06 Feb 12:12

f5314c0

v0.13.2 Spideriest Sloth

Release highlights

Fixes some issues where remote accounts could potentially imitate other accounts in order to deliver a subset of activities to a GtS inbox as those accounts. See post https://gts.superseriousbusiness.org/@gotosocial/statuses/01HNZ5GF2EM5M899B7RKXYNMH9 for more details.

This is a recommended security update over anything 0.13.1 and below. You should update your instance when time permits.

Migration notes

Upgrading

See the release notes for 0.13.0 but replace 0.13.0 with 0.13.2 throughout.

config.yaml

No changes since 0.13.1, see 0.13.0 for migration notes from versions < 0.13.0.

Database Migrations

No changes since 0.13.1, see 0.13.0 for migration notes from versions < 0.13.0.

Detailed Changelog

f5314c0 [bugfix] Ensure activities sender always = activities actor (#2608)

Assets 11

10 Jan 13:21

gotosocialorg

v0.13.1

ccecf5a

v0.13.1 Spiderier Sloth

Release highlights

Fixes a couple small issues with poll vote counts and poll expiry, and an issue where domain blocks were sometimes not being properly enforced when deeper- and higher-level domain blocks were used in combination (eg., when combining blocks for say example.org, bad.example.org, also-bad.example.org).

Migration notes

Upgrading

See the release notes for 0.13.0 but replace 0.13.0 with 0.13.1 throughout. Easy peasy!

config.yaml

No changes since 0.13.0, see 0.13.0 for migration notes from versions < 0.13.0.

Database Migrations

No changes since 0.13.0, see 0.13.0 for migration notes from versions < 0.13.0.

Detailed Changelog

ccecf5a [bugfix] fix higher-level explicit domain rules causing issues with lower-level domain blocking (#2513)
d5c305d [bugfix] misc dereferencer fixes (#2475)
1c56192 [feature] Log pubKeyID for http-signed requests (#2501)
f33d05c [bugfix] fix check for closed poll to account for non-zero closed time but in the future (#2486)
b141500 [bugfix] fix poll total vote double count (#2464)

Assets 11

15 Dec 14:50

gotosocialorg

v0.13.0

f4fcffc

v0.13.0 Spider Sloth 🕷️

Spider Sloth, Spider Sloth, does whatever a .... sloth does?

Release highlights

Create, view, and vote in polls. It's been a while in the making but GoToSocial now has support for polls, aka Question activity types. You can create, view, and vote in polls using your client of choice.
Show unsupported media placeholders in incoming posts, where media could not be downloaded (temporarily or otherwise). No more dropped media on posts! You'll instead now get a link to the media on the originating instance, that you can click through in your (mobile) browser.
Mute threads that you're being overwhelmed by. Notifications for replies, likes, and boosts in that thread will no longer be generated.
Media cleanup scheduling. Previously media scheduling took place every night at 12am. With the new media scheduling settings in the config, you can customize the schedule to run it at different times and frequencies. https://docs.gotosocial.org/en/latest/admin/media_caching/#cleanup
Support for setting instance language . You can use the new instance-languages setting to indicate one or more primary languages for your instance. https://docs.gotosocial.org/en/latest/configuration/instance/
Support for language tags on posts. Language of posts is now correctly federated in and out of your instance. The language of posts is also shown on the web view of statuses and threads.
Gather and expose prometheus format metrics. You can now expose a /metrics endpoint to allow a Prometheus instance to scrape metrics about Go runtime memory usage, http request and database metrics, and more. https://docs.gotosocial.org/en/latest/advanced/metrics/

Migration notes

`Error #01: authentication NOT PASSED for public key`

You will see lots of errors in your logs now that look like this. This is normal, and not a new bug! Previously, we were not surfacing these authentication errors, and now we are. They are caused by #894, which we will fix some time in the new year. Again, not a new bug. This will not effect normal running of your instance.

Upgrading

To upgrade to 0.13.0 from a previous release:

Binary/tar

Stop GoToSocial
Untar the new release, including the web assets and html templates.
Edit your config.yaml file as necessary (see below).
Start GoToSocial

Docker

Stop GoToSocial.
Pull the new docker container (superseriousbusiness/gotosocial:0.13.0 or superseriousbusiness/gotosocial:latest)
Start GoToSocial.

config.yaml

The configuration file has changed since the previous release. You can see a diff of the config file here: v0.12.2...v0.13.0#diff-c071e03510b2c57e193a44503fd9528a785f0f411497cc75841a9f8d0b1ac622

Database Migrations

This release contains several database migrations which will run the first time you start up this new version. Be sure not to interrupt this migration process. This will take anywhere between a couple seconds and ten minutes (on slower hardware). Please be patient!

