Fedify 2.2.15

Released on September 30, 2026.

@fedify/fedify

• Fixed Context.routeActivity() passing the caller's unverified document to inbox queues and forwarding after verifying a fetched activity. Queued listeners and forwarding now use the verified activity's document. [GHSA-39gj-rchc-q5m3]
• Fixed custom collections named with symbols so they can be served and parsed, including ordered collections and pages. Applications using symbol names no longer need to replace them with strings. [#1144, #1173]

@fedify/cfworkers

• Fixed WorkersKvStore treating stored null values as missing keys when reading or listing. Applications can now store and retrieve null without losing it. [#1175, #1181]

@fedify/denokv

• Fixed DenoKvStore treating stored null values as missing keys when reading, listing, or comparing values. Applications can now store and retrieve null without losing it. [#1175, #1181]

@fedify/lint

• Fixed outbox-listener-delivery-required treating a delivery function installed by an uncalled or late local setup helper as delivered. The rule now considers a direct setup call before the installed function is used. [#1126, #1174]