mirror
/
penpot
mirror of https://github.com/penpot/penpot.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
19,921 Commits 128 Branches 240 Tags 350 MiB
Commit Graph

3062 Commits

Author SHA1 Message Date
Andrey Antukh 2c1a8b59ba ✨ Add client header check middleware 
As an additional csrf protection for API requests
 2025-10-07 12:47:14 +02:00
Andrey Antukh 47d9c6f282 ✨ Add sec-fetch metadata middleware support 2025-10-07 12:47:14 +02:00
Andrey Antukh 14d53c224f 🔥 Remove unused auth-data cookie asignation 2025-10-07 12:47:12 +02:00
Alejandro Alonso e0f9bbb23f
Merge pull request #7432 from penpot/niwinz-develop-virtual-clock 
🎉 Add virtual clock support
 2025-10-07 12:27:49 +02:00
Marina López fede63ac0b ✨ Update Design System template in carousel 2025-10-07 12:14:12 +02:00
Andrey Antukh 61d9b57bc7 ♻️ Refactor internal tokens API 
Mainly make it receive the whol cfg/system instead only props. This
makes the api more flexible for a future extending without the need
to change the api again.
 2025-10-07 12:08:00 +02:00
Andrey Antukh bd63598185 🎉 Add virtual clock implementation 2025-10-07 12:08:00 +02:00
Andrey Antukh 683db071d6 Merge remote-tracking branch 'origin/staging' into develop 2025-10-06 12:09:57 +02:00
Andrey Antukh 54bb879cb6 📎 Add several missing imports on repl related namespaces 2025-10-06 09:38:01 +02:00
Andrey Antukh b72704e54b ✨ Set explicit no-buffering for sse responses 2025-10-06 09:19:48 +02:00
Andrey Antukh 365ce25996 Merge remote-tracking branch 'origin/staging' into develop 2025-10-01 10:50:19 +02:00
Andrey Antukh 9f2dc06c95 ✨ Add missing srepl helper for disable objects-map feat 2025-10-01 08:10:37 +02:00
Pablo Alba cd9ba482e3
🐛 Load dependant libraries, and don't allow unload them 2025-09-30 09:55:21 +02:00
Andrey Antukh de25a24a6d 🐛 Fix backend repl start issue with jdk 24 2025-09-29 13:35:48 +02:00
Andrey Antukh 2d364dde5c ✨ Add several minor enhacements to features subsystem 
Mainly fixes the team non-inheritable features handling and
removes unnecesary/duplicate checks.
 2025-09-29 13:23:16 +02:00
Andrey Antukh c892a9f254 ✨ Integrate objects-map usage on backend and frontend 2025-09-29 13:23:16 +02:00
Andrey Antukh 5ffb7ae2ec ✨ Add warning on using deprecated storage config 2025-09-29 13:23:01 +02:00
Andrey Antukh 27945ace65 ⏪ Revert deprecated storage config cleaning 2025-09-29 13:23:01 +02:00
María Valderrama e39bf0b439
✨ Invitations management improvements (#7230) 
* ✨ Invitations management improvements

* 📎 Change invite email subject

* 📎 Update icon usage

* ♻️ Fix css file

---------

Co-authored-by: Eva Marco <evamarcod@gmail.com>
 2025-09-29 13:18:57 +02:00
Andrey Antukh e1519f0ee4 ✨ Integrate objects-map usage on backend and frontend 2025-09-29 12:07:48 +02:00
Andrey Antukh 42d03a0325 📎 Add several missing imports on repl related namespaces 2025-09-29 12:06:56 +02:00
Andrey Antukh 0346c48b03 ✨ Add several minor enhacements to features subsystem 
Mainly fixes the team non-inheritable features handling and
removes unnecesary/duplicate checks.
 2025-09-29 12:06:56 +02:00
Andrey Antukh c1058c7fdb ♻️ Add minor refactor for internal concurrency model 
Replace general usage of virtual threads with platform threads
and use virtual threads for lightweight procs such that websocket
connections. This decision is made mainly because virtual threads
does not appear on thread dumps in an easy way so debugging issues
becomes very difficult.