Detailed Changelog

Features + performance

[feature] Status thread mute/unmute functionality by @tsmethurst in #2278
[feature] attach any request errors if found, only set level=ERROR if code >= 500 by @NyaaaWhatsUpDoc in #2300
[feature] Customizable media cleaner schedule by @tsmethurst in #2304
[feature] add per-uri dereferencer locks by @NyaaaWhatsUpDoc in #2291
[feature] support canceling scheduled tasks, some federation API performance improvements by @NyaaaWhatsUpDoc in #2329
[feature] add support for polls + receiving federated status edits by @NyaaaWhatsUpDoc in #2330
[feature] Media attachment placeholders by @tsmethurst in #2331
[feature/performance] Wrap incoming HTTP requests in timeout handler by @tsmethurst in #2353
[feature] Set/show instance language(s); show post language on frontend by @tsmethurst in #2362
[feature] Initial metrics by @Tsuribori in #2334
[feature] Federate status language in and out by @tsmethurst in #2366
[feature] Poll web view by @tsmethurst in #2377
[performance] http response encoding / writing improvements by @NyaaaWhatsUpDoc in #2374
[feature] Add /api/v1/admin/debug/apurl endpoint by @tsmethurst in #2359
[performance/postgres] Rename constraints, remove duplicate indexes by @tsmethurst in #2392

Bugfixes

[bugfix] serialize instance terms via API by @tsmethurst in #2293
[bugfix/frontend] Export/import CSV correctly by @tsmethurst in #2294
[bugfix] allow store smaller PNG image than 261 bytes (#2263) by @KEINOS in #2298
[bugfix/frontend] Add nosubmit option to form fields; use it when instance custom CSS disabled by @tsmethurst in #2290
[bugfix] Extract description as summary first, fall back to name by @tsmethurst in #2303
[bugfix] Allow blocked accounts to show in precise search by @tsmethurst in #2321
[bugfix] Relax Mention parsing, allowing either href or name by @tsmethurst in #2320
Remove account_suspended_at_idx to resolve slow query issues by @Sentynel in #2310
[bugfix] fix poll vote count responses on client and fedi API vote creation by @NyaaaWhatsUpDoc in #2343
[bugfix] actually decrement votes during poll vote delete ... by @NyaaaWhatsUpDoc in #2344
[bugfix/docs] Poll api fixups + swagger docs by @tsmethurst in #2345
[bugfix] Don't try to update suspended accounts by @tsmethurst in #2348
[chore/bugfix/horror] Allow expires_in and poll choices to be parsed from strings by @tsmethurst in #2346
[bugfix] support endless polls, and misskey's' method of inferring expiry in closed polls by @NyaaaWhatsUpDoc in #2349
[bugfix] Update poll delete/update db queries by @tsmethurst in #2361
[bugfix] process account delete side effects in serial, not in parallel by @tsmethurst in #2360
[bugfix] self-referencing collection pages for status replies by @NyaaaWhatsUpDoc in #2364
[bugfix] Add Actor to outgoing poll vote Create; other fixes by @tsmethurst in #2384
[bugfix] Don't copy ptr fields in caches by @tsmethurst in #2386
[bugfix] Correctly handle range > content-length by @Jadeiin in #2395
[bugfix] Update exif-terminator (fix png issue) by @tsmethurst in #2391
[bugfix] always go through status parent dereferencing on isNew, even on data-race by @NyaaaWhatsUpDoc in #2402
[bugfix] return 400 Bad Request on more cases of malformed AS data by @NyaaaWhatsUpDoc in #2399
[bugfix] in fedi API CreateStatus(), handle case of data-race and return early by @NyaaaWhatsUpDoc in #2403
[bugfix/chore] Announce reliability updates by @tsmethurst in #2405
[bug] Fix an import statement in the gen template by @daenney in #2426
[bugfix] Fix wrong notification type sent for poll end by @tsmethurst in #2429
[bugfix] Fix web media not showing as sensitive by @tsmethurst in #2433
[bugfix] Ensure pre renders as expected, fix orderedCollectionPage by @tsmethurst in #2434
[bugfix] Narrow search scope for accounts starting with '@'; don't LOWER SQLite text searches by @tsmethurst in #2435
[bugfix] Make screenreaders read out Language of posts properly by @tsmethurst in #2436
[bugfix] ensure the 'Closing' flag doesn't get cached by @NyaaaWhatsUpDoc in #2443
[bugfix] pol...

Contributors

daenney, Sentynel, and 7 other contributors

Assets 11

12 Dec 15:02

gotosocialorg

v0.13.0-rc2

d0bb8f0

v0.13.0-rc2 Pre-release

Pre-release

Hiya! Here's the second release candidate for 0.13.0!

For installation / migration instructions, please see the release notes for the RC1, but replace rc1 with rc2 throughout:

https://github.com/superseriousbusiness/gotosocial/releases/tag/v0.13.0-rc1

Happy bug hunting!

Detailed Changelog

Bugfixes

d0bb8f0 [bugfix] Let templates deref pointers, as a treat (#2448)
ac48192 [bugfix] poll vote count fixes (#2444)
2191c7d [bugfix] ensure the 'Closing' flag doesn't get cached (#2443)
bca9b2c [bugfix] Make screenreaders read out Language of posts properly (#2436)
3f070a4 [bugfix] Narrow search scope for accounts starting with '@'; don't LOWER SQLite text searches (#2435)
d60edf7 [bugfix] Ensure pre renders as expected, fix orderedCollectionPage (#2434)
cc91ea0 [bugfix] Fix web media not showing as sensitive (#2433)
c6d6fec [bugfix] Fix wrong notification type sent for poll end (#2429)
455064f [bug] Fix an import statement in the gen template (#2426)

Chores / version bumps

cd16113 [chore]: Bump github.com/KimMachineGun/automemlimit from 0.3.0 to 0.4.0 (#2440)
9b03840 [chore]: Bump github.com/miekg/dns from 1.1.56 to 1.1.57 (#2439)
cdeba94 [chore]: Bump golang.org/x/oauth2 from 0.13.0 to 0.15.0 (#2438)
a968a03 [chore]: Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 (#2442)
4779aec [chore] Run ANALYZE for SQLite after latest migrations (#2427)
dacfd41 [chore/frontend] Refactor status templates slightly, put polls behind CWs if present (#2419)
18d850e [chore]: Bump go.opentelemetry.io/otel/exporters/prometheus (#2412)
ca1a581 [chore]: Bump github.com/tdewolff/minify/v2 from 2.20.7 to 2.20.9 (#2416)
bdc43a9 [chore]: Bump github.com/minio/minio-go/v7 from 7.0.63 to 7.0.65 (#2415)
b576fbb [chore]: Bump golang.org/x/crypto from 0.15.0 to 0.16.0 (#2413)
bffc67d [chore]: Bump github.com/gorilla/feeds from 1.1.1 to 1.1.2 (#2414)

Docs

5556767 [docs] Change configuration creation instructions (#2408)

Assets 11

01 Dec 15:00

gotosocialorg

v0.13.0-rc1

0e2c342

v0.13.0-rc1 Pre-release

Pre-release

Well well well, look what the sloth dragged in... the first release candidate for v0.13.0, Spider Sloth.

Release highlights

Create, view, and vote in polls. It's been a while in the making but GoToSocial now has support for polls, aka Question activity types. You can create, view, and vote in polls using your client of choice.
Show unsupported media placeholders in incoming posts, where media could not be downloaded (temporarily or otherwise). No more dropped media on posts! You'll instead now get a link to the media on the originating instance, that you can click through in your (mobile) browser.
Mute threads that you're being overwhelmed by. Notifications for replies, likes, and boosts in that thread will no longer be generated.
Media cleanup scheduling. Previously media scheduling took place every night at 12am. With the new media scheduling settings in the config, you can customize the schedule to run it at different times and frequencies. https://docs.gotosocial.org/en/latest/admin/media_caching/#cleanup
Support for setting instance language . You can use the new instance-languages setting to indicate one or more primary languages for your instance. https://docs.gotosocial.org/en/latest/configuration/instance/
Support for language tags on posts. Language of posts is now correctly federated in and out of your instance. The language of posts is also shown on the web view of statuses and threads.
Gather and expose prometheus format metrics. You can now expose a /metrics endpoint to allow a Prometheus instance to scrape metrics about Go runtime memory usage, http request and database metrics, and more. https://docs.gotosocial.org/en/latest/advanced/metrics/

Migration notes