Merge pull request from GHSA-hqqp-gpqw-9w5c

Merge pull request from GHSA-9q7f-pv47-cxp9

Merge pull request from GHSA-r7h4-76f7-6264 ...

* Actually use maxUsername config value.

* Change maxUsername default to discord.com default

Use erlpack instead of @yukikaze-bot/erlpack (#968)

Rename postgresql to postgres -> fix silently failing migrations ...

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

Hotfix postgres connection string to not silently fail migrations

Fix missing capitalisation in database connected log

Add a tiny bit of extra logging to database connection

Fix missing props in welcome message creation, which causes every client who received the welcome message to disconnect.

check pw and other auth before letting users undisable

subscribe clients to member events when they lazy request members

question mark.

Impl member lazy request (#970)

read-states/ack-bulk (#969)

Implement WebAuthn (#967) ...

* implement webauthn

* code review

---------

Co-authored-by: Madeline <46743919+MaddyUnderStars@users.noreply.github.com>

Merge branch 'master' of github.com:fosscord/fosscord-server

Fix SIGTERM handler not disconnecting gateway clients and leaving timeouts active

also don't use 3002 as default when gateway endpoints are null

Use localhost:3001 as fallback when cdn endpoints are null rather than 3003

Don't set default cdn endpoints. Null endpoints means to not update them in GLOBAL_ENV. TODO: Don't use private endpoint locations in global env if public is not set, as this limits infra config

Refactor config utils (#963)

Add ESLint (#941) ...

* Add eslint, switch to lint-staged for precommit

* Fix all ESLint errors

* Update GH workflow to check prettier and eslint

fix: route file regex (#956)

Apparently its still accepted, just depricated

It's seconds, not days

Fix a funny security vuln

Merge pull request #952 from fosscord/dev/endpoints-in-ping ...

Merge /dev/endpoints-in-ping to master

Merge branch 'master' of github.com:fosscord/fosscord-server

Don't fetch the emoji owner in identify, as this causes mass-disconnects with large emoji counts. ...

TODO: Remove some additional emoji props from being sent (user_id for example)

Add youtu.be embed handler (#945)