User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
Automated
(UNOFFICIAL)
This bot automatically checks for Iceshrimp-js and Iceshrimp.NET releases and posts them.

Sources:
iceshrimp.dev/iceshrimp/iceshrimp/releases
iceshrimp.dev/iceshrimp/Iceshrimp.NET/releases

Iceshrimp dev chat: chat.iceshrimp.dev
Iceshrimp documentation: iceshrimp.net/help
Iceshrimp issues board: issues.iceshrimp.dev
Author @pancakes
Source Code https://codeberg.org/pancakes/fedifeeds
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
Iceshrimp.NET v2025.1-beta5.patch1
This is a beta hotfix release. It's identical to v2025.1-beta5, except for a bunch of bugfixes. Upgrading is strongly recommended for all server operators running v2025.1-beta5.

Check out the full changelog for more information on this release.
0
3
6
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
A fix for the beta5 builds is being worked on
0
0
0
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
Iceshrimp.NET v2025.1-beta5
This is a beta release, containing lots of new features & bug fixes. Upgrading is recommended for all server operators.

This release contains a breaking change - we now require PostgreSQL version 15 or higher. If you need assistance upgrading, please reach out to the support chat.

Highlights:

- The MFM parser has been completely rewritten, improving frontend performance by several orders of magnitude, as well as fixing countless bugs, slowdowns & edge cases.
- TOTP 2FA is now supported and can be configured in the user settings
- Instance rules can now be configured and displayed
- Links in user profile fields are now verified
- Full drive file management has been added
- Federated user pronouns have been added
- Remote media is now proxied by default
- The project and all in-house libraries now target .NET 9.0

Check out the full changelog for more information on this release.
1
13
8
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
An update from the developers, from the project README:
We're currently in winter holiday break - unless security issues or other catastrophic bugs are discovered, no releases will be made, and no issues will be responded to until the first week of january. Support is limited to community support until then.

Happy holidays!
:ablobfoxbongohyper@wetdry.world:1
0
1
2
1
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
Iceshrimp.NET v2024.1-beta4.security2
This is a beta security hotfix release. It's identical to v2024.1-beta4.security1, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators.

Mitigations:

- Several DoS & stack overflow vulnerabilities in the MFM parser were resolved

Check out the full changelog for more information on this release.
0
5
5
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
The previous two notes are there for both historical and testing reasons. Don't worry about them unless you're actually not up to date.
0
0
0
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
Iceshrimp.NET v2024.1-beta4.security1
This is a beta security hotfix release. It's identical to v2024.1-beta4, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators.

Mitigations:

- ActivityPub actor and note validation has been improved & now protects against cross-origin identifiers in more places, resolving a database pollution vulnerability
- Cross-origin url properties on actor & note objects now get set to null before ingestion, resolving a clickjacking vulnerability
- User resolution when processing incoming notes is now limited

Check out the full changelog for more information on this release.
0
0
0
0
User avatar
Iceshrimp Updates Bot @iceshrimp_updates@meow.company
1y
Iceshrimp v2023.12.11
This is a stable release containing several critical security fixes.

Upgrading is strongly recommended for all server operators.

Highlights:

- Several DoS, impersonation, data leakage & click jacking vulnerabilities have been patched

Check out the full changelog for more information on this release.
0
0
0
0