Commit Graph

1106 Commits

Author SHA1 Message Date
Daniel
c4b41e300e 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c77m-r996-jr3q
Signed-off-by: Daniel <845765@qq.com>
2026-03-28 19:40:18 +08:00
Jeffrey Chen
ea69c9ab3c 🎨 Add kernel API /api/setting/setIcon (#17326) 2026-03-24 23:00:53 +08:00
Daniel
710548dc68 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xmw9-6r43-x9ww
Signed-off-by: Daniel <845765@qq.com>
2026-03-23 19:10:25 +08:00
Daniel
b957c769df 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-34xj-66v3-6j83
Signed-off-by: Daniel <845765@qq.com>
2026-03-23 19:07:24 +08:00
Jeffrey Chen
c055028af0 ♻️ Code style: Potential resource leak (#17313)
* ♻️ Code style: Potential resource leak

* 🎨 Still use f.Unlock()

---------

Co-authored-by: D <845765@qq.com>
2026-03-22 12:41:59 +08:00
Daniel
a8abfa5ddf ♻️ https://github.com/siyuan-note/siyuan/pull/17307
Signed-off-by: Daniel <845765@qq.com>
2026-03-22 12:26:51 +08:00
Jeffrey Chen
71342abe99 ♻️ Code style: Omit explicit types and remove unused (blank identifier) parameters (#17310) 2026-03-22 11:30:20 +08:00
Jeffrey Chen
8dbe00d634 ♻️ Code style: Unused formal parameters (#17309) 2026-03-22 11:26:39 +08:00
Jeffrey Chen
afb3ad1447 ♻️ Code style: Redundant type casting (#17305) 2026-03-22 11:18:52 +08:00
Jeffrey Chen
fdb1e4ac00 ♻️ Code style: Comparing with the equality operator fails on wrapped errors (#17303) 2026-03-22 11:11:25 +08:00
Jeffrey Chen
fdd7285e90 ♻️ Code style: Redundant else branch (#17298) 2026-03-22 10:50:13 +08:00
iliya
31a1b17440 ♻️ kernel/api/broadcast: modernize with wg.Go (#17282) 2026-03-21 11:50:17 +08:00
Daniel
d90bcec19d 🎨 https://github.com/siyuan-note/siyuan/issues/17262
Signed-off-by: Daniel <845765@qq.com>
2026-03-20 21:29:14 +08:00
Daniel
49e2a672c7 🎨 Supports rolling back a specified file within a data snapshot https://github.com/siyuan-note/siyuan/issues/12355
Signed-off-by: Daniel <845765@qq.com>
2026-03-19 13:01:45 +08:00
Daniel
59da115cc9 ♻️ Rename func
Signed-off-by: Daniel <845765@qq.com>
2026-03-19 13:01:45 +08:00
Daniel
974008f950 🔊 Print a warning log when calling a deprecated kernel API https://github.com/siyuan-note/siyuan/issues/17257
Signed-off-by: Daniel <845765@qq.com>
2026-03-19 10:01:02 +08:00
Daniel
f31ba9485c 🎨 Improve set publish
Signed-off-by: Daniel <845765@qq.com>
2026-03-18 12:43:55 +08:00
Jeffrey Chen
907baba895 ♻️ Remove unused callback parameter (#17245) 2026-03-18 09:13:38 +08:00
Jeffrey Chen
a69ea3ef0d ♻️ Migrate some JSON parameter extraction to util.ParseJsonArgs (#17244)
v3.6.2
2026-03-18 09:10:39 +08:00
Jeffrey Chen
26e72ea292 🎨 Use the util.FileURLToLocalPath function to convert file:// file links uniformly (#17239) 2026-03-17 09:04:37 +08:00
Daniel
294b8b429d 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fq2j-j8hc-8vw8
Signed-off-by: Daniel <845765@qq.com>
2026-03-16 10:22:14 +08:00
Jeffrey Chen
4b0b075184 Improve closing user guide notebook (#17189)
* 🎨 Improve closing user guide notebook https://github.com/siyuan-note/siyuan/issues/17182

* 🎨 Improve closing user guide notebook https://github.com/siyuan-note/siyuan/pull/17189#issuecomment-4045377189

* 🎨 Improve closing user guide notebook

* 🎨 Improve closing user guide notebook https://github.com/siyuan-note/siyuan/pull/17189#issuecomment-4062459992
2026-03-15 19:51:20 +08:00
Daniel
d5e2d0bce0 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-j7wh-x834-p3r7
Signed-off-by: Daniel <845765@qq.com>
2026-03-14 19:41:36 +08:00
Daniel
13b6d3d45e 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rjhh-m223-9qqv
Signed-off-by: Daniel <845765@qq.com>
2026-03-14 12:12:32 +08:00
Daniel
5ee00907f0 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-qvvf-q994-x79v
Signed-off-by: Daniel <845765@qq.com>
2026-03-14 12:12:32 +08:00
Yuxin Zhao
a6c54a4787 🔒 Improve the security of publish service (#17210)
* 🎨 fix https://github.com/siyuan-note/siyuan/issues/17201

* 🎨 fix /api/block/getBlockDOM, /api/block/getBlockDOMs, /api/block/getBlockDOMWithEmbed, /api/block/getBlockDOMsWithEmbed

* 🎨 fix publish access for /api/file/getFile
2026-03-14 11:05:46 +08:00
Daniel
5859cc222f 🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4j3x-hhg2-fm2x
Signed-off-by: Daniel <845765@qq.com>
2026-03-13 21:30:20 +08:00
Jeffrey Chen
c14301aed1 ♻️ Improve /api/setting/setTheme https://github.com/siyuan-note/siyuan/pull/17198 (#17205) 2026-03-13 20:38:32 +08:00
Jeffrey Chen
a9d1d7eeac 🧑‍💻 Add kernel API /api/ui/reloadTheme (#17206) 2026-03-13 20:37:28 +08:00
konti1334
2e6b13eec4 🎨 add POST /api/setting/setTheme endpoint (#17198)
Adds a minimal endpoint for activating a theme by name and mode without
requiring the caller to fetch and re-POST the entire appearance config blob.

Request body:
  { "theme": "<theme-dir-name>", "mode": 0|1 }

Behaviour:
- Sets both ThemeLight and ThemeDark to the supplied theme name
- Sets Mode (0 = light, 1 = dark)
- Calls InitAppearance() to validate the theme exists and reads its
  version from theme.json for cache-busting
- Saves conf.json
- Broadcasts the "setAppearance" WebSocket event so all open windows
  call loadAssets() and reload the theme CSS with the new ?v= parameter

Returns the full Appearance config (same shape as setAppearance).

Motivation: external tools (e.g. OS-level theme switchers) previously
had to GET /api/system/getConf, patch the appearance object, and POST
the entire blob to /api/setting/setAppearance.  /api/setting/setTheme
reduces that to a single, self-contained call with no dependencies.

Co-authored-by: You name <konty@github.com>
2026-03-13 17:28:45 +08:00
Yuxin Zhao
3facc37df9 Publish service supports document-level access control (#16041)
* 🎨 improve publish service https://github.com/siyuan-note/siyuan/issues/11928

* fix: change publish access storage

* 🎨 publish access control #16041

* fix: publish access in embed block and search

* fix: multiple lock in pubish service & insert locked content in publish service

* fix: multiple lock

* fix: password in embed block

* fix: locked and forbidden docs in gallery

* fix: dont use publish access block

* fix: attribute view of publish disabled docs

* fix: disable docs in table and gallery

* fix: locked docs in attribute view

* fix: purge publish access

* fix: disable docs in table and gallery groups

* fix: locked and disabled docs in attribute view, outline and preview

* fix: create publish_access.go

* fix: move publish auth to publish_access.go

* fix: tag and ref of locked docs

* fix: backlink of locked docs

* fix: search in locked docs

* fix: search history and asset

* fix: copy to markdown

* fix: hide command panel

* fix: publish access control in mobile

* fix: recent docs of invisible and locked docs

* fix: backlink in mobile

* fix: empty Tab

* fix: get locked and forbidden doc assets and files

* fix: refblock & asset

* fix: disable /api/file/sql in publish mode

* fix: publish access of kanban

* fix: adjustment for review

* fix: /api/filetree/setPublishAccess return error meesage

* fix: move the publishAccess button to the More Menu & revert the fix for barCommand/menuCommand

