https://joinsharkey.org/Recent content on SharkeyHugoen-USWed, 20 May 2026 13:00:00 +0000https://joinsharkey.org/releases/2025-4-7/Wed, 20 May 2026 13:00:00 +0000https://joinsharkey.org/releases/2025-4-7/<h1 id="202547-security-fixes-3-electric-boogalee">2025.4.7 &ldquo;security fixes 3: electric boogalee&rdquo;</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.7">Download and full details</a></p> <p>Security release to fix a signature-bypass vulnerability via JSON-LD restructuring directives, plus hardening of the websockets endpoints.</p>https://joinsharkey.org/releases/2025-4-6/Sun, 08 Mar 2026 22:00:00 +0000https://joinsharkey.org/releases/2025-4-6/<h1 id="202546-security-fixes-2-electric-boogaloo">2025.4.6 &ldquo;security fixes 2: electric boogaloo&rdquo;</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.6">Download and full details</a></p> <p>This is small release to fix several security issues that will be disclosed in further detail at a future date.</p>https://joinsharkey.org/releases/2025-4-5/Sat, 03 Jan 2026 00:00:00 +0000https://joinsharkey.org/releases/2025-4-5/<h1 id="202545-well-catch-up-we-promise">2025.4.5 &ldquo;we&rsquo;ll catch up, we promise&rdquo;</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.5">Download and full details</a></p> <p>This is small release to <a href="https://developers.deepl.com/docs/resources/breaking-changes-change-notices/november-2025-deprecation-of-legacy-auth-methods">update how we authenticate to DeepL</a>.</p> <p>No other changes this time, our current priority is to stabilize a mass of fixes and improvements we&rsquo;ve made on top of Misskey 2025.5.0, bear with us ☺</p>https://joinsharkey.org/releases/2025-4-4/Tue, 29 Jul 2025 00:00:00 +0000https://joinsharkey.org/releases/2025-4-4/<h1 id="202544-we-know-its-july">2025.4.4 &ldquo;we know it&rsquo;s July&rdquo;</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.4">Download and full details</a></p> <p>We would have liked to do a big release including Misskey 2025.5.1 at least, but life intervened (and that upstream release is quite complicated), so here are some bug fixes:</p> <ul> <li>newly-uploaded videos should now play correctly</li> <li>notifications should be grouped more reliably</li> <li>quote-posts should federate better to Mastodon instances</li> <li>reporting bad content should be faster, especially on instances with many moderators</li> <li>links in users&rsquo; profiles should be verified more reliably</li> <li>freezing / unfreezing users should work better</li> <li>some rate limit tweaks</li> </ul>https://joinsharkey.org/releases/2025-4-3/Tue, 17 Jun 2025 00:00:00 +0000https://joinsharkey.org/releases/2025-4-3/<h1 id="202543-just-a-few-bugfixes-honest">2025.4.3 &ldquo;just a few bugfixes, honest!&rdquo;</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.3">Download and full details</a></p> <p>This should have been a small release, to fix some bugs in <a href="https://joinsharkey.org/releases/2025-4-2/">2025.4.2</a>, but we added a bunch of features as well.</p> <p>The most visible changes are support for the <code>fediverse:creator</code> link attributions, and better support for quotes in non-Misskey software.</p> <p>Everything should feel quite a bit faster, thanks to many optimisations in the backend.</p> <p>A couple of important notes:</p> <ul> <li>we&rsquo;ve improved the process of migrating frontend settings from pre-2025.4 versions; if your users had a broken migration, they can try re-importing via ⚙️settings → …other → &ldquo;🗘migrate old client settings&rdquo;, but we suggest backing up their current preferences first</li> <li>it&rsquo;s possible to let non-logged-in users use the translation function, but to minimise risks, the default policy now disables translation, you may want to create a conditional role matching all local users to re-enable it for them</li> <li>we&rsquo;ve added many new indexes to the database, we recommend running a <code>VACUUM (ANALYSE, VERBOSE)</code> after the migrations have completed</li> <li>if you do <em>not</em> use Docker, to avoid potential crashes when rendering some SVG images, you should make sure that your system has <code>librsvg</code> and some fonts (on Debian-style systems, that&rsquo;s <code>librsvg2-2</code> and <code>fonts-noto</code>)</li> </ul>https://joinsharkey.org/features/Fri, 06 Jun 2025 00:00:00 +0000https://joinsharkey.org/features/<h2 id="features">Features:</h2> <ul> <li> <p>ActivityPub support <i class="fa-solid fa-globe"></i> </p> <p>Not on <em>Sharkey</em> No problem! Not only can <em>Sharkey</em> instances talk to each other, but you can make friends with people on other networks like Mastodon and Pixelfed!