diff options
author | rinpatch <rinpatch@sdf.org> | 2020-05-01 22:10:02 +0300 |
---|---|---|
committer | rinpatch <rinpatch@sdf.org> | 2020-05-02 19:16:27 +0300 |
commit | e0d392c04c3ff6e1c2d777c40e3cf44dfa68a136 (patch) | |
tree | 0344a028af177b6f082be4d95eb91d68d5c06153 | |
parent | 441e28f36562492ad076443c4d061b33fc0f9813 (diff) | |
download | pleroma-e0d392c04c3ff6e1c2d777c40e3cf44dfa68a136.tar.gz |
CHANGELOG.md: Add 2.0.3 changelog
-rw-r--r-- | CHANGELOG.md | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index c861699f4..f3394ecbc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,38 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## [2.0.3] - 2020-05-02 + +### Security +- Disallow re-registration of previously deleted users, which allowed viewing direct messages addressed to them +- Mastodon API: Fix `POST /api/v1/follow_requests/:id/authorize` allowing to force a follow from a local user even if they didn't request to follow +- CSP: Sandbox uploads + +### Fixed +- Notifications from blocked domains +- Potential federation issues with Mastodon versions before 3.0.0 +- HTTP Basic Authentication permissions issue +- Follow/Block imports not being able to find the user if the nickname started with an `@` +- Instance stats counting internal users +- Inability to run a From Source release without git +- ObjectAgePolicy didn't filter out old messages +- `blob:` urls not being allowed by CSP + +### Added +- NodeInfo: ObjectAgePolicy settings to the `federation` list. +- Follow request notifications +<details> + <summary>API Changes</summary> +- Admin API: `GET /api/pleroma/admin/need_reboot`. +</details> + +### Upgrade notes + +1. Restart Pleroma +2. Run database migrations (inside Pleroma directory): + - OTP: `./bin/pleroma_ctl migrate` + - From Source: `mix ecto.migrate` + ## [2.0.2] - 2020-04-08 ### Added - Support for Funkwhale's `Audio` activity |