iceshrimp/CHANGELOG.md

v2023.11-pre4

Highlights

This release mostly fixes regressions introduced in the last release preview. If you are running v2023.11-pre3, upgrading is strongly recommended.

Mastodon client API

• The compatible version was bumped to 4.2.1, to indicate support for the "hide list members from home timeline" feature
• Remote users are now automatically refreshed in background

Backend

• Errors in refetchPublicKeyForApId can no longer cause strange inbox queue behavior
• Database transactions were refactored so no non-database code is run in transaction blocks, fixing a possible backend stall condition in which all database connections are blocked by transactions
• User profile mentions resolution no longer recurses infinitely, fixing a possible DoS attack vector

Miscellaneous

• The Mk prefix was removed from all custom VueJS components
• .yarn/sdks was updated to fix language server problems in VSCode
• Various translation updates

Attribution

This release was made possible by project contributors: AntoineÐ, Aylam, jeder & Laura Hausmann

v2023.11-pre3

Breaking changes

• Lists have been reworked, now only allowing followed users to be added, and support for proxy accounts has been removed. To allow users to follow any users they want to keep on their lists, the migration that removes all list members users are not following will only be activated in the release after the next stable release. It is therefore highly recommended to add an instance announcement informing your users of this change and advising them to follow any affected accounts and to use the new "hide from home timeline" list option if desired.

Highlights

• Significantly improved handling of mentions, both in outgoing AP messages and in the Mastodon client API
• Various Mastodon client API regressions are now fixed, improving client compatibility
• HTTP Signature validation error handling has been improved
• The project is now compatible with NodeJS >= 18.6 (tested against v20.8.1 at time of writing)

Mastodon client API

• Long redirect URIs are now handled correctly
• The /v1/instance endpoint now returns the correct streaming URL
• The /v1/apps response now returns all fields, including vapid_key, allowing for implementation of push notifications in the future
• Redirect URLs that contain double-urlencoded parts are now handled correctly
• The OAuth process now displays errors properly
• The hashtag timeline query is now case insensitive
• Statuses returned by all endpoints now have the content_type field populated
• The /v1/instance endpoint now correctly lists the supported mime types for statuses
• Hashtags now have the class=hashtag attribute set correctly
• Accounts returned by all endpoints now have the fqn field populated
• Inline quote URLs are now rendered properly by supported clients (e.g. Enafore)
• Mentions to accounts the instance was unable to resolve are now rendered as plain text
• Profile edits made using /v1/update_credentials are now federated properly
• An edge case where quotes were incorrectly detected as boosts was resolved
• Boosted quotes are now handled properly
• User profile data is now updated in the background when calling /v1/accounts/:id
• The url field in status objects now contains the url instead of the uri, whenever available
• Boosts by boost-muted users are now skipped in the Mastodon streaming API

Backend

• Migrations are finally in sync with the ORM, allowing for proper migrations handling in the future
• Mentions in user profiles are now resolved and stored in the database
• Invalid mentions in outgoing AP messages are now sent as plain text instead of an unreachable link pointing back at the origin instance
• When HTTP signature validation fails, an attempt to refresh the user's public key is now made, fixing federation with Mastodon instances who ran tootctl accounts rotate
• The error image override config is now loaded properly
• VAPID keys for WebPush are now properly generated when bootstrapping a new instance
• Capitalization of mentions is now corrected automatically, preventing federation issues where remote instances fail to render them
• Authorized fetch is now enabled by default for new instances
• NSFW detection & tensorflow have been removed
• HTTP signature validation now correctly verifies the hostname of the keyId against the hostname of the actor uri instead of the user's account domain, fixing an edge case where federation with split domain instances could fail
• Federation handshakes initiated by GoToSocial when the local instance has authorized fetch enabled are now handled correctly
• The search-by-username-and-host endpoint now doesn't filter out inactive users by default

UI/UX

• The default themes were tweaked
• The 'Explore' tab header now uses the correct icon

Miscellaneous

• Some unused files have been removed from the repository
• The code formatter now works properly for .vue files
• The discrepancy of different formatters using different tab widths was resolved
• The documentation now recommends using git clone --depth=1 when cloning the repository to speed up the process
• The Dockerfile now doesn't run yarn workspaces focus --production because it doesn't actually save any space in the final image due to yarn zero installs
• A new yarn script, start:debug, was added to make attaching a debugger to the application easier
• Dependencies with critical vulnerabilities have been updated
• Various translation updates

