All Versions
57
Latest Version
Avg Release Cycle
39 days
Latest Release
839 days ago

Changelog History
Page 1

  • v3.5.3 Changes

    May 26, 2022

    ➕ Added

    • ➕ Add language dropdown to compose form in web UI (Gargron, ykzts)
    • ➕ Add warning for limited accounts in web UI (Gargron)
    • ➕ Add limited attribute to accounts in REST API (Gargron)

    🔄 Changed

    • 🔄 Change RSS feeds (Gargron, tribela)
      • Titles are now date and time of post
      • Bodies now render all content faithfully, including polls and emojis
      • All media attachments are included with Media RSS
    • 🔄 Change "dangerous" to "sensitive" in privacy policy and web UI (Gargron)
    • 🔄 Change unconfirmed accounts to not be visible in REST API (ClearlyClaire)
    • 🚀 Change tootctl search deploy to improve performance (Gargron, Gargron)
    • 🔄 Change search indexing to use batches to minimize resource usage (Gargron)

    🛠 Fixed

    • 🛠 Fix follower and other counters being able to go negative (Gargron)
    • 🛠 Fix unnecessary query on when creating a status (ClearlyClaire)
    • 🛠 Fix warning an account outside of a report closing all reports for that account (ClearlyClaire)
    • 🛠 Fix error when resolving a link that redirects to a local post (ClearlyClaire)
    • 🛠 Fix preferred posting language returning unusable value in REST API (Gargron)
    • 🛠 Fix race condition error when external status is reblogged (ykzts)
    • 🛠 Fix missing string for appeal validation error (Gargron)
    • 🛠 Fix block/mute lists showing a follow button in web UI (ClearlyClaire)
    • 🛠 Fix Redis configuration not being changed by mastodon:setup (ClearlyClaire)
    • 🛠 Fix streaming notifications not using quick filter logic in web UI (ClearlyClaire)
    • 🛠 Fix ambiguous wording on appeal actions in admin UI (ClearlyClaire)
    • 🛠 Fix floating action button obscuring last element in web UI (ClearlyClaire)
    • 🛠 Fix account warnings not being recorded in audit log (ClearlyClaire)
    • 🛠 Fix leftover icons for direct visibility statuses (Steffo99)
    • 🛠 Fix link verification requiring case sensitivity on links (sgolemon)
    • 🛠 Fix embeds not setting their height correctly (rinsuki)

    🔒 Security

    • 🛠 Fix concurrent unfollowing decrementing follower count more than once (Gargron)
    • 🛠 Fix being able to appeal a strike unlimited times (Gargron)
    • 🛠 Fix being able to report otherwise inaccessible statuses (Gargron)
    • 🛠 Fix empty votes arbitrarily increasing voters count in polls (Gargron)
    • 🛠 Fix moderator identity leak when approving appeal of sensitive marked statuses (Gargron)
    • 🛠 Fix suspended users being able to access APIs that don't require a user (Gargron)
    • 🛠 Fix confirmation redirect to app without Location header (Gargron)

  • v3.5.2 Changes

    May 04, 2022

    ➕ Added

    • ➕ Add warning on direct messages screen in web UI (Gargron)
      • We already had a warning when composing a direct message, it has now been reworded to be more clear
      • Same warning is now displayed when viewing sent and received direct messages
    • ➕ Add ability to set approval-based registration through tootctl (ClearlyClaire)
    • ➕ Add pre-filling of domain from search filter in domain allow/block admin UI (ClearlyClaire)

  • v3.5.1 Changes

    April 08, 2022

    ➕ Added

    • ➕ Add pagination for trending statuses in web UI (Gargron)

    🔄 Changed

    • 🔄 Change e-mail notifications to only be sent when recipient is offline (Gargron)
      • Send e-mails for mentions and follows by default again
      • But only when recipient does not have push notifications through an app
    • 🔄 Change website attribute to be nullable on Application entity in REST API (rinsuki)

    ✂ Removed

    • ✂ Remove sign-in token authentication, instead send e-mail about new sign-in (Gargron)
      • You no longer need to enter a security code sent through e-mail
      • Instead you get an e-mail about a new sign-in from an unfamiliar IP address

    🛠 Fixed

    • 🛠 Fix error responses for from search prefix (single-right-quote)
    • 🛠 Fix dangling language-specific trends (Gargron)
    • 🛠 Fix extremely rare race condition when deleting a status or account (ClearlyClaire)
    • 🛠 Fix trends returning less results per page when filtered in REST API (Gargron)
    • 🛠 Fix pagination header on empty trends responses in REST API (Gargron)
    • 🛠 Fix cookies secure flag being set when served over Tor (Gargron)
    • 🛠 Fix migration error handling (ClearlyClaire)
    • 🛠 Fix error when re-running some migrations if they get interrupted at the wrong moment (ClearlyClaire)
    • 🛠 Fix potentially missing statuses when reconnecting to streaming API in web UI (ClearlyClaire, ClearlyClaire, ClearlyClaire)
    • 🛠 Fix error when sending warning emails with custom text (ClearlyClaire)
    • Fix unset SMTP_RETURN_PATH environment variable causing e-mail not to send (Gargron)
    • 🛠 Fix possible duplicate statuses in timelines in some edge cases in web UI (ClearlyClaire)
    • 🛠 Fix spurious edits and require incoming edits to be explicitly marked as such (ClearlyClaire)
    • 🛠 Fix error when encountering invalid pinned statuses (ClearlyClaire)
    • 🛠 Fix inconsistency in error handling when removing a status (ClearlyClaire)
    • 🛠 Fix admin API unconditionally requiring CSRF token (ClearlyClaire)
    • 🛠 Fix trending tags endpoint missing offset param in REST API (Gargron)
    • 🛠 Fix unusual number formatting in some locales (ClearlyClaire)
    • 👮 Fix S3_FORCE_SINGLE_REQUEST environment variable not working (HolgerHuo)
    • 🛠 Fix failure to build assets with OpenSSL 3 (ClearlyClaire)
    • 🛠 Fix PWA manifest using outdated routes (HolgerHuo)
    • 🛠 Fix error when indexing statuses into Elasticsearch (ClearlyClaire)

