Repository navigation
feat(oci/gotosocial): update 0.21.3 ➼ 0.22.2 - #6313
tinfoild[bot] wants to merge 1 commit into
Conversation
kube/helmrelease/out00--- HelmRelease: gotosocial/gotosocial Deployment: gotosocial/gotosocial
+++ HelmRelease: gotosocial/gotosocial Deployment: gotosocial/gotosocial
@@ -122,13 +122,13 @@
value: prometheus
- name: TZ
value: null
envFrom:
- secretRef:
name: gotosocial-secrets
- image: docker.io/superseriousbusiness/gotosocial:0.21.3@sha256:a031e18cf7d4315288b303a376c9d52f9d90a8fd66f3b084ffd6b0b39ae86b8e
+ image: docker.io/superseriousbusiness/gotosocial:0.22.2@sha256:43e5dd574c5d5f94238b73e2ce17cf5c778f763cebebf06cc7894623d151c78b
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 0
periodSeconds: 10
tcpSocket:
port: 8080 |
5b7039c to
fb73076
Compare
kube/kustomization/out00--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: gotosocial/gotosocial-pvc
+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: gotosocial/gotosocial-pvc
@@ -277,13 +277,13 @@
RGID: '65534'
RUID: '65534'
SC: block
SIZE: 50Gi
SNAP: block
SNAP_ACCESSMODE: ReadWriteOnce
- VS_APP_CURRENT_VERSION: docker.io/superseriousbusiness/gotosocial:0.21.3@sha256:a031e18cf7d4315288b303a376c9d52f9d90a8fd66f3b084ffd6b0b39ae86b8e
+ VS_APP_CURRENT_VERSION: docker.io/superseriousbusiness/gotosocial:0.22.0@sha256:2a59e8d70c70ec51322a5be0bc5090a67eb55ea93f1fe556012192661ebe905f
substituteFrom:
- kind: Secret
name: biohazard-vars
optional: false
- kind: Secret
name: biohazard-secrets
--- kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc ReplicationSource: gotosocial/gotosocial-data-r2-updates-restic
+++ kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc ReplicationSource: gotosocial/gotosocial-data-r2-updates-restic
@@ -53,8 +53,8 @@
daily: 14
within: 7d
storageClassName: block
volumeSnapshotClassName: block
sourcePVC: gotosocial-data
trigger:
- manual: docker.io/superseriousbusiness/gotosocial:0.21.3@sha256:a031e18cf7d4315288b303a376c9d52f9d90a8fd66f3b084ffd6b0b39ae86b8e
+ manual: docker.io/superseriousbusiness/gotosocial:0.22.0@sha256:2a59e8d70c70ec51322a5be0bc5090a67eb55ea93f1fe556012192661ebe905f
--- kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc VolumeSnapshot: gotosocial/gotosocial-data-v0b39ae86b8e
+++ kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc VolumeSnapshot: gotosocial/gotosocial-data-v0b39ae86b8e
@@ -1,16 +0,0 @@
----
-apiVersion: snapshot.storage.k8s.io/v1
-kind: VolumeSnapshot
-metadata:
- labels:
- app.kubernetes.io/name: gotosocial
- kustomize.toolkit.fluxcd.io/name: gotosocial-pvc
- kustomize.toolkit.fluxcd.io/namespace: gotosocial
- pvc.home.arpa/volsync: 'true'
- name: gotosocial-data-v0b39ae86b8e
- namespace: gotosocial
-spec:
- source:
- persistentVolumeClaimName: gotosocial-data
- volumeSnapshotClassName: block
-
--- kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc VolumeSnapshot: gotosocial/gotosocial-data-v2661ebe905f
+++ kube/deploy/core/storage/volsync/template Kustomization: gotosocial/gotosocial-pvc VolumeSnapshot: gotosocial/gotosocial-data-v2661ebe905f
@@ -0,0 +1,16 @@
+---
+apiVersion: snapshot.storage.k8s.io/v1
+kind: VolumeSnapshot
+metadata:
+ labels:
+ app.kubernetes.io/name: gotosocial
+ kustomize.toolkit.fluxcd.io/name: gotosocial-pvc
+ kustomize.toolkit.fluxcd.io/namespace: gotosocial
+ pvc.home.arpa/volsync: 'true'
+ name: gotosocial-data-v2661ebe905f
+ namespace: gotosocial
+spec:
+ source:
+ persistentVolumeClaimName: gotosocial-data
+ volumeSnapshotClassName: block
+
--- kube/deploy/apps/gotosocial/app Kustomization: gotosocial/gotosocial-app HelmRelease: gotosocial/gotosocial
+++ kube/deploy/apps/gotosocial/app Kustomization: gotosocial/gotosocial-app HelmRelease: gotosocial/gotosocial
@@ -80,13 +80,13 @@
TZ: null
envFrom:
- secretRef:
name: gotosocial-secrets
image:
repository: docker.io/superseriousbusiness/gotosocial
