Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix missing return values in streaming #26233

Merged
merged 1 commit into from Jul 28, 2023
Merged

Conversation

renchap
Copy link
Sponsor Member

@renchap renchap commented Jul 28, 2023

Introduced in #26213

@renchap renchap added streaming Streaming server build-image Build a container image for this PR labels Jul 28, 2023
Copy link
Contributor

@ThisIsMissEm ThisIsMissEm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, that's the fix!

@Gargron Gargron merged commit 3554c52 into mastodon:main Jul 28, 2023
30 checks passed
This was referenced Jul 28, 2023
ClearlyClaire added a commit to glitch-soc/mastodon that referenced this pull request Jul 30, 2023
* Cleanup unused portions of statuses/status partial (mastodon#26045)

* Wrong count in response when removing favourite/reblog (mastodon#24365)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Paperclip: add support for Azure blob storage (mastodon#23607)

* Fix a missing redirection on getting-started in multi column mode (mastodon#26070)

* Fix haml-lint Rubocop `Style/NumericPredicate` cop (mastodon#26040)

* Change casing for 'Server Settings' string (mastodon#26011)

* Move localized subject mailer shared example to separate file (mastodon#25889)

* Fix haml-lint Rubocop `Lint/UnusedBlockArguments` cop (mastodon#26039)

* Fix `Lint/Void` cop (mastodon#25922)

* Add stricter protocol fields validation for accounts (mastodon#25937)

* Improve the bug report templates (mastodon#25621)

* Fix the crossorigin attribute (mastodon#26096)

* Fix replica being used even if not explicitly defined (mastodon#26074)

* Clean up unused application records (mastodon#24871)

* Change thread view to scroll to the selected post rather than the post being replied to (mastodon#24685)

* Change default KeyGenerator digest to SHA1 to fix cookies in rolling upgrades (mastodon#26023)

* change focus ui for keyboard only input (mastodon#25935)

* Use username as display name for suspended users or users with blank display names (mastodon#25276)

* Fix CSP headers being unintendedly wide (mastodon#26105)

* Fix linting issue (mastodon#26106)

* Replace 'favourite' by 'favorite' for American English (mastodon#26009)

* Override default Action Mailer `preview_path` (mastodon#26110)

* Favourits -> Favorites (mastodon#26109)

* Bump version to v4.1.5 (mastodon#26108)

* Fix incorrect connect timeout in outgoing requests (mastodon#26116)

* Fix missing translation strings for importing lists (mastodon#26120)

* Use valid email address for first account (mastodon#26114)

* Update haml-lint 0.49.1 (mastodon#26118)

* Fix focus and hover styles in web UI (mastodon#26125)

* Remove back button from bookmarks, favourites and lists screens in web UI (mastodon#26126)

* Remove 16:9 cropping from web UI (mastodon#26132)

* Change design of link previews in web UI (mastodon#26136)

* change poll form element colors to fit with the rest of the ui (mastodon#26139)

* Add `lang` attribute to trending links (mastodon#26111)

* Update dependency rdf-normalize to v0.6.1 (mastodon#26130)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency brakeman to v6.0.1 (mastodon#26141)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency postcss to v8.4.27 (mastodon#26144)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix unexpected redirection to /explore after sign-in (mastodon#26143)

* Update dependency aws-sdk-s3 to v1.131.0 (mastodon#26145)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add report.updated webhook (mastodon#24211)

* Fix LinkCrawlWorker crashing on `null` `created_at` (mastodon#26151)

* Fix UI Overlap with the loupe icon in the Explore Tab (mastodon#26113)

* Fix missing border on error screen in light theme in web UI (mastodon#26152)

* Fix missing action label on sensitive videos and embeds in web UI (mastodon#26135)

* Fix `lang` for UI texts in link preview (mastodon#26149)

* Add published date and author to news on the explore screen in web UI (mastodon#26155)

* Coverage for `Auth::OmniauthCallbacks` controller (mastodon#26147)

* fix poll input active style (mastodon#26162)

* Add `published_at` attribute to preview cards (mastodon#26153)

* Update dependency sass to v1.64.1 (mastodon#26146)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Revert poll colors to green outside of compose form (mastodon#26164)

* Preserve translation on status re-import (mastodon#26168)

* Fix missing GIF badge in account gallery (mastodon#26166)

* Reformat large text arg in `FetchLinkCardService` spec (mastodon#26183)

* Ignore long line in regex initializer (mastodon#26182)

* Reformat large key values in service specs (mastodon#26181)

* Reformat large hash in `ContextHelper` module (mastodon#26180)

* Use heredoc SQL blocks in `AddFromAccountIdToNotifications` migration (mastodon#26178)

* Extract private methods in `StatusCacheHydrator` (mastodon#26177)

* New Crowdin Translations (automated) (mastodon#26072)

Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Remove the `sr` locale override .rb files (mastodon#25927)

* Use correct naming on controller concern specs (mastodon#26197)

* Migrate to request specs in `/api/v2/filters` (mastodon#25721)

* Fix wrong filters sometimes applying in streaming (mastodon#26159)

* Refactor streaming's filtering logic & improve documentation (mastodon#26213)

* Add role badges to the WebUI (mastodon#25649)

* Change interaction modal in web UI (mastodon#26075)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

* Fix crash when processing Flag activity with no status (mastodon#26189)

* Storage: add :azure to remaining callers (mastodon#26080)

