Commit graph

4659 commits

Author SHA1 Message Date
rugk
fcebc6e114
docs: favour GitHub security form over mail
IMHO, the GitHub process nowadays provides a sleek workflow and is better than sending mails back-and-forth.

It's okay for me to leave that way open (especially if reporters really want to report high sensitive stuff and e.g. PGP-encrypt them), but I guess we should slightly suggest/favor the GitHub form for ease of maintenance.

@elrido what do you think?
2026-06-30 09:40:48 +02:00
El RIDO
9a75c15437
Merge pull request #1871 from PrivateBin/dependabot/github_actions/actions/cache-6
chore(deps): bump actions/cache from 5 to 6
2026-06-24 17:53:13 +02:00
dependabot[bot]
f67d507fae
chore(deps): bump actions/cache from 5 to 6
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-24 11:52:25 +00:00
El RIDO
f904eaf020
Merge pull request #1855 from PrivateBin/os-copy-hotkey
feat: Show OS-specific copy hotkey hint
2026-06-21 11:48:43 +02:00
El RIDO
caca8655ed
Merge pull request #1867 from PrivateBin/dependabot/github_actions/actions/checkout-7
chore(deps): bump actions/checkout from 6 to 7
2026-06-21 11:31:31 +02:00
Ribas160
233e3e2399
Merge remote-tracking branch 'upstream/master' into os-copy-hotkey
# Conflicts:
#	i18n/zh.json
#	lib/Configuration.php
2026-06-19 20:03:38 +03:00
Ribas160
2219039a0a
feat: add i18n keys for Cmd and Ctrl keyboard labels 2026-06-19 19:58:29 +03:00
dependabot[bot]
13350e71a1
chore(deps): bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-19 11:52:19 +00:00
El RIDO
597a6f0d12
Merge pull request #1861 from PrivateBin/dependabot/npm_and_yarn/js/multi-ef0f9f31a5
chore(deps): bump uuid and nyc in /js
2026-06-10 20:38:41 +02:00
dependabot[bot]
406c274ed8
chore(deps): bump uuid and nyc in /js
Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [nyc](https://github.com/istanbuljs/nyc). These dependencies need to be updated together.


Removes `uuid`

Updates `nyc` from 17.1.0 to 18.0.0
- [Release notes](https://github.com/istanbuljs/nyc/releases)
- [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/istanbuljs/nyc/compare/nyc-v17.1.0...nyc-v18.0.0)

