github-starred/vikunja
2
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-07-19 08:13:10 -05:00
Code Issues 690 Packages Projects Releases 11 Wiki Activity
13,911 Commits 93 Branches 59 Tags
46dbeb5784a70dcb81d057f2c8de345bbbb03008
Commit Graph
49 Commits
Author SHA1 Message Date
Rhys McNeillandkolaente 699c766049 fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients 2026-04-09 07:31:08 +00:00
kolaenteandkolaente cc22acdf3e chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls 2026-03-23 16:34:22 +00:00
kolaenteandkolaente e5a1c05771 refactor: use shared SSRF-safe HTTP client in webhook code 2026-03-23 16:34:22 +00:00
kolaenteandkolaente 363aa66423 fix: prevent SSRF via OpenID Connect avatar download (GHSA-g9xj-752q-xh63) 2026-03-23 16:34:22 +00:00
kolaenteandkolaente 0266fffad2 feat: add shared SSRF-safe HTTP client utility 2026-03-23 16:34:22 +00:00
kolaente 2053426062 chore(lint): suppress known gosec false positives 
Add config-level exclusions for G117 (secret-named struct fields),
G101 in test files, G702/G704 in magefile, and goheader in plugins.
Add inline #nosec comments for specific G703/G704 false positives
in export, dump/restore, migration, and avatar code.
 2026-03-23 16:23:15 +01:00
kolaente bbe1a2bbd0 refactor(utils): extract ContainsPathTraversal to shared utils package 2026-02-25 13:01:00 +01:00
kolaenteGitHubClaude
 		acbf751ba0 feat(doctor): add user namespace detection and improved storage diagnostics (#2180) 
This PR adds support for detecting and handling Linux user namespaces (commonly used in rootless Docker containers) and improves error diagnostics when file storage validation fails.

Docs PR: https://github.com/go-vikunja/website/pull/289

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2026-02-01 11:57:35 +01:00
kolaenteandGitHub 731b7c3001 fix: avoid mutating global http.DefaultClient in webhook proxy (#2145) 
Fixes a bug where the webhook HTTP client was mutating `http.DefaultClient` (the global singleton), causing ALL HTTP requests in the application to use the webhook proxy. This broke OIDC authentication and other external HTTP calls when webhook proxy was configured.

Fixes #2144
 2026-01-24 13:58:47 +01:00
kolaente c6fe4c1a6e fix(auth): retry up to three times when an auth provider cannot be reached 
Resolves https://github.com/go-vikunja/vikunja/issues/2050
 2026-01-05 21:50:40 +01:00
kolaenteandGitHub 541a38456e chore(deps): update golangci-lint to 2.6.0 (#1737) 2025-10-31 17:28:52 +00:00
Dominik Pschenitschniandkolaente d48d88d442 fix: comment typo and misspellings 2025-07-02 17:46:21 +02:00
Weijie ZhaoandGitHub a214d68a44 feat(auth): sync avatar from OpenID providers (#821) 2025-06-16 15:59:31 +02:00
Dominik PschenitschniandGitHub 296577a875 fix: correct license header references (#882) 
See originals:
- https://www.gnu.org/licenses/agpl-3.0.txt
- https://www.gnu.org/licenses/gpl-3.0.txt
 2025-06-10 12:18:38 +02:00
kolaente d16d13d730 feat(i18n): use plural translations in humanize duration 2025-05-16 21:57:07 +02:00
kolaenteandGitHub 4d8c17f577 feat(i18n): make overdue reminder translations more explicit (#761) 2025-05-13 11:12:56 +00:00
kolaente f7229ba647 fix(i18n): translate all parts of reminder notifications 2025-05-12 16:24:20 +02:00
kolaente 13d4e0e00d chore(utils): remove deprecated MakeRandomString function 2025-03-24 16:52:46 +01:00
kolaente 80d22d5060 fix(colors): truncate longer hex color values 
Resolves https://vikunja.sentry.io/share/issue/6f1e37d4b8b248188e20650234a45cde/
 2024-09-30 20:06:10 +02:00
kolaente 4ff8815fe1 fix(subscriptions): cleanup and simplify fetching subscribers for tasks and projects logic 
Vikunja now uses one recursive CTE and a few optimizations to fetch all subscribers for a task or project. This makes the relevant code easier to maintain and more performant.
 2024-09-04 19:55:17 +02:00
viehliebandkonrad ed4da96ab1 feat: assign users to teams via OIDC claims (#1393) 
This change adds the ability to sync teams via a custom openid claim. Vikunja will automatically create and delete teams as necessary, it will also add and remove users when they log in. These teams are fully managed by Vikunja and cannot be updated by a user.

