{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":17753500,"defaultBranch":"master","name":"pagure","ownerLogin":"Pagure","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2014-03-14T17:04:54.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/44003730?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1716561796.0","currentOid":""},"activityList":{"items":[{"before":"a67e5bdc9ff4ad1679b880fd388e873161b13cd6","after":"6b06ac585529c3087364a5ebe4fb9d7c20e3c872","ref":"refs/heads/5.14.x","pushedAt":"2024-05-24T14:40:22.000Z","pushType":"push","commitsCount":81,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"docs(changelog): Add links to related pull requests to security fixes in 5.14.1","shortMessageHtmlLink":"docs(changelog): Add links to related pull requests to security fixes…"}},{"before":"2803a7ac66636153865e9238e48018b90ace0999","after":"9e1a5c49cfbc730fd361d87eeb6be74fca6cf6a7","ref":"refs/heads/master","pushedAt":"2024-05-24T14:30:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"fix: Path traversal in view_issue_raw_file()\n\nUse 'werkzeug.security.safe_join()' instead of plain 'os.path.join()'\nto sanitize user-provided filename variable and avoid escaping the base directory.\n\nVulnerability discovered by Thomas Chauchefoin \n\nFixes: rhbz#2279411, rhbz#2280728, rhbz#2280726, CVE-2024-4982\n\nSigned-off-by: Dominik Wombacher ","shortMessageHtmlLink":"fix: Path traversal in view_issue_raw_file()"}},{"before":"c6ced5d61d1987da23d8e6b5aa8a03379f1f3691","after":"2803a7ac66636153865e9238e48018b90ace0999","ref":"refs/heads/master","pushedAt":"2024-05-24T14:28:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"fix: _update_file_in_git() follows symbolic links in temporary clones\n\nBail out if file path is outside the temp repo or inside the '.git/' folder.\nThis avoids data leak and unauthorized changes in files or git config.\n\nVulnerability discovered by Thomas Chauchefoin \n\nFixes: rhbz#2278745, rhbz#2280725, rhbz#2280723, CVE-2024-4981\n\nSigned-off-by: Dominik Wombacher ","shortMessageHtmlLink":"fix: _update_file_in_git() follows symbolic links in temporary clones"}},{"before":"affcebf0f99281ef29f6d8b976e77fadf0ea96c5","after":"c6ced5d61d1987da23d8e6b5aa8a03379f1f3691","ref":"refs/heads/master","pushedAt":"2024-05-24T14:27:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"fix: generate_archive() follows symbolic links in temporary clones\n\nIf the repo contains symlinks, add actual link rather than the target content to the zip archive.\nAvoids following symlinks and inclusion of data from outside the repository.\n\nVulnerability discovered by Thomas Chauchefoin \n\nFixes: rhbz#2280030\n\nSigned-off-by: Dominik Wombacher ","shortMessageHtmlLink":"fix: generate_archive() follows symbolic links in temporary clones"}},{"before":"22e68c18565764e87e08845b342718357e14009e","after":"affcebf0f99281ef29f6d8b976e77fadf0ea96c5","ref":"refs/heads/master","pushedAt":"2024-05-24T14:25:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Separate options and operands in PagureRepo.log()\n\nPrevent the injection of additional options to the Git command-line\nby adding the (non-standard) --end-of-option flag before any\nuser-controlled value. This was reachable from view_history_file().\n\nFixes: rhbz#2277121, 6a1d002 (\"Add a method to run git log using the system's git\")\nSigned-off-by: Thomas Chauchefoin ","shortMessageHtmlLink":"Separate options and operands in PagureRepo.log()"}},{"before":null,"after":"a67e5bdc9ff4ad1679b880fd388e873161b13cd6","ref":"refs/heads/5.14.x","pushedAt":"2024-05-20T15:35:47.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Release 5.13.3\n\nSigned-off-by: Pierre-Yves Chibon ","shortMessageHtmlLink":"Release 5.13.3"}},{"before":"66b3e2034352064acb979505497ed2db0d331d53","after":"22e68c18565764e87e08845b342718357e14009e","ref":"refs/heads/master","pushedAt":"2024-05-17T23:43:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"fix: Extra whitespace in \"packages\" on src.fpo front page\n\nPlural of 'Packages' was rendered as 'Package s'\n\nFixes: https://pagure.io/pagure/issue/5316","shortMessageHtmlLink":"fix: Extra whitespace in \"packages\" on src.fpo front page"}},{"before":"4a3b0eace74fd5752185c661599f324eb5c0563a","after":"66b3e2034352064acb979505497ed2db0d331d53","ref":"refs/heads/master","pushedAt":"2024-05-17T23:15:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"fix: Crash when config:[ENABLE_DOCS = False]\n\nEnsure 'config[\"DOCS_FOLDER\"]' is always defined to avoid 'KeyError' Exception down the line\n\nFixes: https://pagure.io/pagure/issue/5407","shortMessageHtmlLink":"fix: Crash when config:[ENABLE_DOCS = False]"}},{"before":"32ac00bc5dcc0404ac48a2066f5a82ff900bd91e","after":"4a3b0eace74fd5752185c661599f324eb5c0563a","ref":"refs/heads/master","pushedAt":"2024-05-17T20:47:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Added data-toggle attribute to missing tooltips (Issue #4965)","shortMessageHtmlLink":"Added data-toggle attribute to missing tooltips (Issue #4965)"}},{"before":"fe91f76286222fe2c8fc0c7a968a4f6d57e8c354","after":null,"ref":"refs/heads/adjust_tests","pushedAt":"2024-05-17T10:20:37.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"}},{"before":"fe91f76286222fe2c8fc0c7a968a4f6d57e8c354","after":"32ac00bc5dcc0404ac48a2066f5a82ff900bd91e","ref":"refs/heads/master","pushedAt":"2024-05-17T10:20:37.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"dist-git: Added a condition that decides whether to use the stg or prod version of the link\n\nSigned-off-by: amedvede ","shortMessageHtmlLink":"dist-git: Added a condition that decides whether to use the stg or pr…"}},{"before":"62e1ab73e2cf815df0d21f8bd3de996a4624bae2","after":"fe91f76286222fe2c8fc0c7a968a4f6d57e8c354","ref":"refs/heads/master","pushedAt":"2024-04-30T02:30:51.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_since\n\nSigned-off-by: Pierre-Yves Chibon ","shortMessageHtmlLink":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_s…"}},{"before":"0a6267ade21d38492a1e179d850925c5d0fb1cf0","after":"fe91f76286222fe2c8fc0c7a968a4f6d57e8c354","ref":"refs/heads/adjust_tests","pushedAt":"2024-04-30T00:38:14.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_since\n\nSigned-off-by: Pierre-Yves Chibon ","shortMessageHtmlLink":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_s…"}},{"before":"1b36cb8e32bab2fac9d5a51a374522069b537342","after":"62e1ab73e2cf815df0d21f8bd3de996a4624bae2","ref":"refs/heads/master","pushedAt":"2024-04-29T16:05:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"feat!: Drop gitolite backend support\n\nBREAKING CHANGE: this commit drops 'gitolite2' and 'gitolite3' backend support. 'pagure' is the new default backend. Code to support 'static' backends removed.","shortMessageHtmlLink":"feat!: Drop gitolite backend support"}},{"before":"870dd60d6e7d0826eea156200343390b4a8d15e5","after":"0a6267ade21d38492a1e179d850925c5d0fb1cf0","ref":"refs/heads/adjust_tests","pushedAt":"2024-04-20T13:35:50.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_since\n\nSigned-off-by: Pierre-Yves Chibon ","shortMessageHtmlLink":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_s…"}},{"before":"311fb7b257fb226eae54b701e55cf3db53ed9f69","after":"1b36cb8e32bab2fac9d5a51a374522069b537342","ref":"refs/heads/master","pushedAt":"2024-04-20T10:30:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Fix pagure.lib.git.get_changed_files()\n\nSigned-off-by: Nikola Forró ","shortMessageHtmlLink":"Fix pagure.lib.git.get_changed_files()"}},{"before":"065aed559ffa6c84d36b562400f6f95bab232751","after":"311fb7b257fb226eae54b701e55cf3db53ed9f69","ref":"refs/heads/master","pushedAt":"2024-04-20T08:06:15.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Link to the file in the file history page breadcrumb\n\nAlso simplify the breadcrumb generation code since the output_type is\nhard-coded to \"history\".\n\nFixes https://pagure.io/pagure/issue/4793","shortMessageHtmlLink":"Link to the file in the file history page breadcrumb"}},{"before":"c8ea20215862e8ea8611fec66e1a386aff91c65c","after":"065aed559ffa6c84d36b562400f6f95bab232751","ref":"refs/heads/master","pushedAt":"2024-04-19T21:58:32.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Add history button to the tree view (fixes #5173)","shortMessageHtmlLink":"Add history button to the tree view (fixes #5173)"}},{"before":"68b39c7156ca5bf43b7e4068873c5f1b07ab2a97","after":"870dd60d6e7d0826eea156200343390b4a8d15e5","ref":"refs/heads/adjust_tests","pushedAt":"2024-04-19T16:04:27.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_since\n\nSigned-off-by: Pierre-Yves Chibon ","shortMessageHtmlLink":"Adjust unit-test for: PagureFlaskApiIssuetests.test_api_view_issues_s…"}},{"before":"49be21253ea7ce2e48019a492c44d3f2ff804ccc","after":"c8ea20215862e8ea8611fec66e1a386aff91c65c","ref":"refs/heads/master","pushedAt":"2024-04-19T15:14:38.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Allow author to update PR but not to change assignee","shortMessageHtmlLink":"Allow author to update PR but not to change assignee"}},{"before":"a614130aca3da160bd6cec88692ec5763ba410b5","after":"49be21253ea7ce2e48019a492c44d3f2ff804ccc","ref":"refs/heads/master","pushedAt":"2024-04-19T13:25:49.000Z","pushType":"push","commitsCount":55,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"tests: Rename 'alembic-3' to 'alembic' in unit tests, sed commands to replace it during container start removed. Not required anymore after dropping Python 2 a while ago.","shortMessageHtmlLink":"tests: Rename 'alembic-3' to 'alembic' in unit tests, sed commands to…"}},{"before":"eecf5bd6abd0dc1fb721d24361c2bf8bd88ec6e6","after":"a614130aca3da160bd6cec88692ec5763ba410b5","ref":"refs/heads/master","pushedAt":"2024-04-18T23:23:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"tests(CI): Fix '[Warning] one or more build args were not consumed: [BRANCH REPO]', they have to be lowercase","shortMessageHtmlLink":"tests(CI): Fix '[Warning] one or more build args were not consumed: […"}},{"before":"cce785fa7f8bad6b674774065bb1f6f8c1aca611","after":"eecf5bd6abd0dc1fb721d24361c2bf8bd88ec6e6","ref":"refs/heads/master","pushedAt":"2024-04-18T23:01:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"tests(CI): Disable F39 RPM because of pytest+xdist bug. Pass REPO and BRANCH env vars as build-args to podman build.","shortMessageHtmlLink":"tests(CI): Disable F39 RPM because of pytest+xdist bug. Pass REPO and…"}},{"before":"3ce7a8d6c41b77b38d24fa3daa6a196a001a47e6","after":"cce785fa7f8bad6b674774065bb1f6f8c1aca611","ref":"refs/heads/master","pushedAt":"2024-04-17T11:26:14.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Remove spurious %endif from files/pagure.spec","shortMessageHtmlLink":"Remove spurious %endif from files/pagure.spec"}},{"before":"172982b2cb347d33139f3e2b51538c00548ed3d3","after":"3ce7a8d6c41b77b38d24fa3daa6a196a001a47e6","ref":"refs/heads/master","pushedAt":"2024-04-17T11:23:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"docs(README): Fix rst rendering issues with literal-blocks and note directives.","shortMessageHtmlLink":"docs(README): Fix rst rendering issues with literal-blocks and note d…"}},{"before":"47c0d8bcb7a087efe7d3b2af9d72bbbdb9a4e4f5","after":"172982b2cb347d33139f3e2b51538c00548ed3d3","ref":"refs/heads/master","pushedAt":"2024-04-08T12:51:49.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"feat: added request for frozen branches and formating the function to have correct tab size\n\nSigned-off-by: amedvede ","shortMessageHtmlLink":"feat: added request for frozen branches and formating the function to…"}},{"before":"8ed510d99c9fbe3736c96b751d567891cbad343a","after":"47c0d8bcb7a087efe7d3b2af9d72bbbdb9a4e4f5","ref":"refs/heads/master","pushedAt":"2024-03-29T11:11:38.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Update pagure/themes/srcfpo/templates/repo_info.html\n\nRestore translation status button in src.fedoraproject.org/rpms.","shortMessageHtmlLink":"Update pagure/themes/srcfpo/templates/repo_info.html"}},{"before":"147f4a9d5d2fe94dbf0acc0c33bfcf44926c1780","after":"8ed510d99c9fbe3736c96b751d567891cbad343a","ref":"refs/heads/master","pushedAt":"2024-03-28T12:01:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Add pull request ID to push notification payload\n\nSigned-off-by: Nikola Forró ","shortMessageHtmlLink":"Add pull request ID to push notification payload"}},{"before":"c15e7251f70b2280e272698183c10554da02d3aa","after":"147f4a9d5d2fe94dbf0acc0c33bfcf44926c1780","ref":"refs/heads/master","pushedAt":"2024-03-27T00:47:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"English improvements\n\nSigned-off-by: Jerry James ","shortMessageHtmlLink":"English improvements"}},{"before":"c2de90a1399e1a529b6694a182b9f0a8a0389a14","after":"c15e7251f70b2280e272698183c10554da02d3aa","ref":"refs/heads/master","pushedAt":"2024-02-08T12:21:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"pypingou","name":"Pierre-Yves Chibon","path":"/pypingou","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1240038?s=80&v=4"},"commit":{"message":"Support Redis Unix sockets\n\nIntroduce a configuration option \"REDIS_SOCKET\", allowing the\npath to a Unix socket to be specified as an alternative to the\nexisting, TCP/IP based, \"REDIS_HOST\"/\"REDIS_PORT\" options.\n\nSigned-off-by: Georg Pfuetzenreuter ","shortMessageHtmlLink":"Support Redis Unix sockets"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEUyP5lAA","startCursor":null,"endCursor":null}},"title":"Activity · Pagure/pagure"}