* fix: hotkey of command panel
2026-03-12 18:04:01 +08:00
Daniel
93b354ece8 🎨 Clean code
Signed-off-by: Daniel <845765@qq.com>
2026-03-11 09:10:34 +08:00
Daniel
3284e10028 🔒 Fix https://github.com/siyuan-note/siyuan/security/advisories/GHSA-56cv-c5p2-j2wg
Signed-off-by: Daniel <845765@qq.com>
2026-03-11 09:10:34 +08:00
Jeffrey Chen
5fec46acd5 🎨 /api/bazaar/uninstallBazaarPlugin supports not passing the frontend parameter (#17173) 2026-03-10 18:49:58 +08:00
Daniel
3e0dc24ef4 🎨 Clean code
Signed-off-by: Daniel <845765@qq.com>
2026-03-10 16:31:15 +08:00
Daniel
0cec542db2 🎨 Improve bazaar
Signed-off-by: Daniel <845765@qq.com>
2026-03-08 22:31:35 +08:00
Jeffrey Chen
465755e184 ♻️ Remove bazaar cache clear on appearance language change (#17160) 2026-03-08 15:13:43 +08:00
Jeffrey Chen
3cac07dfd9 ♻️ Unified marketplace Package Type Model (#17152) 2026-03-08 11:09:46 +08:00
Daniel
990ff0ec5e 🔒 Fix https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f9cq-v43p-v523
Signed-off-by: Daniel <845765@qq.com>
2026-03-07 10:50:19 +08:00
Jeffrey Chen
14c35bfa0c 🎨 Add the code-block class name when rendering code blocks in the market README (#17145) 2026-03-06 17:44:20 +08:00
Daniel
3d5c24519b 🐛 Fix https://github.com/siyuan-note/siyuan/issues/17138
Signed-off-by: Daniel <845765@qq.com>
2026-03-06 08:44:31 +08:00
Daniel
091ec8991d 🐛 Fix https://github.com/siyuan-note/siyuan/issues/17138
Signed-off-by: Daniel <845765@qq.com>
2026-03-06 00:48:50 +08:00
Daniel
b8ee424d26 🎨 Support sending notifications on HarmonyOS https://github.com/siyuan-note/siyuan/issues/17125
Signed-off-by: Daniel <845765@qq.com>
2026-03-05 23:45:24 +08:00
Daniel
656e676c8b 🎨 Support sending notifications on HarmonyOS https://github.com/siyuan-note/siyuan/issues/17125
Signed-off-by: Daniel <845765@qq.com>
2026-03-05 23:45:23 +08:00
Jeffrey Chen
10dfb0855f ♻️ Adjust template and widget search data structure (#17142) 2026-03-05 18:44:16 +08:00
Daniel
5d98257e51 🎨 Support sending notifications on HarmonyOS https://github.com/siyuan-note/siyuan/issues/17125
Signed-off-by: Daniel <845765@qq.com>
2026-03-05 10:54:54 +08:00
Daniel
51295adb4b 🎨 Support sending notifications on Android https://github.com/siyuan-note/siyuan/issues/17114
Signed-off-by: Daniel <845765@qq.com>
2026-03-05 10:14:24 +08:00
Jeffrey Chen
487e27cb00 ♻️ refactor reloadPlugin (#17137) 2026-03-05 10:11:44 +08:00
Jeffrey Chen
26c378a820 🎨 Unified file listener logic (#17134) 2026-03-04 22:33:35 +08:00
Jeffrey Chen
17d49b481f ♻️ Bazaar adds parameter validation (#17132) 2026-03-04 20:48:12 +08:00