1
0
mirror of https://gitlab.com/fdroid/fdroidserver.git synced 2024-09-21 04:10:37 +02:00
Commit Graph

8416 Commits

Author SHA1 Message Date
Hans-Christoph Steiner
ef247bc97a safety: make CVE-2024-5569 just a warning
We get these packages from Debian, zipp is not used in production, and its
only a DoS.
2024-09-04 13:38:44 +00:00
Hans-Christoph Steiner
3a1bbb54aa Merge branch 'lock' into 'master'
scanner: error on dependency files without lock file

Closes #1200

See merge request fdroid/fdroidserver!1504
2024-08-31 13:13:02 +00:00
linsui
9ccb3b5f0d Remove comment of google mave repo to workground a bug of ruff 2024-08-31 02:45:14 +08:00
linsui
8884732114 scanner.py: skip format on hex literal 2024-08-31 01:47:26 +08:00
Hans-Christoph Steiner
65f768e1cf black: fdroidserver/scanner.py now complies 2024-08-30 13:47:20 +02:00
linsui
1d796b734f scanner: error on dependency files without lock file 2024-08-30 13:46:17 +02:00
linsui
c3644464ff scanner.py: format 2024-08-30 13:46:17 +02:00
linsui
3782eddc4d Add ruff rule 2024-08-30 13:46:17 +02:00
Hans-Christoph Steiner
9684eade0d Merge branch 'fix/duplicated-sign' into 'master'
fix(nightly): workaround for broken os.walk and more logging

See merge request fdroid/fdroidserver!1512
2024-08-30 10:22:55 +00:00
WrenIX
d1d1eb4c53
chore(nightly): improve log messages 2024-08-29 09:58:27 +02:00
WrenIX
d9aab228e2
fix(nightly): workaround for broken os.walk and more logging 2024-08-29 00:51:30 +02:00
Hans-Christoph Steiner
5276d9880f Merge branch 'gradle-release-checksums.py' into 'master'
update to gradle v8.10

See merge request fdroid/fdroidserver!1508
2024-08-17 19:12:48 +00:00
fdroid-bot
170b6d4648 gradle v8.10 2024-08-15 15:47:52 +00:00
Hans-Christoph Steiner
84150be5d0 Merge branch 'reset-server' into 'master'
Drop --reset-server

See merge request fdroid/fdroidserver!1507
2024-08-15 15:45:29 +00:00
g0t mi1k
19aef075b4 Drop --reset-server 2024-08-15 15:44:59 +00:00
Jochen Sprickerhof
1ebf32321f Merge branch 'checkupdates_ignore_appname' into 'master'
Support UpdateCheckName in dirs_with_manifest

Closes #1155

See merge request fdroid/fdroidserver!1501
2024-07-30 11:32:59 +00:00
Jochen Sprickerhof
0edc732705
Support UpdateCheckName in dirs_with_manifest
Closes: #1155
2024-07-25 10:45:27 +02:00
Jochen Sprickerhof
c4db47dc47 Merge branch 'scanner-uncrash' into 'master'
🐜 scanner: fix ScannerTool init crash

Closes #1212

See merge request fdroid/fdroidserver!1485
2024-07-25 07:04:23 +00:00
Michael Pöhn
8cf4503a00 🐜 scanner: fix ScannerTool init crash
When scanner.py::ScannerTool is instatiated but the calling code was
started by a call to e.g. `build.py` ScannerTool will crash. This change
makes it so that ScannerTool will intializes with a default value
instead of crashing when triging to access a non existen cli argument.

also see https://gitlab.com/fdroid/fdroidserver/-/issues/1212
2024-07-25 06:54:42 +00:00
Jochen Sprickerhof
7f7c93e801 Merge branch 'appdirs_platformdirs' into 'master'
Replace unmaintained appdirs by platformdirs

See merge request fdroid/fdroidserver!1496
2024-07-25 06:46:55 +00:00
Jochen Sprickerhof
e1aaa3ce93
Replace unmaintained appdirs by platformdirs
8734277956
2024-07-25 08:36:45 +02:00
Jochen Sprickerhof
956c4be7e5 Merge branch 'gradle' into 'master'
Gradle 8.9

See merge request fdroid/fdroidserver!1498
2024-07-18 11:33:56 +00:00
StellarSand
ecd980f366 gradle 8.9 2024-07-18 02:23:45 +00:00
Jochen Sprickerhof
59f353e119 Merge branch 'prune' into 'master'
Prune origin before fetch

See merge request fdroid/fdroidserver!1494
2024-07-10 08:09:24 +00:00
linsui
d1856bea26 Prune origin before fetch 2024-07-10 15:33:51 +08:00
Hans-Christoph Steiner
7a9945ce88 Merge branch 'index-only-follow-up' into 'master'
always use GitLab Pages, not Artifacts, with index-only mode

