{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":268817515,"defaultBranch":"master","name":"tobira","ownerLogin":"elan-ev","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-06-02T14:04:21.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1064602?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1714384290.0","currentOid":""},"activityList":{"items":[{"before":"383f4a22b736318209746717108970c7317eb3cd","after":"068682429e4c52fd41a36281ed74c64520f4742e","ref":"refs/heads/master","pushedAt":"2024-05-16T10:03:27.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Add migration for custom ACL actions (#1164)\n\nCustom actions for events are now stored in DB with a new column. This\r\nis only the backend side of things, so they won't show up in the ACL UI\r\nyet.\r\n\r\nPart of https://github.com/elan-ev/tobira/issues/1004","shortMessageHtmlLink":"Add migration for custom ACL actions (#1164)"}},{"before":"b819726a411526ef7d74725fdedd74985cab9226","after":"383f4a22b736318209746717108970c7317eb3cd","ref":"refs/heads/master","pushedAt":"2024-05-15T15:57:51.000Z","pushType":"pr_merge","commitsCount":8,"pusher":{"login":"owi92","name":"Ole Wieners","path":"/owi92","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94838646?s=80&v=4"},"commit":{"message":"Make font configurable, improve asset handling and use basic frontend bundle splitting (#1167)\n\nFixes #287 \r\nFixes #362\r\nFirst steps towards #257 \r\n\r\n
\r\nHistorical background pretty irrelevant for users of\r\nTobira\r\n\r\nThis was on my radar for years already, and we always talked about\r\nmaking fonts configurable and splitting the frontend. Both were blocked\r\nby us using `reinda` as a library to manage assets, which had some\r\nlimitations (mainly: not being able to include wildcards). I tried\r\ntackling this a couple of time, but never succeeded. This time I wanted\r\nto finally make it work, since we needed configurable fonts.\r\n\r\nAnd boy, it was a lot more complex than I thought. This seems very\r\nsimple on the surface but the complexity comes from the two different\r\nmodes: in release mode we want to embed most assets into the executable,\r\nbut in debug mode we want to load everything dynamically for faster\r\ndevelopment speed. Neither of these things are really up for debate.\r\nCombine that with the need to have hashes in file names, which means\r\nthat references to assets need to be fixed, and you have a very complex\r\nsystem. I'm convinced this would have been at most marginally easier\r\nwhen doing that all inside Tobira, instead of having that logic live in\r\nan external library. So yeah, as far as I see this was just a hard task.\r\nI am probably only writing this here so that I don't feel so bad for\r\ntaking such a long time :sob:\r\n\r\nAnyway, I am happy with the result, both the library and how it works in\r\nTobira. It also gets rid of this terrible frontend config mess we had\r\nbefore. Now it's mostly just one `json!{}` call and easy to read.\r\n\r\n
\r\n\r\nThe user/admin-facing change in this PR is configurable font. Admins can\r\nspecify a font-family, custom CSS (with `@font-face` declarations) and a\r\nlist of font files in the config. The font files are served as static\r\nfiles, the CSS and font-family is included. This should be plenty\r\nflexible! The default Open Sans font is still always included, I don't\r\nthink that hurts.\r\n\r\nSee the changes in `config.toml` for more information.\r\n\r\n\r\n![image](https://github.com/elan-ev/tobira/assets/7419664/8b33f5ab-1831-4ea0-b0b7-8da917797275)\r\n\r\n---\r\n\r\nThe other change, which is only indirectly user-facing is that I started\r\ncode splitting. This was just to verify it's possible with the new\r\n`reinda`, it's absolutely not perfect yet. I just split the biggest\r\ndependency in our bundle (Paella) into its own file. This reduces the JS\r\nsize required to render the main site considerably (3.0MB -> 1.3MB).\r\n\r\nSince the new reinda also uses `brotli` instead of `flate2`, the Tobira\r\nbinary size might have shrunk a bit. EDIT: nope, not considerably:\r\n34.8MB -> 34.6MB. For the record: size of embedded assets is 2.4MiB in\r\ntotal (13.9MiB when uncompressed).\r\n\r\nFinally: `reinda` is not yet released. I wanted to wait for this PR to\r\nget reviewed before doing that. Once I get a thumbs up, I will release\r\nreinda, adjust `Cargo.toml` and then this PR can be merged.