v1.6.0rc3

Note: This is a hotfix for RC2. This is technically exactly the same release as 1.6.0rc2, just with a fix to the database migrations. You wouldn't encounter problems unless your statuses table is really, really big, so if you already successfully upgraded to RC2, you don't have to do anything. It is preferable you upgrade to this version straight away though, if you haven't.

v1.6.0rc2

Fixes:

• Fix short number locales (#4790)
• Fix a problem that notification column goes to top (#4792)
• Use correct syntax for content preloading (#4798)
• Fix streaming url to lowercase (#4804)
• Show pinned statuses only in the top of the profile page (#4803)
• Fix some ActivityPub JSON bugs (#4796)
• Add new index on notifications to make filtering faster (#4750)
• Adjust status embeds (#4808)
• Restore instant follow in API response when account is unlocked (#4799)
• Fix mentions in direct statuses not being delivered via AP (#4806)
• Do not execute the job with the same arguments as the retry job (#4814)
• Fix text position of NSFW for video file (#4819)
• Fix scroll position (#4821)
• Add Smartphone screen favourite back button and adjust styles (#4813)
• Make new statuses use the same URI format in both ActivityPub and OStatus (fixes threading issue in OStatus) (#4815)

Features:

• OpenStack Swift support as alternative to S3 📎 (#2322, #4816)

Upgrade notes:

Non-Docker only:

• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate).
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)
• After database migrations, clean out old preview cards thumbnails with RAILS_ENV=production bundle exec rails mastodon:maintenance:remove_deprecated_preview_cards (in Docker: docker-compose run --rm web rails mastodon:maintenance:remove_deprecated_preview_cards)

Contributors to this release:

@abcang
@akihikodaki
@AndyDrop
@BoFFire
@clworld
@diomed
@Gargron
@lynlynlynx
@mabkenar
@nullkal
@pfm-eyesightjp
@Quent-in
@takayamaki
@thurloat
@treyssatvincent
@voidsatisfaction
@ykzts

v1.6.0rc1

ActivityPub is a new federated web protocol. From this release onward it is the primary protocol of Mastodon. We will remain compatible with OStatus for the foreseeable future, but version 2.0 of Mastodon will stop sending private toots over it. After installation, accounts in the database will slowly start upgrading. One of the immediate and obvious perks of this new protocol is more complete conversation views on every instance (presuming all participants are upgraded). For more, see this blog post.

Fixes:

• During Docker build: Use multiple cores in bundler and make (#4544)
• Web perf: Cache status height (#4439)
• Fixes to the about page (#4554, #4548, #4682)
• Add missing content type on throttled responses (#4558)
• Add coalesce option to avatar and header convert processor (#4552)
• Add missing @ to the onboarding modal (#4560)
• Add missing scroll to top to some column headers (#4563)
• Add favourited toot to favourites column (#4562)
• Remove toot from favorites column when unfavorited (#4597)
• Fix emoji picker scrollbar style (#4572)
• Extend Devise remember_me longevity to 1 year instead of 2 weeks (#4587)
• Fix search (regression from #4589) (#4594)
• Fix require_user! behavior when not logged in (#4604)
• Don't send Link header when prev and next links are empty (#4633)
• Re-add missing token authorization for /api/v1/verify_credentials (#4650)
• Refactored streaming connections (#4645)
• Do not try to re-subscribe to unsubscribed accounts (#4653)
• Fix visual line-break glitch with .invisible parts of links (#4655)
• Increase contrast in landing pages (#4567)
• Periodically remove expired PuSH subscribers (#4654)
• Disable babel-loader cache when in development environment (#4684)
• Don't load Roboto webfont when system font is used in the app (#4591)
• Automatically authorize pending incoming follow requests after unlocking account (#4658)
• Adjust RTL styles (#4712)
• Do not scroll the columns area due to redirection (#4541)
• Remove unnecessary indices (#4738)
• Add close tag of iframe for OEmbed response (#4745)
• Docker: Update to Alpine 3.6 (#4747)
• Make first use less overwhelming with browser permissions: Ask for desktop notifications after 1 minute, ask to register protocol handler after 5 minutes (#4760)
• Use system's default font (when selected) on non web UI pages too (#4553)
• Link previews storage and fetching reworked/optimized (#4642)
• Fix text position of "sensitive content" spoiler in Safari (Mac/iPhone) (#4570)
• Make "unfollow" remove pending outgoing follow requests too (#4781)
• Validate presence of data in imports (#4782)