</p> </li> <li> <p>Federated Backgrounds and Music status <i class="fa-solid fa-square-plus"></i> </p> <p>You can add a background to your profile as well as a music status via ListenBrainz, show everyone what music you are currently listening too.</p> </li> <li> <p>Federated Post Editing <i class="fa-solid fa-square-pen"></i> </p> <p>In <em>Sharkey</em> you can edit your post and it will federate, this is not possible in normal Misskey.</p>https://joinsharkey.org/releases/2025-4-2/Thu, 29 May 2025 00:32:17 +0000https://joinsharkey.org/releases/2025-4-2/<h1 id="202542">2025.4.2</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.2">Download</a></p> <ul> <li>Mfm now handles some punctuation inside bold/italic blocks.</li> <li>Users mentioned in DMs they can&rsquo;t see are no longer sent notifications.</li> <li>Optional WebSocket compression.</li> <li>Hopefully a fix for the bug of your own reactions not being marked on posts.</li> <li>Blocks and mutes should now be more effective.</li> <li>When a note is muted, the reason is shown.</li> <li>Fixed editing of scheduled posts.</li> <li>Additional moderation logs.</li> <li>Numerous fixes to the Mastodon API.</li> <li>Users can now delete their own avatars.</li> <li>Users are now warned when editing a poll, as it can lose all votes.</li> <li>Libretranslate is now supported in addition to DeepL.</li> <li>Showing linked notes as quotes is no longer automatic (you have to click a button), and it works in more cases.</li> <li>Admins can change the level of &ldquo;authorized fetch&rdquo; via the frontend (&ldquo;never&rdquo;, &ldquo;always&rdquo;, and the new &ldquo;essential&rdquo; that serves a reduced amount of data to non-signed requests), and users can override this for their own data.</li> <li>The notification dot on the favicon should work in more cases, and be more visible.</li> <li>The &ldquo;replies&rdquo; collection is now exposed on all notes (we still don&rsquo;t <em>fetch</em> remote replies, but we enable other software to do so).</li> <li>Improved compatibility with Lemmy and other ActivityPub implementations that <code>Announce</code> activities other than <code>Note</code>.</li> <li>Numerous translation improvements (Daniel Ares for German, Ahri for Thai and Vietnamese).</li> <li>Support for BunnyCDN in addition to S3-like object stores.</li> <li>Sensitive/content-warned content is not served to the Discordbot (Discord uses the mastodon api to fetch notes for their previews, and they&rsquo;ve decided to ignore CWs in favour of their own <code>||spoiler||</code> markers&ndash; we don&rsquo;t agree with that decision).</li> <li>Admins can now inject custom HTML in every page&rsquo;s <code>&lt;head&gt;</code> (e.g. custom CSS).</li> <li>Admin set MOTDs can now use HTML.</li> <li>Links in profile fields are now verified for remote users.</li> <li>Fixed signature verification for paginated AP requests.</li> <li>Admins can now remove a role&rsquo;s color.</li> <li>Admins can disable the use of the &ldquo;proxy account&rdquo; (although this <em>will</em> break some lists!).</li> <li>Disabling the local timeline also disables the &ldquo;featured&rdquo; timeline on the logged-out front page.</li> <li>Drive cleaner now shows all files, even those inside folders.</li> <li>Delivery of activities has been re-ordered a bit, this should mitigate the infamous &ldquo;Yaseen bug&rdquo;.</li> <li>URL previews once again follow redirects.</li> <li>Config file(s) can now be placed in any directory.</li> <li>You can now configure the directory for drive files (when not using S3 or similar).</li> <li>Improvements to the admin UI.</li> <li>Improved &ldquo;delete account&rdquo; process with better reliability.</li> <li>New role setting &ldquo;can trend&rdquo;.</li> <li>new role conditions &ldquo;is from bubble instance&rdquo;, &ldquo;is from instance X&rdquo;, &ldquo;has more/fewer than X local/remote followers&rdquo;, &ldquo;follows more/fewer than X local/remote accounts&rdquo;.</li> <li>The config option <code>allowPrivateNetworks</code> can now specify ports for each network.</li> <li>New &ldquo;pattern checker&rdquo; tool to test your word mutes.</li> <li>The web frontend passes the user&rsquo;s authorization token in a header instead of the request body&ndash; this should prevent accidentally leaking the token via logs.</li> <li>Improved interoperability with Akkoma and Wafrn &ldquo;invisible mentions&rdquo;</li> </ul> <p><strong>From Upstream</strong>:</p>https://joinsharkey.org/releases/2025-2-3/Sun, 27 Apr 2025 21:07:06 +0000https://joinsharkey.org/releases/2025-2-3/<h1 id="202523">2025.2.3</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.2.3">Download</a></p> <p>This release fixes several serious security vulnerabilities as part of a coordinated release with Iceshrimp and Misskey. Disclosures for the relevant vulnerabilities will be made available once instances have been patched.</p>https://joinsharkey.org/releases/2025-2-2/Sun, 02 Mar 2025 20:48:44 +0000https://joinsharkey.org/releases/2025-2-2/<h1 id="202522">2025.2.2</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.2.2">Download</a></p> <ul> <li>A fix for an annoying <code>corepack</code>/<code>pnpm</code> error.</li> <li>Optimizations to SQL-based note search.</li> <li>Support for <code>tsvector</code> full-text search.</li> <li>Support for filtering by Module and Flash file types.</li> <li>Fixes for quote preview.</li> <li>Fixes for hashtags and tag search.</li> <li>Allow user-initiated object lookups to redirect. (makes the lookup function 100x more likely to actually work instead of throwing a vague error).</li> <li>Add missing translations in various places.</li> <li>Bulk fixes and refactoring of Mastodon API. (it may work better with some clients, and several known bugs are fixed.)</li> <li>Option to regenerate vapid keys without a CLI command.</li> <li>Revision 2 of the new rate limit system- improved performance, simpler API, and the &ldquo;role template&rdquo; rate limit factor now applies to unauthenticated / logged-out requests.</li> <li>Fixes for docker build &amp; deployment.</li> <li>Fixes for BSD build &amp; deployment.</li> <li>Add a &ldquo;follow back&rdquo; button to &ldquo;user followed you&rdquo; notifications.</li> <li>Buttons to accept/reject follow requests directly from a user&rsquo;s profile.</li> <li>Various rate limit fixes and adjustments.</li> <li>Improved support for MFM and HTML ruby.</li> <li>Improved browser language detection, especially in cases where we don&rsquo;t have an exact-match language file.</li> <li>Robots.txt can be configured through admin settings, instead of using the reverse-proxy.</li> <li>Federation fixes and improvements, particularly for software which produces null for Person.discoverable.</li> <li>Build and development tooling improvements.</li> <li>Fixes for import limits and config settings.</li> <li>Fixes for reactions</li> <li>Fixes for note visibility in streaming API</li> <li>Shift-click to automatically boost w/ visibility</li> <li>Fixes to emoji sorting, search, and categorization.</li> <li>Emoji import now honours the <code>import.downloadTimeout</code> setting</li> <li>Laxer validation for admin-controlled HTML.</li> <li>Add some missing MFM to the cheat sheet.</li> <li>Record the person who created an invite code.</li> <li>Classic and narrow UI layout fixes.</li> <li>Fixes for RSS widgets</li> <li>Remove unused &ldquo;email notification type&rdquo; settings to avoid user confusion.</li> <li>Remove duplicate role badges</li> <li>Add file extension to locally-stored media (allows the reverse-proxy to directly serve media)</li> <li>The IP address that the server listens on is now configurable</li> <li>Users can set a default CW</li> <li>Moderators can force a CW for a user</li> <li>Moderators can remove the &ldquo;quote&rdquo; feature for specific users (local or remote) and remote instances</li> <li>Optional separate Redis connection for rate-limiting purposes</li> <li>Ability to log all AP objects- note that this respects deletes, and is optional, as a debugging aid.</li> <li>Better support for PeerTube thumbnails</li> <li>Better interoperability with SocialHome</li> </ul> <p>Upstream changes:</p>https://joinsharkey.org/releases/2024-11-2/Wed, 01 Jan 2025 17:29:49 +0000https://joinsharkey.org/releases/2024-11-2/<h1 id="2024112">2024.11.2</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.11.2">Download</a></p> <ul> <li>Fixed scheduled replies attaching a random note as a quote</li> </ul>https://joinsharkey.org/releases/2024-11-1/Tue, 31 Dec 2024 03:04:19 +0000https://joinsharkey.org/releases/2024-11-1/<h1 id="2024111">2024.11.1</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.11.1">Download</a></p> <ul> <li>Flash player! You can now attach <code>.swf</code> files to notes and play them back in the browser, using <a href="https://ruffle.rs">Ruffle</a>, an Adobe Flash emulator.</li> <li>Scheduled notes, both through the web UI and through apps using the Mastodon API.</li> <li>Hostname contstraints for actors and activities are now slightly relaxed, restoring compatibility with Bridgy, an ActivityPub &lt;-&gt; AtProto bridge.</li> <li>Improved interoperability with other Fediverse software (<code>Dislike</code> activities are now handled, more types of &ldquo;featured&rdquo;/pinned activities are now allowed, activities interacting with other activities not known by the instance are no longer ignored).</li> <li>FriendlyCaptcha is now supported as a Captcha provider.</li> <li>You can now disable the RSS feed for your account.</li> <li>You can now disable the online status of your profile all together, rather than just making it always offline.</li> <li>Notes containing links to other notes (IE how Mastodon users might imitate quotes) are now rendered similarly to quotes.</li> <li>User profiles now show pinned notes by default when checking a profile, using the pinned notes tab.</li> <li>You can now configure the file permission bits used by locally-stored drive files via <code>filePermissionBits</code>.</li> <li>Poll edits are handled better.</li> <li>Profile edits are now only federated if the ActivityPub representation of their profile changes.</li> <li>Several improvements to error messages in logs.</li> <li>Enhanced ratelimiting logic.</li> </ul> <h2 id="highlights-of-changes-from-misskey">Highlights of changes from Misskey:</h2> <ul> <li>Users are now notified when their account is logged into from another device</li> <li>Users can now hide all their notes from logged-out users.</li> <li>Users can make past notes only visible to followers.</li> <li>If no administrators/moderators have logged in for a week, the instance will automatically switch to invite only.</li> <li>&ldquo;Resolve report&rdquo; and &ldquo;forward report&rdquo; are now separate actions.</li> <li>Animated MFM is now disabled if the browser is set to &ldquo;reduced motion&rdquo; mode</li> </ul> <h2 id="possible-surprises">Possible surprises:</h2> <ul> <li>If your timeline is jumping around a bit while scrolling, try going to &ldquo;settings -&gt; other -&gt; experimental features -&gt; enable render note skipping&rdquo; and turn it off.</li> <li>During the 2024.9 release series, setting up allow-list federation may in fact have added those instances to the <em>block list</em>. Please double-check your allow-lists and block-lists.</li> <li>The sign-in flow for the web UI has changed (username and password are now input separately), which may break some bots or clients.</li> <li>The way themes are applied is slightly different now- previously, a theme setting <code>accent</code> became the CSS variable <code>--accent</code>, whereas now it becomes <code>--MI_THEME-accent</code>. Most users won&rsquo;t be affected by this, except those using custom CSS.</li> </ul> <h2 id="special-upgrade-notes">Special upgrade notes</h2> <ul> <li>Instances setting CSPs via HTTP headers should add <code>raw.esm.sh</code> (for Flash playback) and <code>cdn.jsdelivr.net</code> (for FriendlyCaptcha) to their CSPs.</li> <li>A newer Node.js version is required- 22.11.0</li> <li>If you&rsquo;re not using Docker, you&rsquo;ll have to <code>pnpm clean-all</code> before <code>pnpm install --frozen-lockfile</code>, otherwise some modules will break.</li> </ul>https://joinsharkey.org/releases/2024-9-4/Thu, 28 Nov 2024 05:56:15 +0000https://joinsharkey.org/releases/2024-9-4/<h1 id="202494">2024.9.4</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.9.4">Download</a></p> <p>This release provides the following fixes:</p> <ul> <li>Most endpoints now have an explicit rate limit set on them, and the ones that don&rsquo;t use a global default. If any of these limits end up being too strict for practical use, please let the team know.</li> <li>Media proxy rate limits are now more relaxed.</li> <li>When note API responses are redacted due to being blocked by the user that posted them, the means by which the notes reactions are redacted is now slightly different.</li> </ul>https://joinsharkey.org/releases/2024-9-3/Thu, 21 Nov 2024 03:03:14 +0000https://joinsharkey.org/releases/2024-9-3/<h1 id="202493">2024.9.3</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.9.3">Download</a></p> <p>This release fixes several critical security vulnerabilities, as part of a coordinated disclosure with upstream, IceShrimp.js, and Firefish.</p>https://joinsharkey.org/releases/2024-9-2/Wed, 20 Nov 2024 05:47:17 +0000https://joinsharkey.org/releases/2024-9-2/<h1 id="202492">2024.9.2</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.9.2">Download</a></p> <p>This release fixes a 0day DoS exploit in active use against Sharkey instances.</p> <p><strong>Keep in mind that this is <em>different</em> from the coordinated security release that will occur tomorrow.</strong></p>https://joinsharkey.org/releases/2024-9-1/Tue, 05 Nov 2024 04:16:48 +0000https://joinsharkey.org/releases/2024-9-1/<h1 id="202491">2024.9.1</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.9.1">Download</a></p> <ul> <li>new &ldquo;following&rdquo; view, inspired by Cohost&rsquo;s &ldquo;following feed&rdquo;</li> <li>when following links to external sites, users are asked for confirmation (users and admins can set lists of destination domains that won&rsquo;t trigger the confirmation dialog, or disable it completely)</li> <li>users can turn off cat-speak for all notes they see</li> <li>avatar decorations can be placed behind the avatar picture (so it can have a tail)</li> <li>users can now make in-app notifications clickable in settings</li> <li>capitalized emoji aliases are now properly found in the emoji picker</li> <li>remote polls&rsquo; vote counts can be manually refreshed</li> <li>on the user profile page, we show if they&rsquo;re blocked, muted, followed, &amp;c</li> <li>user profiles show their latest notes by default, not their pinned notes</li> <li>users can see their pending outgoing follow requests</li> <li>note attachments are navigable via keyboard</li> <li>users have a &ldquo;default files as NSFW&rdquo; setting, separate from &ldquo;always mark files as NSFW&rdquo; (the new one is fully under user control, the other one can be forced by admins)</li> <li>rejecting a new user&rsquo;s sign-up application frees that username for future users</li> <li>admin have more control over the maximum text size for notes: they can limit main text, cw, and alt text, separately for local and remote notes</li> <li>moderators can delete all files from a remote instance</li> <li>local &ldquo;system accounts&rdquo; are protected from accidental deletion</li> <li>information about remote instances includes following/followers relations, and actions that break federation will show how many relations will be severed</li> <li>when an instance is blocked or silenced because it&rsquo;s on a sub-domain of a blocked / silenced domain, admins get a clear message about it, and the buttons to un-block / un-silence are disabled instead of just useless</li> <li>reports from an instance can be automatically rejected</li> <li>abuse reports are rendered better in small viewports like phones</li> <li>abuse reports federate correctly with Akkoma &amp; Pleroma</li> <li>welcome page and sidebar can have their own image, instead of sharing the instance icon, so an instance can have a big fancy logo without having to fork Sharkey</li> <li>if the instance&rsquo;s donation link goes to Open Collective, supporters will be shown in the &ldquo;about&rdquo; page</li> </ul> <p>Highlights of changes from Misskey:</p>https://joinsharkey.org/releases/2024-8-2/Mon, 23 Sep 2024 19:37:44 +0000https://joinsharkey.org/releases/2024-8-2/<h1 id="202482">2024.8.2</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.8.2">Download</a></p> <p>Of interest to admins:</p> <ul> <li>A pretty bad memory leak has been fixed. It was caused due to a leak that can sometimes occur in <code>happy-dom</code> if you don&rsquo;t explicitly call <code>DetachedWindowAPI.close</code> after you are done using a <code>Window</code>.