[00:29:24]
<Yunohost Git/Infra notifications> App emailpoubelle stays at level 4 in job [#28627](https://ci-apps.yunohost.org/ci/job/28627)
[00:36:31]
<Yunohost Git/Infra notifications> [nextcloud_ynh] kay0u [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#discussion_r2866744408) on pull request #866 Testing: It will works, but I dont see the point of using a port here, socket should just [works fine](https://github.com/nextcl...
[00:40:05]
<Yunohost Git/Infra notifications> [nextcloud_ynh] kay0u approved [pull request #866](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#pullrequestreview-3869660707) Testing
[00:43:29]
<Yunohost Git/Infra notifications> [nextcloud_ynh] kay0u edited review [pull request #866](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#pullrequestreview-3869660707): Testing
[00:43:59]
<Yunohost Git/Infra notifications> [nextcloud_ynh] kay0u [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#discussion_r2866714773) on pull request #866 Testing: Im not sure, whats the value of domain and path here? Why did you remove these lines?
[00:44:02]
<Yunohost Git/Infra notifications> [nextcloud_ynh] DeMiro5001 [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/859#issuecomment-3975867206) on [issue #859](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/859) Add compatibility check mail report for NC apps as a weekly cron: So the upgrade should update all NC apps and disable non compatible apps before proceeding to the actual upgrade. But di...
[00:44:04]
<Yunohost Git/Infra notifications> [nextcloud_ynh] rodinux pushed to v31: keep a branch for oldstable version 31 ([fdeec4c8](https://github.com/YunoHost-Apps/nextcloud_ynh/commit/fdeec4c8715512d9a12169643a542b97ad25e1ac))
[00:44:08]
<Yunohost Git/Infra notifications> App davis rises from level 7 to 8 in job [#28632](https://ci-apps.yunohost.org/ci/job/28632) !
[00:56:51]
<Yunohost Git/Infra notifications> [nextcloud_ynh] rodinux opened [pull request #869](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/869): V31
[01:02:06]
<Yunohost Git/Infra notifications> Autoupdater just ran, here are the results:
- 57 pending update PRs
- 9 failed apps updates: adminer, arn_messager, gogs, homebox, passed, piwigo, planka, pocket-id, seaweedfs
See the full log here: https://paste.yunohost.org/raw/jehesapeyi
Autoupdate dashboard: https://apps.yunohost.org/dash?filter=autoupdate
[01:37:19]
<Yunohost Git/Infra notifications> App calcom stays broken (level 0) in job [#28634](https://ci-apps.yunohost.org/ci/job/28634)
[01:46:57]
<Yunohost Git/Infra notifications> App mitra goes down from level 8 to 2 in job [#28631](https://ci-apps.yunohost.org/ci/job/28631)
[02:11:22]
<Yunohost Git/Infra notifications> App indico goes down from level 8 to 6 in job [#28638](https://ci-apps.yunohost.org/ci/job/28638)
[03:56:58]
<Yunohost Git/Infra notifications> oleole39 transferred repository 4get_ynh: Self-hosted UI serving as proxy to major existing search engines https://github.com/YunoHost-Apps/4get_ynh
[08:06:38]
<Yunohost Git/Infra notifications> App ollama failed all tests in job [#28644](https://ci-apps.yunohost.org/ci/job/28644) !
[10:25:03]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar pushed to testing: Update change_url ([63855202](https://github.com/YunoHost-Apps/nextcloud_ynh/commit/63855202b078d7114fcda7413a0a43618d21464c))
[10:25:06]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar dismissed review [pull request #866](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#pullrequestreview-3869660707): Testing
[10:25:09]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#discussion_r2867302694) on pull request #866 Testing: Oh yes, I forgot to change domain to new_domain and path_url to new_path -> 6385520. The idea was to maintai...
[10:25:13]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/866#discussion_r2867314794) on pull request #866 Testing: I couldnt find the file /var/run/nextcloud/notify-push.sock on my server so I applied the [notify_push.service](https...
[10:28:01]
<Yunohost Git/Infra notifications> [freshrss_ynh] AUSF [commented](https://github.com/YunoHost-Apps/freshrss_ynh/issues/226#issuecomment-3976784976) on [issue #226](https://github.com/YunoHost-Apps/freshrss_ynh/issues/226) 1.28.1~ynh1 Error 403 - Forbidden: I got exactly the same issue...
[10:28:06]
<Yunohost Git/Infra notifications> [apps] Thovi98 edited [pull request #3366](https://github.com/YunoHost/apps/pull/3366): Update app levels according to CI results
[10:28:08]
<Yunohost Git/Infra notifications> [apps] Thovi98 edited [pull request #3366](https://github.com/YunoHost/apps/pull/3366): Update app levels according to CI results
[10:28:12]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar [commented](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/859#issuecomment-3976848728) on [issue #859](https://github.com/YunoHost-Apps/nextcloud_ynh/pull/859) Add compatibility check mail report for NC apps as a weekly cron: Ideally, the update script should: - check that all apps are up to date. - update outdated apps. - Check that the update...
[12:22:19]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed to update_app_levels: tracim, digiscreen and yacy back to their levels ([c62660f9](https://github.com/YunoHost/apps/commit/c62660f9e600e74b35afef81862dbb3de0dc4a01))
[12:23:50]
<Yunohost Git/Infra notifications> [apps] Thovi98 merged [pull request #3366](https://github.com/YunoHost/apps/pull/3366): Update app levels according to CI results
[12:24:00]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed to main: Update app levels according to CI results (#3366) * Update app levels according to CI results * tracim, digiscreen and... ([87616cb1](https://github.com/YunoHost/apps/commit/87616cb10d7490271167798360f081cb4e5a4cdc))
[12:24:10]
<Yunohost Git/Infra notifications> [apps] Thovi98 deleted branch update_app_levels
[12:29:19]
<Yunohost Git/Infra notifications> [apps] Thovi98 [commented](https://github.com/YunoHost/apps/pull/3296#issuecomment-3977101659) on [issue #3296](https://github.com/YunoHost/apps/pull/3296) Add ClicAMAP to wishlist: Installation docs only shows docker, but it’s okay I guess?
[12:29:30]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed 90 commits to add-to-wishlist-clicamap ([fc655f685d10...c15327de1932](https://github.com/YunoHost/apps/compare/fc655f685d10...c15327de1932))
[12:29:38]
<Yunohost Git/Infra notifications> [apps] Auto-merge has been enabled by Thovi98 on [pull request #3296](https://github.com/YunoHost/apps/pull/3296): Add ClicAMAP to wishlist
[12:29:46]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed to main: Add ClicAMAP to wishlist (#3296) Co-authored-by: Thomas <51749973+Thovi98@users.noreply.github.com> ([82e9931a](https://github.com/YunoHost/apps/commit/82e9931ad54220cf3a069133000b81498a05b8c5))
[12:29:51]
<Yunohost Git/Infra notifications> [apps] Thovi98 deleted branch add-to-wishlist-clicamap
[12:30:06]
<Yunohost Git/Infra notifications> [apps] Thovi98 merged [pull request #3296](https://github.com/YunoHost/apps/pull/3296): Add ClicAMAP to wishlist
[12:33:00]
<Yunohost Git/Infra notifications> [apps] Thovi98 [commented](https://github.com/YunoHost/apps/pull/3347#issuecomment-3977105726) on [issue #3347](https://github.com/YunoHost/apps/pull/3347) Add supabase to wishlist: > Only the Docker install is documented. :( Yeah, and it doesn’t seem easy to install without it… I’m not strictly agai...
[12:34:02]
<Yunohost Git/Infra notifications> [apps] Thovi98 [commented](https://github.com/YunoHost/apps/pull/3323#issuecomment-3977107157) on [issue #3323](https://github.com/YunoHost/apps/pull/3323) Add iocaine to wishlist: It seems to be an alternative to Anubis? But don’t know how we could package those packages on apps side…
[12:35:45]
<Yunohost Git/Infra notifications> [apps] Thovi98 [commented](https://github.com/YunoHost/apps/pull/3362#issuecomment-3977109133) on [issue #3362](https://github.com/YunoHost/apps/pull/3362) Add crabgrass to wishlist: Installation notes: https://0xacab.org/liberate/crabgrass/-/blob/ruby/2.7/doc/INSTALL.md
[12:35:53]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed 9 commits to add-to-wishlist-crabgrass ([490bb3e0acbb...123e55e713fc](https://github.com/YunoHost/apps/compare/490bb3e0acbb...123e55e713fc))
[12:35:54]
<Yunohost Git/Infra notifications> [apps] Auto-merge has been enabled by Thovi98 on [pull request #3362](https://github.com/YunoHost/apps/pull/3362): Add crabgrass to wishlist
[12:36:18]
<Yunohost Git/Infra notifications> [apps] Thovi98 merged [pull request #3362](https://github.com/YunoHost/apps/pull/3362): Add crabgrass to wishlist
[12:36:18]
<Yunohost Git/Infra notifications> [apps] Thovi98 deleted branch add-to-wishlist-crabgrass
[12:36:39]
<Yunohost Git/Infra notifications> [apps] Thovi98 pushed to main: Add crabgrass to wishlist (#3362) Co-authored-by: Thomas <51749973+Thovi98@users.noreply.github.com> ([c8eb18d9](https://github.com/YunoHost/apps/commit/c8eb18d9614a06060571338fc14a955c1c00ad0a))
[12:49:10]
<m606> hello, CI gives warns for about potential path traversal issue in this Nginx config: https://github.com/YunoHost-Apps/4get_ynh/blob/main/conf/config.php
```
✘ The NGINX configuration (especially location [^/]\.php(/|$)) appears vulnerable to path traversal issues as explained in
https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/
To fix it, look at the first lines of the NGINX conf of the example app :
https://github.com/YunoHost/example_ynh/blob/main/conf/nginx.conf
```
