dependabot[bot]
5f89410efb
chore(deps): bump symfony/polyfill-php80 from 1.33.0 to 1.34.0
...
Bumps [symfony/polyfill-php80](https://github.com/symfony/polyfill-php80 ) from 1.33.0 to 1.34.0.
- [Release notes](https://github.com/symfony/polyfill-php80/releases )
- [Commits](https://github.com/symfony/polyfill-php80/compare/v1.33.0...v1.34.0 )
---
updated-dependencies:
- dependency-name: symfony/polyfill-php80
dependency-version: 1.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 12:34:56 +00:00
El RIDO
1e8ea16920
document change
2026-04-11 19:46:58 +02:00
El RIDO
ebe6591864
Merge pull request #1825 from mirek-vl/master
...
Remove X-XSS-Protection from Controller.php
2026-04-11 19:43:31 +02:00
mirek-vl
1a5fa93f2f
Remove X-XSS-Protection from Controller.php
2026-04-11 12:57:54 +02:00
El RIDO
fbfe87d993
avoid mjs for now, inject map, Buffer is node-only
2026-04-04 10:22:10 +02:00
El RIDO
0a8fcb585e
Merge pull request #1822 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-20
...
chore(deps): bump dawidd6/action-download-artifact from 19 to 20
2026-04-03 19:41:59 +02:00
El RIDO
68548c9c73
remove unused dependency, snyk should work as a static code scanner
2026-04-03 18:53:21 +02:00
El RIDO
91c9ebeccf
exclude generated ES6 module from ESlint
2026-04-03 18:42:32 +02:00
El RIDO
2439d76a0a
apply StyleCI recommendation
2026-04-03 18:38:34 +02:00
El RIDO
43a729b1f9
updating zlib to 1.3.2
2026-04-03 18:15:54 +02:00
dependabot[bot]
e00ae3fb44
chore(deps): bump dawidd6/action-download-artifact from 19 to 20
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 19 to 20.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](8a338493df...8305c0f106
2026-04-03 11:52:33 +00:00
El RIDO
fa9968f8e7
Merge pull request #1815 from lo996/beggar-hunter/readme-links-PrivateBin-20260323082754
...
docs: fix broken README references in README.md
2026-03-29 18:11:08 +02:00
Beggar Hunter Bot
ed09226aa6
docs: fix broken README reference in README.md
2026-03-23 16:27:56 +08:00
El RIDO
df5f4b1440
Merge pull request #1814 from PrivateBin/dependabot/npm_and_yarn/js/flatted-3.4.2
...
chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /js
2026-03-21 15:49:19 +01:00
dependabot[bot]
7eaa70ae31
chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /js
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-21 10:28:50 +00:00
El RIDO
a0bdb2b3c8
Merge pull request #1811 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-19
...
chore(deps): bump dawidd6/action-download-artifact from 18 to 19
2026-03-18 19:58:33 +01:00
dependabot[bot]
f5543d4317
chore(deps): bump dawidd6/action-download-artifact from 18 to 19
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 18 to 19.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](1f8785ff7a...8a338493df
2026-03-18 11:52:44 +00:00
El RIDO
4ba870f48a
Merge pull request #1809 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-18
...
chore(deps): bump dawidd6/action-download-artifact from 17 to 18
2026-03-16 22:04:15 +01:00
dependabot[bot]
907c4d75f6
chore(deps): bump dawidd6/action-download-artifact from 17 to 18
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 17 to 18.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](09b07ec687...1f8785ff7a
2026-03-16 11:56:20 +00:00
rugk
47d5485a33
Merge pull request #1804 from PrivateBin/docs/contrib-guide
...
Strengthen AI guidlines & enforce screenshots for visual changes
2026-03-15 15:22:13 +01:00
El RIDO
07eb15eb36
Merge pull request #1808 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-17
...
chore(deps): bump dawidd6/action-download-artifact from 16 to 17
2026-03-12 14:05:12 +01:00
dependabot[bot]
69ac3ad079
chore(deps): bump dawidd6/action-download-artifact from 16 to 17
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 16 to 17.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](2536c51d3d...09b07ec687
2026-03-12 11:52:43 +00:00
El RIDO
ab8e2ea2dc
Merge pull request #1807 from PrivateBin/purify-3.3.2
...
update DOMpurify library from 3.3.0 to 3.3.2
2026-03-10 18:41:19 +01:00
El RIDO
604e61beaa
update DOMpurify library from 3.3.0 to 3.3.2
2026-03-07 09:00:06 +01:00
El RIDO
6d3c9c9206
Merge pull request #1806 from PrivateBin/crowdin-translation
...