\r\n\r\n(PR can be reviewed commit by commit)","shortMessageHtmlLink":"Make font configurable, improve asset handling and use basic frontend…"}},{"before":"04702f9eb8deaa5d6f46b23ac30933197f7d0a15","after":"b819726a411526ef7d74725fdedd74985cab9226","ref":"refs/heads/master","pushedAt":"2024-05-15T10:43:13.000Z","pushType":"pr_merge","commitsCount":9,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Reenable block editing UI tests (#1147)\n\nThese were previously skipped because they were unreliable and failed\r\noften. With the changes from #1093, all tests got a lot more stable, but\r\nthe old block tests needed adjustments.","shortMessageHtmlLink":"Reenable block editing UI tests (#1147)"}},{"before":"10d42d48a711874c0c97adb8f79f3c52d1244162","after":"43df299ff2cf550ff0f1451b4134ddad3e4a5f7e","ref":"refs/heads/db-dumps","pushedAt":"2024-04-29T10:29:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Add DB dump for v2.9","shortMessageHtmlLink":"Add DB dump for v2.9"}},{"before":"07251d27295d6e6e906ba95744b416d929faff6d","after":"04702f9eb8deaa5d6f46b23ac30933197f7d0a15","ref":"refs/heads/master","pushedAt":"2024-04-29T09:51:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump version to 2.9","shortMessageHtmlLink":"Bump version to 2.9"}},{"before":"366f9a97e64ed1b2537ccdb2ba23ed20559f80f4","after":"07251d27295d6e6e906ba95744b416d929faff6d","ref":"refs/heads/master","pushedAt":"2024-04-29T09:17:37.000Z","pushType":"pr_merge","commitsCount":6,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Update Paella plugins (#1162)\n\nUpdates:\r\n- `paella-basic-plugins` 1.44.4 -> 1.44.7\r\n- `paella-skins` 1.32.4 -> 1.48.0\r\n- `paella-zoom-plugin` 1.41.1 -> 1.41.3\r\n\r\nAlso sets the currently set language in Tobira for Paella, and provides\r\nenglish as a fallback default language in Paella's configuration.","shortMessageHtmlLink":"Update Paella plugins (#1162)"}},{"before":"91fc1e4e5877048c6832e91d850bb1636b1344b4","after":"366f9a97e64ed1b2537ccdb2ba23ed20559f80f4","ref":"refs/heads/master","pushedAt":"2024-04-23T08:19:53.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Adjust sync code for series metadata (#1160)\n\nThis repurposes the code from the events migration, since series\r\nmetadata is using the same format. With this, extended metadata and date\r\nof creation is now harvested and stored in db series entries.\r\n\r\nNote: This is only the backend part. We don't display any metadata for\r\nseries yet (so technically `changelog:user` is incorrect, but it isn't\r\nreally a `dev` change either).","shortMessageHtmlLink":"Adjust sync code for series metadata (#1160)"}},{"before":"ae9c662cd8f3faf49b3447adfa9b872ca83911a0","after":null,"ref":"refs/heads/dependabot/cargo/backend/rustls-0.22.4","pushedAt":"2024-04-22T12:28:02.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"6d0e6623a83528df8e07686bfadbb41f93721bfb","after":"91fc1e4e5877048c6832e91d850bb1636b1344b4","ref":"refs/heads/master","pushedAt":"2024-04-22T12:27:54.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump rustls from 0.22.2 to 0.22.4 in /backend (#1161)\n\nBumps [rustls](https://github.com/rustls/rustls) from 0.22.2 to 0.22.4.\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.22.2&new-version=0.22.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump rustls from 0.22.2 to 0.22.4 in /backend (#1161)"}},{"before":null,"after":"ae9c662cd8f3faf49b3447adfa9b872ca83911a0","ref":"refs/heads/dependabot/cargo/backend/rustls-0.22.4","pushedAt":"2024-04-19T19:48:24.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump rustls from 0.22.2 to 0.22.4 in /backend\n\nBumps [rustls](https://github.com/rustls/rustls) from 0.22.2 to 0.22.4.\n- [Release notes](https://github.com/rustls/rustls/releases)\n- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/rustls/rustls/compare/v/0.22.2...v/0.22.4)\n\n---\nupdated-dependencies:\n- dependency-name: rustls\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump rustls from 0.22.2 to 0.22.4 in /backend"}},{"before":"9c51d5ee040758015cd1f639a269b194983722d1","after":null,"ref":"refs/heads/dependabot/cargo/backend/h2-0.4.4","pushedAt":"2024-04-08T12:02:32.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"b6fdcff248f13b9767b2e10da5f91b4765357134","after":"6d0e6623a83528df8e07686bfadbb41f93721bfb","ref":"refs/heads/master","pushedAt":"2024-04-08T12:02:24.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump h2 from 0.4.2 to 0.4.4 in /backend (#1156)\n\nBumps [h2](https://github.com/hyperium/h2) from 0.4.2 to 0.4.4.\r\n
\r\nRelease notes\r\n