</li> <li>Sponsor information is now powered by OpenCollective.</li> </ul>https://joinsharkey.org/releases/2024-8-1/Fri, 13 Sep 2024 19:00:50 +0000https://joinsharkey.org/releases/2024-8-1/<h1 id="202481">2024.8.1</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.8.1">Download</a></p> <p>User visible changes:</p> <ul> <li>You can now search your drive files by name or description.</li> <li>You can now disable the &ldquo;edited&rdquo; notifications.</li> <li>When you block a user, they&rsquo;re now also muted, so you won&rsquo;t see their notes even if they get boosted into your timeline (you can un-mute them if you want).</li> <li>&ldquo;My Plays&rdquo; page now shows the visibility of plays without clicking into each individual play.</li> <li>Users can now report pages, galleries, and plays.</li> <li>Follow requests from suspended accounts are no longer shown.</li> </ul> <p>Of interest to admins:</p>https://joinsharkey.org/releases/2024-5-1/Wed, 26 Jun 2024 20:16:59 +0000https://joinsharkey.org/releases/2024-5-1/<h1 id="202451">2024.5.1</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.5.1">Download</a></p> <ul> <li>antennas can now include all users from an instance (e.g. <code>*@example.com</code>)</li> <li>optional notification dot on browser icon (there are CORS restrictions, check <a href="https://docs.joinsharkey.org/docs/install/faqs/">our FAQ</a>)</li> <li>any configuration value can be overridden via environment variables (see <a href="https://docs.joinsharkey.org/docs/install/fresh/">our installation guide</a> for details)</li> <li>more timelines have the &ldquo;show boosts&rdquo; and &ldquo;only notes with files&rdquo; filters</li> <li>the &ldquo;oneko&rdquo; animation frames can be changed via <a href="https://docs.joinsharkey.org/docs/customisation/themes/">theming</a></li> <li>better rendering of notes with bidirectional and right-to-left text</li> <li>parent notes can be collapsed</li> <li>search results in &ldquo;manage custom emoji&rdquo; should now show all matching emoji</li> <li>more MFM effects: <code>$[followmouse]</code> from Cutiekey, <code>$[crop]</code> and <code>$[fade]</code> from Firefish</li> <li>users can select their preferred search engine for MFM&rsquo;s <code>[search]</code> feature</li> <li>when editing a note, the update is now also sent to people who reacted or boosted the original note, even if they are not following the author</li> <li>admins can delete all files of a user with a single button click</li> <li>probably lighter load in some clustering setups</li> <li>admins can set separate download timeout / max size for imports (e.g. note imports)</li> <li>some security fixes related to malicious notes and UI interactions</li> </ul>https://joinsharkey.org/releases/2024-3-3/Thu, 09 May 2024 20:32:38 +0000https://joinsharkey.org/releases/2024-3-3/<h1 id="202433">2024.3.3</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.3.3">Download</a></p> <ul> <li>a security fix for a defect in the validation of JSON-LD signatures that could lead to account takeover</li> <li>non-ascii characters are now allowed in custom emoji names (please don&rsquo;t go too wild, other instances may not recognise the names)</li> <li>UI language is now saved and restored in &ldquo;preferences backup&rdquo;</li> <li>embedding a CW-ed note on other sites now only shows the CW, not the whole note</li> <li>various imports, and the generation of movie thumbnails, are once again working</li> <li>ranged requests to proxied files are now correctly handled (should improve video playback on iOS)</li> <li>the modtracker player is now loaded on-demand, so the frontend loads faster</li> <li>floating UI windows now render custom emojis in the titlebar</li> <li>the &ldquo;word mute&rdquo; feature now includes poll choices and image alt-texts</li> <li>custom