Commit graph

3466 commits

Author SHA1 Message Date
Kevin Morris
d63615a994
fix(docker): fix ca entrypoint logic and healthcheck
With this commit, it is advised to `rm ./data/root_ca.crt ./data/*.pem`,
as new certificates and a root CA will be generated while utilizing the
step volume.

Closes #367

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-13 23:43:04 -07:00
Kevin Morris
6f7ac33166
Revert "feat(db): add an index for SSHPubKeys.PubKey (#2)"
This reverts commit 6c7e274968.

Once again, this does actually cause issues with foreign keys.
Removing it for now and will revisit this.
2022-08-13 23:28:31 -07:00
Kevin Morris
829a8b4b81
Revert "fix(docker): apply chown each time sshd is started"
This reverts commit 952c24783b.

The issue found was actually:
- If `./aur.git` exists within the aurweb repository locally,
  it also ends up in the destination, stopping the aurweb_git_data
  volume from being mounted properly.
2022-08-13 20:56:43 -07:00
Kevin Morris
952c24783b
fix(docker): apply chown each time sshd is started
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-13 20:13:07 -07:00
Kevin Morris
6c7e274968
feat(db): add an index for SSHPubKeys.PubKey (#2)
Speeds up SSHPubKeys.PubKey searches in a larger database.

Fixed form of the original commit which was reverted,
1a7f6e1fa9

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-13 19:52:50 -07:00
Kevin Morris
5abd5db313
Revert "feat(db): add an index for SSHPubKeys.PubKey"
This reverts commit 1a7f6e1fa9.

This commit broke account creation in some way. We'd still like to
do this, but we need to ensure it does not intrude on other facets.

Extra: We should really work out how this even passed tests; it
should not have.
2022-08-13 19:23:19 -07:00
Kevin Morris
b3d09a4b77
Merge branch 'dummy-data-instructions' 2022-08-13 16:31:47 -07:00
Kevin Morris
1a7f6e1fa9
feat(db): add an index for SSHPubKeys.PubKey
Speeds up SSHPubKeys.PubKey searches in a larger database.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-12 22:26:26 -07:00
Kevin Morris
913ce8a4f0
fix(performance): lazily load expensive modules within aurweb.db
Closes #374

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-12 22:26:26 -07:00
Jelle van der Waa
0e82916b0a fix(python): don't show maintainer link for non logged in users
Show a plain maintainer text for non logged in users like the submitted,
last packager.

Closes #373
2022-08-10 19:04:59 +00:00
Kevin Morris
9648628a2c
update: requests dependency
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-08-09 16:43:27 -07:00
Leonidas Spyropoulos
1d6335363c fix: strip whitespace when parsing package keywords
Remove all extra whitespace when parsing Keywords to ensure we don't add
empty keywords in the DB.

Closes: #332

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2022-08-02 17:06:36 +03:00
Jelle van der Waa
a509e40474 fix(python): use standard dict/list type annotation
Since Python 3.9 list/dict can be used as type hint.
2022-08-02 12:06:58 +00:00
Hugo Osvaldo Barrera
d6fa4ec5a8 Explain how to populate dummy data for TESTING
Signed-off-by: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
2022-07-19 18:55:42 +02:00
Leonidas Spyropoulos
28970ccc91
fix: align text on left
Closes: #368

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2022-07-17 19:41:19 +01:00
Leonidas Spyropoulos
034e47bc28
fix: hide Unflag package from non-maintainers
Closes: #364
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2022-07-17 19:37:00 +01:00
Jelle van der Waa
0b03a6871e
fix(docker): document runtime deps 2022-07-04 21:35:41 +02:00
Jelle van der Waa
4a58e1349c
fix(docker): fix typo scheme -> schema 2022-07-04 21:35:06 +02:00
Jelle van der Waa
edef6cc6ac chore(css): drop old vendor prefixes
All of these vendor prefixes are already supported by all browsers for
quite a while.
2022-06-30 21:57:52 +02:00
Jelle van der Waa
ade624c215 doc(README): update contributing guidelines 2022-06-29 10:57:12 +00:00
Jelle van der Waa
98f55879d3 fix(docker): don't run redis with protected mode
For our development setup we run a redis container without a
username/password. Redis recently set protected mode by default which
disallows this, turn it off as it has no security implication.
2022-06-28 22:14:01 +02:00
Jelle van der Waa
8598ea6f74
fix(gitlab-ci): update coverage reporting in CI
Gitlab 14.10 introduced a coverage_report key which obsoletes the old
way of reporting coverage data.
2022-06-27 21:05:05 +02:00
Kristian Klausen
4ddd1dec9c
upgrade: bump to v6.0.28 2022-05-13 00:41:22 +02:00
Leonidas Spyropoulos
0b54488563
fix(poetry): remove mysql-connector dependency
Reverting a8287921

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2022-05-12 23:26:57 +01:00
Leonidas Spyropoulos
02d114d575
fix: hide email when account's email hidden is set
Fixes: 362
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2022-05-12 22:51:22 +01:00
Kevin Morris
7a525d7693
change: remove poetry-dynamic-versioning
We've not been using this as it is and its now warning us
about strtobool deprecation changes. Removing it for now.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-31 20:59:16 -07:00
Kevin Morris
a553d5d95a
fix: replace distutils.util.strtobool with our own
Reference from
github.com/PostHog/posthog/pull/4631/commits/341c28da0f6d33d6fb12fe443766a2d822ff0097

This fixes a deprecation warning regarding distutil's strtobool.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-31 20:59:05 -07:00
Kevin Morris
cf4295a13e
upgrade: bump to v6.0.27
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-31 17:45:39 -07:00
Kevin Morris
ed41a4fe19
feat: add paging to package depends & required by
This patch does not include a javascript implementating, but
provides a pure HTML/HTTP method of paging through these lists.

Also fixes erroneous limiting. We now use a hardcoded limit of 20
by default.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-30 17:07:40 -07:00
Kevin Morris
d8564e446b
upgrade: bump to v6.0.26
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-30 12:30:21 -07:00
Kevin Morris
afd25c248f
fix: remove HEAD and OPTIONS handling from metrics
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-14 06:26:37 -07:00
Kevin Morris
790ca4194a
fix: coherenace -> coherence
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-14 05:57:06 -07:00
Kevin Morris
7ddce6bb2d
doc: update CONTRIBUTING.md
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-14 05:55:19 -07:00
Kevin Morris
c149afb1f1
Merge remote-tracking branch 'fosskers/colin/prework-reformatting' 2022-03-14 05:14:59 -07:00
Kevin Morris
d7cb04b93d
upgrade: bump to v6.0.25
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 20:35:21 -08:00
Kevin Morris
49c5a3facf
feat: display stats about total & active TUs on proposals
This patch brings in two new features:
- when viewing proposal listings, there is a new Statistics section,
  containing the total and active number of Trusted Users found in the
  database.
- when viewing a proposal directly, the number of active trusted users
  assigned when the proposal was added is now displayed in the details
  section.

Closes #323

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 20:28:09 -08:00
Kevin Morris
0afa07ed3b
upgrade: bump to v6.0.24
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 19:16:02 -08:00
Kevin Morris
a1a88ea872
fix(rpc): suggestions should only suggest based on <keyword>%
Previously, Python code was looking for suggestions based on
`%<keyword>%`. This was inconsistent with PHP's suggestion
implementation and cause more records to be bundled with a suggestion,
along with supplying misleading suggestions.

Closes #343

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 19:00:19 -08:00
Kevin Morris
9791704632
Merge branch 'fix-none-path' 2022-03-08 18:34:38 -08:00
Kevin Morris
2a393f95fa
upgrade: bump to v6.0.23
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 17:59:00 -08:00
Kevin Morris
e00cf5f124
test: use smtplib.SMTP[_SSL] timeout = notifications.smtp-timeout
A new option has been added for configuration of SMTP timeout:
- notifications.smtp-timeout

During tests, we can change this timeout to be small, so we aren't
depending on hardware-based RNG to pass the timeout.

Without a timeout, users can run into a long-running test for no
particular reason.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 17:53:31 -08:00
Kevin Morris
13217be939
fix: don't check suspension for ownership changes
People can change comaintainer ownership to suspended users if they
want to.

Suspended users cannot login, so there is no breach of security
here. It does make sense to allow ownership to be changed, imo.

Closes #339

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-08 17:51:25 -08:00
Kevin Morris
e2a17fef95
upgrade: bump to v6.0.22
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-07 23:57:54 -08:00
Kevin Morris
0f0a2f18ad
Merge branch 'copy-fix' 2022-03-07 23:55:23 -08:00
Kevin Morris
5045f0f3e4
fix: copy.js javascript initialization
Not sure where this works, but it doesn't seem to work on my
browser. Achieved the same by forEaching through the array
returned by querySelectorAll instead.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-07 23:53:57 -08:00
Kevin Morris
f11e8de251
upgrade: bump to v6.0.21
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-07 23:32:14 -08:00
Kevin Morris
6a243e90db
fix: only reject addvote for users with running proposals
This was incorrectly indiscriminately targetting _any_ proposal
for a particular user.

Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-03-07 23:23:49 -08:00
Matt Harrison
b80d914cba
fix click to copy when there is more than one copy link on the page.
Fixes issue reported on the mailing list here: https://lists.archlinux.org/pipermail/aur-general/2022-March/036833.html

Thanks to Henry-Joseph Audéoud for diagnosing the issue
https://lists.archlinux.org/pipermail/aur-general/2022-March/036836.html

Also update the event variable to use the local copy instead of the
deprecated global version
https://stackoverflow.com/questions/58341832/event-is-deprecated-what-should-be-used-instead
2022-03-07 12:37:54 -05:00
Kevin Morris
c7c79a152b
upgrade: bump to v6.0.20
Signed-off-by: Kevin Morris <kevr@0cost.org>
2022-02-25 19:44:10 -08:00
Kevin Morris
95c191fb31
Merge branch 'master' of ssh://gitlab.archlinux.org:222/archlinux/aurweb 2022-02-25 19:31:24 -08:00