Sourced from h2's\r\nreleases.

\r\n
\r\n

v0.4.4

\r\n

Fixes

\r\n
    \r\n
  • Limit number of CONTINUATION frames for misbehaving\r\nconnections.
    • \r\n
\r\n

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/\r\nfor more info.

\r\n

v0.4.3

\r\n

What's Changed

\r\n
    \r\n
  • Fix flow control limits to not apply until receiving SETTINGS\r\nack.
    • \r\n
  • Fix not returning an error if IO ended without\r\nclose_notify.
    • \r\n
  • Improve performance of decoding many headers.
    • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​smndtrl made\r\ntheir first contribution in hyperium/h2#751
    • \r\n
\r\n

Full Changelog: https://github.com/hyperium/h2/compare/v0.4.2...v0.4.3

\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from h2's\r\nchangelog.

\r\n
\r\n

0.4.4 (April 3, 2024)

\r\n
    \r\n
  • Limit number of CONTINUATION frames for misbehaving\r\nconnections.
    • \r\n
\r\n

0.4.3 (March 15, 2024)

\r\n
    \r\n
  • Fix flow control limits to not apply until receiving SETTINGS\r\nack.
    • \r\n
  • Fix not returning an error if IO ended without\r\nclose_notify.
    • \r\n
  • Improve performance of decoding many headers.
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=h2&package-manager=cargo&previous-version=0.4.2&new-version=0.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump h2 from 0.4.2 to 0.4.4 in /backend (#1156)"}},{"before":"2a15182a56978d39506d66019e4933978d41922b","after":null,"ref":"refs/heads/dependabot/cargo/util/loadtest/h2-0.3.26","pushedAt":"2024-04-08T11:48:29.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"794024b0ce6d2430d0e544a2f7cce3cb91bca212","after":"b6fdcff248f13b9767b2e10da5f91b4765357134","ref":"refs/heads/master","pushedAt":"2024-04-08T11:48:22.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump h2 from 0.3.24 to 0.3.26 in /util/loadtest (#1158)\n\nBumps [h2](https://github.com/hyperium/h2) from 0.3.24 to 0.3.26.\r\n
\r\nRelease notes\r\n

Sourced from h2's\r\nreleases.

\r\n
\r\n

v0.3.26

\r\n

What's Changed

\r\n
    \r\n
  • Limit number of CONTINUATION frames for misbehaving\r\nconnections.
    • \r\n
\r\n

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/\r\nfor more info.

