Update ghcr.io/mastodon/mastodon Docker tag to v4.3.3 #49
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
532a599 to
abc23c1
Compare
abc23c1 to
ed8b643
Compare
ed8b643 to
097138b
Compare
097138b to
d295ca5
Compare
d295ca5 to
9d4c673
Compare
9d4c673 to
9906c08
Compare
9906c08 to
c6cbe00
Compare
c6cbe00 to
732f677
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.8->v4.3.3Release Notes
mastodon/mastodon (ghcr.io/mastodon/mastodon)
v4.3.3Compare Source
Changelog
Security
Fixed
libyamlmissing fromDockerfilebuild stage (#33591 by @vmstan)FeaturedTags#last_status_atisnil(#33320 by @ClearlyClaire)Upgrade notes
To get the code for v4.3.3, use
git fetch && git checkout v4.3.3.Dependencies
External dependencies have not changed since v4.3.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
Update steps
The following instructions are for updating from 4.3.2.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, please read the v4.3.0 release notes, as there have been multiple important changes.
Non-docker
bundle installWhen using docker
v4.3.2Compare Source
Changelog
Added
tootctl feeds vacuum(#33065 by @ClearlyClaire)Changed
Fixed
embed.js(#33107 by @YKWeyer)TagFollowrecords not being correctly handled in account operations (#33063 by @ClearlyClaire)tootctl email_domain_blockswhen supplying--with-dns-records(#32863 by @mjankowski)min_idandmax_idcausing error in search API (#32857 by @Gargron)Security
Upgrade notes
To get the code for v4.3.2, use
git fetch && git checkout v4.3.2.Dependencies
External dependencies have not changed since v4.3.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
Update steps
The following instructions are for updating from 4.3.1.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, please read the v4.3.0 release notes, as there have been multiple important changes.
Non-docker
bundle installandyarn install --immutableRAILS_ENV=production bundle exec rails assets:precompileWhen using docker
v4.3.1Compare Source
Changelog
Added
fediverse:creator(#32383 by @ClearlyClaire)Changed
Removed
Getting the embed code is only reliable for local posts.
It never worked for non-Mastodon servers, and stopped working correctly with the changes made in 4.3.0.
We have therefore decided to remove the menu entry while we investigate solutions.
Fixed
REDIS_USERNAMEinstead ofREDIS_USER(#32493 by @ThisIsMissEm)Upgrade notes
To get the code for v4.3.1, use
git fetch && git checkout v4.3.1.Dependencies
External dependencies have not changed since v4.3.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
Update steps
The following instructions are for updating from 4.3.0.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, please read the v4.3.0 release notes, as there have been multiple important changes.
Non-docker
bundle installandyarn install --immutableRAILS_ENV=production bundle exec rails assets:precompileWhen using docker
v4.3.0Compare Source
Upgrade overview
This release contains upgrade notes that deviate from the norm:
ℹ️ Requires streaming API restart
ℹ️ Requires database migrations
ℹ️ The logging format of the streaming server has changed
For more information, view the complete release notes and scroll down to the upgrade instructions section.
Changelog
The following changelog entries focus on changes visible to users, administrators, client developers or federated software developers, but there has also been a lot of code modernization, refactoring, and tooling work, in particular by @mjankowski.
Security
This fixes a longstanding open redirect in Mastodon, at the cost of added friction when local links to remote resources are shared.
form-actionContent-Security-Policy directive to be more restrictive (#26897 and #32241 by @ClearlyClaire)Added
Add server-side notification grouping (#29889, #30576, #30685, #30688, #30707, #30776, #30779, #30781, #30440, #31062, #31098, #31076, #31111, #31123, #31223, #31214, #31224, #31299, #31325, #31347, #31304, #31326, #31384, #31403, #31433, #31509, #31486, #31513, #31592, #31594, #31638, #31746, #31652, #31709, #31725, #31745, #31613, #31657, #31840, #31610, #31929, #32089, #32085, #32243, #32179 and #32254 by @ClearlyClaire, @Gargron, @mgmn, and @renchap)
Group notifications of the same type for the same target, so that your notifications no longer get cluttered by boost and favorite notifications as soon as a couple of your posts get traction.
