3026f4cd71
build(deps-dev): bump pytest-rerunfailures from 16.2 to 16.3 ( #2698 )
...
Bumps [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures ) from 16.2 to 16.3.
- [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst )
- [Commits](https://github.com/pytest-dev/pytest-rerunfailures/compare/16.2...16.3 )
---
updated-dependencies:
- dependency-name: pytest-rerunfailures
dependency-version: '16.3'
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 11:51:23 +02:00
Soxoj and GitHub
b3f667d908
Fix docs build: dedup link targets, gate SVG badges to HTML ( #2695 )
2026-05-23 10:15:53 +02:00
Soxoj and GitHub
070c086f29
Add docs FAQ for top search queries; document translation workflow; Chinese update ( #2694 )
2026-05-23 09:46:35 +02:00
74b4d3a104
build(deps): bump certifi from 2026.4.22 to 2026.5.20 ( #2689 )
...
Bumps [certifi](https://github.com/certifi/python-certifi ) from 2026.4.22 to 2026.5.20.
- [Commits](https://github.com/certifi/python-certifi/compare/2026.04.22...2026.05.20 )
---
updated-dependencies:
- dependency-name: certifi
dependency-version: 2026.5.20
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 11:05:35 +02:00
c36595dfb2
build(deps): bump idna from 3.15 to 3.16 ( #2692 )
...
Bumps [idna](https://github.com/kjd/idna ) from 3.15 to 3.16.
- [Release notes](https://github.com/kjd/idna/releases )
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md )
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.16 )
---
updated-dependencies:
- dependency-name: idna
dependency-version: '3.16'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 10:15:56 +02:00
900947bd3a
build(deps): bump aiodns from 4.0.3 to 4.0.4 ( #2684 )
...
Bumps [aiodns](https://github.com/aio-libs/aiodns ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/aio-libs/aiodns/releases )
- [Changelog](https://github.com/aio-libs/aiodns/blob/master/ChangeLog )
- [Commits](https://github.com/aio-libs/aiodns/compare/v4.0.3...v4.0.4 )
---
updated-dependencies:
- dependency-name: aiodns
dependency-version: 4.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 21:09:37 +02:00
Soxoj and GitHub
1d67cbe2c7
Enhance README with AI profiling and analysis details ( #2691 )
2026-05-21 19:27:45 +02:00
Soxoj and GitHub
ec7f57eab7
Windows version improvements and docs ( #2690 )
2026-05-21 12:12:17 +02:00
200a8b2cac
build(deps): bump yarl from 1.23.0 to 1.24.2 ( #2685 )
...
---
updated-dependencies:
- dependency-name: yarl
dependency-version: 1.24.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 10:02:22 +02:00
Soxoj and GitHub
2eef1d3d9d
Added 3 sites ( #2687 )
2026-05-20 23:56:40 +02:00
Sebastion and GitHub
e6f53862f5
fix(web): sanitize username in report file paths to prevent path traversal ( #2678 )
...
* fix: sanitize username in report file paths to prevent path traversal (CWE-22)
* address review: add unit tests for sanitize_username_for_path()
2026-05-20 23:55:17 +02:00
Soxoj and GitHub
992da86284
Added donation links ( #2686 )
2026-05-20 23:53:29 +02:00
6e51025f15
build(deps-dev): bump black from 26.5.0 to 26.5.1 ( #2680 )
...
Bumps [black](https://github.com/psf/black ) from 26.5.0 to 26.5.1.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/26.5.0...26.5.1 )
---
updated-dependencies:
- dependency-name: black
dependency-version: 26.5.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 12:34:11 +02:00
1f4db039b6
build(deps): bump lxml from 6.1.0 to 6.1.1 ( #2681 )
...
Bumps [lxml](https://github.com/lxml/lxml ) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/lxml/lxml/releases )
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt )
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1 )
---
updated-dependencies:
- dependency-name: lxml
dependency-version: 6.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 10:52:29 +02:00
2a1b458941
build(deps-dev): bump tuna from 0.5.13 to 0.5.15 ( #2683 )
...