\r\n

v0.3.25

\r\n

What's Changed

\r\n
    \r\n
  • perf: optimize header list size calculations by @​Noah-Kennedy\r\nin hyperium/h2#750
    • \r\n
\r\n

Full Changelog: https://github.com/hyperium/h2/compare/v0.3.24...v0.3.25

\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from h2's\r\nchangelog.

\r\n
\r\n

0.3.26 (April 3, 2024)

\r\n
    \r\n
  • Limit number of CONTINUATION frames for misbehaving\r\nconnections.
    • \r\n
\r\n

0.3.25 (March 15, 2024)

\r\n
    \r\n
  • Improve performance decoding many headers.
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=h2&package-manager=cargo&previous-version=0.3.24&new-version=0.3.26)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump h2 from 0.3.24 to 0.3.26 in /util/loadtest (#1158)"}},{"before":"dff24924e41ab14fe46c3933b454e435bfe006c5","after":null,"ref":"refs/heads/dependabot/cargo/backend/whoami-1.5.1","pushedAt":"2024-04-08T11:47:47.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"b12ad3f34fb574dc14f2009f51bba8bb19a2fbb7","after":"794024b0ce6d2430d0e544a2f7cce3cb91bca212","ref":"refs/heads/master","pushedAt":"2024-04-08T11:47:40.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump whoami from 1.4.1 to 1.5.1 in /backend (#1157)\n\nBumps [whoami](https://github.com/ardaku/whoami) from 1.4.1 to 1.5.1.\r\n
\r\nChangelog\r\n

Sourced from whoami's\r\nchangelog.

\r\n
\r\n

[1.5.1] - 2024-03-09

\r\n

Fixed

\r\n
    \r\n
  • Broken link in docs
    • \r\n
\r\n

[1.5.0] - 2024-03-03

\r\n

Added

\r\n
    \r\n
  • WASI support
    • \r\n
  • Redox support
    • \r\n
  • Fallible functions\r\n
      \r\n
    • whoami::fallible::devicename()
      • \r\n
    • whoami::fallible::devicename_os()
      • \r\n
    • whoami::fallible::distro()
      • \r\n
    • whoami::fallible::hostname() - notably doesn't\r\nnormalize to lowercase
      • \r\n
    • whoami::fallible::realname()
      • \r\n
    • whoami::fallible::realname_os()
      • \r\n
    • whoami::fallible::username()
      • \r\n
    • whoami::fallible::username_os()
      • \r\n
    \r\n
    • \r\n
  • whoami::Language
    • \r\n
  • whoami::Country
    • \r\n
  • whoami::langs()
    • \r\n
  • whoami::fallible::account()
    • \r\n
  • whoami::fallible::account_os()
    • \r\n
  • whoami::DesktopEnv::is_gtk()
    • \r\n
  • whoami::DesktopEnv::is_kde()
    • \r\n
\r\n

Removed

\r\n
    \r\n
  • Generated device names that infer casing based on the hostname when\r\nthe\r\ndevice name is not available - now returns the hostname unchanged
    • \r\n
  • Partial (potentially unsound) support for Android, iOS, watchOS,\r\ntvOS,\r\nFuchsia, Haiku, Solaris, and a few others. These targets now use the\r\n"fake"\r\nimplementation.
    • \r\n
\r\n

Changed

\r\n
    \r\n
  • Deprecated whoami::distro_os()
    • \r\n
  • Deprecated whoami::hostname()
    • \r\n
  • Deprecated whoami::hostname_os()
    • \r\n
  • Deprecated whoami::lang()
    • \r\n
  • illumos and Redox are no longer untested targets
    • \r\n
  • Documented that illumos and Redox have a higher MSRV (Rust 1.65)\r\nthan other\r\ntargets
    • \r\n
  • Display implementation on Platform::Illumos now\r\ndisplays in lowercase:\r\nillumos
    • \r\n
\r\n