* Remove queued_at value from pubsub payloads (mastodon#26173)

* Fix emoji picker button scrolling with textarea content in single-column view (mastodon#25304)

* Change the wording of the dismissable explore prompt (mastodon#25917)

* Update dependency haml_lint to v0.49.2 (mastodon#26222)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix: Streaming server memory leak in HTTP EventSource cleanup (mastodon#26228)

* Swap debug statements in streaming server (mastodon#26231)

* Fix missing return values in streaming (mastodon#26233)

* [Glitch] Wrong count in response when removing favourite/reblog

Port 4c18928 to glitch-soc

Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Fix a missing redirection on getting-started in multi column mode

Port 586b1c9 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Change thread view to scroll to the selected post rather than the post being replied to

Port e4ea80d to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Replace 'favourite' by 'favorite' for American English

Port 217ef7f to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] change poll form element colors to fit with the rest of the ui

Port 80809ef to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Add `lang` attribute to trending links

Port 76fce34 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Fix UI Overlap with the loupe icon in the Explore Tab

Port 9a567ec to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Fix missing border on error screen in light theme in web UI

Port d1a9f60 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Fix missing action label on sensitive videos and embeds in web UI

Port 714a206 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] fix poll input active style

Port 49d2e89 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Revert poll colors to green outside of compose form

Port ce1f35d to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Add published date and author to news on the explore screen in web UI

Port f826a95 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Preserve translation on status re-import

Port 6781dc6 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Fix missing GIF badge in account gallery

Port a4b69be to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* Fix interaction modal being broken because of glitch-soc's theming system

* [Glitch] Change interaction modal in web UI

Port b4e739f to glitch-soc

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* [Glitch] Change the wording of the dismissable explore prompt

Port a4ec187 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

* Fix CSP tests in glitch-soc

---------

Signed-off-by: Claire <claire.github-309c@sitedethib.com>
Co-authored-by: Matt Jankowski <matt@jankowski.online>
Co-authored-by: Christian Schmidt <github@chsc.dk>
Co-authored-by: Misty De Méo <mistydemeo@gmail.com>
Co-authored-by: Stanislas Signoud <signez@stanisoft.net>
Co-authored-by: gunchleoc <fios@foramnagaidhlig.net>
Co-authored-by: Renaud Chaput <renchap@gmail.com>
Co-authored-by: Trevor Wolf <teeerevor@gmail.com>
Co-authored-by: наб <nabijaczleweli@nabijaczleweli.xyz>
Co-authored-by: mogaminsk <mgmnjp@icloud.com>
Co-authored-by: Nick Schonning <nschonni@gmail.com>
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vyr Cossont <VyrCossont@users.noreply.github.com>
Co-authored-by: gol-cha <info@mevo.xyz>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Daniel M Brasil <danielmbrasil@protonmail.com>
Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
nrdufour added a commit to nrdufour/home-ops that referenced this pull request Aug 1, 2023
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/mastodon/mastodon](https://github.com/mastodon/mastodon) | patch | `v4.1.2` -> `v4.1.6` |

---

### Release Notes

<details>
<summary>mastodon/mastodon (ghcr.io/mastodon/mastodon)</summary>

### [`v4.1.6`](https://github.com/mastodon/mastodon/releases/tag/v4.1.6)

[Compare Source](mastodon/mastodon@v4.1.5...v4.1.6)

<h1><picture>
  <source media="(prefers-color-scheme: dark)" srcset="./lib/assets/wordmark.dark.png?raw=true">
  <source media="(prefers-color-scheme: light)" srcset="./lib/assets/wordmark.light.png?raw=true">
  <img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true" height="34">
</picture></h1>

> ⚠️ We recently released critical security updates, so if you are still using 4.1.2 or below, 4.0.4 or below, or 3.5.8 or below, please update as soon as possible (see the release notes for [v4.1.4](https://github.com/mastodon/mastodon/releases/tag/v4.1.4)).

#### Upgrade overview

ℹ️ Requires streaming API restart

For more information, scroll down to the upgrade instructions section.

#### Changelog

##### Fixed

-   Fix memory leak in streaming server ([ThisIsMissEm](mastodon/mastodon#26228))
-   Fix wrong filters sometimes applying in streaming ([ClearlyClaire](mastodon/mastodon#26159), [ThisIsMissEm](mastodon/mastodon#26213), [renchap](mastodon/mastodon#26233))
-   Fix incorrect connect timeout in outgoing requests ([ClearlyClaire](mastodon/mastodon#26116))

#### Upgrade notes

To get the code for v4.1.6, use `git fetch && git checkout v4.1.6`.

> As always, **make sure you have backups of the database before performing any upgrades**. If you are using docker-compose, this is how a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump`

##### Dependencies

External dependencies have not changed compared to v4.1.5, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:

-   Ruby: 2.7 to 3.0
-   PostgreSQL: 9.5 or newer
-   Elasticsearch (optional, for full-text search): 7.x
-   Redis: 4 or newer
-   Node: >= 14, < 18
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it [on this page](mastodon/mastodon#25776).

##### Update steps

The following instructions are for updating from 4.1.5.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.

