0.5.8

What's Changed

• Replace openssl with rustls #116 #118 (thanks @kwaa)
• Convert content-type to lowercase for comparison by @Nutomic in #114

New Contributors

• @kwaa made their first contribution in #115

Full Changelog: 0.5.6...0.5.8

0.5.6

What's Changed

• Make response content-type check case insensitive by @Nutomic in #111

Full Changelog: 0.5.5...0.5.6

0.5.5

What's Changed

• Dont crash when calling is_local_url() without domain by @Nutomic in #108
• Require signed digest when verifying signatures by @Nutomic in #109
• Upgrade dependencies by @Nutomic in #110

Full Changelog: 0.5.4...0.5.5

0.5.4

What's Changed

• Add function ObjectId.is_local in #106

Full Changelog: 0.5.3...0.5.4

0.5.3

What's Changed

• Retry activity send in case of timeout or rate limit in #102
• Allow fetching from local domain in case it redirects to remote in #104

Full Changelog: 0.5.2...0.5.3

0.5.2

What's Changed

• Get Mastodon signed fetch working by @Nutomic in #98
• Fix request_counter check because fetch_add returns original value by @Nutomic in #97

Full Changelog: 0.5.1...0.5.2

0.5.1

This version brings back the activity send queue which was removed in 0.5.0 as an optional feature. It also adds extra checks when fetching to prevent security issues like the ones recently revealed in Mastodon.

Changelog

• Fix return type for deserialize_one by @Nutomic in #93
• Add security checks when fetching objects by @Nutomic in #95
• Add back activity send queue as optional feature by @Nutomic in #94

Full Changelog: 0.5.0...0.5.1

0.5.0

This release consists mostly of bug fixes and minor improvements. Biggest change is the removal of the builtin federation queue as Lemmy implemented its own persistent queue. Now there is only a simple function sign_and_send, though we can consider readding an optional queue if there is demand.

Error handling has seen various improvements, so that applications can better handle failures. See the changelog below for details about all changes.

Changelog

• make time-zone aware by @phiresky in #62
• Use anyhow::Error for UrlVerifier return type (fixes #61) by @Nutomic in #65
• Add webfinger template field, used for remote follow by @Nutomic in #74
• Remove activity queue and add raw sending by @phiresky in #75
• Support fetches with redirect by @Nutomic in #76
• Support different alphabets in webfinger username by @Nutomic in #78
• Implement PartialEq for testing by @Nutomic in #81
• Remove anyhow from trait definitions by @cetra3 in #82
• Change impl of ObjectId::parse by @Nutomic in #84
• Upgrade dependencies by @Nutomic in #86
• Add diesel feature, add ObjectId::dereference_forced by @Nutomic in #88
• Webfinger: don't discard consumer errors by @sgued in #85
• Better error when activity receive fails by @Nutomic in #89
• Context doesnt have to be an array by @Nutomic in #90
• Better JSON error messages by @Nutomic in #91

New Contributors

• @sgued made their first contribution in #85

Full Changelog: 0.4.7...0.5.0

0.4.6

What's Changed

• fix: make "other" error actually transparent by @phiresky in #51
• Fix regex error when actix-web feature not enabled by @colatkinson in #56
• add a separate allow_http flag by @phiresky in #54
• add shutdown method by @phiresky in #53
• Fix tests by @Nutomic in #71
• Fix webfinger fetching non-compliance by @samueltardieu in #69
• Increase fetch_object max body size by @Nutomic in #72

New Contributors

• @phiresky made their first contribution in #51
• @colatkinson made their first contribution in #56
• @samueltardieu made their first contribution in #69

Full Changelog: 0.4.5...0.4.6

0.4.5

What's Changed

• Fix HTTP signature expiration (ref #46) by @Nutomic in #52

Full Changelog: 0.4.4...0.4.5