Fixed

\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=whoami&package-manager=cargo&previous-version=1.4.1&new-version=1.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump whoami from 1.4.1 to 1.5.1 in /backend (#1157)"}},{"before":null,"after":"2a15182a56978d39506d66019e4933978d41922b","ref":"refs/heads/dependabot/cargo/util/loadtest/h2-0.3.26","pushedAt":"2024-04-05T16:17:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump h2 from 0.3.24 to 0.3.26 in /util/loadtest\n\nBumps [h2](https://github.com/hyperium/h2) from 0.3.24 to 0.3.26.\n- [Release notes](https://github.com/hyperium/h2/releases)\n- [Changelog](https://github.com/hyperium/h2/blob/v0.3.26/CHANGELOG.md)\n- [Commits](https://github.com/hyperium/h2/compare/v0.3.24...v0.3.26)\n\n---\nupdated-dependencies:\n- dependency-name: h2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump h2 from 0.3.24 to 0.3.26 in /util/loadtest"}},{"before":null,"after":"dff24924e41ab14fe46c3933b454e435bfe006c5","ref":"refs/heads/dependabot/cargo/backend/whoami-1.5.1","pushedAt":"2024-04-05T15:45:53.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump whoami from 1.4.1 to 1.5.1 in /backend\n\nBumps [whoami](https://github.com/ardaku/whoami) from 1.4.1 to 1.5.1.\n- [Changelog](https://github.com/ardaku/whoami/blob/v1/CHANGELOG.md)\n- [Commits](https://github.com/ardaku/whoami/compare/v1.4.1...v1.5.1)\n\n---\nupdated-dependencies:\n- dependency-name: whoami\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump whoami from 1.4.1 to 1.5.1 in /backend"}},{"before":null,"after":"9c51d5ee040758015cd1f639a269b194983722d1","ref":"refs/heads/dependabot/cargo/backend/h2-0.4.4","pushedAt":"2024-04-05T15:08:54.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump h2 from 0.4.2 to 0.4.4 in /backend\n\nBumps [h2](https://github.com/hyperium/h2) from 0.4.2 to 0.4.4.\n- [Release notes](https://github.com/hyperium/h2/releases)\n- [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/hyperium/h2/compare/v0.4.2...v0.4.4)\n\n---\nupdated-dependencies:\n- dependency-name: h2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump h2 from 0.4.2 to 0.4.4 in /backend"}},{"before":"47c8f65df88e3d27aa31c9921f6cf57c5d672407","after":"b12ad3f34fb574dc14f2009f51bba8bb19a2fbb7","ref":"refs/heads/master","pushedAt":"2024-04-04T09:44:10.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Adjust spacing of forwards and backwards button text (#1150)\n\nSince these are basically mirrored (not completely because the number 10\r\nis obv not), the x-offset of the number does not necessarily need to be\r\nthe same. It's kinda hard to tell, so I tried around a bit with\r\ndifferent values and also increased the y-offset of both by one pixel. I\r\nmight have ended up with an improved balancing. Though that is still\r\nsomewhat subjective of course, so feedback is still welcome.\r\n\r\nCloses #1086","shortMessageHtmlLink":"Adjust spacing of forwards and backwards button text (#1150)"}},{"before":"ae926af8d48008bdb57fc7491c8bd8e7aa30fad5","after":"47c8f65df88e3d27aa31c9921f6cf57c5d672407","ref":"refs/heads/master","pushedAt":"2024-04-03T11:10:24.