- tag: 0.21.3@sha256:a031e18cf7d4315288b303a376c9d52f9d90a8fd66f3b084ffd6b0b39ae86b8e
+ tag: 0.22.0@sha256:2a59e8d70c70ec51322a5be0bc5090a67eb55ea93f1fe556012192661ebe905f
probes:
liveness:
enabled: true
readiness:
enabled: true
startup: |
fb73076 to
739c7e1
Compare
|
SECURITY VULNERABILITIES FOUND BY CIEL
Severity Summary
ResultsPackage: docker.io/superseriousbusiness/gotosocial
Scanned Sources:
Notable changelog items (security-relevant bug fixes in 0.22.x):
Dependency CVE investigation:
Recommendations
|
|
SECURITY VULNERABILITIES FOUND BY CIEL
Severity Summary
ResultsPackage:
|
739c7e1 to
b292de5
Compare
This PR contains the following updates:
0.21.3→0.22.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
superseriousbusiness/gotosocial (docker.io/superseriousbusiness/gotosocial)
v0.22.2: Shrubbiest Sloth 🌿🌿🌿Compare Source
Here's a bugfix release! v0.22.2 Shrubbiest Sloth 🌿🌿🌿!
If you're updating to this version from v0.22.x, it's a very easy update with no db migrations.
If you're updating to this version from a version before v0.22.0, please follow the update instructions from v0.22.0, but replace
0.22.0with0.22.2throughout. Be aware that the update to 0.22.x contains some serious database migrations. Please do read the notes carefully!If you're on current main/snapshot, stay there. You already have bugfixes from here, and going backwards won't work.
Release highlights
Migration notes
Upgrading
To upgrade to v0.22.2 from a previous release:
Binary/tar
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.Docker
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.docker pull docker.io/superseriousbusiness/gotosocial:0.22.2ordocker pull docker.io/superseriousbusiness/gotosocial:latestif this is a stable release and not a release candidate.config.yaml
No changes since v0.22.x.
Database Migrations
No migrations since v0.22.x.
Which release archive/container should I use?
GoToSocial releases binary builds for 64-bit Linux, FreeBSD, and NetBSD operating systems. We also release Docker builds for 64-bit Linux.
docker.io/superseriousbusiness/gotosocial:0.22.2docker.io/superseriousbusiness/gotosocial:0.22.2nowasmFor your convenience, we also provide UNSUPPORTED, EXPERIMENTAL BUILDS, created using the
nowasmtag, in the downloads list below. There is no Docker build fornowasm.GoToSocial releases built with
nowasmuse the Go-native, modernc version of SQLite instead of the WASM one, and will use on-system ffmpeg and ffprobe binaries for media processing.Using a
nowasmbuild is currently the only way to run GoToSocial on a 32-bit system.For more information on running a
nowasmbuild, see the nowasm documentation page.Changelog
Bug fixes
fb2bf13[bugfix] tighten auth requirements formustUserFromSessionOther
b16281efix build for go1.27v0.22.1: Shrubbier Sloth 🌿🌿Compare Source
Hello hello, here's a bugfix release! v0.22.1 Shrubbier Sloth 🌿🌿!
If you're updating to this version from v0.22.0, it's a very easy update with no db migrations.
If you're updating to this version from a version before v0.22.0, please follow the update instructions from v0.22.0, but replace
0.22.0with0.22.1throughout. Be aware that the update to 0.22.x contains some serious database migrations. Please do read the notes carefully!If you're on current main/snapshot, stay there. You already have all the bugfixes from here, and going backwards won't work.
Release highlights
Migration notes
Upgrading
To upgrade to v0.22.1 from a previous release:
Binary/tar
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.Docker
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.docker pull docker.io/superseriousbusiness/gotosocial:0.22.1ordocker pull docker.io/superseriousbusiness/gotosocial:latestif this is a stable release and not a release candidate.config.yaml
No changes since v0.22.x.
Database Migrations
No migrations since v0.22.x.
Which release archive/container should I use?