New Crowdin updates
2026-03-07 08:43:23 +01:00
PrivateBin Translator Bot
1bf20398e3
New translations en.json (Slovenian)
2026-03-05 17:51:08 +01:00
PrivateBin Translator Bot
09f65bf06b
New translations en.json (Slovenian)
2026-03-05 14:49:45 +01:00
rugk
d462c201de
style: fix typos
2026-03-03 15:21:37 +01:00
rugk
2986c97ea7
docs: also adjust PR template accordingly
2026-03-03 15:19:11 +01:00
rugk
e69570b73e
Strengthen AI guidlines & force screenshots for visual users
...
IMHO after https://github.com/PrivateBin/PrivateBin/pull/1754 we again need to make it a requirement in the guidelines to disclose the fact an LLM is used.
This also adds to attach screenshots for visual changes etc. (which again also ensures users actually _test_ the changes they submit)
I wrote it here and not in the wiki, because:
* this text can be read by an LLM inside the git repo, which I guess is beneficial
* the text may be shown more prominently ere IMHO
* I guess the wiki guidelines rather give a "big introduction" into how to contribute with the code base, and do not define "rules"/guidelines at all
2026-03-03 15:15:22 +01:00
El RIDO
1ba8aa15aa
Merge pull request #1800 from PrivateBin/dependabot/npm_and_yarn/js/multi-770cfcd984
...
chore(deps): bump minimatch in /js
2026-02-28 09:08:05 +01:00
El RIDO
7aa30ad243
Merge pull request #1799 from PrivateBin/dependabot/github_actions/actions/upload-artifact-7
...
chore(deps): bump actions/upload-artifact from 6 to 7
2026-02-28 09:05:00 +01:00
dependabot[bot]
7057c216fd
chore(deps): bump minimatch in /js
...
Bumps and [minimatch](https://github.com/isaacs/minimatch ). These dependencies needed to be updated together.
Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 9.0.6 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 9.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-28 04:28:46 +00:00
dependabot[bot]
380fe5b2c3
chore(deps): bump actions/upload-artifact from 6 to 7
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 11:52:45 +00:00
rugk
132121f2e1
Merge pull request #1798 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-16
...
chore(deps): bump dawidd6/action-download-artifact from 15 to 16
2026-02-26 18:02:35 +01:00
dependabot[bot]
e680917be9
chore(deps): bump dawidd6/action-download-artifact from 15 to 16
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 15 to 16.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](fe9d59ce33...2536c51d3d
2026-02-26 11:52:41 +00:00
rugk
32ab4dade5
Merge pull request #1790 from PrivateBin/devcontainer/phpunit
...
fix(devcontainer): try making VSCode test extension work (PHPUnit/Mocha)
2026-02-25 09:50:27 +01:00
rugk
ee4d5975f8
Merge pull request #1730 from PrivateBin/xss/jsImprove
...
Simplify parsing untrusted code and strengthen DOMPurify config
2026-02-25 08:08:28 +01:00
rugk
d988632486
Merge pull request #1795 from PrivateBin/dependabot/js
...
Enable Dependabot for JavaScript dependencies
2026-02-25 08:05:51 +01:00
rugk
e8dce7aa36
chore: remove sqlite as it apparently was already installed
2026-02-24 14:24:07 +00:00
rugk
9620031f30
test: pin version of PHPUnit
2026-02-24 13:43:56 +00:00
rugk
7283bcaec0
test(devcontainer): properly install PHP extensions for testing
2026-02-24 13:43:34 +00:00
rugk
285f592e70
test(phpunit): fix PHPUnit different CWD with a custom command
...
As per https://github.com/recca0120/vscode-phpunit/issues/385#issuecomment-3947799942
Also needed to set `XDEBUG_MODE`.
Generally works, but now I get test failures.
2026-02-24 12:37:47 +00:00
rugk
4192751004
Merge remote-tracking branch 'origin/master' into devcontainer/phpunit
2026-02-24 12:13:31 +00:00
rugk
d874ea71a2
test: fix tests
2026-02-24 12:06:46 +00:00
rugk
bf32c7ea64
Enable Dependabot for JavaScript dependencies
2026-02-24 12:30:15 +01:00
rugk
1cc811644f
docs: improve JSDoc
2026-02-23 16:00:31 +00:00
rugk
5fd974e247
style: fix/remove trailing comma
2026-02-23 16:00:22 +00:00
rugk
30f80d055b
wipfix: fix JS syntax errors
2026-02-23 15:54:56 +00:00
rugk
5dab2392b9
Merge branch 'master' into xss/jsImprove
2026-02-23 16:48:21 +01:00