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Add \"danger zone\" UI tests (#1151)\n\nThis adds adjusted tests for user realm and regular realm \"danger zone\"\r\nfunctions, i.e. renaming the realm path (only applicable to regular\r\nrealms) and deleting realms.","shortMessageHtmlLink":"Add \"danger zone\" UI tests (#1151)"}},{"before":"bc570ba79de41e609666ae1facdb7c4db974904c","after":"ae926af8d48008bdb57fc7491c8bd8e7aa30fad5","ref":"refs/heads/master","pushedAt":"2024-04-02T09:07:01.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"owi92","name":"Ole Wieners","path":"/owi92","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94838646?s=80&v=4"},"commit":{"message":"Add quality selector for progressive download videos (#1143)\n\nAfter much discussion, some relevant changes have been merged into\r\n`paella-core` and the other part is published as [this\r\npackage](https://github.com/polimediaupv/paella-mp4multiquality-plugin).\r\nSo we can use this modified video format plugin to get back mp4 quality\r\nselection.\r\n\r\nI have tested it a bunch and so far everything works fine. But please\r\neveryone: test this a bunch on different devices and different browsers\r\nand report any problems or weird behaviors here. Ideally test a number\r\nof different videos (single & dual stream). Note: The \"The best open cat\r\nvideos\" do not have different qualities, so you can ignore those.\r\n\r\n| [Test here](https://pr1143.tobira.opencast.org) |\r\n| --- |\r\n\r\nThere are two known shortcomings still:\r\n\r\n- When changing quality, both videos are loaded sequentially, which is\r\nslower in most cases than loading them at the same time. To fix this,\r\nchanges in `paella-core` are necessary. These might be added in the\r\nfuture.\r\n- There is no spinner or any UI at all indicating to the user that the\r\nnew quality video is being loaded. The playback stops and potentially\r\nthe videos are going black and then showing a frame again, but this is\r\nnot ideal from a UX perspective. However, having the quality changing\r\nfeature at all was the priority, and this might be added in the future\r\nstill.\r\n\r\nThis pull request also changes the logic for selecting the initial\r\nquality. Before, the maximum quality was always chosen, which is really\r\nnot ideal most of the time. You can find some additional information [in\r\nthis commit\r\ndescription](https://github.com/polimediaupv/paella-mp4multiquality-plugin/commit/69b505d54d1b70f824503c6027d9a1f57fd2f602).\r\nPlease also test this change and let me know if you encounter a\r\nsituation where the initial quality was a bad choice. Also note: the new\r\nlogic still errs on the side of \"high quality\". I'm sure for many\r\ninstitutions it might be useful to lower the initial quality even more.","shortMessageHtmlLink":"Add quality selector for progressive download videos (#1143)"}},{"before":"39295a903ee5c21c2e91e514440a5c7795e77d56","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/docs/express-4.19.2","pushedAt":"2024-03-26T13:25:52.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"df7cbfc5fcff0b044ce5b3fb02dbb87af855b699","after":"bc570ba79de41e609666ae1facdb7c4db974904c","ref":"refs/heads/master","pushedAt":"2024-03-26T13:25:44.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.19.2 in /docs (#1153)\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to\r\n4.19.2.\r\n
\r\nRelease notes\r\n