Bumps [tuna](https://github.com/nschloe/tuna ) from 0.5.13 to 0.5.15.
- [Release notes](https://github.com/nschloe/tuna/releases )
- [Commits](https://github.com/nschloe/tuna/compare/v0.5.13...v0.5.15 )
---
updated-dependencies:
- dependency-name: tuna
dependency-version: 0.5.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 10:02:30 +02:00
4dd4dbe048
build(deps): bump aiodns from 4.0.0 to 4.0.3 ( #2677 )
...
Bumps [aiodns](https://github.com/aio-libs/aiodns ) from 4.0.0 to 4.0.3.
- [Release notes](https://github.com/aio-libs/aiodns/releases )
- [Changelog](https://github.com/aio-libs/aiodns/blob/master/ChangeLog )
- [Commits](https://github.com/aio-libs/aiodns/compare/v4.0.0...v4.0.3 )
---
updated-dependencies:
- dependency-name: aiodns
dependency-version: 4.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 11:46:41 +02:00
500c026b8b
build(deps-dev): bump black from 26.3.1 to 26.5.0 ( #2676 )
...
Bumps [black](https://github.com/psf/black ) from 26.3.1 to 26.5.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.0 )
---
updated-dependencies:
- dependency-name: black
dependency-version: 26.5.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 11:46:21 +02:00
Soxoj and GitHub
ceed9aa9cc
fix(Instagram): refresh rate-limit marker for stale Login title ( #2674 )
2026-05-16 18:23:13 +02:00
Soxoj and GitHub
51a5169987
fix(checking): reject URLs and emails extracted as usernames ( #2673 )
...
Closes #1403
2026-05-16 17:52:00 +02:00
Soxoj and GitHub
3e77c13743
Document Tor/proxy usage, add Advanced usage docs section ( closes #544 ) ( #2663 )
2026-05-16 14:42:36 +02:00
Soxoj and GitHub
c5885331d6
Bump to 0.6.1 ( #2661 )
2026-05-16 12:05:55 +02:00
Soxoj and GitHub
c1674529ad
Fix site checks: 2 fixed, 3 disabled; add Faceit; fix utils import ( #2660 )
2026-05-15 18:15:38 +02:00
8e8968b86d
build(deps): bump requests from 2.34.1 to 2.34.2 ( #2658 )
...
Bumps [requests](https://github.com/psf/requests ) from 2.34.1 to 2.34.2.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.34.1...v2.34.2 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.34.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 14:34:11 +02:00
Soxoj and GitHub
a7338e97f3
Make xhtml2pdf optional, fix install on Linux without libcairo ( #2659 )
...
* Make xhtml2pdf optional, fix install on Linux without libcairo
Move xhtml2pdf to the new [pdf] extra so default `pip install maigret`
no longer pulls pycairo (which has no Linux/macOS wheels and breaks the
build without libcairo2-dev). save_pdf_report now raises a clear
RuntimeError pointing to `pip install 'maigret[pdf]'`, and the CLI
turns it into a friendly warning instead of a crash. Adds tests
covering the missing-extra path, plus per-OS install docs.
Fix for #2657 , #2534
* Make arabic-reshaper and python-bidi optional; idempotent update of db_meta.json and sites.md
* Regenerated poerty.lock
* Update CI workflow to cover minimal installation without PDF deps
2026-05-15 14:33:55 +02:00
bf84125f3a
build(deps): bump python-bidi from 0.6.9 to 0.6.10 ( #2655 )
...
Bumps [python-bidi](https://github.com/MeirKriheli/python-bidi ) from 0.6.9 to 0.6.10.
- [Release notes](https://github.com/MeirKriheli/python-bidi/releases )
- [Changelog](https://github.com/MeirKriheli/python-bidi/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/MeirKriheli/python-bidi/compare/v0.6.9...v0.6.10 )
---
updated-dependencies:
- dependency-name: python-bidi
dependency-version: 0.6.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:05:19 +02:00
cf0b7cce80
build(deps-dev): bump pytest-rerunfailures from 16.1 to 16.2 ( #2654 )
...
Bumps [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures ) from 16.1 to 16.2.
- [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst )
- [Commits](https://github.com/pytest-dev/pytest-rerunfailures/compare/16.1...16.2 )
---
updated-dependencies:
- dependency-name: pytest-rerunfailures
dependency-version: '16.2'
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 14:52:40 +02:00
69f4e97541
build(deps): bump requests from 2.33.1 to 2.34.1 ( #2656 )
...
Bumps [requests](https://github.com/psf/requests ) from 2.33.1 to 2.34.1.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.33.1...v2.34.1 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.34.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 13:26:38 +02:00
ef37855d78
build(deps): bump reportlab from 4.5.0 to 4.5.1 ( #2645 )
...
Bumps [reportlab](https://www.reportlab.com/ ) from 4.5.0 to 4.5.1.
---
updated-dependencies:
- dependency-name: reportlab
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-13 22:20:52 +02:00
50aa454ff6
build(deps): bump idna from 3.14 to 3.15 ( #2647 )
...
Bumps [idna](https://github.com/kjd/idna ) from 3.14 to 3.15.
- [Release notes](https://github.com/kjd/idna/releases )
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md )
- [Commits](https://github.com/kjd/idna/compare/v3.14...v3.15 )
---
updated-dependencies:
- dependency-name: idna
dependency-version: '3.15'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-13 15:38:50 +02:00
Raz Ben Yaish and GitHub
650f990547
test(checking): cover CurlCffiChecker proxy forwarding ( #2652 )
2026-05-13 13:33:17 +02:00
Raz Ben Yaish and GitHub
b3c216eaac
fix(Gravatar): refresh stale usernameClaimed sample ( #2651 )
2026-05-13 13:03:42 +02:00
Raz Ben Yaish and GitHub
8483777810
fix(checking): apply --proxy to CurlCffiChecker ( #2648 )
2026-05-13 12:57:47 +02:00
Raz Ben Yaish and GitHub
4d7c146fef
fix(linktr.ee): switch detector from message check to status_code ( #2649 )
2026-05-13 12:37:38 +02:00
Raz Ben Yaish and GitHub
785776021b
fix(Duolingo): refresh stale usernameClaimed sample ( #2650 )
2026-05-13 12:14:40 +02:00
1e99b6a07c
build(deps-dev): bump mypy from 2.0.0 to 2.1.0 ( #2644 )
...
Bumps [mypy](https://github.com/python/mypy ) from 2.0.0 to 2.1.0.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v2.0.0...v2.1.0 )
---
updated-dependencies:
- dependency-name: mypy
dependency-version: 2.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 13:40:03 +02:00
3d545dbcfd
build(deps): bump urllib3 from 2.6.3 to 2.7.0 ( #2642 )
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0 )
---
updated-dependencies:
- dependency-name: urllib3
dependency-version: 2.7.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:21:07 +02:00
Soxoj and GitHub
203d712fa5
Update links to the community Telegram bot ( #2641 )
2026-05-11 19:41:43 +02:00
d50c80ff68
build(deps): bump idna from 3.13 to 3.14 ( #2639 )
...
Bumps [idna](https://github.com/kjd/idna ) from 3.13 to 3.14.
- [Release notes](https://github.com/kjd/idna/releases )
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst )
- [Commits](https://github.com/kjd/idna/compare/v3.13...v3.14 )
---
updated-dependencies:
- dependency-name: idna
dependency-version: '3.14'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 10:26:11 +02:00
594f4ca903
build(deps-dev): bump coverage from 7.13.5 to 7.14.0 ( #2638 )
...
Bumps [coverage](https://github.com/coveragepy/coveragepy ) from 7.13.5 to 7.14.0.