**Non-Docker only:**

1.  Install dependencies: `bundle install` and `yarn install`

**Both Docker and non-Docker:**

1.  Restart all Mastodon processes

### [`v4.1.5`](https://github.com/mastodon/mastodon/releases/tag/v4.1.5)

[Compare Source](mastodon/mastodon@v4.1.4...v4.1.5)

<h1><picture>
  <source media="(prefers-color-scheme: dark)" srcset="./lib/assets/wordmark.dark.png?raw=true">
  <source media="(prefers-color-scheme: light)" srcset="./lib/assets/wordmark.light.png?raw=true">
  <img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true" height="34">
</picture></h1>

> ⚠️ We recently released critical security updates, so if you are still using 4.1.2 or below, 4.0.4 or below, or 3.5.8 or below, please update as soon as possible (see the release notes for [v4.1.4](https://github.com/mastodon/mastodon/releases/tag/v4.1.4)).

#### Changelog

##### Added

-   Add check preventing Sidekiq workers from running with Makara configured ([ClearlyClaire](mastodon/mastodon#25850))

##### Changed

-   Change request timeout handling to use a longer deadline ([ClearlyClaire](mastodon/mastodon#26055))

##### Fixed

-   Fix moderation interface for remote instances with a .zip TLD ([ClearlyClaire](mastodon/mastodon#25885))
-   Fix remote accounts being possibly persisted to database with incomplete protocol values ([ClearlyClaire](mastodon/mastodon#25886))
-   Fix trending publishers table not rendering correctly on narrow screens ([vmstan](mastodon/mastodon#25945))

##### Security

-   Fix CSP headers being unintentionally wide ([ClearlyClaire](mastodon/mastodon#26105))

#### Upgrade notes

To get the code for v4.1.5, use `git fetch && git checkout v4.1.5`.

> As always, **make sure you have backups of the database before performing any upgrades**. If you are using docker-compose, this is how a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump`

##### Dependencies

External dependencies have not changed compared to v4.1.4, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:

-   Ruby: 2.7 to 3.0
-   PostgreSQL: 9.5 or newer
-   Elasticsearch (optional, for full-text search): 7.x
-   Redis: 4 or newer
-   Node: >= 14, < 18
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it [on this page](mastodon/mastodon#25776).

##### Update steps

The following instructions are for updating from 4.1.4.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.

**Non-Docker only:**

1.  Install dependencies: `bundle install` and `yarn install`

**Both Docker and non-Docker:**

1.  Restart all Mastodon processes

### [`v4.1.4`](https://github.com/mastodon/mastodon/releases/tag/v4.1.4)

[Compare Source](mastodon/mastodon@v4.1.3...v4.1.4)

<h1><picture>
  <source media="(prefers-color-scheme: dark)" srcset="./lib/assets/wordmark.dark.png?raw=true">
  <source media="(prefers-color-scheme: light)" srcset="./lib/assets/wordmark.light.png?raw=true">
  <img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true" height="34">
</picture></h1>

> This release addresses a few issues that were missed in the last security update and includes changelogs for both updates.
>
> ⚠️ It is a follow-up to the important 4.1.3 security release fixing multiple **critical security issues** (CVE-2023-36460, CVE-2023-36459).
>
> Corresponding security releases are available for the [4.0.x branch](https://github.com/mastodon/mastodon/releases/tag/v4.0.6) and the [3.5.x branch](https://github.com/mastodon/mastodon/releases/tag/v3.5.10).
> If you are using nightly builds, **do not use this release** but update to `nightly-2023-07-07-v4.1.4` or newer instead. If you are on the `main` branch, update to the latest commit.

#### Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires streaming API restart
ℹ️ There are suggested reverse proxy configuration changes
:warning: The minimal supported ImageMagick version has been bumped to 6.9.7-7

For more information, scroll down to the upgrade instructions section.

#### Changelog (v4.1.4)

##### Fixed

-   Fix branding:generate_app_icons failing because of disallowed ICO coder ([ClearlyClaire](mastodon/mastodon#25794))
-   Fix crash in admin interface when viewing a remote user with verified links ([ClearlyClaire](mastodon/mastodon#25796))
-   Fix processing of media files with unusual names ([ClearlyClaire](mastodon/mastodon#25788))

#### Changelog (v4.1.3)

##### Added

-   Add fallback redirection when getting a webfinger query `LOCAL_DOMAIN@LOCAL_DOMAIN` ([ClearlyClaire](mastodon/mastodon#23600))

##### Changed

-   Change OpenGraph-based embeds to allow fullscreen ([ClearlyClaire](mastodon/mastodon#25058))
-   Change AccessTokensVacuum to also delete expired tokens ([ClearlyClaire](mastodon/mastodon#24868))
-   Change profile updates to be sent to recently-mentioned servers ([ClearlyClaire](mastodon/mastodon#24852))
-   Change automatic post deletion thresholds and load detection ([ClearlyClaire](mastodon/mastodon#24614))
-   Change `/api/v1/statuses/:id/history` to always return at least one item ([ClearlyClaire](mastodon/mastodon#25510))
-   Change auto-linking to allow carets in URL query params ([renchap](mastodon/mastodon#25216))

##### Removed

-   Remove invalid `X-Frame-Options: ALLOWALL` ([ClearlyClaire](mastodon/mastodon#25070))

