To be released.
-
Revamped the environment variables for asset storage configuration. [#115, #121 by Emelia Smith]
- Added
FS_STORAGE_PATH
environment variable, which is required whereDRIVE_DISK
is set tofs
. - Added
STORAGE_URL_BASE
environment variable, which is required. - Deprecated
FS_ASSET_PATH
in favor ofFS_STORAGE_PATH
. - Deprecated
ASSET_URL_BASE
in favor ofSTORAGE_URL_BASE
.
- Added
-
Hollo now requires the
SECRET_KEY
environment variable to be at least 44 characters long. This change ensures sufficient entropy for cryptographic operations. [#126 by Emelia Smith] -
Hollo now lets /.well-known/ and /oauth/ endpoints allow cross origin requests which is aligned with those of Mastodon. [#126 by Emelia Smith]
-
Added the
BIND
environment variable to specify the host address to listen on. [#114, #120 by Emelia Smith] -
The theme color of the profile page is now customizable. The list of all available theme colors can be found in the Colors section of the Pico CSS docs.
-
You can now sign out from the administration dashboard. [#50, #122 by Emelia Smith]
-
On profile page, shared posts are now more visually separated from the original posts, and the time of sharing is now shown. [#111]
-
On profile page, alt texts for images are now expanded within
<details>
. [#99, #110 by Okuto Oyama] -
The
scope
parameter is now optional forPOST /oauth/token
endpoint.
Released on February 22, 2025.
-
Fixed a bug where when an account profile had been updated, the
Update
activity had been made with noassertionMethods
field, which had caused interoperability issues with Mitra. -
Upgrade Fedify to 1.4.3.
Released on February 20, 2025.
-
Fixed a bug where the
follows.follower_id
column had not referenced theaccounts.id
column. [#112] -
Fixed a bug where
GET /api/v1/notifications
had returned server errors with some filters. [#113] -
Fixed a bug where the federation dashboard had not shown due to server errors when an instance had just been set up.
-
Upgrade Fedify to 1.4.2.
Released on February 14, 2025.
- Fixed a bug where
GET /api/v1/accounts/:id/statuses
had tried to fetch remote posts for local accounts. [#107]
Released on February 12, 2025.
-
The number of shares and likes became more accurate.
- The
Note
objects now haveshares
andlikes
collections with theirtotalItems
numbers. - When a remote
Note
is persisted, now thetotalItems
numbers ofshares
andlikes
are also persisted. - When a
Announce(Note)
orUndo(Announce(Note))
activity is received, now it is forwarded to the followers as well if the activity is signed.
- The
-
Added
GET /api/v1/mutes
API to Mastodon comapatiblity layer. This API returns a list of accounts that are muted by the authenticated user. [#103] -
Added
GET /api/v1/blocks
API to Mastodon comapatiblity layer. This API returns a list of accounts that are blocked by the authenticated user. [#103] -
On profile page, backward pagination (newer posts) is now available. [#104, #105 by Okuto Oyama]
-
On profile page, images are no more captioned using
<figcaption>
but use onlyalt
attribute for accessibility. [#99, #100 by Okuto Oyama] -
Fixed a style bug where horizontal scrolling occurred when the screen size was reduced when there were many custom fields on profile page. [#106 by Okuto Oyama]
-
Added
ALLOW_HTML
environment variable to allow raw HTML inside Markdown. This is useful for allowing users to use broader formatting options outside of Markdown, but to avoid XSS attacks, it is still limited to a subset of HTML tags and attributes. -
On profile page, the favicon is now switched between light and dark mode according to the user's preference. [#101]
-
The
S3_REGION
environment variable became required ifDRIVE_DISK
is set tos3
. [#95]
Released on February 22, 2025.
-
Fixed a bug where when an account profile had been updated, the
Update
activity had been made with noassertionMethods
field, which had caused interoperability issues with Mitra. -
Upgrade Fedify to 1.3.10.
Released on February 20, 2025.
-
Fixed a bug where the
follows.follower_id
column had not referenced theaccounts.id
column. [#112] -
Fixed a bug where
GET /api/v1/notifications
had returned server errors with some filters. [#113] -
Fixed a bug where the federation dashboard had not shown due to server errors when an instance had just been set up.
