Your self-hosted, globally interconnected microblogging community
This is a bugfix release for the 4.2.0 version, if you're installing from an earlier version, please check the 4.2.0 release notes as they contain important information on how to update.
:warning: We recently released important security updates.
If you don't want or can't update to 4.2.x yet, the security updates are also available for the 4.1.x branch, the 4.0.x branch and the 3.5.x branch.
/deck
URLs for logged-out users (ClearlyClaire)tootctl maintenance fix-duplicates
(ClearlyClaire)Vary
headers not being set on some redirects (ClearlyClaire)To get the code for v4.2.1, use git fetch && git checkout v4.2.1
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.2.0.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
RAILS_ENV=production bundle exec rails assets:precompile
Using Docker:
:warning: We recently released important security updates, so if you are still using a 4.2.0 pre-release, 4.1.7 or below, 4.0.9 or below, or 3.5.13 or below, please update as soon as possible (see the release notes for v4.1.8).
To get the code for v4.1.10, use git fetch && git checkout v4.1.10
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.1.7, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.1.9.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
:warning: The 4.0.x branch will not receive any update—including security fixes—after 2023-10-31.
:warning: We recently released important security updates, so if you are still using a 4.2.0 pre-release, 4.1.7 or below, 4.0.9 or below, or 3.5.13 or below, please update as soon as possible (see the release notes for v4.0.10).
The 4.0.x branch will not receive any update after 2023-10-31. This means that no security fix will be made available for this branch after this date, and you will need to update to a more recent version (such as the 4.1.x branch) to receive security fixes.
To get the code for v4.0.12, use git fetch && git checkout v4.0.12
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.0.9, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.0.11.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
:warning: The 3.5.x branch will not receive any update—including security fixes—after 2023-12-31.
:warning: We recently released important security updates, so if you are still using a 4.2.0 pre-release, 4.1.7 or below, 4.0.9 or below, or 3.5.13 or below, please update as soon as possible (see the release notes for v3.5.14).
The 3.5.x branch will not receive any update after 2023-12-31. This means that no security fix will be made available for this branch after this date, and you will need to update to a more recent version (such as the 4.1.x branch) to receive security fixes.
To get the code for v3.5.15, use git fetch && git checkout v3.5.15
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v3.5.13, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 3.5.14.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
This release addresses an issue that was introduced by the last security update and includes changelogs for both updates.
:warning: This is a follow-up to the important 4.1.8 security update that fixed major security issues (CVE-2023-42451, CVE-2023-42452).
Corresponding security releases are available for the 4.0.x branch and the 3.5.x branch. If you are using nightly builds, do not use this release but update to
nightly.2023-09-20
or newer instead. If you are on themain
branch, update to the latest commit.
ffprobe
reports 0/0
average framerate (NicolaiSoeborg)To get the code for v4.1.9, use git fetch && git checkout v4.1.9
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.1.7, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.1.7 or 4.1.8.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
:warning: The 4.0.x branch will not receive any update—including security fixes—after 2023-10-31.
This release addresses an issue that was introduced by the last security update and includes changelogs for both updates.
:warning: This is a follow-up to the important 4.0.10 security update that fixed major security issues (CVE-2023-42451, CVE-2023-42452).
Corresponding security releases are available for the 4.1.x branch and the 3.5.x branch.
The 4.0.x branch will not receive any update after 2023-10-31. This means that no security fix will be made available for this branch after this date, and you will need to update to a more recent version (such as the 4.1.x branch) to receive security fixes.
ffprobe
reports 0/0
average framerate (NicolaiSoeborg)To get the code for v4.0.11, use git fetch && git checkout v4.0.11
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.0.9, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.0.9 or 4.0.10.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
:warning: This release is an important security release fixing major security issues (CVE-2023-42451, CVE-2023-42452).
Corresponding security releases are available for the 4.0.x branch and the 3.5.x branch. If you are using nightly builds, do not use this release but update to
nightly.2023-09-20
or newer instead. If you are on themain
branch, update to the latest commit.
ffprobe
reports 0/0
average framerate (NicolaiSoeborg)To get the code for v4.1.8, use git fetch && git checkout v4.1.8
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.1.7, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.1.7.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker:
:warning: The 4.0.x branch will not receive any update—including security fixes—after 2023-10-31.
:warning: This release is an important security release fixing major security issues (CVE-2023-42451, CVE-2023-42452).
Corresponding security releases are available for the 4.1.x branch and the 3.5.x branch. If you are using nightly builds, do not use this release but update to
nightly.2023-09-20
or newer instead. If you are on themain
branch, update to the latest commit.
The 4.0.x branch will not receive any update after 2023-10-31. This means that no security fix will be made available for this branch after this date, and you will need to update to a more recent version (such as the 4.1.x branch) to receive security fixes.
ffprobe
reports 0/0
average framerate (NicolaiSoeborg)To get the code for v4.0.10, use git fetch && git checkout v4.0.10
.
As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:
docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump
External dependencies have not changed compared to v4.0.9, the compatible Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same, that is:
If your uploaded images are broken after the upgrade, it means your installed ImageMagick version is older than the new minimum version (6.9.7-7), for example if you are running Ubuntu 18.04. If this happens, you can find more information and ways to fix it on this page.
The following instructions are for updating from 4.0.9.
If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations.
Non-Docker only:
bundle install
and yarn install --frozen-lockfile
Both Docker and non-Docker: