merge upstream - #1
Open
dcharbonnier wants to merge 310 commits into
Open
Conversation
dcharbonnier
marked this pull request as ready for review
June 9, 2021 06:43
* enable node 18 testing * update Changes
Bumps [haraka-plugin-asn](https://github.com/haraka/haraka-plugin-asn) from 1.0.9 to 2.0.0. - [Release notes](https://github.com/haraka/haraka-plugin-asn/releases) - [Changelog](https://github.com/haraka/haraka-plugin-asn/blob/master/Changes.md) - [Commits](haraka/haraka-plugin-asn@v1.0.9...v2.0.0) --- updated-dependencies: - dependency-name: haraka-plugin-asn dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* bump redis-using plugin versions * rename ci-test -> ci.yml * ci: split window 2019 to run after win-latest * pi-limit 1.0.4 -> 1.0.6 * dep: switch nyc -> c8 * dep(pi-watch): v 1 -> 2 * ci: rename coveralls -> coverage.yml * ci(codeql): added * chore(conn): safeguard against prototype pollution
* bump plugin versions * chore(ci): merge tests into one file * chore(dep): replace included aliases with npm package * chore(dep): bump pi-watch to 2.0.1 * chore(cov): config updates* tls: redis.get is now async * more redis promise updates * fix: dns_list_base: redis.hset -> hSet
* Fix for boundary marker corrupt issue Fix for #3057 * Transaction Test updated Transaction test updated based on comments from eslint and also adjusted the user generation iteration lower so that it honors 1000 header line limit and at the same time exceed 64k bytes on headers to expose the issue.
* move ./mail{body|header} to haraka-email-message
* move ./messagestream to haraka-message-stream
* ci: use shared windows workflow
Co-authored-by: Matt Simerson <matt@tnpi.net>
* test: node 18 + openssl 3.0.5 yield diff err
Bumps [redis](https://github.com/redis/node-redis) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@4.1.1...redis@4.2.0) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Matt Simerson <matt@tnpi.net>
- ci(codecov): tell it not to comment in PRs - ci(dependabot): change freq week -> monthly - dep(nopt): bump ver 5 -> 6.0.0
* uribl: load .ini file to plugin.cfg - uribl: only register hooks when URIBL zones are configured - uribl: timeout DNS 1 second before plugin - test: add uribl.do_lookups - uribl: move timers to hook functions, so that timers will fire before plugin times out - move URIBL plugin to npm package - add deprecated note
it's easier to read the logs with the hostname instead of just the IP address.
Bumps [redis](https://github.com/redis/node-redis) from 4.2.0 to 4.3.0. - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@4.2.0...redis@4.3.0) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
authored-by: SH <sh@analogic.cz>
Bumps [generic-pool](https://github.com/coopernurse/node-pool) from 3.8.2 to 3.9.0. - [Release notes](https://github.com/coopernurse/node-pool/releases) - [Changelog](https://github.com/coopernurse/node-pool/blob/master/CHANGELOG.md) - [Commits](coopernurse/node-pool@v3.8.2...v3.9.0) --- updated-dependencies: - dependency-name: generic-pool dependency-type: direct:production update-type: version-update:semver-minor ...
