#👾-core-development
1 messages · Page 211 of 1
I was thinking of making something like that the other day lol, I hate not being able to see my profile in a big server I don't talk in
I was able to make it, however pretty much all of the code changed. What's your thoughts on it?
https://github.com/user-attachments/assets/0ea0285d-8ec6-4d23-b9ad-04dc129fbc2a
If we proceed like this I can push the changes to this pull request, but I would also prefer to have my name moved as the first author since I had to re-do everything
7333f40 Dearrow: Fix thumbnails with default option - Nuckyz
99cd423 fix crashing on canary when searching slash com... - nakoyasha
be02baf MemberCount: fix null safety - Vendicated
40512d7 XSOverlay: fix profile images (#2788) - nyakowint
e6994e1 MentionAvatars: Fix compatibility with ServerIn... - Vendicated
I was able to make it, however pretty much all of the code changed. What's your thoughts on it?
i guess it's fine. but i would like to add checkbox "open server profile on left mouse button" to context menu
I would also prefer to have my name moved as the first author since I had to re-do everything
fair enough
i guess it's fine. but i would like to add checkbox "open server profile on left mouse button" to context menu
will do
will do
ok, and you left me no reasons to be in devs constant, bruh
will do
ok, and you left me no reasons to be in devs constant, bruh
do you wanna do it then?
I wasn't planning to remove you, and I also didn't do any of the changes discarding your work, I just knew it was gonna way more complicated so I chose to do it
will do
ok, and you left me no reasons to be in devs constant, bruh
do you wanna do it then? I wasn't planning to remove you, and I also didn't do any of the changes discarding your work, I just knew it was gonna way more complicated so I chose to do it
adding a checkbox shouldn't be something hard, so at least let me to do it
awwwwwwww, I wanted to keep in on how I got paid for amazon music premium
🔥

Any other problems with this particular patch besides the formatting? Just trying to make sure I get what you are saying here
Keeping up with class names and discords css is very frustrating... I see no need to add any complexity or imports or references to discord classes to my css especially for this little modal, but if you dont agree I can figure it out
add a README.md to your plugin
Not trying to be that guy but
(denied because “can be done with CSS”)
sorry but this is not useful. you can just leave the servers or shove them in some folder (and maybe hide the folder with css if you really want)
definitely doesn't need a plugin
thanks anyway for your contribution
Oh I get what you mean, I'll convert it to be a store
I think I remember seeing a request for it, and I find its really useful, rejoining servers that you need a break from is kind of a pain and annoying and visible. CSS cant really hide stuff from the quick switcher and my impulses.. Either way, I appreciate you all taking a look.
i wish people would stop complaining about things like this
it doesnt matter
its a badge
no one cares
contribute because you want to add something useful, not for a badge
TimeBarAllActivities (had no effect):
ID: 994746
Match: ```
/(0,.{0,30}activity:(\i),className:\i.badges})/g
**__TimeBarAllActivities (had no effect):__**
ID: `994746`
Match: ```
/(\i).type===(\i\.\i)\.WATCHING/
None
None
None
TimeBarAllActivities (had no effect):
ID: 994746
Match: ```
/(0,.{0,30}activity:(\i),className:\i.badges})/g
**__TimeBarAllActivities (had no effect):__**
ID: `994746`
Match: ```
/(\i).type===(\i\.\i)\.WATCHING/
findByProps("activity", "buttonColor")
None
None
Discord Account
Wolfshards (Handle)
What happens when the bug or crash occurs?
Firefox ne peut établir de connexion avec le serveur à l’adresse ws://Redacted/?client=Vencord.
What is the expected behaviour?
Vencord should be able to run plugins and themes without issue but since my browser return with Connection lost, it's just strange that nothing is running except the setting tab.
How do you recreate this bug or crash?
- Install script from Vencord website troug...
me when i cant read
youre the one who cant read
Discord moved where they keep the activity message text, so here's a fix for the patch.
it didn't even last a week before they broke my find TwT
find: ".gameState,children",
Location stuff is related to analytics and more likely to be removed in the future
The "download" and "change language" buttons both have 4px left padding, so this should too.
Didn't know that, will keep that in mind
I've pushed the new implementation, give me your thoughts
ngl that plugin is actually neat
None
None
None
None
None
findByProps("activity", "buttonColor")
None
None
I am too lazy to open a PR, can someone with write access just add badge: false to me?
https://github.com/Vendicated/Vencord/blob/main/src%2Futils%2Fconstants.ts#L40-L43
It's been so long since I've contributed anything, I doubt any line of code I've written still exists in the codebase.
