From 04528f29d0d025f65acc944cb2974d5287292ab7 Mon Sep 17 00:00:00 2001 From: Lain Soykaf Date: Thu, 22 Oct 2026 11:34:11 +0400 Subject: [PATCH] Prepare 2.11.0 release --- CHANGELOG.md | 102 ++++++++++++++++++ changelog.d/account-favourites-order.fix | 1 - .../activitypub-bot-rfc9421-fallback.fix | 1 - .../admin-api-passwordless-accounts.add | 1 - changelog.d/bandit-1.11.1.security | 1 - changelog.d/bandit-1.12.4.security | 1 - changelog.d/bandit-1.12.5.security | 1 - changelog.d/bandit-1.13.1.security | 1 - changelog.d/captcha-package.fix | 1 - changelog.d/captcha-ver-bump.fix | 1 - changelog.d/castore-1.0.22.security | 1 - changelog.d/context-cleanup.skip | 1 - changelog.d/cowboy-2.16.1.security | 1 - changelog.d/cowboy-2.19.0.security | 1 - changelog.d/cowlib-2.17.1.security | 1 - changelog.d/cowlib-2.20.0.security | 1 - changelog.d/cowlib-2.21.0.security | 1 - changelog.d/decimal-3.1.1.security | 1 - changelog.d/decimal-3.2.0.security | 1 - changelog.d/disabling-chats.change | 1 - changelog.d/docker-baseimage-ssl.fix | 1 - changelog.d/docker-e2e-image.skip | 0 changelog.d/docs-otp-install-links.fix | 1 - changelog.d/domain-block-subplan-cost.fix | 1 - changelog.d/earmark-mdex.security | 1 - changelog.d/elixir-1-19.add | 1 - changelog.d/elixir-1-19.fix | 1 - changelog.d/featured-collection-page.fix | 1 - changelog.d/fedidev-federation-compat.add | 1 - changelog.d/fix-preferred-frontend.fix | 1 - changelog.d/fixup-new-elixir-erlang-docs.skip | 0 changelog.d/grouped-notifications-api.add | 1 - changelog.d/grouped-notifs-embed.skip | 0 changelog.d/grouped_notifications_flag.skip | 0 changelog.d/gun-2.6.0.security | 1 - changelog.d/gun-pool-rework.fix | 1 - changelog.d/hackney-4.0.3.security | 1 - changelog.d/hackney-castore.security | 1 - changelog.d/hackney-conn-leak.fix | 1 - changelog.d/hashtag-timeline.fix | 1 - changelog.d/host-header-verification.security | 1 - changelog.d/http-signatures-0.1.3.fix | 1 - changelog.d/iceshrimpnet-reports-fix.fix | 1 - changelog.d/idempotency-plug-func-typo.skip | 0 changelog.d/improve-doc-debian-13.change | 1 - .../installing_newer_elixir_erlang.add | 1 - changelog.d/jason-1.4.5.change | 1 - changelog.d/list-emoji.add | 1 - changelog.d/logger-backends.change | 1 - changelog.d/mailer-tls-options.fix | 1 - changelog.d/majic-1.2.0.change | 1 - changelog.d/mastodon-admin.add | 1 - changelog.d/mastodon-websocket-protocol.fix | 1 - changelog.d/max-body-hackney.fix | 1 - changelog.d/media-proxy-truncated-stream.fix | 1 - changelog.d/mfm-backend.add | 1 - changelog.d/mfm-extend.skip | 0 changelog.d/mint-1.10.0.security | 1 - changelog.d/mint-1.11.0.security | 1 - changelog.d/mix-audit.add | 1 - changelog.d/oauth-user-preload.change | 1 - changelog.d/oban-plugins-lazarus-hex.change | 1 - changelog.d/oban-reindexer.add | 1 - changelog.d/openbsd-datasize-bump.change | 1 - changelog.d/opt-init.d-migrations.change | 1 - .../optimize-orphaned-apps-cleanup.change | 1 - changelog.d/paradedb-search.add | 1 - changelog.d/phoenix-1.8.11.security | 1 - changelog.d/phoenix-1.8.8.security | 1 - .../phoenix-sec-websocket-headers.change | 1 - .../phoenix_live_dashboard-1.2.9.security | 1 - changelog.d/pleroma-fe-link.fix | 1 - changelog.d/plug-1.20.2.security | 1 - changelog.d/plug-cowboy-2.9.0.security | 1 - changelog.d/poll-voters-count-inflation.fix | 1 - changelog.d/postgrex-0.22.2.security | 1 - changelog.d/postgrex-0.22.4.security | 1 - changelog.d/previewcard-void-fill.fix | 1 - changelog.d/publisher-worker-atoms.fix | 1 - changelog.d/quic-unused.security | 1 - changelog.d/rebased-migration.change | 1 - changelog.d/reject-third-party-reports.fix | 1 - ...-forbid-build.skip => release-2.11.0.skip} | 0 changelog.d/remote-ip-hex.change | 1 - ...trict-unauthenticated-account-statuses.fix | 1 - changelog.d/reverse-proxy-hackney-leak.fix | 1 - changelog.d/rss.fix | 1 - changelog.d/stream-domain-block-following.fix | 1 - changelog.d/swoosh-1.28.0.security | 1 - changelog.d/syslog-fix-otp.skip | 0 changelog.d/syslog-pc.fix | 1 - changelog.d/typo.skip | 1 - changelog.d/unit-testing-build-vix.skip | 0 changelog.d/user-cache-keys.fix | 1 - changelog.d/user-search-sorting.change | 1 - changelog.d/webhooks.add | 1 - changelog.d/weblate-ci.skip | 0 changelog.d/woodpecker-armv7-fixups.fix | 1 - changelog.d/woodpecker-ci-docs.skip | 0 changelog.d/woodpecker-trigger-params.skip | 0 changelog.d/wpc-tagger-mirror.skip | 0 changelog.d/wss-necroposts.fix | 1 - mix.exs | 2 +- 103 files changed, 103 insertions(+), 89 deletions(-) delete mode 100644 changelog.d/account-favourites-order.fix delete mode 100644 changelog.d/activitypub-bot-rfc9421-fallback.fix delete mode 100644 changelog.d/admin-api-passwordless-accounts.add delete mode 100644 changelog.d/bandit-1.11.1.security delete mode 100644 changelog.d/bandit-1.12.4.security delete mode 100644 changelog.d/bandit-1.12.5.security delete mode 100644 changelog.d/bandit-1.13.1.security delete mode 100644 changelog.d/captcha-package.fix delete mode 100644 changelog.d/captcha-ver-bump.fix delete mode 100644 changelog.d/castore-1.0.22.security delete mode 100644 changelog.d/context-cleanup.skip delete mode 100644 changelog.d/cowboy-2.16.1.security delete mode 100644 changelog.d/cowboy-2.19.0.security delete mode 100644 changelog.d/cowlib-2.17.1.security delete mode 100644 changelog.d/cowlib-2.20.0.security delete mode 100644 changelog.d/cowlib-2.21.0.security delete mode 100644 changelog.d/decimal-3.1.1.security delete mode 100644 changelog.d/decimal-3.2.0.security delete mode 100644 changelog.d/disabling-chats.change delete mode 100644 changelog.d/docker-baseimage-ssl.fix delete mode 100644 changelog.d/docker-e2e-image.skip delete mode 100644 changelog.d/docs-otp-install-links.fix delete mode 100644 changelog.d/domain-block-subplan-cost.fix delete mode 100644 changelog.d/earmark-mdex.security delete mode 100644 changelog.d/elixir-1-19.add delete mode 100644 changelog.d/elixir-1-19.fix delete mode 100644 changelog.d/featured-collection-page.fix delete mode 100644 changelog.d/fedidev-federation-compat.add delete mode 100644 changelog.d/fix-preferred-frontend.fix delete mode 100644 changelog.d/fixup-new-elixir-erlang-docs.skip delete mode 100644 changelog.d/grouped-notifications-api.add delete mode 100644 changelog.d/grouped-notifs-embed.skip delete mode 100644 changelog.d/grouped_notifications_flag.skip delete mode 100644 changelog.d/gun-2.6.0.security delete mode 100644 changelog.d/gun-pool-rework.fix delete mode 100644 changelog.d/hackney-4.0.3.security delete mode 100644 changelog.d/hackney-castore.security delete mode 100644 changelog.d/hackney-conn-leak.fix delete mode 100644 changelog.d/hashtag-timeline.fix delete mode 100644 changelog.d/host-header-verification.security delete mode 100644 changelog.d/http-signatures-0.1.3.fix delete mode 100644 changelog.d/iceshrimpnet-reports-fix.fix delete mode 100644 changelog.d/idempotency-plug-func-typo.skip delete mode 100644 changelog.d/improve-doc-debian-13.change delete mode 100644 changelog.d/installing_newer_elixir_erlang.add delete mode 100644 changelog.d/jason-1.4.5.change delete mode 100644 changelog.d/list-emoji.add delete mode 100644 changelog.d/logger-backends.change delete mode 100644 changelog.d/mailer-tls-options.fix delete mode 100644 changelog.d/majic-1.2.0.change delete mode 100644 changelog.d/mastodon-admin.add delete mode 100644 changelog.d/mastodon-websocket-protocol.fix delete mode 100644 changelog.d/max-body-hackney.fix delete mode 100644 changelog.d/media-proxy-truncated-stream.fix delete mode 100644 changelog.d/mfm-backend.add delete mode 100644 changelog.d/mfm-extend.skip delete mode 100644 changelog.d/mint-1.10.0.security delete mode 100644 changelog.d/mint-1.11.0.security delete mode 100644 changelog.d/mix-audit.add delete mode 100644 changelog.d/oauth-user-preload.change delete mode 100644 changelog.d/oban-plugins-lazarus-hex.change delete mode 100644 changelog.d/oban-reindexer.add delete mode 100644 changelog.d/openbsd-datasize-bump.change delete mode 100644 changelog.d/opt-init.d-migrations.change delete mode 100644 changelog.d/optimize-orphaned-apps-cleanup.change delete mode 100644 changelog.d/paradedb-search.add delete mode 100644 changelog.d/phoenix-1.8.11.security delete mode 100644 changelog.d/phoenix-1.8.8.security delete mode 100644 changelog.d/phoenix-sec-websocket-headers.change delete mode 100644 changelog.d/phoenix_live_dashboard-1.2.9.security delete mode 100644 changelog.d/pleroma-fe-link.fix delete mode 100644 changelog.d/plug-1.20.2.security delete mode 100644 changelog.d/plug-cowboy-2.9.0.security delete mode 100644 changelog.d/poll-voters-count-inflation.fix delete mode 100644 changelog.d/postgrex-0.22.2.security delete mode 100644 changelog.d/postgrex-0.22.4.security delete mode 100644 changelog.d/previewcard-void-fill.fix delete mode 100644 changelog.d/publisher-worker-atoms.fix delete mode 100644 changelog.d/quic-unused.security delete mode 100644 changelog.d/rebased-migration.change delete mode 100644 changelog.d/reject-third-party-reports.fix rename changelog.d/{docker-arm32v7-pr-forbid-build.skip => release-2.11.0.skip} (100%) delete mode 100644 changelog.d/remote-ip-hex.change delete mode 100644 changelog.d/restrict-unauthenticated-account-statuses.fix delete mode 100644 changelog.d/reverse-proxy-hackney-leak.fix delete mode 100644 changelog.d/rss.fix delete mode 100644 changelog.d/stream-domain-block-following.fix delete mode 100644 changelog.d/swoosh-1.28.0.security delete mode 100644 changelog.d/syslog-fix-otp.skip delete mode 100644 changelog.d/syslog-pc.fix delete mode 100644 changelog.d/typo.skip delete mode 100644 changelog.d/unit-testing-build-vix.skip delete mode 100644 changelog.d/user-cache-keys.fix delete mode 100644 changelog.d/user-search-sorting.change delete mode 100644 changelog.d/webhooks.add delete mode 100644 changelog.d/weblate-ci.skip delete mode 100644 changelog.d/woodpecker-armv7-fixups.fix delete mode 100644 changelog.d/woodpecker-ci-docs.skip delete mode 100644 changelog.d/woodpecker-trigger-params.skip delete mode 100644 changelog.d/wpc-tagger-mirror.skip delete mode 100644 changelog.d/wss-necroposts.fix diff --git a/CHANGELOG.md b/CHANGELOG.md index f03be3f29..ca43d54fd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,108 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## 2.11.0 + +### Security + +- Update Bandit to address HTTP request handling vulnerabilities. +- Update bandit to version 1.12.4 to fix a DoS vulnerability +- Update bandit to version 1.12.5 to fix an HTTP/2 DoS vulnerability +- Update bandit to version 1.13.1 resolving a stuck process and unvalidated HTTP/1 headers vulnerabilities +- Updated CAStore to version 1.0.22 with updated Mozilla certificate bundle after eMudhra Intermediate CA Compromise +- Update Cowboy to address multipart header parsing denial-of-service vulnerabilities. +- Update cowboy to version 2.19.0 which fixes a memory exhaustion DoS +- Update Cowlib to address HTTP parsing resource exhaustion and injection vulnerabilities. +- Update cowlib to version 2.20.0 which fixes HTTP splitting and header smuggling/injection vulnerabilities +- Update gun to version 2.7.0 and cowlib to version 2.21.0 resolving a header smuggling vulnerability +- Update Decimal and compatible dependencies to address a rounding vulnerability. +- Update Decimal to version 3.2.0 resolving