This is done server-side so that clients can efficiently get relevant groups without having to go through numerous pages of individual notifications.
As part of this, the visual design of the entire notifications feature has been revamped.
The API consists of:
group_keyattribute toNotificationentitiesGET /api/v2/notifications: https://docs.joinmastodon.org/methods/grouped_notifications/#get-groupedGET /api/v2/notifications/:group_key: https://docs.joinmastodon.org/methods/grouped_notifications/#get-notification-groupGET /api/v2/notifications/:group_key/accounts: https://docs.joinmastodon.org/methods/grouped_notifications/#get-group-accountsPOST /api/v2/notifications/:group_key/dismiss: https://docs.joinmastodon.org/methods/grouped_notifications/#dismiss-groupGET /api/v2/notifications/:unread_count: https://docs.joinmastodon.org/methods/grouped_notifications/#unread-group-countAdd notification policies, filtered notifications and notification requests (#29366, #29529, #29433, #29565, #29567, #29572, #29575, #29588, #29646, #29652, #29658, #29666, #29693, #29699, #29737, #29706, #29570, #29752, #29810, #29826, #30114, #30251, #30559, #29868, #31008, #31011, #30996, #31149, #31220, #31222, #31225, #31242, #31262, #31250, #31273, #31310, #31316, #31322, #31329, #31324, #31331, #31343, #31342, #31309, #31358, #31378, #31406, #31256, #31456, #31419, #31457, #31508, #31540, #31541, #31723, #32062 and #32281 by @ClearlyClaire, @Gargron, @TheEssem, @mgmn, @oneiros, and @renchap)
The old “Block notifications from non-followers”, “Block notifications from people you don't follow” and “Block direct messages from people you don't follow” notification settings have been replaced by a new set of settings found directly in the notification column.
You can now separately filter or drop notifications from people you don't follow, people who don't follow you, accounts created within the past 30 days, as well as unsolicited private mentions, and accounts limited by the moderation.
Instead of being outright dropped, notifications that you chose to filter are put in a separate “Filtered notifications” box that you can review separately without it clogging your main notifications.
This adds the following REST API endpoints:
GET /api/v2/notifications/policy: https://docs.joinmastodon.org/methods/notifications/#get-policyPATCH /api/v2/notifications/policy: https://docs.joinmastodon.org/methods/notifications/#update-the-filtering-policy-for-notificationsGET /api/v1/notifications/requests: https://docs.joinmastodon.org/methods/notifications/#get-requestsGET /api/v1/notifications/requests/:id: https://docs.joinmastodon.org/methods/notifications/#get-one-requestPOST /api/v1/notifications/requests/:id/accept: https://docs.joinmastodon.org/methods/notifications/#accept-requestPOST /api/v1/notifications/requests/:id/dismiss: https://docs.joinmastodon.org/methods/notifications/#dismiss-requestPOST /api/v1/notifications/requests/accept: https://docs.joinmastodon.org/methods/notifications/#accept-multiple-requestsPOST /api/v1/notifications/requests/dismiss: https://docs.joinmastodon.org/methods/notifications/#dismiss-multiple-requestsGET /api/v1/notifications/requests/merged: https://docs.joinmastodon.org/methods/notifications/#requests-mergedIn addition, accepting one or more notification requests generates a new streaming event:
notifications_merged: an event of this type indicates accepted notification requests have finished merging, and the notifications list should be refreshedAdd notifications of severed relationships (#27511, #29665, #29668, #29670, #29700, #29714, #29712, and #29731 by @ClearlyClaire and @Gargron)
Notify local users when they lose relationships as a result of a local moderator blocking a remote account or server, allowing the affected user to retrieve the list of broken relationships.
Note that this does not notify remote users.
This adds the
severed_relationshipsnotification type to the REST API and streaming, with a neweventattribute.Add hover cards in web UI (#30754, #30864, #30850, #30879, #30928, #30949, #30948, #30931, and #31300 by @ClearlyClaire, @Gargron, and @renchap)
Hovering over an avatar or username will now display a hover card with the first two lines of the user's description and their first two profile fields.
This can be disabled in the “Animations and accessibility” section of the preferences.
Add "system" theme setting (light/dark theme depending on user system preference) (#29748, #29553, #29795, #29918, #30839, and #30861 by @nshki, @ErikUden, @mjankowski, @renchap, and @vmstan)
Add a “system” theme that automatically switch between default dark and light themes depending on the user's system preferences.
Also changes the default server theme to this new “system” theme so that automatic theme selection happens even when logged out.
Add timeline of public posts about a trending link (#30381 and #30840 by @Gargron)
You can now see public posts mentioning currently-trending articles from people who have opted into discovery features.
This adds a new REST API endpoint:
GET /api/v1/timelines/link?url=:url: https://docs.joinmastodon.org/methods/timelines/#linkAdd author highlight for news articles whose authors are on the fediverse (#30398, #30670, #30521, #30846, #31819, #31900 and #32188 by @Gargron, @mjankowski and @oneiros)
This adds a mechanism to highlight the author of news articles shared on Mastodon.
Articles hosted outside the fediverse can indicate a fediverse author with a meta tag:
On the API side, this is represented by a new
authorsattribute to thePreviewCardentity: https://docs.joinmastodon.org/entities/PreviewCard/#authorsUsers can allow arbitrary domains to use
fediverse:creatorto credit them by visiting/settings/verification.This is federated as a new
attributionDomainsproperty in thehttp://joinmastodon.org/nsnamespace, containing an array of domain names: https://docs.joinmastodon.org/spec/activitypub/#properties-used-1Add in-app notifications for moderation actions and warnings (#30065, #30082, and #30081 by @ClearlyClaire)
In addition to email notifications, also notify users of moderation actions or warnings against them directly within the app, so they are less likely to miss important communication from their moderators.
This adds the
moderation_warningnotification type to the REST API and streaming, with a newmoderation_warningattribute.Add domain information to profiles in web UI (#29602 by @Gargron)
Clicking the domain of a user in their profile will now open a tooltip with a short explanation about servers and federation.
Add support for Redis sentinel (#31694, #31623, #31744, #31767, and #31768 by @ThisIsMissEm and @oneiros)
See https://docs.joinmastodon.org/admin/scaling/#redis-sentinel
Add ability to reorder uploaded media before posting in web UI (#28456 and #32093 by @Gargron)
Add “A Mastodon update is available.” message on admin dashboard for non-bugfix updates (#32106 by @ClearlyClaire)
Add ability to view alt text by clicking the ALT badge in web UI (#32058 by @Gargron)
Add preview of followers removed in domain block modal in web UI (#32032 and #32105 by @ClearlyClaire and @Gargron)
Add reblogs and favourites counts to statuses in ActivityPub (#32007 by @Gargron)
Add moderation interface for searching hashtags (#30880 by @ThisIsMissEm)
Add ability for admins to configure instance favicon and logo (#30040, #30208, #30259, #30375, #30734, #31016, and #30205 by @ClearlyClaire, @FawazFarid, @JasonPunyon, @mgmn, and @renchap)
This is also exposed through the REST API: https://docs.joinmastodon.org/entities/Instance/#icon
Add
api_versionsto/api/v2/instance(#31354 by @ClearlyClaire)Add API version number to make it easier for clients to detect compatible features going forward.
See API documentation at https://docs.joinmastodon.org/entities/Instance/#api-versions
Add quick links to Administration and Moderation Reports from Web UI (#24838 by @ThisIsMissEm)
Add link to
/admin/rolesin moderation interface when changing someone's role (#31791 by @ClearlyClaire)Add recent audit log entries in federation moderation interface (#27386 by @ThisIsMissEm)
Add profile setup to onboarding in web UI (#27829, #27876, and #28453 by @Gargron)
Add prominent share/copy button on profiles in web UI (#27865 and #27889 by @ClearlyClaire and @Gargron)
Add optional hints for server rules (#29539 and #29758 by @ClearlyClaire and @Gargron)
Server rules can now be broken into a short rule name and a longer explanation of the rule.
This adds a new
hintattribute toRuleentities in the REST API.Add support for PKCE in OAuth flow (#31129 by @ThisIsMissEm)
Add CDN cache busting on media deletion (#31353 and #31414 by @ClearlyClaire and @tribela)
Add the OAuth application used in local reports (#30539 by @ThisIsMissEm)
Add hint to user that other remote statuses may be missing (#26910, #31387, and #31516 by @Gargron, @audiodude, and @renchap)
Add lang attribute on preview card title (#31303 by @c960657)
Add check for
Content-LengthinResponseWithLimitAdapter(#31285 by @c960657)Add
Accept-Languageheader to fetch preview cards in the server's default language (#31232 by @c960657)Add support for PKCE Extension in OmniAuth OIDC through the
OIDC_USE_PKCEenvironment variable (#31131 by @ThisIsMissEm)Add API endpoints for unread notifications count (#31191 by @ClearlyClaire)
This adds the following REST API endpoints:
GET /api/v1/notifications/unread_count: https://docs.joinmastodon.org/methods/notifications/#unread-countAdd
/keyboard shortcut to focus the search field (#29921 by @ClearlyClaire)Add button to view the Hashtag on the instance from Hashtags in Moderation UI (#31533 by @ThisIsMissEm)
Add list of pending releases directly in mail notifications for version updates (#29436 and #30035 by @ClearlyClaire)
Add “Appeals” link under “Moderation” navigation category in moderation interface (#31071 by @ThisIsMissEm)
Add badge on account card in report moderation interface when account is already suspended (#29592 by @ClearlyClaire)
Add admin comments directly to the
admin/instancespage (#29240 by @tribela)Add ability to require approval when users sign up using specific email domains (#28468, #28732, #28607, and #28608 by @ClearlyClaire)
Add banner for forwarded reports made by remote users about remote content (#27549 by @ClearlyClaire)
Add support HTML ruby tags in remote posts for east-asian languages (#30897 by @ThisIsMissEm)
Add link to manage warning presets in admin navigation (#26199 by @vmstan)
Add volume saving/reuse to video player (#27488 by @thehydrogen)
Add Elasticsearch index size, ffmpeg and ImageMagick versions to the admin dashboard (#27301, #30710, #31130, and #30845 by @vmstan)
Add
MASTODON_SIDEKIQ_READY_FILENAMEenvironment variable to use a file for Sidekiq to signal it is ready to process jobs (#30971 and #30988 by @renchap)In the official Docker image, this is set to
sidekiq_process_has_started_and_will_begin_processing_jobsso that Sidekiq will touchtmp/sidekiq_process_has_started_and_will_begin_processing_jobsto signal readiness.Add
S3_RETRY_LIMITenvironment variable to make S3 retries configurable (#23215 by @smiba)Add
S3_KEY_PREFIXenvironment variable (#30181 by @S0yKaf)Add support for multiple
redirect_uriswhen creating OAuth 2.0 Applications (#29192 by @ThisIsMissEm)Add Interlingue and Interlingua to interface languages (#28630 and #30828 by @Dhghomon and @renchap)
Add Kashubian, Pennsylvania Dutch, Vai, Jawi Malay, Mohawk and Low German to posting languages (#26024, #26634, #27136, #29098, #27115, and #27434 by @EngineerDali, @HelgeKrueger, and @gunchleoc)
Add option to use native Ruby driver for Redis through
REDIS_DRIVER=ruby(#30717 by @vmstan)Add support for libvips in addition to ImageMagick (#30090, #30590, #30597, #30632, #30857, #30869, #30858 and #32104 by @ClearlyClaire, @Gargron, and @mjankowski)
Server admins can now use libvips as a faster and lighter alternative to ImageMagick for processing user-uploaded images.
This requires libvips 8.13 or newer, and needs to be enabled with
MASTODON_USE_LIBVIPS=true.This is enabled by default in the official Docker images, and is intended to completely replace ImageMagick in the future.
Add validations to
Web::PushSubscription(#30540 and #30542 by @ThisIsMissEm)Add anchors to each authorized application in
/oauth/authorized_applications(#31677 by @fowl2)Add active animation to header settings button (#30221, #30307,
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.