-
Upgrade Fedify to 1.3.9.
Released on February 14, 2025.
- Fixed a bug where
GET /api/v1/accounts/:id/statuses
had tried to fetch remote posts for local accounts. [#107] - Upgrade Fedify to 1.3.8.
Released on February 1, 2025.
-
Upgrade Fedify to 1.3.7.
-
Fixed a bug where
LOG_LEVEL
environment variable had not been respected. -
Fixed a bug where when
DRIVE_DISK
is set tofs
andFS_ASSET_PATH
is set to a relative path, Hollo server had failed to start.
Released on January 31, 2025.
-
Fixed a bug where the migration dashboard had not been shown correctly when the aliases of the account contained an actor whose the server was unreachable. [#98]
-
Fixed a bug where Hollo posts had included unintended extra line breaks on Iceshrimp. [#88]
-
Fixed a bug where importing emojis from remote servers had failed when some shortcodes were already in use. [#102]
-
Upgrade Fedify to 1.3.6.
Released on January 21, 2025.
- Upgrade Fedify to 1.3.4, which includes security fixes. [CVE-2025-23221]
Released on January 11, 2025.
- Fixed a bug where mutes with duration had not been expired correctly. [#92]
- Fixed a bug where importing follows from CSV generated by Iceshrimp had failed. [#85]
Released on December 31, 2024.
- Prefer IPv6 to IPv4 addresses when connecting to remote servers.
Released on December 31, 2024.
-
Upgrade Fedify to 1.3.3.
-
Fixed an interoperability issue with GoToSocial.
Released on December 30, 2024.
-
Hollo is now powered by Node.js 23+ instead of Bun for more efficient memory usage.
-
Added an experimental feature flag
TIMELINE_INBOXES
to store all posts visible to your timeline in the database, rather than filtering them in real-time as they are displayed. This is useful for relatively larger instances with many incoming posts, but as of now it may have several bugs. It is expected to be the default behavior in the future after it is stabilized. -
Now you can import and export your data from the administration dashboard in CSV format: follows, lists, accounts you muted, accounts you blocked, and bookmarks.
-
You can now make your profile
discoverable
. -
The profile page now shows a user's cover image if they have one.
-
Added
GET /api/v1/statuses/:id/reblogged_by
API to Mastodon comapatiblity layer. This API returns a list of accounts that have shared a post. -
Fixed a bug where a server error occurred when an invalid UUID was input via URL or form data. [#65]
-
Fixed a bug where the same post could be shared multiple times by the same account.
-
Added
LOG_FILE
environment variable to specify the file path to write structured logs. The logs are written in JSON Lines format. -
Improved the performance of recipients gathering during sending activities.
-
For the sake of concision, now log sink for Sentry is removed.
Released on February 22, 2025.
-
Fixed a bug where when an account profile had been updated, the
Update
activity had been made with noassertionMethods
field, which had caused interoperability issues with Mitra. -
Upgrade Fedify to 1.3.10.
Released on February 14, 2025.
- Fixed a bug where
GET /api/v1/accounts/:id/statuses
had tried to fetch remote posts for local accounts. [#107] - Upgrade Fedify to 1.3.8.
Released on January 21, 2025.
- Upgrade Fedify to 1.3.4, which includes security fixes. [CVE-2025-23221]
Released on December 28, 2024.
-
Fixed a bug where validation check for the account username had not been performed correctly. [#80]
-
Documented the
TZ
environment variable. [#82]
Released on December 20, 2024.
- Fixed a bug where deleting a post had not been propagated to the peers.
Released on December 19, 2024.
- Fixed a bug where generated thumbnails had been cropped incorrectly if the original image had not the EXIF orientation metadata. [#76]
Released on December 18, 2024.
-
Fixed a bug where generated thumbnails had not copied the EXIF orientation metadata from the original image. [#76]
-
Fixed a bug where looking up remote Hubzilla actors and objects had failed. [#78]
-
Upgrade Fedify to 1.3.2.
Released on December 13, 2024.
-
Fixed a bug where
Undo(Like)
activities on aQuestion
object had not been handled correctly. -
Fixed a bug where
EmojiReact
activities on aQuestion
object had not been handled correctly. -
Fixed a bug where
Undo(EmojiReact)
activities on aQuestion
object had not been handled correctly.