Attribution

This release was made possible by project contributors: AntoineÐ, Aylam, Erin Shepherd & Laura Hausmann

v2023.11-pre2

Highlights

• An oversight in the OAuth helper that was preventing login to work in some Mastodon clients was fixed.

v2023.11-pre1

New versioning scheme

From now on we will use a JetBrains-like versioning scheme. Since our release candidates are more of a release preview, they can now be identified by the -pre suffix, followed by a number that increments with each following release preview. To maintain lexical sort order with previous releases from this year, we're starting the release counter at 11. That makes this release v2023.11-pre1.

Breaking changes

• The Mastodon client API now uses its own, separate OAuth backend. This means all existing sessions are now invalid. Please log out and back in again in your clients.

Highlights

• The Mastodon client API now uses OAuth instead of MiAuth
• ActivityPub object lookups now respect redirects

Mastodon client API

• Reactions with 0 reacts are no longer returned
• The 'next' part of the Link pagination header is no longer returned when there are less results than the set limit
• Remote mentions of local users are now rendered correctly
• Mentions now only display the handle, without the instance domain, mimicking Mastodon
• Code blocks are now rendered properly
• Mentions in user bios now work (most of the time)
• Quote URIs are now only appended to the post if the post doesn't already contain them
• Links are now rendered properly
• The streaming API now works for webclients running in Chrome and its derivatives
• /v1/instance now returns the field max_toot_chars, improving compatibility with some clients
• Edit history is now returned in the correct order
• Invalid remote mentions are now handled correctly
• User search autocomplete now works as one would expect
• The public:allow_local_only stream is now supported

UI/UX

• "NSFW content" was renamed to "sensitive content"
• The user mention picker now works correctly for remote users

Backend

• All migrations are now written in TypeScript
• Mentions in outgoing AP messages are now formatted correctly
• Trailing slashes for links in user profile fields are now only sent in AP messages if explicitly set
• Links in outgoing AP messages are now formatted correctly
• Mention parsing in incoming & outgoing AP messages now matches usernames case-insensitively
• The required VAPID keys for WebPush are now generated automatically

Miscellaneous

• A missing devDependency was added
• The unused check:connect script was removed

Attribution

This release was made possible by project contributors: aylamz & Laura Hausmann

It also includes cherry-picked contributions from external contributors: Johann150

v2023.10.11-rc1

Highlights

• The Mastodon client API now supports the websocket streaming API
• Various bugs in the HTTP Link header pagination implementation were fixed

Attribution

This release was made possible by project contributors: Laura Hausmann

v2023.10.08-rc1

Breaking changes

• The Mastodon client API now uses the standard alphanumeric ID format. This breaks pagination with existing Mastodon client sessions, if they cache user and/or post data. It is therefore strongly recommended that you either clear the client's cache (if it exposes such a button), its data (if your OS supports this), log out and in again, or in the worst case reinstall any clients with active sessions, especially if you notice strange timeline behavior or unexplained "Record not found" errors.

Highlights

• The Mastodon client API backend underwent a full rewrite, dropping megalodon as a dependency. Expect:
  • Rich text formatting (mentions, links, hashtags, etc. are now properly formatted)
  • Significantly improved API responsiveness - performance was improved by a factor of 2-5x (or more!) depending on the endpoint
  • Better spec compliance & improved compatibility (we test against: Mona, toot!, Ice Cubes, Tusker, Feditext, Mastodon for iOS, Mastodon for Android/Megalodon/Moshidon, Tusky, Elk, Phanpy, Pinafore/Semaphore/Enafore and more)

Bug Fixes

• The update checker now works properly with the new versioning scheme
• The control panel indicator is now displayed correctly
• Countless Mastodon client API bugs have been resolved

Backend

• Note edits (of local users) have been completely reworked, now storing the correct history and no longer accepting nonsensical parameters (like changing the reply target) that don't federate properly if at all

UI/UX

• The calendar widget is now disabled by default
• The navigation buttons on mobile have been improved
• The default themes now have proper shadows
• Post headers no longer have text shadow

