Social Media Platforms Release Notes

Release notes for popular social media platforms

Get this feed:

Products (7)

Latest Social Media Platforms Updates

Nov 4, 2026
Date parsed from source:
Nov 4, 2026

First seen by Releasebot:
Nov 5, 2026
Mastodon

v5.0.0-beta.1

Mastodon releases its 5.0 beta with a redesigned web interface, customizable color themes, a refreshed layout and composer, plus new moderation and server administration tools, account settings, and fixes. The pre-release lays groundwork for future improvements.
Warning

This is a pre-release! This has not been as widely tested as regular releases, although it is still tested on mastodon.social and some other servers. If you update to this release, you will not be able to safely downgrade to the existing stable releases. You will, however, be able to upgrade to later nightly releases or pre-releases, as well as the upcoming 5.0.0 stable release.

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires assets recompilation

ℹ️ Requires streaming server restart

ℹ️ Requires database migrations

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

New web interface

Mastodon has a new look!

This version contains a redesign of Mastodon's web interface. This includes a refreshed visual design (with a new color theme setting to personalise it further), a new page layout and a new composer.

This is only the start of the journey and this version is laying out the basis for many new things to come.

You can read all about it in our dedicated blog post.

Added

Add a setting to pick a color theme for the web interface (#41088, #41094, #41153 by @diondiondion and @ClearlyClaire)

Add a user setting to have the Content Warning field on by default (#40824 by @ClearlyClaire)

Add a user setting to hide your own posts and boosts (#40813 and #40867 by @arte7)

Your own boosts are now hidden by default.

Add ability to follow hashtag from the menu (#40640 by @ChaosExAnima)

Add new Server Health admin page (#41101 and #41282 by @jhbabon)

Add bloom filters to limit which servers account deletion notices are sent to (#40283 by @ClearlyClaire)

This heavily reduces the number of deletion notices sent to other servers by storing the list of servers which fetched an account in a bloom filter. This is strongly recommended on large servers which regularly delete many accounts as it heavily decreases the number of federation Delete activities. This feature introduces a new setting to require signed requests for accounts in order to know where the request comes from.

Add server setting to postpone confirmation emails after accounts are approved (#40690, #40702, #41099 by @ClearlyClaire)

Add DISABLE_ANNOUNCEMENT_REACTIONS environment variable to disable emoji reactions in announcements (#40931 by @ClearlyClaire)

Add RACK_COMPRESS env to enable Rack::Deflater middleware (#39927 by @shleeable)

Add server directory and default server opt-in options (#40750 by @arte7)

Add new tab to server settings for external discovery (#40768 by @arte7)

Add moderation domain block/allow list synchronization feature (#40136, #41349 by @ClearlyClaire and @zunda)

In this version, this is behind an experimental feature flag to allow us to gather feedback and test it in the real world. We expect this to be stable and enabled for all servers in our next release.

Add the app used for registration in the moderation view of an account (#40567 by @jhbabon)

Add canned response (formerly warning presets) categories to restrict them to a specific action (#41092, #41264 by @arte7)

Add information about who handled an appeal in moderation interface (#41186, #41427 by @arte7 and @ClearlyClaire)

Add information about trends and follow recommendation blocks in the account moderation page (#40398 by @jhbabon)

Add support for verifying ML-DSA-44 HTTP Message Signatures (#41119 by @ClearlyClaire)

Add support for signing-up through the OAuth flow (#40659 by @ClearlyClaire)

You can read more about the new flow in our documentation. The previous registration flow (POST /api/v1/accounts) is deprecated and will be removed in a future version.

Add allow_nonfunctional parameter to GET /api/v1/accounts/verify_credentials (#40803 by @ClearlyClaire)

Add server-side filtering to home feed endpoint (#40468, #41031 by @ClearlyClaire and @cacheflow)

Add counters to track which features result in users following each other (#40226, #40258, #40340 by @Gargron)

Fixed

Fix terms of service and privacy policy API failing on percent signs (#41343 by @dualfroz)

Fix size of date-of-birth input fields (#41021 by @ClearlyClaire)

Fix invisible links in server announcements (#40949 by @diondiondion)

Fixes infinite requests loop on hovering over broken emojis (#40884 by @FFederi)

Fix HTTP 200 response code on paths to remote accounts that don't exist (#40341 by @Gargron)

Fix performance of media attachment queries in admin instance page (#40515 by @crafkaz)

Fix deprecated nginx HTTP/2 directive (#36149 by @sirodoht)

Fix typo in new locales for admin account trending info (#40438 by @jhbabon)

Fix follows and followers pages to show "Today" instead of hours (#40367 by @FFederi)

Fix long dropdown menus being cut off on smaller screens (#41026 by @diondiondion)

Fix the moderation interface to allow seeing media reports of suspended accounts (#40274 by @jhbabon)

Changed

Change authentication errors to return HTTP 422 instead of HTTP 200 (#41503 by @ClearlyClaire)

Change account confirmation e-mail to not redirect to app (#41066 and #41181 by @ClearlyClaire and @oneiros)

Change empty search requests to return a HTTP 400 error (#40196 and #40214 by @Gargron)

Change warning presets to canned responses and move the navigation item (#41045 by @arte7)

Change FASP configuration to individual toggles for capabilities (#40764 and #40787 by @oneiros)

Change the web interface to check media attachment size limit before uploading (#30475 by @rgroothuijsen)

Removed

Remove discovery area in settings (#41258 by @ChaosExAnima)

Remove deprecated tootctl accounts fix-duplicate command (#40232 by @ClearlyClaire)

Remove support for node version 22 (#41152 by @mjankowski)

Remove support for ruby 3.3 and 3.4, only support a single version (#40603 by @mjankowski)

Remove support for pre-4.7 zero-downtime migrations (#40235 by @ClearlyClaire)

Upgrade notes

To get the code for v5.0.0-beta.1, use git fetch && git checkout v5.0.0-beta.1.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have changed since v4.7.0, with new Ruby, Node and Redis version requirements.

Ruby: 4.0

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.2 or newer

Node: 24 or newer

libvips: 8.13 or newer

FFMpeg: 5.1 or newer

Zero-downtime migrations

Zero-downtime migrations to Mastodon 5.0 are only possible coming from Mastodon 4.7. Please update to 4.7 before 5.0 if you want to perform zero-downgrade updates.

Update steps

The following instructions are for updating from 4.7.5.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.7.0 release notes.
Non-Docker Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

If you are using rbenv, update the list of available versions and install the proper Ruby version by doing RUBY_CONFIGURE_OPTS=--with-jemalloc rbenv install in the Mastodon install directory (e.g. /home/mastodon/live)

Install dependencies with bundle install and yarn install --immutable

Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile

Run the pre-deployment database migrations by specifying the SKIP_POST_DEPLOYMENT_MIGRATIONS=true environment variable: SKIP_POST_DEPLOYMENT_MIGRATIONS=true RAILS_ENV=production bundle exec rails db:migrate

Restart all Mastodon processes.

Run the post-deployment database migrations: RAILS_ENV=production bundle exec rails db:migrate

When using Docker

Run the pre-deployment database migrations by specifying the SKIP_POST_DEPLOYMENT_MIGRATIONS=true environment variable: docker-compose run --rm -e SKIP_POST_DEPLOYMENT_MIGRATIONS=true web bundle exec rails db:migrate

Restart all Mastodon processes.

Run the post-deployment database migrations: docker-compose run --rm web bundle exec rails db:migrate

Original source
Nov 3, 2026
Date parsed from source:
Nov 3, 2026

First seen by Releasebot:
Nov 4, 2026
Reddit

We Are Testing Ad Placements in Reddit Search Pages

Reddit begins testing ads in search results, matching placements to query context such as coffee gear or home office products. The initial test is limited to eligible advertisers as Reddit evaluates the experience for users and advertisers.
People come to Reddit seeking human perspectives and experiences they can’t find elsewhere, with half of Reddit users saying the platform helps them discover something new. As we continue improving the user search experience on Reddit, we’re also beginning to test ad placements in search. These placements leverage existing ad targeting in search results pages on Reddit, which have high purchase and search intent.

Ads in search may appear based on a range of factors, including contextual relevance to a user’s search query. For example:

A search for “espresso station” could surface ads for espresso machines, coffee beans, or mugs.

A search for “home office setup” could surface ads for monitors, desks, or office chairs.

This is an initial test with a select group of eligible advertisers. During this test, we will evaluate and understand how users respond to these ads so we can refine the experience for users and advertisers over time.
Original source
All of your release notes in one feed

Join Releasebot and get updates from Mastodon and hundreds of other software products.

Create account
Get updates with:
Nov 3, 2026
Date parsed from source:
Nov 3, 2026

First seen by Releasebot:
Nov 4, 2026
Mastodon

v4.6.11

Mastodon releases version 4.6.11 with security fixes for JSON-LD processing and forwarded IP headers, updated dependencies, and a fix to keep invite-use counts accurate when invited users delete their accounts.
Changelog

Security

Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6)

Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c)

If your reverse-proxy setup uses Forwarded instead of X-Forwarded-For, please make sure it ignores user-provided X-Forwarded-For headers.

If you are using our provided nginx.conf, please consider updating it.

Updated dependencies, in particular to address security advisories in addressable, loofah, rack, and rails-html-sanitizer

Changed

Change invites use counts to not decrease if an invited user deletes their account (#41458 by @ClearlyClaire)

Upgrade notes

To get the code for v4.6.11, use git fetch && git checkout v4.6.11.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

Ruby: 3.3 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 22 or newer

libvips: 8.13 or newer

FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.10.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

Non-Docker
Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Nov 3, 2026
Date parsed from source:
Nov 3, 2026

First seen by Releasebot:
Nov 4, 2026
Mastodon

v4.5.21

Mastodon releases version 4.5.21 with fixes for denial-of-service and proxy-header security issues, updated vulnerable dependencies, and an improvement to invite-use counts. Administrators are encouraged to upgrade, especially when using OpenStack Swift storage.
Warning

While we do our best to support Mastodon 4.5 until 2027-02-20, there are known security issues in some of the dependencies we use.

We recommend administrators to update to a newer Mastodon version when they can, especially if you use OpenStack Swift for object storage.

Changelog

Security

Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6)

Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c)

If your reverse-proxy setup uses Forwarded instead of X-Forwarded-For, please make sure it ignores user-provided X-Forwarded-For headers.

If you are using our provided nginx.conf, please consider updating it.

Updated dependencies, in particular to address security advisories in addressable, loofah, rack, and rails-html-sanitizer

Changed

Change invites use counts to not decrease if an invited user deletes their account (#41458 by @ClearlyClaire)

Upgrade notes

To get the code for v4.5.21, use git fetch && git checkout v4.5.21.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:

docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.5.0.

Ruby: 3.2 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 20.19 or newer

libvips (optional, instead of ImageMagick): 8.13 or newer

ImageMagick (optional if using libvips): 6.9.7-7 or newer

Update steps

The following instructions are for updating from 4.5.20.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.5.0 release notes.
Non-Docker
Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Nov 3, 2026
Date parsed from source:
Nov 3, 2026

First seen by Releasebot:
Nov 4, 2026
Mastodon

v4.4.28

Mastodon releases version 4.4.28 with security fixes for denial-of-service and forwarded-header handling, updated dependencies, and an improvement to invite-use counts. Administrators are urged to upgrade, especially when using OpenStack Swift for object storage.
Warning

While we do our best to support Mastodon 4.4 until 2026-12-17, there are known security issues in some of the dependencies we use.

We recommend administrators to update to a newer Mastodon version when they can, especially if you use OpenStack Swift for object storage.

Changelog

Security

Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6)

Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c)

If your reverse-proxy setup uses Forwarded instead of X-Forwarded-For, please make sure it ignores user-provided X-Forwarded-For headers.

If you are using our provided nginx.conf, please consider updating it.

Updated dependencies, in particular to address security advisories in addressable, loofah, rack, and rails-html-sanitizer

Changed

Change invites use counts to not decrease if an invited user deletes their account (#41458 by @ClearlyClaire)

Upgrade notes

To get the code for v4.4.28, use git fetch && git checkout v4.4.28.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:

docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.4.1:

Ruby: 3.2 or newer

PostgreSQL: 13 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 6.2 or newer

Node: 20 or newer

libvips (optional, instead of ImageMagick): 8.13 or newer

ImageMagick (optional if using libvips): 6.9.7-7 or newer

Update steps

The following instructions are for updating from 4.4.27.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.4.0 release notes.

Non-Docker
Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Nov 3, 2026
Date parsed from source:
Nov 3, 2026

First seen by Releasebot:
May 9, 2026

Modified by Releasebot:
Nov 4, 2026
Mastodon

v4.7.5

Mastodon releases an update that fixes security issues affecting password authentication, JSON-LD processing, and proxy header handling, while also improving invite-use counts and updating dependencies with security advisories.
Changelog

Security

Fix password authentication bypass for inactive accounts (GHSA-3xjw-gv43-3w62)

Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6)

Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c)

If your reverse-proxy setup uses Forwarded instead of X-Forwarded-For, please make sure it ignores user-provided X-Forwarded-For headers.

If you are using our provided nginx.conf, please consider updating it.

Updated dependencies, in particular to address security advisories in addressable, loofah, rack, and rails-html-sanitizer

Changed

Change invites use counts to not decrease if an invited user deletes their account (#41458 by @ClearlyClaire)

Upgrade notes

To get the code for v4.7.5, use git fetch && git checkout v4.7.5.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

Ruby: 3.3 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 22 or newer

libvips: 8.13 or newer

FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.7.4.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.7.0 release notes.

Non-Docker
Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Oct 29, 2026
Date parsed from source:
Oct 29, 2026

First seen by Releasebot:
Oct 30, 2026
Mastodon

v4.7.4

Mastodon releases a security-focused update that strengthens ActivityPub identifier checks, adds email challenges for inactive accounts attempting to log in, and fixes timeline and federation issues. Upgrading requires a Ruby update and asset recompilation.
Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Default Ruby version has been updated

ℹ️ Requires assets recompilation

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

Fix insufficient ActivityPub identifier verification (GHSA-288h-6j8h-6x5j)

Added security challenge e-mail to users that try to log in after long period of inactivity (#40745 by @jhbabon)

Updated dependencies, in particular to address security advisories in Ruby, NodeJS, excon, css_parser, pghero, and sanitize

Fixed

Fix inefficiency in some hashtag timeline queries (#41132 by @hugogameiro)

Fix minor inefficiency in timeline deliveries (#41079 by @isidzukuri)

Fix account timeline with exclude_direct also excluding followers-only posts for non-followed users (#41019 by @ClearlyClaire)

Fix error in dev:populate_sample_data task (#40995 and #41051 by @isidzukuri and @mjankowski)

Fix local collection item revocation not being properly federated (#40930 by @oneiros)

Upgrade notes

To get the code for v4.7.4, use git fetch && git checkout v4.7.4.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

Ruby: 3.3 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 22 or newer

libvips: 8.13 or newer

FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.7.3.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.7.0 release notes.

Non-Docker
Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

If you are using rbenv, update the list of available versions and install the proper Ruby version by doing RUBY_CONFIGURE_OPTS=--with-jemalloc rbenv install in the Mastodon install directory (e.g. /home/mastodon/live)

Install dependencies with bundle install and yarn install --immutable

Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Oct 29, 2026
Date parsed from source:
Oct 29, 2026

First seen by Releasebot:
Oct 30, 2026
Mastodon

v4.6.10

Mastodon releases an update with an ActivityPub security fix, timeline and federation bug fixes, and updated dependencies. The upgrade also requires a newer Ruby version and asset recompilation.
Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Default Ruby version has been updated

ℹ️ Requires assets recompilation

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

Fix insufficient ActivityPub identifier verification (GHSA-288h-6j8h-6x5j)

Updated dependencies, in particular to address security advisories in Ruby, NodeJS, excon, css_parser, pghero, and sanitize

Fixed

Fix inefficiency in some hashtag timeline queries (#41132 by @hugogameiro)

Fix minor inefficiency in timeline deliveries (#41079 by @isidzukuri)

Fix account timeline with exclude_direct also excluding followers-only posts for non-followed users (#41019 by @ClearlyClaire)

Fix error in dev:populate_sample_data task (#40995 and #41051 by @isidzukuri and @mjankowski)

Fix local collection item revocation not being properly federated (#40930 by @oneiros)

Upgrade notes

To get the code for v4.6.10, use git fetch && git checkout v4.6.10.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look:

docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

Ruby: 3.3 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 22 or newer

libvips: 8.13 or newer

FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.9.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.
Non-Docker
Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try:

BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install

If you are using rbenv, update the list of available versions and install the proper Ruby version by doing:

RUBY_CONFIGURE_OPTS=--with-jemalloc rbenv install

in the Mastodon install directory (e.g. /home/mastodon/live)

Install dependencies with bundle install and yarn install --immutable

Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Oct 29, 2026
Date parsed from source:
Oct 29, 2026

First seen by Releasebot:
Oct 30, 2026
Mastodon

v4.5.20

Mastodon releases version 4.5.20 with security fixes, updated dependencies, and improvements to hashtag timeline queries and sample data setup. The update also changes the default Ruby version, so administrators should review the upgrade notes.
Warning

While we do our best to support Mastodon 4.5 until 2027-02-20, there are known security issues in some of the dependencies we use.

We recommend administrators to update to a newer Mastodon version when they can, especially if you use OpenStack Swift for object storage.

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Default Ruby version has been updated

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

Fix insufficient ActivityPub identifier verification (GHSA-288h-6j8h-6x5j)

Updated dependencies, in particular to address security advisories in Ruby, NodeJS, and sanitize

Fixed

Fix inefficiency in some hashtag timeline queries (#41132 by @hugogameiro)

Fix error in dev:populate_sample_data task (#40995 and #41051 by @isidzukuri and @mjankowski)

Upgrade notes

To get the code for v4.5.20, use git fetch && git checkout v4.5.20.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.5.0.

Ruby: 3.2 or newer

PostgreSQL: 14 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 7.0 or newer

Node: 20.19 or newer

libvips (optional, instead of ImageMagick): 8.13 or newer

ImageMagick (optional if using libvips): 6.9.7-7 or newer

Update steps

The following instructions are for updating from 4.5.19.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.5.0 release notes.
Non-Docker Tip
The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

If you are using rbenv, update the list of available versions and install the proper Ruby version by doing RUBY_CONFIGURE_OPTS=--with-jemalloc rbenv install in the Mastodon install directory (e.g. /home/mastodon/live)

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source
Oct 29, 2026
Date parsed from source:
Oct 29, 2026

First seen by Releasebot:
Oct 30, 2026
Mastodon

v4.4.27

Mastodon releases version 4.4.27 with a fix for insufficient ActivityPub identifier verification and updated dependencies addressing security advisories. Administrators are advised to upgrade, particularly when using OpenStack Swift for object storage.
Warning

While we do our best to support Mastodon 4.4 until 2026-12-17, there are known security issues in some of the dependencies we use.

We recommend administrators to update to a newer Mastodon version when they can, especially if you use OpenStack Swift for object storage.

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Default Ruby version has been updated

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

Fix insufficient ActivityPub identifier verification (GHSA-288h-6j8h-6x5j)

Updated dependencies, in particular to address security advisories in Ruby, NodeJS, and sanitize

Upgrade notes

To get the code for v4.4.27, use git fetch && git checkout v4.4.27.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.4.1:

Ruby: 3.2 or newer

PostgreSQL: 13 or newer

Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)

LibreTranslate (optional, for translations): 1.3.3 or newer

Redis: 6.2 or newer

Node: 20 or newer

libvips (optional, instead of ImageMagick): 8.13 or newer

ImageMagick (optional if using libvips): 6.9.7-7 or newer

Update steps

The following instructions are for updating from 4.4.26.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.4.0 release notes.
Non-Docker
Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.

If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

If you are using rbenv, update the list of available versions and install the proper Ruby version by doing RUBY_CONFIGURE_OPTS=--with-jemalloc rbenv install in the Mastodon install directory (e.g. /home/mastodon/live)

Install dependencies with bundle install and yarn install --immutable

Restart all Mastodon processes.

When using Docker

Restart all Mastodon processes.

Original source

Social Media Platforms Release Notes

Products (7)

Latest Social Media Platforms Updates

v5.0.0-beta.1

Warning

Upgrade overview

Changelog

New web interface

Added

Fixed

Changed

Removed

Upgrade notes

Note

Dependencies

Zero-downtime migrations

Update steps

We Are Testing Ad Placements in Reddit Search Pages

v4.6.11

Changelog

Security

Changed

Upgrade notes

Note

Dependencies

Update steps

Non-Docker

When using Docker

v4.5.21

Warning

Changelog

Security

Changed

Upgrade notes

Note

Dependencies

Update steps

Tip

v4.4.28

Warning

Changelog

Security

Changed

Upgrade notes

Note

Dependencies

Update steps

Non-Docker

When using Docker

v4.7.5

Changelog

Security

Changed

Upgrade notes

Note

Dependencies

Update steps

Non-Docker

When using Docker

v4.7.4

Upgrade overview

Changelog

Security

Fixed

Upgrade notes

Note

Dependencies

Update steps

Non-Docker

When using Docker

v4.6.10

Upgrade overview

Changelog

Security

Fixed

Upgrade notes

Note

Dependencies

Update steps

Tip