emoji should look better in admin panel</li> <li>un-pinning emojis from the selector pop-up works better</li> <li>editing a note to add/remove an attachment, or the edit alt-text, works properly now</li> <li>instance description and server rules can now contain more HTML (images, centered text, details/summary, styled links)</li> <li>clearing cached files from drive should be more reliable</li> <li>all paginated views (e.g. timelines, various admin pages) should be more stable and not randomly drop items</li> </ul>https://joinsharkey.org/releases/2024-3-2/Sat, 30 Mar 2024 11:28:05 +0000https://joinsharkey.org/releases/2024-3-2/<h1 id="202432-security-release">2024.3.2 Security Release</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.3.2">Download</a></p> <h2 id="this-is-a-minor-release-with-important-security-fixes-please-update-immediately">This is a minor release with important security fixes please update immediately</h2> <p>Changes in this Release:</p> <ul> <li>prohibited words are now correctly checked when creating notes</li> <li>notes with CW are no longer shown on the welcome page for non-logged-in users</li> <li>database migrations should no longer timeout</li> <li>docker image improvements</li> <li>important security fixes</li> </ul> <h2 id="important-note-for-users-that-do-not-use-s3-and-that-use-docker">Important Note for Users that do NOT use S3 and that USE Docker</h2> <p>There have been some improvements made to the Docker images that should fix some issues with that the container now runs as a seperate Sharkey user with id 991:991 so its required to change ownership of the files directory to do that run the following in the directory where your docker-compose.yml file is</p>https://joinsharkey.org/releases/2024-3-1/Sat, 02 Mar 2024 17:52:49 +0000https://joinsharkey.org/releases/2024-3-1/<h1 id="202431---codename-notdeadyet">2024.3.1 - Codename #NotDeadYet</h1> <p><a href="https://activitypub.software/TransFem-org/Sharkey/-/releases/2024.3.1">Download</a></p> <p>It&rsquo;s been a long while since the last release, but alas here we are with another Release after 2 Months of waiting.</p> <p>This release includes a lot of bug fixes, and not many big features unlike the last release.</p> <p>Changes in this Release:</p> <ul> <li>fixed lines connecting replies</li> <li>added a hover effect to replies in the detailed view</li> <li>if a direct link to a note in a long thread is opened a highlight will show which post is being linked to</li> <li>added download buttons for audio and video attachments</li> <li>added ability to select tossface emoji</li> <li>added oneko, the cute cat that follows your mouse pointer</li> <li>added a warning that will show up if you try to post images without alt text (this can be turned off)</li> <li>when searching for emoji, the closest match is shown first</li> <li>added ability to disable notifications from achievements</li> <li>the AiScript &ldquo;scratchpad&rdquo; shows line numbers in the editor and in error messages</li> <li>added ability for admins to set an URL for donations</li> <li>for translations, DeepLX-JS is supported in addition to regular DeepL</li> <li>blocked / silenced / suspended instances will not be listed to non-logged-in users, this makes it harder to target your instance for harassment based on who you block</li> <li>added a notification for when someone edits a post you have been tagged in</li> <li>made several improvements to the Mod player that should make it faster</li> <li>fixed the bug that would cause Sharkey to not work on older IOS devices / Safari version</li> <li>alot of fixes have been made to muting and blocking</li> <li><code>signToActivityPubGet</code> now defaults to true even if not set in the config</li> <li>import from twitter decodes &amp;lt; etc</li> <li>reworked the boost visibility selector (only shows values that you can use, &ldquo;local&rdquo; is a separate switch)</li> <li>import from mastodon keeps alt text</li> <li>expandAllCws also expands all long posts on first click</li> </ul> <p>in addition all the new features and bug fixes from the latest Misskey releases til 2024.3.1 have also been added.</p>https://joinsharkey.org/instances/Mon, 01 Jan 0001 00:00:00 +0000https://joinsharkey.org/instances/