187 Commits

Author SHA1 Message Date
Nova Kwok
d104c1fbca
Print all CVE results to PR comment (#130) 2022-07-02 15:00:53 +08:00
dependabot[bot]
9efead2479
Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#128)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-30 17:18:27 +08:00
Nova Kwok
3dd1bae938
Add CVE test on CI (#129)
* Add CVE test on CI

* Update

* Update
2022-06-30 17:14:07 +08:00
dependabot[bot]
49b20236e9
Bump github.com/valyala/fasthttp from 1.37.0 to 1.38.0 (#127)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.37.0 to 1.38.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.37.0...v1.38.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 10:41:06 +08:00
dependabot[bot]
fd40f577ce
Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 (#126)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.4...v1.7.5)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-24 11:32:44 +08:00
dependabot[bot]
4d422bfc9a
Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 (#125)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.4.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.4)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-21 12:08:26 +08:00
n0vad3v
bfbd08acdf Bump version in config to 0.4.5 2022-06-19 15:49:49 +08:00
Nova Kwok
794135e675
Add asterisk support on allowed type on config.json (#97) 2022-06-15 15:42:08 +08:00
dependabot[bot]
62d16e58e3
Bump github.com/valyala/fasthttp from 1.36.0 to 1.37.0 (#121)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.36.0 to 1.37.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.36.0...v1.37.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 15:35:47 +08:00
dependabot[bot]
bd8e3b2418
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#122)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.1 to 1.7.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.1...v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-15 15:26:11 +08:00
dependabot[bot]
cf1a4c2d2e
Bump github.com/valyala/fasthttp from 1.35.0 to 1.36.0 (#118)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.35.0 to 1.36.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.35.0...v1.36.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-03 15:11:37 +08:00
dependabot[bot]
ea1617d8f4
Bump github.com/valyala/fasthttp from 1.34.0 to 1.35.0 (#115)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.34.0 to 1.35.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.34.0...v1.35.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-06 10:52:43 +08:00
Nova Kwok
6730c7a00d
Use ln rather than cp (#114) 2022-03-26 20:04:29 +08:00
Nova Kwok
b4e3e1d76f
Update README (#113) 2022-03-25 10:51:49 +08:00
dependabot[bot]
946cad9699
Bump github.com/valyala/fasthttp from 1.18.0 to 1.34.0 (#102)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.18.0 to 1.34.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.18.0...v1.34.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-24 21:28:58 +08:00
Nova Kwok
7fcc0b0e5e
Fix tests. (#112)
Update .gitignore to ignore builds/ directory
2022-03-24 21:25:44 +08:00
Nova Kwok
8d3e493931
Fix README.md (#111) 2022-03-24 15:18:28 +08:00
Benny
527825993a
Create codeql-analysis.yml (#98) 2022-03-24 15:14:03 +08:00
dependabot[bot]
c3c7881d86
Bump github.com/schollz/progressbar/v3 from 3.8.5 to 3.8.6 (#101)
Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.8.5 to 3.8.6.
- [Release notes](https://github.com/schollz/progressbar/releases)
- [Commits](https://github.com/schollz/progressbar/compare/v3.8.5...v3.8.6)

---
updated-dependencies:
- dependency-name: github.com/schollz/progressbar/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-24 15:13:23 +08:00
dependabot[bot]
a76ac504f2
Bump github.com/stretchr/testify from 1.3.0 to 1.7.1 (#105)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.3.0 to 1.7.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.3.0...v1.7.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-24 15:13:14 +08:00
Nova Kwok
fd3013b2eb
Testing out lower glibc version (#110)
* Usiing lower glibc version
2022-03-24 14:58:47 +08:00
Nova Kwok
64db6cc199
Try to mitigate cocurrency problem (#107)
* Try to mitigate cocurrency problem

* Remove getFileContentType in funcion

* Bump to 0.4.3 after fix
2022-03-20 16:45:07 +08:00
Nova Kwok
88daad2a05
Always check for file extension (#103) 2022-03-15 11:13:13 +08:00
Nova Kwok
3890db9077
Optimize release procedure (#94)
* Optimize docker release action

* Added ignored-path on CI
2022-01-05 11:02:28 +08:00
n0vad3v
74b0382ab6 Clean Path on routing to mitigate directory traversal, bump version to 0.4.1 2021-12-30 16:44:30 +08:00
BennyThink
49569b306a codecov inside GitHub Actions 2021-12-27 14:17:43 +08:00
dependabot[bot]
21b1394660 Bump github.com/schollz/progressbar/v3 from 3.8.3 to 3.8.5
Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.8.3 to 3.8.5.
- [Release notes](https://github.com/schollz/progressbar/releases)
- [Commits](https://github.com/schollz/progressbar/compare/v3.8.3...v3.8.5)