Co-authored-by: kolaente <k@knt.li>
Reviewed-on: https://kolaente.dev/vikunja/vikunja/pulls/1393
Resolves https://kolaente.dev/vikunja/vikunja/issues/1279
Resolves https://github.com/go-vikunja/vikunja/issues/42
Resolves https://kolaente.dev/vikunja/vikunja/issues/950
Co-authored-by: viehlieb <pf@pragma-shift.net>
Co-committed-by: viehlieb <pf@pragma-shift.net>
 2024-03-02 08:47:10 +00:00
kolaente c05f51b923 chore(deps): update golangci-lint rules 2023-12-19 13:34:31 +01:00
kolaente a1ea77f751 feat: accept hex values which start with a # 2023-10-24 16:12:22 +02:00
kolaente e4c71123ef fix: lint 2023-09-01 08:39:25 +02:00
kolaente c88cbaa973 feat(api tokens): properly hash tokens 2023-09-01 08:36:11 +02:00
kolaente e518fb1191 chore: remove year from copyright headers 
Resolves https://kolaente.dev/vikunja/api/pulls/1483
 2023-09-01 08:32:28 +02:00
Dominik Pschenitschni 5856f21f31 chore: fix comment url 2023-04-11 11:40:06 +02:00
cernstkonradce72
 		f45648a6f7 feat(caldav): Sync Reminders / VALARM (#1415) 
Co-authored-by: ce72 <christoph.ernst72@googlemail.com>
Co-authored-by: kolaente <k@knt.li>
Reviewed-on: https://kolaente.dev/vikunja/api/pulls/1415
Reviewed-by: konrad <k@knt.li>
Co-authored-by: cernst <ce72@noreply.kolaente.de>
Co-committed-by: cernst <ce72@noreply.kolaente.de>
 2023-04-01 11:09:11 +00:00
kolaente 349e6a5905 feat: rename lists to projects 2023-03-13 14:28:06 +01:00
kolaente 9f14466dfa fix: lint 2023-03-05 22:24:29 +01:00
kolaente 8869adfc27 feat: add setting to change overdue tasks reminder email time 2022-06-16 16:20:26 +02:00
kolaente 5cf263a86f feat: upgrade golangci-lint to 1.45.2 2022-03-27 16:55:37 +02:00
konrad 90146aea5b User Data Export and import (#967) 
Co-authored-by: kolaente <k@knt.li>
Reviewed-on: https://kolaente.dev/vikunja/api/pulls/967
Co-authored-by: konrad <k@knt.li>
Co-committed-by: konrad <k@knt.li>
 2021-09-04 19:26:31 +00:00
andreymalandkonrad 50b49ffab6 Add support of Unix socket (#912) 
Reviewed-on: https://kolaente.dev/vikunja/api/pulls/912
Reviewed-by: konrad <konrad@kola-entertainments.de>
Co-authored-by: andreymal <andriyano-31@mail.ru>
Co-committed-by: andreymal <andriyano-31@mail.ru>
 2021-07-08 08:13:01 +00:00
kolaente 7ff7b0d743 Improve duration format of overdue tasks in reminders 2021-04-18 14:25:50 +02:00
konradandkolaente d07b284ee3 Add reminders for overdue tasks (#832) 
Co-authored-by: kolaente <k@knt.li>
Reviewed-on: https://kolaente.dev/vikunja/api/pulls/832
Co-authored-by: konrad <konrad@kola-entertainments.de>
Co-committed-by: konrad <konrad@kola-entertainments.de>
 2021-04-11 15:08:43 +00:00
kolaente c4a71016b8 Update copyright year 2021-02-02 20:19:13 +01:00
kolaente 9baf6d39bd Change license to AGPLv3 2020-12-23 16:41:52 +01:00
konradandkolaente 699d3d6060 Add Golangci Lint (#676) 
Increase golangci timeout

Fix installing golangci-lint in ci

Remove mage targets replaced by golangci

Run golint in ci

Add goheader linter

Enable & fix more linters

Fix lint issues

Add mage target to automagically fix issues found by golangci

golangci-lint run --fix

Add golangci config

Add golangci mage target

Co-authored-by: kolaente <k@knt.li>
Reviewed-on: https://kolaente.dev/vikunja/api/pulls/676
Co-Authored-By: konrad <konrad@kola-entertainments.de>
Co-Committed-By: konrad <konrad@kola-entertainments.de>
 2020-10-11 20:10:03 +00:00
kolaente b8d7c97eb7 Add gosec static analysis 2020-04-13 22:30:09 +02:00
kolaente 1f99238019 Update copyright header 2020-02-07 17:27:45 +01:00
konrad a0c5e4e985 Update copyright year (#118) 2020-01-09 17:33:22 +00:00
shilchandkonrad e890001ee1 Consistent copyright text in file headers (#112) 2019-12-04 19:39:56 +00:00
shilchandkonrad 38653b49c7 Add tests for md5 generation (#111) 2019-12-04 19:19:38 +00:00
konradandGitea f638fae4fd Add the md5-hashed user email to user objects for use with gravatar (#78) 2019-05-31 07:24:59 +00:00
konradandGitea 777d63dff1 More unit tests (#34) 2018-12-16 13:21:32 +00:00
konradandGitea 3f44e3b83e Change License to GPLv3 (#26) 2018-11-26 20:17:33 +00:00
konradandGitea d03fca801b CalDAV support (#15) 2018-11-03 15:05:45 +00:00
konradandGitea 301a4eedda New structure (#7) 2018-10-31 12:42:38 +00:00