Page MenuHomePhorge
Feed All Stories

Today

avivey created Blog Post: 2025 June: The May Release.
Thu, Jun 5, 16:53
avivey updated the post content for Blog Post: DoS attack against Aphlict.
Thu, Jun 5, 16:41 · Aphlict
avivey edited the content of Change Log.
Thu, Jun 5, 16:38
avivey edited the content of 2025.18.
Thu, Jun 5, 16:37
avivey committed rP320e23afc8e4: Promote 2025.18 to stable.
Thu, Jun 5, 16:35
avivey changed the edit policy for Releasers.
Thu, Jun 5, 16:35
avivey added a member for Releasers: avivey.
Thu, Jun 5, 16:35
Policy changed the edit policy for Releasers.
Thu, Jun 5, 16:34
avivey committed rARC88b004a3882d: Promote '2025.18' to stable.
Thu, Jun 5, 16:31
aklapper requested review of D26069: PHPDoc: Replace non-existing return type pair with array.
Thu, Jun 5, 12:29
aklapper requested review of D26068: PHPDoc: Replace non-existing return type const with string(|int).
Thu, Jun 5, 12:22
aklapper requested review of D26067: PHPDoc: Replace non-existing return type const with string.
Thu, Jun 5, 12:16
aklapper requested review of D26066: PHPDoc: Replace non-existing return type tuple with array.
Thu, Jun 5, 12:15
aklapper requested review of D26065: PHPDoc: Replace non-existing return type tuple with array.
Thu, Jun 5, 12:12
aklapper requested review of D26064: PHPDoc: Replace non-existing return type markup with string.
Thu, Jun 5, 11:59
aklapper requested review of D26063: PHPDoc: Replace non-existing return type bitmask with string.
Thu, Jun 5, 11:47
valerio.bozzolan accepted D26062: transaction.search: Fix PhpDoc.
Thu, Jun 5, 11:43
aklapper requested review of D26062: transaction.search: Fix PhpDoc.
Thu, Jun 5, 11:41
avivey added a member for Trusted Contributors: A_smart_kitten.
Thu, Jun 5, 10:29
A_smart_kitten removed a member for Trusted Contributors: A_smart_kitten.
Thu, Jun 5, 10:26
aklapper closed D26061: Fix PHP 8.1 "strlen(null)" exception for no query in primary search.
Thu, Jun 5, 08:51
aklapper committed rP6d219783408b: Fix PHP 8.1 "strlen(null)" exception for no query in primary search.
Thu, Jun 5, 08:51
valerio.bozzolan accepted D26061: Fix PHP 8.1 "strlen(null)" exception for no query in primary search.

sgtm

Thu, Jun 5, 08:24
aklapper requested review of D26061: Fix PHP 8.1 "strlen(null)" exception for no query in primary search.
Thu, Jun 5, 07:34
aklapper planned changes to D26055: Restrict maximum number of search tokens per query to 16.

I realize that this my own patch would create a problem for our own downstream glue code, as we create external search links like
http://phorge.localhost/search/?search:primary=true&search:scope=open-tasks&query=%22Wikimedia%5CRdbms%5CDBQueryError%3A%22%20%22Error%22%20%221146%3A%22%20%22Table%22%20%22%27database.table%27%22%20%22doesn%27t%22%20%22exist%22%20%22Function%3A%22%20%22Foo%5CBar%5CBaz%5CBla%3A%3AdoStuff%22%20%22Query%3A%22%20%22DELETE%22%20%22FROM%22%20%22%60function%22#R so I should likely raise the threshold at least.

Thu, Jun 5, 06:59
aklapper added a comment to D26060: PhpDoc: Replace non-standard dict type with array.

Nah, LC_ALL=C won't change anything. (My system is already in variants of English.)

Thu, Jun 5, 06:39

Yesterday

valerio.bozzolan added a comment to D26060: PhpDoc: Replace non-standard dict type with array.

Unrelated troubleshooting but what about this?

Wed, Jun 4, 20:03
aklapper updated the diff for D26044: a11y: Add aria-label to global search field in top bar.

Mark string as translatable

Wed, Jun 4, 19:36
aklapper added a comment to D26060: PhpDoc: Replace non-standard dict type with array.

P.S. why is your local unit test failing?

Cannot reproduce:

arc unit src/parser/__tests__/ArcanistBundleTestCase.php
Wed, Jun 4, 18:39
valerio.bozzolan added a comment to D25501: Feed: Do not query and display data of uninstalled applications.

What about landing this?

