Recent Commits to Shaarli:master

Merge pull request #2169 from shaarli/dependabot/npm_and_yarn/js-yaml-4.1.1

build(deps): bump js-yaml from 4.1.0 to 4.1.1

build(deps): bump js-yaml from 4.1.0 to 4.1.1

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #2168 from shaarli/dependabot/npm_and_yarn/glob-10.5.0

build(deps-dev): bump glob from 10.4.5 to 10.5.0

build(deps-dev): bump glob from 10.4.5 to 10.5.0

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

doc: udpate badges and release date for v0.15.0

doc: update AUTHORS

Merge pull request #2159 from nodiscc/doc-changelog-0.15.0

doc: update changelog for v0.15.0

doc: update changelog for v0.15.0

Merge pull request #2157 from nodiscc/fix-GHSA-7w7w-pw4j-265h

fix reflected XSS via searchtags parameter

Merge pull request #2158 from nodiscc/fix-GHSA-vwcv-9hj3-8982

fix insufficient filename sanitization in bookmarks import form

fix insufficient filename sanitization in bookmarks import form
- fixes https://github.com/shaarli/Shaarli/security/advisories/GHSA-vwcv-9hj3-8982

fix reflected XSS via searchtags parameter
- https://github.com/shaarli/Shaarli/security/advisories/GHSA-7w7w-pw4j-265h

Merge pull request #2149 from nodiscc/security-md

doc: add SECURITY.md

doc: add SECURITY.md
- fixes https://github.com/shaarli/Shaarli/issues/2148

Merge pull request #2138 from 7Ds7/refactor-video-plugin

Refactor video plugin

Merge pull request #2144 from nodiscc/ci-pin-runner-version

github actions: pin all base images to ubuntu-24.04

github actions: update/pin all base images to ubuntu-24.04
- https://github.com/shaarli/Shaarli/issues/2137

Merge pull request #2143 from nodiscc/fix-ci-php-update

github actions: workaround for ondrej/php apt repository update error

github actions: workaround for ondrej/php apt repository update error
- E: Repository 'https://ppa.launchpadcontent.net/ondrej/php/ubuntu noble InRelease' changed its 'Label' value from '***** The main PPA for supported PHP versions with many PECL extensions *****' to 'PPA for PHP'

refactor video plugin

Merge pull request #2109 from thican/keep_private_links_number_private

Keep private links number … private.

Merge pull request #2140 from 7Ds7/update-packages

update packages and phpunit

remove trailing white spaces

update packages and phpunit

Keeps private links number … private.

Signed-off-by: Thibaud CANALE <thican@thican.net>

Merge pull request #2123 from nodiscc/alpine-3.19.5

docker: update base alpine image to v3.19.7

docker: udpate base alpine image to v3.19.7
- https://www.alpinelinux.org/posts/Alpine-3.18.10-3.19.5-3.20.4-released.html
- https://www.alpinelinux.org/posts/Alpine-3.18.11-3.19.6-3.20.5-3.21.2-released.html
- https://www.alpinelinux.org/posts/Alpine-3.18.12-3.19.7-3.20.6-3.21.3-released.html

Merge pull request #2135 from kcaran/github_ci24.04

tests: fix CI and translation tests

CI: re-enable currently supported PHP versions in the test matrix

- https://www.php.net/supported-versions.php

Updated Github CI to Ubuntu 24.04

Merge pull request #2125 from emss-github/master

Fix "PHP message: TypeError: get_headers(): Argument #2 ($associative) must be of type bool, int given"

Merge pull request #2132 from kcaran/community2

Community: Added colorscheme and youtube plugins, and shirley-template

Added colorscheme and youtube plugins, and shirley-template

Merge branch 'shaarli:master' into master

Merge pull request #2128 from taivlam/patch-1

Fix typo in Usage.md

Fix typo in Usage.md

Fix "PHP message: TypeError: get_headers(): Argument #2 ($associative) must be of type bool, int given"

Merge pull request #2118 from shaarli/dependabot/npm_and_yarn/nanoid-3.3.8

build(deps): bump nanoid from 3.3.7 to 3.3.8

build(deps): bump nanoid from 3.3.7 to 3.3.8

Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.7 to 3.3.8.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.7...3.3.8)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #2117 from bttrx/patch-1

doc: fix authors and IDs for two Changelog entries

doc: fix authors and IDs for two Changelog entries

doc: update release date for v0.14.0

doc: update badges to point to v0.14.0 release

Merge pull request #2108 from nodiscc/doc-changelog-v0.14.0

doc: update CHANGELOG for v0.14.0

doc: update AUTHORS

doc: fix/clarify release procedure

doc: update CHANGELOG for v0.14.0
- ref. https://github.com/shaarli/Shaarli/issues/2105

Merge pull request #2111 from kalvn/master

docs: add plugin shaarli2bluesky

Merge pull request #2112 from shaarli/dependabot/npm_and_yarn/cross-spawn-7.0.6

build(deps): bump cross-spawn from 7.0.3 to 7.0.6

build(deps): bump cross-spawn from 7.0.3 to 7.0.6

Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

docs: add plugin shaarli2bluesky

Merge pull request #2103 from thican/CSP-QRCode

Use event listener for QR-Code display in CSP compliance purpose

Use event listener for QR-Code display in CSP compliance purpose

Signed-off-by: Thibaud CANALE <thican@thican.net>

Merge pull request #2107 from nodiscc/doc-changelog-fix-v0.13.0-link

doc: changelog: fix link to v0.13.0 release

doc: changelog: fix link to v0.13.0 release

Merge pull request #2106 from nodiscc/doc-changelog-style

doc: changelog: minor style tweaks/standardization/spacing

doc: changelog: minor style tweaks/standardization/spacing

dependencies: update npm dependencies (npm audit fix)
- micromatch: fixes https://avd.aquasec.com/nvd/2024/cve-2024-4067/
- webpack: fixes https://avd.aquasec.com/nvd/cve-2024-43788
- rm yarn.lock && yarnpkg install
- fixes https://github.com/shaarli/Shaarli/issues/2052

Merge pull request #2086 from kcaran/tags_unique

2084: Ensure tags are unique when renaming

Ensure tags are unique when renaming