chore(deps): update dependency node to v20.17.0 - abandoned

.config/docker_example.yml

@@ -211,3 +211,7 @@ signToActivityPubGet: true
 
 # Upload or download file size limits (bytes)
 #maxFileSize: 262144000
+
+# ローカル宛てのメンション、リプライ、引用ノートの発行元が、ローカルユーザーにフォローされていない場合に投稿を拒否するかどうか
+# default: false
+# misskeyBlockMentionsFromUnfamiliarRemoteUsers: false

.config/example.yml

@@ -109,8 +109,9 @@ db:
   #disableCache: true
 
   # Extra Connection options
-  #extra:
-  #  ssl: true
+  # extra:
+  #   ssl:
+  #     rejectUnauthorized: false
 
 dbReplications: false
 
@@ -297,3 +298,7 @@ signToActivityPubGet: true
 
 # PID File of master process
 #pidFile: /tmp/misskey.pid
+
+# ローカル宛てのメンション、リプライ、引用ノートの発行元が、ローカルユーザーにフォローされていない場合に投稿を拒否するかどうか
+# default: false
+# misskeyBlockMentionsFromUnfamiliarRemoteUsers: false

.devcontainer/Dockerfile

@@ -1 +1 @@
-FROM mcr.microsoft.com/devcontainers/javascript-node:0-18
+FROM mcr.microsoft.com/devcontainers/javascript-node:1-18

.devcontainer/compose.yml

@@ -28,7 +28,7 @@ services:
 
   db:
     restart: unless-stopped
-    image: postgres:15-alpine
+    image: postgres:16-alpine
     networks:
       - internal_network
     environment:

.github/actions/github-app-token/action.yml

@@ -0,0 +1,25 @@
+name: github-app-token
+description: github-app-token
+inputs:
+  app_id:
+    description: app_id
+    required: true
+  private_key:
+    description: private_key
+    required: true
+
+outputs:
+  token:
+    description: token
+    value: ${{ steps.token.outputs.token }}
+
+runs:
+  using: composite
+  steps:
+    - uses: tibdex/[email protected]
+      with:
+        app_id: ${{ inputs.app_id }}
+        private_key: ${{ inputs.private_key }}
+      env:
+        OPENSSL_CONF: /dev/null
+      id: token

.github/workflows/api-misskey-js.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
 
       - run: corepack enable
 

.github/workflows/approve.yml

@@ -0,0 +1,31 @@
+name: Approve
+
+on:
+  pull_request:
+    types: [labeled]
+
+jobs:
+  approve:
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+    if: >-
+      ${{
+        github.event.label.name == 'Bypass Approve' &&
+        github.event.pull_request.user.login == 'na2na-p'
+      }}
+    env:
+      NUMBER: ${{ github.event.number }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Generate github token
+        id: generate_token
+        uses: ./.github/actions/github-app-token
+        with:
+          app_id: ${{ secrets.ZNAZ_APP_ID }}
+          private_key: ${{ secrets.ZNAZ_PRIVATE_KEY }}
+      - name: Approve
+        run: gh pr review ${{ env.NUMBER }} --approve
+        env:
+          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}

.github/workflows/cd-for-misskey-na2na.yml

@@ -0,0 +1,47 @@
+name: CD for Misskey(na2na)
+
+on:
+  push:
+    branches:
+      - misskey-na2na
+  workflow_dispatch:
+
+env:
+  DOCKER_TAG_API_URI: https://registry.hub.docker.com/v2/repositories/na2na/misskey-na2na/tags
+
+jobs:
+  Prepare:
+    name: Prepare
+    runs-on: ubuntu-latest
+    outputs:
+      tag_exists: ${{ steps.check_docker_hub.outputs.tag_exists }}
+      MISSKEY_VERSION: ${{ steps.check_docker_hub.outputs.MISSKEY_VERSION }}
+    steps:
+      - name: Check out the repo
+        uses: actions/[email protected]
+      - name: Get current version
+        id: get_version
+        run: |
+          echo "MISSKEY_VERSION=$(cat package.json | jq -r '.version')" >> $GITHUB_ENV
+      - name: Check Docker Hub
+        id: check_docker_hub
+        run: |
+          DOCKER_HUB_TAGS=$(curl -s https://registry.hub.docker.com/v2/repositories/na2na/misskey-na2na/tags | jq -r '.results[] | .name')
+          if [ $(echo $DOCKER_HUB_TAGS | grep -c $MISSKEY_VERSION) -eq 1 ]; then
+            echo "Tag $MISSKEY_VERSION already exists on Docker Hub."
+          else
+            echo "Tag $MISSKEY_VERSION does not exist on Docker Hub."
+            echo "tag_exists=false" >> $GITHUB_OUTPUT
+            echo "MISSKEY_VERSION=$MISSKEY_VERSION" >> $GITHUB_OUTPUT
+          fi
+
+  Build-and-Push-to-Docker-Hub:
+    needs:
+      - Prepare
+    if: ${{ needs.Prepare.outputs.tag_exists == 'false' }}
+    with:
+      MISSKEY_VERSION: ${{ needs.Prepare.outputs.MISSKEY_VERSION }}
+      IMAGE_REPOSITORY: na2na
+      IMAGE_NAME: misskey-na2na
+    uses: ./.github/workflows/image-push-for-misskey-na2na-release.yml
+    secrets: inherit

.github/workflows/changelog-check.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout head
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
       - name: Setup Node.js
         uses: actions/[email protected]
         with:

.github/workflows/check-misskey-js-autogen.yml

@@ -18,7 +18,7 @@ jobs:
     if: ${{ github.event.pull_request.mergeable == null || github.event.pull_request.mergeable == true }}
     steps:
       - name: checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
         with:
           submodules: true
           ref: refs/pull/${{ github.event.pull_request.number }}/merge
@@ -65,7 +65,7 @@ jobs:
     if: ${{ github.event.pull_request.mergeable == null || github.event.pull_request.mergeable == true }}
     steps:
       - name: checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
         with:
           submodules: true
           ref: refs/pull/${{ github.event.pull_request.number }}/merge

.github/workflows/check-misskey-js-version.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
       - name: Check version
         run: |
           if [ "$(jq -r '.version' package.json)" != "$(jq -r '.version' packages/misskey-js/package.json)" ]; then

.github/workflows/check-spdx-license-id.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
       - name: Check
         run: |
           counter=0

.github/workflows/check_copyright_year.yml

@@ -10,7 +10,7 @@ jobs:
   check_copyright_year:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/[email protected].1
+    - uses: actions/[email protected].7
     - run: |
         if [ "$(grep Copyright COPYING | sed -e 's/.*2014-\([0-9]*\) .*/\1/g')" -ne "$(date +%Y)" ]; then
           echo "Please change copyright year!"

.github/workflows/deploy-test-environment.yml

@@ -28,7 +28,7 @@ jobs:
       wait_time: ${{ steps.get-wait-time.outputs.wait_time }}
     steps:
       - name: Checkout
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
 
       - name: Check allowed users
         id: check-allowed-users

.github/workflows/docker-develop.yml

@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 
 env:
-  REGISTRY_IMAGE: misskey/misskey
+  REGISTRY_IMAGE: na2na/misskey-na2na
 
 jobs:
   # see https://docs.docker.com/build/ci/github-actions/multi-platform/#distribute-build-across-multiple-runners
@@ -20,29 +20,35 @@ jobs:
         platform:
           - linux/amd64
           - linux/arm64
-    if: github.repository == 'misskey-dev/misskey'
+    if: github.repository == 'na2na-p/misskey'
     steps:
       - name: Prepare
         run: |
           platform=${{ matrix.platform }}
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
       - name: Check out the repo
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: na2na/misskey-na2na
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
+          username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Build and push by digest
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.3.0
         with:
           context: .
           push: true
           platforms: ${{ matrix.platform }}
           provenance: false
+          tags: na2na/misskey-na2na:develop
           labels: develop
           cache-from: type=gha
           cache-to: type=gha,mode=max

.github/workflows/docker.yml

@@ -32,7 +32,7 @@ jobs:
           platform=${{ matrix.platform }}
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
       - name: Check out the repo
-        uses: actions/[email protected].1
+        uses: actions/[email protected].7
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Docker meta
@@ -44,11 +44,11 @@ jobs:
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
+          username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Build and Push to Docker Hub
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v6.3.0
         with:
           context: .
           push: true

.github/workflows/dockle.yml

@@ -2,11 +2,7 @@
 name: Dockle
 
 on:
-  push:
-    branches:
-      - master
-      - develop
-  pull_request:
+  workflow_dispatch
 
 jobs:
   dockle:
@@ -15,14 +11,15 @@ jobs:
       DOCKER_CONTENT_TRUST: 1
       DOCKLE_VERSION: 0.4.14
     steps:
-      - uses: actions/[email protected].1
+      - uses: actions/[email protected].7
       - name: Download and install dockle v${{ env.DOCKLE_VERSION }}
         run: |
           curl -L -o dockle.deb "https://github.com/goodwithtech/dockle/releases/download/v${DOCKLE_VERSION}/dockle_${DOCKLE_VERSION}_Linux-64bit.deb"
           sudo dpkg -i dockle.deb
       - run: |
           cp .config/docker_example.env .config/docker.env
           cp ./compose_example.yml ./compose.yml
+          cp ./infra/nginx/.env.example ./infra/nginx/.env
       - run: |
           docker compose up -d web
           docker tag "$(docker compose images web | awk 'OFS=":" {print $4}' | tail -n +2)" misskey-web:latest

.github/workflows/enable-automerge.yml

@@ -0,0 +1,29 @@
+name: Enable auto merge
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+    branches:
+      - main
+      - develop
+      - misskey-na2na
+      - misskey-na2na-deploy
+      - nmnm
+
+jobs:
+  enable-auto-merge:
+    runs-on: ubuntu-latest
+    # if: github.event.pull_request.user.login == 'renovate[bot]' && contains(github.event.pull_request.labels.*.name, 'dependencies')
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Generate github token
+        id: generate_token
+        uses: ./.github/actions/github-app-token
+        with:
+          app_id: ${{ secrets.ZNAZ_APP_ID }}
+          private_key: ${{ secrets.ZNAZ_PRIVATE_KEY }}
+      - uses: alexwilson/enable-github-automerge-action@main
+        with:
+          github-token: ${{ steps.generate_token.outputs.token }}

.github/workflows/get-api-diff.yml

@@ -26,7 +26,7 @@ jobs:
             ref: refs/pull/${{ github.event.number }}/merge
 
     steps:
-    - uses: actions/[email protected].1
+    - uses: actions/[email protected].7
       with:
         ref: ${{ matrix.ref }}
         submodules: true