The threads requirement of penpot for serving http requests
is not very big so having so this decision does not really affects
the resource usage.
 2025-09-26 14:35:06 +02:00
Andrey Antukh 9d907071aa
⬆️ Update dependencies (#7330) 
* ⬆️ Update to JDK25 on the devenv

* ⬆️ Update dependencies

* 🔥 Remove unused flag from devenv backend startup scripts

* ✨ Enable shenandoah gc on backend scripts/repl
 2025-09-26 13:43:43 +02:00
Andrey Antukh 59f7ede4ff 🐛 Add migration for properly decode all position data on text shapes 2025-09-23 11:34:24 +02:00
Andrés Moya 8954b05d76
🐛 Fix error exporting a file with deleted tokens (#7356) 2025-09-22 17:41:31 +02:00
Andrey Antukh 0b346e02ff 🐛 Fix incorrect options pass on decode-file 2025-09-22 11:30:42 +02:00
Andrey Antukh 85c1750706
🐛 Fix backend last migration naming (#7333) 2025-09-17 10:47:14 +02:00
Andrey Antukh ca19d4deeb ⬆️ Update postgresql jdbc dependency 2025-09-12 14:28:14 +02:00
Andrey Antukh dfceccca3d ⬆️ Update aws s3 sdk version 
This transitivelly updates the netty library version
that comes with fixes for several security issues
 2025-09-12 14:28:14 +02:00
Pablo Alba 06441063f2 ✨ Add "advanced" events to variants 2025-09-08 15:33:14 +02:00
Pablo Alba 307e06372b 🎉 Activate variants for everyone 2025-09-01 09:58:14 +02:00
Andrey Antukh c2e7f9dc42
⬆️ Update base deps (#7207) 2025-08-28 12:50:39 +02:00
Andrey Antukh 45be4769d7 Merge remote-tracking branch 'origin/staging' into develop 2025-08-27 13:19:06 +02:00
Andrey Antukh a114e9adb0 ✨ Add logging for management update-customer method 2025-08-27 12:02:39 +02:00
Andrey Antukh 5fed5fa158 ✨ Add transactions support on management api 2025-08-27 12:00:03 +02:00
Andrey Antukh 6c8873c7f5 🐛 Ensure for-update locking is used on updating profile props 2025-08-27 11:59:35 +02:00
Andrey Antukh 37b0c4adc0 🐛 Add support fror ::db/for-update on sql ns 2025-08-27 11:58:42 +02:00
Andrey Antukh c35bb6e09a 🎉 Add loadable weak map impl for libraries loading on validation and migration 2025-08-26 09:03:25 +02:00
Andrey Antukh fa2b0bd67c ✨ Don't migrate libraries on accessing them on file data migrations 
We don't migrate the libraries for avoid cascade migration; it is not ideal
but it reduces the total of the required memory needed for process a single
file migration that requires libraries to be loaded.
 2025-08-26 08:15:45 +02:00
Andrey Antukh c759afc10d 🔥 Remove unnecessary and broken unique-editors field 
From the get-teams rpc method response
 2025-08-25 11:33:34 +02:00
Andrey Antukh 2846b80cf7 ✨ Add rpc methods for obtain editors 2025-08-25 10:53:12 +02:00
Andrey Antukh ad0ef82ffc 🎉 Add management http api 2025-08-25 10:53:12 +02:00
Alejandro Alonso 643621a389
Merge pull request #7119 from penpot/niwinz-develop-type-hints 
⚡ Add several performance enhancements
 2025-08-20 12:58:43 +02:00
Andrey Antukh 575342b3bb ♻️ Use direct schemas instead of references 
Only a very common use, basic types schemas should be used as
reference (with namespaced keywords)
 2025-08-20 12:33:07 +02:00
Andrey Antukh b472a8ab19 ✨ Add general improvement to openapi and js-like doc output 2025-08-20 09:41:01 +02:00
Andrey Antukh 2b83d0d0e9 ✨ Add generative test case for openapi json serialization 
This will prevent possible regression on introducing schemas without
generators or schema with generators that can't be serialized to json.
 2025-08-20 09:38:57 +02:00
Andrey Antukh 911ac263fa 🐛 Use ::sm/any instead of any for get-file-fragment rpc method schema 
The usage of `any?` predicate as-is uses the standard any generator that
causes to generate java.lang.Character instances created that are not
properly serialiable to JSON. The `::sm/any` schema delimits the
generator to a commonly known serializable types on json.
 2025-08-20 09:38:55 +02:00
Andrey Antukh 17ec360720 ⚡ Add several missing type hints for avoid reflection and autoboxing 2025-08-18 13:03:10 +02:00
Andrey Antukh 50aa6ff306 ⚡ Remove reflection calls on binfile v3 code 2025-08-18 13:03:10 +02:00
Andrey Antukh f02667e031 Merge remote-tracking branch 'origin/staging' into develop 2025-08-11 09:12:03 +02:00
Andrey Antukh f7832585dc
✨ Add tests for snapshot locking (#7085) 2025-08-07 16:27:43 +02:00
Andrey Antukh 6abd045273
🐛 Add missing generator for token-set file change operation (#7080) 
* 🐛 Add missing generator for token-set file change operation

