Skip to content

Latest commit

 

History

History
111 lines (66 loc) · 3.67 KB

CHANGELOG.md

File metadata and controls

111 lines (66 loc) · 3.67 KB
Raw

Unreleased

Changed

  • Nodeinfo will only count users from database up to once per day, using a cached count for subsequent requests within 24 hours. This can help limit query targeting warnings from mongo

Ops

  • Add nock fetch work around to fix tests in node 18.
  • Adjust workflow to run tests using node 18 and 16. Don't run tests against 14.

v4.4.1 (2023-06-23)

Fixed

  • Fix unverifiable delete detection when object is a tombstone
  • Also handle unverifiable updates

v4.4.0 (2023-06-23)

Added

  • Added ability to verify signatures from remote actors that have changed their signature keys (blind key rotation)

Fixed

  • Fix bug not finding already cached actors keys and refetching from remote server unnecessarily
  • Handle inbox unverifiable deletes without trying to fetch remote actor object (Mastodon compat)
  • Avoid error when receiving an embedded object for the object property when an activity object is expected (Hubzilla compat)

v4.3.0 (2023-05-26)

Added

  • Federation http requests now include a User-Agent string formed from your apex settings: ${settings.name}/${settings.version} (+http://${settings.domain})

v4.2.2 (2023-01-28)

Fixed

  • Fix jsonld validator no longer accepting application/ld+json; profile="https://www.w3.org/ns/activitystreams" for POST

v4.2.1 (2023-01-27)

Fixed

  • Fix jsonld validator not accepting application/ld+json; profile="https://www.w3.org/ns/activitystreams" for GET

Security

  • Update cookiejar for GHSA-h452-7996-h45h

v4.2.0 (2023-01-18)

Added

  • new baseUrl config option that allows you to specify server origin instead of domain which specifies the host but assumes https protocol

Fixed

  • Unhandled error from invalid inputs in collection page requests

v4.1.2 (2023-01-06)

Changed

v4.1.1 (2022-11-09)

Fixed

  • Fixed not finding shared inbox endpoints due to looking in the wrong place

v4.1.0 (2022-11-09)

Added

  • Implement delivery consolidation to shared inboxes where available

v4.0.1 (2022-11-05)

Changed

  • Update operations no longer try to update object.object.id (i.e. an Object of an Activity that is itself nested as the object of another activity). This un-indexed query was consuming a lot of cpu and always turned up empty anyway.

v4.0.0 (2022-11-02)

Changed

  • lockfile udpated to v2 and engines minimum to node 16/npm 7
  • http-signatures fork dependency changed to explicitly use https instead of ssh so package can be installed in CI with npm >=7

This version may still work with node 14/npm 6, but marking change as breaking because it sometimes fails to handle v2 lockfiles correctly

v3.3.0 (2022-08-11)

Added

  • New index on streams.object.id to cover Update on embedded objects (expect a one-time slow startup to build the index)
  • getCollection gains optional query argument which is passsed through to store.getStream to allow additional filtering or aggregation to be applied

v3.2.0 (2022-06-23)

  • Undo activity can now take a blocked user IRI as its object and will resolve to that block activity to allow easily unblocking withough knowing the original block activity IRI

v3.1.2

  • Ignore incoming JSON-LD default language to fix processing for activities coming from Pleroma

v3.1.1

  • Fix inbox undo not succeeding if the object was already deleted
  • Update dependencies

For previous release notes, see Github releases