sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
4,583 Commits 2 Branches 0 Tags
c489497e451887bfe400434c5a010940051e9890
Commit Graph

1000 Commits

Author SHA1 Message Date
Erik Michelson
c489497e45 refactor(frontmatter): constrain frontmatter object after parsing 
This change removes the meta-marked dependency which solely was
used for extracting the frontmatter, which is possible as well
with one function. Furthermore, this introduces constraints to
objects resulting from frontmatter parsing and enforces them in
order to prevent attacks like a yaml bomb (massive alias expansion).
This change should resolve a possible DoS attack.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-06-18 23:56:45 +02:00
renovate[bot]
291b9d592d chore(deps): update linters to v7.3.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 23:10:06 +02:00
renovate[bot]
16d426704f chore(deps): update test packages to v11.7.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 23:09:32 +02:00
Erik Michelson
6676d640ba revert: chore(deps): update yarn monorepo to v4.17.0" 
This reverts commit 71a4d19a83.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-06-18 22:54:54 +02:00
renovate[bot]
71a4d19a83 chore(deps): update yarn monorepo to v4.17.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 22:13:45 +02:00
renovate[bot]
d80f26be9a fix(deps): update dependency helmet to v8.2.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 22:00:52 +02:00
renovate[bot]
1851f34d3f fix(deps): update dependency body-parser to v2.3.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:58:14 +02:00
renovate[bot]
32b433fa62 chore(deps): update dependency esbuild-loader to v4.5.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:57:16 +02:00
renovate[bot]
865e5b4180 fix(deps): update dependency pg to v8.21.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:51:05 +02:00
renovate[bot]
be6273ec8f fix(deps): update dependency dompurify to v3.4.11 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:49:36 +02:00
renovate[bot]
528530ebf3 fix(deps): update dependency morgan to v1.11.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:48:22 +02:00
renovate[bot]
0de5c5c1a9 fix(deps): update dependency express to v4.22.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:47:17 +02:00
renovate[bot]
86e20c9c48 fix(deps): update dependency nanoid to v3.3.13 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:44:01 +02:00
renovate[bot]
8046666943 fix(deps): update dependency uuid to v11.1.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:41:15 +02:00
renovate[bot]
7783aa7cc5 fix(deps): update dependency express-rate-limit to v8.5.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:40:46 +02:00
renovate[bot]
8b9463358d chore(deps): update dependency less to v4.6.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:36:00 +02:00
renovate[bot]
72b3696af5 chore(deps): update dependency js-cookie to v3.0.8 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-18 21:31:06 +02:00
renovate[bot]
fa00e34635 chore(deps): update dependency abcjs to v6.6.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-09 19:30:55 +02:00
renovate[bot]
c145549af4 fix(deps): update dependency mysql2 to v3.22.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-09 11:41:01 +02:00
renovate[bot]
cc9194bfca fix(deps): update dependency dompurify to v3.4.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-05 14:15:41 +02:00
Erik Michelson
20de73bb65 chore(release): bump version to 1.10.8 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-04-15 21:35:05 +02:00
renovate[bot]
0b27277612 chore(deps): update dependency turndown to v7.2.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:23:29 +02:00
renovate[bot]
5123f3b57d fix(deps): update dependency connect-session-sequelize to v8.0.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:22:01 +02:00
renovate[bot]
ba91457a51 chore(deps): update dependency esbuild-loader to v4.4.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:20:42 +02:00
renovate[bot]
31933a9f7d fix(deps): update dependency file-type to v21.3.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:20:09 +02:00
renovate[bot]
0432642231 chore(deps): update dependency less to v4.6.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:17:03 +02:00
renovate[bot]
451ae33f0d fix(deps): update dependency validator to v13.15.35 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:14:09 +02:00
renovate[bot]
8d10830dc4 fix(deps): update dependency sanitize-filename to v1.6.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:12:44 +02:00
renovate[bot]
954d84129d fix(deps): update dependency lodash to v4.18.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:12:20 +02:00
renovate[bot]
779682d35f chore(deps): update yarn to v4.13.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:09:03 +02:00
renovate[bot]
254c1227d2 fix(deps): update dependency dompurify to v3.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:08:45 +02:00
renovate[bot]
e1c28c46e6 fix(deps): update dependency mysql2 to v3.22.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 19:56:47 +02:00
renovate[bot]
7ca140d9a7 fix(deps): update dependency express-rate-limit to v8.3.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 19:55:53 +02:00
Erik Michelson
ca31580db5 fix(ot): add minified updated OT library and build:ot script 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-03-24 21:12:41 +01:00
renovate[bot]
f51f8dcc19 chore(deps): update linters 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:09:58 +01:00
renovate[bot]
90febd954e fix(deps): update dependency mysql2 to v3.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:03:35 +01:00
renovate[bot]
f7642f37f9 fix(deps): update dependency pg to v8.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:02:46 +01:00
renovate[bot]
32f119f7ac fix(deps): update dependency rimraf to v6.1.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:59:41 +01:00
renovate[bot]
f5fceed8e2 fix(deps): update dependency minio to v8.0.7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:58:16 +01:00
renovate[bot]
c75b02bc66 fix(deps): update dependency file-type to v21.3.2 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:56:44 +01:00
renovate[bot]
8ffea9963a fix(deps): update dependency dompurify to v3.3.2 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:56:17 +01:00
renovate[bot]
2adc315f13 chore(deps): update dependency abcjs to v6.6.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-02 14:55:43 +01:00
renovate[bot]
6c91a8728e chore(deps): update dependency abcjs to v6.6.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-02 14:52:00 +01:00
Philip Molares
5d00de9892 chore(release): bump version to 1.10.7 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-24 20:24:44 +01:00
Erik Michelson
145e3ee318 chore(release): bump versions and release notes 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-02-04 20:27:41 +01:00
Erik Michelson
f910000d2b feat(security): sanitize SVG files on upload 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-02-04 20:27:41 +01:00
Erik Michelson
0e9e2177cf chore(deps): update dependencies 
renovate was tired, so I did it manually

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-02-03 20:44:27 +01:00
renovate[bot]
d2dd6762a7 chore(deps): update dependency jquery-ui to v1.14.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-03 20:16:19 +01:00
renovate[bot]
14edc1a7a5 fix(deps): update dependency connect-session-sequelize to v8.0.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-03 20:13:31 +01:00
renovate[bot]
58d436c924 fix(deps): update dependency mysql2 to v3.16.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-03 20:13:01 +01:00