| .. |
|
actor-containment.security
|
fix(federation): reject actors that point at other hosts
|
2026-10-27 21:37:20 +04:00 |
|
ap-c2s-oauth-scopes.security
|
|
|
|
attachment-zero-size.fix
|
test(status_view): cover attachments with zero dimensions
|
2026-10-27 17:27:41 +04:00 |
|
bandit-1.14.1.security
|
Sec: Update bandit to version 1.14.1
|
2026-10-29 09:24:08 +04:00 |
|
federation-reject-instances.security
|
fix(federation): do not deliver to instances rejected by SimplePolicy
|
2026-10-27 12:38:18 +04:00 |
|
fetch-id-containment.security
|
fix(fetcher): require fetched documents to have the fetched id
|
2026-10-27 21:58:41 +04:00 |
|
filter-regex-escape.fix
|
fix(filters): treat phrases as literal text in the regex
|
2026-10-27 12:36:09 +04:00 |
|
filter-whole-word.fix
|
fix(filters): honour whole_word
|
2026-10-27 12:50:04 +04:00 |
|
get-actor-crash.fix
|
fix(containment): return nil for actor shapes without an id
|
2026-10-27 22:03:13 +04:00 |
|
jose-1.11.13.security
|
Sec: Update jose to version 1.11.13
|
2026-10-29 09:24:14 +04:00 |
|
legacy-sequences.fix
|
|
|
|
mastodon-quote-entity.add
|
feat(api): add the Mastodon quote entity to statuses
|
2026-10-28 11:38:49 +04:00 |
|
media-proxy-network-path.security
|
chore: add changelog entry for network-path media proxy fix
|
2026-10-27 17:30:08 +04:00 |
|
mention-notify-access.security
|
fix(notifications): handle unknown users when filtering tagged mentions
|
2026-10-27 12:39:02 +04:00 |
|
notification-filter-nil-content.fix
|
fix(notifications): skip the filter check for objects without content
|
2026-10-27 12:53:21 +04:00 |
|
oauth-profile-scope.add
|
|
|
|
oauth-tokens-scopes.security
|
|
|
|
object-age-non-public.security
|
test(mrf): cover ObjectAgePolicy with private, direct and unlisted posts
|
2026-10-27 12:35:16 +04:00 |
|
rate-limiter-test-flake.skip
|
test(rate_limiter): use windows that cannot expire during the test
|
2026-10-27 16:10:14 +04:00 |
|
refetch-containment.security
|
fix(fetcher): keep id and author fixed when refetching objects
|
2026-10-27 21:58:46 +04:00 |
|
release-2.11.1.skip
|
|
|
|
remove-dead-pleroma-api-controllers.skip
|
|
|
|
user-fetch-display-url.fix
|
fix(user): update the known user when fetched from a display URL
|
2026-10-27 21:58:46 +04:00 |
|
user-query-is-active.fix
|
fix(user): use deactivated: false for familiar followers
|
2026-10-27 17:26:20 +04:00 |
