diff --git a/CHANGELOG b/CHANGELOG index 85de30f..5cd8d4d 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -868,3 +868,12 @@ [1.17.10] * fix: update doc links from /apps/ to /packages/ +[1.17.11] +* Update mastodon to 4.5.10 +* [Full Changelog](https://github.com/mastodon/mastodon/releases/tag/v4.5.10) +* Fix SSRF protection bypass ([GHSA-crr4-7rm4-8gpw](https://github.com/mastodon/mastodon/security/advisories/GHSA-crr4-7rm4-8gpw), [GHSA-xx55-4rrg-8xg6](https://github.com/mastodon/mastodon/security/advisories/GHSA-xx55-4rrg-8xg6)) +* Fix Linked-Data Signature bypass through JSON-LD graph restructuring features ([GHSA-53m7-2wrh-q839](https://github.com/mastodon/mastodon/security/advisories/GHSA-53m7-2wrh-q839), [GHSA-chgx-jx3p-rf73](https://github.com/mastodon/mastodon/security/advisories/GHSA-chgx-jx3p-rf73)) +* Updated dependencies +* Fix type of `interactingObject`, `interactionTarget` and add missing `QuoteAuthorization` ([#38940](https://github.com/tootsuite/mastodon/issues/38940) by [@ClearlyClaire](https://github.com/ClearlyClaire)) +* Remove unused devise strategies ([#38795](https://github.com/tootsuite/mastodon/issues/38795) by [@ClearlyClaire](https://github.com/ClearlyClaire)) + diff --git a/CloudronManifest.json b/CloudronManifest.json index 22a95b2..023b2fd 100644 --- a/CloudronManifest.json +++ b/CloudronManifest.json @@ -5,7 +5,7 @@ "description": "file://DESCRIPTION.md", "changelog": "file://CHANGELOG", "tagline": "Federated social network", - "version": "1.17.10", + "version": "1.17.11", "upstreamVersion": "4.5.10", "healthCheckPath": "/about", "httpPort": 8000,