From f70f61523d03c731ab020716910c184eb7904f33 Mon Sep 17 00:00:00 2001 From: Laura Hausmann Date: Sun, 28 Apr 2024 19:34:54 +0200 Subject: [PATCH] Release: v2023.12.7 --- CHANGELOG.md | 24 ++++++++++++++++++++++++ package.json | 2 +- 2 files changed, 25 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 775a9d245..7648c565d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,27 @@ +## v2023.12.7 +This is a security release. Upgrading is therefore strongly recommended. + +### Backend +- Incoming LD-signed activities are now compacted against a well-known context to defend against spoofing attacks +- The automatically followed account property no longer gets set to a random (possibly non-local) user on instance settings updates +- The TypeORM logger is now much more configurable +- The bull dashboard now has the correct cache-control headers set + +### Mastodon client API +- The quote_id property is now returned for note responses +- The note search query now sets the userId property correctly, solving the problem of mismatching search results between the web client and the Mastodon client API +- The user profile html cache now gets updated and queried using the correct timestamp for local users, resolving an issue of stale data being displayed in some circumstances + +### Miscellaneous +- The yarn version was updated to 4.1.1 +- The Dockerfile was updated to work better with some build systems that don't support cp -Tr +- The helm chart now has an option to set the number of worker threads + +### Attribution +This release was made possible by project contributors: Ezeani Emmanuel, Laura Hausmann, Mae Dartmann & mei23 + +Furthermore, I want to give special thanks to tesaguri for the security disclosure. + ## v2023.12.6 This is a security release. Upgrading is therefore strongly recommended. diff --git a/package.json b/package.json index 6668aa0e5..00cba6cda 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "iceshrimp", - "version": "2023.12.6", + "version": "2023.12.7", "repository": { "type": "git", "url": "https://iceshrimp.dev/iceshrimp/iceshrimp.git"