I can't get how different it is from the `example_ynh`'s Nginx config, would that be a false positive? https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test\_configurations.py#L345
[12:49:22]
<m606> hello, CI gives warns about potential path traversal issue in this Nginx config: https://github.com/YunoHost-Apps/4get_ynh/blob/main/conf/config.php
```
✘ The NGINX configuration (especially location [^/]\.php(/|$)) appears vulnerable to path traversal issues as explained in
https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/
To fix it, look at the first lines of the NGINX conf of the example app :
https://github.com/YunoHost/example_ynh/blob/main/conf/nginx.conf
```
I can't get how different it is from the `example_ynh`'s Nginx config, would that be a false positive? https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test\_configurations.py#L345
[12:49:40]
<m606> hello, CI is sending a warning about potential path traversal issue in this Nginx config: https://github.com/YunoHost-Apps/4get_ynh/blob/main/conf/config.php
```
✘ The NGINX configuration (especially location [^/]\.php(/|$)) appears vulnerable to path traversal issues as explained in
https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/
To fix it, look at the first lines of the NGINX conf of the example app :
https://github.com/YunoHost/example_ynh/blob/main/conf/nginx.conf
```
I can't get how different it is from the `example_ynh`'s Nginx config, would that be a false positive? https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test\_configurations.py#L345
[12:50:34]
<m606> hello, CI is sending a warning about potential path traversal issue in this Nginx config: https://github.com/YunoHost-Apps/4get_ynh/blob/main/conf/nginx.conf
✘ The NGINX configuration (especially location [^/]\.php(/|$)) appears vulnerable to path traversal issues as explained in
https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/
To fix it, look at the first lines of the NGINX conf of the example app :
https://github.com/YunoHost/example_ynh/blob/main/conf/nginx.conf
```
I can't get how different it is from the `example_ynh`'s Nginx config, would that be a false positive? https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test\_configurations.py#L345
[12:50:45]
<m606> hello, CI is sending a warning about potential path traversal issue in this Nginx config: https://github.com/YunoHost-Apps/4get_ynh/blob/main/conf/nginx.conf
```
✘ The NGINX configuration (especially location [^/]\.php(/|$)) appears vulnerable to path traversal issues as explained in
https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/
To fix it, look at the first lines of the NGINX conf of the example app :
https://github.com/YunoHost/example_ynh/blob/main/conf/nginx.conf
```
I can't get how different it is from the `example_ynh`'s Nginx config, would that be a false positive? https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test\_configurations.py#L345
[12:53:05]
<m606> twice the same alias maybe?
[13:01:42]
<Thomas> If I'm not mistaken you should add a / after ) at https://github.com/YunoHost-Apps/4get_ynh/blob/53399263e4cef2c8cafd63322ca13e6113da1ae2/conf/nginx.conf#L8
[13:08:55]
<m606> ok thanks I can try.
But there is no such thing here: https://github.com/YunoHost/example_ynh/blob/535b97f954ae311c16dc6db1bb97d983de6616e1/conf/nginx.conf#L14 (however it is a sublocation, maybe that's different)
[13:21:41]
<Yunohost Git/Infra notifications> App immich failed all tests in job [#28649](https://ci-apps.yunohost.org/ci/job/28649) !
[15:33:46]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed 7 commits to fpu-cleanup ([684619c8ba56...b9f22c0890a7](https://github.com/YunoHost/appstore/compare/684619c8ba56...b9f22c0890a7))
[15:33:54]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to fpu-cleanup: todo commit ([0140344c](https://github.com/YunoHost/appstore/commit/0140344c84189f3a8acd06c8128bcbdd5d9be68e))
[16:02:00]
<m606> so the warning disappears, but it breaks the app - URL sends raw php instead of html
[16:03:59]
<m606> also maybe the CI doesn't manage very well the regexes regarding path traversal tests: https://github.com/YunoHost/package_linter/blob/d9e8e8e7a5f06863a4abf437ca7bd185292e7a0c/tests/test_configurations.py#L351
[17:25:36]
<m606> I came back to the working point (with the CI warning) and tested the following URL: `https://subdomain.domain.tld/web?s=/var/www/4get/index.php`. It serves the result it is supposed to, so no path traversal issue I assume.
However it the CI keeps failing because of this: https://ci-apps-dev.yunohost.org/ci/job/18590
[17:28:55]
<m606> I came back to the working point (with the CI warning) and tested the following URL: `https://subdomain.domain.tld/web?s=/var/www/4get/index.php`. It serves the result it is supposed to, so no path traversal issue I assume.
However the CI keeps failing because of this: https://ci-apps-dev.yunohost.org/ci/job/18590
[17:45:30]
<Yunohost Git/Infra notifications> [package_linter] oleole39 opened [issue #184](https://github.com/YunoHost/package_linter/issues/184): Linter complains about unconfirmed path traversal issue
[18:34:54]
<Yunohost Git/Infra notifications> Job [#28650](https://ci-apps.yunohost.org/ci/job/28650) for grist failed miserably :(
[18:35:00]
<miro5001> why don't you use the nginx example provided upstream https://git.lolcat.ca/lolcat/4get/src/branch/master/docs/nginx.md
[18:35:33]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to fpu-datadir: Move all data to a DATA_DIR for consistency ([21c8b140](https://github.com/YunoHost/appstore/commit/21c8b140c2c58a712d3158d31a032fdd32b1ff34))
[18:35:35]
<Yunohost Git/Infra notifications> [nextcloud_ynh] ericgaspar pushed to postgresql_reboot: Update change_url ([e54d6c65](https://github.com/YunoHost-Apps/nextcloud_ynh/commit/e54d6c652d12a96557fbc759f11ec0c8edc47f85))
[19:01:22]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to fpu-datadir: Move all data to a DATA_DIR for consistency ([64718dae](https://github.com/YunoHost/appstore/commit/64718daeb33eff9007562959c616faeffe302349))
[19:10:15]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to fpu-datadir: Remove legacy .cache, .stars directory ([d8f424e0](https://github.com/YunoHost/appstore/commit/d8f424e0c66ee875a41550f17fe9700753fbc8f3))
[19:10:29]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: Move all data to a DATA_DIR for consistency ([64718dae](https://github.com/YunoHost/appstore/commit/64718daeb33eff9007562959c616faeffe302349))
[19:11:03]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: Remove legacy .cache, .stars directory ([d8f424e0](https://github.com/YunoHost/appstore/commit/d8f424e0c66ee875a41550f17fe9700753fbc8f3))
[19:11:17]
<Yunohost Git/Infra notifications> [appstore] github-actions[bot] opened [pull request #26](https://github.com/YunoHost/appstore/pull/26): Format Python code with Black
[19:11:29]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: Update gitignore after moving data to data_dir ([b6c46a75](https://github.com/YunoHost/appstore/commit/b6c46a75fc71702b50dabbe88265709a81d1d1c8))
[19:11:44]
<Yunohost Git/Infra notifications> [appstore] Salamandar deleted branch fpu-datadir
[19:12:02]
<Aleks (he/him/il/lui)> Not sure to understand why the php block is not inside the other block, and why the location is not prefixed with `__PATH__`
[19:12:39]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: Move tools to tools/, make them cwd-agnostic ([83b103ac](https://github.com/YunoHost/appstore/commit/83b103ac6630262e24994f17fef694f59db64e2e))
[19:12:42]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: fetch_level_history: remove variable name clashing ([345be7bb](https://github.com/YunoHost/appstore/commit/345be7bbe10b7aa89d877067eb4e4abdcafb04b9))
[19:43:24]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed 6 commits to main ([345be7bbe10b...35253f8709ff](https://github.com/YunoHost/appstore/compare/345be7bbe10b...35253f8709ff))
[19:47:33]
<Yunohost Git/Infra notifications> [appstore] Salamandar pushed to main: Ooops, debian 12 has python 3.11 ([2bdc98e5](https://github.com/YunoHost/appstore/commit/2bdc98e584ee5b90b1c3f472d12368f8c1e5ca11))
[20:58:42]
<Yunohost Git/Infra notifications> [freshrss_ynh] mrtpcet [commented](https://github.com/YunoHost-Apps/freshrss_ynh/issues/226#issuecomment-3977816812) on [issue #226](https://github.com/YunoHost-Apps/freshrss_ynh/issues/226) 1.28.1~ynh1 Error 403 - Forbidden: Same too
[23:25:06]
<Yunohost Git/Infra notifications> Autoupdater just ran, here are the results:
- 44 pending update PRs
- 9 new apps PRs: bludit, dagu, fiduswriter, filebrowser, gotify, grr, jackett, paperless-ngx, piefed
- 10 failed apps updates: adminer, arn_messager, gogs, homebox, passed, piped, piwigo, planka, pocket-id, seaweedfs
See the full log here: https://paste.yunohost.org/raw/yokimelose
Autoupdate dashboard: https://apps.yunohost.org/dash?filter=autoupdate