---
updated-dependencies:
- dependency-name: github.com/schollz/progressbar/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-27 14:08:27 +08:00
Benny
b75bcf35d3
push to ghcr (#90)
* push to ghcr

* remove travis, add badge
2021-12-27 09:48:46 +08:00
Nova Kwok
35c9990e9e
Change docker image name to webpsh/webp-server-go (#89) 2021-12-22 22:07:48 +08:00
Benny
4d04f7e3bc
Merge pull request #85 from webp-sh/fix-on-docker-image-and-docs
Fix on docker image and docs
2021-12-12 21:48:18 +08:00
n0vad3v
bc2a986d70
Add libaom packages to make docker image work 2021-12-12 21:38:27 +08:00
n0vad3v
5e1ede1585
Update config.json and README.md 2021-12-12 20:47:23 +08:00
Benny
88dcc9c873
Merge pull request #84 from webp-sh/release-with-action
Add Action file to release binary on tag
2021-12-12 16:38:47 +08:00
n0vad3v
6c594a9f3a
Add Action file to release binary on tag 2021-12-12 16:36:53 +08:00
Benny
8b0354fff7
Merge pull request #81 from webp-sh/avif 2021-12-12 14:17:09 +08:00
BennyThink
7f1c441b6f
avif encoding speed, disable AVIF by default 2021-12-10 15:18:40 +08:00
n0vad3v
5e033a8f72
Extract checkAllowedType function.
Minor Log text optimization.
2021-12-05 22:20:39 +08:00
BennyThink
67d40b4397
CI and minor fixes
* use GitHub Actions as CI
* bump versions
* Makefile and Dockerfile improvements
* upgrade logrus
2021-12-05 19:21:29 +08:00
BennyThink
7c65d5e213
stability enhancement
1. large dimension photos
2. GET /1.webp
3. dependabot
2021-12-04 17:25:26 +08:00
BennyThink
e9543522ae
avif support is almost complete 2021-12-04 17:25:26 +08:00
BennyThink
dbac67fe55
change webpEncoder signature for incoming refator,
auto update enchance: replace binary in place.
2021-12-04 17:25:12 +08:00
Nova Kwok
aa0af31808
Create dependabot.yml (#79) 2021-11-26 15:29:42 +08:00
Benny
c0208dea48
Merge pull request #77 from webp-sh/github_action_builder 2021-07-31 19:44:11 +08:00
BennyThink
66accb3fd9
add github action build 2021-07-31 18:21:09 +08:00
Benny
ba11f29fe0
go 1.16 requires go.sum, thus update .gitignore, add go.sum and update travis. (#73)
https://golang.org/doc/go1.16

Module-aware mode is enabled by default, regardless of whether a go.mod file is present in the current working directory or a parent directory. More precisely, the GO111MODULE environment variable now defaults to on. To switch to the previous behavior, set GO111MODULE to auto.

Build commands like go build and go test no longer modify go.mod and go.sum by default. Instead, they report an error if a module requirement or checksum needs to be added or updated (as if the -mod=readonly flag were used). Module requirements and sums may be adjusted with go mod tidy or go get.
2021-02-18 17:10:11 +08:00
Benny
428192275b
choose webp or png feature (#70)
* support webp_bigger header, add test cases

* fix test case
2021-02-12 16:13:13 +08:00
Benny
878a2ddd0c
remove spec (#69) 2021-02-01 17:00:37 +08:00
Benny
9329ac65fe
fix runtime.GOOS=="windows, add more test cases, bump to newer version of fiber and libwebp (#68)
* fix runtime.GOOS=="windows, add some test cases

test cases are still limited for flag

* update to latest fiber v2.4.0 & libwebp v1.2.0

manually test confirmed
2021-02-01 16:14:23 +08:00
Benny
f5e7ee5273
take advantage of build cache #66 (#67) 2020-12-26 22:12:33 +08:00
Benny
0c08f65be1
fix unsupported browser + proxyMode bug, return 400 for not allow files instead of 500 (#64)
unsupported browser will go for origin, while in proxyMode we don't have cache images.

resolve #61
2020-12-06 14:02:17 +08:00