| .. |
|
actor-containment.security
|
fix(federation): reject actors that point at other hosts
|
2026-10-27 21:37:20 +04:00 |
|
ap-c2s-oauth-scopes.security
|
fix(activitypub): check OAuth scopes on C2S endpoints
|
2026-10-26 12:49:58 +04:00 |
|
attachment-zero-size.fix
|
test(status_view): cover attachments with zero dimensions
|
2026-10-27 17:27:41 +04:00 |
|
empty-proxy-url.fix
|
fix(http): treat an empty proxy_url as no proxy
|
2026-10-24 14:12:47 +04:00 |
|
federation-reject-instances.security
|
fix(federation): do not deliver to instances rejected by SimplePolicy
|
2026-10-27 12:38:18 +04:00 |
|
fetch-id-containment.security
|
fix(fetcher): require fetched documents to have the fetched id
|
2026-10-27 21:58:41 +04:00 |
|
filter-regex-escape.fix
|
fix(filters): treat phrases as literal text in the regex
|
2026-10-27 12:36:09 +04:00 |
|
filter-whole-word.fix
|
fix(filters): honour whole_word
|
2026-10-27 12:50:04 +04:00 |
|
get-actor-crash.fix
|
fix(containment): return nil for actor shapes without an id
|
2026-10-27 22:03:13 +04:00 |
|
legacy-sequences.fix
|
Delete legacy Postgres sequences
|
2026-08-24 14:51:58 -07:00 |
|
mastodon-quote-entity.add
|
feat(api): add the Mastodon quote entity to statuses
|
2026-10-28 11:38:49 +04:00 |
|
media-proxy-network-path.security
|
chore: add changelog entry for network-path media proxy fix
|
2026-10-27 17:30:08 +04:00 |
|
mention-notify-access.security
|
fix(notifications): handle unknown users when filtering tagged mentions
|
2026-10-27 12:39:02 +04:00 |
|
notification-filter-nil-content.fix
|
fix(notifications): skip the filter check for objects without content
|
2026-10-27 12:53:21 +04:00 |
|
oauth-profile-scope.add
|
feat(oauth): support the profile scope
|
2026-10-26 12:29:51 +04:00 |
|
oauth-tokens-scopes.security
|
fix(oauth): require security scopes to list and revoke tokens
|
2026-10-26 12:28:04 +04:00 |
|
object-age-non-public.security
|
test(mrf): cover ObjectAgePolicy with private, direct and unlisted posts
|
2026-10-27 12:35:16 +04:00 |
|
rate-limiter-test-flake.skip
|
test(rate_limiter): use windows that cannot expire during the test
|
2026-10-27 16:10:14 +04:00 |
|
refetch-containment.security
|
fix(fetcher): keep id and author fixed when refetching objects
|
2026-10-27 21:58:46 +04:00 |
|
release-2.11.1.skip
|
Prepare 2.11.1 release
|
2026-10-26 22:02:51 +04:00 |
|
remove-dead-pleroma-api-controllers.skip
|
chore: remove unrouted PleromaAPI token and password controllers
|
2026-10-26 12:44:32 +04:00 |
|
shared-inbox.change
|
perf(federation): always prefer the shared inbox
|
2026-10-27 20:45:32 +04:00 |
|
user-fetch-display-url.fix
|
fix(user): update the known user when fetched from a display URL
|
2026-10-27 21:58:46 +04:00 |
|
user-query-is-active.fix
|
fix(user): use deactivated: false for familiar followers
|
2026-10-27 17:26:20 +04:00 |