsql.me> committed rWF2681d08da9a5: Fix shadowed .Username on collection customize page (authored by sNullp <snullp@bsql.me>).
Fix shadowed .Username on collection customize page
GitHub <noreply@github.com> committed rWF3efbc692750e: Merge pull request #1738 from c7io-dev/fix-customize-username-shadow (authored by matt).
Merge pull request #1738 from c7io-dev/fix-customize-username-shadow
matt committed rWFdd2de20d3332: Enforce signup checks consistently across all registration paths (authored by matt).
Enforce signup checks consistently across all registration paths
Merge commit from fork
matt committed rWF3e56d3ab17bb: Prevent SSRF via ActivityPub inbox actor/object IRI resolution (authored by matt).
Prevent SSRF via ActivityPub inbox actor/object IRI resolution
Revert webfinger changes
Merge commit from fork
Block SSRF in webfinger RemoteLookup
GitHub <noreply@github.com> committed rWF5110ba343ed1: Merge pull request #1730 from writefreely/fix-uppercase-usernames (authored by matt).
Merge pull request #1730 from writefreely/fix-uppercase-usernames
Aug 19 2026
Aug 19 2026
GitHub <noreply@github.com> committed rWFe9ec650611a2: Merge pull request #1727 from writefreely/fix-password-protected (authored by matt).
Merge pull request #1727 from writefreely/fix-password-protected
Aug 15 2026
Aug 15 2026
GitHub <noreply@github.com> committed rWF47488e93fa13: Merge pull request #1729 from writefreely/fedi-image-description (authored by matt).
Merge pull request #1729 from writefreely/fedi-image-description
Aug 11 2026
Aug 11 2026
matt committed rWF16b70a82f228: Support serving robots.txt on single-user instances (authored by matt).
Support serving robots.txt on single-user instances
Add TestAPCollectionPage
Fix whitespace in activitypub.go
matt committed rWFad7cd45b97d6: Add Cache-Control headers on Followers, Following collections (authored by matt).
Add Cache-Control headers on Followers, Following collections
Return correct followers length in collection
GitHub <noreply@github.com> committed rWF37254560029a: Merge branch 'develop' into fix-ap-collections-first (authored by matt).
Merge branch 'develop' into fix-ap-collections-first
Return actual list of followers
matt committed rWF6de840311ef5: Support retrieving username from email automatically (authored by matt).
Support retrieving username from email automatically
Cross-posting has very low usage, as far as I know.
matt lowered the priority of T896: Support changing username to secondary blog from Medium-High to Low.
Still need to fix the Snap.as issue, but this hasn't come up lately.
Deployed this on Write.as and confirmed it worked. Now built into WriteFreely v0.17.2, so we can close.
matt committed rWF07214a925202: Output friendly error when templates directories not found (authored by matt).
Output friendly error when templates directories not found
matt committed rWFc21aafb9ecd2: Output friendly error when keys haven't been found (authored by matt).
Output friendly error when keys haven't been found
matt committed rWF3ad305f1d232: Output friendly error when no configuration file (authored by matt).
Output friendly error when no configuration file
matt committed rWFd34c775ed881: On startup, log notification of migrations needed (authored by matt).
On startup, log notification of migrations needed
GitHub <noreply@github.com> committed rWFfb49d83cc33d: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49
GitHub <noreply@github.com> committed rWFaa0143148ebc: Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi… (authored by matt).
Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi…
GitHub <noreply@github.com> committed rWF130d1cb33307: Merge pull request #1714 from writefreely/dependabot/go_modules/github. (authored by matt).
Merge pull request #1714 from writefreely/dependabot/go_modules/github.
Add tests for normalizing usernames via OAuth
Normalize usernames for signups through OAuth
Add tests for Markdown alt text extraction
matt committed rWFe67905a484d2: Include image alt text in fediverse attachment data (authored by matt).
Include image alt text in fediverse attachment data
Aug 10 2026
Aug 10 2026
matt committed rWFf7461f365192: Fix unreachable posts with slug "meta" or "edit" multi-user mode (authored by matt).
Fix unreachable posts with slug "meta" or "edit" multi-user mode
matt committed rWFc4d0ac637350: Fix password-protected blogs not unlocking after cookie expires (authored by matt).
Fix password-protected blogs not unlocking after cookie expires
matt committed rWFb3a92216deb6: Prevent unauthorized users from updating collection attributes (authored by matt).
Prevent unauthorized users from updating collection attributes
Ensure only blog owner can pin a blog's posts
Merge commit from fork
Merge commit from fork
Always sanitize slugs on post creation
Merge commit from fork
matt committed rWF48083e08a796: Fix CSRF vulnerability (GHSA-mp2f-3fq8-r9vj) on /me endpoints (authored by matt).
Fix CSRF vulnerability (GHSA-mp2f-3fq8-r9vj) on /me endpoints
GitHub <noreply@github.com> committed rWFdec1269fd8a6: Merge branch 'develop' into advisory-fix-1 (authored by matt).
Merge branch 'develop' into advisory-fix-1
GitHub <noreply@github.com> committed rWFacdc6b9ea4a6: Merge pull request #1725 from writefreely/add-tests (authored by matt).
Merge pull request #1725 from writefreely/add-tests
GitHub <noreply@github.com> committed rWF019692100a8e: Merge pull request #1726 from writefreely/fix-icons (authored by matt).
Merge pull request #1726 from writefreely/fix-icons
Bump version to 0.17.2
Remove unused Material Icon font files
Fix icons for Safari and small icons in Chrome
matt committed rWFa154a12962ae: Embed templates/ and pages/ into binary for release build (authored by matt).
Embed templates/ and pages/ into binary for release build
Embed static/ assets into binary
Aug 9 2026
Aug 9 2026
matt committed rWFa1da2967bc9d: Remove outdated goreportcard.com badge from README (authored by matt).
Remove outdated goreportcard.com badge from README
Add template rendering tests for /me pages
Add tests for the mailer pkg
Add tests around signing up
GitHub <noreply@github.com> committed rWF39e1ec0e02df: Merge pull request #1720 from writefreely/fix-post-signature-dupe (authored by matt).
Merge pull request #1720 from writefreely/fix-post-signature-dupe
GitHub <noreply@github.com> committed rWF8238590538ff: Merge pull request #1721 from writefreely/fix-smtp-sending (authored by matt).
Merge pull request #1721 from writefreely/fix-smtp-sending
GitHub <noreply@github.com> committed rWFafef135bc129: Merge pull request #1724 from writefreely/fix-unvalidated-invite-signups (authored by matt).
Merge pull request #1724 from writefreely/fix-unvalidated-invite-signups
sNullp <snullp@bsql.me> committed rWF0fe456b16ac7: Validate invite codes on /auth/signup with closed registrations (authored by sNullp <snullp@bsql.me>).
Validate invite codes on /auth/signup with closed registrations
matt committed rWFbbf2341681c7: Return applicable error for expired invite links on /auth/signup (authored by matt).
Return applicable error for expired invite links on /auth/signup
GitHub <noreply@github.com> committed rWFd6e6325c9a71: Merge pull request #1719 from writefreely/fix-chorus-post-page (authored by matt).
Merge pull request #1719 from writefreely/fix-chorus-post-page
Aug 8 2026
Aug 8 2026
All added in July, and now live: https://write.as/blog/launching-embed-as
Aug 8 2026, 3:45 PM · Restricted Project
Aug 7 2026
Aug 7 2026
GitHub <noreply@github.com> committed rWF025faafc7e97: Bump github.com/gorilla/feeds from 1.1.2 to 1.2.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/gorilla/feeds from 1.1.2 to 1.2.0
matt committed rWF08215d1614e4: Fix unquoted From address and phantom recipient in mailer (authored by matt).
Fix unquoted From address and phantom recipient in mailer
matt committed rWF155aa616e19a: Strip HTML from post titles in `Post.PlainDisplayTitle` (authored by matt).
Strip HTML from post titles in `Post.PlainDisplayTitle`
matt committed rWFd26954b04897: Ensure posts never duplicate signature in ActivityPub data (authored by matt).
Ensure posts never duplicate signature in ActivityPub data
Fix collection / post rendering in Chorus mode
Aug 3 2026
Aug 3 2026
Images are now embedded in the ePub file, but this can still fail on a large instance like Write.as. We need to support asynchronous file generation.