Repository navigation

Releases

Social 0.24.1 Latest

Latest

SchBenedikt released this 17 Sep 12:32

v0.24.1

08bd074

✨ Highlights in Social 0.24.1

This release continues the work from Social 0.23.0 with a focused set of federation, timeline, composer and usability improvements.

📰 More reliable timelines

🏠 Posts that mention you appear on your Home timeline again
🔄 Conditional polling now keeps the cache headers it depends on
🧠 Timeline cache tags also respect the reader's own visibility and filtering decisions
🧹 Navigation filters the content already carried by the page instead of showing stale entries
🌱 Empty filtered Home timelines recover correctly instead of remaining blank
🛡️ Inbox delivery rejects activities that no local object could require

✍️ A smoother composer

🚪 Leave a filled composer cleanly without losing the expected state
🗳️ Polls, content warnings and previews close reliably when their dialogs are dismissed
📍 The place picker fits its available space and closes correctly
📁 Files selected as attachments can be confirmed reliably
🧭 Settings shortcuts are now grouped with the account actions where users expect them

🧮 Data correctness & migration

🔢 Counters now read and update the same columns used by recount operations
🗃️ Migration backfills are batched to work on the smallest supported database
🧪 New end-to-end coverage protects the place picker, Files attachment flow and Settings ordering

📚 Compatibility & documentation

🐘 The Mastodon compatibility documentation now clearly explains the deliberate document-upload difference
🧱 Includes the 0.24.0 release changes and follow-up fixes from the 0.23.x line

Full Changelog: v0.23.0...v0.24.1

What's Changed

Fix the nine defects a fresh look at 0.23.0 found by @karlitschek in #2211
Five ways out that were not there: the composer, its panels, and the settings order by @karlitschek in #2212

Full Changelog: v0.23.0...v0.24.1

Contributors

karlitschek

Assets 3

Social 0.23.0

SchBenedikt released this 16 Sep 13:32

v0.23.0

394f2da

✨ Highlights since v0.10.0

Social 0.23.0 is a major evolution of Nextcloud Social. It brings a much more complete, accessible and interoperable social experience to your Nextcloud — from everyday posting and media sharing to federation, moderation and administration.

🌍 Federation & interoperability

🤝 More reliable ActivityPub federation with hardened actor signatures, delivery, inbox handling and remote visibility
🐘 Broader Mastodon compatibility, including follow/unfollow, search, filters, preferences, familiar followers, peers and activity integration
🦣 Pixelfed-compatible routes, account import, stories, collections, reports, direct messages and administrative workflows
📺 PeerTube interoperability: discover channels, stream remote videos and publish videos that PeerTube can consume
🔁 Relays for bringing public posts from other federated servers into a local timeline
🔗 Deep links that open posts and profiles in the right place, plus link previews and rich unfurls in Talk, Text and Deck
🧭 WebFinger, NodeInfo and federation-health checks for administrators

✍️ Publishing & conversations

📝 Edit and delete posts, with a visible edit history
💬 Replies displayed as conversations, with improved thread resolution and reply forwarding
❗ Content warnings for posts and media
⏰ Scheduled posts with a queue visible in account settings
🗣️ Quote posts with author-controlled quote permissions
#️⃣ Hashtag following, trending hashtags and hashtag discovery
🗳️ Create, view and vote in federated polls
😀 Emoji reactions and custom emoji from other instances
🔒 Per-post visibility controls and clearer audience handling

👥 Social graph & discovery

🔐 Locked accounts with approvable follow requests
🚫 Account blocking, muting, timed mutes and domain blocks
📋 Personal lists, keyword filters and automatic lists for Nextcloud groups
🧭 Discover page with suggested accounts, starter packs and people from the same Nextcloud
⭐ Pinned posts, endorsements, notes and familiar-follower context
🔔 A complete notifications area with unread counts and actionable follow requests

🖼️ Photos, video & audio

📎 Attach images, video and audio to posts, with improved upload and attachment management
🖼️ Alt text, focal points, WebP support and automatic removal of camera metadata such as GPS coordinates
🎬 Dedicated Videos timelines, video watch pages, chapters, RSS feeds and PeerTube channel support
📡 Byte-range streaming, poster frames, HLS transcoding ladders and configurable video quotas
🛡️ Moderation controls for sensitive media and posts containing video
📁 Share pictures and videos directly from the Nextcloud Files app

👤 Profiles, accounts & personal data

🪪 Profile tabs for Posts, Photos and Videos, richer biographies and profile metadata fields
✅ Verified profile links with rel="me" guidance
📊 Personal and instance statistics, comparisons over the last 30 days and post-level insights
📤 Import and export for follows, followers, blocks, mutes and lists
🔑 Authorized-app management with visibility into access and last use
🗑️ Delete a Social account while correctly notifying federated servers
👋 First-run introduction for new users

🛡️ Moderation, security & administration

🧑‍⚖️ Reporting workflows and an administration moderation panel
📣 Instance announcements and moderation settings through the admin interface
🧰 Admin API and setup checks for WebFinger, instance identity, delivery and outbound queues
🧱 Stronger OAuth protection with scoped tokens, CSRF protection, brute-force protection and hashed client secrets
🔐 Encrypted actor private keys at rest and safer outbound-request/SSRF handling
🚦 Rate limiting for incoming federation deliveries and bounded signature replay windows
🧹 Retention controls for remote content and clearer federation queue status

📱 Accessibility, usability & performance

📱 Responsive phone layout and a smoother mobile composer
⌨️ Keyboard-friendly navigation, screen-reader improvements and accessible timeline reading
✨ View transitions, hover cards, drag-and-drop, rolling counters and a more polished timeline
🏠 Expanded dashboard widgets for timelines, mentions, direct messages, bookmarks and follow requests
⚡ Faster timelines, lighter pages, improved caching and queue processing, database indexes and fewer round trips
🧪 Broader frontend, backend, integration, browser and interoperability test coverage
🌐 Translated error messages and improved documentation aligned with the implementation

Social 0.23.0

What's Changed

v0.10.1: Fix federation bugs, migrations, and cleanup by @SchBenedikt in #2004
fix: sanitize remote HTML with an allowlist instead of strip_tags by @karlitschek in #2023
test: add backend and frontend unit test suites by @karlitschek in #2027
docs: bring the documentation in line with the implementation by @karlitschek in #2028
fix: harden federation trust, OAuth and outbound requests by @karlitschek in #2030
fix: repair the basics — debug output, remote deletions, and four dead paths by @karlitschek in #2029
fix: repair broken timeline, profile and search behaviour in the UI by @karlitschek in #2032
fix: repair the cron/queue failure paths and index the timeline hot path by @karlitschek in #2031
fix(deps): resolve the production npm advisories shipped in the bundle by @karlitschek in #2033
fix: brute-force protect the OAuth token endpoint and add alt text to images by @karlitschek in #2034
fix: repair model and service correctness defects found by the unit suite by @karlitschek in #2036
fix: guard Move with alsoKnownAs and encrypt actor private keys at rest by @karlitschek in #2037
fix: repair mention rendering, timeline paging and rollback defects in the UI by @karlitschek in #2038
feat: implement account blocking and muting by @karlitschek in #2035
fix: enforce OAuth token scopes and CSRF, hash client credentials at rest by @karlitschek in #2039
fix: bound signature replay windows and fail loudly on signing errors by @karlitschek in #2040
fix: implement bookmarks, stop leaking internals, repair the controller edges by @karlitschek in #2041
test: wire the integration suite into CI and grow it across the Db layer by @karlitschek in #2042
fix: fresh-instance timelines and version-independent SSRF classification by @karlitschek in #2043
feat: locked accounts with approvable follow requests by @karlitschek in #2045
feat: reporting with a moderation panel in the admin settings by @karlitschek in #2046
feat: complete the media API — v2 upload, alt text, and attachment management by @karlitschek in #2044
chore(deps-dev): bump browserslist from 4.28.2 to 4.28.8 by @dependabot[bot] in #2026
chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.7 by @dependabot[bot] in #2025
chore(deps-dev): bump dockerode from 5.0.0 to 5.0.1 by @dependabot[bot] in #2024
Use Pleroma-compatible version string by @mkljczk in #1616
chore(deps-dev): bump webpack-dev-server from 5.2.4 to 5.2.6 by @dependabot[bot] in #2016
ci: update reuse.yml workflow from template by @nextcloud-command in #1980
chore(deps): bump friendica/json-ld from 1.1.4 to 1.1.5 by @dependabot[bot] in #2006
chore(deps): bump shell-quote from 1.8.4 to 1.10.0 by @dependabot[bot] in #2015
chore(deps-dev): bump brace-expansion from 1.1.15 to 1.1.18 by @dependabot[bot] in #2019
fix: keep the Mastodon-compatible version string out of NodeInfo by @karlitschek in #2049
build: update node and npm engines versions by @nextcloud-command in #1983
fix: webfinger without a resource parameter is a 400 by @karlitschek in #2048
feat: estimate the visibility of incoming remote statuses by @karlitschek in #2050
fix: escape post content before newline conversion, everywhere by @karlitschek in #2051
ci: reuse check back on ubuntu-latest by @karlitschek in #2052
chore(deps-dev): bump nextcloud/coding-standard from 1.3.2 to 1.5.0 by @dependabot[bot] in #2005
chore(deps): bump gumlet/php-image-resize from 2.0.4 to 3.0.0 by @dependabot[bot] in #2013
chore(deps-dev): bump http-proxy-middleware from 2.0.9 to 2.0.10 by @dependabot[bot] in #2047
chore: apply nextcloud/coding-standard 1.5 by @karlitschek in #2053
fix: backfill the vis...

Contributors

karlitschek, mkljczk, and 3 other contributors

Assets 3

v0.10.0

SchBenedikt released this 10 Jun 09:22

v0.10.0

04035d7

What's Changed

chore: update node engines to next LTS by @nextcloud-command in #1795
Fix Markdown format in app description by @ahangarha in #1799
Modernize e2e tests by @artonge in #1748
Create pr-feedback.yml by @artonge in #1807
removing deprecated event by @ArtificialOwl in #1865
Update README.md by @codesmith-emmy in #1880
feat(deps): Add Nextcloud 29 support by @nickvergessen in #1870
chore(CI): Adjust testing matrix for Nextcloud 29 on master by @nickvergessen in #1885
Updating pr-feedback.yml workflow from template by @nextcloud-command in #1886
chore: update workflows from templates by @nextcloud-command in #1875
chore: update workflows from templates by @nextcloud-command in #1891
chore: migrate reuse to toml by @AndyScherzinger in #1892
Chore(deps): Bump semver from 5.7.1 to 5.7.2 by @dependabot[bot] in #1811
Updating cypress.yml workflow from template by @nextcloud-command in #1804
chore: Update icons to latest Material Symbols by @AndyScherzinger in #1904
Add SPDX header to all PHP files by @AndyScherzinger in #1905
Add SPDX header by @AndyScherzinger in #1906
Add npm audit fix by @AndyScherzinger in #1910
Update npm and node engines versions by @nextcloud-command in #1878
[master] Fix npm audit by @nextcloud-command in #1914
chore: Remove reference to ILogger by @artonge in #1937
[master] Fix npm audit by @nextcloud-command in #1938
Chore(deps): Bump cookie and express by @dependabot[bot] in #1940
fixing composer conflict by @ArtificialOwl in #1943
[PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated by @Ayesh in #1879
chore(CI): Updating reuse.yml workflow from template by @nextcloud-command in #1958
Chore(deps): Bump tar-fs and dockerode by @dependabot[bot] in #1967
chore(CI): Updating pr-feedback.yml workflow from template by @nextcloud-command in #1962
ci: update node.yml workflow from template by @nextcloud-command in #1966
refactor(QueryBuilder): Port away from execute() by @CarlSchwan in #1989
Fix Content-Type for ActivityPub requests by @driusan in #1987
refactor: Port away from QueryException by @CarlSchwan in #1994
New Social App by @SchBenedikt in #2002