v1.7.1

Welcome to version 1.7.1 of Mbin. A very packed Mbin release once again!

This version includes tons of fixes (too many to mention here, look at "What's Changed") and introduces also new features like: trusted proxy configuration (see also docs), activate accounts manually using the admin panel, show an error when the image is too large to upload (look at the latest .env template file), improved API end-points (isAdmin, isGlobalModerator is part of the user API, fixed AP context and more) as well as many documentation improvements.

Note: Due to a dead-lock issue in 1.7.0, which is now fixed in 1.7.1, we strongly recommend upgrading your Mbin server as soon as possible.

And as always, we would like to thank all the contributors and the Mbin community! We can't do it without you!

Comparison to previous stable version 1.7.0:

DB migrations	New ENV vars	Admin guide changes	Suggest cache clearing	New dependencies
☑️	☑️	☑️	☑️	❌

Upgrade Instructions

For Docker

1. Get the official image or checkout the code and build it locally
2. Stop all containers docker compose down
3. Start all containers docker compose up -d

For Bare Metal

1. Login as the mbin/kbin user: su mbin
2. Go to your repo cd /var/www/mbin
3. Get the new release: git fetch && git checkout v1.7.1
4. Run the update script: ./bin/post-upgrade. If you get an error when running the db migrations you maybe have to stop your webserver, so nothing is trying to access the database.
5. Run exit so we are back at the root user (or put a sudo in-front of every command)
6. Flush your Redis db by running redis-cli, type in AUTH [YOUR PASSWORD] and then FLUSHDB
7. Clear your opcache by reloading PHP-FPM systemctl reload php8.3-fpm (or for PHP 8.2: systemctl reload php8.2-fpm)
8. Restart the messengers: supervisorctl restart messenger:*

What's Changed

• Update docker php config to match bare metal guide by @jwr1 in #992
• docs(contributor): contributors readme action update by @github-actions in #993
• Update docker ini files to be a little more consistent with docs in #994
• Fix the error when saving the admin settings by @BentiGorlich in #997
• Add posting restricted to mods to the API by @BentiGorlich in #998
• Add user ban and suspension lists to admin panel in #995
• Translations update from Hosted Weblate by @weblate in #999
• Add user password set/reset command to bin/console in #1002
• Fix remove moderator api throwing error by @BentiGorlich in #1003
• Fix ActivityHandler errors regarding the payload by @BentiGorlich in #1004
• Fix the managers checking wrong fields for editing permissions by @BentiGorlich in #1005
• Allow admins to activate/verify accounts manually using the admin user panel in #1000
• Stop banned or suspended users from notification creation on posts and entries in #1007
• Invalidate collection cache before getting collection for likes, dislikes and shares by @BentiGorlich in #1008
• Bump version to 1.7.1-rc1 by @BentiGorlich in #1010
• add default null to Instance entity nullables field by @asdfzdfj in #1006
• Remove \intval around MAX_IMAGE_BYTES in src/Service/SettingsManager.php, breaks settings name resolution in #1011
• Add trusted proxy config to framework configuration in #1012
• Version bump for 1.7.1-rc2 in #1015
• Translations update from Hosted Weblate by @weblate in #1017
• Make the API return the server public key and add a dedicated route for it by @BentiGorlich in #1018
• Use the default when the value is zero by @BentiGorlich in #1020
• Add an image too large error by @BentiGorlich in #1019
• Revert "Make the API return the server public key and add a dedicated route for it" by @jwr1 in #1024
• Fix user getting deleted when unregistering push by @BentiGorlich in #1029
• Fix getAccessToken always returning null by @BentiGorlich in #1030
• docs(contributor): contributors readme action update by @github-actions in #1031
• Fix UserPushSubscriptionManager using wrong AccessToken type by @BentiGorlich in #1033
• Bump version to 1.7.1-rc3 by @BentiGorlich in #1027
• Fix 500 error when a thread is empty by @BentiGorlich in #1034
• Translations update from Hosted Weblate by @weblate in #1038
• Translations update from Hosted Weblate by @weblate in #1041
• Update PHP Dependencies by @BentiGorlich in #1037
• Fix user soft delete and user account restore within 30 days in #1013
• Change attributed to parsing to not expect a url by @BentiGorlich in #1035
• Add cascade delete to report.considered_by_id by @BentiGorlich in #1028
• Only match magazine by hashtag if post was in random by @BentiGorlich in #1036
• Fix error when updating an actor and the instance has no nodeinfo endpoint by @BentiGorlich in #1040
• Return only the host as audience for remote magazines by @BentiGorlich in #1039
• Bump Version to 1.7.1-rc4 by @BentiGorlich in #1042
• Add isAdmin and isGlobalModerator fields to user api response by @BentiGorlich in #1044
• Add field to all content response DTOs: canAuthUserModerate by @BentiGorlich in #1043
• Add missing checks for banned instance by @BentiGorlich in #1053
• actually building user agent in ProjectInfoService by @asdfzdfj in #1057
• push navbar front route generation into twig func by @asdfzdfj in #1058
• Fix AP context by @melroy89 in #1060
• Edit the contributing docs by @BentiGorlich in #1048
• Translations update from Hosted Weblate by @weblate in #1061
• Add a warning message when we hit the cache in post by @BentiGorlich in #1049
• Use different values for timeout and max_duration by @BentiGorlich in #1051
• Use a different cache key for activity object by @BentiGorlich in #1050
• Add the featured collection to the ap context by @BentiGorlich in #1065
• Update _form_media.html.twig by @TheVillageGuy in #1055
• docs(contributor): contributors readme action update by @github-actions in #1067
• Fix some leftover magazine undefined errors in the nav by @BentiGorlich in #1069
• chore: Create PR template in #1059
• Add installation filler by @melroy89 in #1074
• docs(contributor): contributors readme action update by @github-actions in #1075
• Translations update from Hosted Weblate by @weblate in #1076
• Update theme-dark.scss by @TheVillageGuy in #1062
• Fix messenger deadlocks caused by cache locks by @BentiGorlich in #1066
• Fix the regex, so FF is no longer complaining by @BentiGorlich in #1077
• Use the latest pipeline docker image by @melroy89 in #1078
• Use is defined on twig report notification objects by @melroy89 in #1080
• Bump the version to 1.7.1-rc5 by @BentiGorlich in #1079
• move private vars out of some services/handlers by @asdfzdfj in #1070
• Add error message to logger in case of invalid reg form submission by @melroy89 in #1082
• Translations update from Hosted Weblate by @weblate in #1081
• docs(contributor): contributors readme action update by @github-actions in #1084
• Do not stealth anti-spam error messages in log by @melroy89 in #1087
• Translations update from Hosted Weblate by @weblate in #1088
• Translations update from Hosted Weblate by @weblate in #1089
• Translations update from Hosted Weblate by @weblate in #1090
• Add trusted proxies to docs by @melroy89 in #1086
• Add missing link to C4.md by @melroy89 in #1094
• Update minor versions NPM packages by @melroy89 in #1092
• Improve anti-spam config a little by @melroy89 in #1091
• Remove dead kbin.run link in README by @melroy89 in #1096
• Preparing for new release: remove rc5 label by @melroy89 in #1093

New Contributors

• @jwr1 made their first contribution in #992

Full Changelog: v1.7.0...v1.7.1