Skip to content

Conversation

@endrepavel
Copy link
Contributor

See: [Bug] ipv4 address in ipv6 format #4599

vdbhb59 and others added 30 commits August 8, 2024 15:00
* Update account.md

Added FreeOTP+ as another 2FA app, completely open sourced & available at F-Droid as well.

* Update account.md

---------

Co-authored-by: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Debian 12 has MariaDB 10.11 in default repos. Switch to MariaDB 11.4
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Update LaravelSetup.php

Update version

* Update LaravelSetup.php
* Update hst-install-ubuntu.sh

Error in ubuntu 24.04

* Format changes

---------

Co-authored-by: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
4.0.7 has a ReDOS vulnerability called CVE-2024-4067 ,
see GHSA-952p-6rrq-rcjv

I believe the impact on HestiaCP is low, but the fix is easy.

    $ npm audit # npm audit report

    micromatch <4.0.8
    Severity: moderate
    Regular Expression Denial of Service (ReDoS) in micromatch - GHSA-952p-6rrq-rcjv fix available via npm audit fix --force
    Will install markdownlint-cli2@0.3.2, which is a breaking change node_modules/lint-staged/node_modules/micromatch
    node_modules/micromatch
    node_modules/stylelint/node_modules/micromatch
    markdownlint-cli2 >=0.4.0
    Depends on vulnerable versions of micromatch
    node_modules/markdownlint-cli2

    2 moderate severity vulnerabilities

Have notified upstream markdownlint-cli2: DavidAnson/markdownlint-cli2#398
* prettier complain if not end with newline

* a bunch of newlines.

the newlines were created with the following script:
<?php

declare(strict_types=1);

$dir = realpath(__DIR__ . '/..');
chdir($dir);
foreach ((new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS))) as $file) {
    if ($file->isDir()) {
        continue;
    }
    if ($file->isLink()) {
        continue;
    }
    $size = $file->getSize();
    if ($size === 0) {
        continue;
    }
    $path = $file->getPathname();
    $blacklist = array(
        '/.git/',
        '/node_modules/',
        '/vendor/',
        'rex:/\\.svg$/i'
    );
    foreach ($blacklist as $pattern) {
        $isBlacklisted = str_starts_with($pattern, 'rex:') ? preg_match(substr($pattern, strlen('rex:')), $path) : str_contains($path, $pattern);
        if ($isBlacklisted) {
            continue 2;
        }
    }
    $content = file_get_contents($path);
    // is binary?
    if(strlen($content) !== strcspn($content, "\x00\x01\x02\x03\x04\x05\x06\x07\x08")) {
        //var_dump("skipping binary file: {$path}");
        continue;
    }
    $lastByte = substr($content, -1);
    if ($lastByte === "\n") {
        continue;
    }
    var_dump($path, $lastByte);
    $content .= "\n";
    file_put_contents($path, $content, LOCK_EX);
}
?>

* prettier fix
add hestiamail to hestia-users
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* quote strings

Previously if a password contained whitespace like `pass word`  or shell-metacharacters like `pass&word` or `pass'word` , it would generate an invalid install command.

The code is basically just https://github.com/hestiacp/phpquoteshellarg ported to javascript.
---------

Co-authored-by: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
…#4541)

* Drop CMP check

* Create a Pre install script to create backup of existing config
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#4559)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.1 to 5.4.6.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.6/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jaapmarcus jaapmarcus changed the base branch from main to chore/config-updates October 26, 2024 08:05
@jaapmarcus
Copy link
Member

Let me cherry pick the related commits this becomes way to messy

@jaapmarcus jaapmarcus closed this Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.