Sourced from express's\r\nreleases.

\r\n
\r\n

4.19.2

\r\n

What's Changed

\r\n
    \r\n
  • Improved\r\nfix for open redirect allow list bypass
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

\r\n

4.19.1

\r\n

What's Changed

\r\n
    \r\n
  • Fix ci after location patch by @​wesleytodd in expressjs/express#5552
    • \r\n
  • fixed un-edited version in history.md for 4.19.0 by @​wesleytodd in expressjs/express#5556
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

\r\n

4.19.0

\r\n

What's Changed

\r\n
    \r\n
  • fix typo in release date by @​UlisesGascon\r\nin expressjs/express#5527
    • \r\n
  • docs: nominating @​wesleytodd to be\r\nproject captian by @​wesleytodd in expressjs/express#5511
    • \r\n
  • docs: loosen TC activity rules by @​wesleytodd in expressjs/express#5510
    • \r\n
  • Add note on how to update docs for new release by @​crandmck in expressjs/express#5541
    • \r\n
  • Prevent\r\nopen redirect allow list bypass due to encodeurl
    • \r\n
  • Release 4.19.0 by @​wesleytodd in expressjs/express#5551
    • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​crandmck\r\nmade their first contribution in expressjs/express#5541
    • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

\r\n

4.18.3

\r\n

Main Changes

\r\n
    \r\n
  • Fix routing requests without method
    • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
      • \r\n
    • deps: content-type@~1.0.5
      • \r\n
    • deps: raw-body@2.5.2
      • \r\n
    \r\n
    • \r\n
\r\n

Other Changes

\r\n
    \r\n
  • Use https: protocol instead of deprecated git: protocol by @​vcsjones in expressjs/express#5032
    • \r\n
  • build: Node.js@16.18 and Node.js@18.12 by @​abenhamdine in\r\nexpressjs/express#5034
    • \r\n
  • ci: update actions/checkout to v3 by @​armujahid in expressjs/express#5027
    • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5124
    • \r\n
  • Remove unused originalIndex from acceptParams by @​raksbisht in expressjs/express#5119
    • \r\n
  • Fixed typos by @​raksbisht in expressjs/express#5117
    • \r\n
  • examples: remove unused params by @​raksbisht in expressjs/express#5113
    • \r\n
  • fix: parameter str is not described in JSDoc by @​raksbisht in expressjs/express#5130
    • \r\n
  • fix: typos in History.md by @​raksbisht in expressjs/express#5131
    • \r\n
  • build : add Node.js@19.7 by @​abenhamdine in\r\nexpressjs/express#5028
    • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5137
    • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from express's\r\nchangelog.

\r\n
\r\n

4.19.2 / 2024-03-25

\r\n
    \r\n
  • Improved fix for open redirect allow list bypass
    • \r\n
\r\n

4.19.1 / 2024-03-20

\r\n
    \r\n
  • Allow passing non-strings to res.location with new encoding handling\r\nchecks
    • \r\n
\r\n

4.19.0 / 2024-03-20

\r\n
    \r\n
  • Prevent open redirect allow list bypass due to encodeurl
    • \r\n
  • deps: cookie@0.6.0
    • \r\n
\r\n

4.18.3 / 2024-02-29

\r\n
    \r\n
  • Fix routing requests without method
    • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
      • \r\n
    • deps: content-type@~1.0.5
      • \r\n
    • deps: raw-body@2.5.2
      • \r\n
    \r\n
    • \r\n
  • deps: cookie@0.6.0\r\n
      \r\n
    • Add partitioned option
      • \r\n
    \r\n
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 04bc627\r\n4.19.2
    • \r\n
  • da4d763\r\nImproved fix for open redirect allow list bypass
    • \r\n
  • 4f0f6cc\r\n4.19.1
    • \r\n
  • a003cfa\r\nAllow passing non-strings to res.location with new encoding handling\r\nchecks f...
    • \r\n
  • a1fa90f\r\nfixed un-edited version in history.md for 4.19.0
    • \r\n
  • 11f2b1d\r\nbuild: fix build due to inconsistent supertest behavior in older\r\nversions
    • \r\n
  • 084e365\r\n4.19.0
    • \r\n
  • 0867302\r\nPrevent open redirect allow list bypass due to encodeurl
    • \r\n
  • 567c9c6\r\nAdd note on how to update docs for new release (#5541)
    • \r\n
  • 69a4cf2\r\ndeps: cookie@0.6.0
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\nMaintainer changes\r\n

This version was pushed to npm by wesleytodd, a new releaser\r\nfor express since your current version.

