diff options
| author | lain <lain@soykaf.club> | 2025-03-01 16:41:38 +0000 |
|---|---|---|
| committer | lain <lain@soykaf.club> | 2025-03-01 16:41:38 +0000 |
| commit | af6d5470d29f294e9b356da36cccbcaf85379f78 (patch) | |
| tree | 81eb0ba210f674eb0f6f41cde9b692a27ea96ca0 /CHANGELOG.md | |
| parent | fe3e61f6ece0335627f675e04a93917e6c613c6c (diff) | |
| parent | cd5f018206c991628ff1530095bb71cf941e7a8b (diff) | |
| download | pleroma-af6d5470d29f294e9b356da36cccbcaf85379f78.tar.gz pleroma-af6d5470d29f294e9b356da36cccbcaf85379f78.zip | |
Merge branch 'release/2.9.0' into 'stable'
Release/2.9.0
See merge request pleroma/pleroma!4331
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 71178c89a..657422689 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,33 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## 2.9.0 + +### Security +- Require HTTP signatures (if enabled) for routes used by both C2S and S2S AP API +- Fix several spoofing vectors + +### Changed +- Performance: Use 301 (permanent) redirect instead of 302 (temporary) when redirecting small images in media proxy. This allows browsers to cache the redirect response. + +### Added +- Include "published" in actor view +- Link to exported outbox/followers/following collections in backup actor.json +- Hashtag following +- Allow to specify post language + +### Fixed +- Verify a local Update sent through AP C2S so users can only update their own objects +- Fix Mastodon incoming edits with inlined "likes" +- Allow incoming "Listen" activities +- Fix missing check for domain presence in rich media ignore_host configuration +- Fix Rich Media parsing of TwitterCards/OpenGraph to adhere to the spec and always choose the first image if multiple are provided. +- Fix OpenGraph/TwitterCard meta tag ordering for posts with multiple attachments +- Fix blurhash generation crashes + +### Removed +- Retire MRFs DNSRBL, FODirectReply, and QuietReply + ## 2.8.0 ### Changed |