…nreachable servers (#3104) The generic-pool module is built on the assumption that acquire always succeeds. It is implemented as a busy loop of calling create() non-stop and there is no way to make acquire() return an error. As a mitigation error, we make acquire() fail after 10 seconds. Note that it will still busy loop for 10 seconds. We have to fix upstream module or replace generic-pool to really fix the problem. see #3100
…gs. (#3107) Co-authored-by: Gene Hightower <gene@digilicious.com>
Co-authored-by: Gene Hightower <gene@digilicious.com>
- smtp_client: disable pool code - smtp_client: update generic-pool getPoolSize() -> pool.size - smtp_client: handle a new generic-pool timeout error that caused Haraka to crash - smtp_client: add missing `$` char in front of interpolated string - config/plugins: update name of uribl plugin - outbound/hmail: improve log message - package.json: remove iconv (moved to haraka-email-message)
* Postmaster or abuse address needs '<' '>' delimiters, too. * add test for bare postmaster Co-authored-by: Gene Hightower <gene@digilicious.com> Co-authored-by: Matt Simerson <matt@tnpi.net>
Bumps [redis](https://github.com/redis/node-redis) from 4.3.1 to 4.5.1. - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@4.3.1...redis@4.5.1) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- fix(outbound): release queue slot when qfile unreadable #3561 - fix(message-stream): add `unpipe` for pipe cleanup after errors - fix(outbound): guard against error emit after listeners removed #3554 - fix(outbound): yield before delivery attempts #3552 - test(outbound,conn,endpoint,server,tls_socket): added tests #3552 - deps(various): updated to latest - dep(ocsp): replaced fork with local (more maintained) fork #3550 - dep(npid, sockaddr): removed #3550 - dep(daemon): removed, unmaintained #3550 - doc(SECURITY): added threat model #3557 - doc(SECURITY): added #3550 - doc(Connection): added 15 undocumented methods - doc: add a fresh coat of paint to README and docs/* - add missing properties and functions - sync with codebase, fix inaccuracies, and add examples - improve formatting and readability - package.json: remove optional lesser used plugins #3550 - avg, elasticsearch, esets, p0f, recip-routes, watch
- feat(smtp_forward,smtp_proxy): honor `tls.ini` `[main]` and plugin `[tls]` section for backend STARTTLS (matches docs). Behavior change: installs that set `[main] rejectUnauthorized=true` in `tls.ini` will now see it applied to the forward/proxy paths. Untouched installs match the previous behavior. - fix(auth_proxy): try opportunistic STARTTLS w/o a key/cert, #matchTheDocs - feat(tls_socket): new `load_plugin_tls_options(plugin_tls_cfg)` helper that merges a plugin's `[tls]` section over `tls.ini` `[main]` for client STARTTLS - refactor: `outbound/tls.js#load_config()` delegates to `load_plugin_tls_options()` - change: update DSN.addr_bad_dest_system(...) to DSN.addr_null_mx(...) - fix(tls): buffer discard on STARTTLS (RFC 3207 §4) - fix(server): run the graceful restart/shutdown work queue - fix(xclient): parse DESTPORT to int so the 587/465 auth check applies - fix(smtp_client): - no_tls_hosts works correctly by referencing the correct path - unsupported AUTH no longer throws out of the event loop - fix(smtputf8): all code paths use it, no more smtp_utf8 - fix(conn): reject control chars in HELO name (RFC 5321 §4.1.1.1) - fix: sanitize AUTH usernames before storing - fix: strip CR/LF from all strings passed into `auth_results()` - fix(smtp_client,auth_proxy): redact AUTH credentials in protocol logs - fix(prevent_credential_leaks): properly handle usernames w/o an `@` - fix(queue/qmail-queue): size envelope dynamically; UTF-8 safe - deps(some): bump patch versions to latest - change: replace forEach with es6 style for...of #3569 - tests: add a few #3568 - doc(Plugins): add publish year to each plugin #3567 - deps(all): switch from ^ to ~ version ranges #3565
- dep: replace address-rfc282(1,2) with @haraka/email-address
Adopt makeConnection()/makePlugin() options, typed callXxx hooks, and assertResult() across the plugin and client tests
add log lines for address validation errors so that they can be properly debugged.
- conn: use utils.sanitize instead of local regex
update connection.local and connection.remote after successful proxy header parse
- `npm pkg fix`, strips the ./ from the bin entries - remove baudehlo.com URL, it doesn't resolve - add a few tests for plugin/toobusy
- fix: coverage script uses --include to omit reporting from deps
- related to #3564 - fixes haraka/haraka-plugin-mail_from.is_resolvable#13 - contrib/bsd-rc.d: add PATH so `git` can be found in `getVersion()`
feat: expose fetch to plugins. fixes #3599
- add AGENTS.md - ci: update configs
- feat(conn): add main.postel option #3592 - change: log when MFROM or RCPT fail to parse #3581 - feat: proxy support for smtps (465) #3577 - refactor(auth_proxy): use net_utils.endpoint #3584 - refactor: move endpoint, HostPool, LineSocket to net-utils #3583 - refactor: move rfc1869, FsyncWriteStream, TimerQueue to haraka-utils #3585 - refactor: move cram_md5_response to haraka-utils #3585 - dep(many): bump to latest #3587 - dep(eslint): update @haraka/eslint-config to v3, #3586 - dep(haraka-utils): ~2.1.1 for position-aware MAIL/RCPT address errors - build: add qlty config and README badge #3588 - test: update to test-fixtures 1.7.0 helpers #3589
- lint update - remove tooling from NPM release
- security: bump dep versions to latest - lint(outbound/hmail): == -> === - lint(plugins.js): var -> const - chore(server): add node: prefix - npm ignore, remove tests and clutter (#3602) - remove tooling from NPM release
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #
Changes proposed in this pull request:
Checklist: