1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-03-03 14:52:36 +02:00

4726 Commits

Author SHA1 Message Date
Florent Daigniere
72bf53105c doh2 2024-05-27 16:03:03 +02:00
Florent Daigniere
6dbceeeefa doh 2024-05-27 15:43:50 +02:00
Florent Daigniere
47c53a429c towncrier 2024-05-27 15:42:42 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
bors-mailu[bot]
2a0791dd79
Merge #3270
3270: Use the new image name for Tika r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Use the new image name for Tika. See https://github.com/Mailu/Mailu/pull/3269#issuecomment-2123274960 for context.

### Related issue(s)
- 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-24 11:24:00 +00:00
Florent Daigniere
8c92bd5b4f Use the new image name 2024-05-21 21:14:13 +02:00
bors-mailu[bot]
16d99b71d2
Merge #3269
3269: Upgrade Tika and switch to the upstream image r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Upgrade Tika to 2.9.2 and switch to the upstream image

We couldn't do it before as there was no multi-arch image upstream
See https://github.com/apache/tika-docker/pull/19

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-21 09:16:34 +00:00
Florent Daigniere
3c9f825e4f Pin a version of requests that works
See https://github.com/psf/requests/issues/6707
2024-05-21 10:36:53 +02:00
Florent Daigniere
2bf19ead47 Switch to the upstream image of Tika
See https://github.com/apache/tika-docker/pull/19
Upgrade to 2.9.2 while at it
2024-05-21 10:15:27 +02:00
bors-mailu[bot]
6e08e591fb
Merge #3247
3247: Update all dependencies r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Update all dependencies including snappymail to 2.36.1

### Related issue(s)
- close #3032 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-20 12:03:01 +00:00
Florent Daigniere
4c5ad20459 doh 2024-05-20 11:08:06 +02:00
Florent Daigniere
dbd32cabf9 retry with cargo 2024-05-20 11:08:06 +02:00
Florent Daigniere
155a4cce5e maybe fix tests 2024-05-20 11:08:06 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
bors-mailu[bot]
d84c73a9d4
Merge #3267
3267: Update Roundcube 1.6.7 due to XSS vulnerabilities r=mergify[bot] a=ctrl-i

## What type of PR?

Bug fix

## What does this PR do?

Updates roundcube to 1.6.7

### Related issue(s)

Due to XSS vulnerabilities see [here](https://github.com/roundcube/roundcubemail/releases/tag/1.6.7)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: ctrl-i <1422608+ctrl-i@users.noreply.github.com>
2024-05-20 07:19:42 +00:00
ctrl-i
a53b869d8a
Create 3261.bugfix
Updated roundcube to 1.6.7 due to known XSS vulnerabilities
2024-05-20 07:49:49 +01:00
ctrl-i
e79e055ac1
Update Dockerfile
Roundcube incremented to 1.6.7 due to XSS vulnerabilities
2024-05-20 07:47:39 +01:00
bors-mailu[bot]
66721f260d
Merge #3261
3261: Fix #3260: double-quotes should be escaped/allowed in ooo r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

double-quotes should be allowed in ooo messages

### Related issue(s)
- closes #3260 
- #3249

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-17 12:24:22 +00:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
bors-mailu[bot]
935266bc65
Merge #3235
3235: Tweaks to logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Make the default ``LOG_LEVEL=INFO`` ; ensure that admin does not log the access log unless it's set to ``DEBUG``
This ensures we see the authentication related messages.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:16:50 +00:00
bors-mailu[bot]
c728fa88e4
Merge #3251
3251: Fix CVE-2024-1135 r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix CVE-2024-1135

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:03:47 +00:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
bors-mailu[bot]
d90ecae8b8
Merge #3239
3239: Fix purge_user.sh r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix purge_user.sh; thanks to [nike7o0](https://github.com/nike7o0)

### Related issue(s)
- close #3238 
- #2858

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-03 14:24:07 +00:00
Florent Daigniere
67a53671f4 Fix purge_user.sh 2024-05-03 14:31:18 +02:00
Florent Daigniere
1d8f041b87 access_logs are DEBUG on admin 2024-04-20 23:38:37 +02:00
bors-mailu[bot]
da36ac0e92
Merge #3203
3203: Add automatic tests for RESTful API r=mergify[bot] a=Diman0

and fix all remaining issues that I could find with the API.

## What type of PR?

internal feature / bug-fix

## What does this PR do?
I first wanted to finish #3113 before continuing on the tests to keep the scope smaller of the PR.

This PR adds automatic tests that tests **all** the interfaces of the RESTful API. Practically it only tests the normal Ok (http 200) situations. Maybe in the future we could add more tests to check if the validation checks work correctly for each interface.

I also fixed any issues I could find with the RESTful API. I can at least confirm that all interfaces work now. I think the validation checks are also complete now.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-04-17 18:09:31 +00:00
bors-mailu[bot]
efb3892b09
Merge #3206
3206: Fix typo in setup r=mergify[bot] a=strugee

## What type of PR?

Documentation

## What does this PR do?

Fix typo; see diff

### Related issue(s)

N/A

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: AJ Jordan <alex@strugee.net>
2024-03-26 12:59:58 +00:00
AJ Jordan
2896078f1f
Fix typo 2024-03-25 23:31:26 -04:00
bors-mailu[bot]
f88da63086
Merge #3204
3204: Fix bug 3068. Spam messages were always marked as read. r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
When `Enable marking spam mails as read`  was disabled, spam messages were still marked as read. This PR resolves this defect.

### Related issue(s)
- Auto close an issue like: closes #3068

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-25 13:21:47 +00:00
Dimitri Huisman
9e468100a0
Fix issues with forward_destination in api and user form
* form
  * Fixed: Internal error occurred if an empty forward_destination was entered and forward_enabled was false
  * Fixed: form did not check if forward_destination is empty.
  * Fixed: form marked forward_destination field as read-only upon reloading form upon validation error
* api - create user and update/patch user
  * Create/Patch user did not check if forward_destination email address is valid
  * Create/Patch user did not check if forward_destination is present and forward_enabled is true
2024-03-23 14:14:43 +00:00
Dimitri Huisman
9935cb48cd
Fix bug 3068. Spam messages were always marked as read. 2024-03-22 16:53:11 +00:00
Dimitri Huisman
acb878a43f
Use the correct hostname 2024-03-22 15:38:46 +00:00
Dimitri Huisman
18d5fb8a1b
Forgot to create the mailu.io domain as the first step in tests 2024-03-22 15:23:12 +00:00
Dimitri Huisman
2558ae3bc9
Add automatic tests for RESTful API. Fix all remaining issues that I could find with the API. 2024-03-22 15:01:37 +00:00
bors-mailu[bot]
4b21beea25
Merge #3200
3200: Fix highligting disabled users r=mergify[bot] a=nwinkelstraeter

This just changes the class on the rows of disabled users from `warning` to `bg-warning` . As warning is not available in AdminLTE 3 disabled users where not highlighted anymore-

![image](https://github.com/Mailu/Mailu/assets/81554102/af501719-5234-405a-8300-2db69a7e4ef6)


## What type of PR?
bug-fix

## What does this PR do?

### Related issue(s)
#3166 




Co-authored-by: Nico Winkelsträter <nico.winkelstraeter@initos.com>
2024-03-21 10:48:08 +00:00
Nico Winkelsträter
1d40ba635d
Change class from warning to text-muted.
`warning` ist not available in AdminLTE3 anymore.
2024-03-21 08:59:10 +01:00
bors-mailu[bot]
c8e3270724
Merge #3198
3198: Update actions in CI github workflow files r=mergify[bot] a=Diman0

## What type of PR?

update

## What does this PR do?

Update all the actions in the *.yml workflow files to the current version. This is required to get rid of all the warnings in github actions for using node16.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ n/a] In case of feature or enhancement: documentation updated accordingly
- [ n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 15:46:43 +00:00
bors-mailu[bot]
10ade025ac
Merge #3165
3165: Documentation: config-export had wrong example. r=mergify[bot] a=migs35323

fixing the example command flag.
running the example command to export the configuration throws: Error: [KeyError] 'mail-config'

this is valid for any version of mailu (at the time)

## What type of PR?

documentation

## What does this PR do?




Co-authored-by: migs35323 <92784574+migs35323@users.noreply.github.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 15:26:34 +00:00
Dimitri Huisman
df6dcf0d44
update docker/login-action@v2 to docker/login-action@v3 2024-03-18 15:24:43 +00:00
Dimitri Huisman
a8cdd6ca9c
Update actions in CI github workflow files 2024-03-18 15:12:10 +00:00
bors-mailu[bot]
e6fc7c3373
Merge #3197
3197: Address CVE-2024-23829 (CVE for aiohttp) r=mergify[bot] a=Diman0

## What type of PR?

security update

## What does this PR do?

Updates library to patch CVE-2024-23829.

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 15:10:28 +00:00
Dimitri Huisman
854e9b0a45
cli.rst contained wrong example 2024-03-18 14:34:58 +00:00
Dimitri Huisman
b6743019e8
Address CVE-2024-23829 (CVE for aiohttp) 2024-03-18 14:28:53 +00:00
bors-mailu[bot]
8bf5299f21
Merge #3194
3194: Fix 3113 r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Fixes swaggerui documentation of all RESTful api end points. The API documentation should now be valid for each endpoint. 

### Related issue(s)
- close #3113 


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 08:10:44 +00:00
Dimitri Huisman
1f69074771
Undo unintended changes to this file 2024-03-16 16:49:04 +00:00
Dimitri Huisman
b136c16f96
Revert commit. Will add api testing in a later PR 2024-03-16 15:54:09 +00:00
bors-mailu[bot]
42cdd12ab3
Merge #3191
3191: Ensure we also pin ISRG X2 in TLSA r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Ensure we also pin ISRG X2 in TLSA; some users may have opted-in, the CA may change where they issue from, ... this is future-proofing.

### Related issue(s)
- #3187 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-03-11 15:41:12 +00:00
Florent Daigniere
a1d8ff630f review2 2024-03-11 14:45:59 +01:00
bors-mailu[bot]
f44a7b3066
Merge #3184
3184: Remove redundant variable assignment r=mergify[bot] a=strugee

## What type of PR?

Bugfix

## What does this PR do?

See diff; this variable is set again two lines down

### Related issue(s)

None

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: AJ Jordan <alex@strugee.net>
2024-03-11 13:05:26 +00:00
Florent Daigniere
58b1738d8c api 2024-03-11 11:15:15 +01:00