Miscellaneous

• The documentation now mentions PGTune
• Private mode descriptions now refer to 'allowlists' instead of an outdated term
• Various translation updates

Attribution

• This release was made possible by project contributors: Alexis, AntoineÐ, Aylam & Laura Hausmann

v2023.10.04

Highlights

• New logos, themes & brand colors
• All rust code has been removed (less jank, significantly faster build times)

Bug Fixes

• Post boost counts can no longer become negative

Performance

• User note lookups are now significantly faster

Miscellaneous

• Minor iconograpgy changes
• Translation updates

Infrastructure

• Docker builds are now versioned

Attribution

This release was made possible by project contributors: AntoineÐ, Aylam, Jeder, Laura Hausmann & moshibar

v2023.09.13-rc1

Highlights

• New branding & documentation
• Proper support for split domain deployments, both local and remote
• Configurable automatic remote media pruning (disabled by default)
• Reworked content warnings (three different styles for CW'd posts, 'Expand all CWs in thread' button, 'Expand all CWs by default' client option)

Bug fixes

• CW-only quotes now function correctly
• Relative timestamps (1m ago) are now updated as time passes
• Replies to inaccessible posts are now displayed correctly instead of causing timeline errors
• Antenna pagination is now handled correctly, including for posts received out of order
• Inbox URLs are now checked in the deliver manager (a broken akkoma commit was briefly causing delivery queue crashes)
• The chats page title no longer occasionally displays undefined
• Fixed an edge case where account deletion could time out
• Antennas now also match on CW text
• Local only posts now correctly display on the timeline without having to reload
• The migration that moves antennas to the redis/dragonflydb cache server now works with password protected redis servers
• You can now no longer edit a post to include a quote of itself
• Post edits no longer support post visibility changes
• Full text search is now restricted to logged in users
• Local only posts are no longer accessible to guest users
• The web client now shows local users with the instance account domain instead of the web domain
• New replies in a thread are now displayed correctly
• User update no longer fails for users who don't have a sharedInbox
• Follow requests now paginate properly
• Fetching pinned posts from users on GoToSocial instances (or other AP implementations that return a collection of URIs instead of objects) now works properly

UI/UX

• Ads, donation nag prompts & the patreon integration have been removed
• The blinking notification indicator has been replaced with a static one
• Replies to inaccessible posts now have an indicator explainin this
• Protected posts now have a lock indicator instead of a disabled boost button
• The navbar editor now has a proper UI
• The instance ticker is now much more readable in light mode
• The post visibility picker is now mobile-optimized
• The search button in the guest view is now a button instead of a fake search bar
• Blur is now disabled by default
• When blur is disabled, UI elements are now properly opaque
• The antenna timeline now has a help text explaining why posts can be out of order
• Status images have been replaced with configurable status emoji
• The navbar layout has been tweaked
• Various inconsistencies as well as alignment & animation issues have been fixed

Mastodon client API

• /api/v1/instance is now more accurate
• Emoji reactions are now supported
• The 'pinned' parameter is now supported for individual profile timelines
• Improved handling for quotes
• Post edits are now supported
• Post deletion now returns the correct response
• OAuth registration now correctly supports multiple callback URIs

Backend

• Cache<T> .getAll and .delete functions now work as expected
• Deleted users are now purged from user lookup and public key caches
• Proper support for host-meta style WebFinger
• Stricter compliance with the WebFinger spec
• Support for WebFinger remotes that don't handle queries for object URIs correctly

Performance

• The project is now built with yarn berry (with zero installs) instead of pnpm
• The docker build process now properly caches rust and yarn deps
• The migration rust crate now builds much faster

Miscellaneous

• The MFM search engine is now configurable
• Various translation updates

Infrastructure and governance

• Commits are now tested with basic CI on push
• Docker builds are now automatic for amd64 and arm64
• The code of conduct has been updated

Attribution

This release was made possible by project contributors: Anthial, AntoineD, April John, aylamz, Froggo, Jeder, Laura Hausmann, Luna, maikelthedev, moshibar, ShittyKopper & Vyr Cossont

It also includes cherry-picked contributions from external contributors: Namekuji, Natty, ThatOneCalculator & Naskya

---

This file lists all major changes made since the fork from Firefish on 2023-07-21. For changes prior to that date, please reference the Firefish repository.