X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=CHANGELOG.md;h=1ae33be6d046951cea96b3c216bfead9c590bbf9;hb=b0d8a639ee8b7510c685deb38551e398257746e4;hp=a9ee14f0ec9670d7be553ba84f21697a84acd556;hpb=d15d55eda2c2e4672090460e13be675bd9e38631;p=akkoma diff --git a/CHANGELOG.md b/CHANGELOG.md index a9ee14f0e..1ae33be6d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,26 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). -## [Unreleased] +## 2022.07 + +### Added +- Added move account API +- Added ability to set instance accent-color via theme-color +- A fallback page for when a user does not have a frontend installed +- Support for OTP musl11 + +### Removed +- SSH frontend, to be potentially re-enabled via a bridge rather than wired into the main system +- Gopher frontend, as above +- All pre-compiled javascript + +### Fixed +- ES8 support for bulk indexing activities + +### Upgrade Notes +- The bundled frontend has been removed, you will need to run the `pleroma.frontend install` mix task to install your frontend of choice. Configuration by default is set to `pleroma-fe`. +- Admin-FE users will have to ensure that :admin is set _BEFORE_ restart, or +you might end up in a situation where you don't have an ability to get it. ## 2.5.2 @@ -17,6 +36,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ### Fixed - Updated `no_empty` MRF to not error when recieving misskey markdown +### Security +- Ensure local-only statuses do not get leaked + ## 2.5.1 ### Added @@ -47,6 +69,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - Readded mastoFE - Added support for custom emoji reactions - Added `emoji_url` in notifications to allow for custom emoji rendering +- Make backend-rendered pages translatable. This includes emails. Pages returned as a HTTP response are translated using the language specified in the `userLanguage` cookie, or the `Accept-Language` header. Emails are translated using the `language` field when registering. This language can be changed by `PATCH /api/v1/accounts/update_credentials` with the `language` field. ### Fixed - Subscription(Bell) Notifications: Don't create from Pipeline Ingested replies @@ -64,7 +87,19 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ### Removed -## 2.4.1 - 2021-08-29 +### Security +- Private `/objects/` and `/activities/` leaking if cached by authenticated user +- SweetXML library DTD bomb + +## 2.4.2 - 2022-01-10 + +### Fixed +- Federation issues caused by HTTP pool checkout timeouts +- Compatibility with Elixir 1.13 + +### Upgrade notes + +1. Restart Pleroma ### Changed - Make `mix pleroma.database set_text_search_config` run concurrently and indefinitely @@ -97,6 +132,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - Improved Twittercard and OpenGraph meta tag generation including thumbnails and image dimension metadata when available. - AdminAPI: sort users so the newest are at the top. - ActivityPub Client-to-Server(C2S): Limitation on the type of Activity/Object are lifted as they are now passed through ObjectValidators +- MRF (`AntiFollowbotPolicy`): Bot accounts are now also considered followbots. Users can still allow bots to follow them by first following the bot. ### Added