From 006ad1c7d07c8b3036ebb3a026a955cd4136d267 Mon Sep 17 00:00:00 2001 From: Lain Soykaf Date: Mon, 26 Oct 2026 22:02:47 +0400 Subject: [PATCH] Prepare 2.11.1 release --- CHANGELOG.md | 7 +++++++ changelog.d/bandit-1.14.0.security | 1 - changelog.d/hackney-4.9.1.security | 1 - changelog.d/{release-2.11.0.skip => release-2.11.1.skip} | 0 mix.exs | 2 +- 5 files changed, 8 insertions(+), 3 deletions(-) delete mode 100644 changelog.d/bandit-1.14.0.security delete mode 100644 changelog.d/hackney-4.9.1.security rename changelog.d/{release-2.11.0.skip => release-2.11.1.skip} (100%) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2f799a0ed..5b22c4164 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## 2.11.1 + +### Security + +- Update Bandit to version 1.14.0, which fixes HTTP/1.1, HTTP/2 and WebSocket denial-of-service and request smuggling vulnerabilities +- Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities + ## 2.11.0 ### Security diff --git a/changelog.d/bandit-1.14.0.security b/changelog.d/bandit-1.14.0.security deleted file mode 100644 index f2161ae86..000000000 --- a/changelog.d/bandit-1.14.0.security +++ /dev/null @@ -1 +0,0 @@ -Update Bandit to version 1.14.0, which fixes HTTP/1.1, HTTP/2 and WebSocket denial-of-service and request smuggling vulnerabilities diff --git a/changelog.d/hackney-4.9.1.security b/changelog.d/hackney-4.9.1.security deleted file mode 100644 index 568903273..000000000 --- a/changelog.d/hackney-4.9.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities diff --git a/changelog.d/release-2.11.0.skip b/changelog.d/release-2.11.1.skip similarity index 100% rename from changelog.d/release-2.11.0.skip rename to changelog.d/release-2.11.1.skip diff --git a/mix.exs b/mix.exs index f2014ec3b..e2af5fda6 100644 --- a/mix.exs +++ b/mix.exs @@ -4,7 +4,7 @@ defmodule Pleroma.Mixfile do def project do [ app: :pleroma, - version: version("2.11.0"), + version: version("2.11.1"), elixir: "~> 1.17", elixirc_paths: elixirc_paths(Mix.env()), compilers: Mix.compilers(),