Features:

• 🎆🎇 ActivityPub 🎇🎆
  • Security:
    • Digest header on requests with body (#4565)
    • Add handling of Linked Data Signatures in payloads (#4687, #4752)
    • Support more variations of ActivityPub keyId in signature (#4630)
  • Plumbing:
    • Incoming processing (#4216, #4571, #4595, #4601, #4629, #4639, #4728, #4729, #4763, #4754, #4761)
    • Delivery (#4566, #4703, #4704, #4739)
    • Improvements to representation of entities (#4592, #4737, #4764, #4767, #4779)
  • Protocol upgrade:
    • Migration from OStatus (#4583, #4593, #4623, #4631, #4632, #4617, #4662, #4582, #4702, #4730, #4756, #4766)
    • Alternate links to ActivityPub resources from HTML/HEAD variants (#4586)
    • Hook up URL-based resource look-up to ActivityPub (#4589, #4661, #4599, #4668, #4672)
  • User-facing:
    • Update admin view for ActivityPub users (#4600, #4622)
    • Forward ActivityPub deletes to followers of rebloggers (#4706)
    • Forward ActivityPub replies to local statuses to followers of authors (#4709)
• Include the stats from the /about/more page in API response about instance (#4074)
• Add protocol handler. Mastodon can now respond to URLs that begin with web+mastodon://, e.g. specially crafted "follow me" buttons would automatically open your correct instance from any webpage (#4511)
  • web+mastodon://follow?uri=alice@example.com opens follow dialog for alice
  • web+mastodon://share?text=Lorem+ipsum opens new toot dialog with preset text "Lorem ipsum"
• Redesign public profiles. Add no-replies, with-replies, only-media filters (#4608, #4711, #4713)
• Developer UI for OAuth applications (#2758, #4664, #4671)
• Add Mastodon::Source.url for forks (#4643)
• Pinned statuses (#4675, #4690)
• Update status embeds with better URLs, better design, branded follow button using protocol handler (#4742)
• "Embed" modal in web UI (#4748, #4759, #4773)

Upgrade notes:

Non-Docker only:

• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate).
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors to this release:

@abcang
@akihikodaki
@algernon
@anneau
@clworld
@contraexemplo
@cygnan
@ekiru
@eramdam
@Gargron
@lynlynlynx
@m4sk1n
@masarakki
@mayaeh
@MightyPork
@MitarashiDango
@miuchan
@muffinista
@nightpool
@nullkal
@pfm-eyesightjp
@Quent-in
@rkarabut
@salvadorpla
@sorin-davidoi
@Sylvhem
@takayamaki
@TheInventrix
@ThomasLeister
@unarist
@vahnj
@Wonderfall
@ykzts
@yukimochi
@zunda

v1.5.1

Fixes:

• Critical: Fix WebFinger regression that some servers experience (#4527)
• Use correct keys for keyboard navigation (#4487)
• Fix column-back-button style for some browsers (#4484)
• Don't normalize invalid domain names (#4499)
• Make number of comparison in emojify() fewer (#4500)
• Redirect to PasswordController#new when reset_password_token is invalid (#4506)
• Enable cache for babel-loader (#4505)
• Docker: Use GNU libiconv in Nokogiri (#4494)
• Scroll columns area to right when children property is changed (#4517)
• Add "signed in as" header to some pages (#4523)

Upgrade notes:

Non-Docker only:

• Dependency updates: bundle install

Both Docker and non-Docker:

• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors to this release:

TBA

v1.5.0

Fixes:

• Increased threshold for triggering a swipe on mobile (#4037)
• Faster emojify (#4049)
• Process links in toots on update as well a mount (#4042)
• Faster JSON generation (#4090)
• Fix verified feed author not being enforced when processing feed (#4092)
• Fix sessions getting forgotten too soon (#4091)
• Lazy load less used components in web UI (#3879)
• Change account link to admin account link on report page (#4119)
• GIF autoplay now defaults to off (#4132)
• Improve PuSH resubscription scheduling (#4142)
• Reduce webpack memory usage (#4139)
• /api/v1/search now requires authentication (#4155)
• Do not make HTTP roundtrip when resolving local URL (#4160)
• Add background color for spoiler input, like toot textarea (#4181)
• Make tag search case insensitive again (#4184)
• Store emojis as unicode (#4189)
• Fix subsequent replies to unresolved status not being filtered from home timeline (#4190)
• HTTP signatures: connect signed PuSH subscription requests to instance domain, removes the drawback of serving Mastodon from a subdomain (#4146, #4205)
• Optimize uri normalization (#4212)
• Exclude self toots from regular expression filter (#4245)
• Mutes now block notifications (#4300)
• Change "Content Warning" to "Write your warning here" (#4313)
• No scrollbar if not needed (#4350)
• Exit early in load function (#4349)
• Use passive wheel listener (#4348)
• Update Capistrano lock version in config/deploy.rb (#4352)
• Guard against missing ref (#4353)
• Send short account URL to remote instance (regression from #3844) (#4355)
• Allow longer link text on landing page (reduce padding for Mobile) (#4363)
• Fix multiple-gif display in user page (#4364)
• Adjust mobile landing page (#4366)
• Added external link icons to joinmastodon navbar buttons (#4368)
• Improve accessibility (#4369, #4377, #4405, #4408, #4417)
• Add index favourites on account_id and id (#4360)
• Fix padding in hero container of landing page (#4373)
• s/PubSubHubbub/WebSub/g (#4372)
• Fix crash when heading is undefined (#4378)
• Guard against deleted notifications (#4379)
• Manually set tabs style when swiping (#4320)
• Fix infinite scroll fluidity (#4381)
• Accept backup codes for disabling 2FA (#4382)
• Add callback_url/acct information for Sidekiq PuSH workers Exception. (#4281)
• Fix multipoint shortcode bug (#4387)
• Fix an error when a user tries to search nonexistent remote user (regression from #4275) (#4400)
• Add default settings for user (#4393)
• [nanobox] Minor tweaks for 1.5 (#4395)
• Fallback to site_hostname when site_title is empty (#4394)
• Use star icon for favourite action (#4396)
• Fix timeline height on landing page for Safari (#4392)
• Symlink sw.js to assets/sw.js (#4357)
• Web push notifications: Do not hard reload tab (#4380)
• Web push notifications: Group notifications (#4388)
• Remove hash from chunk filename when dev env (#4411)
• Fix column header in landing page (regression from #4405) (#4416)
• Fix protruded information board section in about/more page (#4415)
• Unify webpackChunkName to lowercase (#4412)
• Fix current session not being displayed in sessions list (#4424)
• When PuSH subscribe attempts are exhausted, unsubscribe (#4422)
• Fix guard clause in WebPushNotificationWorker (#4421)
• Use consistent icons for web push notifications, same as web UI (#4426)
• Fix web push notifications "boost" icon not being loaded (regression from #4426) (#4431)
• Accessability fixes (#4432)
• Allow animation to end before navigating (#4429)
• Improve accessibility (#4435, #4457)
• Don't add tabIndex to wrapped status (#4437)
• Fix autocomplete option in haml files (#4438)
• Avoid optimization for non-touch devices (#4444)
• Use a fainted text color for <hr> elements in the landing page (#4443)
• Set contact address in about/more as mailto link (#4450)
• Remove outline from focused toot (#4448)
• Change to sensitive when adding content warning from web UI (#4456)
• Disable sensitive button when with content warnings (#4460)
• Fix button overflow on confirmation modal for mobile (#4465)

Features:

• Customize privacy policy from admin UI (#4062)
• Setting to use native system font in web UI (#4033)
• Nanobox: automated backups (#4023)
• Swipe animations on mobile web UI (#4105)
• /api/v1/accounts/verify_credentials now returns user's chosen privacy default (#4075)
• New preference: always mark media as sensitive (#4136)
• Success page when remote following someone (#4129)
• New landing page with public timeline (can be disabled by admin) (#4122)
• Rake task to redownload avatars/headers (#4156)
• Improved design of admin settings (#4163)
• Whenever content warning is preset, media sensitivity is also enforced (#4176)
• Web Push Notifications (#3243)
• Adjustable time period for mastodon:media:remove_remote (#4191)
• Add option to opt out of search engines on public profile/status pages (#4199)
• Pin favourites column (#4201)
• Improve ActivityPub representations (#3844)
• Add unfollow modal (optional) (#4246)
• Add feature to revoke sessions (#4259)
• Add admin button to re-subscribe to all accounts from a domain (#4285)
• Show avatar/header on edit profile page (#4288)
• Add rake task mastodon:feeds:build to regenerate all active users' feeds (#4303)
• New logo (#4306)
• Add loading indicator animation (#4316)
• Allow domain blocks that only reject media without silencing or suspending (#4325)
• Redesign extended information page (#4322)
• Redesign terms page (#4338)
• Improve remote profile disclaimer (#4342)
• Web share button (#4365, #4402)
• Open dropdown menu as modal on mobile (#4295)
• Count all URLs in text as 23 characters flat, do not count domain part of usernames (#4427)