##### Fixed

-   Fix wrong view being displayed when a webhook fails validation ([ClearlyClaire](mastodon/mastodon#25464))
-   Fix soft-deleted post cleanup scheduler overwhelming the streaming server ([ThisIsMissEm](mastodon/mastodon#25519))
-   Fix incorrect pagination headers in `/api/v2/admin/accounts` ([danielmbrasil](mastodon/mastodon#25477))
-   Fix multiple inefficiencies in automatic post cleanup worker ([ClearlyClaire](mastodon/mastodon#24607), [ClearlyClaire](mastodon/mastodon#24785), [ClearlyClaire](mastodon/mastodon#24840))
-   Fix performance of streaming by parsing message JSON once ([ThisIsMissEm](mastodon/mastodon#25278), [ThisIsMissEm](mastodon/mastodon#25361))
-   Fix CSP headers when `S3_ALIAS_HOST` includes a path component ([ClearlyClaire](mastodon/mastodon#25273))
-   Fix `tootctl accounts approve --number N` not aproving N earliest registrations ([danielmbrasil](mastodon/mastodon#24605))
-   Fix reports not being closed when performing batch suspensions ([ClearlyClaire](mastodon/mastodon#24988))
-   Fix being able to vote on your own polls ([ClearlyClaire](mastodon/mastodon#25015))
-   Fix race condition when reblogging a status ([ClearlyClaire](mastodon/mastodon#25016))
-   Fix “Authorized applications” inefficiently and incorrectly getting last use date ([ClearlyClaire](mastodon/mastodon#25060))
-   Fix “Authorized applications” crashing when listing apps with certain admin API scopes ([ClearlyClaire](mastodon/mastodon#25713))
-   Fix multiple N+1s in ConversationsController ([ClearlyClaire](mastodon/mastodon#25134), [ClearlyClaire](mastodon/mastodon#25399), [ClearlyClaire](mastodon/mastodon#25499))
-   Fix user archive takeouts when using OpenStack Swift ([ClearlyClaire](mastodon/mastodon#24431))
-   Fix searching for remote content by URL not working under certain conditions ([ClearlyClaire](mastodon/mastodon#25637))
-   Fix inefficiencies in indexing content for search ([VyrCossont](mastodon/mastodon#24285), [VyrCossont](mastodon/mastodon#24342))

##### Security

-   Add finer permission requirements for managing webhooks ([ClearlyClaire](mastodon/mastodon#25463))
-   Update dependencies
-   Add hardening headers for user-uploaded files ([ClearlyClaire](mastodon/mastodon#25756))
-   Fix verified links possibly hiding important parts of the URL (CVE-2023-36462)
-   Fix timeout handling of outbound HTTP requests (CVE-2023-36461)
-   Fix arbitrary file creation through media processing (CVE-2023-36460)
-   Fix possible XSS in preview cards (CVE-2023-36459)

#### Upgrade notes

To get the code for v4.1.4, use `git fetch && git checkout v4.1.4`.

> As always, **make sure you have backups of the database before performing any upgrades**. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db\_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

##### Dependencies

Apart from ImageMagick, external dependencies have not changed compared to v4.1.2, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:

-   Ruby: 2.7 to 3.0
-   PostgreSQL: 9.5 or newer
-   Elasticsearch (optional, for full-text search): 7.x
-   Redis: 4 or newer
-   Node: >= 14, < 18
-   ImageMagick: 6.9.7-7 or newer

If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more informations and ways to fix it [on this page](mastodon/mastodon#25776).

##### Update steps

The following instructions are for updating from 4.1.2.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.

**Non-Docker only:**

1.  Install dependencies: `bundle install` and `yarn install`

**Both Docker and non-Docker:**

ℹ️ The recommended configuration for reverse proxies has been updated. Unlike updating Mastodon itself, this is not urgent, but hardening. The change is about setting `Content-Security-Policy: default-src 'none'; form-action 'none'` and `X-Content-Type-Options: nosniff` on assets. Check `dist/nginx.conf` for more information, and [the documentation](https://docs.joinmastodon.org/admin/optional/object-storage-proxy/) if you are proxying external object storage.

1.  Restart all Mastodon processes

### [`v4.1.3`](https://github.com/mastodon/mastodon/releases/tag/v4.1.3)

[Compare Source](mastodon/mastodon@v4.1.2...v4.1.3)

<h1><picture>
  <source media="(prefers-color-scheme: dark)" srcset="./lib/assets/wordmark.dark.png?raw=true">
  <source media="(prefers-color-scheme: light)" srcset="./lib/assets/wordmark.light.png?raw=true">
  <img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true" height="34">
</picture></h1>

> ⚠️ This release is an important security release fixing multiple **critical security issues** (CVE-2023-36460, CVE-2023-36459).
>
> Corresponding security releases are available for the [4.0.x branch](https://github.com/mastodon/mastodon/releases/tag/v4.0.5) and the [3.5.x branch](https://github.com/mastodon/mastodon/releases/tag/v3.5.9).
> If you are using nightly builds, **do not use this release** but update to `nightly-2023-07-06-security` or newer instead. If you are on the `main` branch, update to the latest commit.

#### Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires streaming API restart
ℹ️ There are suggested reverse proxy configuration changes
:warning: The minimal supported ImageMagick version has been bumped to 6.9.7-7

For more information, scroll down to the upgrade instructions section.