---
updated-dependencies:
- dependency-name: nyc
  dependency-version: 18.0.0
  dependency-type: direct:development
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 18:31:30 +00:00
El RIDO
f4a820d8b9
fix php unit tests using newer google cloud storage library 2026-06-10 20:29:37 +02:00
El RIDO
425a6d32d2
fix php unit tests using newer google cloud storage library 2026-06-10 20:23:04 +02:00
El RIDO
0daec0ae67
Merge pull request #1860 from PrivateBin/crowdin-translation
New Crowdin updates
2026-06-10 19:39:08 +02:00
El RIDO
fa4e25efe6
Merge pull request #1802 from slegarraga/fix/modal-focus-accessibility
Fix: Focus modals when opened for accessibility
2026-06-10 19:38:03 +02:00
El RIDO
f1353de849
Merge pull request #1853 from PrivateBin/github-actions-hardening
harden github actions
2026-06-10 18:39:33 +02:00
PrivateBin Translator Bot
7868a769cb New translations en.json (Chinese Simplified)
[ci skip]
2026-06-09 06:50:28 +02:00
Ribas160
ec2d230d1b
refactor: deduplicate OS-specific hotkey detection into a shared helper 2026-05-29 15:43:41 +03:00
Ribas160
5d946c52a7
feat: Show OS-specific copy hotkey hint 2026-05-27 00:28:32 +03:00
Ribas160
4005094d38
chore: CHANGELOG.md updated 2026-05-26 09:25:13 +03:00
El RIDO
116b60060c
Merge pull request #1854 from PrivateBin/fix-yourls-status-code
fix: cast statusCode to int before strict comparison in YourlsProxy
2026-05-26 06:33:40 +02:00
Ribas160
f0e5001982
fix: cast statusCode to int before strict comparison 2026-05-25 23:34:57 +03:00
El RIDO
3f70f3732e
Merge pull request #1852 from PrivateBin/crowdin-translation
New Crowdin updates
2026-05-25 11:02:39 +02:00
PrivateBin Translator Bot
fe3ef3166b New translations en.json (Dutch)
[ci skip]
2026-05-25 10:34:01 +02:00
PrivateBin Translator Bot
d7cd6daad0 New translations en.json (Italian)
[ci skip]
2026-05-25 10:34:00 +02:00
PrivateBin Translator Bot
8ac3370797 New translations en.json (German)
[ci skip]
2026-05-25 10:33:58 +02:00
PrivateBin Translator Bot
2add3920b2 New translations en.json (French)
[ci skip]
2026-05-25 10:33:57 +02:00
El RIDO
630886e2c2
harden gihub actions
- restrict all default permissions
- content: read is not necessary for public repos
- security-events: write is needed for CodeQL uploads of SARIF reports
- persist-credentials: false prevents any github token to remain configured in the checked out repo (not necessary when not intending to push from the action)
2026-05-25 08:03:43 +02:00
PrivateBin Translator Bot
a081f71155 New translations en.json (Russian)
[ci skip]
2026-05-25 07:21:58 +02:00
PrivateBin Translator Bot
665d7fc023 New translations en.json (German)
[ci skip]
2026-05-25 07:21:57 +02:00
PrivateBin Translator Bot
5a3c52ed69 New translations en.json (Russian)
[ci skip]
2026-05-25 06:15:13 +02:00
El RIDO
9ab03b7d82
Merge pull request #1851 from PrivateBin/crowdin-translation
New Crowdin updates
2026-05-23 19:36:31 +02:00
PrivateBin Translator Bot
d19524f65b New translations en.json (Corsican)
[ci skip]
2026-05-23 12:14:02 +02:00
El RIDO
9e2ae58649
Merge pull request #1850 from PrivateBin/crowdin-translation
New Crowdin updates
2026-05-23 08:55:22 +02:00
PrivateBin Translator Bot
86d350c8b1 New translations en.json (Russian)
[ci skip]
2026-05-23 07:52:57 +02:00
PrivateBin Translator Bot
12c5e08573 New translations en.json (Hebrew)
[ci skip]
2026-05-23 07:52:56 +02:00
PrivateBin Translator Bot
f4a6cd5629 New translations en.json (Hebrew)
[ci skip]
2026-05-23 00:25:00 +02:00
PrivateBin Translator Bot
cb469a82dd New translations en.json (Ukrainian)
[ci skip]
2026-05-22 23:13:26 +02:00
PrivateBin Translator Bot
34a9ee36d0 New translations en.json (Russian)
[ci skip]
2026-05-22 23:13:22 +02:00
PrivateBin Translator Bot
eaaa259020 New translations en.json (Hebrew)
[ci skip]
2026-05-22 23:13:15 +02:00
“Sebastian
11d62b6cd4 fix(a11y): focus modals on open and update privatebin.js SRI
- Load-confirm modal: focus primary action on show
- Email-confirm modal: focus UTC button on show (safer default)
- Update SRI for js/privatebin.js in Configuration.php

Fixes #1801
2026-05-22 16:33:14 -04:00
Mikhail Romanov
385889e450
Merge pull request #1847 from PrivateBin/copy_button_is_hidden 2026-05-22 23:04:48 +03:00
Ribas160
5a6707db8a
chore: CHANGELOG.md update 2026-05-21 13:02:32 +03:00
Ribas160
848d80a3b2
Merge remote-tracking branch 'upstream/master' into copy_button_is_hidden
# Conflicts:
#	lib/Configuration.php
2026-05-21 13:01:29 +03:00
Ribas160
a9706e9ee9
chore: CHANGELOG.md update 2026-05-21 12:57:08 +03:00
Mikhail Romanov
c7ab23a3bd
Merge pull request #1848 from PrivateBin/bug_in_attachment_functionality
fix: state corruption after removing attachment
2026-05-17 10:33:31 +03:00
Ribas160
abab1e9ec7
chore: update SRI 2026-05-16 12:35:32 +03:00
Mikhail Romanov
b75dfdea42
Format code, kudos @elrido
Co-authored-by: El RIDO <elrido@gmx.net>
2026-05-16 12:31:32 +03:00
Ribas160
23e718e137
Merge remote-tracking branch 'upstream/master' into bug_in_attachment_functionality
# Conflicts:
#	lib/Configuration.php
2026-05-16 12:26:09 +03:00
Ribas160
ca23d88cd9
Merge remote-tracking branch 'upstream/master' into copy_button_is_hidden
# Conflicts:
#	lib/Configuration.php
2026-05-16 12:22:20 +03:00
El RIDO
956dc19afe
Merge pull request #1845 from PrivateBin/npm-updates
update dev dependencies, address ESlint error
2026-05-16 11:11:46 +02:00