Hometown v1.0.8 (Mastodon 3.5.14)

This is a security release that keeps us up to date with Mastodon v3.5.14. Please see the 3.5.14 release notes for details.

⚠️ This release is an important security release fixing a major security issue (CVE-2023-42451).

End of life

Mastodon will not be updating the v3.5 branch, including security fixes, after 2023-12-31. I (Darius) like/need to keep this project up to date with upstream so I am also not planning to update our Mastodon v3.5-compatible Hometown versions after that date.

Upgrade steps

These are instructions for upgrading from Hometown v3.5.10+1.0.8.

There is no need to precompile assets for this release, but please note that the minimal supported ImageMagick version has been bumped to 6.9.7-7. If you are on an older ImageMagick and you do this upgrade, you'll get errors trying to upload images and incoming thumbnails will be broken images, among other problems. Some tips for fixing the ImageMagick problems can be found here.

As always, make sure you have backups of the database before performing any upgrades. A postgres backup command would look something like this: pg_dump -Fc -U postgres mastodon_production > name_of_the_backup.dump

• git remote update && git checkout v3.5.14+hometown-1.0.8
• Install dependencies: bundle install and yarn install
• Restart all Mastodon processes (yes really all processes - specifically the streaming API process needs restarting so if you are trying to be clever to retain uptime... just restart it all)