Wed, Jun 4, 18:23
chris added a member for Blessed Committers: mainframe98.
Wed, Jun 4, 18:08
aklapper updated the diff for D26022: Show image preview thumbnails on Authored Files.

aaaand now, as I was mumbling aloud, maybe super-nice to move the $xform = definition out the foreach, so, we can move this up

(extra extra bonus bonus point: once it's up, we can find the $xform only if it's necessary)

Wed, Jun 4, 18:04
Cigaryno added a comment to T15059: we.phorge.it doesn't email @icloud.com addresses.

I am receiving notification emails from @outlook.com addresses just fine.

Wed, Jun 4, 17:30 · phorge.it install
valerio.bozzolan added inline comments to D26022: Show image preview thumbnails on Authored Files.
Wed, Jun 4, 17:30
Cigaryno renamed T15059: we.phorge.it doesn't email @icloud.com addresses from we.phorge.it doesn't email @outlook.com addresses to we.phorge.it doesn't email @icloud.com addresses.
Wed, Jun 4, 17:29 · phorge.it install
Cigaryno added a comment to T16091: Allow non-members of the Trusted Contributors group to file security tasks.

Actually, at some point it was once possible for non-members of Trusted Contributors to create security tasks. Maybe spammers created spam tasks using the security task form, forcing admins to hide the security task form from non-members of Phactory: Community Projects

Wed, Jun 4, 17:28 · Security, phorge.it install
aklapper added a comment to D26022: Show image preview thumbnails on Authored Files.

I'm still clueless if this could be more optimized somehow given my lack of understanding of the thumbnail software stack. Just saying.

Wed, Jun 4, 17:05
aklapper updated the diff for D26022: Show image preview thumbnails on Authored Files.

Do as Valerio says

Wed, Jun 4, 17:04
aklapper updated the diff for D26022: Show image preview thumbnails on Authored Files.

A rather boring git rebase master with no particular exciting new features

Wed, Jun 4, 16:58
aklapper edited the content of Organizations Using Phorge.
Wed, Jun 4, 16:38
aklapper accepted D26041: Fix ArcanistWorkflow::shouldRequireCleanUntrackedFiles.

Darrn, I also wanted to accept this but somehow closed this tab. Sorry :D

Wed, Jun 4, 16:32
valerio.bozzolan accepted D26041: Fix ArcanistWorkflow::shouldRequireCleanUntrackedFiles.

lgtm

Wed, Jun 4, 14:50
valerio.bozzolan added inline comments to D25872: Implements arc work for git workflow.
Wed, Jun 4, 14:17
valerio.bozzolan added inline comments to D26027: Profile picture destroy: implement Before-Destruction engine to restore the builtin image.
Wed, Jun 4, 13:36
valerio.bozzolan updated the diff for D26027: Profile picture destroy: implement Before-Destruction engine to restore the builtin image.

improve PHPDoc thanks to amybones

Wed, Jun 4, 13:35
valerio.bozzolan added inline comments to D26022: Show image preview thumbnails on Authored Files.
Wed, Jun 4, 13:03
valerio.bozzolan accepted D26060: PhpDoc: Replace non-standard dict type with array.

P.S. why is your local unit test failing?

Wed, Jun 4, 10:12
aklapper updated the diff for D26060: PhpDoc: Replace non-standard dict type with array.

more

Wed, Jun 4, 08:34
keithzg edited the content of Organizations Using Phorge.
Wed, Jun 4, 08:01
aklapper requested review of D26060: PhpDoc: Replace non-standard dict type with array.
Wed, Jun 4, 07:55

Tue, Jun 3

valerio.bozzolan accepted D26059: PhpDoc: Replace non-standard dict type with array.

What could go wrong

Tue, Jun 3, 20:44
aklapper requested review of D26059: PhpDoc: Replace non-standard dict type with array.
Tue, Jun 3, 18:10
valerio.bozzolan added a comment to D25772: Projects: improve quality of destroy workflow.

I'm happy because when a coworker creates a new sub-project "Nonsense Sub", now you can just destroy it (the project, not the coworker lol) and everything is rollbacked as before successfully.

Tue, Jun 3, 14:27 · Projects
valerio.bozzolan updated the summary of D25772: Projects: improve quality of destroy workflow.
Tue, Jun 3, 14:20 · Projects
valerio.bozzolan added a comment to D25772: Projects: improve quality of destroy workflow.

Added a "Limitations" section to clarify what this patch is not about, and clarifying why direct Milestones must be removed (so you don't need to read all the subtasks)

Tue, Jun 3, 14:16 · Projects
valerio.bozzolan updated the summary of D25772: Projects: improve quality of destroy workflow.
Tue, Jun 3, 14:16 · Projects
aklapper added a comment to D26037: Add phpDoc to PhabricatorCursorPagedPolicyAwareQuery.

After applying this patch, phpstan throws a bunch of additional output here, like Class PhabricatorAuthPasswordQuery extends generic class PhabricatorCursorPagedPolicyAwareQuery but does not specify its types: R and such. Probably that is totally fine. Just saying, as a phpstan newbie.

Tue, Jun 3, 12:13
aklapper closed T16093: "NOT" search token tag uses an icon and no tooltip in Global Search results as Resolved by committing rPa638bafe5103: Add tooltip for "not" search token tag in Global Search results.
Tue, Jun 3, 11:44
aklapper closed D26057: Add tooltip for "not" search token tag in Global Search results.
Tue, Jun 3, 11:44
aklapper committed rPa638bafe5103: Add tooltip for "not" search token tag in Global Search results.
Tue, Jun 3, 11:44
aklapper retitled D26057: Add tooltip for "not" search token tag in Global Search results from Drop icon for "not" search token tag in Global Search results
Tue, Jun 3, 11:43
valerio.bozzolan edited the content of Organizations Using Phorge.
Tue, Jun 3, 11:38
valerio.bozzolan accepted D26057: Add tooltip for "not" search token tag in Global Search results.

Macro basketslam:  Acceeeeept

Tue, Jun 3, 11:16
valerio.bozzolan added a comment to T16094: Duplicated Query search tokens also create duplicate SQL query constructs.

If somebody can share the resulting query, to compare it A/B, that would be super

Tue, Jun 3, 11:15
aklapper updated the diff for D26057: Add tooltip for "not" search token tag in Global Search results.

Put minus icon back in

Tue, Jun 3, 10:57
aklapper retitled D26057: Add tooltip for "not" search token tag in Global Search results from Drop icon for "not" search token tag in Global Search results
Tue, Jun 3, 10:57
aklapper planned changes to D26058: Remove duplicate Query search tokens before constructing SQL queries.

Pasting full unit test output here before garbage collection kicks in:

Assertion failed, expected values to be equal (at PhutilSearchQueryCompilerTestCase.php:303): Function compilation of query: cat title:="Meow Meow"
Expected vs Actual Output Diff
--- Old Value
+++ New Value
@@ -1,18 +1 @@
-Array
-(
-    [0] => Array
-        (
-            [0] => 
-            [1] => and
-            [2] => cat
-        )
-
-    [1] => Array
-        (
-            [0] => title
-            [1] => exact
-            [2] => Meow Meow
-        )
-
-)
-
+false
Tue, Jun 3, 10:45
aklapper requested review of D26058: Remove duplicate Query search tokens before constructing SQL queries.
Tue, Jun 3, 10:42
aklapper added a revision to T16094: Duplicated Query search tokens also create duplicate SQL query constructs: D26058: Remove duplicate Query search tokens before constructing SQL queries.
Tue, Jun 3, 10:42
aklapper added a comment to T16094: Duplicated Query search tokens also create duplicate SQL query constructs.
  1. Go to http://phorge.localhost/search/query/advanced/
  2. In the Query field enter z a a "a phrase" a a a a ~a -b =foo title:u which includes duplicate values
  3. Click Search button
Tue, Jun 3, 10:35
aklapper created T16094: Duplicated Query search tokens also create duplicate SQL query constructs.
Tue, Jun 3, 10:31
aklapper renamed T16093: "NOT" search token tag uses an icon and no tooltip in Global Search results from Search token tags inconsistently use icons and tooltips in Global Search results to "NOT" search token tag uses an icon and no tooltip in Global Search results.
Tue, Jun 3, 10:30
valerio.bozzolan added a comment to T16093: "NOT" search token tag uses an icon and no tooltip in Global Search results.

I think the description of this task should be "It's too much difficult to understand what that red thing is about" or something similar

Tue, Jun 3, 10:17
valerio.bozzolan added a comment to D26057: Add tooltip for "not" search token tag in Global Search results.

I very much like the new tip,

Tue, Jun 3, 10:14
aklapper requested review of D26057: Add tooltip for "not" search token tag in Global Search results.
Tue, Jun 3, 09:35
aklapper added a revision to T16093: "NOT" search token tag uses an icon and no tooltip in Global Search results: D26057: Add tooltip for "not" search token tag in Global Search results.
Tue, Jun 3, 09:35
aklapper created T16093: "NOT" search token tag uses an icon and no tooltip in Global Search results.
Tue, Jun 3, 09:32
aklapper updated the diff for D26056: Mention number of search tokens for Global Search result.

Don't output "1 Terms" but "x Term(s)"

Tue, Jun 3, 09:28
aklapper requested review of D26056: Mention number of search tokens for Global Search result.
Tue, Jun 3, 09:27
aklapper added a revision to T16092: Explicitly mention number of search tokens for Global Search result: D26056: Mention number of search tokens for Global Search result.
Tue, Jun 3, 09:27
aklapper added a comment to T16092: Explicitly mention number of search tokens for Global Search result.