#### Changelog

##### Added

-   Add fallback redirection when getting a webfinger query `LOCAL_DOMAIN@LOCAL_DOMAIN` ([ClearlyClaire](mastodon/mastodon#23600))

##### Changed

-   Change OpenGraph-based embeds to allow fullscreen ([ClearlyClaire](mastodon/mastodon#25058))
-   Change AccessTokensVacuum to also delete expired tokens ([ClearlyClaire](mastodon/mastodon#24868))
-   Change profile updates to be sent to recently-mentioned servers ([ClearlyClaire](mastodon/mastodon#24852))
-   Change automatic post deletion thresholds and load detection ([ClearlyClaire](mastodon/mastodon#24614))
-   Change `/api/v1/statuses/:id/history` to always return at least one item ([ClearlyClaire](mastodon/mastodon#25510))
-   Change auto-linking to allow carets in URL query params ([renchap](mastodon/mastodon#25216))

##### Removed

-   Remove invalid `X-Frame-Options: ALLOWALL` ([ClearlyClaire](mastodon/mastodon#25070))

##### Fixed

-   Fix wrong view being displayed when a webhook fails validation ([ClearlyClaire](mastodon/mastodon#25464))
-   Fix soft-deleted post cleanup scheduler overwhelming the streaming server ([ThisIsMissEm](mastodon/mastodon#25519))
-   Fix incorrect pagination headers in `/api/v2/admin/accounts` ([danielmbrasil](mastodon/mastodon#25477))
-   Fix multiple inefficiencies in automatic post cleanup worker ([ClearlyClaire](mastodon/mastodon#24607), [ClearlyClaire](mastodon/mastodon#24785), [ClearlyClaire](mastodon/mastodon#24840))
-   Fix performance of streaming by parsing message JSON once ([ThisIsMissEm](mastodon/mastodon#25278), [ThisIsMissEm](mastodon/mastodon#25361))
-   Fix CSP headers when `S3_ALIAS_HOST` includes a path component ([ClearlyClaire](mastodon/mastodon#25273))
-   Fix `tootctl accounts approve --number N` not aproving N earliest registrations ([danielmbrasil](mastodon/mastodon#24605))
-   Fix reports not being closed when performing batch suspensions ([ClearlyClaire](mastodon/mastodon#24988))
-   Fix being able to vote on your own polls ([ClearlyClaire](mastodon/mastodon#25015))
-   Fix race condition when reblogging a status ([ClearlyClaire](mastodon/mastodon#25016))
-   Fix “Authorized applications” inefficiently and incorrectly getting last use date ([ClearlyClaire](mastodon/mastodon#25060))
-   Fix “Authorized applications” crashing when listing apps with certain admin API scopes ([ClearlyClaire](mastodon/mastodon#25713))
-   Fix multiple N+1s in ConversationsController ([ClearlyClaire](mastodon/mastodon#25134), [ClearlyClaire](mastodon/mastodon#25399), [ClearlyClaire](mastodon/mastodon#25499))
-   Fix user archive takeouts when using OpenStack Swift ([ClearlyClaire](mastodon/mastodon#24431))
-   Fix searching for remote content by URL not working under certain conditions ([ClearlyClaire](mastodon/mastodon#25637))
-   Fix inefficiencies in indexing content for search ([VyrCossont](mastodon/mastodon#24285), [VyrCossont](mastodon/mastodon#24342))

##### Security

-   Add finer permission requirements for managing webhooks ([ClearlyClaire](mastodon/mastodon#25463))
-   Update dependencies
-   Add hardening headers for user-uploaded files ([ClearlyClaire](mastodon/mastodon#25756))
-   Fix verified links possibly hiding important parts of the URL (CVE-2023-36462)
-   Fix timeout handling of outbound HTTP requests (CVE-2023-36461)
-   Fix arbitrary file creation through media processing (CVE-2023-36460)
-   Fix possible XSS in preview cards (CVE-2023-36459)

#### Upgrade notes

To get the code for v4.1.3, use `git fetch && git checkout v4.1.3`.

> As always, **make sure you have backups of the database before performing any upgrades**. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db\_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

##### Dependencies

Apart from ImageMagick, external dependencies have not changed compared to v4.1.2, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:

-   Ruby: 2.7 to 3.0
-   PostgreSQL: 9.5 or newer
-   Elasticsearch (optional, for full-text search): 7.x
-   Redis: 4 or newer
-   Node: >= 14, < 18
-   ImageMagick: 6.9.7-7 or newer

If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more informations and ways to fix it [on this page](mastodon/mastodon#25776).

##### Update steps

The following instructions are for updating from 4.1.2.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.

**Non-Docker only:**

1.  Install dependencies: `bundle install` and `yarn install`

**Both Docker and non-Docker:**

ℹ️ The recommended configuration for reverse proxies has been updated. Unlike updating Mastodon itself, this is not urgent, but hardening. The change is about setting `Content-Security-Policy: default-src 'none'; form-action 'none'` and `X-Content-Type-Options: nosniff` on assets. Check `dist/nginx.conf` for more information, and [the documentation](https://docs.joinmastodon.org/admin/optional/object-storage-proxy/) if you are proxying external object storage.

