From 4d89904bb3ad3e9a936d2071c4dfc4de003f5a36 Mon Sep 17 00:00:00 2001 From: Daniel Dizdarevic Date: Sun, 18 Aug 2024 17:22:16 +0200 Subject: [PATCH] Upgrade to Mastodon 4.2.11 --- .github/workflows/commands.yaml | 1 + RELEASE.md | 12 ++++++------ snap/snapcraft.yaml | 6 +++--- 3 files changed, 10 insertions(+), 9 deletions(-) diff --git a/.github/workflows/commands.yaml b/.github/workflows/commands.yaml index 0b3fea2..4b5abb2 100644 --- a/.github/workflows/commands.yaml +++ b/.github/workflows/commands.yaml @@ -50,6 +50,7 @@ jobs: needs: - build - test + runs-on: ubuntu-latest steps: - uses: ./.github/actions/release with: diff --git a/RELEASE.md b/RELEASE.md index efb79d2..daddef7 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -1,17 +1,17 @@ -# Unofficial snap for Mastodon 4.2.10 +# Unofficial snap for Mastodon 4.2.11 ⚠️ This release is an important security release fixing a major security issue. -See also the release notes for Mastodon: https://github.com/mastodon/mastodon/releases/tag/v4.2.10 +See also the release notes for Mastodon: https://github.com/mastodon/mastodon/releases/tag/v4.2.11 This release contains: -* Mastodon 4.2.10 +* Mastodon 4.2.11 * Node 16.20.2 (see [#25787](https://github.com/mastodon/mastodon/discussions/25787#discussioncomment-6382898)) * Ruby 3.2.3 * Bundle 2.4.13 * Yarn 1.22.22 -* Nginx 1.27.0 +* Nginx 1.27.1 * PostgreSQL 16.4 * Redis 7.4.0 * Acme.sh 3.0.7 @@ -24,6 +24,6 @@ This release contains: * mastodon-bird-ui 1.8.5 * tangerine-ui 1.9.5 -Changelog for 4.2.10snap5: +Changelog for 4.2.11snap1: -* ⚠️ Upgrade to PostgreSQL 16.4 due to CVE-2024-7348 (see https://www.postgresql.org/support/security/CVE-2024-7348) +* Upgrade nginx to 1.27.1 diff --git a/snap/snapcraft.yaml b/snap/snapcraft.yaml index 13b9cd8..af90be7 100644 --- a/snap/snapcraft.yaml +++ b/snap/snapcraft.yaml @@ -9,7 +9,7 @@ description: | implements ActivityPub!) base: core20 -version: 4.2.10snap5 +version: 4.2.11snap1 grade: stable confinement: strict @@ -358,8 +358,8 @@ parts: after: - nginx-customizations # NOTE: https://nginx.org/en/download.html (mainline version) - source: https://nginx.org/download/nginx-1.27.0.tar.gz - source-checksum: sha256/b7230e3cf87eaa2d4b0bc56aadc920a960c7873b9991a1b66ffcc08fc650129c + source: https://nginx.org/download/nginx-1.27.1.tar.gz + source-checksum: sha256/bd7ba68a6ce1ea3768b771c7e2ab4955a59fb1b1ae8d554fedb6c2304104bdfc plugin: autotools build-environment: - PATH: $SNAPCRAFT_STAGE/nginx/bin:$PATH