* 🐛 Use ::sm/any instead of :any for on get-file-data-for-thumbnail rpc method

Mainly because :any will use a very generic generator that can generate
instances of Character that are not directly serializable to JSON
 2025-08-07 12:36:14 +02:00
Andrey Antukh 56de96d25b Merge remote-tracking branch 'origin/staging' into develop 2025-08-07 08:04:40 +02:00
Andrey Antukh e28d2842f6 🐛 Revert the revert of orientation detection on media 
This reverts commit 515cbf7bef.
 2025-08-05 22:03:09 +02:00
Andrey Antukh ccc3ca0948 ✨ Disable virtual threads on http server 2025-08-05 20:34:47 +02:00
Andrey Antukh 515cbf7bef 🐛 Revert orientation detection on media 2025-08-05 19:30:01 +02:00
Andrey Antukh c320cbc47b 🐛 Revert to semaphore based climit impl 2025-08-05 19:17:35 +02:00
Andrey Antukh 46969585ed ✨ Disable native buffers usage on xnio 
A temporal change for investigate native memory leak
 2025-08-04 22:13:08 +02:00
Andrey Antukh 47882c5419 ✨ Add missing parameter on climit instance creation 2025-08-04 19:53:56 +02:00
Andrey Antukh 97e8c9250a Merge remote-tracking branch 'origin/staging' into develop 2025-08-04 14:10:57 +02:00
Andrey Antukh 85f6cf32ae
🐛 Several bugfixes (#7062) 
* 🐛 Fix incorrect status validation on subscription internal api

* 🐛 Make the shortcuts overwritting optional
 2025-08-04 13:54:29 +02:00
Laurie Crean 0b47a366ab ✨ Implement version locking functionality for file snapshots 
Signed-off-by: Laurie Crean <lmcrean@gmail.com>
 2025-08-01 11:41:30 +02:00
Andrey Antukh 6f35b7db24 ✨ Add reader tag support for tokens related types 2025-08-01 11:20:01 +02:00
Andrey Antukh 4d9e070bcd ✨ Add reader tag support for types path data 2025-08-01 11:20:01 +02:00
Andrey Antukh 61fe8e8d8e ✨ Add reader tag support for geom matrix 2025-08-01 11:20:01 +02:00
Andrey Antukh 0934095e96 ✨ Add reader tag support for geom point 2025-08-01 11:20:01 +02:00
Andrey Antukh 283eb0419c ♻️ Refactor time related namespaces 
Mainly removes the custom app.util.time namespace
from frontend and backend and normalize all to use
the app.common.time namespace
 2025-08-01 11:20:01 +02:00
Andrey Antukh 37cec8891f 🎉 Add inplace binfile import support 2025-07-30 12:23:40 +02:00
Andrey Antukh fd62141c04 ✨ Disable pointer-map feature (temporary) 
Because the upcoming refactor changes several aspects
of that feature and it not make sense to continue have
this active for now, until refactor is merged.
 2025-07-30 12:06:41 +02:00
Andrey Antukh 4bdba6894d ✨ Add get-with-sql helper to db module 2025-07-30 12:06:41 +02:00
Andrey Antukh 019bc2f183 ✨ Add migrations handling on file snapshots 2025-07-24 11:40:54 +02:00
Andrey Antukh d08c94d5a6 ✨ Change default status filtering for logical deletion 2025-07-24 10:43:45 +02:00
Andrey Antukh 4effd375a9 ✨ Add several improvements to admin pannel 2025-07-23 08:33:33 +02:00
David Barragán Merino 9d288486d7
🐛 Subscription current period dates could be null (#6931) 
`current-period-start` and `current-period-end` can be null if the invoice has not yet been created in stripe. This happens after the subscription is created, before the webhook is sent.
 2025-07-22 12:32:42 +02:00
Andres Gonzalez f772724f9a ✨ Update email change confirmation message for clarity 2025-07-16 10:22:53 +02:00
Andrey Antukh e2c5a1378e
Merge pull request #6724 from penpot/elenatorro-improve-create-profile-command 
🔧 Add option to skip tutorial/walkthrough when creating a profile from the script
 2025-07-11 14:15:49 +02:00
Marina López ba6a02d1d9
🐛 Add fixes from subscription design review (#6870) 
* 🐛 Fixes from subscription design review

