airsonic-custom

Commit Graph

Author	SHA1	Message	Date
jvoisin	4e2b435abf	Bump cglib version Signed-off-by: jvoisin <julien.voisin@dustri.org>	6 years ago
Andrew DeMaria	faedfd8a62	Bump version to 10.3.0-SNAPSHOT Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	6 years ago
Andrew DeMaria	a16b89e0ac	Bump to version 10.2.0-RELEASE Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	6 years ago
Frank de Lange	8127b4f7fa	Fix #860 (external database performance) by using connection pooling … (#864 ) * Fix #860 (external database performance) by using connection pooling (using commons-dbcp2)	6 years ago
randomnicode	9d33ec255b	Declare used and remove unused dependencies	6 years ago
randomnicode	86e58cea3a	Update dependencies in airsonic-main	6 years ago
randomnicode	51f17675d5	Update plugins	6 years ago
Andrew DeMaria	5202845373	Bump version of guava to deal with CVE-2018-10237 Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	6 years ago
Andrew DeMaria	8c6ddb1aba	Dependency tweaks and remove extraneous code Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	6 years ago
Rémi Cocula	6b4874f33c	archetype code for rest api integration tests	6 years ago
Andrew DeMaria	377f68543d	Added profile to make running within a ide easier Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	6 years ago
Michael Sabin	48c3286766	Allow building without Git If Maven cannot find the git executable the build fails. Signed-off-by: Michael Sabin <m35@users.noreply.github.com>	6 years ago
Peter Marheine	8b4037b549	Check reCAPTCHA v2 responses when enabled Signed-off-by: Peter Marheine <peter@taricorp.net>	6 years ago
Peter Marheine	749342f25e	Remove captcha support It uses reCAPTCHA v1, which hasn't worked since March 2018. Signed-off-by: Peter Marheine <peter@taricorp.net>	6 years ago
Romain DEP.	c2416a57a8	deps: update jackson to a vuln-free version, bump java-jwt in the process	7 years ago
Rémi Cocula	be91fb08c4	fix issues #638 and #574	7 years ago
Andrew DeMaria	caae31452e	Bump to 10.2.0 snapshot Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	535d5d06cb	Release 10.1.1 Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	5e47bc500e	Fix maven profile mixup with sign/tomcat-embed Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Robert Sprunk	756d178978	Upgrade jaudiotagger to 2.2.5 supporting Java 9 Signed-off-by: Robert Sprunk <github@sprunk.me>	7 years ago
Andrew DeMaria	78006946ea	Bump 10.2.0-SNAPSHOT Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	e04cda4293	Release 10.1.0 Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	143cc5a40c	Added gpg sign profile Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	438461933d	Dep Check Plugin and update vuln dependencies Detail ------ Add a dependency check plugin to find reported issues with dependencies we use. From adding this, there were quite a few false positives which are documented in airsonic-main/cve-suppressed.xml. The applicable vulnerabilities are as follows: ``` commons-fileupload-1.2.jar (commons-fileupload:commons-fileupload:1.2, cpe:/a:apache:commons_fileupload:1.2) : CVE-2016-3092, CVE-2016-1000031, CVE-2014-0050, CVE-2013-0248 castor-core-1.3.1.jar (cpe:/a:castor:castor:1.3.1, cpe:/a:castor_project:castor:1.3.1, org.codehaus.castor:castor-core:1.3.1) : CVE-2014-3004 tomcat-embed-core-8.5.16.jar (cpe:/a:apache_software_foundation:tomcat:8.5.16, cpe:/a:apache:tomcat:8.5.16, cpe:/a:apache_tomcat:apache_tomcat:8.5.16, org.apache.tomcat.embed:tomcat-embed-core:8.5.16) : CVE-2017-12617 ``` CVE-2016-1000031 is rated as CRITICAL, but we do not deserialize content from any multipart uploads so doesn't apply. Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	05291ce100	Intellij: suppress maven pom error Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Rémi Cocula	c09acbc65d	Introduction of a new kind of jukebox player based on the javasound api.	7 years ago
Andrew DeMaria	ec68a8e7de	Bump version to 10.1.0-SNAPSHOT Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	00a5cf2907	Release 10.0.1 Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	e8e229cf8b	Move jdbc dependencies into the default war Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	7d4ca2ffe2	Prep work for spring boot test - Added enforcer plugin - Fix some version conflicts - Moved custom initializer to spring.factories - Bump spring boot version Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	e03b85ba6f	Fixed regression in password reset Caused by `e3e9056548` Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	361d77ed61	Update version Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	e4a96925fd	Release 10.0.0 Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	316b06a2c9	Updated version to 10.0.0 This was discussed in a dev irc meeting (https://gist.github.com/muff1nman/570a3021f5d98453333090bb933a3865). It keeps our versioning different than parent fork versions. Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	7c32fea2a5	Added profile to embed additional jdbc drivers Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	d5321f9263	Updated version service to use github releases Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	11317fba6e	Removed extraneous mockito dependency Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	94dbd3ef94	Rename libresonic -> airsonic Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	260e04c8ea	File System Renames (No content changes) Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	d8bd94b7ad	Rename subsonic api module Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	9584bfaea5	Improve Playlist Handling - Use external library chamelon (lizzy) - Adds the ability to specify playlist export format - Fixes some deficiences with playlist handling Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Eugene E. Kashpureff Jr	103de63636	Libresonic v6.2	8 years ago
Eugene E. Kashpureff Jr	ce5a2cf35f	Libresonic v6.2.beta4	8 years ago
Andrew DeMaria	6f3ede33d9	Bump jaudio tagger version Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Andrew DeMaria	b22437c735	Bump to 6.3 snapshot Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Eugene E. Kashpureff Jr	3bf2ca7c18	Libresonic v6.2.beta3	8 years ago
Andrew DeMaria	678c3a7cd3	Change back to snapshot Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Andrew DeMaria	f7bd43136b	Lock Down unsecured urls Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Andrew DeMaria	11e80dd43b	Jetty and Tomcat spring boot support Spring boot supports both Jetty and Tomcat, however only one is supposed to be used at a time. This is problematic for us, because we would like to have both on the classpath so we can configure them (i.e. org.libresonic.player.boot.TomcatApplication). To remedy this, we mark both as provided, but have two profiles which then tell spring to exclude one or the other from the lib-provided war. These exclude rules are a bit fragile, but can be reproduced by analyzing mvn dependency:tree output. Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	8 years ago
Eugene E. Kashpureff Jr	58e380b13c	Libresonic v6.2.beta2	8 years ago

42 Commits (8f1d7907849d6530e8797ddd584ee02b5cafd1af)