  • v3.5.0 Changes

    March 30, 2022

    ➕ Added

    • ➕ Add support for incoming edited posts (Gargron, Gargron, Gargron, Gargron, Gargron, Gargron, ClearlyClaire, Gargron, Gargron, ClearlyClaire, Gargron, Gargron, ClearlyClaire, ClearlyClaire, ClearlyClaire, ClearlyClaire, Gargron, Gargron, Gargron, ClearlyClaire, ClearlyClaire)
      • Previous versions remain available for perusal and comparison
      • People who reblogged a post are notified when it's edited
      • New REST APIs:
      • PUT /api/v1/statuses/:id
      • GET /api/v1/statuses/:id/history
      • GET /api/v1/statuses/:id/source
      • New streaming API event:
      • status.update
    • ➕ Add appeals for moderator decisions (Gargron, ClearlyClaire, ClearlyClaire, ClearlyClaire, Gargron, Gargron, ClearlyClaire, Gargron)
      • All default moderator decisions now notify the affected user by e-mail
      • They now link to an appeal page instead of suggesting replying to the e-mail
      • They can now be found in account settings and not just e-mail
      • Users can submit one appeal within 20 days of the decision
      • Moderators can approve or reject the appeal
    • ➕ Add notifications for posts deleted by moderators (Gargron, Gargron, Gargron, Gargron, Gargron)
      • New, redesigned report view in admin UI
      • Common report actions now only take one click to complete
      • Deleting posts or marking as sensitive from report now notifies user
      • Reports can be categorized by reason and specific rules violated
      • The reasons are automatically cited in the notifications, except for spam
      • Marking posts as sensitive now federates using post editing
    • ➕ Add explore page with trending posts and links (Gargron, Gargron, Gargron, Gargron, Gargron, Gargron, ClearlyClaire, Gargron, tribela, Gargron, Gargron, noiob, mayaeh, mayaeh, Gargron, mayaeh)
      • Hashtag trends algorithm is extended to work for posts and links
      • Links are only considered if they have an adequate preview card
      • Preview card generation has been improved to support structured data
      • Links can only trend if the publisher (domain) has been approved
      • Posts can only trend if the author has been approved
      • Individual approval and rejection for posts and links is also available
      • Moderators are notified about pending trends at most once every 2 hours
      • Posts and link trends are language-specific
      • Search page is redesigned into explore page in web UI
      • Discovery tab is coming soon in official iOS and Android apps
      • New REST APIs:
      • GET /api/v1/trends/links
      • GET /api/v1/trends/statuses
      • GET /api/v1/trends/tags (alias of GET /api/v1/trends)
      • GET /api/v1/admin/trends/links
      • GET /api/v1/admin/trends/statuses
      • GET /api/v1/admin/trends/tags
    • ➕ Add graphs and retention metrics to admin dashboard (Gargron, Gargron, ClearlyClaire, ClearlyClaire, ClearlyClaire, mashirozx, ClearlyClaire)
      • Dashboard shows more numbers with development over time
      • Other data such as most used interface languages and sign-up sources
      • User retention graph shows how many new users stick around
      • New REST APIs:
      • POST /api/v1/admin/measures
      • POST /api/v1/admin/dimensions
      • POST /api/v1/admin/retention
    • ➕ Add GET /api/v1/accounts/familiar_followers to REST API (Gargron)
    • Add POST /api/v1/accounts/:id/remove_from_followers to REST API (noellabo)
    • ➕ Add category and rule_ids params to POST /api/v1/reports IN REST API (Gargron, Gargron, Gargron)
      • category can be one of: spam, violation, other (default)
      • rule_ids must reference rules returned in GET /api/v1/instance
    • ➕ Add global lang param to REST API (Gargron, Gargron)
    • ➕ Add types param to GET /api/v1/notifications in REST API (Gargron)
    • ➕ Add notifications for moderators about new sign-ups (Gargron, ClearlyClaire)
      • When a new user confirms e-mail, moderators receive a notification
      • New notification type:
      • admin.sign_up
    • ➕ Add authentication history (Gargron, ClearlyClaire, baby-gnu)
    • ➕ Add ability to automatically delete old posts (ClearlyClaire, ClearlyClaire, tribela)
    • ➕ Add ability to pin private posts (ClearlyClaire, tribela, ClearlyClaire, MitarashiDango)
    • ➕ Add ability to filter search results by author using from: syntax (tribela)
    • ➕ Add ability to delete canonical email blocks in admin UI (ClearlyClaire)
    • ➕ Add ability to purge undeliverable domains in admin UI (ClearlyClaire, tribela, tribela, tribela)
    • ➕ Add ability to disable e-mail token authentication for specific users in admin UI (Gargron)
    • ➕ Add ability to suspend accounts in batches in admin UI (Gargron, ClearlyClaire, Gargron)
      • New, redesigned accounts list in admin UI
      • Batch suspensions are meant to help clean up spam and bot accounts
      • They do not generate notifications
    • ➕ Add ability to filter reports by origin of target account in admin UI (Gargron)
    • ➕ Add support for login through OpenID Connect (chandrn7)
    • ➕ Add lazy loading for emoji picker in web UI (mashirozx, ClearlyClaire)
    • ➕ Add single option votes tooltip in polls in web UI (Brawaru)
    • ➕ Add confirmation modal when closing media edit modal with unsaved changes in web UI (ClearlyClaire)
    • ➕ Add hint about missing media attachment description in web UI (Gargron)
    • ➕ Add support for fetching Create and Announce activities by URI in ActivityPub (ClearlyClaire)
    • 👮 Add S3_FORCE_SINGLE_REQUEST environment variable (ClearlyClaire)
    • ➕ Add OMNIAUTH_ONLY environment variable (ClearlyClaire, ClearlyClaire)
    • 👉 Add ES_USER and ES_PASS environment variables for Elasticsearch authentication (tribela)
    • 🔒 Add CAS_SECURITY_ASSUME_EMAIL_IS_VERIFIED environment variable (baby-gnu)
    • ➕ Add ability to pass specific domains to tootctl accounts cull (tribela)
    • ➕ Add --by-uri option to tootctl domains purge (ClearlyClaire)
    • ➕ Add --batch-size option to tootctl search deploy (aquarla)
    • ➕ Add --remove-orphans option to tootctl statuses remove (noellabo)