* 🐛 Fix to consider professional plan the unpaid and canceled status

* 📎 Fixes PR feedback
 2025-07-10 11:55:16 +02:00
Andrey Antukh e554b9fcb7 Merge remote-tracking branch 'origin/staging' into develop 2025-07-08 11:04:29 +02:00
Andrey Antukh c8fef97598 ✨ Add missing field on get-teams rpc method 2025-07-07 13:36:00 +02:00
Andrey Antukh 92d708d52c Merge remote-tracking branch 'origin/staging' into develop 2025-07-07 09:37:55 +02:00
Aitor Moreno 824bb19c7e
Merge pull request #6848 from penpot/niwinz-staging-library-referer 
✨ Add referer field to binfile v3
 2025-07-07 09:02:13 +02:00
Andrey Antukh 43ba2b05e8 📎 Change current config values for error report explain 2025-07-04 14:51:08 +02:00
Andrey Antukh 77741b49a7 ✨ Add tracking for referer on the import-binfile 2025-07-04 11:02:36 +02:00
Andrey Antukh 50a6355537 🎉 Add options for creating library build context 
With the ability to pass referer.
 2025-07-04 11:02:36 +02:00
Andrey Antukh 3165761bac Merge remote-tracking branch 'origin/staging' into develop 2025-07-03 15:32:30 +02:00
Andrey Antukh e5b6c4a9e0 ✨ Add minor improvement to error reporter logger 2025-07-03 14:54:00 +02:00
Andrey Antukh 96d6868b45 🐛 Add missing fields on get-team-shared-files query 2025-07-03 14:54:00 +02:00
Andrey Antukh b739d8bd0c 💄 Change default depth on params for error reports 2025-07-03 14:54:00 +02:00
Alejandro Alonso 3cb0e1b6ee
🐛 Fix exif rotation detection when auto-rotation isn't supported (#6818) 2025-07-02 10:31:05 +02:00
Andrey Antukh a191fe63a1 Merge remote-tracking branch 'origin/staging' into develop 2025-06-26 09:18:23 +02:00
Andrey Antukh 77ef26b207 📎 Add srepl script for validate file schema 2025-06-26 08:32:11 +02:00
Andrey Antukh 26239a15f2 📎 Add missing changes on lost-colors fix script 2025-06-25 20:13:35 +02:00
Andrey Antukh 25ef1800d0 Merge remote-tracking branch 'origin/staging' into develop 2025-06-25 19:30:57 +02:00
Andrey Antukh b52e2fa681 🐛 Add missing version field on get-team-shared-files internal query 2025-06-25 19:24:18 +02:00
Andrey Antukh 4915a97c2c 📎 Add script for restoring lost colors 2025-06-25 16:10:35 +02:00
Andrey Antukh 9760911fce Merge remote-tracking branch 'origin/staging' into develop 2025-06-25 14:24:26 +02:00
Andrey Antukh 56472a95de 🐛 Add missing file migration to get-team-shared-files rpc method 2025-06-25 11:56:11 +02:00
Andrey Antukh 9e5bc3675c 🐛 Remove cider nrepl handler from default nrepl server 2025-06-25 11:41:24 +02:00
Marina López 82bedda604
✨ Add tokens library to dashboard carousel (#6769) 2025-06-25 10:22:19 +02:00
Alejandro Alonso 8f00292f8f
🎉 Support for exim rotated images (#6767) 2025-06-25 10:20:37 +02:00
Elena Torro cf8006ce9c 🔧 Add option to skip tutorial/walkthrough when creating profiles for dev purposes 2025-06-18 17:00:46 +02:00
Andrey Antukh 063c6e7771 Merge remote-tracking branch 'origin/staging' into develop 2025-06-18 13:34:47 +02:00
Andrey Antukh 34febfc833 📎 Update indirect dependencies 2025-06-18 13:20:45 +02:00
Andrey Antukh 4524782282 📎 Adapt backend test to devenv changes 2025-06-18 12:35:58 +02:00
Andrey Antukh 402508a710 Merge remote-tracking branch 'origin/staging' into develop 2025-06-18 10:41:30 +02:00
Andrey Antukh 88ed08916e Merge remote-tracking branch 'origin/staging' into develop 2025-06-18 10:39:23 +02:00
Andrey Antukh 2d4fc3e05f ♻️ Refactor devenv build mechanism 
This introduces multistage build process for devenv making
different dependencies build depend on its own (per example, when
jvm version is changed, only the jvm stage is rebuild)

This commit also introduces imagemagick 7.x custom build
in the same way as we have on public docker images, so on
devenv we use the same version.
 2025-06-18 09:46:15 +02:00
Andrey Antukh 6dd0f4f164 🔥 Remove unused jvm options from backend start-dev script 2025-06-18 09:46:15 +02:00
Andrey Antukh 8b0ead6832 🐛 Fix regression on singup flow 
Move all params handling to prepare-register, just for consistency
 2025-06-16 14:31:30 +02:00
Andrey Antukh 71f5806e23 ✨ Add editors count to get-owned-teams rpc method response 2025-06-11 08:40:58 +02:00
Andrey Antukh 8c337f508b Merge remote-tracking branch 'origin/staging' into develop 2025-06-09 12:20:55 +02:00
Andrey Antukh e4a65f3a04 ⬆️ Update backend dependencies 2025-06-06 14:03:52 +02:00
Eva Marco 4a9fef12eb
🐛 Fix url params on invitation link (#6638) 2025-06-05 12:28:53 +02:00
Alejandro Alonso 055ee27be0 🐛 Add migrations to fix colors 2025-06-04 14:01:48 +02:00
Andrey Antukh 29ad99d685 🐛 Fix incorrect declaration of tokens lib schema decoder 2025-06-04 13:03:51 +02:00
Andrey Antukh 580013bc3f ⬆️ Update shadow-cljs to 3.1.5 2025-06-04 12:46:49 +02:00
Andrey Antukh 7160334cb9 ♻️ Add stricter validation for colors, fills and strokes 2025-06-04 12:46:49 +02:00
Andrey Antukh 8f774a3611 ✨ Simplify media mime types structs 2025-06-04 12:46:49 +02:00
Andrey Antukh 3131eec271 ✨ Make the hash optional on binfile-v3 
Backport the change from develop
 2025-06-02 23:24:35 +02:00
Andrey Antukh ad842872fb 🐛 Fix unexpected exception on get-team internal method 
Because of invalid SQL
 2025-05-30 13:49:05 +02:00
Alejandro Alonso 885231e9a1
Merge pull request #6512 from penpot/niwinz-develop-custom-deletion-rules 
♻️ Normalize logical deletion delay handling
 2025-05-30 12:53:37 +02:00
Pablo Alba be13704934
🐛 Fix access to libs on migration during an import (#6572) 2025-05-27 14:54:17 +02:00
Pablo Alba 443cabe94e
✨ Add the ability to access libraries from file migrations 2025-05-27 13:12:34 +02:00
Marina López e5bc369e56
✨ Visual indicators subscription for teams and project settings (#6546) 
* ✨ Visual indicators subscription for teams and project settings

* 📎 Fixes PR feedback

---------

Co-authored-by: Andrey Antukh <niwi@niwi.nz>
 2025-05-26 12:56:40 +02:00
Andrey Antukh 927ee9e55e ✨ Add get-owned-teams rpc method 2025-05-23 11:20:35 +02:00
Andrey Antukh f9c9e865b5 🐛 Remove unexpected modified-at on binfile-v3 import 2025-05-22 10:53:23 +02:00
Andrey Antukh 0683fbd17c ⬆️ Update backend dependencies 2025-05-22 10:53:23 +02:00
Andrey Antukh 172b70d8a7 ⬆️ Upgrade promesa library to latest version 
That fixes a workaround introduced in previous commits
 2025-05-22 10:53:23 +02:00
Andrey Antukh a63fa2944d Merge remote-tracking branch 'origin/staging' into develop 2025-05-21 09:23:15 +02:00
Andrey Antukh a706907b26 ♻️ Normalize logical deletion to future dates 
Instead of managing the ...
 2025-05-20 22:25:57 +02:00
Alejandro Alonso ff9c8f5929
Merge pull request #6483 from penpot/niwinz-staging-bugfixes-error-report 
🐛 Several bugfixes
 2025-05-20 13:54:54 +02:00
Andrey Antukh c87fa4f723 ✨ Make the rpc doc generation lazy 2025-05-20 13:29:44 +02:00
Andrey Antukh 9378a5786f ✨ Replace json library used for generate openapi json 2025-05-20 13:29:44 +02:00
Andrey Antukh 3224ba26f1 ♻️ Replace :any schema with own ::sm/any 
That a more specific, json friendly generator
 2025-05-20 13:29:44 +02:00
Andrey Antukh 29d23577d2 🎉 Add .penpot (binfile-v3) support for library 2025-05-20 13:06:07 +02:00
Andrey Antukh 1fea1e8f5b 🔥 Remove unused svg parsing code from common 2025-05-20 13:06:07 +02:00
Andrey Antukh c8a211742a 🔥 Remove already broken and unused internal components-v2 migration code 2025-05-20 13:06:06 +02:00
Andrey Antukh d8daea72de ⬆️ Update promesa library 2025-05-20 13:05:52 +02:00
Andrey Antukh 0b4a367e9e 🐛 Fix svg path parsing on uploading svg image 2025-05-19 15:35:58 +02:00
Andrey Antukh cf274099c4 ✨ Improve events/sse internal API 
For make code cleaner and more evident for a quick view
 2025-05-18 17:30:41 +02:00
Andrey Antukh 9b80f7c9b3 💄 Don't return unnecesary object from db query 
the return value is already ignored
 2025-05-18 17:30:41 +02:00
Andrey Antukh bf76f328c8 ✨ Remove duplicate error logging on sse response 2025-05-18 17:30:41 +02:00
Andrey Antukh d01e3085f4 ⬆️ Update yarn to 4.9.1 2025-05-14 10:39:34 +02:00
Andrey Antukh d9ca82dc15 ⬆️ Update dependencies 2025-05-14 10:39:34 +02:00
Andrey Antukh 94312bb35c Merge remote-tracking branch 'origin/staging' into develop 2025-05-12 13:44:24 +02:00
Alejandro Alonso dbb9971482
Merge pull request #6351 from penpot/niwinz-develop-improve-cleaner 
✨ Add cleaner to file-gc
 2025-05-12 11:52:01 +02:00
Alejandro Alonso 0828994840
Merge pull request #6419 from penpot/niwinz-refactor-library 
♻️ Refactor penpot library
 2025-05-12 11:47:00 +02:00
Andrey Antukh b349d08155 🐛 Apply migrations in correct order for binfile-v1 
The patch was already existed but only applied to binfile-v3,
with this commit, the fix is properly applied to all binfile
formats and for duplicate file operation.
 2025-05-09 13:38:13 +02:00
Andrey Antukh bc20598b3d ✨ Don't persist file on several read operations 
after applying migrations
 2025-05-08 19:15:28 +02:00