1.  Restart all Mastodon processes

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yMy4yIiwidXBkYXRlZEluVmVyIjoiMzYuMjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Reviewed-on: https://git.home/nrdufour/home-ops/pulls/17
Co-authored-by: Renovate <renovate@ptinem.io>
Co-committed-by: Renovate <renovate@ptinem.io>
jsgoldstein added a commit to jsgoldstein/mastodon that referenced this pull request Aug 28, 2023
* Update dependency haml_lint to v0.49.2 (mastodon#26222)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix: Streaming server memory leak in HTTP EventSource cleanup (mastodon#26228)

* Swap debug statements in streaming server (mastodon#26231)

* Fix missing return values in streaming (mastodon#26233)

* Use original URL in preview if it redirects to 4xx page (mastodon#26200)

* Allow filtering for Chinese languages (mastodon#26066)

* Update README.md (mastodon#25435)

* Add end-to-end (system) tests (mastodon#25461)

* Rubocop fix: `Perfomance/UnfreezeString` (mastodon#26217)

* Update rubocop rules for linelength (mastodon#26190)

* Add coverage for `LanguageValidator` (mastodon#25593)

* Add coverage for `URLValidator` (mastodon#25591)

* Fix `RSpec/EmptyExampleGroup` cop (mastodon#24735)

* Profiling tools configuration improvement (mastodon#25383)

* Load `rspec-rails` gem in `test` + `development` (mastodon#25768)

* Ignore the brakeman `PermitAttributes` check (mastodon#25915)

* Fix public TL not indicating new toots when `onlyRemote` is enabled (mastodon#26247)

Signed-off-by: Plastikmensch <plastikmensch@users.noreply.github.com>

* Remove obsolete backport from Rails 7 (mastodon#26254)

* Change aspect ratios on link previews in web UI (mastodon#26250)

* Fix `Importer::BaseImporter#clean_up!` not using proper primary key (mastodon#26269)

* Bump version to v4.1.6 (mastodon#26272)

* Do not normalize URL before fetching it (mastodon#26219)

* Change /api/v1/peers/search to be case-insensitive when using Elasticsearch (mastodon#26268)

* Change interaction modal input to disable browser spell-checking, capitalization and autocomplete (mastodon#26267)

* Fix AVIF attachments (mastodon#26264)

* Add List-Unsubscribe email header (mastodon#26085)

* Fix wrong border radius on link cards in web UI (mastodon#26287)

* Fix line clamp for link previews in web UI (mastodon#26286)

* Change design of role badges in web UI (mastodon#26281)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Fix request URL normalisation for bare domain and 8-bit characters (mastodon#26285)

* Refactor: replace whitelist_mode mentions with limited_federation_mode (mastodon#26252)

* change column link to add a better keyboard focus indicator (mastodon#26278)

* Fix crash in `tootctl status remove` and some old migrations (mastodon#26210)

* Add client-side timeout on resend confirmation button (mastodon#26300)

* Allow spaces around commas in ALLOWED_PRIVATE_ADDRESSES (mastodon#26297)

* Change indexing frequency from 5 minutes to 1 minute, add locks to schedulers (mastodon#26304)

* Add primary key to preview_cards_statuses join table (includes deduplication migration) (mastodon#25243)

* Add `GET /api/v1/instance/languages` to REST API (mastodon#24443)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Update dependency aws-sdk-s3 to v1.132.0 (mastodon#26227)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add alt text for preview card thumbnails (mastodon#26184)

* Update dependency rack to v2.2.8 (mastodon#26312)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency react-redux to v8.1.2 (mastodon#26314)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency test-prof to v1.2.2 (mastodon#26316)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency core-js to v3.32.0 (mastodon#26317)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency lograge to v0.13.0 (mastodon#26318)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Rename “read” database to “replica” for consistency (mastodon#26326)

* Update dependency selenium-webdriver to v4.10.0 (mastodon#26322)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency rack-attack to v6.7.0 (mastodon#26319)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add direct link to the Single-Sign On provider if there is only one sign up method available (mastodon#26083)

* Re-add StatsD support through the `nsa` gem (mastodon#26310)

* Change reblogs to be excluded from "Posts and replies" tab in web UI (mastodon#26302)

* Change design of hidden media overlay (again) in web UI (mastodon#26330)

* Fix incorrect model annotation for List#exclusive (mastodon#26313)

* Fix light theme select option for hashtags (mastodon#26311)

* Fix confirmation when closing media edition modal with unsaved changes (mastodon#26342)

* Change streaming `/metrics` to include additional metrics (mastodon#26299)

* Fix missing cached preview cards attributes (mastodon#26343)

* Fix report modal secondary buttons style (mastodon#26341)

* Change header of hashtag timelines in web UI (mastodon#26362)

* New Crowdin Translations (automated) (mastodon#26209)

Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Make mastodon-streaming systemd unit templated (mastodon#24751)

Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>

* Spec media attachment speedups (mastodon#25416)

* Fix interaction modal layout (mastodon#26368)

* Fix list import concurrently creating lists of the same name (mastodon#26372)

* Omniauth 2.0 version bump (mastodon#24209)

* Change account search tokenizer and queries (mastodon#26378)

* Fix adding column with default value taking longer on Postgres >= 11 (mastodon#26375)

* Fix `preview_cards_statuses_pkey` not being reindexed concurrently (mastodon#26384)

* Change `DB_REPLICA_*` environment variables to `REPLICA_DB_*` (mastodon#26386)

* Fix Content Security Policy sometimes unnecessarily allowing hCaptcha scripts (mastodon#26388)

* Prepare v4.2.0-beta1 (mastodon#26339)

* Fix blocking subdomains of an already-blocked domain (mastodon#26392)

* Use migration classes in migrations where current definition conflicts with older (mastodon#26390)

* Restore console behavior in `test` env (mastodon#26401)

* Change: Block GPTBot (mastodon#26396)

* Avoid connecting to a running ES instance in ES search check spec (mastodon#26413)

* Change the hashtag column to not display the hashtag header on pinned columns (mastodon#26416)