Before:

Screenshot From 2025-06-03 11-21-56.png (220×1 px, 21 KB)

Tue, Jun 3, 09:26
aklapper created T16092: Explicitly mention number of search tokens for Global Search result.
Tue, Jun 3, 09:25
valerio.bozzolan accepted D26037: Add phpDoc to PhabricatorCursorPagedPolicyAwareQuery.

It seems that Diviner still runs. Well done both for double-checking.

Tue, Jun 3, 08:53
A_smart_kitten created T16091: Allow non-members of the Trusted Contributors group to file security tasks.
Tue, Jun 3, 08:45 · Security, phorge.it install
valerio.bozzolan updated the test plan for D26037: Add phpDoc to PhabricatorCursorPagedPolicyAwareQuery.
Tue, Jun 3, 08:40
A_smart_kitten added a member for Trusted Contributors: avm99963.
Tue, Jun 3, 08:24
A_smart_kitten added Q183: Possible DOS in Phorge instances (Answer 225).
Tue, Jun 3, 08:24
A_smart_kitten added a project to Q177: Should it be easier for non-community-members to submit security reports?: Security.
Tue, Jun 3, 08:14 · Security
valerio.bozzolan accepted D26043: Correct Conduit project.search color result for milestones.

sgtm

Tue, Jun 3, 07:41
valerio.bozzolan added a comment to D26040: Add missing ArcanistWorkflow::runWorkflow method.

(about my last phrase I just mean we can have everywhere protected function runWorkflow() and we can avoid to introduce the argument - so for example we could rollback the file PhageExecWorkflow.php 🤯 🤯 🤯 lol )

Tue, Jun 3, 05:48
valerio.bozzolan updated the test plan for D26040: Add missing ArcanistWorkflow::runWorkflow method.
Tue, Jun 3, 05:31
valerio.bozzolan added a comment to D26040: Add missing ArcanistWorkflow::runWorkflow method.

(You are soo fast woow)

Tue, Jun 3, 05:30

Mon, Jun 2

amybones added a comment to D26037: Add phpDoc to PhabricatorCursorPagedPolicyAwareQuery.

Yes to the idea however a related elephant in the room (IMHO) are those non-standard types like list or map or wild being replaced, no clue if that has any effects on...something™ (Diviner docs? Code?) as I haven't managed to understand the consequences of code in https://we.phorge.it/source/arcanist/browse/master/src/parser/PhutilTypeSpec.php yet. (Technically speaking map and list seem to be just arrays, indeed.)

Mon, Jun 2, 23:31
amybones added a comment to D26039: LiskDAO::getConfiguration return typing.

Yeah, I've been wanting to put up a codemod diffs that get rid of all the custom types: wild, dict, dictionary, map, etc. None of these are understood by modern phpdoc tooling and while we could configure phpstan to understand them, it's probably easiest to just use whatever everyone else is using, especially because some editor extensions don't have a way to add custom types so we'd be leaving potential contributors at a disadvantage if they don't have phpstan.

Mon, Jun 2, 23:25
amybones requested review of D26040: Add missing ArcanistWorkflow::runWorkflow method.
Mon, Jun 2, 23:21
amybones updated the diff for D26040: Add missing ArcanistWorkflow::runWorkflow method.

Update signature to protected and add missing argument everywhere.

Mon, Jun 2, 23:20
amybones planned changes to D26040: Add missing ArcanistWorkflow::runWorkflow method.

Running phpstan analyse, [...] Method ArcanistWorkflow::runWorkflow() invoked with 1 parameter, 0 required, both in src/workflow/ArcanistWorkflow.php:227. That looks like an improvement indeed.

Mon, Jun 2, 22:22
amybones added a comment to D26040: Add missing ArcanistWorkflow::runWorkflow method.

Keeping it protected will throw Protected method PhageExecWorkflow::runWorkflow() overriding public method ArcanistWorkflow::runWorkflow() should also be public.

Exactly what I mean: this patch introduced a public method, but what about just introducing a protected method? and rollback src/phage/workflow/PhageExecWorkflow.php

Mon, Jun 2, 22:14
Cigaryno added a comment to Q183: Possible DOS in Phorge instances.
In Q183#2249, @aklapper wrote:

Hi and welcome, thanks for bringing this up! I guess you could Edit Question and change the View Policy of this Ponder Question to either "Trusted Contributors", or something more restrictive via the "Custom Policy" option, like administrators and subscribers, or such.

Mon, Jun 2, 20:17 · Security
aklapper added a comment to Q183: Possible DOS in Phorge instances.

Hi and welcome, thanks for bringing this up! I guess you could Edit Question and change the View Policy of this Ponder Question to either "Trusted Contributors", or something more restrictive via the "Custom Policy" option, like administrators and subscribers, or such.

Mon, Jun 2, 20:05 · Security