- [Release notes](https://github.com/coveragepy/coveragepy/releases )
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst )
- [Commits](https://github.com/coveragepy/coveragepy/compare/7.13.5...7.14.0 )
---
updated-dependencies:
- dependency-name: coverage
dependency-version: 7.14.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 10:26:00 +02:00
f413603431
fix(security): harden /reports path containment via send_from_directory ( #2635 )
...
The previous /reports/<path:filename> handler resolved the filename with
os.path.normpath and gated send_file on file_path.startswith(REPORTS_FOLDER).
Plain ../ traversal was rejected because the resolved path no longer started
with REPORTS_FOLDER, but a sibling-prefix variant slipped through: a request
of the form ..%2F<reports_root_basename>2/<file> resolves to a path like
/tmp/maigret_reports2/<file>, which still starts with /tmp/maigret_reports
and was served back to the caller.
Replace the manual normpath+startswith check with Flask's send_from_directory,
which delegates to werkzeug.security.safe_join. safe_join enforces a real
boundary against the resolved directory, rejects absolute paths, and refuses
.. segments that escape the root.
Tests: 4 new test_download_report_* cases in tests/test_web.py covering the
happy path, ../ traversal, the sibling-prefix bypass (regression test —
fails on the pre-fix code, passes on the new code), and absolute paths.
Detected by Aeon + manual review of maigret.web.app.
Severity: low (web UI defaults to FLASK_HOST=127.0.0.1; the Docker `web`
target binds 0.0.0.0; exploitation reads files from sibling /tmp directories,
which is bounded by who can place files there).
CWE-22.
Co-authored-by: aeonframework <aeon-bot@aaronjmars.com >
2026-05-10 17:12:51 +03:00
Soxoj and GitHub
adbeb53618
Update download badge links in README.md ( #2636 )
2026-05-10 10:43:05 +03:00
Soxoj and GitHub
264bae34d6
Add test for CheckError bug ( #2631 )
2026-05-09 16:11:07 +03:00
idontknow and GitHub
9838176205
Fix context field using class instead of instance in error handling ( #2627 )
...
In process_site_result(), when a check_error is present, the context
field was set to str(CheckError) (the class itself) instead of
str(check_error) (the error instance). This caused the context to
contain the string representation of the class rather than the actual
error message.
Before fix: context = "<class 'maigret.errors.CheckError'>"
After fix: context = "Request timeout error: slow server"
2026-05-09 10:58:06 +03:00
Soxoj and GitHub
5c93b206e7
Cloudflare bypass webgate ( #2628 )
2026-05-09 10:48:43 +03:00
b98a134fcf
build(deps-dev): bump mypy from 1.20.2 to 2.0.0 ( #2625 )
...
Bumps [mypy](https://github.com/python/mypy ) from 1.20.2 to 2.0.0.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v1.20.2...v2.0.0 )
---
updated-dependencies:
- dependency-name: mypy
dependency-version: 2.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-07 23:52:15 +03:00
1258ee0898
build(deps): bump python-bidi from 0.6.7 to 0.6.9 ( #2622 )
...
Bumps [python-bidi](https://github.com/MeirKriheli/python-bidi ) from 0.6.7 to 0.6.9.
- [Release notes](https://github.com/MeirKriheli/python-bidi/releases )
- [Changelog](https://github.com/MeirKriheli/python-bidi/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/MeirKriheli/python-bidi/compare/v0.6.7...v0.6.9 )
---
updated-dependencies:
- dependency-name: python-bidi
dependency-version: 0.6.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 10:55:08 +02:00
Soxoj and GitHub
79e93ab715
AI mode documentation ( #2620 )
2026-05-05 22:21:00 +02:00
Danilo Salve and GitHub
52c8917e2c
refactor:reduces the cognitive complexity of get_ai_analysis ( #2581 )
2026-05-05 20:52:34 +02:00
Soxoj and GitHub
846feb6e7e
Add web interface tests ( #2619 )
2026-05-05 19:32:01 +02:00
Sayon Dey and GitHub
c510734e5e
Fix network graph height to use viewport units ( #2590 )
2026-05-05 18:46:47 +02:00