Upgrade notes:

Non-Docker only:

• New system package dependencies: libicu-dev libidn11-dev
• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• To enable Web Push notifications, you should generate a few extra secrets and put them into your environment (usually .env.production). Generate the secrets/variables with: RAILS_ENV=production bundle exec rake mastodon:webpush:generate_vapid_key (in Docker: docker-compose run --rm web rake mastodon:webpush:generate_vapid_key)
• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate). There are some column data updates, so the migration may take a while if your tables have many rows. If you get a lock error, you'll need to shut down the Mastodon web process during the upgrade.
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)
• The file sw.js (service worker definition) served from the public directory should be served with no cache headers or cache headers with max-age 0 (basically, don't cache it)
• There are no more mandatory regular cronjobs, because all important tasks have been moved to Sidekiq. Deprecated rake tasks like mastodon:daily now do nothing.

If push notifications are not being sent and the server logs show errors like Webpush::InvalidSubscription - 400 Unauthorized Registration or Request did not validate Invalid bearer token: Auth > 24 hours in the future, most likely the server time is not accurate (you can use ntp to synchronize it and prevent it from drifting).

If you're upgrading from a version prior to 1.4.2, you may need to run the following command to prepare for the 1.4.2 referential integrity migration:

• RAILS_ENV=production bundle exec rails mastodon:maintenance:prepare_for_foreign_keys (in Docker: docker-compose run --rm web rails mastodon:maintenance:prepare_for_foreign_keys)

Contributors to this release:

@aaribaud
@abcang
@akihikodaki
@clworld
@cygnan
@danhunsaker
@eramdam
@Gargron
@ignisf
@jeroenpraat
@komic
@lindwurm
@lynlynlynx
@m4sk1n
@mabkenar
@masarakki
@mayaeh
@MightyPork
@MitarashiDango
@nightpool
@nullkal
@Quent-in
@rkarabut
@schas002
@ScienJus
@sdukhovni
@skoji
@sorin-davidoi
@Sylvhem
@ThibG
@unarist
@ykzts
@yukimochi

v1.5.0rc3

Fixes:

• Fix web push notifications "boost" icon not being loaded (regression from #4426) (#4431)
• Accessability fixes (#4432)
• Allow animation to end before navigating (#4429)
• Improve accessibility (#4435, #4457)
• Don't add tabIndex to wrapped status (#4437)
• Fix autocomplete option in haml files (#4438)
• Avoid optimization for non-touch devices (#4444)
• Use a fainted text color for <hr> elements in the landing page (#4443)
• Set contact address in about/more as mailto link (#4450)
• Remove outline from focused toot (#4448)
• Change to sensitive when adding content warning from web UI (#4456)
• Disable sensitive button when with content warnings (#4460)
• Fix button overflow on confirmation modal for mobile (#4465)

Features:

• Count all URLs in text as 23 characters flat, do not count domain part of usernames (#4427)

Upgrade notes:

Both Docker and non-Docker:

• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors to this release:

@eramdam
@Gargron
@jeroenpraat
@lynlynlynx
@m4sk1n
@masarakki
@MitarashiDango
@sorin-davidoi
@unarist
@ykzts

v1.5.0rc2

Fixes:

