starred/manyfold
1
0 Fork 0
mirror of https://github.com/manyfold3d/manyfold.git synced 2026-10-22 11:42:19 -05:00
Code Issues Packages Projects Releases 10 Wiki Activity
10,816 Commits 20 Branches 245 Tags
bfda4eacce7f68bb705eb0ff3ece8f2fc0ff1792
Commit Graph
10816 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
James Smith bfda4eacce rate limit all doorkeeper controllers 
using the same limit as user sessions
 2025-11-26 17:17:55 +00:00
James Smith 10bfcbdaf4 rate limit omniauth callbacks 
using the same rate as sessions controller
 2025-11-26 17:17:55 +00:00
James Smith 96767d1d0a Merge pull request #5102 from manyfold3d/fix-api-doc-scheme 
Fix server scheme in API documentation
 2025-11-26 16:35:39 +00:00
James Smith 7e973d5971 Fix server scheme in API documentation 
resolves #5026
 2025-11-26 16:22:47 +00:00
James Smith 11a440bbaa Merge pull request #5101 from manyfold3d/oidc-fail-match-unverified 
OIDC: Don't match accounts by unverified emails
 2025-11-26 15:52:38 +00:00
James Smith 9378c93078 OIDC: Don't match accounts by unverified emails 2025-11-26 15:40:18 +00:00
James Smith e09e8fa8a6 Merge pull request #5100 from manyfold3d/obfuscated-secrets 
Obfuscate OAuth client secret on screen (with reveal and copy options)
 2025-11-26 15:00:24 +00:00
James Smith 317a290b79 Add reveal button label translation 2025-11-26 14:47:45 +00:00
James Smith 949d12a89e add javascript to reveal hidden copyable text 2025-11-26 14:11:43 +00:00
James Smith 96a9a771c6 Add visual obfuscation for CopyableText components 2025-11-26 13:07:38 +00:00
James Smith 2b9797eb1b change oauth ID and secret into copyable text fields 2025-11-26 13:07:16 +00:00
James Smith f0b88153b1 Change CopyButton into a more complex CopyableText component 2025-11-26 13:06:40 +00:00
James Smith 6bc2e94c76 Merge pull request #5099 from manyfold3d/attributes-in-policies 
Only object owners can set sharing permissions
 2025-11-25 16:35:00 +00:00
James Smith b86db86a01 Only let owners and moderators set permissions 2025-11-25 16:21:58 +00:00
James Smith 3db029601a add User#owns? convenience method 2025-11-25 16:16:32 +00:00
James Smith d50c145424 add failing tests for editor permission restriction 2025-11-25 16:07:54 +00:00
James Smith 90adcdbd01 rename caber_relations_attributes in deserializers 2025-11-25 16:07:39 +00:00
James Smith e517ab4731 remove unused caber params method 2025-11-25 15:54:10 +00:00
James Smith 04b42c0b1e pass record to deserializers to check permissions 2025-11-25 15:54:09 +00:00
James Smith 457c19c9ba add tests for setting permissions when editing objects 2025-11-25 15:54:09 +00:00
James Smith 8318030266 pass current user to form and API deserializers 2025-11-25 13:45:14 +00:00
James Smith 83a0290bd1 Merge pull request #5098 from manyfold3d/fix-path-traversal 
Sanitize upload filenames to prevent path traversal
 2025-11-25 12:40:56 +00:00
James Smith 1e6e5c4534 Add another layer of path sanitization with zaru 2025-11-25 12:12:21 +00:00
James Smith fabb5d0dc6 Sanitize upload filenames to prevent path traversal 2025-11-25 12:09:12 +00:00
James Smith 16c72a7859 Merge pull request #5096 from manyfold3d/dependabot/bundler/federails-43d68af 
Bump federails from `3c6c4c4` to `43d68af`
 2025-11-25 09:31:05 +00:00
dependabot[bot] e53e406b3c Merge pull request #5097 from manyfold3d/dependabot/bundler/i18n-tasks-1.1.1 2025-11-25 09:16:18 +00:00
dependabot[bot] d58582ace4 Bump i18n-tasks from 1.1.0 to 1.1.1 
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/main/CHANGES.md)
- [Commits](https://github.com/glebm/i18n-tasks/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: i18n-tasks
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-25 09:03:54 +00:00
dependabot[bot] 55f4851f90 Bump federails from 3c6c4c4 to 43d68af 
Bumps [federails](https://gitlab.com/experimentslabs/federails) from `3c6c4c4` to `43d68af`.
- [Commits](https://gitlab.com/experimentslabs/federails/compare/3c6c4c46b211d7116385a23d3f929be7b008bd19...43d68af7e3c3577d705a87ec586dde7913fa57c7)

---
updated-dependencies:
- dependency-name: federails
  dependency-version: 43d68af7e3c3577d705a87ec586dde7913fa57c7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-25 09:03:20 +00:00
James Smith c761a9107e Merge pull request #5094 from manyfold3d/obfuscate-passwords 
Obfuscate password input fields in user admin area
 2025-11-24 16:26:07 +00:00
James Smith 201b830f58 Obfuscate password input fields in user admin area 
resolved #5090
 2025-11-24 16:13:35 +00:00
James Smith cac360f141 Merge pull request #5084 from manyfold3d/dependabot/bundler/omniauth-rails_csrf_protection-2.0.0 
Bump omniauth-rails_csrf_protection from 1.0.2 to 2.0.0
 2025-11-24 15:52:02 +00:00
dependabot[bot] 26aae24b9c Merge pull request #5083 from manyfold3d/dependabot/bundler/rubocop-rails-2.34.1 2025-11-24 09:22:20 +00:00
dependabot[bot] 8777f86cda Bump omniauth-rails_csrf_protection from 1.0.2 to 2.0.0 
Bumps [omniauth-rails_csrf_protection](https://github.com/cookpad/omniauth-rails_csrf_protection) from 1.0.2 to 2.0.0.
- [Release notes](https://github.com/cookpad/omniauth-rails_csrf_protection/releases)
- [Commits](https://github.com/cookpad/omniauth-rails_csrf_protection/compare/v1.0.2...v2.0.0)

---
updated-dependencies:
- dependency-name: omniauth-rails_csrf_protection
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-24 09:11:05 +00:00
dependabot[bot] ee0cbe958a Bump rubocop-rails from 2.34.0 to 2.34.1 
Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.34.0 to 2.34.1.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.34.0...v2.34.1)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-version: 2.34.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-24 09:10:07 +00:00
James Smith 52c932f8a5 Merge pull request #5081 from manyfold3d/dependabot/bundler/federails-3c6c4c4 
Bump federails from `41d2625` to `3c6c4c4`
 2025-11-23 12:49:44 +00:00
James Smith 9cec369f5a Merge pull request #5080 from manyfold3d/dependabot/github_actions/actions/checkout-6 
Bump actions/checkout from 5 to 6
 2025-11-23 12:49:12 +00:00
dependabot[bot] 7ce3d819b9 Merge pull request #5082 from manyfold3d/dependabot/bundler/aws-sdk-s3-1.205.0 2025-11-21 09:16:31 +00:00
dependabot[bot] 585c7c3d78 Bump aws-sdk-s3 from 1.204.0 to 1.205.0 
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.204.0 to 1.205.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.205.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-21 09:03:16 +00:00
dependabot[bot] 7a5441fc7f Bump federails from 41d2625 to 3c6c4c4 
Bumps [federails](https://gitlab.com/experimentslabs/federails) from `41d2625` to `3c6c4c4`.
- [Commits](https://gitlab.com/experimentslabs/federails/compare/41d26258cdbb19650d55390441b97540e84d20fa...3c6c4c46b211d7116385a23d3f929be7b008bd19)

---
updated-dependencies:
- dependency-name: federails
  dependency-version: 3c6c4c46b211d7116385a23d3f929be7b008bd19
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-21 09:02:51 +00:00
dependabot[bot] 85328b1446 Bump actions/checkout from 5 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-21 09:01:18 +00:00
dependabot[bot] 3505dc4417 Merge pull request #5078 from manyfold3d/dependabot/bundler/aws-sdk-s3-1.204.0 2025-11-20 09:20:47 +00:00
dependabot[bot] 9ba13d76c2 Bump aws-sdk-s3 from 1.203.1 to 1.204.0 
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.203.1 to 1.204.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.204.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-20 09:02:56 +00:00
James Smith 3fcc727a0c Merge pull request #5077 from manyfold3d/fix-slicer-images 
Include slicer app images locally to avoid CORS errors
 2025-11-19 22:42:35 +00:00
James Smith 8317684d7f include slicer app images locally 
resolves #5075
 2025-11-19 22:28:12 +00:00
dependabot[bot] 70aa45f30d Merge pull request #5073 from manyfold3d/dependabot/bundler/rubocop-rspec-3.8.0 2025-11-19 09:14:41 +00:00
dependabot[bot] 57775d571b Bump rubocop-rspec from 3.7.0 to 3.8.0 
Bumps [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/rubocop/rubocop-rspec/releases)
- [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rspec/compare/v3.7.0...v3.8.0)

---
updated-dependencies:
- dependency-name: rubocop-rspec
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-19 09:01:56 +00:00
James Smith 21212f289e Merge pull request #5028 from manyfold3d/i18n/sync-zh-CN 
Translations updated: zh-CN
v0.129.2 		2025-11-19 08:13:02 +00:00
James Smith 540ad1c518 Merge pull request #5017 from manyfold3d/i18n/sync-es 
Translations updated: es
 2025-11-19 08:12:28 +00:00
James Smith 4b0784e091 Merge pull request #5040 from manyfold3d/i18n/sync-fr 
Translations updated: fr
 2025-11-19 08:12:17 +00:00
Floppy 43e0e5a6a2 Automatically synced translations: es 2025-11-19 00:33:49 +00:00