an unbounded allocation vulnerability +- Replace retired Earmark rendering with the maintained EarmarkParser and an attribute-escaping renderer. +- Update gun to version 2.6.0 which fixes an HTTP request/response smuggling vulnerability +- Update Hackney and its HTTPoison integration to address SSRF, timeout, and injection vulnerabilities. +- Hackney, Finch, Mua and the Swoosh HTTP mail adapters now trust only the CAStore certificate bundle, which rejects the compromised eMudhra intermediate CAs +- Ensure Host header is present and matches instance URI +- Update mint to version 1.10.0 which fixes multiple DoS vulnerabilities +- Update mint to version 1.11.0 resolving multiple vulnerabilities +- Update Phoenix LiveView to version 1.2.9 to fix an open redirect vulnerability +- Update Phoenix to version 1.8.11 resolving a process-exhaustion DoS vulnerability +- Update Phoenix to address long-poll NDJSON request denial-of-service vulnerabilities. +- Update Plug to address multipart header parsing denial-of-service vulnerabilities. +- Update Plug.Cowboy to address HTTP/2 scheme atom exhaustion denial-of-service vulnerabilities. +- Update Postgrex to address notification channel-name SQL injection vulnerabilities. +- Update postgrex to version 0.22.4 to fix an SQL injection vulnerability +- Remove unused QUIC lockfile entry with vulnerable TLS verification behavior. +- Update swoosh to version 1.28.0 which fixes a url injection vulnerability for the Microsoft Graph adapter + +### Changed + +- Update bundled Pleroma-FE to 2.11.4 +- Allow disabling Chats feature +- Pleroma now requires Elixir 1.17 or newer and Erlang/OTP 27 or newer +- Update Debian and Ubuntu installation requirements and OTP dependencies +- Update Jason to support Decimal 3 dependency resolution. +- Changed how Logger is configured due to changes in Elixir and added deprecation warnings for the old configuration format +- Update majic to 1.2.0. +- Avoid a duplicate user query during OAuth authentication. +- Use the Hex package for oban_plugins_lazarus. +- Docs OpenBSD: Increased recommended `datasize` from 1536M to 4096M to avoid Pleroma crashes +- - OpenRC: Automatically run migrations before starting pleroma +- - Optimize orphaned OAuth apps cleanup by deleting records in batches instead of one by one. +- Switch patched Phoenix 1.7.14 back to upstream with Phoenix 1.8.0+ +- Add optional migrations for rollback from Rebased +- Use upstream Hex releases for the `remote_ip` dependency and expose client IP ranges for remote IP resolution. +- Improve user search / autocompletion ordering. + +### Added + +- Allow creating accounts without a password in the AdminAPI +- Implemented ConfigDB configuration blacklist and accompanying Mix task +- Accept more real-world ActivityPub object shapes collected by fedidev.fun +- Add Mastodon-compatible grouped notifications API endpoints under `/api/v2/notifications` for newly-created notifications +- Docs: Added documentation for installing newer version of Elixir/Erlang than what distro ships +- Allow attaching emojis to user lists +- Implement basics of Mastodon admin API +- Add backend support for Misskey Markdown (MFM) posts +- Add mix_audit for dependency vulnerability checks. +- Oban: Enabled the Reindexer plugin to reduce oban_jobs index DB bloat +- Add ParadeDB (pg_search) as an optional external search backend, indexing status content, content warnings, and attachment descriptions. +- Add support for Mastodon-compatible webhooks + +### Fixed + +- Fixed `/api/v1/pleroma/accounts/:id/favourites` ordering and pagination to use the favourite date. +- Reject unsupported or ambiguous inbox signatures instead of queueing a doomed failed-signature retry, allowing clients to fall back to legacy HTTP Signatures. +- Switch native captcha to the published pleroma_captcha Hex package. +- Updated the captcha package to fix compilation failure on BSD-based systems +- Dockerfile: update base images to fix problems with SSL handshakes +- Docs: Fixed OTP install links in documentation, broke up wall of install commands into smaller chunks, fixed sudo commands execution +- Fix notification and timeline queries for users with domain blocks choosing a plan that scans every active user per row; the followed-accounts exception is now an `ARRAY(SELECT ...)` InitPlan that the planner costs once. +- Fixed Elixir 1.19 warnings +- Support fetching featured collection items from the first collection page +- Fix preferred frontend not working due to InstanceStatic plug prematurely returning HTTP 404 +- Fixed Gun HTTP/1 concurrency, forwarding and authenticated proxy handling, tunnel requests, and streamed connection cleanup. Updated Gun and Cowlib for HTTP client security fixes. +- Stop leaking a Hackney connection process, and the response bytes it read, for every unpooled request that ends without a reusable socket +- Fix hashtag timeline query for additional tag handling +- Fix compatibility with timestamped HTTP Signatures used by GoToSocial +- Handle reports with just actor ap id as the object +- Fix Swoosh HTTP mail adapters failing with `cacerts: :undefined` on OTP 26+ +- Echo Mastodon-style `Sec-WebSocket-Protocol` tokens in streaming WebSocket handshakes. +- Enforce the max_body HTTP option again, which Hackney 4 silently stopped honouring because it always returns a fully read body +- Abort incomplete media proxy responses instead of caching partial bodies. +- Updated Pleroma-FE build URL after Forgejo migration +- Fix votersCount inflation when same voter picks multiple options +- Status: Fill all MastoAPI required values in preview cards +- Avoid creating atoms from serialized PublisherWorker parameters. +- Reject incoming reports when both the reporter and reported account are remote +- Fixed account status and media views exposing activities restricted from unauthenticated users. +- Stop leaking a Hackney connection process for every media proxy response that was streamed to the end +- Fix RSS feeds to be W3C compliant and render better in RSS readers +- Keep followed users visible in streams when their domain is blocked. +- Fix intermittent failure to compile syslog package +- Fix inconsistent User cache keys and invalidate numeric ID aliases. +- Include arm32v7 in multi-arch Docker images +- RichMedia: Fix backfill causing old posts to show up on timelines by disabling it in MastoAPI StatusView + ## 2.10.2 ### Security diff --git a/changelog.d/account-favourites-order.fix b/changelog.d/account-favourites-order.fix deleted file mode 100644 index 94e27e499..000000000 --- a/changelog.d/account-favourites-order.fix +++ /dev/null @@ -1 +0,0 @@ -Fixed `/api/v1/pleroma/accounts/:id/favourites` ordering and pagination to use the favourite date. diff --git a/changelog.d/activitypub-bot-rfc9421-fallback.fix b/changelog.d/activitypub-bot-rfc9421-fallback.fix deleted file mode 100644 index a04940bfe..000000000 --- a/changelog.d/activitypub-bot-rfc9421-fallback.fix +++ /dev/null @@ -1 +0,0 @@ -Reject unsupported or ambiguous inbox signatures instead of queueing a doomed failed-signature retry, allowing clients to fall back to legacy HTTP Signatures. diff --git a/changelog.d/admin-api-passwordless-accounts.add b/changelog.d/admin-api-passwordless-accounts.add deleted file mode 100644 index f5ea2626f..000000000 --- a/changelog.d/admin-api-passwordless-accounts.add +++ /dev/null @@ -1 +0,0 @@ -Allow creating accounts without a password in the AdminAPI diff --git a/changelog.d/bandit-1.11.1.security b/changelog.d/bandit-1.11.1.security deleted file mode 100644 index 604dc85b0..000000000 --- a/changelog.d/bandit-1.11.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Bandit to address HTTP request handling vulnerabilities. diff --git a/changelog.d/bandit-1.12.4.security b/changelog.d/bandit-1.12.4.security deleted file mode 100644 index dcdd03342..000000000 --- a/changelog.d/bandit-1.12.4.security +++ /dev/null @@ -1 +0,0 @@ -Update bandit to version 1.12.4 to fix a DoS vulnerability diff --git a/changelog.d/bandit-1.12.5.security b/changelog.d/bandit-1.12.5.security deleted file mode 100644 index dcecfc4d5..000000000 --- a/changelog.d/bandit-1.12.5.security +++ /dev/null @@ -1 +0,0 @@ -Update bandit to version 1.12.5 to fix an HTTP/2 DoS vulnerability diff --git a/changelog.d/bandit-1.13.1.security b/changelog.d/bandit-1.13.1.security deleted file mode 100644 index 3926b1772..000000000 --- a/changelog.d/bandit-1.13.1.security +++ /dev/null @@ -1 +0,0 @@ -Update bandit to version 1.13.1 resolving a stuck process and unvalidated HTTP/1 headers vulnerabilities diff --git a/changelog.d/captcha-package.fix b/changelog.d/captcha-package.fix deleted file mode 100644 index 98c2f6525..000000000 --- a/changelog.d/captcha-package.fix +++ /dev/null @@ -1 +0,0 @@ -Switch native captcha to the published pleroma_captcha Hex package. diff --git a/changelog.d/captcha-ver-bump.fix b/changelog.d/captcha-ver-bump.fix deleted file mode 100644 index 8e5ea0e9c..000000000 --- a/changelog.d/captcha-ver-bump.fix +++ /dev/null @@ -1 +0,0 @@ -Updated the captcha package to fix compilation failure on BSD-based systems diff --git a/changelog.d/castore-1.0.22.security b/changelog.d/castore-1.0.22.security deleted file mode 100644 index 8d702f382..000000000 --- a/changelog.d/castore-1.0.22.security +++ /dev/null @@ -1 +0,0 @@ -Updated CAStore to version 1.0.22 with updated Mozilla certificate bundle after eMudhra Intermediate CA Compromise diff --git a/changelog.d/context-cleanup.skip b/changelog.d/context-cleanup.skip deleted file mode 100644 index ae609602d..000000000 --- a/changelog.d/context-cleanup.skip +++ /dev/null @@ -1 +0,0 @@ -litepub-0.1.jsonld cleanup diff --git a/changelog.d/cowboy-2.16.1.security b/changelog.d/cowboy-2.16.1.security deleted file mode 100644 index b7563b0e1..000000000 --- a/changelog.d/cowboy-2.16.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Cowboy to address multipart header parsing denial-of-service vulnerabilities. diff --git a/changelog.d/cowboy-2.19.0.security b/changelog.d/cowboy-2.19.0.security deleted file mode 100644 index 386236074..000000000 --- a/changelog.d/cowboy-2.19.0.security +++ /dev/null @@ -1 +0,0 @@ -Update cowboy to version 2.19.0 which fixes a memory exhaustion DoS diff --git a/changelog.d/cowlib-2.17.1.security b/changelog.d/cowlib-2.17.1.security deleted file mode 100644 index 6a5547f6f..000000000 --- a/changelog.d/cowlib-2.17.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Cowlib to address HTTP parsing resource exhaustion and injection vulnerabilities. diff --git a/changelog.d/cowlib-2.20.0.security b/changelog.d/cowlib-2.20.0.security deleted file mode 100644 index 21f851932..000000000 --- a/changelog.d/cowlib-2.20.0.security +++ /dev/null @@ -1 +0,0 @@ -Update cowlib to version 2.20.0 which fixes HTTP splitting and header smuggling/injection vulnerabilities diff --git a/changelog.d/cowlib-2.21.0.security b/changelog.d/cowlib-2.21.0.security deleted file mode 100644 index b45bde712..000000000 --- a/changelog.d/cowlib-2.21.0.security +++ /dev/null @@ -1 +0,0 @@ -Update gun to version 2.7.0 and cowlib to version 2.21.0 resolving a header smuggling vulnerability diff --git a/changelog.d/decimal-3.1.1.security b/changelog.d/decimal-3.1.1.security deleted file mode 100644 index 65d885553..000000000 --- a/changelog.d/decimal-3.1.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Decimal and compatible dependencies to address a rounding vulnerability. diff --git a/changelog.d/decimal-3.2.0.security b/changelog.d/decimal-3.2.0.security deleted file mode 100644 index fc20b3f50..000000000 --- a/changelog.d/decimal-3.2.0.security +++ /dev/null @@ -1 +0,0 @@ -Update Decimal to version 3.2.0 resolving an unbounded allocation vulnerability diff --git a/changelog.d/disabling-chats.change b/changelog.d/disabling-chats.change deleted file mode 100644 index 579679a03..000000000 --- a/changelog.d/disabling-chats.change +++ /dev/null @@ -1 +0,0 @@ -Allow disabling Chats feature diff --git a/changelog.d/docker-baseimage-ssl.fix b/changelog.d/docker-baseimage-ssl.fix deleted file mode 100644 index 441423f49..000000000 --- a/changelog.d/docker-baseimage-ssl.fix +++ /dev/null @@ -1 +0,0 @@ -Dockerfile: update base images to fix problems with SSL handshakes \ No newline at end of file diff --git a/changelog.d/docker-e2e-image.skip b/changelog.d/docker-e2e-image.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/docs-otp-install-links.fix b/changelog.d/docs-otp-install-links.fix deleted file mode 100644 index 28d504bc0..000000000 --- a/changelog.d/docs-otp-install-links.fix +++ /dev/null @@ -1 +0,0 @@ -Docs: Fixed OTP install links in documentation, broke up wall of install commands into smaller chunks, fixed sudo commands execution diff --git a/changelog.d/domain-block-subplan-cost.fix b/changelog.d/domain-block-subplan-cost.fix deleted file mode 100644 index 7ae866ad1..000000000 --- a/changelog.d/domain-block-subplan-cost.fix +++ /dev/null @@ -1 +0,0 @@ -Fix notification and timeline queries for users with domain blocks choosing a plan that scans every active user per row; the followed-accounts exception is now an `ARRAY(SELECT ...)` InitPlan that the planner costs once. diff --git a/changelog.d/earmark-mdex.security b/changelog.d/earmark-mdex.security deleted file mode 100644 index dc0ee7710..000000000 --- a/changelog.d/earmark-mdex.security +++ /dev/null @@ -1 +0,0 @@ -Replace retired Earmark rendering with the maintained EarmarkParser and an attribute-escaping renderer. diff --git a/changelog.d/elixir-1-19.add b/changelog.d/elixir-1-19.add deleted file mode 100644 index b010b2dfa..000000000 --- a/changelog.d/elixir-1-19.add +++ /dev/null @@ -1 +0,0 @@ -Implemented ConfigDB configuration blacklist and accompanying Mix task diff --git a/changelog.d/elixir-1-19.fix b/changelog.d/elixir-1-19.fix deleted file mode 100644 index 53079b0f7..000000000 --- a/changelog.d/elixir-1-19.fix +++ /dev/null @@ -1 +0,0 @@ -Fixed Elixir 1.19 warnings diff --git a/changelog.d/featured-collection-page.fix b/changelog.d/featured-collection-page.fix deleted file mode 100644 index b611a4137..000000000 --- a/changelog.d/featured-collection-page.fix +++ /dev/null @@ -1 +0,0 @@ -Support fetching featured collection items from the first collection page diff --git a/changelog.d/fedidev-federation-compat.add b/changelog.d/fedidev-federation-compat.add deleted file mode 100644 index bb29925f9..000000000 --- a/changelog.d/fedidev-federation-compat.add +++ /dev/null @@ -1 +0,0 @@ -Accept more real-world ActivityPub object shapes collected by fedidev.fun diff --git a/changelog.d/fix-preferred-frontend.fix b/changelog.d/fix-preferred-frontend.fix deleted file mode 100644 index 07bf4d0c6..000000000 --- a/changelog.d/fix-preferred-frontend.fix +++ /dev/null @@ -1 +0,0 @@ -Fix preferred frontend not working due to InstanceStatic plug prematurely returning HTTP 404 diff --git a/changelog.d/fixup-new-elixir-erlang-docs.skip b/changelog.d/fixup-new-elixir-erlang-docs.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/grouped-notifications-api.add b/changelog.d/grouped-notifications-api.add deleted file mode 100644 index 8c2cc5397..000000000 --- a/changelog.d/grouped-notifications-api.add +++ /dev/null @@ -1 +0,0 @@ -Add Mastodon-compatible grouped notifications API endpoints under `/api/v2/notifications` for newly-created notifications diff --git a/changelog.d/grouped-notifs-embed.skip b/changelog.d/grouped-notifs-embed.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/grouped_notifications_flag.skip b/changelog.d/grouped_notifications_flag.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/gun-2.6.0.security b/changelog.d/gun-2.6.0.security deleted file mode 100644 index 96750cc6b..000000000 --- a/changelog.d/gun-2.6.0.security +++ /dev/null @@ -1 +0,0 @@ -Update gun to version 2.6.0 which fixes an HTTP request/response smuggling vulnerability diff --git a/changelog.d/gun-pool-rework.fix b/changelog.d/gun-pool-rework.fix deleted file mode 100644 index d555b5bce..000000000 --- a/changelog.d/gun-pool-rework.fix +++ /dev/null @@ -1 +0,0 @@ -Fixed Gun HTTP/1 concurrency, forwarding and authenticated proxy handling, tunnel requests, and streamed connection cleanup. Updated Gun and Cowlib for HTTP client security fixes. diff --git a/changelog.d/hackney-4.0.3.security b/changelog.d/hackney-4.0.3.security deleted file mode 100644 index 2cbf211b3..000000000 --- a/changelog.d/hackney-4.0.3.security +++ /dev/null @@ -1 +0,0 @@ -Update Hackney and its HTTPoison integration to address SSRF, timeout, and injection vulnerabilities. diff --git a/changelog.d/hackney-castore.security b/changelog.d/hackney-castore.security deleted file mode 100644 index 8d1a0cf4a..000000000 --- a/changelog.d/hackney-castore.security +++ /dev/null @@ -1 +0,0 @@ -Hackney, Finch, Mua and the Swoosh HTTP mail adapters now trust only the CAStore certificate bundle, which rejects the compromised eMudhra intermediate CAs diff --git a/changelog.d/hackney-conn-leak.fix b/changelog.d/hackney-conn-leak.fix deleted file mode 100644 index 508449eca..000000000 --- a/changelog.d/hackney-conn-leak.fix +++ /dev/null @@ -1 +0,0 @@ -Stop leaking a Hackney connection process, and the response bytes it read, for every unpooled request that ends without a reusable socket diff --git a/changelog.d/hashtag-timeline.fix b/changelog.d/hashtag-timeline.fix deleted file mode 100644 index c5814d9c9..000000000 --- a/changelog.d/hashtag-timeline.fix +++ /dev/null @@ -1 +0,0 @@ -Fix hashtag timeline query for additional tag handling diff --git a/changelog.d/host-header-verification.security b/changelog.d/host-header-verification.security deleted file mode 100644 index 11a0784b2..000000000 --- a/changelog.d/host-header-verification.security +++ /dev/null @@ -1 +0,0 @@ -Ensure Host header is present and matches instance URI diff --git a/changelog.d/http-signatures-0.1.3.fix b/changelog.d/http-signatures-0.1.3.fix deleted file mode 100644 index 3be1b9e9f..000000000 --- a/changelog.d/http-signatures-0.1.3.fix +++ /dev/null @@ -1 +0,0 @@ -Fix compatibility with timestamped HTTP Signatures used by GoToSocial diff --git a/changelog.d/iceshrimpnet-reports-fix.fix b/changelog.d/iceshrimpnet-reports-fix.fix deleted file mode 100644 index 7487ae47e..000000000 --- a/changelog.d/iceshrimpnet-reports-fix.fix +++ /dev/null @@ -1 +0,0 @@ -Handle reports with just actor ap id as the object diff --git a/changelog.d/idempotency-plug-func-typo.skip b/changelog.d/idempotency-plug-func-typo.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/improve-doc-debian-13.change b/changelog.d/improve-doc-debian-13.change deleted file mode 100644 index 0fd7c6e45..000000000 --- a/changelog.d/improve-doc-debian-13.change +++ /dev/null @@ -1 +0,0 @@ -Update Debian and Ubuntu installation requirements and OTP dependencies diff --git a/changelog.d/installing_newer_elixir_erlang.add b/changelog.d/installing_newer_elixir_erlang.add deleted file mode 100644 index e49aaeb21..000000000 --- a/changelog.d/installing_newer_elixir_erlang.add +++ /dev/null @@ -1 +0,0 @@ -Docs: Added documentation for installing newer version of Elixir/Erlang than what distro ships diff --git a/changelog.d/jason-1.4.5.change b/changelog.d/jason-1.4.5.change deleted file mode 100644 index 7fc87688f..000000000 --- a/changelog.d/jason-1.4.5.change +++ /dev/null @@ -1 +0,0 @@ -Update Jason to support Decimal 3 dependency resolution. diff --git a/changelog.d/list-emoji.add b/changelog.d/list-emoji.add deleted file mode 100644 index dce4874d3..000000000 --- a/changelog.d/list-emoji.add +++ /dev/null @@ -1 +0,0 @@ -Allow attaching emojis to user lists diff --git a/changelog.d/logger-backends.change b/changelog.d/logger-backends.change deleted file mode 100644 index 5f044c2c7..000000000 --- a/changelog.d/logger-backends.change +++ /dev/null @@ -1 +0,0 @@ -Changed how Logger is configured due to changes in Elixir and added deprecation warnings for the old configuration format diff --git a/changelog.d/mailer-tls-options.fix b/changelog.d/mailer-tls-options.fix deleted file mode 100644 index fe17eea6d..000000000 --- a/changelog.d/mailer-tls-options.fix +++ /dev/null @@ -1 +0,0 @@ -Fix Swoosh HTTP mail adapters failing with `cacerts: :undefined` on OTP 26+ diff --git a/changelog.d/majic-1.2.0.change b/changelog.d/majic-1.2.0.change deleted file mode 100644 index bc8d5eb3c..000000000 --- a/changelog.d/majic-1.2.0.change +++ /dev/null @@ -1 +0,0 @@ -Update majic to 1.2.0. diff --git a/changelog.d/mastodon-admin.add b/changelog.d/mastodon-admin.add deleted file mode 100644 index 64f2ca987..000000000 --- a/changelog.d/mastodon-admin.add +++ /dev/null @@ -1 +0,0 @@ -Implement basics of Mastodon admin API \ No newline at end of file diff --git a/changelog.d/mastodon-websocket-protocol.fix b/changelog.d/mastodon-websocket-protocol.fix deleted file mode 100644 index 66dab16ed..000000000 --- a/changelog.d/mastodon-websocket-protocol.fix +++ /dev/null @@ -1 +0,0 @@ -Echo Mastodon-style `Sec-WebSocket-Protocol` tokens in streaming WebSocket handshakes. diff --git a/changelog.d/max-body-hackney.fix b/changelog.d/max-body-hackney.fix deleted file mode 100644 index cc41a617b..000000000 --- a/changelog.d/max-body-hackney.fix +++ /dev/null @@ -1 +0,0 @@ -Enforce the max_body HTTP option again, which Hackney 4 silently stopped honouring because it always returns a fully read body diff --git a/changelog.d/media-proxy-truncated-stream.fix b/changelog.d/media-proxy-truncated-stream.fix deleted file mode 100644 index 12413e53e..000000000 --- a/changelog.d/media-proxy-truncated-stream.fix +++ /dev/null @@ -1 +0,0 @@ -Abort incomplete media proxy responses instead of caching partial bodies. diff --git a/changelog.d/mfm-backend.add b/changelog.d/mfm-backend.add deleted file mode 100644 index f815c6828..000000000 --- a/changelog.d/mfm-backend.add +++ /dev/null @@ -1 +0,0 @@ -Add backend support for Misskey Markdown (MFM) posts diff --git a/changelog.d/mfm-extend.skip b/changelog.d/mfm-extend.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/mint-1.10.0.security b/changelog.d/mint-1.10.0.security deleted file mode 100644 index 72c818cfe..000000000 --- a/changelog.d/mint-1.10.0.security +++ /dev/null @@ -1 +0,0 @@ -Update mint to version 1.10.0 which fixes multiple DoS vulnerabilities diff --git a/changelog.d/mint-1.11.0.security b/changelog.d/mint-1.11.0.security deleted file mode 100644 index 78098c0e3..000000000 --- a/changelog.d/mint-1.11.0.security +++ /dev/null @@ -1 +0,0 @@ -Update mint to version 1.11.0 resolving multiple vulnerabilities diff --git a/changelog.d/mix-audit.add b/changelog.d/mix-audit.add deleted file mode 100644 index b87fcdc67..000000000 --- a/changelog.d/mix-audit.add +++ /dev/null @@ -1 +0,0 @@ -Add mix_audit for dependency vulnerability checks. diff --git a/changelog.d/oauth-user-preload.change b/changelog.d/oauth-user-preload.change deleted file mode 100644 index 43f5ea06b..000000000 --- a/changelog.d/oauth-user-preload.change +++ /dev/null @@ -1 +0,0 @@ -Avoid a duplicate user query during OAuth authentication. diff --git a/changelog.d/oban-plugins-lazarus-hex.change b/changelog.d/oban-plugins-lazarus-hex.change deleted file mode 100644 index 9259df0f5..000000000 --- a/changelog.d/oban-plugins-lazarus-hex.change +++ /dev/null @@ -1 +0,0 @@ -Use the Hex package for oban_plugins_lazarus. diff --git a/changelog.d/oban-reindexer.add b/changelog.d/oban-reindexer.add deleted file mode 100644 index 5b56d9482..000000000 --- a/changelog.d/oban-reindexer.add +++ /dev/null @@ -1 +0,0 @@ -Oban: Enabled the Reindexer plugin to reduce oban_jobs index DB bloat diff --git a/changelog.d/openbsd-datasize-bump.change b/changelog.d/openbsd-datasize-bump.change deleted file mode 100644 index 9085cc43a..000000000 --- a/changelog.d/openbsd-datasize-bump.change +++ /dev/null @@ -1 +0,0 @@ -Docs OpenBSD: Increased recommended `datasize` from 1536M to 4096M to avoid Pleroma crashes diff --git a/changelog.d/opt-init.d-migrations.change b/changelog.d/opt-init.d-migrations.change deleted file mode 100644 index c53f2baa0..000000000 --- a/changelog.d/opt-init.d-migrations.change +++ /dev/null @@ -1 +0,0 @@ -- OpenRC: Automatically run migrations before starting pleroma diff --git a/changelog.d/optimize-orphaned-apps-cleanup.change b/changelog.d/optimize-orphaned-apps-cleanup.change deleted file mode 100644 index 3f037f125..000000000 --- a/changelog.d/optimize-orphaned-apps-cleanup.change +++ /dev/null @@ -1 +0,0 @@ -- Optimize orphaned OAuth apps cleanup by deleting records in batches instead of one by one. diff --git a/changelog.d/paradedb-search.add b/changelog.d/paradedb-search.add deleted file mode 100644 index f72ebca14..000000000 --- a/changelog.d/paradedb-search.add +++ /dev/null @@ -1 +0,0 @@ -Add ParadeDB (pg_search) as an optional external search backend, indexing status content, content warnings, and attachment descriptions. diff --git a/changelog.d/phoenix-1.8.11.security b/changelog.d/phoenix-1.8.11.security deleted file mode 100644 index fa2a6cb4d..000000000 --- a/changelog.d/phoenix-1.8.11.security +++ /dev/null @@ -1 +0,0 @@ -Update Phoenix to version 1.8.11 resolving a process-exhaustion DoS vulnerability diff --git a/changelog.d/phoenix-1.8.8.security b/changelog.d/phoenix-1.8.8.security deleted file mode 100644 index f5be1eb8f..000000000 --- a/changelog.d/phoenix-1.8.8.security +++ /dev/null @@ -1 +0,0 @@ -Update Phoenix to address long-poll NDJSON request denial-of-service vulnerabilities. diff --git a/changelog.d/phoenix-sec-websocket-headers.change b/changelog.d/phoenix-sec-websocket-headers.change deleted file mode 100644 index b3cb4ad3f..000000000 --- a/changelog.d/phoenix-sec-websocket-headers.change +++ /dev/null @@ -1 +0,0 @@ -Switch patched Phoenix 1.7.14 back to upstream with Phoenix 1.8.0+ diff --git a/changelog.d/phoenix_live_dashboard-1.2.9.security b/changelog.d/phoenix_live_dashboard-1.2.9.security deleted file mode 100644 index 36a934542..000000000 --- a/changelog.d/phoenix_live_dashboard-1.2.9.security +++ /dev/null @@ -1 +0,0 @@ -Update Phoenix LiveView to version 1.2.9 to fix an open redirect vulnerability diff --git a/changelog.d/pleroma-fe-link.fix b/changelog.d/pleroma-fe-link.fix deleted file mode 100644 index de93f86dd..000000000 --- a/changelog.d/pleroma-fe-link.fix +++ /dev/null @@ -1 +0,0 @@ -Updated Pleroma-FE build URL after Forgejo migration diff --git a/changelog.d/plug-1.20.2.security b/changelog.d/plug-1.20.2.security deleted file mode 100644 index 1e0ab38f9..000000000 --- a/changelog.d/plug-1.20.2.security +++ /dev/null @@ -1 +0,0 @@ -Update Plug to address multipart header parsing denial-of-service vulnerabilities. diff --git a/changelog.d/plug-cowboy-2.9.0.security b/changelog.d/plug-cowboy-2.9.0.security deleted file mode 100644 index aad941590..000000000 --- a/changelog.d/plug-cowboy-2.9.0.security +++ /dev/null @@ -1 +0,0 @@ -Update Plug.Cowboy to address HTTP/2 scheme atom exhaustion denial-of-service vulnerabilities. diff --git a/changelog.d/poll-voters-count-inflation.fix b/changelog.d/poll-voters-count-inflation.fix deleted file mode 100644 index 7eae41f13..000000000 --- a/changelog.d/poll-voters-count-inflation.fix +++ /dev/null @@ -1 +0,0 @@ -Fix votersCount inflation when same voter picks multiple options diff --git a/changelog.d/postgrex-0.22.2.security b/changelog.d/postgrex-0.22.2.security deleted file mode 100644 index 831afeee9..000000000 --- a/changelog.d/postgrex-0.22.2.security +++ /dev/null @@ -1 +0,0 @@ -Update Postgrex to address notification channel-name SQL injection vulnerabilities. diff --git a/changelog.d/postgrex-0.22.4.security b/changelog.d/postgrex-0.22.4.security deleted file mode 100644 index 48ee5f2e7..000000000 --- a/changelog.d/postgrex-0.22.4.security +++ /dev/null @@ -1 +0,0 @@ -Update postgrex to version 0.22.4 to fix an SQL injection vulnerability diff --git a/changelog.d/previewcard-void-fill.fix b/changelog.d/previewcard-void-fill.fix deleted file mode 100644 index 04e571347..000000000 --- a/changelog.d/previewcard-void-fill.fix +++ /dev/null @@ -1 +0,0 @@ -Status: Fill all MastoAPI required values in preview cards diff --git a/changelog.d/publisher-worker-atoms.fix b/changelog.d/publisher-worker-atoms.fix deleted file mode 100644 index 2df6608ba..000000000 --- a/changelog.d/publisher-worker-atoms.fix +++ /dev/null @@ -1 +0,0 @@ -Avoid creating atoms from serialized PublisherWorker parameters. diff --git a/changelog.d/quic-unused.security b/changelog.d/quic-unused.security deleted file mode 100644 index dc47464cf..000000000 --- a/changelog.d/quic-unused.security +++ /dev/null @@ -1 +0,0 @@ -Remove unused QUIC lockfile entry with vulnerable TLS verification behavior. diff --git a/changelog.d/rebased-migration.change b/changelog.d/rebased-migration.change deleted file mode 100644 index 53ae0951a..000000000 --- a/changelog.d/rebased-migration.change +++ /dev/null @@ -1 +0,0 @@ -Add optional migrations for rollback from Rebased diff --git a/changelog.d/reject-third-party-reports.fix b/changelog.d/reject-third-party-reports.fix deleted file mode 100644 index 7d4e87b94..000000000 --- a/changelog.d/reject-third-party-reports.fix +++ /dev/null @@ -1 +0,0 @@ -Reject incoming reports when both the reporter and reported account are remote diff --git a/changelog.d/docker-arm32v7-pr-forbid-build.skip b/changelog.d/release-2.11.0.skip similarity index 100% rename from changelog.d/docker-arm32v7-pr-forbid-build.skip rename to changelog.d/release-2.11.0.skip diff --git a/changelog.d/remote-ip-hex.change b/changelog.d/remote-ip-hex.change deleted file mode 100644 index 44f6bc1bf..000000000 --- a/changelog.d/remote-ip-hex.change +++ /dev/null @@ -1 +0,0 @@ -Use upstream Hex releases for the `remote_ip` dependency and expose client IP ranges for remote IP resolution. diff --git a/changelog.d/restrict-unauthenticated-account-statuses.fix b/changelog.d/restrict-unauthenticated-account-statuses.fix deleted file mode 100644 index a6ae013fd..000000000 --- a/changelog.d/restrict-unauthenticated-account-statuses.fix +++ /dev/null @@ -1 +0,0 @@ -Fixed account status and media views exposing activities restricted from unauthenticated users. diff --git a/changelog.d/reverse-proxy-hackney-leak.fix b/changelog.d/reverse-proxy-hackney-leak.fix deleted file mode 100644 index d72552dd2..000000000 --- a/changelog.d/reverse-proxy-hackney-leak.fix +++ /dev/null @@ -1 +0,0 @@ -Stop leaking a Hackney connection process for every media proxy response that was streamed to the end diff --git a/changelog.d/rss.fix b/changelog.d/rss.fix deleted file mode 100644 index a3455698a..000000000 --- a/changelog.d/rss.fix +++ /dev/null @@ -1 +0,0 @@ -Fix RSS feeds to be W3C compliant and render better in RSS readers diff --git a/changelog.d/stream-domain-block-following.fix b/changelog.d/stream-domain-block-following.fix deleted file mode 100644 index 84890c680..000000000 --- a/changelog.d/stream-domain-block-following.fix +++ /dev/null @@ -1 +0,0 @@ -Keep followed users visible in streams when their domain is blocked. diff --git a/changelog.d/swoosh-1.28.0.security b/changelog.d/swoosh-1.28.0.security deleted file mode 100644 index 813d12bd5..000000000 --- a/changelog.d/swoosh-1.28.0.security +++ /dev/null @@ -1 +0,0 @@ -Update swoosh to version 1.28.0 which fixes a url injection vulnerability for the Microsoft Graph adapter diff --git a/changelog.d/syslog-fix-otp.skip b/changelog.d/syslog-fix-otp.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/syslog-pc.fix b/changelog.d/syslog-pc.fix deleted file mode 100644 index 3f08cec47..000000000 --- a/changelog.d/syslog-pc.fix +++ /dev/null @@ -1 +0,0 @@ -Fix intermittent failure to compile syslog package diff --git a/changelog.d/typo.skip b/changelog.d/typo.skip deleted file mode 100644 index d249c9bd4..000000000 --- a/changelog.d/typo.skip +++ /dev/null @@ -1 +0,0 @@ -Fix typo in spec diff --git a/changelog.d/unit-testing-build-vix.skip b/changelog.d/unit-testing-build-vix.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/user-cache-keys.fix b/changelog.d/user-cache-keys.fix deleted file mode 100644 index 4af21dd1f..000000000 --- a/changelog.d/user-cache-keys.fix +++ /dev/null @@ -1 +0,0 @@ -Fix inconsistent User cache keys and invalidate numeric ID aliases. diff --git a/changelog.d/user-search-sorting.change b/changelog.d/user-search-sorting.change deleted file mode 100644 index def27e955..000000000 --- a/changelog.d/user-search-sorting.change +++ /dev/null @@ -1 +0,0 @@ -Improve user search / autocompletion ordering. diff --git a/changelog.d/webhooks.add b/changelog.d/webhooks.add deleted file mode 100644 index 323428f9f..000000000 --- a/changelog.d/webhooks.add +++ /dev/null @@ -1 +0,0 @@ -Add support for Mastodon-compatible webhooks \ No newline at end of file diff --git a/changelog.d/weblate-ci.skip b/changelog.d/weblate-ci.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/woodpecker-armv7-fixups.fix b/changelog.d/woodpecker-armv7-fixups.fix deleted file mode 100644 index 7bbe7ab3e..000000000 --- a/changelog.d/woodpecker-armv7-fixups.fix +++ /dev/null @@ -1 +0,0 @@ -Include arm32v7 in multi-arch Docker images diff --git a/changelog.d/woodpecker-ci-docs.skip b/changelog.d/woodpecker-ci-docs.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/woodpecker-trigger-params.skip b/changelog.d/woodpecker-trigger-params.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/wpc-tagger-mirror.skip b/changelog.d/wpc-tagger-mirror.skip deleted file mode 100644 index e69de29bb..000000000 diff --git a/changelog.d/wss-necroposts.fix b/changelog.d/wss-necroposts.fix deleted file mode 100644 index 743f9087c..000000000 --- a/changelog.d/wss-necroposts.fix +++ /dev/null @@ -1 +0,0 @@ -RichMedia: Fix backfill causing old posts to show up on timelines by disabling it in MastoAPI StatusView diff --git a/mix.exs b/mix.exs index 3c247cc0e..7b13acf8b 100644 --- a/mix.exs +++ b/mix.exs @@ -4,7 +4,7 @@ defmodule Pleroma.Mixfile do def project do [ app: :pleroma, - version: version("2.10.2"), + version: version("2.11.0"), elixir: "~> 1.17", elixirc_paths: elixirc_paths(Mix.env()), compilers: Mix.compilers(),