• No scrollbar if not needed (#4350)
• Exit early in load function (#4349)
• Use passive wheel listener (#4348)
• Update Capistrano lock version in config/deploy.rb (#4352)
• Guard against missing ref (#4353)
• Send short account URL to remote instance (regression from #3844) (#4355)
• Allow longer link text on landing page (reduce padding for Mobile) (#4363)
• Fix multiple-gif display in user page (#4364)
• Adjust mobile landing page (#4366)
• Added external link icons to joinmastodon navbar buttons (#4368)
• Improve accessibility (#4369, #4377, #4405, #4408, #4417)
• Add index favourites on account_id and id (#4360)
• Fix padding in hero container of landing page (#4373)
• s/PubSubHubbub/WebSub/g (#4372)
• Fix crash when heading is undefined (#4378)
• Guard against deleted notifications (#4379)
• Manually set tabs style when swiping (#4320)
• Fix infinite scroll fluidity (#4381)
• Accept backup codes for disabling 2FA (#4382)
• Add callback_url/acct information for Sidekiq PuSH workers Exception. (#4281)
• Fix multipoint shortcode bug (#4387)
• Fix an error when a user tries to search nonexistent remote user (regression from #4275) (#4400)
• Add default settings for user (#4393)
• [nanobox] Minor tweaks for 1.5 (#4395)
• Fallback to site_hostname when site_title is empty (#4394)
• Use star icon for favourite action (#4396)
• Fix timeline height on landing page for Safari (#4392)
• Symlink sw.js to assets/sw.js (#4357)
• Web push notifications: Do not hard reload tab (#4380)
• Web push notifications: Group notifications (#4388)
• Remove hash from chunk filename when dev env (#4411)
• Fix column header in landing page (regression from #4405) (#4416)
• Fix protruded information board section in about/more page (#4415)
• Unify webpackChunkName to lowercase (#4412)
• Fix current session not being displayed in sessions list (#4424)
• When PuSH subscribe attempts are exhausted, unsubscribe (#4422)
• Fix guard clause in WebPushNotificationWorker (#4421)
• Use consistent icons for web push notifications, same as web UI (#4426)

Features:

• Web share button (#4365, #4402)
• Open dropdown menu as modal on mobile (#4295)

Upgrade notes:

Non-Docker only:

• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate)
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors to this release:

@akihikodaki
@clworld
@danhunsaker
@Gargron
@ignisf
@jeroenpraat
@komic
@lynlynlynx
@m4sk1n
@mayaeh
@MightyPork
@nullkal
@Quent-in
@rkarabut
@skoji
@sorin-davidoi
@unarist
@ykzts

v1.5.0rc1

Fixes:

• Increased threshold for triggering a swipe on mobile (#4037)
• Faster emojify (#4049)
• Process links in toots on update as well a mount (#4042)
• Faster JSON generation (#4090)
• Fix verified feed author not being enforced when processing feed (#4092)
• Fix sessions getting forgotten too soon (#4091)
• Lazy load less used components in web UI (#3879)
• Change account link to admin account link on report page (#4119)
• GIF autoplay now defaults to off (#4132)
• Improve PuSH resubscription scheduling (#4142)
• Reduce webpack memory usage (#4139)
• /api/v1/search now requires authentication (#4155)
• Do not make HTTP roundtrip when resolving local URL (#4160)
• Add background color for spoiler input, like toot textarea (#4181)
• Make tag search case insensitive again (#4184)
• Store emojis as unicode (#4189)
• Fix subsequent replies to unresolved status not being filtered from home timeline (#4190)
• HTTP signatures: connect signed PuSH subscription requests to instance domain, removes the drawback of serving Mastodon from a subdomain (#4146, #4205)
• Optimize uri normalization (#4212)
• Exclude self toots from regular expression filter (#4245)
• Mutes now block notifications (#4300)
• Change "Content Warning" to "Write your warning here" (#4313)

Features:

• Customize privacy policy from admin UI (#4062)
• Setting to use native system font in web UI (#4033)
• Nanobox: automated backups (#4023)
• Swipe animations on mobile web UI (#4105)
• /api/v1/accounts/verify_credentials now returns user's chosen privacy default (#4075)
• New preference: always mark media as sensitive (#4136)
• Success page when remote following someone (#4129)
• New landing page with public timeline (can be disabled by admin) (#4122)
• Rake task to redownload avatars/headers (#4156)
• Improved design of admin settings (#4163)
• Whenever content warning is preset, media sensitivity is also enforced (#4176)
• Web Push Notifications (#3243)
• Adjustable time period for mastodon:media:remove_remote (#4191)
• Add option to opt out of search engines on public profile/status pages (#4199)
• Pin favourites column (#4201)
• Improve ActivityPub representations (#3844)
• Add unfollow modal (optional) (#4246)
• Add feature to revoke sessions (#4259)
• Add admin button to re-subscribe to all accounts from a domain (#4285)
• Show avatar/header on edit profile page (#4288)
• Add rake task mastodon:feeds:build to regenerate all active users' feeds (#4303)
• New logo (#4306)
• Add loading indicator animation (#4316)
• Allow domain blocks that only reject media without silencing or suspending (#4325)
• Redesign extended information page (#4322)
• Redesign terms page (#4338)
• Improve remote profile disclaimer (#4342)

Upgrade notes:

Non-Docker only:

• New system package dependencies: libicu-dev libidn11-dev
• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• To enable Web Push notifications, you should generate a few extra secrets and put them into your environment (usually .env.production). Generate the secrets/variables with: RAILS_ENV=production bundle exec rake mastodon:webpush:generate_vapid_key (in Docker: docker-compose run --rm web rake mastodon:webpush:generate_vapid_key)
• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate)
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)
• The file sw.js (service worker definition) served from the public directory should be served with max-age 0 (no caching)
• There are no more mandatory regular cronjobs, because all important tasks have been moved to Sidekiq. Deprecated rake tasks like mastodon:daily now do nothing.

Contributors to this release:

@aaribaud
@abcang
@akihikodaki
@cygnan
@danhunsaker
@eramdam
@ernix
@Gargron
@jeroenpraat
@lindwurm
@lynlynlynx
@m4sk1n
@masarakki
@MightyPork
@mistermantas
@Mnkai
@nightpool
@nolanlawson
@noraworld
@nullkal
@Quent-in
@rkarabut
@schas002
@sdukhovni
@sorin-davidoi
@staticsafe
@STJrInuyasha
@Sylvhem
@ThibG
@unarist
@unstabler
@ykzts
@yukimochi

v1.4.7

Fixes:

• Security fix: access tokens used by web UI are now session-bound instead of reused between sessions (#3940)
• Security fix: require 2FA token to disable 2FA (#3935)
• Fix "favourites" page not working in web UI (#3925)
• Fix elephant in onboarding modal being very small on mobile (#3932)
• Fix incorrect aspect ratio on some preview images in image modal (#3966)
• Fix jittery timelines (#3972)
• Fix order of processing when regenerating home feeds from scratch (#3984)
• Optimize number of commands when trimming home feeds (#3989)
• Optimize regenerating home feeds (#3990)
• Optimize emoji replacements in web UI (#4019)
• Check external changes to textarea before submitting (Grammarly support) (#3632)
• "Credentials" page renamed to "Security" (#3941)
• Remove babel compilation step from streaming API server (#3950)
• Detect more Salmon delivery failures and retry (#3960)

Features:

• Swipeable columns, media, onboarding modal on mobile (#3643, #3934)
• Login sessions tracking (under "Security") (#3616, #3929)
• Admins now receive e-mails about new reports in the system (#3949)
• Responsive images in media gallery for higher res on high DPI devices (#3963)
• New rake task to create a user account from the command line (mastodon:add_user) (#1482)
• Report screen is now a modal instead of a column (#3965)

Upgrade notes:

Non-Docker only:

• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• This release includes database migrations, that means you need to run RAILS_ENV=production bundle exec rails db:migrate (in Docker: docker-compose run --rm web rails db:migrate)
• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors to this release:

@abcang
@akihikodaki
@Aldarone
@amazedkoumei
@danhunsaker
@debanshuk
@Gargron
@ikuradon
@M1dgard
@m4sk1n
@mjankowski
@nolanlawson
@pfm-eyesightjp
@sorin-davidoi
@ThibG
@unarist
@ykzts
@yukimochi

v1.4.6

Fixes:

• Bumps the version up to 1.4.6 properly, unlike 1.4.5 which reports itself as 1.4.4
• Setting toggles properly connected to their labels (#3907)

Upgrade notes:

Both Docker and non-Docker:

• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Upgrade notes if you are upgrading straight from 1.4.3:

Non-Docker only:

• Dependency updates: bundle install and yarn install

Both Docker and non-Docker:

• This release includes changes to assets, that means you need to run RAILS_ENV=production bundle exec rails assets:precompile (in Docker: docker-compose run --rm web rails assets:precompile)

Contributors:

@Gargron
@ykzts