Skip to content

v2.4.0-rc6

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 28 Jul 16:59

Activity-Relay v2.4.0-rc6

v2.4.0-rc6 is a release candidate for the maintained Activity-Relay fork. It
combines federation interoperability fixes, standard actor collections,
operational summary scheduling, upgrade-safe website customization, and native
Debian packaging improvements.

Highlights

  • Accepts standards-style Application and Service server actors, including
    NodeBB actors at implementation-defined paths.
  • Signs the exact outbound HTTP Host authority sent on the wire and includes
    bounded remote response text in worker errors.
  • Publishes the relay public key as X.509 SubjectPublicKeyInfo PEM while
    continuing to accept legacy PKCS#1 actor keys.
  • Fans out NodeBB-style public embedded Announce activities through one
    relay-signed wrapper that works with both follower-style receivers and strict
    traditional subscribers such as Mastodon.
  • Publishes privacy-filtered outbox, followers, and following
    OrderedCollection endpoints plus endpoints.sharedInbox.
  • Supports multiple server-local daily summary slots, catch-up reporting,
    archived sent reports, and explicit summary administration commands.
  • Keeps operator website settings and content overrides separate from current
    package-managed website sources.

Validated interoperability

The release candidate was validated with real signed traffic across these
paths:

  • Friendica to Activity-Relay to NodeBB;
  • NodeBB to Activity-Relay to Friendica;
  • NodeBB to Activity-Relay to Mastodon; and
  • NodeBB to Activity-Relay to another NodeBB server.

The NodeBB-to-Mastodon test imported the canonical NodeBB status, attachment,
and hashtag without relying on an indirect Friendica follow path.

See the interoperability documentation
for design details and troubleshooting notes.

Upgrade and identity safety

The Ubuntu 24.04 amd64 package has internal Debian version:

2.4.0~rc6-5

The GitHub-safe filename is:

activity-relay_2.4.0-rc6-5_amd64.deb

Package installation and upgrade preserve an existing
/etc/activity-relay/actor.pem. The RC6 public-key change alters only the
published PEM serialization; it does not rotate the relay key, actor ID, or
#main-key key ID.

Back up actor.pem and operator configuration before any upgrade, and verify
the actor-key hash remains unchanged afterward.

Containers

Use the complete prerelease tag:

ghcr.io/thystra/activity-relay:2.4.0-rc6

Prereleases do not move latest, major, or major/minor stable tags.

Artifacts and verification

The release includes the Debian package and SHA256SUMS. Verify the checksum
before installation and confirm the package metadata reports
2.4.0~rc6-5.

Soak period

RC6 is intended to soak under normal federation and scheduled-summary traffic
before stable v2.4.0. Do not move the published RC6 tag. Any application-code
correction should be released as a later release candidate.

Full changelog

Review the changes from RC4 through RC6.