In the wake of the compromise of the eMudhra Intermediate CA, we strongly encourage all Mastodon administrators to make sure their systems are up-to-date.

For those using our official Mastodon container images, we just rebuilt them (with the same tags) so they contain the latest updates to the list of CA certificates. Please update them as soon as possible.

For more information about this compromise and ways to check if your server is impacted, please read https://emudhra.we-have-a-problem.com

#mastoadmin

We just released Mastodon v4.7.3, v4.6.9, v4.5.19 and v4.4.26.

They contain many bugfixes in addition to updating some of our dependencies to fix security issues in those.

We recommend administrators to update when they can.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#mastoadmin

We are aware of an ongoing wave of subscription spam throughout the fediverse.

We are investigating avenues to mitigate this, but they will likely involve deep changes in the sign-up flow that may break sign-up from existing applications.

In the meantime, you can find helpful resources at https://about.iftas.org/2026/09/11/boom-protocol-spam/

#MastoAdmin

Poll for Mastodon administrators *who are not using containers/Docker* : how are you installing Ruby?

If other, please reply to explain how you do it, and why.

For context, we are looking at reducing the number of Ruby versions supported by Mastodon to reduce our maintenance burden (like supporting only Ruby 4.0 in the next version) and want to better understand the impact of such a decision.

#mastoadmin

We just released Mastodon v4.7.2, v4.6.8, v4.5.18 and v4.4.25.

In addition to several bugfixes, they disable HEIF processing to avoid a known critical security issues. We encourage server administrators to update as soon as possible.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

We just released Mastodon v4.7.1, v4.6.7, v4.5.17 and v4.4.24.

These include important security fixes.

We encourage server administrators to update as soon as possible, especially if you are using LDAP, PAM or an external SSO for user authentication.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

We just released Mastodon 4.7.0!

This version contains very few user-facing changes, but significantly reworks the backend code to improve security and support new protocol features.

You can read more about it on our blog: https://blog.joinmastodon.org/2026/08/mastodon-4.7/

Note for admins: the database migrations might take a long time, this is expected (see the release notes).

Release notes and upgrade instructions are available here: https://github.com/mastodon/mastodon/releases/tag/v4.7.0

#mastoadmin

We released the Release Candidate for Mastodon 4.7 today.

It contains very few user-facing changes, but significantly reworks the backend code to improve security and support new protocol features.

We plan to release the final 4.7 version next week, so if you like being on the edge please test this RC and send us your feedback!

The database migrations might take a long time, this is expected.

Release notes and upgrade instructions are available here: https://github.com/mastodon/mastodon/releases/tag/v4.7.0-rc.1

#mastoadmin

We just released Mastodon 4.6.6, 4.5.16 and 4.4.23.

They contain minor bug fixes and we advise server administrators to update when they can.

Full release notes and update instructions are available on the GitHub releases page. https://github.com/mastodon/mastodon/releases

#mastoadmin

📬 Trunk & Tidbits for July 2026 is now out!

Our monthly blog post series is there to showcase what we worked on last month.

In this edition, we welcome @jhbabon and highlight the many backend changes that were merged and will be part of our upcoming 4.7 release. Those include support for FEP-8b32, FEP 8967 and new algorithms, including ML-DSA-44 for post-quantum signatures.

https://blog.joinmastodon.org/2026/08/trunk-tidbits-july-2026/

#mastodev #mastoadmin #TrunkAndTidbits

We released the first beta for Mastodon 4.7 today. It contains very few user-facing changes, but contains significant reworks of the backend code to improve security and support new protocol features.

This update includes substantial database migrations that might take up to a couple of hours on very large servers, but will not cause downtime if the upgrade instructions are followed.

Release notes and upgrade instructions are available here: https://github.com/mastodon/mastodon/releases/tag/v4.7.0-beta.1

#mastoadmin

We just released Mastodon 4.6.5. It contains one important bug fix and we recommend every instance running 4.6 to update.

We are also releasing Mastodon v4.5.15 and v4.4.22 with minor bugfixes

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#mastoadmin

We just released Mastodon 4.6.4, 4.5.14 and 4.4.21.

Those updates include multiple security fixes, including fixes for two major issues.

We encourage server administrators to update as soon as possible, as one of the issues can expose PII of local users. We are investigating potential uses of this exploit and will soon share more information.

Full release notes and update instructions are available on the GitHub release page.

https://github.com/mastodon/mastodon/releases/v4.6.4

#MastoAdmin

We are planning to release new Mastodon security updates for versions 4.4, 4.5, 4.6 and nightly this Monday, Jul 27, at around 14:00 UTC.

It solves two major security issues.

We encourage server administrators to plan for an update in the hours following the release to ensure their instance is protected. These versions will not require database migrations.

#mastoadmin

📬 Trunk & Tidbits for June 2026 is now live!

Our monthly blog post series is there to showcase what we worked on last month.

In this edition, we are also discussing our official Helm Chart for Mastodon, for those of you who deploy Mastodon on Kubernetes. We released a brand new version of the chart in a new place, deprecating the existing one.

https://blog.joinmastodon.org/2026/07/trunk-tidbits-june-2026/

#mastodev #mastoadmin #TrunkAndTidbits

We just released Mastodon 4.6.3, containing several bug fixes.

Full release notes and update instructions are available on the GitHub release page.

https://github.com/mastodon/mastodon/releases/v4.6.3

#MastoAdmin

We just released Mastodon 4.6.2, 4.5.13 and 4.4.20. Those versions only update our container image to fix an important security issue in ffmpeg, which Mastodon uses to process videos.

If you do not use our container image, you may skip this update but you need to update your installed ffmpeg to a patched version (ffmpeg 8.1.2, 7.1.5, 6.1.6, or 5.1.10)

Full release notes and update instructions are available on the GitHub release page.

https://github.com/mastodon/mastodon/releases

#mastoadmin

We just released Mastodon 4.6.1. It contains several important bug fixes and we recommend every instance running 4.6.0 to update.

We are also releasing Mastodon v4.5.12 and v4.4.19 with small bugfixes and a fix to a critical security issue affecting servers using LDAP_TLS_NO_VERIFY=true.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#mastoadmin

The second release candidate for #Mastodon 4.6 is now out!

It addresses several issues found in 4.6.0-rc.1, and is expected to become 4.6.0 later this week.

You can see all the changes on the release page: https://github.com/mastodon/mastodon/releases/tag/v4.6.0-rc.2

If you are an admin, updating ahead of the full 4.6.0 release would be a great help to find and squash any last-minute bugs!

#MastoAdmin

For #Mastodon app developers and fellow #fediverse platform developers, with the approaching Mastodon 4.6 release we've put together an overview of new and changed APIs that you may want to look at! Collections, profile editing, #Wrapstodon, and more:

https://blog.joinmastodon.org/2026/06/mastodon-4-6-for-devs/