asonix/mastodon
1
1
Fork 1
Code Issues Pull requests Projects Releases Wiki Activity

v4.2.9 #66

Merged
asonix merged 37 commits from v4.2.9-branch into asonix/changes 2024-06-19 17:05:18 +00:00
Conversation 0 Commits 37 Files changed 67 +771 -321
asonix commented 2024-06-19 17:04:17 +00:00
Owner
Copy link

Upgrade notes

To get the code for v4.2.9, use git fetch && git checkout v4.2.9.

Note
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres name_of_the_backup.dump

Important
Mastodon is now performing stricter checks to prevent client IP address spoofing. This means that if one of your reverse proxy is not on Mastodon's local network, you will need to set TRUSTED_PROXY_IP accordingly, listing the IP address of every trusted reverse-proxy (including local network ones). See the documentation for more information.

Dependencies

With the exception of Ruby's recommended version, external dependencies have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:

  • Ruby: 3.0 to 3.2
  • PostgreSQL: 10 or newer
  • Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
  • LibreTranslate (optional, for translations): 1.3.3 or newer
  • Redis: 4 or newer
  • Node: 16 or newer
  • ImageMagick: 6.9.7-7 or newer

Update steps

The following instructions are for updating from 4.2.8.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.

Non-Docker only:

  1. Install dependencies: bundle install and yarn install --frozen-lockfile
  2. Restart all Mastodon processes

Using Docker:

  1. Restart all Mastodon processes
## Upgrade notes To get the code for v4.2.9, use `git fetch && git checkout v4.2.9`. > Note > As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres name_of_the_backup.dump` > Important > Mastodon is now performing stricter checks to prevent client IP address spoofing. This means that if one of your reverse proxy is not on Mastodon's local network, you will need to set` TRUSTED_PROXY_IP` accordingly, listing the IP address of every trusted reverse-proxy (including local network ones). See the documentation for more information. ### Dependencies With the exception of Ruby's recommended version, external dependencies have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is: - Ruby: 3.0 to 3.2 - PostgreSQL: 10 or newer - Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work) - LibreTranslate (optional, for translations): 1.3.3 or newer - Redis: 4 or newer - Node: 16 or newer - ImageMagick: 6.9.7-7 or newer ### Update steps The following instructions are for updating from 4.2.8. If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. #### Non-Docker only: 1. Install dependencies: `bundle install` and `yarn install --frozen-lockfile` 2. Restart all Mastodon processes #### Using Docker: 1. Restart all Mastodon processes
asonix added 37 commits 2024-06-19 17:04:19 +00:00 
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
asonix merged commit 8a73ead5c7 into asonix/changes 2024-06-19 17:05:18 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: asonix/mastodon#66
No description provided.
Delete branch "v4.2.9-branch"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?