I feel like a badge should not be shown for me.
done
Arigato
None
None
None
None
None
None
None
None
huh
I think I broke testing patches with predicates long ago
and im just noticing now
wrong order lmaoo
that condition should be above
None
None
None
None
None
None
None
None
fixed inconsistency in position between user and server profile. in overall it is incredible. thank you
fixed inconsistency in position between user and server profile. in overall it is incredible. thank you
Thanks for fixing that, I noticed it but didn't think of trying to fix
const styles = findByProps("accountProfilePopoutWrapper");
return (
<div className={styles.accountProfilePopoutWrapper}>
<UserProfile {...popoutProps} userId={currentUser.id} guildId={currentChannel.getGuildId()} channelId={currentChannel.id} />
</div>
);
import { findByPropsLazy, findComponentByCodeLazy } from "@webpack";
@balmy perch thanks for the original idea and sorry for ending up re-doing it all lol
None
None
None
None
I really appreciate your fix and the initial contribution regardless
None
None
None
None
definitely keeping this on hehe
I'll post it on #plugin-news wihtin the next days
you frfr
I have looked at that Api so many times
and everytime it hurt me
Cringest commit in the history of mankind
do yall really not like that
yes Api is better not API
i have OCD i think its better
is there a part in specific
there's so much inconsistency between Api and API in the project
i also instinctively type API
the only place I can maybe agree is in Vencord.Api
everywhere it looks worse
ContextMenuApi looks so shit
User-plugins when breaking changes
no, all of them all capitalisation on it is weird. Api is better
frfr
I disagree
Context, menu, and api are three words
Its like userId
why not do a poll
yes I know how camel case works
pick a style and use that everywhere
me waiting for the revert
almost no userplugins is gonna hardcode Vencord.Api or something like that
but well
I guess on ContextMenuApi
nuh huh
API for the win
fr
we have inconsistency everywhere
I can't vote be because ancient mobile app
acronyms are not to be capitalised in code
i cant on Ripcord either
yet ContextMenuApi
Will vote when I get home I guess
well then we should pick one and use everywhere
it doesn't matter
it's a pr which already organizes a lot of stuff
code is messy
Fix in your finds branch or smth
Oh, I'm.blind
either way it's gonna have breaking changes because the code is inconsistency
still tho Rip every userplugin ever
in some places we use API, in others Api
Not hard to update them
I love apis 🐝
Great idea, add a setting for which to use
ok so we wait the revert of this commit
very uneeded comment
no it's not
erm actually its an initialism
I'm going to bash your head in
fine
this is krystal's fault
I still think at some point stuff needs to be changed
how? i just woke up
it's an active project and the more code quality the better
even if that requires changing a lot of files
for example a more strict eslint rule set too
the consistency is code quality
yes we have intellisense but even then
ColonThree
:3
guhhh
works on my machine 
what commit are you on?
97670e12
guhh
Vencord: v1.10.1 • f48bfd59 (Dev) - 6 Sept 2024
Client: stable ~ Vesktop v1.5.3
Platform: Linux x86_64
⚠️ Vencord DevBuild
⚠️ Has UserPlugins
Vencord: v1.9.8 • 97670e12 (Dev) - 2 Sept 2024
Client: stable ~ Vesktop v1.5.3
Platform: Win32
⚠️ Activity Sharing disabled
⚠️ Vencord DevBuild
⚠️ Has UserPlugins
guhhh im stupid
||pulled lastest commit but didnt rebuild||
Vencord: v1.10.1 • 56459bdc (Dev) - 6 Sept 2024
Client: stable ~ Vesktop v1.5.3
Platform: Linux x86_64
⚠️ Vencord DevBuild
⚠️ Has UserPlugins
with the new profile plugin does anyone think it would be a good idea to move the buttons on the normal profile to the guild one
is the plugin currently broken? git cloneing the channeltab branch, building , and pointing vesktop to that folder doesn't load the plugin
do
None
None
None
None
None
None
None
None
w
where is the vesktop local copy of vencord located? vesktop is currently set to load vencord from the default location but apparently it has "more recent commits" somehow
update: ended up nuking ~/Library/Application Support/vesktop/vencordDist and it fixed itself
sorry i added the more recent commits to your vesktop

I'm sure you can look at any plugins that use them and ur gonna understand
i missed the one line i needed to see 😭
i didnt know plugin requests were closed now 🙏
they are?
god bless
at last, im free
yeah
Thats actually pretty cool
definitely interesting
feel like people going online/offline would absolutely fuck with its brain tho LOL
which
8
12
1
API
ahh
Is this fixed? It was closed and marked as complete but I didn't notice a fix.
how would I do a single find with this?
i mean i think its simple already.
