Mastodon - Package Updates

[girish]

[1.13.2]

• Update Mastodon to 4.2.9
• Full changelog
• Update dependencies
• Fix private mention filtering (GHSA-5fq7-3p3j-9vrf)
• Fix password change endpoint not being rate-limited (GHSA-q3rg-xx5v-4mxh)
• Add hardening around rate-limit bypass (GHSA-c2r5-cfqr-c553)

[nebulon]

[1.13.3]

• Update Mastodon to 4.2.10
• Full changelog

[Package Updates]

[1.13.4]

• Update Mastodon to 4.2.11
• Full changelog

[Package Updates]

[1.13.5]

• Update Mastodon to 4.2.12
• Full changelog
• This is a hotfix release for an issue introduced in 4.2.11

[Package Updates]

[1.13.6]

• Update Mastodon to 4.2.13
• Full changelog
• Fix ReDoS vulnerability on some Ruby versions (GHSA-jpxp-r43f-rhvx)
• Update dependencies
• Add “A Mastodon update is available.” message on admin dashboard for non-bugfix updates (#32106 by @ClearlyClaire)
• Change Mastodon to issue correct HTTP signatures by default (#31994 by @ClearlyClaire)
• Fix replies collection being cached improperly
• Fix security context sometimes not being added in LD-Signed activities (#31871 by @ClearlyClaire)
• Fix error when encountering reblog of deleted post in feed rebuild (#32001 by @ClearlyClaire)

[Package Updates]

[1.14.0]

• Update Mastodon to 4.3.0
• Full changelog
• Add server-side notification grouping
• Add notification policies, filtered notifications and notification requests
• Add notifications of severed relationships
• Add hover cards in web UI
• Add "system" theme setting (light/dark theme depending on user system preference)
• Add timeline of public posts about a trending link
• Add author highlight for news articles whose authors are on the fediverse

[Package Updates]

[1.14.1]

• Update Mastodon to 4.3.1
• Full changelog

[Package Updates]

[1.14.2]

• Update mastodon to 4.3.2
• Full Changelog
• Add tootctl feeds vacuum (#​33065 by @​ClearlyClaire)
• Add error message when user tries to follow their own account (#​31910 by @​lenikadali)
• Add client_secret_expires_at to OAuth Applications (#​30317 by @​ThisIsMissEm)
• Change design of Content Warnings and filters (#​32543 by @​ClearlyClaire)
• Fix processing incoming post edits with mentions to unresolvable accounts (#​33129 by @​ClearlyClaire)
• Fix error when including multiple instances of embed.js (#​33107 by @​YKWeyer)
• Fix inactive users' timelines being backfilled on follow and unsuspend (#​33094 by @​ClearlyClaire)
• Fix direct inbox delivery pushing posts into inactive followers' timelines (#​33067 by @​ClearlyClaire)
• Fix TagFollow records not being correctly handled in account operations (#​33063 by @​ClearlyClaire)
• Fix pushing hashtag-followed posts to feeds of inactive users (#​33018 by @​Gargron)
• Fix duplicate notifications in notification groups when using slow mode (#​33014 by @​ClearlyClaire)
• Fix posts made in the future being allowed to trend (#​32996 by @​ClearlyClaire)
• Fix uploading higher-than-wide GIF profile picture with libvips enabled (#​32911 by @​ClearlyClaire)
• Fix domain attribution field having autocorrect and autocapitalize enabled (#​32903 by @​ClearlyClaire)
• Fix titles being escaped twice (#​32889 by @​ClearlyClaire)
• Fix list creation limit check (#​32869 by @​ClearlyClaire)
• Fix error in tootctl email_domain_blocks when supplying --with-dns-records (#​32863 by @​mjankowski)
• Fix min_id and max_id causing error in search API (#​32857 by @​Gargron)
• Fix inefficiencies when processing removal of posts that use featured tags (#​32787 by @​ClearlyClaire)
• Fix alt-text pop-in not using the translated description (#​32766 by @​ClearlyClaire)
• Fix preview cards with long titles erroneously causing layout changes (#​32678 by @​ClearlyClaire)
• Fix embed modal layout on mobile (#​32641 by @​DismalShadowX)
• Fix and improve batch attachment deletion handling when using OpenStack Swift (#​32637 by @​hugogameiro)
• Fix blocks not being applied on link timeline (#​32625 by @​tribela)
• Fix follow counters being incorrectly changed (#​32622 by @​oneiros)
• Fix 'unknown' media attachment type rendering (#​32613 and #​32713 by @​ThisIsMissEm and @​renatolond)
• Fix tl language native name (#​32606 by @​seav)

[Package Updates]

[1.14.3]

• Update mastodon to 4.3.3
• Full Changelog
• Fix insufficient validation of account URIs (GHSA-5wxh-3p65-r4g6)
• Update dependencies
• Fix libyaml missing from Dockerfile build stage (#​33591 by @​vmstan)
• Fix incorrect notification settings migration for non-followers (#​33348 by @​ClearlyClaire)
• Fix down clause for notification policy v2 migrations (#​33340 by @​jesseplusplus)
• Fix error decrementing status count when FeaturedTags#last_status_at is nil (#​33320 by @​ClearlyClaire)
• Fix last paginated notification group only including data on a single notification (#​33271 by @​ClearlyClaire)

[Package Updates]

[1.14.4]

• Update mastodon to 4.3.4
• Full Changelog
• Fix GET /api/v2/notifications/:id and POST /api/v2/notifications/:id/dismiss for ungrouped notifications (#​33990 by @​ClearlyClaire)
• Fix issue with some versions of libvips on some systems (#​33853 by @​kleisauke)
• Fix handling of duplicate mentions in incoming status Update (#​33911 by @​ClearlyClaire)
• Fix inefficiencies in timeline generation (#​33839 and #​33842 by @​ClearlyClaire)
• Fix emoji rewrite adding unnecessary curft to the DOM for most emoji (#​33818 by @​ClearlyClaire)
• Fix tootctl feeds build not building list timelines (#​33783 by @​ClearlyClaire)
• Fix processing of incoming notifications for unfilterable types (#​33429 by @​ClearlyClaire)