Released on December 1, 2024.
-
Added support for local filesystem storage for media files. You can now configure
DRIVE_DISK=fs
andFS_ASSET_PATH
to store media files in the local filesystem. [#59]- Added
DRIVE_DISK
environment variable. - Added
FS_ASSET_PATH
environment variable. - Added
ASSET_URL_BASE
environment variable to replaceS3_URL_BASE
. - Deprecated
S3_URL_BASE
environment variable in favor ofASSET_URL_BASE
.
- Added
-
Added support for Sentry.
- Added
SENTRY_DSN
environment variable.
- Added
-
Added pagination to the profile page. [#40]
-
Upgrade Fedify to 1.3.0.
Released on December 13, 2024.
-
Fixed a bug where
Undo(Like)
activities on aQuestion
object had not been handled correctly. -
Fixed a bug where
EmojiReact
activities on aQuestion
object had not been handled correctly. -
Fixed a bug where
Undo(EmojiReact)
activities on aQuestion
object had not been handled correctly.
Released on November 22, 2024.
-
Fixed a bug where followees and followers that had not been approved follow requests had been shown in the followees and followers lists.
-
Fixed a bug where followees and followers had been listed in the wrong order in the followees and followers lists. [#71]
-
Upgrade Fedify to 1.2.7.
Released on November 7, 2024.
- Fixed a bug where replies without mention had not shown up in the notifications. [#62]
Released on November 4, 2024.
- Fixed a bug where posts from some ActivityPub software (e.g., Misskey,
Sharkey, Akkoma) had empty
url
fields, causing them to be displayed incorrectly in client apps. [#58]
Released on November 3, 2024.
-
Dropped support for Redis.
-
Added two-factor authentication support. [#38]
-
Custom emojis now can be deleted from the administration dashboard.
-
Renamed the Data menu from the administration dashboard to Federation.
- Now posts also can be force-refreshed.
- Now the number of messages in the task queue is shown.
-
Added support for reporting remote accounts and posts. [#41 by Emelia Smith]
-
Improved alignment on Mastodon API changes about OAuth and apps. [#43 by Emelia Smith]
GET /api/v1/apps/verify_credentials
no longer requiresread
scope, just a valid access token (or client credential).POST /api/v1/apps
now supports multiple redirect URIs.redirect_uri
is deprecated, but software may still rely on it until they switch toredirect_uris
.- Expose
redirect_uri
,redirect_uris
, andscopes
to verify credentials for apps.
-
Added support for RFC 8414 for OAuth Authorization Server metadata endpoint. [#47 by Emelia Smith]
-
On creating a new account, the user now can choose to follow the official Hollo account.
-
Added a favicon.
-
Added
PORT
andALLOW_PRIVATE_ADDRESS
environment variables. [#53 by Helge Krueger]
Released on November 4, 2024.
- Fixed a bug where posts from some ActivityPub software (e.g., Misskey,
Sharkey, Akkoma) had empty
url
fields, causing them to be displayed incorrectly in client apps. [#58]
Released on October 30, 2024.
-
Fixed a bug where followers-only posts from accounts that had had set their follower lists to private had been recognized as direct messages. Even after upgrading to this version, such accounts need to be force-refreshed from the administration dashboard to fix the issue.
-
Fixed the federated (public) timeline showing the shared posts from the blocked or muted accounts.
-
Fixed the list timeline showing the shared posts from the blocked or muted accounts.
Released on October 30, 2024.
- Fixed the profile page showing the shared posts from the blocked or muted accounts.
Released on October 30, 2024.
- Fixed the home timeline showing the shared posts from the blocked or muted accounts.
Released on October 27, 2024.
- Fixed incorrect handling of relative path URIs in
Link
headers withrel=alternate
. This caused inoperability with some software such as GoToSocial. - It now sends
Delete(Person)
activity to followees besides followers when a user deletes their account.
Released on October 24, 2024.
- Fixed the last page in the profile using Moshidon leading to infinite pagination. [#48 by Emelia Smith]
Released on October 24, 2024.
- Upgrade Fedify to 1.1.1.
Released on October 22, 2024. Initial release.