Merge branch 'security/fix-html-class-scrubbing' into 'develop'
[akkoma] / CHANGELOG.md
1 # Changelog
2 All notable changes to this project will be documented in this file.
3
4 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
5
6 ## [unreleased]
7 ### Added
8 - LDAP authentication
9 - External OAuth provider authentication
10 - A [job queue](https://git.pleroma.social/pleroma/pleroma_job_queue) for federation, emails, web push, etc.
11 - [Prometheus](https://prometheus.io/) metrics
12 - Support for Mastodon's remote interaction
13 - Mix Tasks: `mix pleroma.database remove_embedded_objects`
14 - Federation: Support for reports
15 - Configuration: `safe_dm_mentions` option
16 - Configuration: `link_name` option
17 - Configuration: `fetch_initial_posts` option
18 - Configuration: `notify_email` option
19 - Pleroma API: User subscriptions
20 - Pleroma API: Healthcheck endpoint
21 - Admin API: Endpoints for listing/revoking invite tokens
22 - Admin API: Endpoints for making users follow/unfollow each other
23 - Mastodon API: [Scheduled statuses](https://docs.joinmastodon.org/api/rest/scheduled-statuses/)
24 - Mastodon API: `/api/v1/notifications/destroy_multiple` (glitch-soc extension)
25 - Mastodon API: `/api/v1/pleroma/accounts/:id/favourites` (API extension)
26 - Mastodon API: [Reports](https://docs.joinmastodon.org/api/rest/reports/)
27 - ActivityPub C2S: OAuth endpoints
28 - Metadata RelMe provider
29 - Emoji packs and emoji pack manager
30
31 ### Changed
32 - **Breaking:** Configuration: move from Pleroma.Mailer to Pleroma.Emails.Mailer
33 - Enforcement of OAuth scopes
34 - Add multiple use/time expiring invite token
35 - Restyled OAuth pages to fit with Pleroma's default theme
36 - Link/mention/hashtag detection is now handled by [auto_linker](https://git.pleroma.social/pleroma/auto_linker)
37 - NodeInfo: Return `safe_dm_mentions` feature flag
38 - Federation: Expand the audience of delete activities to all recipients of the deleted object
39 - Federation: Removed `inReplyToStatusId` from objects
40 - Configuration: Dedupe enabled by default
41 - Configuration: Added `extra_cookie_attrs` for setting non-standard cookie attributes. Defaults to ["SameSite=Lax"] so that remote follows work.
42 - Pleroma API: Support for emoji tags in `/api/pleroma/emoji` resulting in a breaking API change
43 - Mastodon API: Support for `exclude_types`, `limit` and `min_id` in `/api/v1/notifications`
44 - Mastodon API: Add `languages` and `registrations` to `/api/v1/instance`
45 - Mastodon API: Provide plaintext versions of cw/content in the Status entity
46 - Mastodon API: Add `pleroma.conversation_id`, `pleroma.in_reply_to_account_acct` fields to the Status entity
47 - Mastodon API: Add `pleroma.tags`, `pleroma.relationship{}`, `pleroma.is_moderator`, `pleroma.is_admin`, `pleroma.confirmation_pending` fields to the User entity
48 - Mastodon API: Add `pleroma.is_seen` to the Notification entity
49 - Mastodon API: Add `pleroma.local` to the Status entity
50 - Mastodon API: Add `preview` parameter to `POST /api/v1/statuses`
51 - Mastodon API: Add `with_muted` parameter to timeline endpoints
52 - Mastodon API: Actual reblog hiding instead of a dummy
53 - Mastodon API: Remove attachment limit in the Status entity
54 - Deps: Updated Cowboy to 2.6
55 - Deps: Updated Ecto to 3.0.7
56 - Don't ship finmoji by default, they can be installed as an emoji pack
57
58 ### Fixed
59 - Followers counter not being updated when a follower is blocked
60 - Deactivated users being able to request an access token
61 - Limit on request body in rich media/relme parsers being ignored resulting in a possible memory leak
62 - proper Twitter Card generation instead of a dummy
63 - NodeInfo: Include admins in `staffAccounts`
64 - ActivityPub: Crashing when requesting empty local user's outbox
65 - Federation: Handling of objects without `summary` property
66 - Federation: Add a language tag to activities as required by ActivityStreams 2.0
67 - Federation: Do not federate avatar/banner if set to default allowing other servers/clients to use their defaults
68 - Federation: Cope with missing or explicitly nulled address lists
69 - Federation: Explicitly ensure activities addressed to `as:Public` become addressed to the followers collection
70 - Federation: Better cope with actors which do not declare a followers collection and use `as:Public` with these semantics
71 - MediaProxy: Parse name from content disposition headers even for non-whitelisted types
72 - MediaProxy: S3 link encoding
73 - Rich Media: Reject any data which cannot be explicitly encoded into JSON
74 - Pleroma API: Importing follows from Mastodon 2.8+
75 - Mastodon API: `/api/v1/favourites` serving only public activities
76 - Mastodon API: Reblogs having `in_reply_to_id` - `null` even when they are replies
77 - Mastodon API: Streaming API broadcasting wrong activity id
78 - Mastodon API: 500 errors when requesting a card for a private conversation
79 - Mastodon API: Handling of `reblogs` in `/api/v1/accounts/:id/follow`
80 - Mastodon API: Correct `reblogged`, `favourited`, and `bookmarked` values in the reblog status JSON
81
82 ## [0.9.9999] - 2019-04-05
83 ### Security
84 - Mastodon API: Fix content warnings skipping HTML sanitization
85
86 ## [0.9.999] - 2019-03-13
87 Frontend changes only.
88 ### Added
89 - Added floating action button for posting status on mobile
90 ### Changed
91 - Changed user-settings icon to a pencil
92 ### Fixed
93 - Keyboard shortcuts activating when typing a message
94 - Gaps when scrolling down on a timeline after showing new
95
96 ## [0.9.99] - 2019-03-08
97 ### Changed
98 - Update the frontend to the 0.9.99 tag
99 ### Fixed
100 - Sign the date header in federation to fix Mastodon federation.
101
102 ## [0.9.9] - 2019-02-22
103 This is our first stable release.