- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Fri, Sep 4
Fri, Sep 4
GitHub <noreply@github.com> committed rWFfd35043738e4: Bump docker/setup-qemu-action from 4.0.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-qemu-action from 4.0.0 to 4.3.0
Tue, Sep 1
Tue, Sep 1
GitHub <noreply@github.com> committed rWF2396a2d261c6: Bump golang.org/x/net from 0.57.0 to 0.58.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.57.0 to 0.58.0
GitHub <noreply@github.com> committed rWF0b9504a26045: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.50
GitHub <noreply@github.com> committed rWFfeff25c835e0: Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/stretchr/testify from 1.11.1 to 1.12.1
GitHub <noreply@github.com> committed rWFbfafee3ef90f: Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.54.0 to 0.55.0
Fri, Aug 28
Fri, Aug 28
GitHub <noreply@github.com> committed rWF049aa2a25af4: Merge pull request #1731 from writefreely/improve-missing-dir-errors (authored by matt).
Merge pull request #1731 from writefreely/improve-missing-dir-errors
GitHub <noreply@github.com> committed rWF5398325629f9: Merge pull request #1748 from writefreely/fix-signup-paths (authored by matt).
Merge pull request #1748 from writefreely/fix-signup-paths
GitHub <noreply@github.com> committed rWF5d98e0be7ac9: Merge pull request #1736 from writefreely/fix-robots-txt (authored by matt).
Merge pull request #1736 from writefreely/fix-robots-txt
Thu, Aug 27
Thu, Aug 27
matt committed rWCae8cb3ea3a74: memo: fix double-close race in Get() when Invalidate races (authored by matt).
memo: fix double-close race in Get() when Invalidate races
Wed, Aug 26
Wed, Aug 26
Merge commit from fork
matt committed rWF7fb71bc17918: Prevent access to private / password-protected blogs via ActivityPub (authored by matt).
Prevent access to private / password-protected blogs via ActivityPub
Thu, Aug 20
Thu, Aug 20
GitHub <noreply@github.com> committed rWF77cabca4bb5e: Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/setup-buildx-action from 4.2.0 to 4.3.0
sNullp <snullp@bsql.me> committed rWF2681d08da9a5: Fix shadowed .Username on collection customize page (authored by sNullp <snullp@bsql.me>).
Fix shadowed .Username on collection customize page
GitHub <noreply@github.com> committed rWF3efbc692750e: Merge pull request #1738 from c7io-dev/fix-customize-username-shadow (authored by matt).
Merge pull request #1738 from c7io-dev/fix-customize-username-shadow
matt committed rWFdd2de20d3332: Enforce signup checks consistently across all registration paths (authored by matt).
Enforce signup checks consistently across all registration paths
Merge commit from fork
matt committed rWF3e56d3ab17bb: Prevent SSRF via ActivityPub inbox actor/object IRI resolution (authored by matt).
Prevent SSRF via ActivityPub inbox actor/object IRI resolution
Revert webfinger changes
Merge commit from fork
Block SSRF in webfinger RemoteLookup
GitHub <noreply@github.com> committed rWF5110ba343ed1: Merge pull request #1730 from writefreely/fix-uppercase-usernames (authored by matt).
Merge pull request #1730 from writefreely/fix-uppercase-usernames
Wed, Aug 19
Wed, Aug 19
GitHub <noreply@github.com> committed rWFe9ec650611a2: Merge pull request #1727 from writefreely/fix-password-protected (authored by matt).
Merge pull request #1727 from writefreely/fix-password-protected
Sat, Aug 15
Sat, Aug 15
GitHub <noreply@github.com> committed rWF47488e93fa13: Merge pull request #1729 from writefreely/fedi-image-description (authored by matt).
Merge pull request #1729 from writefreely/fedi-image-description
Tue, Aug 11
Tue, Aug 11
matt committed rWF16b70a82f228: Support serving robots.txt on single-user instances (authored by matt).
Support serving robots.txt on single-user instances
Add TestAPCollectionPage
Fix whitespace in activitypub.go
matt committed rWFad7cd45b97d6: Add Cache-Control headers on Followers, Following collections (authored by matt).
Add Cache-Control headers on Followers, Following collections
Return correct followers length in collection
GitHub <noreply@github.com> committed rWF37254560029a: Merge branch 'develop' into fix-ap-collections-first (authored by matt).
Merge branch 'develop' into fix-ap-collections-first
Return actual list of followers
matt committed rWF6de840311ef5: Support retrieving username from email automatically (authored by matt).
Support retrieving username from email automatically
Cross-posting has very low usage, as far as I know.
matt lowered the priority of T896: Support changing username to secondary blog from Medium-High to Low.
Still need to fix the Snap.as issue, but this hasn't come up lately.
Deployed this on Write.as and confirmed it worked. Now built into WriteFreely v0.17.2, so we can close.
matt committed rWF07214a925202: Output friendly error when templates directories not found (authored by matt).
Output friendly error when templates directories not found
matt committed rWFc21aafb9ecd2: Output friendly error when keys haven't been found (authored by matt).
Output friendly error when keys haven't been found
matt committed rWF3ad305f1d232: Output friendly error when no configuration file (authored by matt).
Output friendly error when no configuration file
matt committed rWFd34c775ed881: On startup, log notification of migrations needed (authored by matt).
On startup, log notification of migrations needed
GitHub <noreply@github.com> committed rWFfb49d83cc33d: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49
GitHub <noreply@github.com> committed rWFaa0143148ebc: Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi… (authored by matt).
Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi…
GitHub <noreply@github.com> committed rWF130d1cb33307: Merge pull request #1714 from writefreely/dependabot/go_modules/github. (authored by matt).
Merge pull request #1714 from writefreely/dependabot/go_modules/github.
Add tests for normalizing usernames via OAuth
Normalize usernames for signups through OAuth
Add tests for Markdown alt text extraction
matt committed rWFe67905a484d2: Include image alt text in fediverse attachment data (authored by matt).
Include image alt text in fediverse attachment data
Mon, Aug 10
Mon, Aug 10
matt committed rWFf7461f365192: Fix unreachable posts with slug "meta" or "edit" multi-user mode (authored by matt).
Fix unreachable posts with slug "meta" or "edit" multi-user mode
matt committed rWFc4d0ac637350: Fix password-protected blogs not unlocking after cookie expires (authored by matt).
Fix password-protected blogs not unlocking after cookie expires
matt committed rWFb3a92216deb6: Prevent unauthorized users from updating collection attributes (authored by matt).
Prevent unauthorized users from updating collection attributes
Ensure only blog owner can pin a blog's posts
Merge commit from fork
Merge commit from fork
Always sanitize slugs on post creation
Merge commit from fork
matt committed rWF48083e08a796: Fix CSRF vulnerability (GHSA-mp2f-3fq8-r9vj) on /me endpoints (authored by matt).
Fix CSRF vulnerability (GHSA-mp2f-3fq8-r9vj) on /me endpoints
GitHub <noreply@github.com> committed rWFdec1269fd8a6: Merge branch 'develop' into advisory-fix-1 (authored by matt).
Merge branch 'develop' into advisory-fix-1
GitHub <noreply@github.com> committed rWFacdc6b9ea4a6: Merge pull request #1725 from writefreely/add-tests (authored by matt).
Merge pull request #1725 from writefreely/add-tests
GitHub <noreply@github.com> committed rWF019692100a8e: Merge pull request #1726 from writefreely/fix-icons (authored by matt).
Merge pull request #1726 from writefreely/fix-icons
Bump version to 0.17.2
Remove unused Material Icon font files
Fix icons for Safari and small icons in Chrome
matt committed rWFa154a12962ae: Embed templates/ and pages/ into binary for release build (authored by matt).
Embed templates/ and pages/ into binary for release build
Embed static/ assets into binary
Sun, Aug 9
Sun, Aug 9
matt committed rWFa1da2967bc9d: Remove outdated goreportcard.com badge from README (authored by matt).
Remove outdated goreportcard.com badge from README
Add template rendering tests for /me pages
Add tests for the mailer pkg
Add tests around signing up
GitHub <noreply@github.com> committed rWF39e1ec0e02df: Merge pull request #1720 from writefreely/fix-post-signature-dupe (authored by matt).
Merge pull request #1720 from writefreely/fix-post-signature-dupe
GitHub <noreply@github.com> committed rWF8238590538ff: Merge pull request #1721 from writefreely/fix-smtp-sending (authored by matt).
Merge pull request #1721 from writefreely/fix-smtp-sending
GitHub <noreply@github.com> committed rWFafef135bc129: Merge pull request #1724 from writefreely/fix-unvalidated-invite-signups (authored by matt).
Merge pull request #1724 from writefreely/fix-unvalidated-invite-signups
sNullp <snullp@bsql.me> committed rWF0fe456b16ac7: Validate invite codes on /auth/signup with closed registrations (authored by sNullp <snullp@bsql.me>).
Validate invite codes on /auth/signup with closed registrations
matt committed rWFbbf2341681c7: Return applicable error for expired invite links on /auth/signup (authored by matt).
Return applicable error for expired invite links on /auth/signup
GitHub <noreply@github.com> committed rWFd6e6325c9a71: Merge pull request #1719 from writefreely/fix-chorus-post-page (authored by matt).
Merge pull request #1719 from writefreely/fix-chorus-post-page
Sat, Aug 8
Sat, Aug 8
All added in July, and now live: https://write.as/blog/launching-embed-as
Sat, Aug 8, 3:45 PM · Restricted Project
Fri, Aug 7
Fri, Aug 7
GitHub <noreply@github.com> committed rWF025faafc7e97: Bump github.com/gorilla/feeds from 1.1.2 to 1.2.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/gorilla/feeds from 1.1.2 to 1.2.0
matt committed rWF08215d1614e4: Fix unquoted From address and phantom recipient in mailer (authored by matt).
Fix unquoted From address and phantom recipient in mailer
matt committed rWF155aa616e19a: Strip HTML from post titles in `Post.PlainDisplayTitle` (authored by matt).
Strip HTML from post titles in `Post.PlainDisplayTitle`
matt committed rWFd26954b04897: Ensure posts never duplicate signature in ActivityPub data (authored by matt).
Ensure posts never duplicate signature in ActivityPub data
Fix collection / post rendering in Chorus mode
Aug 3 2026
Aug 3 2026
Images are now embedded in the ePub file, but this can still fail on a large instance like Write.as. We need to support asynchronous file generation.
Taking this on now as the first supported format for T608: Import posts from another WriteFreely instance.
Moritz Poldrack <git@moritz.sh> committed rWF77e541abde23: make OAuth Adapter RFC-compliant (authored by Moritz Poldrack <git@moritz.sh>).
make OAuth Adapter RFC-compliant
GitHub <noreply@github.com> committed rWFc47a08957772: Merge pull request #1679 from mpldr-pulls/develop (authored by matt).
Merge pull request #1679 from mpldr-pulls/develop
GitHub <noreply@github.com> committed rWF3eb3e67d8353: Bump github.com/writeas/web-core from 1.7.0 to 1.8.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/writeas/web-core from 1.7.0 to 1.8.0
GitHub <noreply@github.com> committed rWF76eebbae1d4b: Merge pull request #1715 from writefreely/dependabot/go_modules/golang. (authored by matt).
Merge pull request #1715 from writefreely/dependabot/go_modules/golang.
Aug 1 2026
Aug 1 2026
GitHub <noreply@github.com> committed rWFb5f89db43d90: Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.49
GitHub <noreply@github.com> committed rWF15a14651dcf0: Bump github.com/writeas/web-core from 1.7.0 to 1.8.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump github.com/writeas/web-core from 1.7.0 to 1.8.0
GitHub <noreply@github.com> committed rWFa6a99f8deacd: Bump golang.org/x/net from 0.56.0 to 0.57.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/net from 0.56.0 to 0.57.0
GitHub <noreply@github.com> committed rWFcfaa222e74e8: Bump golang.org/x/crypto from 0.53.0 to 0.54.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump golang.org/x/crypto from 0.53.0 to 0.54.0
Jul 29 2026
Jul 29 2026
GitHub <noreply@github.com> committed rWFcfa318ce7a9a: Bump docker/login-action from 4.3.0 to 4.6.0 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/login-action from 4.3.0 to 4.6.0
Jul 28 2026
Jul 28 2026
GitHub <noreply@github.com> committed rWFf9daa1c101ad: Bump docker/login-action from 4.3.0 to 4.5.2 (authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>).
Bump docker/login-action from 4.3.0 to 4.5.2
Getting started on this now. It'll be the first dedicated import provider we support
Getting the import work underway now, so starting on this.
Merge branch 'develop'