Pleroma minor/security release: 2.5.1

Pleroma 2.5.1 is a minor and security release with some bugfixes. Notably, uploading through the HTTP API can no longer create subdirectories in the upload directory.

Upgrade notes

From source only

1. Get new dependencies and recompile Pleroma:

   MIX_ENV=prod mix deps.get
   MIX_ENV=prod mix compile
   

Everyone

1. Restart Pleroma

Frontend changes

Fixed

• Checkboxes in settings can now work with screenreaders
• Autocomplete in edit boxes can now work with screenreaders
• Status interact buttons now have focus indicator for anonymous users
• Top bar buttons now correctly have text labels
• It is now possible to register if the site admin requires birthday to register
• User cards from search results will correctly popup
• Fix notification attachment icon overflow
• Editing mute words is less laggy
• Repeater’s name will no longer mess up with the directionality of the text sitting on the same line
• Unauthenticated access will give better error messages
• It is now easier to close the media viewer with a mouse when there is only one image
• Deleting profile fields can work properly
• Clicking the react button will correctly focus the search box
• Clicking buttons on the top-bar will no longer bring you to the top of the page
• Emoji picker is much faster to load
• blockquotes have a better display style
• Announcements posting and editing are now available to everyone with such a privilege, not just admins
• Adding or removing list members will actually work
• Emojis without a pack are now correctly displayed in emoji picker
• Changing notification settings will actually work

Added

• You can now set and see birthdays
• Optional confirmation dialogs when performing various actions
• You can now set fallback languages

Backend changes

Added

• Allow customizing instance languages

Fixed

• Security: uploading HTTP endpoint can no longer create directories in the upload dir (internal APIs, like backup, still can do it.)
• ~ character in urls in Markdown posts are handled properly
• Exiftool upload filter will now ignore SVG files
• Fix block_from_stranger setting
• Fix rel="me”
• Docker images will now run properly
• Fix inproper content being cached in report content
• Notification filter on object content will not operate on the ones that inherently have no content
• ZWNJ and double dots in links are parsed properly for Plain-text posts
• OTP releases will work on systems with a newer libcrypt
• Errors when running Exiftool.ReadDescription filter will not be filled into the image description

Admin Frontend changes

None