    🔄 Changed

    ✂ Removed

    • ✂ Remove profile directory link from main navigation panel in web UI (Gargron)
    • ✂ Remove language detection through cld3 (Gargron, ykzts, Gargron, Gargron)
      • cld3 is very inaccurate on short-form content even with unique alphabets
      • Post language can be overridden individually using language param
      • Otherwise, it defaults to the user's interface language
    • Remove support for OAUTH_REDIRECT_AT_SIGN_IN (ClearlyClaire)
      • Use OMNIAUTH_ONLY instead
    • ✂ Remove Keybase integration (Gargron)
    • ✂ Remove old columns and indexes (ClearlyClaire, Gargron, ClearlyClaire)
    • ✂ Remove shortcodes from newly-created media attachments (ClearlyClaire, ClearlyClaire)

    🗄 Deprecated

    • GET /api/v1/trends → GET /api/v1/trends/tags
    • OAuth follow scope → read and/or write
    • text attribute on DELETE /api/v1/statuses/:id → GET /api/v1/statuses/:id/source

    🛠 Fixed

    • 🛠 Fix IDN domains not being rendered correctly in a few left-over places (Gargron)
    • 🛠 Fix Sanskrit translation not being used in web UI (ClearlyClaire)
    • 🛠 Fix Kurdish languages having the wrong language codes (ClearlyClaire)
    • 🛠 Fix pghero making database schema suggestions (ClearlyClaire)
    • 🛠 Fix encoding glitch in the OpenGraph description of a profile page (ClearlyClaire)
    • 🛠 Fix web manifest not permitting PWA usage from alternate domains (HolgerHuo)
    • 🛠 Fix not being able to edit media attachments for scheduled posts (ClearlyClaire)
    • 🛠 Fix subscribed relay activities being recorded as boosts (ClearlyClaire)
    • 🛠 Fix streaming API server error messages when JSON parsing fails not specifying the source (ClearlyClaire)
    • 🛠 Fix browsers autofilling new password field with old password (mashirozx)
    • 🛠 Fix text being invisible before fonts load in web UI (tribela)
    • 🛠 Fix public profile pages of unconfirmed users being accessible (ClearlyClaire, ClearlyClaire)
    • 🛠 Fix nil error when trying to fetch key for signature verification (Gargron)
    • 🛠 Fix null values being included in some indexes (Gargron)
    • 🛠 Fix POST /api/v1/emails/confirmations not being available after sign-up (Gargron)
    • 🛠 Fix rare race condition when reblogged post is deleted (ClearlyClaire, ClearlyClaire)
    • 🛠 Fix being able to add more than 4 hashtags to hashtag column in web UI (Gargron)
    • 🛠 Fix data integrity of featured tags (Gargron)
    • 🛠 Fix performance of account timelines (Gargron)
    • 🛠 Fix returning empty <p> tag for blank account note in REST API (Gargron)
    • 🛠 Fix leak of existence of otherwise inaccessible posts in REST API (Gargron)
    • 🛠 Fix not showing loading indicator when searching in web UI (Gargron)
    • 🛠 Fix media modal footer's “external link” not being a link (ClearlyClaire)
    • 🛠 Fix reply button on media modal not giving focus to compose form (ClearlyClaire)
    • 🛠 Fix some media attachments being converted with too high framerates (ClearlyClaire)
    • 🛠 Fix sign in token and warning emails failing to send when contact e-mail address is malformed (helloworldstack)
    • 🛠 Fix opening the emoji picker scrolling the single-column view to the top (ClearlyClaire)
    • 🛠 Fix edge case where settings/admin page sidebar would be incorrectly hidden (ClearlyClaire)
    • 🛠 Fix performance of server-side filtering (ClearlyClaire)
    • 🛠 Fix privacy policy link not being visible on small screens (Gargron)
    • 🛠 Fix duplicate accounts when searching by IP range in admin UI (Gargron, tribela)
    • 🛠 Fix error when performing a batch action on posts in admin UI (ClearlyClaire)
    • 🛠 Fix deletes not being signed in authorized fetch mode (Gargron)
    • 🛠 Fix Undo Announce sometimes inlining the originally Announced status (ClearlyClaire)
    • 🛠 Fix localization of cold-start follow recommendations (Gargron, Gargron)
    • 🛠 Fix replies collection incorrectly looping (ClearlyClaire)
    • 🛠 Fix errors when multiple Delete are received for a given actor (ClearlyClaire)
    • 🛠 Fixed prototype pollution bug and only allow trusted origin (r0hanSH)
    • 🛠 Fix text being incorrectly pre-selected in composer textarea on /share (ClearlyClaire)
    • Fix SMTP_ENABLE_STARTTLS_AUTO/SMTP_TLS/SMTP_SSL environment variables don't work (kgtkr)
    • 🛠 Fix media upload specific rate limits only being applied to v1 endpoint in REST API (tribela)
    • 🛠 Fix media descriptions not being used for client-side filtering (ClearlyClaire)
    • 🛠 Fix cold-start follow recommendation favouring older accounts due to wrong sorting (noellabo)
    • 🛠 Fix not redirect to the right page after authenticating with WebAuthn (heguro)
    • 🛠 Fix searching for additional hashtags in hashtag column (ClearlyClaire)
    • 🛠 Fix color of hashtag column settings inputs (ClearlyClaire)
    • 🛠 Fix performance of tootctl statuses remove (noellabo)
    • 🛠 Fix tootctl accounts cull not excluding domains on timeouts and certificate issues (ClearlyClaire)
    • 🛠 Fix 404 error when filtering admin action logs by non-existent target account (ClearlyClaire)
    • 🛠 Fix error when accessing streaming API without any OAuth scopes (Brawaru)
    • 🛠 Fix follow request count not updating when new follow requests arrive over streaming API in web UI (matildepark)
    • 🛠 Fix error when unsuspending a local account (HolgerHuo)
    • 🛠 Fix crash when a notification contains a not yet processed media attachment in web UI (ClearlyClaire)
    • 🛠 Fix wrong color of download button in audio player in web UI (ClearlyClaire)
    • 🛠 Fix notes for others accounts not being deleted when an account is deleted (ClearlyClaire)
    • 🛠 Fix error when logging occurrence of unsupported video file (noellabo)
    • 🛠 Fix wrong elements in trends widget being hidden on smaller screens in web UI (tribela)
    • 🛠 Fix link to about page being displayed in limited federation mode (weex)
    • 🛠 Fix styling of boost button in media modal not reflecting ability to boost (ClearlyClaire)
    • 🛠 Fix OCR failure when erroneous lang data is in cache (ClearlyClaire)
    • 🛠 Fix downloading media from blocked domains in tootctl media refresh (tribela)
    • 🛠 Fix login form being displayed on landing page when already logged in (ClearlyClaire)
    • 🛠 Fix polling for media processing status too frequently in web UI (tribela)
    • 🛠 Fix hashtag autocomplete overriding user-typed case (weex)
    • 🛠 Fix WebAuthn authentication setup to not prompt for PIN (truongnmt)

    🔒 Security

    • 🛠 Fix being able to post URLs longer than 4096 characters (Gargron)
    • 🛠 Fix being able to bypass e-mail restrictions (Gargron)

  • v3.4.6 Changes

    February 03, 2022

    🛠 Fixed

    • Fix mastodon:webpush:generate_vapid_key task requiring a functional environment (ClearlyClaire)
    • 🛠 Fix spurious errors when receiving an Add activity for a private post (ClearlyClaire)

    🔒 Security

  • v3.4.5 Changes

    January 31, 2022

    ➕ Added

    🛠 Fixed

  • v3.4.4 Changes

    November 26, 2021

    🛠 Fixed

    • 🛠 Fix error when suspending user with an already blocked canonical email (ClearlyClaire)
    • 🛠 Fix overflow of long profile fields in admin UI (ClearlyClaire)
    • 🛠 Fix confusing error when WebFinger request returns empty document (ClearlyClaire)
    • 🛠 Fix upload of remote media with OpenStack Swift sometimes failing (ClearlyClaire)
    • 🛠 Fix logout link not working in Safari (noellabo)
    • 🛠 Fix “open” link of media modal not closing modal in web UI (ClearlyClaire)
    • 🛠 Fix replying from modal in web UI (ClearlyClaire)
    • 🛠 Fix mastodon:setup command crashing in some circumstances (ClearlyClaire)

    🔒 Security

  • v3.4.3 Changes

    November 06, 2021

    🛠 Fixed

    • 🛠 Fix login being broken due to inaccurately applied backport fix in 3.4.2 (Gargron)

  • v3.4.2 Changes

    November 06, 2021

    ➕ Added

    • ➕ Add configuration attribute to GET /api/v1/instance (Gargron)

    🛠 Fixed

    • 🛠 Fix handling of back button with modal windows in web UI (ClearlyClaire)
    • 🛠 Fix pop-in player when author has long username in web UI (ClearlyClaire)
    • 🛠 Fix crash when a status with a playing video gets deleted in web UI (ClearlyClaire)
    • 🛠 Fix crash with Microsoft Translate in web UI (ClearlyClaire)
    • 🛠 Fix PWA not being usable from alternate domains (HolgerHuo)
    • 🛠 Fix locale-specific number rounding errors (ClearlyClaire)
    • 🛠 Fix scheduling a status decreasing status count (ClearlyClaire)
    • 🛠 Fix user's canonical email address being blocked when user deletes own account (ClearlyClaire)
    • 🛠 Fix not being able to suspend users that already have their canonical e-mail blocked (Gargron)
    • 🛠 Fix anonymous access to outbox not being cached by the reverse proxy (ClearlyClaire)
    • 🛠 Fix followers synchronization mechanism not working when URI has empty path (ClearlyClaire)
    • 🛠 Fix serialization of counts in REST API when user hides their network (ClearlyClaire)
    • 🛠 Fix inefficiencies in auto-linking code (ClearlyClaire)
    • 🛠 Fix tootctl self-destruct not sending delete activities for recently-suspended accounts (ClearlyClaire)
    • 🛠 Fix suspicious sign-in e-mail text being out of date (ClearlyClaire)
    • 🛠 Fix some frameworks being unnecessarily loaded (ClearlyClaire)
    • 🛠 Fix canonical e-mail blocks missing foreign key constraints (ClearlyClaire)
    • 🛠 Fix inconsistent order on account's statuses page in admin UI (tribela)
    • 🛠 Fix media from blocked domains being redownloaded by tootctl media refresh (tribela)
    • 🛠 Fix mastodon:setup generated env-file syntax (ClearlyClaire)
    • 🛠 Fix link previews being incorrectly generated from earlier links (ClearlyClaire)
    • 🛠 Fix wrong to/cc values for remote groups in ActivityPub (ClearlyClaire)
    • 🛠 Fix mentions with non-ascii TLDs not being processed (ClearlyClaire)
    • 🛠 Fix authentication failures halfway through a sign-in attempt (ClearlyClaire, ClearlyClaire)
    • 🛠 Fix suspended accounts statuses being merged back into timelines (ClearlyClaire)
    • 🛠 Fix crash when encountering invalid account fields (ClearlyClaire)
    • 🛠 Fix invalid blurhash handling for remote activities (noellabo)
    • 🛠 Fix newlines being added to account notes when an account moves (ClearlyClaire, noellabo)
    • 🛠 Fix crash when creating an announcement with links (ClearlyClaire)
    • 🛠 Fix logging out from one browser logging out all other sessions (ClearlyClaire)

    🔒 Security

  • v3.4.1 Changes

    June 03, 2021

    ➕ Added

    • ➕ Add new emoji assets from Twemoji 13.1.0 (Gargron)

    🛠 Fixed

    • 🛠 Fix some ActivityPub identifiers in server actor outbox (ClearlyClaire)
    • 🛠 Fix custom CSS path setting cookies and being uncacheable due to it (tribela)
    • 🛠 Fix unread notification count when polling in web UI (ClearlyClaire)
    • 🛠 Fix health check not being accessible through localhost (ClearlyClaire)
    • 🛠 Fix some redis locks auto-releasing too fast (ClearlyClaire, ClearlyClaire)
    • 🛠 Fix e-mail confirmations API not working correctly (Gargron)
    • 🛠 Fix migration script not being able to run if it fails midway (ClearlyClaire)
    • 🛠 Fix account deletion sometimes failing because of optimistic locks (ClearlyClaire)
    • 🛠 Fix deprecated slash as division in SASS files (ClearlyClaire)
    • 🛠 Fix tootctl search deploy compatibility error on Ruby 3 (ClearlyClaire)
    • 🛠 Fix mailer jobs for deleted notifications erroring out (ClearlyClaire)