dependabot[bot]
dee46d3a73
Build(deps-dev): bump mcp from 0.8.0 to 0.9.2
...
Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk ) from 0.8.0 to 0.9.2.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md )
- [Commits](https://github.com/modelcontextprotocol/ruby-sdk/compare/v0.8.0...v0.9.2 )
---
updated-dependencies:
- dependency-name: mcp
dependency-version: 0.9.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 20:42:06 +00:00
Jarek Radosz
6400fd32cb
DEV: Update linting ( #73 )
2026-03-13 13:26:51 +00:00
Jarek Radosz
d5c4cf1b1b
DEV: Add the d-compat branch workflow ( #72 )
2026-03-11 22:30:25 +00:00
dependabot[bot]
b59251c5dc
Build(deps-dev): bump rack from 3.2.4 to 3.2.5 ( #71 )
...
Bumps [rack](https://github.com/rack/rack ) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v3.2.4...v3.2.5 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 3.2.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 19:50:21 +00:00
David Taylor
aa94be5a04
DEV: Pin version for Discourse < 2026.2.0-latest ( #70 )
2026-02-11 16:32:57 +01:00
Jarek Radosz
41259dba74
DEV: Update linting and add types ( #69 )
2026-01-28 13:58:12 +00:00
Discourse Translator Bot
ffd355e618
I18N: Update translations ( #68 )
2026-01-19 09:28:10 +01:00
Discourse Translator Bot
143dcd2e74
I18N: Update translations ( #67 )
2026-01-15 11:23:07 +01:00
dependabot[bot]
0e181b034c
Build(deps-dev): bump rack from 3.2.2 to 3.2.3 ( #66 )
...
Bumps [rack](https://github.com/rack/rack ) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v3.2.2...v3.2.3 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 3.2.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-11 00:12:26 +02:00
Jarek Radosz
3cf2780070
DEV: Update linting ( #65 )
2025-10-09 14:05:23 +01:00
Joffrey JAFFEUX
e0234b5e0b
FIX: ensures placeholders works in lists ( #63 )
...
Prior to this fix the following cases wouldn't work:
- nested lists
- a link in a list
2025-09-29 15:40:42 +02:00
Joffrey JAFFEUX
a3c2edf721
DEV: fix broken spec due to dropping select-kit ( #62 )
2025-09-23 11:38:36 +02:00
Alan Guo Xiang Tan
b7b9fde2c6
DEV: Pin version for Discourse < 3.6.0.beta1-dev ( #61 )
2025-08-27 12:59:44 +08:00
dependabot[bot]
703b0922de
Build(deps-dev): bump rack from 3.1.12 to 3.1.16 ( #60 )
...
Bumps [rack](https://github.com/rack/rack ) from 3.1.12 to 3.1.16.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v3.1.12...v3.1.16 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 3.1.16
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-21 17:59:18 +02:00
Jarek Radosz
a2447f34ea
DEV: Update linting config and run gjs-codemod ( #59 )
...
* DEV: Update linting config and run gjs-codemod
* DEV: Update linting config and run gjs-codemod
2025-06-06 11:57:21 +01:00
Sérgio Saquetim
279871bdfd
DEV: Fix compatibility with the Glimmer Post Stream ( #57 )
2025-05-06 15:08:09 -03:00
Loïc Guitaut
3e4d2020a1
DEV: Add system spec to check core features are working fine ( #56 )
2025-04-09 15:34:02 +02:00
Jarek Radosz
f5f0d83d2f
DEV: Update linting ( #55 )
2025-03-19 11:55:53 +00:00
dependabot[bot]
55b0e562ae
Build(deps-dev): bump rack from 3.1.8 to 3.1.10 ( #52 )
...
Bumps [rack](https://github.com/rack/rack ) from 3.1.8 to 3.1.10.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v3.1.8...v3.1.10 )
---
updated-dependencies:
- dependency-name: rack
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-12 22:10:53 +01:00
David Taylor
dc93260374
DEV: Bump dependencies and fix linting ( #51 )
2025-02-06 18:42:50 +01:00
David Taylor
96b09dd3a6
DEV: Pin version for Discourse <3.5.0.beta1-dev ( #50 )
2025-02-05 19:46:41 +01:00
David Taylor
515cab41e9
DEV: Update linting ( #49 )
2024-11-28 15:25:37 +01:00
David Taylor
32d2dcd864
DEV: Update linting ( #48 )
2024-11-20 19:17:25 +01:00
David Taylor
7d53aeef40
DEV: Update eslint config ( #47 )
2024-11-19 15:22:40 +01:00
Kelv
ae4ec14521
DEV: Update linting setup ( #46 )
2024-10-17 11:28:24 +02:00
Kelv
3dc1a05bf1
DEV: Switch to use pnpm ( #45 )
2024-10-14 11:27:12 +02:00
Discourse Translator Bot
b4ffb4772f
Update translations ( #44 )
2024-10-02 08:50:29 +02:00
David Taylor
296864048a
FIX: Scope a[href] detection to post ( #43 )
...
Corrects typo in a37e4bf266
2024-09-04 09:49:57 +01:00
David Taylor
a37e4bf266
FIX: Restore replacement functionality for a[href] attributes ( #42 )
...
Followup to 948634fe31
2024-09-04 09:31:17 +01:00
dependabot[bot]
83d5f2f914
Build(deps): bump micromatch from 4.0.5 to 4.0.8 ( #41 )
...
Bumps [micromatch](https://github.com/micromatch/micromatch ) from 4.0.5 to 4.0.8.
- [Release notes](https://github.com/micromatch/micromatch/releases )
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.5...4.0.8 )
---
updated-dependencies:
- dependency-name: micromatch
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-01 12:43:49 +02:00
David Taylor
569b566d38
FIX: Multiple placeholders in a single post ( #40 )
...
The changes in 948634fe31 meant that only the most-recently-changed placeholder is actually applied.
This commit refactors things so that we store all placeholder values in JS, and then apply them all in a single pass over the DOM. As well as fixing the bug, this should be a significant perf improvement for posts with lots of placeholders
Also introduces some simple system specs.
---------
Co-authored-by: Joffrey JAFFEUX <j.jaffeux@gmail.com >
2024-08-29 12:37:21 +01:00
David Taylor
cbea5f6471
DEV: Update compatibility file
2024-08-29 10:16:48 +01:00
David Taylor
948634fe31
SECURITY: Apply transformations to text nodes only
...
Previously, the replacement system would modify raw HTML, which is prone to issues and vulnerabilities. With this commit, we iterate over text nodes only, and do simple string replacements on their content. That means that the user input never gets passed into an HTML parser, and there is no chance of injection attacks.
The re-rendering system is also simplified to store the original value for re-use later, instead of mapping position/length of replacements.
This does mean the behavior is changed slightly. Replacements will no longer be applied to html attributes (e.g `a[href]`). If this affects your use-case, please let us know [on Meta](https://meta.discourse.org/t/113533 ).
This is a followup to the fix in a62f711d56
2024-08-29 10:15:53 +01:00
Joffrey JAFFEUX
a62f711d56
SECURITY: properly escape user input ( #38 )
...
We were failing to correctly escape content which we would then inject in the HTML of the post causing an XSS.
Note this XSS is stopped by CSP.
2024-08-20 18:06:58 +02:00
Discourse Translator Bot
57045bc9e5
Update translations ( #37 )
2024-08-20 17:54:48 +02:00
Discourse Translator Bot
5e61e49ef5
Update translations ( #36 )
2024-08-13 16:34:43 +02:00
Natalie Tay
2a1f703999
DEV: Pin theme for Discourse < 3.4.0.beta1-dev ( #35 )
2024-08-02 17:47:11 +08:00
Discourse Translator Bot
c7c7c99a6c
Update translations ( #34 )
2024-07-09 23:12:28 +02:00
dependabot[bot]
34e52524ec
Build(deps): bump braces from 3.0.2 to 3.0.3 ( #33 )
...
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-20 11:33:33 +02:00
Discourse Translator Bot
139284225f
Update translations ( #32 )
2024-06-18 15:41:02 +02:00
Discourse Translator Bot
154059ba14
Update translations ( #31 )
2024-06-11 17:22:13 +02:00
Discourse Translator Bot
687b0e4798
DEV: Add Crowdin support ( #30 )
2024-06-11 13:37:43 +02:00
JimmyJammyDodger
bd6e5beee9
Update about.json ( #29 )
2024-06-09 10:09:13 +01:00
David Taylor
a319c0baa1
DEV: Update linting ( #28 )
2024-03-27 18:55:28 +01:00
Selase Krakani
51df0ef4a6
DEV: Pin theme for Discourse < 3.3.0.beta1-dev ( #27 )
2024-02-29 12:59:20 -07:00
Jarek Radosz
05a727efd5
DEV: Use the new modal api ( #26 )
2023-12-05 23:15:32 +01:00
Alan Guo Xiang Tan
344f4dd0ea
DEV: Switch to new addComposerToolbarPopupMenuOption plugin API ( #25 )
...
Why this change?
`api.addToolbarPopupMenuOptionsCallback` has been deprecated in https://github.com/discourse/discourse/commit/913fd3a7b392b492f6344102577960a6eada00ce
2023-10-23 08:08:57 +08:00
dependabot[bot]
3ca2000263
Build(deps): bump @babel/traverse from 7.20.10 to 7.23.2 ( #24 )
...
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse ) from 7.20.10 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse )
---
updated-dependencies:
- dependency-name: "@babel/traverse"
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-18 12:58:02 -04:00
Penar Musaraj
fb1cf21616
DEV: Pin theme for Discourse 3.1 stable ( #23 )
2023-08-22 14:03:25 -05:00
dependabot[bot]
322db3406e
Build(deps): bump word-wrap from 1.2.3 to 1.2.4 ( #22 )
...
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases )
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4 )
---
updated-dependencies:
- dependency-name: word-wrap
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-19 01:01:08 +02:00