131
Lemmy Release v0.19.11 (join-lemmy.org)

What is Lemmy?

Lemmy is a self-hosted social link aggregation and discussion platform. It is completely free and open, and not controlled by any company. This means that there is no advertising, tracking, or secret algorithms. Content is organized into communities, so it is easy to subscribe to topics that you are interested in, and ignore others. Voting is used to bring the most interesting items to the top.

Changes

This release fixes a security vulnerability which allows an attacker to delete images uploaded by other users. You can read the details in the security advisory. Thanks to @Nothing4You for discovering and fixing it.

A new donation dialog is shown to users once per year, to help fund Lemmy development.

There are also various backports from the development branch. Importantly the "Private instance" setting can now be used with federation enabled. This way only logged-in users can browse posts and comments, which stops AI crawlers from overloading the server. Also moderators can now view votes in the post/comment options.

Backend

  • Remove unnecessary pictrs purge calls (#5566)
  • Donation dialog (#5559)
  • Send out email after registration denied, email confirmed (#5553)
  • Change private instance setting to allow federation (#5530)
  • Proxy post.url if it is an image (#5545)
  • When creating community copy allowed languages from creator profile (#5490)
  • Include image alt text in post search (#5449)
  • Add config option to enable json logging (#5471, #5557)
  • Embed images in RSS feeds (#5488)
  • Fix federation of sticky posts (#5593)
  • Deleted user shouldnt break federation outbox (#5443, #5573)
  • Fix some image embeds by escaping alt text (#5506)
  • Properly federate distinguish comment (#5586)
  • Increase default registration rate limit to 10 per hour (#5600)
  • Remove debug ratelimit being used in production (#5551)

Frontend

  • Implement donation dialog (#3034)
  • Hide images in private message reports (#3053)
  • Dont render images in private message (#3043)
  • Changed checkbox text "Only moderators can post to this community" from legend to label on the Create Community page (#3046)
  • Trigger toast error on community request failure (#3045)
  • Add local link next to fedilink on posts (#3033)
  • Add banned badges to post and comment listings (#3030)
  • Linkify user @ mentions (#3029)
  • Adding ability for mods to view votes. (#3027)
  • Upvote, downvote, view source, and favorite icons become larger when pressed to improve visibility on grayscale screens (#2960)
  • Improve colour contrast of the mini-overlay in the top right corner of link or image post thumbnails (#2961)
  • Improve screenreader accessibility by adding a main element to more pages (issue #2891) (#2944)
  • Using input group for allowed and block instance buttons. (#2905)
  • Moving totp and delete account settings into their own cards. (#2907)
  • Hide NSFW field for create post form, for NSFW communities. (#2887)
  • Modify the logic for appending the URL after uploading an image, placing the image URL after the cursor. (#2804)

Upgrade instructions

There are no breaking changes with this release.

Follow the upgrade instructions for ansible or docker.

If you need help with the upgrade, you can ask in our support forum or on the Matrix Chat.

Thanks to everyone

We'd like to thank our many contributors and users of Lemmy for coding, translating, testing, and helping find and fix bugs. We're glad many people find it useful and enjoyable enough to contribute.

Support development

We are able to develop Lemmy as an open source platform free of tracking and ads thanks to the generosity of our users. Once a year we ask you to consider donating to support our work. Financial security allows us to continue maintaining and improving the platform. If you’d like to make a one-time or recurring donation simply use the links below. Thank you for using Lemmy.

Nutomic and Dessalines, Lemmy Developers

top 31 comments
sorted by: hot top controversial new old
[-] umbrella@lemmy.ml 4 points 2 days ago

allows an attacker to delete images uploaded by other users

this is a feature not a bug, depending on what cursed stuff the other users have been posting.

i jest, thanks for another update!

[-] bdonvr@thelemmy.club 26 points 4 days ago

Thanks for the the hard work

[-] dessalines@lemmy.ml 8 points 4 days ago
[-] eldavi@lemmy.ml 21 points 4 days ago

so many people use lemmy now that i'm surprised that it's still at major version 0.

what's your threshold for reaching version 1?

[-] dessalines@lemmy.ml 34 points 4 days ago

v1.0 is mainly about finalizing the API, which is mostly done now. We still have a few issues to finish for the 1.0.0 release, but this is likely still months away due to the need for apps to handle the breaking changes, and get caught up on features.

Even though this is our first stable release, people should remember also that lemmy isn't an enterprise product; its free software developed by a small number of volunteers.

[-] geneva_convenience@lemmy.ml 1 points 2 days ago

If we are close to 1.0 why is the api at 0.19? It should be named v0.999almostproductionforrealthistime.

[-] dessalines@lemmy.ml 2 points 2 days ago

Massive differences and breaking changes between the two versions. We've been having to backport fixes for months now.

[-] bdonvr@thelemmy.club 15 points 4 days ago

1.0 is planned to release later this year with new features. They're testing it right now on https://voyager.lemmy.ml/ (though it seems to be down at the moment)

The details I can see right now are mostly technical but I'm sure we'll get a prettier list of features as release gets closer.

https://join-lemmy.org/news/2025-02-03_-_Breaking_Changes_in_Lemmy_1.0

[-] CARCOSA@hexbear.net 19 points 4 days ago

Thank you for you and all the developers hard work!

[-] Hansae@lemmy.dbzer0.com 2 points 2 days ago

Thanks for all the work Desaa, when I get paid ill try and throw a few coins your way.

[-] Blaze@lemmy.dbzer0.com 14 points 4 days ago

Well done, especially the feature allowing mods to see votes!

[-] FrostyTrichs@crazypeople.online 10 points 4 days ago

Thanks for all you and the team do for Lemmy. We've updated and everything looks good.

[-] dessalines@lemmy.ml 3 points 4 days ago

Good to hear.

[-] shortwavesurfer@lemmy.zip 8 points 4 days ago

Will the donation dialog be served over the API? Because I use the Thunder mobile app and hardly ever go to the web interface at all.

[-] dessalines@lemmy.ml 10 points 4 days ago

The donation popup has an API to mark that its been seen for your user, as well as a last_donation_notification date that comes back as part of MyUser. This is tied to your user so it can sync across all apps.

[-] leaf@lemmy.blahaj.zone 10 points 4 days ago

You wouldn’t see it in the client unless the third-party developer implements it.

[-] thelastaxolotl@hexbear.net 8 points 4 days ago

meow-fiesta thanks for all the work you do

[-] dessalines@lemmy.ml 6 points 4 days ago
[-] leaf@lemmy.blahaj.zone 7 points 4 days ago

Thank you for this great update! I see many big fixes!

[-] ace@lemmy.ananace.dev 6 points 4 days ago

Thank you so much, especially for the private instance improvement.

It's sad when it's revealing that ~80% of all traffic to my home instance is garbage.

[-] wiki_me@lemmy.ml 5 points 4 days ago

Implement donation dialog

isn't it suppose to pop up for me? i see nothing.

so far no change on the reported donations when comparing to previous reporting which is actually down.

maybe have somewhere a dashboard graph of something like "revenue per 1k active users".

active users are higher then on march 2024 yet donation are down from 3,9K to 2.3K.

[-] dessalines@lemmy.ml 7 points 4 days ago

Right now it will randomly pop up once a year, different for every user.

so far no change on the reported donations when comparing to previous reporting which is actually down.

We had this automated, but patreon blocked our IP, so I'll update it manually rn, and try to do that at least once a month.

[-] wiki_me@lemmy.ml 1 points 3 days ago

We had this automated, but patreon blocked our IP, so I’ll update it manually rn, and try to do that at least once a month.

Did you try sending them an email or opening a issue asking them to to whitelist the IP? . this is completely unreasonable. you are a paying customer.

graphtreon is making a ton of requests so i think there should not be a problem. or maybe you could parse graphtreon instead.

You could create a repository with just this data and be liberal when giving out access.

[-] dessalines@lemmy.ml 0 points 2 days ago

Graphtreon says their API is $760 / month.

Patreon isn't going to do anything for us specifically. They have a proper auth API, its just a lot of work to get plugged into it, when we only need a few data points.

[-] wiki_me@lemmy.ml 1 points 2 days ago

Graphtreon says their API is $760 / month.

didn't even know they have a API. i meant parsing the HTML with something like selenium, there are probably lighter options. if you will do this once a day or week i can't see why your API should be blocked (its like some developer repeatedly checking that in his browser).

Patreon isn’t going to do anything for us specifically

They probably make something like 80 dollar a month of you. maybe a tech support representative just needs to input your IP to their system. it takes a couple of minutes for someone who makes about $20 an hour so not unreasonable . especially if you will warn/threaten them that you will remove patreon.

[-] mooncake@lemm.ee 1 points 3 days ago

This is all great but we need an easier way to find out what communities I am in charge of, it's tedious right now

[-] dessalines@lemmy.ml 2 points 2 days ago

Go to your profile page to see what communities you moderate. It also shows in jerboa.

[-] mooncake@lemm.ee 2 points 2 days ago

Ok nice i see that I use the Voyager app on Android and there's no real way was to see

[-] aeharding@vger.social 2 points 2 days ago* (last edited 2 days ago)

You can see communities you nod at the top of the communities list of the post tab.

this post was submitted on 08 Apr 2025
131 points (100.0% liked)

Announcements

2 readers
4 users here now

Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.

You can also find major news on join-lemmy.org

founded 5 years ago
MODERATORS