See merge request fdroid/fdroidserver!1493
2024-07-03 09:30:23 +00:00
Hans-Christoph Steiner
fbb6772e37 always use GitLab Pages, not Artifacts, with index-only mode
If the repo is too large, then it'll hit the GitLab Pages limit.  That is
basically impossible in index-only mode, so it should always use Pages.
2024-07-03 09:18:22 +00:00
Hans-Christoph Steiner
034e83bfca deploy: complete index-only support for awsbucket: 2024-07-03 09:18:22 +00:00
Hans-Christoph Steiner
4a362541bd Merge branch 'gh-releases' into 'master'
🛰️  deploy: github releases

See merge request fdroid/fdroidserver!1471
2024-06-28 13:21:55 +00:00
Michael Pöhn
0fa88c5c20
💇 implement review nits
Implement review nits as requested bei @eighthave in
https://gitlab.com/fdroid/fdroidserver/-/merge_requests/1471
2024-06-27 12:28:54 +02:00
Michael Pöhn
3cf3685280
🐐 appeace bandint security warnings
In this particular case bandit was complaining about potential path
escape exploits on urlopen. However the urls are safe enough, because
all template parameters inserted into the url are from:

 * config.yml - malicious changes to config.yml are possible that's
   already a lot bigger issue than this than redirecting github api
   calls.
 * git tags witch are present in bot the local index-v2.json file (as
   versionName) and the remote github API. (git tags don't allow the
   string '..')
2024-06-27 12:28:41 +02:00
Michael Pöhn
aca98c1355
🏏 incorporate review feedback 2024-06-27 12:28:29 +02:00
Michael Pöhn
a87284cf80
🚥 deploy: tests for github releases deploy functions
Add test cases for github releases function in deploy.py
2024-06-27 12:28:16 +02:00
Michael Pöhn
242490ddc3
🎯 deploy: no releaseChannels on github releases
Don't deploy versions of to GitHub releases where a `releaseChannels`
value is set in index-v2.json. (This usually would mean it's a alpha or
beta version.)
2024-06-27 12:28:04 +02:00
Michael Pöhn
c6598f2835
☄️ deploy: github releases - whatsNew text as note
Use whatsNew text (if available) as release notes text when deploying to
Github releases. This feature will always use 'en-US' locale texts,
since English is the lingua franka on GitHub. Additionally this change
also adds a config option to preprend a static text to those release
notes.
2024-06-27 12:27:51 +02:00
Michael Pöhn
a079f9d85f
♟️ deploy: add global config github_token 2024-06-27 12:27:39 +02:00
Michael Pöhn
7a6fa7f816
🛄 deploy: separate function for release file lookup 2024-06-27 12:27:27 +02:00
Michael Pöhn
44b0af933d
🎡 add unit tests for github.py
add unittests for our github api calls
2024-06-27 12:27:15 +02:00
Michael Pöhn
1b19293ab0
🛰️ deploy: github releases
Implemented basic support for using `fdroid delpoy` to upload APKs from
the repo to GitHub releases.
2024-06-27 12:27:01 +02:00
Hans-Christoph Steiner
aeb8a7a3e5 Merge branch 'fix-subprocess-checkoutput-on-rclone' into 'master'
fix: subprocess.check_output to produce string and not bytes

See merge request fdroid/fdroidserver!1490
2024-06-12 06:31:49 +00:00
pmmayero
8255dec6b8 fix: jinja 2 CVE 2024-06-12 06:30:27 +00:00
pmmayero
3f59d0908f fix: subprocess.check_output to produce string and not bytes 2024-06-12 06:30:27 +00:00
Hans-Christoph Steiner
21e03e62a8 Merge branch 'index-only-deploy-mode' into 'master'
Add index only deployment mode

Closes #1181

See merge request fdroid/fdroidserver!1420
2024-06-11 17:46:00 +00:00
proletarius101
845ed3ef47 Add index only deployment mode 2024-06-11 17:45:59 +00:00
Hans-Christoph Steiner
24b3b0957f Merge branch 'safety-false-positive' into 'master'
safety: ignore false positive

See merge request fdroid/fdroidserver!1492
2024-06-07 10:15:32 +00:00
Hans-Christoph Steiner
6e489b78b3
safety: ignore false positive
jinja2 is not used by fdroidserver, nor any dependencies I could find via
debtree and pipdeptree.
2024-06-07 12:04:12 +02:00
Hans-Christoph Steiner
e7ff344f2b Merge branch 'gradle' into 'master'
gradle 8.8

See merge request fdroid/fdroidserver!1489
2024-06-05 15:00:19 +00:00
linsui
41e90e5ee7 gradle 8.8 2024-06-01 16:24:26 +08:00
Hans-Christoph Steiner
f50e5a806d Merge branch 'switching-s3cmd-for-rclone' into 'master'
Adding rclone as an option to fdroid deploy

Closes #1095

See merge request fdroid/fdroidserver!1095
2024-05-29 14:08:07 +00:00
paul mayero
7aabfbcbf0 Adding rclone as an option to fdroid deploy 2024-05-29 14:08:07 +00:00