\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.18.2&new-version=4.19.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.19.2 in /docs (#1153)"}},{"before":null,"after":"39295a903ee5c21c2e91e514440a5c7795e77d56","ref":"refs/heads/dependabot/npm_and_yarn/docs/express-4.19.2","pushedAt":"2024-03-26T13:18:25.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump express from 4.18.2 to 4.19.2 in /docs\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)\n\n---\nupdated-dependencies:\n- dependency-name: express\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump express from 4.18.2 to 4.19.2 in /docs"}},{"before":"8ced0b3fb60495f1c974efc78bf4ea49ce4cca5c","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/docs/webpack-dev-middleware-5.3.4","pushedAt":"2024-03-26T13:17:45.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"7895f81b7fb032b0276667da1deaadba171721b3","after":"df7cbfc5fcff0b044ce5b3fb02dbb87af855b699","ref":"refs/heads/master","pushedAt":"2024-03-26T13:17:39.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs (#1152)\n\nBumps\r\n[webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware)\r\nfrom 5.3.3 to 5.3.4.\r\n
\r\nRelease notes\r\n

Sourced from webpack-dev-middleware's\r\nreleases.

\r\n
\r\n

v5.3.4

\r\n

5.3.4\r\n(2024-03-20)

\r\n

Bug Fixes

\r\n
    \r\n
  • security: do not allow to read files above (#1779)\r\n(189c4ac)
    • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from webpack-dev-middleware's\r\nchangelog.

\r\n
\r\n

5.3.4\r\n(2024-03-20)

\r\n

Bug Fixes

\r\n
    \r\n
  • security: do not allow to read files above (#1779)\r\n(189c4ac)
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 86071ea\r\nchore(release): 5.3.4
    • \r\n
  • 189c4ac\r\nfix(security): do not allow to read files above (#1779)
    • \r\n
  • See full diff in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-middleware&package-manager=npm_and_yarn&previous-version=5.3.3&new-version=5.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/elan-ev/tobira/network/alerts).\r\n\r\n
","shortMessageHtmlLink":"Bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs (#1152)"}},{"before":null,"after":"8ced0b3fb60495f1c974efc78bf4ea49ce4cca5c","ref":"refs/heads/dependabot/npm_and_yarn/docs/webpack-dev-middleware-5.3.4","pushedAt":"2024-03-23T09:33:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs\n\nBumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4.\n- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4)\n\n---\nupdated-dependencies:\n- dependency-name: webpack-dev-middleware\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs"}},{"before":"0c2d1c2992f874fd8ed6af6b97444a434a402fc5","after":"7895f81b7fb032b0276667da1deaadba171721b3","ref":"refs/heads/master","pushedAt":"2024-03-19T16:35:07.000Z","pushType":"pr_merge","commitsCount":5,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Add series to search results (#1144)\n\nThis adds series to search results.\r\n\r\nCouple of notes:\r\n- I don't really like the icon chosen for this, but the one I would\r\nprefer is not yet included in the icon package used in Tobira.\r\n- The box shadow for the thumbnails is also debatable. I left it in so\r\nyou can play around with it and see if you can find a nicer looking one.\r\n- The series entries look samewhat empty when there is no description,\r\nbut we discussed adding some metadata like a (potentially shortened)\r\nlist of creators of events in that series and maybe also/alternatively\r\ndirect links to the first few events, but this is tbd in another PR.\r\n\r\nCloses #360","shortMessageHtmlLink":"Add series to search results (#1144)"}},{"before":"2b21b77e148a63ca6465bc05139b4359207c6f23","after":"0c2d1c2992f874fd8ed6af6b97444a434a402fc5","ref":"refs/heads/master","pushedAt":"2024-03-18T16:27:13.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"LukasKalbertodt","name":"Lukas Kalbertodt","path":"/LukasKalbertodt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7419664?s=80&v=4"},"commit":{"message":"Adjust paella progress bar color (#1149)\n\nPaella uses `opacity: 0.8` on the progress bar, making that color\r\nslightly different than the volume indicator.\r\nThis overrides the opacity rule so the colors are exactly the same.\r\n\r\nCloses #1039","shortMessageHtmlLink":"Adjust paella progress bar color (#1149)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAES3ZYWwA","startCursor":null,"endCursor":null}},"title":"Activity · elan-ev/tobira"}