0.15.6

Added

Nothing!

Removed

• The long and unclear description of tootik, both in / and the help page

Bug Fixes, Performance and Maintenance

• /communities is now much faster on an instance with many known Group actors but few local ones
• Graph (like poll results) are more BiDi-friendly now: keys appear on separate lines if in Arabic or Hebrew
• Dependency and Go updates

0.15.5

Added

Nothing!

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• WebFinger lookup for a non-existing user now fails with 404 instead of returning an empty list of links
• Attempts to fetch public keys of deleted users now trigger the same user deleted flow as WebFinger lookups

0.15.4

Added

• Federation with GoToSocial should work now
• The "View profile" tool now supports the !group@domain syntax
  • (To support the edge case of a user and a group with the same name on one server)

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• Verification of incoming requests is faster now, because WebFinger is skipped when fetching keys
• When fetching a forwarded activity, the edge case of a Tombstone object is handled the same way as a HTTP 404
• Dependency and Go updates

0.15.3

Added

• Support for data export
  • A CSV file containing the latest 200 activities in raw ActivityPub form

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• Fix for slow transfer and frequent page redraws when the first chunk of the page takes >=100ms to send
• Fix for 400 from Pleroma's .well-known/webfinger
• Invalid Titan requests now redirect to the error page over Gemini
• Post upload now assumes text/plain if MIME type is unspecified
• Fix for activity validation error for Note inside Announce
• Fix for activity validation error for Delete inside Announce
• Dependency updates

0.15.2

Added

• Support for mandatory registration
  • When RequireRegistration is set to true, unauthenticated users can only view / or the help page
  • Only the Gemini listener is enabled when registration is mandatory

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• Improved and more efficient activity validation logic, with fewer errors
• More Mastodon-like links when posts are converted to HTML; this makes Mastodon's UI render tootik posts more like Mastodon posts
• Various code cleanups
• Go is updated to 1.23.5

0.15.1

Added

• Nothing!

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• Fix for empty Lemmy group outbox due to a typo that breaks handling of forwarded activities
• "Followed users" is now much faster when following an actor with many posts, like a Lemmy group
• Page contents are still buffered (on a line boundary, with a buffer size of 16 lines), but the buffer is now flushed after 100ms: this makes slow pages feel faster because the client shows the title while waiting for the content
• Activity IDs now use UUIDv7 instead of SHA-256
• Imports are now sorted the gopls way

0.15.0

Added

• The user's own posts now appear in the feed, immediately (#110)
• The pattern used to validate user names during registration is now configurable (#108)
• tootik now fetches forwarded activities from the server they originally came from, and enforces a same-origin policy on
  • Activities and the objects they act on
  • Posts and authors
  • Forwarded deletion events and the deleted objects
  • ...

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• More gopls fixes

0.14.1

Added

• Optional user and post counts in NodeInfo 2.0 response, off by default (FillNodeInfoUsage)
• Security hardening tips in the setup guide

Removed

Nothing!

Bug Fixes, Performance and Maintenance

• The direct dependency on golang.org/x/sync is dropped and context.Context aware locking is implemented using a buffered channel

0.14.0

Added

• Support for multiple client certificates
  • With list of certificates at /users/certificates, each with SHA-256 fingerprint and expiry date
    • Will show 2100-01-01 for certificates added before 0.14.0
    • With ability to approve or deny a newly added certificate, or revoke access for a previously approved certificate
• Validation of client certificate expiry date when authenticating
• Forwarding of Update and Delete activities
  • For replies in a thread started by a user with followers
  • For posts and replies in a community
• Result graphs for polls without any votes yet

Removed

• Ability to select the username duration registration and override what's in the CN property of the client certificate
  • Attempts to register with an existing username add the client certificate to the list of certificates waiting for the user's approval

Bug Fixes, Performance and Maintenance

• Poll results are updated to 0 when all votes are deleted
• Undo activities are sent to the recipients of the matching Create activities, plus current followers

0.13.0

Added

• Bookmarked posts
• Improved compatibility with Friendica and possibly other ActivityPub servers with Group actors
• More friendly error messages when profile changes are throttled

Removed

• Support for fetching public posts through the user's outbox endpoint: it seems unused

Bug Fixes, Performance and Maintenance

• The default configuration now makes sqlite run in synchronous=NORMAL mode
• The special "nobody" user is now of type Application, clearly marking it as an "instance actor"; this may improve compatibility with other implementations of ActivityPub
• Dependency and Go updates
• Reduction of gopls warnings