Hometown v1.1.1 (Mastodon 4.0.10)

This is a security release that keeps us up to date with Mastodon v4.0.10. Please see the 4.0.10 release notes for details.

Thank you @nachtjasmin the help with this merge.

⚠️ This release is an important security release fixing major security issues (CVE-2023-42451, CVE-2023-42452).

Also, the Mastodon team will no longer provide security updates for version 4.0.x after 2023-10-31. The next release of Hometown will happen before then and will bump us up to version 4.2.x.

Upgrade steps

These are instructions for upgrading from Hometown v4.0.6+1.1.1.

There is no need to precompile assets for this release, but please note that the minimal supported ImageMagick version has been bumped to 6.9.7-7. If you are on an older ImageMagick and you do this upgrade, you'll get errors trying to upload images and incoming thumbnails will be broken images, among other problems. Some tips for fixing the ImageMagick problems can be found here.

As always, make sure you have backups of the database before performing any upgrades. A postgres backup command would look something like this: pg_dump -Fc -U postgres mastodon_production > name_of_the_backup.dump

• git remote update && git checkout v4.0.10+hometown-1.1.1
• Install dependencies: bundle install and yarn install --frozen-lockfile
• Restart all Mastodon processes (yes really all processes - specifically the streaming API process needs restarting so if you are trying to be clever to retain uptime... just restart it all)