* Update dependency sass to v1.64.2 (mastodon#26315)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update eslint (non-major) (mastodon#26323)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* New Crowdin Translations (automated) (mastodon#26373)

Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Update dependency aws-sdk-s3 to v1.132.1 (mastodon#26423)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency immutable to v4.3.2 (mastodon#26425)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency haml_lint to v0.49.3 (mastodon#26424)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency eslint-config-prettier to v9 (mastodon#26434)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency sass to v1.65.1 (mastodon#26433)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency mime-types to '~> 3.5.0' (mastodon#26431)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency regenerator-runtime to ^0.14.0 (mastodon#26432)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency rails to v7.0.7 (mastodon#26428)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency @rails/ujs to v7.0.7 (mastodon#26422)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency pg to v8.11.2 (mastodon#26426)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update babel monorepo to v7.22.10 (mastodon#26421)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency eslint-import-resolver-typescript to v3.6.0 (mastodon#26429)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency pg-connection-string to v2.6.2 (mastodon#26427)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add `S3_DISABLE_CHECKSUM_MODE` environment variable for compatibility with some S3-compatible providers (mastodon#26435)

* Merge duplicate Gemfile groups (mastodon#26441)

* Upgrade JS dev dependencies (mastodon#26442)

* Fix reply not preserving the language from the replied-to post (mastodon#26452)

* Add missing instances option to tootctl search deploy (mastodon#26461)

* Remove old non-unique index on preview_cards statuses join table (mastodon#26447)

* Upgrade `@types/react` (mastodon#26457)

* Fix "Create Account" button in interaction modal (mastodon#26459)

* Improve Renovate configuration (mastodon#26306)

* Update dependency faker to v3.2.1 (mastodon#26474)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency autoprefixer to v10.4.15 (mastodon#26473)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency nokogiri to v1.15.4 (mastodon#26476)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix `lint:json` not processing `json5` extension (mastodon#26481)

* New Crowdin Translations (automated) (mastodon#26444)

Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Add `ES_PRESET` option to customize numbers of shards and replicas (mastodon#26483)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

* Fix `repo:changelog` task matching strings that are not Pull Request identifiers (mastodon#26280)

* Add privacy tab in profile settings (mastodon#26484)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

* Add support for `indexable` attribute on remote actors (mastodon#26485)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

* Fix ES_PRESET not being applied to Chewy's internal index (mastodon#26489)

* Fix unfollow icon styling in advanced column (mastodon#26482)

* Add display of out-of-band hashtags in the web interface (mastodon#26492)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>

* Fix hashtag bar display when status is in a thread (mastodon#26497)

* Update dependency postcss to v8.4.28 (mastodon#26502)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix hashtag bar sometimes including tags that appear in the post's body (mastodon#26506)

* Fix “legal” report category not showing up in moderation interface (mastodon#26509)

* Change “privacy and reach” settings so that unchecking boxes always increase privacy and checking them always increase reach (mastodon#26508)

* Fix case-insensitive comparison of hashtags to do case-folding (mastodon#26525)

* Fix cached posts including stale stats (mastodon#26409)

* Update dependency pg to v8.11.3 (mastodon#26519)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Allow setting a custom HTTP method in CacheBuster (mastodon#26528)

Co-authored-by: Jorijn Schrijvershof <jorijn@jorijn.com>

* Fix `frame_rate` for videos where `ffprobe` reports 0/0 (mastodon#26500)

* Update dependency puma to v6.3.1 (mastodon#26537)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency @material-design-icons/svg to v0.14.11 (mastodon#26536)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Remove redundant ready() wrapper (mastodon#26533)

* Fix: support both DATABASE_URL and DB_PASS (mastodon#26295)

* Fix already initialized constant warning (mastodon#26542)

* Change follow recommendation materialized view to be faster in most cases (mastodon#26545)

Co-authored-by: Renaud Chaput <renchap@gmail.com>

* Fix profile picture preview (mastodon#26538)

* Add ability to delete avatar or header picture via the API (mastodon#25124)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Do not start LibreTranslate and Elasticsearch on GitHub Codespaces (mastodon#26382)

* Update dependency core-js to v3.32.1 (mastodon#26548)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update eslint (non-major) (mastodon#26567)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Refactor `Api::V1::ProfilesController` into two separate controllers (mastodon#26573)

* Add auto-refresh of accounts we get new messages/edits of (mastodon#26510)

* Add Elasticsearch cluster health check and indexes mismatch check to dashboard (mastodon#26448)

* Remove hashtags from the last line of a status if it only contains hashtags (mastodon#26499)

* Bump version to v4.2.0-beta2 (mastodon#26579)

* Fix layout of the closed registrations modal (mastodon#26593)

* Update rubocop and rubocop-rspec (mastodon#26329)

* Add `circular-dependency-plugin` to detect any circular deps issues (mastodon#26600)

* Update `SECURITY.md` to indicate issues can be reported on Github (mastodon#26599)

* Update dependency mime-types to v3.5.1 (mastodon#26595)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add cherokee to languages dropdown (mastodon#26012)

* Add Kalmyk to languages dropdown (mastodon#26013)

* Fix admin dashboard check when using Elasticsearch with `ES_PREFIX` (mastodon#26605)

* Better hashtag normalization when processing a post (mastodon#26614)

* Update dependency rails to v7.0.7.2 (mastodon#26612)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency react-textarea-autosize to v8.5.3 (mastodon#26607)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add support for federating `memorial` attribute  (mastodon#26583)

