Changelog

Added

• Add --reset-password option to tootctl accounts modify (ThibG)
• Add source-mapped stacktrace to error message in web UI (ThibG)

Fixed

• Fix dismissing an announcement twice raising an obscure error (ThibG)
• Fix misleading error when attempting to re-send a pending follow request (ThibG)
• Fix backups failing when files are missing from media attachments (ThibG)
• Fix duplicate accounts being created when fetching an account for its key only (ThibG)
• Fix /web redirecting to /web/web in web UI (ThibG)
• Fix previously OStatus-based accounts not being detected as ActivityPub (ThibG)
• Fix account JSON/RSS not being cacheable due to wrong mime type comparison (ThibG)
• Fix old browsers crashing because of missing finally polyfill in web UI (ThibG)
• Fix account's bio not being shown if there are no proofs/fields in admin UI (ThibG)
• Fix sign-ups without checked user agreement being accepted through the web form (ThibG)
• Fix non-x64 architectures not being able to build Docker image because of hardcoded Node.js architecture (SaraSmiseth)
• Fix invite request input not being shown on sign-up error if left empty (ThibG)
• Fix some migration hints mentioning GitLab instead of Mastodon (saper)

Security

• Fix leak of arbitrary statuses through unfavourite action in REST API (Gargron)

Upgrade notes

Non-Docker only:

• Install dependencies: bundle install and yarn install

Both Docker and non-Docker:

1. Precompile the assets:
   • Non-Docker: RAILS_ENV=production bundle exec rails assets:precompile
   • Docker: The assets are already precompiled during the build step
2. Restart all Mastodon processes