You're overcomplicating it, you can just do
const extraConnections = [
{
name: "Xbox",
input: "name",
link: "https://www.xbox.com/play/user/"
},
{
name: "Epic Games",
input: "id",
link: "https://store.epicgames.com/u/"
},
];
/* ... */
patches: [
{
find: "getPlatformUserUrl:",
replacement: extraConnections.map(connection => {
return {
mat...
i might do something like this, i will remake the thingy again ya hoo!
i didnt fix your second comment, cause that is not really an issue with the vencord plugin
the linked pr fixes what was originally reported in this issue, and it works from my testing (just now).. if you are having a different issue you'll need to elaborate, or send some logs or something
The images are still gray as per the original intent of the reported issue. After checking for updates, there is not update available for the XSOverlay Plugin and images still are not loading for the notifications
What build of XSOverlay are you running (check in their settings ui)? are you using a beta branch? where is the notification coming from (group chat, server, dm...)? if one of the former, does it have a picture set?
I cannot reproduce the same issue post-merge
I'm running the latest live branch (can't open VR atm so I can't give you the exact number but I checked to make sure I wasn't on the beta branch on steam) What do you mean picture set?
use our support channel for support
I FUCKING FORGOT
what'd u forget
me when i try to painstakingly give support over github issues because i have the support channel muted and forgot it existed

woahhhh
damn how'd you get into the most gatekept clan
they declined almost everyone a few months ago
ive neen in it for months
be a guild owner
advertise to guild-joining server
decline literally everyone
get clan removed from guild-joining server because 99% of the comments were "i was declined" or "hope i'm accepted" and get donowalled
oohhhhhhhhh
its just a genshin/gacha server lol she prob declined all the guild badge goblins
iirc it wasnt even added there by the owner so 
OHHHH
average coredev conversation
shiit that makes sense
i dont play enough genshin prob
ar 33 and i do less than 1k damage
nothing will ever be like your server though and polar
polar finds it funny to send the most profane gifs and then i punish him and he still does it
ask @umbral hedge about that, she is the owner
alr i asked in the server
i thought that said polaris then i read it
don’t let Shorty know I actually do find it a little funny
megu in japan rn they probably have better things to do than check applications for their clan

i didnt say they had to chekc it now lool
they should be eating more famichiki instead
converted
nah discord 24/7
ooo nice
there are hundreds of requests and the UI for viewing them is unintuitive
you just gotta ask me
i like the part when it merges branch 'main' into main
As I am Vees alt account, and thus can decide over PRs on GitHub, I shall strike this PR down due to begging for merge.
fair enough i didnt think to ask u tbh 
@fossil inlet, <t:1725320656:R>: fix
None
None
None
None
None
None
None
None
is the webpack instance always the thrid argument in webpack modules
I love force push ( please discard changes for dearrow )
Also, should I sacrifice a cockroach to get this moving? :pleadey:
go for it (randomly saw this pop up in my notifs so i hope it gets merged soon)
yes
TimeBarAllActivities (had no effect):
ID: 994746
Match: ```
/(0,.{0,30}activity:(\i),className:\i.badges})/g
**__TimeBarAllActivities (had no effect):__**
ID: `994746`
Match: ```
/(\i).type===(\i\.\i)\.WATCHING/
findByProps("activity", "buttonColor")
None
None
TimeBarAllActivities (had no effect):
ID: 994746
Match: ```
/(0,.{0,30}activity:(\i),className:\i.badges})/g
**__TimeBarAllActivities (had no effect):__**
ID: `994746`
Match: ```
/(\i).type===(\i\.\i)\.WATCHING/
findByProps("activity", "buttonColor")
None
None
Any update about this? I'm been waiting for it to be merged
This PR adds a plugin that provides options regarding the configuration of the GIF picker visibility/send behavior.
These behaviors are: (configurable via plugin options)
Gif Visibility Behavior
- Close after sending: The picker will close immediately after sending a GIF. (Default)
- Always keep open: The picker will always remain open after selecting a GIF.
- Keep open when SHIFT is held: Keeps the GIF picker open if the SHIFT key is held down.
GIF Send Be...
For those who delete messages with 30 cps
Any update about this? I'm been waiting for it to be merged
Tbh I also was waiting for it to be merged as all the required changes have been made, the plugin is still working and thus no further work was needed. Still, just to be sure, I'll merge the latest changes from the base branch then try to contact the maintainers to hear what they say
* Amazon Music (Nothing references to the actual Amazon Music user ID in Discord)
* Crunchyroll (Can't view profiles)
i could be wrong but i dont think youre supposed to put spaces where you dont have to.
again, could be wrong, so double check that.
We need
someone should make a plugin to make discord not slow
just rewrite it in rust
rejected (can be done with css)
* {
display: none;
}
discord cant be slow if theres no discord 
way too much yapping that readme
my bad
whats was the issue here? #👾-core-development message
i mean maybe im trippin and dumb, just wanna know 🙆♂️
like
you completely broke the plugin
damn thats op
try that again and now reload your discord after "deleting" the messages
didnt ya just randomly invert the case for no reason?/genq
This is a fork of BlurNSFW, works as BlurNSFW, but its a separate plugin because it have some extra options that are not neccesary in a simple plugin like BlurNSFW+. I will be adding more options in that days.
<already existing plugin>+ my beloved
..Why?
Also its insane to remove Ven from authors when 95% of the code is copied from Ven...
sanest plugin
..Why?
Also its insane to remove Ven from authors when 95% of the code is copied from Ven...
I mentioned in the description but i dont remember to add Ven, will ad rn, one moment
done, tysm <3
Still, why?
The nature of Vencord allows anyone to contribute to any plugin, if you really want your changes in Vencord I suggest just adding the options to the original BlurNSFW. <Plugin>+ is very stupid.
why does GitHub hide the "<Plugin>"..
the badge pr
done, tysm <3
Still, why?
The nature of Vencord allows anyone to contribute to any plugin, if you really want your changes in Vencord I suggest just adding the options to the original BlurNSFW. (Plugin)+ is very stupid.
My idea was making a different plugin because i dont saw any update in BlurNSFW, at the start i made the changes in the original plugin, but i made it different when saw the last update is 9 months ago and i wanted to make it like an "BlurNSFW plugin with ...
either way this is pretty useless because its faster to right click and pin than to bend your hand to press those buttons, also this feels very rushed (especially with the weird key combo and typos)
imo at least
- dont add to devs constant for such minor changes
no update to finished feature means its dead and abandoned surely
then by that logic, replying is pointless too. right-click, reply, done. with pin/unpin there is a confirm widget that you want to pin it, which takes even more clicks. so, i really dont get 🤷♂️
also based on the code structure, this isnt that "minor change" since it adds 2 more functions to the previous 3, which is a decent ratio
i mean okay, i understand, but still
obv, if you have a better idea for the key combo, im all ears. for me its a quick option, but sure, it can vary
"2 more functions"..?
Also the difference between pinning and replying is that replying is an action you do often and pinning is an action you do once a month
pins is also a place to put important message (at least intended to by discord) so having a shortcut to it might make you pin unnecessary messages
i doubt anyone is going to really use this, but i mean there are a couple of features that barely anyone uses so my largest problem is that this seems more like a band aid patch for the contributor badge instead of something more thought out
something more thought out wouldve not had the typo, the inconsistencies in the settings description (random capitalisation) and allow for more customisation instead of hardcoded binds
stuff like this is ofc fine on a smaller plugin, but once it gets expanded it should be addressed (reason for openinapp rewrite) but that is just my opinion on it
u're partly right, but i actually did this a long time ago, before the plugins were refactored. at that time, pull requests were also paused for some reason, and it was mentioned in the pull request that it would be merged. but as i said, after that, there was a pause on pull requests, and nothing happened for a long time. a few months later, i redid it, basically, thats it.
as for the typo, thats something that can happen to anyone. i dont think its that big of a deal, i just modified the code and i accidentally left the description unfinished, but ofc i understand what are you talking about, and its fine 
Also, i understand the point about wanting a "more creative and unique idea," and its valid obv. but there are already tons of plugins, some of which would make more sense to merge because they're very similar. most useful plugins already exist so.
u might not use it, but u know how it is, different ppl, different habits. it could be useful for some, and some might use it often


but we did it right, didn't we?
can you do something other than being negative for once in your discord life
as vees alt, nope, you will be banned
I wonder if there are any plans to release a prebuilt docker image for people to use whether its on ghcr.io or on docker hub. would make deploying this a lot more convinent
The repository contains the full setup for running the API. There is no purpose releasing a separate image.
ig ill just do a git pull. and hoping i would be able to auto update it using watch tower.
The software itself is so infrequently updated that there's not much use in auto-updating. I will have a look at setting up an action however to release to GHCR.
ad818f3 Bump golang.org/x/net in the go_modules group a... - dependabot[bot]
Bumps the go_modules group with 1 update in the / directory: golang.org/x/net.
Updates golang.org/x/net from 0.7.0 to 0.23.0
Commits
c48da13 http2: fix TestServerContinuationFlood flakes
762b58d http2: fix tipos in comment
ba87210 http2: close connections when receiving too many headers
ebc8168 all: fix some typos
3678185 http2: make TestCanonicalHeaderCacheGrowth faster
448c44f http2: remove clientTester
c7877ac http2: convert the remaining clientTester ...
Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:
Default setup
- :question:
/language:go
Bumps the go_modules group with 1 update in the / directory: google.golang.org/protobuf.
Updates google.golang.org/protobuf from 1.30.0 to 1.33.0
Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:
Default setup
- :question:
/language:go
jesus christ okay
Bumps the go_modules group with 1 update in the / directory: golang.org/x/crypto.
Updates golang.org/x/crypto from 0.4.0 to 0.17.0
Commits
9d2ee97 ssh: implement strict KEX protocol changes
4e5a261 ssh: close net.Conn on all NewServerConn errors
152cdb1 x509roots/fallback: update bundle
fdfe1f8 ssh: defer channel window adjustment
b8ffc16 blake2b: drop Go 1.6, Go 1.8 compatibility
7e6fbd8 ssh: wrap errors from client handshake
bda2f3f argon2: avoid clo...

what the hell?
i didnt configure dependabot to do that though
like i explicitly turned that off
Is everything okay?
erm... chat spam much
vban 96269247411400704 chat spam /joke
7fc1cc6 Bump golang.org/x/net in the go_modules group a... - dependabot[bot]
what the fuck
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure ignore rules in dependabot.yml
6991bd5 Bump golang.org/x/crypto in the go_modules grou... - dependabot[bot]
Bumps the go_modules group with 1 update in the / directory: golang.org/x/crypto.
Updates golang.org/x/crypto from 0.21.0 to 0.27.0
Commits
c9da6b9 all: fix printf(var) mistakes detected by latest printf checker
b35ab4f go.mod: update golang.org/x dependencies
bcb0f91 internal/poly1305: Port sum_amd64.s to Avo
7eace71 chacha20poly1305: Avo port of chacha20poly1305_amd64.s
620dfbc salsa20/salsa: Port salsa20_amd64.s to Avo
82942cf blake2b: port blake2b_...
oh wait
all of these PRs are security updates
lol
i just saw the dependabot dashboard
nah who needs security
there's like 15 security issues
4b5e6e5 Bump google.golang.org/protobuf from 1.30.0 to ... - dependabot[bot]
this is painfully annoying
Dependabot attempted to update this pull request, but because the branch dependabot/go_modules/go_modules-8b4dfce3a6 is protected it was unable to do so.
Dependabot attempted to update this pull request, but because the branch dependabot/go_modules/go_modules-7b0c521a28 is protected it was unable to do so.
91bc110 Bump golang.org/x/crypto from 0.21.0 to 0.27.0 ... - dependabot[bot]
aa22604 Bump github.com/gofiber/fiber/v2 from 2.42.0 to... - dependabot[bot]
so i need to update to go 1.21

okay
because there's a vulnerability in a library on go 1.20 and its kinda bust
ed
Average cord dev spam
2087593 chore: dependabot must use develop branch [skip... - lewisakura
409feea chore: dependabot must use develop branch [skip... - lewisakura
92e5b7f chore: dependabot must use develop branch [skip... - lewisakura
?purge 150
cause vulnerability
jesus christ the spam
tbf i did actually read the security advisory
and they were very relevant
and very bad
like there were a few attacks that the software was vulnerable to like a http/2 cancellation attach, http/2 rapid reset ddos, CORS configuration error, QUIC memory exhaustion attack, denial of service
actually i just listed off all the advisories lol
so its probably not great to have that in a live image
the version of the quic library
versions after that required 1.21
but the current version needed 1.20
i dont know why 
weird funny stuff
hey dependabot
why are you still upset
Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).
b90e7d9 Bump github.com/quic-go/quic-go - dependabot[bot]
0108d6a Merge branch 'main' into dependabot/go_modules/... - lewisakura
The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.
?????????????
lmfao
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure ignore rules in dependabot.yml
lewi pro
i have
no idea
how i missed that
yeah no wonder dependabot cant reopen the PR
it doesnt know where to put it
ac5dd29 chore(deps): bump github.com/ansrivas/fiberprom... - dependabot[bot]
Bumps github.com/ansrivas/fiberprometheus/v2 from 2.6.0 to 2.7.0.
Release notes
Sourced from github.com/ansrivas/fiberprometheus/v2's releases.
v2.7.0
What's Changed
build(deps): bump github.com/gofiber/fiber/v2 from 2.48.0 to 2.49.0 by @dependabot in ansrivas/fiberprometheus#177
build(deps): bump github.com/gofiber/fiber/v2 from 2.49.0 to 2.49.2 by @dependabot in ansrivas/fiberprometheus#180
build(deps): bump github.com/prometheus/client_go...
there we go
99aa645 chore(deps): bump github.com/redis/go-redis/v9 ... - dependabot[bot]
Bumps github.com/redis/go-redis/v9 from 9.0.2 to 9.6.1.
Release notes
Sourced from github.com/redis/go-redis/v9's releases.
9.6.1
Changes
9.6
This release contains all new features from version 9.6.
🚀 New Features
Support Hash-field expiration commands (#2991)
Support Hash-field expiration commands in Pipeline & Fix HExpire HExpireWithArgs expiration (#3038)
Support NOVALUES parameter for HSCAN (#2925)
Added test case for CLIENT KILL with MAXAGE opt...
26794d6 chore(deps): bump github.com/prometheus/client_... - dependabot[bot]
Bumps github.com/prometheus/client_golang from 1.16.0 to 1.20.3.
Release notes
Sourced from github.com/prometheus/client_golang's releases.
v1.20.3
[BUGFIX] histograms: Fix possible data race when appending exemplars. #1608
v1.20.2
[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596
v1.20.1
This release contains the critical fix for the issue. Thanks to @geberl, @CubicrootXYZ, @zetaab and @timofurrer for he...
oh, horrifying
it's found a billion new security vulnerabilities
oh, no
these are just normal ones
its because i forgot to tell it "security only"
well this is annoying
so dependabot will only PR to the main branch unless you use a config file
but if you use a config file then it'll do version updates as well
this is literally not what i want
but there's no w
okay
whatever
its probably good to do it
edc8fc1 chore(deps): bump github.com/ansrivas/fiberprom... - dependabot[bot]
cd5aa34 chore(deps): bump github.com/redis/go-redis/v9 ... - dependabot[bot]
horror
dependabot
just remove the dependabot config
i want it to do it for security updates i just dont want it to do it for anything else!!
via email if you have that on
b90e7d9 Bump github.com/quic-go/quic-go - dependabot[bot]
0108d6a Merge branch 'main' into dependabot/go_modules/... - lewisakura
The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.
3229ddc chore(deps): bump github.com/prometheus/client_... - dependabot[bot]
so what it wants me to do
now
is close the PR
but if i close the PR
it doesnt do anything
watch
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure ignore rules in dependabot.yml
it says that
and then thats it
it literally does nothing else
it wont recreate the PR
so now i have a bugged security advisory
good software
i cant see it
i can only see published ones, as the repo owner you have exclusive access to the ones people have reported
send a screenshot
if it was in the org i would be able to :p
nice
fgdg is a very powerful exploit
2abd8c5 chore(deps): bump google.golang.org/protobuf fr... - dependabot[bot]
Bumps google.golang.org/protobuf from 1.30.0 to 1.33.0.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. ...
i think he found the vencord rce
g
- open vencord
- g
- ???
- severe security vulnerability
okay
someone reported a plugin bug via security advisories
can i enable webhook notifications
like not the content but maybe like
New security report opened

i've had it up to here with you, foul beast
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
don't make dependabot angry or it will open 200 prs
vban dependabot troll
the foul beast assumes the coat of the righteous
why not just
git fetch
git reset --hard dev
git push --force origin main
too lazy
🔥
tbh pushing to ghcr was actually
a lot easier than i anticipated
of course it'd be nice if the action actually
ran
oh its because i put skip ci
ffs
None
None
None
None
None
None
None
None
to solve the issue, try running the installer as root.
open a terminal and type
sudo /path/to/VencordInstaller.app/Contents/MacOS/VencordInstaller, replacing/path/towith the path where you downloaded the installer to.
it works on macOS 14.6.1 and Vencord install v1.4.0, tks!
did you put in mind that the message op is blocked or a channel is muted?
doesn't this Issue plugin-requests #990 exists as pr or a plugin?
@austere talon they did something to discord spotify token permissions
shuffle and repeat
index.tsx: Line 78
const source = regex.map(r => r.reg.source).join("|");
index.tsx: Line 69
const amount = settings.store.enableShortHexCodes ? "{1,2}" : "{2}";
I really hate how that works
settings in the plugin object is the only reason ur not able to use them at top level
is there any need to use at top level
rare but yeah
either way
if we could somehow insert the plugin name without inserting something in the plugin object
things would be easier
and more possibilities
this is an use
would not need that start method
- Separate show modes and channel styles, you can now choose between Classic (normal channel), Muted, Show Unreads and "Muted and Show Unreads"
- Add Lock icon on the right
- Remove "hideUnreads" setting since it is now merged with the channelStyle
this is probably a good thing
using it at the top level means that we'd have to initialise the settings for a plugin you might not even be running, which is kinda silly 

PlainSettings are still stored
which include all plugin settings
even those not enabled
initializing those settings are just some extra objects which really doesn't matter
though either way, doing what I said might be complicated
it would be some esbuild magic to somehow grab the plugin name and insert in place somewhere
there is only one use case for doing it at the top level and it's easily worked around by just doing it in start anyway, where it is better suited
oh also you have to remember that if you use the settings before the plugin is initialised you will cause an error 
which i guess is what your esbuild magic is for
but that makes it really complicated so i rly dont think its a good idea
yes exactly
because we require the settings to be inside the plugin definition
for them to grab the plugin name
also is used to resolve defaults with how it's used rn
and that ends up causing a circular dependency if you use them in top level
not really a circular dependency
just a
"this prop isnt initialised, whoops!"
we have a dedicated error for it
I dont remember what's the error exactly
but I don't like how it's so dependant on that
Settings.ts: Lines 229-236
get store() {
if (!definedSettings.pluginName) throw new Error("Cannot access settings before plugin is initialized");
return Settings.plugins[definedSettings.pluginName] as any;
},
get plain() {
if (!definedSettings.pluginName) throw new Error("Cannot access settings before plugin is initialized");
return PlainSettings.plugins[definedSettings.pluginName] as any;
},
right it's that one
pluginName is populated by the plugin loader here https://github.com/Vendicated/Vencord/blob/8890c8c6b4201121c559e671e0110b45937467c2/src/plugins/index.ts#L112
index.ts: Line 112
p.settings.pluginName = p.name;
yes I know
regardless of the plugin being enabled or not
so yes you could use esbuild to inject it as an extra parameter to definePluginSettings
that wouldn't be only useful for definePluginSettings
but that may also cause other issues down the line
we would be able to decouple other functions from the plugin object
and perhaps have some decorator like functions
for example addContextMenuPatch(contextMenuDefinition)
all at top level
decorators are nice
well damn
i must've thought of something else
time to move to class based plugins 
xd
so imagine this instead
they rely on descriptors
welcome back powercord
and we would inject the plugin name
automatically
for handling enabling/disabling
I think it's better in the plugin definition
hmm
less confusing
this might make people think the first arg is some id or smth
and it's just extra effort to couple that call to the right plugin
we could have some dynamic module via esbuild plugin that returns scoped methods whenever you import it but is it really worth it
would be confusing to use
I swear to god that I remember you had a custom regex shortcut to match variables, but I can't fucking find it
and I am starting to think that it was all in my mind
it was \i!
at last
ngl \i is weird, since $self also exists and uses a different style
(talking about the syntax, not what each does)
$self doesnt match anything
$self is in the replacement
yeah I know
its not a part of regex
\i matches identifiers
$self replaces to the current plugin
Replacement has different syntax from regex
notice how matches and replaces are 2 different words
I ain't new to this
It is quite common for different things to have different syntax
I am commenting on the \ vs $
It is consistent with the contexts in which the two are used
yes, but it is confusing since it looks like actual regex syntax and no such thing exists as \i
it's just a personal opinion
yes because everywhere \ is used in matches and $ in replace
i.e. \b matches word boundries, $1 replaces with the first group
yes, we can agree on that, I did not mix them up
this isnt vencord things
fair enough
I am used to \1 for replacement groups
It would be way weirder if replace was \self even though replaces use $1 for capture groups
not all regex engines use $1 in replacements
Js does
most of them do
vscode, jetbrains does
and there you have 90% of all regex replaces covered
In most regex libraries if you specify \1 you get a nice SOH
whats an soh
As in ascii 0x01
Code editors are regex engines??
shell regex has ruined me
did you not know about regex search and replace
All modern text editors have regex replace, yes
Where "modern" means "everything in the last 30 years except ms notepad"
They just use their languages regex thing tho probably
aren't we all regex engines in our hearts?
They're literally just regex replace (plus \i and $self)
Nuckyz sent you a link in #🧩-plugin-development which covers what you need know
there ain't much to learn ngl
if you are good (or ok) with regex, you are 90% there
you just have to get creative in ur replacements
a bad replacement can cause code to crash
they go through the source code, find uses a string as is (no regex) to find the webpack chunk, replacement match and replace then replaces a piece of source code in that chunk
So I need to grab the webpack value of the ui to essentially then allow me to create a new react element?
The component is made of code
I am making a patch rn, wanna hop on a VC so I call tell you and answer questions?
It's html based
No, it's React
nah
And switches the actual page
it is javascript that generates html
you should learn the basics of reactjs ig
to understand how the UI is rendered
what youre patching is the reactjs code this isnt betterdiscord
bd mentioned in 2024
It's in a fact list
what fact list?
"FaCt LiSt"
Does bd patch react
It's some form of ui list
that is an unordered list, UL
So the regex is the dom element version?
I think you can technically do that but it's mostly dom manip
no
React code builds react elements
you use regex to edit the javascript code that is responsible for generating the html
Which are then somewhere, deep down converted to dom elements but you don't need to worry about that part
are you like trolling or smth
I am not trolling why do you think I am?
you guys are terrible at explaining 😭
- forget about any kind of DOM or html, that's not how vencord plugins work
@marsh spruce https://www.youtube.com/watch?v=za2FZ8QCE18
Are you already working with the JavaScript framework React? Or do you want to learn it? No matter how much experience you have, this video will teach you how React work in detail! Some of the topics include, what is React, how can it be used in existing projects, how does reactivity work, how does React keep the UI in sync with the data and mor...
I really doubt hes actually lacking react , just reading bd docs
- discord has many modules. each module represents one file, except that they are bundled together into one big file
- vencord patches work by string replacing discord's javascript code
- you need to find the module that contains the code for the ui element you want to patch
- then you use a regex replace to change the code in that file to add or remove code you need for your own functionality
at this point I suspect they don't know what regex is
maybe we should start there?
discord's code will look something like this:
function a(e) {
const { channels } = e;
return (0, r.jsx)("ul", {
children: channels.map(/* ... some code here */)
})
}
So I need to find out what generates the unordered list so I can inject the button to generate a modal for lookup
you can add an ui element by adding your own code
let's make a thread
for example by rewriting the code to something like this:
function a(e) {
const { channels } = e;
return (0, r.jsx)("ul", {
children: [$self.createMyFakeChannel(e), ...channels.map(/* ... some code here */)]
})
}
patching discord's UI
cant talk in threads sad
@austere talon thread perms for contribs when
there fixed
vfjd? should i give contrib thread perms?
No
A tactical nuke will soon arrive on @austere talon’s location.\n-#
Only aliens can see this
chat are gray blob badges a known issue
if you don't update your vencord yes
i just did 😭
rate my code, how cursed is it?
(is it cursed at all?)
it reverts the shift key when starting a call
so it by default will not ring anyone, and when pressing shift it will ring the DM members
is that webstorm

yes, my vscode on windows 11 stopped working out of nowhere
literally no LSP server would work on it