* Fix unexpected audio stream transcoding when uploaded video is eligible to passthrough (mastodon#26608)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Update Account Search to prioritize username over display name (mastodon#26623)

* Change the hashtag bar to be hidden when there is a CW and the post is not expanded (mastodon#26615)

* Fix some React warnings (mastodon#26609)

* Change hashtag bar tags to be de-emphasized (mastodon#26606)

* Update dependency immutable to v4.3.3 (mastodon#26622)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency oj to v3.16.0 (mastodon#26520)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency sass to v1.66.1 (mastodon#26534)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add elastic search installation into Vagrantfile (mastodon#26512)

* Fix timeout on invalid set of exclusionary parameters in `/api/v1/timelines/public` (mastodon#26239)

* Change opacity of the delete icon in the search field to be more visible (mastodon#26449)

* Update dependency rspec-sidekiq to v4 (mastodon#26627)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Consolidate inclusion of `admin` js pack link (mastodon#26628)

* Update dependency redis to v4.6.8 (mastodon#26630)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix: Workaround to load MASTODON_VERSION_* in Docker. (mastodon#26591)

Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Fix selecting domains to forward reports to not passing the information correctly (mastodon#26636)

* Fix clicking “Explore” or “Live feeds” column headers to scroll in advanced mode (mastodon#26633)

Co-authored-by: Plastikmensch <Plastikmensch@users.noreply.github.com>

* Change admin e-mail notification settins to be their own settings group (mastodon#26596)

* Change nightlies versioning from `v4.2.0+2023-08-23` to `v4.2.0-nightly.2023-08-23` (mastodon#26626)

* Add new public status index (mastodon#26344)

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>

* Fix changelog wording and missing items (mastodon#26638)

* Update babel monorepo to v7.22.11 (mastodon#26640)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add `data-nosnippet` attribute to remote posts and local posts with `noindex` (mastodon#26648)

* Add PublicStatusesCheck to Elasticsearch index check on admin dashboard (mastodon#26650)

* Add Elasticsearch/OpenSearch version to “Software” in admin dashboard (mastodon#26652)

* Fix statuses search Elasticsearch query (mastodon#26657)

* Update dependency immutable to v4.3.4 (mastodon#26655)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update ordering to use `id` from body of document instead of deprecated `_id` (mastodon#26659)

* Fix dashboard check for Elasticsearch suggested command including incorrect names (mastodon#26658)

* Change the pre-release versioning scheme and associated environment variables (mastodon#26653)

* Fix toast saying "published" instead of "saved" after editing post in web UI (mastodon#26664)

* Fix nightly build version (mastodon#26676)

* Change queue of job when opting into search from `default` to `pull` (mastodon#26688)

* Fix unnecessary condition causing seqscan when indexing (mastodon#26689)

* Change indexing jobs to use database replica (mastodon#26692)

* Update eslint (non-major) (mastodon#26694)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix not being able to negate prefix clauses in search (mastodon#26672)

* Update dependency haml_lint to v0.50.0 (mastodon#26665)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update DefinitelyTyped types (non-major) (mastodon#26693)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Fix multiple issues with status index mappings (mastodon#26686)

* Update dependency @testing-library/jest-dom to v6 (mastodon#26479)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Renaud Chaput <renchap@gmail.com>

* Add `from:me` syntax to search (mastodon#26660)

* Add search options to search popout in web UI (mastodon#26662)

* Fix incorrect call to `PublicStatusesIndex.import` (mastodon#26697)

* A first pass at adding some basic ES tests

* Add more tests

---------

Signed-off-by: Plastikmensch <plastikmensch@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Co-authored-by: Renaud Chaput <renchap@gmail.com>
Co-authored-by: Christian Schmidt <github@chsc.dk>
Co-authored-by: gunchleoc <fios@foramnagaidhlig.net>
Co-authored-by: Jay Prakash Kalia <jaykalia047@gmail.com>
Co-authored-by: Matt Jankowski <matt@jankowski.online>
Co-authored-by: Plastikmensch <Plastikmensch@users.noreply.github.com>
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Trevor Wolf <teeerevor@gmail.com>
Co-authored-by: Val Lorentz <progval+github@progval.net>
Co-authored-by: Daniel M Brasil <danielmbrasil@protonmail.com>
Co-authored-by: CSDUMMI <31551856+CSDUMMI@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: GitHub Actions <noreply@github.com>
Co-authored-by: Eashwar Ranganathan <eranganathan@lyft.com>
Co-authored-by: Foritus <rich@aornis.com>
Co-authored-by: Nick Schonning <nschonni@gmail.com>
Co-authored-by: Jeong Arm <kjwonmail@gmail.com>
Co-authored-by: mogaminsk <mgmnjp@icloud.com>
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
Co-authored-by: Santiago Kozak <santikzk1406@gmail.com>
Co-authored-by: Jorijn Schrijvershof <jorijn@jorijn.com>
Co-authored-by: Nicolai Søborg <NicolaiSoeborg@users.noreply.github.com>
Co-authored-by: Robert R George <rgeorge@midnightweb.net>
Co-authored-by: yufushiro <62991447+yufushiro@users.noreply.github.com>
Co-authored-by: Antonin Del Fabbro <30950182+AntoninDelFabbro@users.noreply.github.com>
Co-authored-by: Jaehong Kang <sinoru@me.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build-image Build a container image for this PR streaming Streaming server
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants