develop-v4.6.0-rc.2-ls156

CI Report:

N/A

LinuxServer Changes:

• Rebase to 3.24 (develop) by @thespad in #138

Full Changelog: develop-v4.6.0-rc.2-ls155...develop-v4.6.0-rc.2-ls156

Remote Changes:

Data change at JSON endpoint https://api.github.com/repos/mastodon/mastodon/releases

v4.6.3-ls200

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v4.6.2-ls199...v4.6.3-ls200

Remote Changes:

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires assets recompilation

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

• Update dependencies

Added

• Add “Update available” navigation item at top of navbar when new Mastodon versions are available (#39705 by @ClearlyClaire)
• Add rendering of post images in emails (#39636 by @diondiondion)

Fixed

• Fix “view collection” menu item appearing on collection page (#39694 by @mkljczk)
• Fix incorrect filter cache key sometimes causing incorrect filters to be applied (#39698 by @ClearlyClaire)
• Fix missing to_json to publish announcement reaction worker (#39685 by @mjankowski)
• Fix duplicate "clear" button shown in main search input in Chrome (#39679 by @diondiondion)
• Fix visual glitch with the spoiler button (#39677 by @ChaosExAnima)
• Fix invisible username during post highlight animation (#39659 by @diondiondion)
• Fix follow button floating on profiles when overview landing page is enabled (#39650 by @FFederi)
• Fix encryption warning "read more" link (#39635 by @thomas-pike)
• Fix tootctl media lookup failing on some setups (#39615 by @brookmiles)
• Fix visible transparent navigation link borders in Windows forced-contrast mode (#39614 by @diondiondion)
• Fix crash with some browser extensions injecting custom elements in the page (#39507 by @OriginalRoOhi)

Upgrade notes

To get the code for v4.6.3, use git fetch && git checkout v4.6.3.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.2.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

Non-Docker

Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.
If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

1. Install dependencies with bundle install and yarn install --immutable
2. Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile
3. Restart all Mastodon processes.

When using Docker

1. Restart all Mastodon processes.

glitch-v4.6.3-ls339

CI Report:

N/A

LinuxServer Changes:

Full Changelog: glitch-v4.6.2-ls338...glitch-v4.6.3-ls339

Remote Changes:

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires assets recompilation

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

• Update dependencies

Added

• Add “Update available” navigation item at top of navbar when new Mastodon versions are available (#39705 by @ClearlyClaire)
• Add rendering of post images in emails (#39636 by @diondiondion)

Fixed

• Fix “view collection” menu item appearing on collection page (#39694 by @mkljczk)
• Fix incorrect filter cache key sometimes causing incorrect filters to be applied (#39698 by @ClearlyClaire)
• Fix missing to_json to publish announcement reaction worker (#39685 by @mjankowski)
• Fix duplicate "clear" button shown in main search input in Chrome (#39679 by @diondiondion)
• Fix visual glitch with the spoiler button (#39677 by @ChaosExAnima)
• Fix invisible username during post highlight animation (#39659 by @diondiondion)
• Fix follow button floating on profiles when overview landing page is enabled (#39650 by @FFederi)
• Fix encryption warning "read more" link (#39635 by @thomas-pike)
• Fix tootctl media lookup failing on some setups (#39615 by @brookmiles)
• Fix visible transparent navigation link borders in Windows forced-contrast mode (#39614 by @diondiondion)
• Fix crash with some browser extensions injecting custom elements in the page (#39507 by @OriginalRoOhi)

Upgrade notes

To get the code for v4.6.3, use git fetch && git checkout v4.6.3.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.2.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

Non-Docker

Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.
If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

1. Install dependencies with bundle install and yarn install --immutable
2. Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile
3. Restart all Mastodon processes.

When using Docker

1. Restart all Mastodon processes.

v4.6.2-ls199

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v4.6.1-ls198...v4.6.2-ls199

Remote Changes:

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images.

If you are not using our docker container images, please make sure your system FFmpeg is updated to a fixed version, that is, 8.1.2, 7.1.5, 6.1.6, or 5.1.10.

For the recently released v4.6.1, see 4.6.1 release notes for information.

Changelog

Security

• Update FFMpeg version used in the container image to fix CVE-2026-8461 (critical severity)

Upgrade notes

To get the code for v4.6.2, use git fetch && git checkout v4.6.2.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.1.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

1. Restart all Mastodon processes.

glitch-v4.6.2-ls338

CI Report:

N/A

LinuxServer Changes:

Full Changelog: glitch-v4.6.1-ls337...glitch-v4.6.2-ls338

Remote Changes:

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images.

If you are not using our docker container images, please make sure your system FFmpeg is updated to a fixed version, that is, 8.1.2, 7.1.5, 6.1.6, or 5.1.10.

For the recently released v4.6.1, see 4.6.1 release notes for information.

Changelog

Security

• Update FFMpeg version used in the container image to fix CVE-2026-8461 (critical severity)

Upgrade notes

To get the code for v4.6.2, use git fetch && git checkout v4.6.2.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.1.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

1. Restart all Mastodon processes.

develop-v4.6.0-rc.2-ls155

CI Report:

N/A

LinuxServer Changes:

Full Changelog: develop-v4.6.0-rc.2-ls154...develop-v4.6.0-rc.2-ls155

Remote Changes:

Data change at JSON endpoint https://api.github.com/repos/mastodon/mastodon/releases

develop-v4.6.0-rc.2-ls154

CI Report:

N/A

LinuxServer Changes:

Full Changelog: develop-v4.6.0-rc.2-ls153...develop-v4.6.0-rc.2-ls154

Remote Changes:

Data change at JSON endpoint https://api.github.com/repos/mastodon/mastodon/releases

v4.6.2-ls198

CI Report:

N/A

LinuxServer Changes:

No changes

Remote Changes:

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images.

If you are not using our docker container images, please make sure your system FFmpeg is updated to a fixed version, that is, 8.1.2, 7.1.5, 6.1.6, or 5.1.10.

For the recently released v4.6.1, see 4.6.1 release notes for information.

Changelog

Security

• Update FFMpeg version used in the container image to fix CVE-2026-8461 (critical severity)

Upgrade notes

To get the code for v4.6.2, use git fetch && git checkout v4.6.2.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.1.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

1. Restart all Mastodon processes.

v4.6.1-ls198

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v4.6.0-ls197...v4.6.1-ls198

Remote Changes:

This is a patch release for 4.6.

Check out the 4.6.0 release notes for information.

Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ Requires assets recompilation

For more information, view the complete release notes and scroll down to the upgrade instructions section.

Changelog

Security

• Update dependencies

Added

• Add avatar_description and header_description to /api/v1/accounts/update_credentials (#39547 and #39574 by @ClearlyClaire and @mkljczk)
  • This is available starting from Mastodon API version 11 and intended to provide an easier implementation path for clients implementing a similar feature in forks.
  • The new /api/v1/profile API remains the recommended API for setting avatar and header description as well as other profile values.

Fixed

• Fix combobox menu not closing after a selection (#39595 by @diondiondion)
• Fix Emoji IndexedDB upgrades when multiple tabs are open (#39576 by @ChaosExAnima)
• Fix combobox listbox not scrolling up when new suggestions have loaded (#39588 by @diondiondion)
• Fix media modal navigation in RTL languages (#39587 by @diondiondion)
• Fix accounts not visible in collection editor in advanced web interface (#39586 by @diondiondion)
• Fix error on login with certain LDAP configurations (#39571 by @oneiros)
• Fix simplified layout applying to other pages in web UI (#39570 by @Gargron)
• Fix emoji database loading in web worker (#39558 and #39562 by @ChaosExAnima)
• Fix display name length limit being incorrectly enforced in web UI (#39499 by @shleeable)
• Fix advanced UI columns not using mobile styles (#39528 by @diondiondion)
• Fix "private mention" post heading overlapping thread line (#39521 and #39554 by @diondiondion)
• Fix misattribution of remote featured collections in some cases (#39523, #39525, and #39550 by @oneiros)
• Fix custom profile field overflow (#39513 by @diondiondion)
• Fix fetching unknown key when it's not the actor's first, and add error handling for unavailable keys (#39512 by @ClearlyClaire)

Upgrade notes

To get the code for v4.6.1, use git fetch && git checkout v4.6.1.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

ImageMagick removal and libvips replacement

ImageMagick has been deprecated since Mastodon 4.4.0 and is now unsupported. If you used MASTODON_USE_LIBVIPS=false, this will be ignored and you will need to install libvips.

Theming system changes

The theming system has changed substantially, changing how light and dark themes work, as well as high-contrast. We also overhauled the whole theme to use design tokens and CSS variables.

Custom themes will most likely require significant changes to work with Mastodon 4.6.0.

If you are a theme author, please see our documentation at https://docs.joinmastodon.org/dev/frontend/theming/ and https://docs.joinmastodon.org/dev/frontend/design-tokens/

Email subscription feature and additional costs

Mastodon 4.6 introduces a new feature that lets users turn their public posts into mailing lists. This can result in an increased amount of sent emails and thus increased costs.

This feature needs to be enabled by a Mastodon user with administrator privileges, then opted-in by individual users.

In situations where the Mastodon administrators and the people hosting the server are not the same people, such as providers that offer Mastodon as a service, the system administrators may want to disable this feature. This can be done by setting the DISABLE_EMAIL_SUBSCRIPTIONS environment variable to true.

Update steps

The following instructions are for updating from 4.6.0.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

Non-Docker

Tip

The charlock_holmes gem may fail to build on some systems with recent versions of gcc.
If you run into this issue, try BUNDLE_BUILD__CHARLOCK_HOLMES="--with-cxxflags=-std=c++17" bundle install.

1. Install dependencies with bundle install and yarn install --immutable
2. Precompile the assets: RAILS_ENV=production bundle exec rails assets:precompile
3. Restart all Mastodon processes.

When using Docker

1. Restart all Mastodon processes.

glitch-v4.6.2-ls337

CI Report:

N/A

LinuxServer Changes:

No changes

Remote Changes:

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images.

If you are not using our docker container images, please make sure your system FFmpeg is updated to a fixed version, that is, 8.1.2, 7.1.5, 6.1.6, or 5.1.10.

For the recently released v4.6.1, see 4.6.1 release notes for information.

Changelog

Security

• Update FFMpeg version used in the container image to fix CVE-2026-8461 (critical severity)

Upgrade notes

To get the code for v4.6.2, use git fetch && git checkout v4.6.2.

Note

As always, make sure you have backups of the database before performing any upgrades. If you are using docker-compose, this is how a backup command might look: docker exec mastodon_db_1 pg_dump -Fc -U postgres postgres > name_of_the_backup.dump

Dependencies

External dependencies have not changed since v4.6.0.

• Ruby: 3.3 or newer
• PostgreSQL: 14 or newer
• Elasticsearch (recommended, for full-text search): 7.x (OpenSearch should also work)
• LibreTranslate (optional, for translations): 1.3.3 or newer
• Redis: 7.0 or newer
• Node: 22 or newer
• libvips: 8.13 or newer
• FFMpeg: 5.1 or newer

Update steps

The following instructions are for updating from 4.6.1.

If you are upgrading directly from an earlier release, please carefully read the upgrade notes for the skipped releases as well, as they often require extra steps such as database migrations. In particular, it is very important to read the 4.6.0 release notes.

1. Restart all Mastodon processes.