Mastodon - Package Updates

Package Updates

[1.17.4]

Update mastodon to 4.5.4
Full Changelog
Fix custom emojis not being rendered in profile fields (#37365 by @ClearlyClaire)
Fix serialization of context pages (#37376 by @ClearlyClaire)
Fix quotes with CWs but no text not having fallback link (#37361 by @ClearlyClaire)
Fix outdated link target for locked warning (#37366 by @ClearlyClaire)
Fix local custom emojis sometimes being rendered in remote posts (#37284 by @ChaosExAnima)
Fix some assets not being loaded from configured CDN (#37310 by @ChaosExAnima)
Fix notifications page error in Tor browser (#37285 by @diondiondion)
Fix custom emojis not being displayed in CWs and fav/boost notifications (#37272 and #37306 by @ChaosExAnima and @ClearlyClaire)
Fix default Admin role not including view_feeds permission (#37301 by @ClearlyClaire)
Fix hashtag autocomplete replacing suggestion's first characters with input (#37281 by @ClearlyClaire)

Package Updates

[1.17.7]

Update mastodon to 4.5.7
Full Changelog
Add --suspended-only option to tootctl emoji purge (#37828 and #37861 by @ClearlyClaire and @mjankowski)
Fix emoji data not being properly cached (#37858 by @ChaosExAnima)
Fix delete & redraft of pending posts (#37839 by @ClearlyClaire)
Fix processing separate key documents without the ActivityStreams context (#37826 by @ClearlyClaire)
Fix custom emojis not being purged on domain suspension (#37808 by @ClearlyClaire)
Fix users without special permissions being able to stream disabled timelines (#37791 by @ClearlyClaire)
Fix processing of object updates with duplicate hashtags (#37756 by @ClearlyClaire)

Package Updates

[1.17.9]

Update mastodon to 4.5.9
Full Changelog
Insufficient verification of email addresses (GHSA-5r37-qpwq-2jhh)
Updated dependencies
Add trademark warning to mastodon:setup task (#38548 by @ClearlyClaire)
Fix definition for quote in JSON-LD context (#38686 by @ClearlyClaire)
Fix being unable to disable sound for quote update notification (#38537 by @ClearlyClaire)
Fix being able to quote someone you blocked (#38608 by @ClearlyClaire)

Package Updates

[1.17.10]

Package Updates

[1.17.11]

Update mastodon to 4.5.10
Full Changelog
Fix SSRF protection bypass (GHSA-crr4-7rm4-8gpw, GHSA-xx55-4rrg-8xg6)
Fix Linked-Data Signature bypass through JSON-LD graph restructuring features (GHSA-53m7-2wrh-q839, GHSA-chgx-jx3p-rf73)
Updated dependencies
Fix type of interactingObject, interactionTarget and add missing QuoteAuthorization (#38940 by @ClearlyClaire)
Remove unused devise strategies (#38795 by @ClearlyClaire)

Package Updates

[1.17.12]

Update mastodon to 4.5.11
Full Changelog
Fix allowed attribution domains spoofing (GHSA-rwcw-vq68-g34p)
Fix uncaught exception in message sanitization causing Denial of Service (GHSA-qrgq-9fx2-vf2r)
Update dependencies
Fix remote statuses with large media descriptions being rejected (#39135 by @ClearlyClaire)

Package Updates

[1.18.0]

Update mastodon to 4.6.0
Full Changelog
Add collections (#37992 and others) - Create collections with up to 25 accounts each, then share them with others.
Add email subscriptions (#38163 and others) - Admins can allow specific roles to enable email subscriptions on their profile.
Add new overview landing page setting (#39074 and others) - Admins can choose a new frontpage for anonymous visitors.
Add ability to require 2FA for specific roles (including Everybody) (#37701 and others)
Remove support for EOL Node version 20 (#38926 by @mjankowski)
Remove support for Ruby 3.2 (#37476 by @mjankowski)
Remove support for ImageMagick (#37488 by @mjankowski)
Change invitations to only bypass sign-up approval setting when the issuer of the invitation has the invite_bypass_approval permission (#38278 by @ClearlyClaire)
Fix filters not being applied to search results in web UI (#36346 by @ClearlyClaire)
Fix remote posts with large media descriptions being rejected (#39135 by @ClearlyClaire)

Package Updates

[1.18.1]

Update mastodon to 4.6.1
Full Changelog
Add avatar_description and header_description to /api/v1/accounts/update_credentials (#39547 and #39574 by @ClearlyClaire and @mkljczk)
Fix combobox menu not closing after a selection (#39595 by @diondiondion)
Fix Emoji IndexedDB upgrades when multiple tabs are open (#39576 by @ChaosExAnima)
Fix combobox listbox not scrolling up when new suggestions have loaded (#39588 by @diondiondion)
Fix media modal navigation in RTL languages (#39587 by @diondiondion)
Fix accounts not visible in collection editor in advanced web interface (#39586 by @diondiondion)
Fix error on login with certain LDAP configurations (#39571 by @oneiros)
Fix simplified layout applying to other pages in web UI (#39570 by @Gargron)
Fix emoji database loading in web worker (#39558 and #39562 by @ChaosExAnima)
Fix display name length limit being incorrectly enforced in web UI (#39499 by @shleeable)

Package Updates

[1.18.2]

Update mastodon to 4.6.2
Full Changelog
Update FFMpeg version used in the container image to fix CVE-2026-8461 (critical severity)

Package Updates

[1.18.3]

Update mastodon to 4.6.3
Full Changelog
Update dependencies
Add "Update available" navigation item at top of navbar when new Mastodon versions are available (#39705 by @ClearlyClaire)
Add rendering of post images in emails (#39636 by @diondiondion)
Fix "view collection" menu item appearing on collection page (#39694 by @mkljczk)
Fix incorrect filter cache key sometimes causing incorrect filters to be applied (#39698 by @ClearlyClaire)
Fix missing to_json to publish announcement reaction worker (#39685 by @mjankowski)
Fix duplicate "clear" button shown in main search input in Chrome (#39679 by @diondiondion)
Fix visual glitch with the spoiler button (#39677 by @ChaosExAnima)
Fix invisible username during post highlight animation (#39659 by @diondiondion)
Fix follow button floating on profiles when overview landing page is enabled (#39650 by @FFederi)

Package Updates

[1.18.4]

Also prune remote emojis in the cron job. This drastically reduces amount of cached files

Cloudron Forum