GoToSocial releases binary builds for 64-bit Linux, FreeBSD, and NetBSD operating systems. We also release Docker builds for 64-bit Linux.
docker.io/superseriousbusiness/gotosocial:0.22.1docker.io/superseriousbusiness/gotosocial:0.22.1nowasmFor your convenience, we also provide UNSUPPORTED, EXPERIMENTAL BUILDS, created using the
nowasmtag, in the downloads list below. There is no Docker build fornowasm.GoToSocial releases built with
nowasmuse the Go-native, modernc version of SQLite instead of the WASM one, and will use on-system ffmpeg and ffprobe binaries for media processing.Using a
nowasmbuild is currently the only way to run GoToSocial on a 32-bit system.For more information on running a
nowasmbuild, see the nowasm documentation page.Changelog
Bug fixes
26b61ae[bugfix] Restore accidentally-removed outgoing http proxy config (#4954)1764961[bugfix] recent tweaking broke the pollJustClosed() heuristic by forgetting a time.Time{}.IsZero() check, this fixes that (#4938)2813e6c[bugfix] add checks for status creation date to status timelining, to prevent notifications of new-old statuses (#4935)086c6fb[bugfix] old (expired) remote polls awaiting dereference still show as votable (#4927)0605b8f[bugfix] Includeinstance.domainin undeliverable instances query for Postgres (#4926)d1107d2[bugfix/frontend] don't link to /directory when it is disabled (#4917)e54e92c[bugfix] Setstatus_idtoNULLwhen unattaching attachments from deleted local statuses (#4922)Chores & version bumps
fdff42b[chore/v0.22.1 back compat] Remove stray line in internal/api/client/polls809723c[chore] update dependencies (#4933)9d162cb[chore] Pointless emoji comment formatting to trigger a snapshot (#4956)19bb83b[chore] Updategotosocial-woodpecker-buildto v0.13.0; usegitfor changelog instead ofgitea(#4955)Documentation
f9483b0[docs/bugfix] fix documentation urls for relay pushes (#4912)v0.22.0: Shrubby Sloth 🌿Compare Source
Hello! Hello! Is it sloth you're looking for? I can see it in your eyes!
Here's version 0.22.0 of GoToSocial, aka Shrubby Sloth 🌿.
This is a big feature release that contains support for relay subscriptions and relay push connections, a new instance account directory, better threading using tombstones for deleted statuses,, and support for auto-cleanup of old remote statuses, among lots of other things!
This release also contains a long-ass database migration to move status boolean columns (like pinned, local, etc) to a single bitfield column. This saves a lot of space in the database, but it also means on startup the migration has to iterate through all statuses in your database and set the new field. Please be patient and don't interrupt this process!⚠️ ⚠️ ⚠️
Release highlights
Documentation for admin-level relay subscriptions.
Documentation for user-level relays pushes.
Documentation for post caching + pruning.
Documentation for inclusion in account directory.
Migration notes
Upgrading
To upgrade to v0.22.0 from a previous release:
Binary/tar
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.Docker
sqlite.dbfile, eg.,cp sqlite.db sqlite.db.backup. On Postgres you can do this with pg_dump.docker pull docker.io/superseriousbusiness/gotosocial:0.22.0ordocker pull docker.io/superseriousbusiness/gotosocial:latestif this is a stable release and not a release candidate.config.yaml
The configuration file has changed since the previous release; you will need to update at least the config options that were removed + replaced (see below).
instance-subscriptions-process-fromandinstance-subscriptions-process-every, replaced them withinstance-subscriptions-process-cronwith a default value of0 23 * * *(every night @ 11pm).media-cleanup-fromandmedia-cleanup-every, replaced them withmedia-cleanup-cronwith a default value of0 0 * * *(every night @ midnight).media-remote-cache-days, replaced withmedia-remote-cache-durationwith a default value of7 days.instance-directory-modeset towebonlyby default.instance-robots-allow-indexingset tofalseby default.storage-s3-region.statuses-cleanup-cronwith a default value of0 1 * * 0, ie., at 1am every Sunday.statuses-cleanup-remote-older-thanwith a default value of0s(don't cleanup statuses).smtp-from-display-name, allowing you to customize the display name used by sent admin emails.http-client.timeoutdefault from30sto1mwhich was already used internally.You can see a diff of the config file here: https://codeberg.org/superseriousbusiness/gotosocial/compare/v0.21.3...v0.22.0#diff-c071e03510b2c57e193a44503fd9528a785f0f411497cc75841a9f8d0b1ac622
Database Migrations
@ Postgres users: Following the migration, if you encounter slowdown on Postgres specifically (ie., timing out while loading timelines) you may need to run some manual database maintenance steps. Please check our Postgres database maintenance documentation for steps on how to do this using the
psqltool.Which release archive/container should I use?
GoToSocial releases binary builds for 64-bit Linux, FreeBSD, and NetBSD operating systems. We also release Docker builds for 64-bit Linux.
docker.io/superseriousbusiness/gotosocial:0.22.0docker.io/superseriousbusiness/gotosocial:0.22.0nowasmFor your convenience, we also provide UNSUPPORTED, EXPERIMENTAL BUILDS, created using the
nowasmtag, in the downloads list below. There is no Docker build fornowasm.GoToSocial releases built with
nowasmuse the Go-native, modernc version of SQLite instead of the WASM one, and will use on-system ffmpeg and ffprobe binaries for media processing.Using a
nowasmbuild is currently the only way to run GoToSocial on a 32-bit system.For more information on running a
nowasmbuild, see the nowasm documentation page.Changelog
Features and performance
0419b4d[performance] UseCROSS JOIN LATERALfor Postgres home timeline queries (#4891)8737f05[feature] Unfollow relay actor if no connections exist targeting that actor (#4880)3fe273c[feature] Show explanation when user shows no posts on the web (#4846)a77b44c[feature] better error pages + handling for hidden or gone statuses (#4840)cc3af19[feature] Allow sorting access tokens by last_used, allow setting name per access token (#4833)b765e74[feature] Forward outgoing creates, updates, and deletes to relay pushes (#4820)bae8f07[feature] add statuses multi GET endpoint (#4814)126959d[feature/frontend] Adddata-name="{{- .Name -}}"to fields to allow for per-field styling (#4827)a2266f2[feature] add cleanup of old remote status threads (#4808)12e6d0c[feature] Dereference + store statuses delivered by a followed relay actor (#4810)603c849[feature] Add button to clear instance delivery errors (#4818)4e2589b[feature] make almost every http.Client{} and http.Server{} option configurable (#4730)77059b4[feature] add sqlite cli commands (#4726)f4bf4aa[performance] add configurables for timeline cache lengths (#4807)39ad509[feature] Add db functions, api endpoints, and settings panel sections for relay subscriptions + pushes (#4796)0496504[feature] Add storage-s3-region config option (#4788)85050ee[feature] Serve instance actor AP representation without auth (#4798)cc1316b[feature] Store delivery errors, add remote instances overview to view stored errors (#4741)40fff69[feature] Add config optionsmtp-from-display-namefor customization of email from address display name (#4769)4e935d0[performance] further index fiddling (#4761)ef60ffe[feature] hook up "log-db-queries" again and when enabled log at TRACE regardless of current "log-level" (#4764)9972836[performance] use CTE for home timeline query, allows postgres to make use of indices, thanks @cdn0x12 (#4760)c40dbf0[performance] don't block on media load on API endpoints to improve latency (#4756)0415d71[feature] implement status deletion via stubbing (#4752)7362d55[feature] add deleted flag to the statuses table to track tombstones (#4716)ea7e3c0[feature/frontend] add Träwelling status to profile (#4540)ec69200[feature] Add instance directory page for accounts that opt-in to discoverability (#4707)Bug fixes
60b693f[bugfix/frontend] turnDateTimeMinuteandDateTimeSecondinto proper components (#4911)867ce73[bugfix] stricter property value counts (#4905)b2e789e[bugfix] Allow hyphen in usernameRelaxed regex (#4902)5caf33d[bugfix] Ensure timeline side effects triggered for relayedAnnounces (#4901)4bb89d2[bugfix] Add support forpublic:remotestream type (#4899)d51bec4[bugfix/frontend] Fix docs links + remove trailing code for some relay stuff (#4898)9d03fc4[bugfix] Depunify account domain in api instance response + web pages (#4897)ce6fd30[bugfix] Don't return 500 on forwardedUpdatetargeting an actor (#4892)663d725[bugfix] Call dereferencer hook for relayed status to put in timeline(s) (#4887)d40aefe[bugfix] fix erroneus use ofRelayConnectionCreateRequestwhen updating a relay push (#4884)c53f27b[bugfix] don't error on db.ErrNoEntries inOnMediaDereferencecallback (#4874)620bfa1[bugfix] disable outgoing http2 requests until superseriousbusiness/httpsig is updated (#4879)ad9418c[bugfix] only mark status as edited for streaming hooks if edited_at column has changed (#4867)b201dbe[bugfix] Remove admin check on user-level relay push matchers (#4870)b833c96[bugfix] setstatuses-cleanup-remote-older-thanto"0s", skip scheduling if 0 (#4869)aec4f46[bugfix] Update go-sqlite3 to v0.35.1 to fixout of memorypanic during migration (#4864)1a58374[bugfix] Fix account domain being used incorrectly in api instance responses (#4863)c35d2b7[bugfix] temporarily removes the sqlite vacuum CLI action, as it seems to fail with i/o issues (#4859)f854121[bugfix] nowasm: on context cancel hook, check that process is non-nil before calling Kill() (#4855)4ce10bd[bugfix] Fix error message for account-domain/host validation being the wrong way around (#4851)de2e6a0[bugfix] Always return 401 unauthorized when deref of pubkey fails (#4836)1a0e3fd[bugfix] fix error format strings (#4835)e0bc24a[bugfix] don't return 500 error on unsupported Announce forwards (#4828)6a5794e[bugfix] Check error type when dereferencing threads, to avoid spurious error messages (#4824)8198126[bugfix/frontend] Validate domain name for new domain perms earlier to avoid confusing err messages (#4826)ed6b737[bugfix] Ignore extraneous data streams when processing videos (#4819)dd81a52[bugfix] Fix logic error on outgoing poll votes (#4813)f20588d[bugfix]: make GET /api/v1/admin/reports match Mastodon admin API (#4778)a0d235b[bugfix] numerous media processing bug fixes (#4771)beb9281[bugfix] Preescape backslashes when doing plaintext parsing (#4770)80b8faa[bugfix] set deleted status placeholder serialization (#4768)bc19d7b[bugfix] fix media setting errors on codec unsupported or generic ffmpeg/ffprobe related errors (#4749)085448e[bugfix] Only insert status pins if slice not empty (#4743)ad85f89[bugfix] Fix 404 for local audio files with no cover image (#4739)b49939a[bugfix] CheckreplyAuthorizationprop on statuses, fall back to deprecatedapprovedBy(#4732)dd7d659[bugfix] catch empty media attachment URLs and set appropriate error text so they get replaced with placeholder text (#4723)10afa76[bugfix] ensure domain limit status filters get serialized the same as regular status filters (#4722)da22ce9[bugfix] do not crash on nullmedia.metaon reports page (#4721)d1f330e[bugfix] Fix missing prometheus go runtime metrics (#4718)Chores & version bumps
24537b2[chore] update dependencies (#4904)67b8b88[chore] Just debug log wrong type (eg., dereffing Announce of Announce) in createAnnounceFromRelay (#4881)26eb2c7[chore] use time.Now() whenpublishedprop not present onAnnouncefrom relay actor (#4872)ed164e8[chore] HTTP server/client config stuff (#4861)19d294e[chore] update dependencies (#4854)06c10bb[chore] update dependencies (#4848)8bc9103[chore] Return 202 when we're forwarded an activity originating from a domain we block (#4844)c8f6ef8[chore] Don't error message when unable to enrich mention because remote is blocked (#4838)2c9a2c6[chore] updated dependencies (#4831)7161b5c[chore] Add more bullshit crawlers torobots.txt🖕 (#4829)3b63e89[chore] remove unusedauth_flow.shscript (#4822)aeb597e[chore] update dependencies (#4815)47237d7[chore] update dependencies (#4806)6cdf99a[chore] update dependencies (#4801)62852a0[chore] update dependencies (#4797)22105fb[chore] update dependencies (#4791)650a998[chore] update dependencies (#4784)12ff7d3[chore] Totally definitely legitimately support Claude code, we love our shit-eating LLM capitalist overlords 🚀 (#4781)e5f7b69[chore] Updategotosocial-woodpecker-buildversion number (#4774)0037884[chore] update dependencies (#4773)92d7e6c[chore/performance] Set lazy loading in HTML for status header avatars (#4772)c7f37c3[chore] update dependencies (#4745)fe46040[chore] Usebun.Ident()inGetCachedAttachments(#4753)df7b9e0[chore] updated dependencies (#4719)8d1f349[chore] Updating linter in CI/CD to v2.9.0 (#4714)Documentation
0b9a273[docs] fix default param value definition (#4886)4e47c76[docs] Add note about Postgres dockershm-sizeparameter (#4873)542c57f[docs] update list of supported platforms regarding recent changes to ncruces/go-sqlite3 and our build tag behaviour (#4858)40ed945[docs] Update db maintenance docs, add status cleanup docs, update media cleanup docs (#4857)10244f0[docs] Update database maintenance docs to specify using the gts binary to run analyze (#4843)bafe562[docs] Update config examples for crons (#4821)a2cbe8c[docs/bugfix] Fix link to example systemctl file (#4751)Other
c6388ed[frontend] tweak account directory styling (#4860)4777236[frontend] Update media cleanup form to better reflect API (#4839)Configuration
📅 Schedule: (in timezone Asia/Singapore)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate.