Lain Soykaf a766335679 fix(federation): do not deliver to instances rejected by SimplePolicy ... Public activities went to every inbox, so followers on an instance in the SimplePolicy reject list still got our posts. With authorized fetch mode on, signed fetches from those instances were also accepted, unless the instance was in :instance, :rejected_instances too. Check the SimplePolicy reject and accept lists for deliveries and signed fetches, when the policy is enabled. Quarantine keeps its meaning (no private activities). An inbox without a host no longer crashes. Based on the Akkoma changes 90c4785b8, ca000f830, 03662501c and d2b0d8647. Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk> Co-authored-by: Atsuko Karagi <atsuko.karagi@localhost>		2026-10-27 12:38:18 +04:00
..
ap-c2s-oauth-scopes.security	fix(activitypub): check OAuth scopes on C2S endpoints	2026-10-26 12:49:58 +04:00
federation-reject-instances.security	fix(federation): do not deliver to instances rejected by SimplePolicy	2026-10-27 12:38:18 +04:00
legacy-sequences.fix	Delete legacy Postgres sequences	2026-08-24 14:51:58 -07:00
oauth-profile-scope.add	feat(oauth): support the profile scope	2026-10-26 12:29:51 +04:00
oauth-tokens-scopes.security	fix(oauth): require security scopes to list and revoke tokens	2026-10-26 12:28:04 +04:00
release-2.11.1.skip	Prepare 2.11.1 release	2026-10-26 22:02:51 +04:00
remove-dead-pleroma-api-controllers.skip	chore: remove unrouted PleromaAPI token and password controllers	2026-10-26 12:44:32 +04:00