Update ghcr.io/mastodon/mastodon Docker tag to v4.2.5 (#38)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/mastodon/mastodon](https://github.com/mastodon/mastodon) |
patch | `v4.2.1` -> `v4.2.5` |
| [ghcr.io/mastodon/mastodon](https://github.com/mastodon/mastodon) |
patch | `4.2.1` -> `v4.2.5` |

---

### Release Notes

<details>
<summary>mastodon/mastodon (ghcr.io/mastodon/mastodon)</summary>

###
[`v4.2.5`](https://github.com/mastodon/mastodon/releases/tag/v4.2.5)

[Compare
Source](https://github.com/mastodon/mastodon/compare/v4.2.4...v4.2.5)

<h1><picture>
<source media="(prefers-color-scheme: dark)"
srcset="./lib/assets/wordmark.dark.png?raw=true">
<source media="(prefers-color-scheme: light)"
srcset="./lib/assets/wordmark.light.png?raw=true">
<img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true"
height="34">
</picture></h1>

> **:warning: This release is an important security release fixing a
critical security issue (CVE-2024-23832).**
>
> Corresponding security releases are available for the [4.1.x
branch](https://github.com/mastodon/mastodon/releases/tag/v4.1.13),
the [4.0.x
branch](https://github.com/mastodon/mastodon/releases/tag/v4.0.13) and
the [3.5.x
branch](https://github.com/mastodon/mastodon/releases/tag/v3.5.17).

> If you are using nightly builds, **do not use this release** but
update to `nightly.2024-02-02-security` or newer instead. If you are on
the `main` branch, update to the latest commit.

#### Changelog

##### Security

- Fix insufficient origin validation (CVE-2024-23832,
[GHSA-3fjr-858r-92rw](https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw))

#### Upgrade notes

To get the code for v4.2.5, use `git fetch && git checkout v4.2.5`.

> As always, **make sure you have backups of the database before
performing any upgrades**. If you are using docker-compose, this is how
a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U
postgres postgres > name_of_the_backup.dump`

##### Dependencies

With the exception of Ruby's recommended version, external dependencies
have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node,
Elasticsearch and Redis versions are the same, that is:

-   Ruby: 3.0 to 3.2
-   PostgreSQL: 10 or newer
- Elasticsearch (recommended, for full-text search): 7.x (OpenSearch
should also work)
-   LibreTranslate (optional, for translations): 1.3.3 or newer
-   Redis: 4 or newer
-   Node: 16 or newer
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your
installed ImageMagick version is older than the new minimum version
(6.9.7-7), for example if you are running Ubuntu 18.04. If this happens,
you can find more information and ways to fix it [on this
page](https://github.com/mastodon/mastodon/issues/25776).

##### Update steps

The following instructions are for updating from 4.2.4.

If you are upgrading directly from an earlier release, please carefully
read the upgrade notes for the skipped releases as well, as they often
require extra steps such as database migrations.

**Non-Docker only:**

1. Install dependencies: `bundle install` and `yarn install
--frozen-lockfile`
2.  Restart all Mastodon processes

**Using Docker:**

1.  Restart all Mastodon processes

###
[`v4.2.4`](https://github.com/mastodon/mastodon/releases/tag/v4.2.4)

[Compare
Source](https://github.com/mastodon/mastodon/compare/v4.2.3...v4.2.4)

<h1><picture>
<source media="(prefers-color-scheme: dark)"
srcset="./lib/assets/wordmark.dark.png?raw=true">
<source media="(prefers-color-scheme: light)"
srcset="./lib/assets/wordmark.light.png?raw=true">
<img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true"
height="34">
</picture></h1>

This is a bugfix release for the 4.2.0 version, if you're installing
from an earlier version, please check the [4.2.0 release
notes](https://github.com/mastodon/mastodon/releases/tag/v4.2.0) as
they contain important information on how to update.

#### Upgrade overview

This release contains upgrade notes that deviate from the norm:

ℹ️ The recommended Ruby version has changed from 3.2.2 to 3.2.3

For more information, scroll down to the upgrade instructions section.

#### Changelog

##### Fixed

- Fix error when processing remote files with unusually long names
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28823))
- Fix processing of compacted single-item JSON-LD collections
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28816))
- Retry 401 errors on replies fetching
([ShadowJonathan](https://github.com/mastodon/mastodon/pull/28788))
- Fix `RecordNotUnique` errors in LinkCrawlWorker
([tribela](https://github.com/mastodon/mastodon/pull/28748))
- Fix Mastodon not correctly processing HTTP Signatures with query
strings
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28443),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/28476))
- Fix potential redirection loop of streaming endpoint
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28665))
- Fix streaming API redirection ignoring the port of
`streaming_api_base_url`
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28558))
- Fix error when processing link preview with an array as `inLanguage`
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28252))
- Fix unsupported time zone or locale preventing sign-up
([Gargron](https://github.com/mastodon/mastodon/pull/28035))
- Fix "Hide these posts from home" list setting not refreshing when
switching lists
([brianholley](https://github.com/mastodon/mastodon/pull/27763))
- Fix missing background behind dismissable banner in web UI
([Gargron](https://github.com/mastodon/mastodon/pull/27479))
- Fix line wrapping of language selection button with long locale codes
([gunchleoc](https://github.com/mastodon/mastodon/pull/27100),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/27127))
- Fix `Undo Announce` activity not being sent to non-follower authors
([MitarashiDango](https://github.com/mastodon/mastodon/pull/18482))
- Fix N+1s because of association preloaders not actually getting called
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28339))
- Fix empty column explainer getting cropped under certain conditions
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28337))
- Fix `LinkCrawlWorker` error when encountering empty OEmbed response
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28268))
- Fix call to inefficient `delete_matched` cache method in domain blocks
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28367))

##### Security

- Add rate-limit of TOTP authentication attempts at controller level
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/28801))

#### Upgrade notes

To get the code for v4.2.4, use `git fetch && git checkout v4.2.4`.

> As always, **make sure you have backups of the database before
performing any upgrades**. If you are using docker-compose, this is how
a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U
postgres postgres > name_of_the_backup.dump`

##### Dependencies

With the exception of Ruby's recommended version, external dependencies
have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node,
Elasticsearch and Redis versions are the same, that is:

-   Ruby: 3.0 to 3.2
-   PostgreSQL: 10 or newer
- Elasticsearch (recommended, for full-text search): 7.x (OpenSearch
should also work)
-   LibreTranslate (optional, for translations): 1.3.3 or newer
-   Redis: 4 or newer
-   Node: 16 or newer
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your
installed ImageMagick version is older than the new minimum version
(6.9.7-7), for example if you are running Ubuntu 18.04. If this happens,
you can find more information and ways to fix it [on this
page](https://github.com/mastodon/mastodon/issues/25776).

##### Update steps

The following instructions are for updating from 4.2.3.

If you are upgrading directly from an earlier release, please carefully
read the upgrade notes for the skipped releases as well, as they often
require extra steps such as database migrations.

**Non-Docker only:**

0. If you are using `rbenv`, [update the list of available
versions](https://github.com/rbenv/ruby-build/wiki#updating-ruby-build)
and install Ruby 3.2.3 by doing `RUBY_CONFIGURE_OPTS=--with-jemalloc
rbenv install` in the Mastodon install directory (e.g.
`/home/mastodon/live`)
1. Install dependencies: `bundle install` and `yarn install
--frozen-lockfile`
2. Precompile the assets: `RAILS_ENV=production bundle exec rails
assets:precompile`
3.  Restart all Mastodon processes

**Using Docker:**

1.  Restart all Mastodon processes

###
[`v4.2.3`](https://github.com/mastodon/mastodon/releases/tag/v4.2.3)

[Compare
Source](https://github.com/mastodon/mastodon/compare/v4.2.2...v4.2.3)

<h1><picture>
<source media="(prefers-color-scheme: dark)"
srcset="./lib/assets/wordmark.dark.png?raw=true">
<source media="(prefers-color-scheme: light)"
srcset="./lib/assets/wordmark.light.png?raw=true">
<img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true"
height="34">
</picture></h1>

This is a rerelease of the 4.2.2 bugfix release, as a dependency used by
Mastodon 4.2.0 through 4.2.2 has been removed. If you are installing
from a version earlier than 4.2.0, please check the [4.2.0 release
notes](https://github.com/mastodon/mastodon/releases/tag/v4.2.0) as
they contain important information on how to update.

##### Changelog (v4.2.3)

##### Fixed

- Fix dependency on `json-canonicalization` version that has been made
unavailable since last release

##### Changelog (v4.2.2)

##### Changed

- Change dismissed banners to be stored server-side
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27055))
- Change GIF max matrix size error to explicitly mention GIF files
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27927))
- Change `Follow` activities delivery to bypass availability check
([ShadowJonathan](https://github.com/mastodon/mastodon/pull/27586))
- Change single-column navigation notice to be displayed outside of the
logo container
([renchap](https://github.com/mastodon/mastodon/pull/27462),
[renchap](https://github.com/mastodon/mastodon/pull/27476))
- Change Content-Security-Policy to be tighter on media paths
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/26889))
- Change post language code to include country code when relevant
([gunchleoc](https://github.com/mastodon/mastodon/pull/27099),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/27207))

##### Fixed

- Fix upper border radius of onboarding columns
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27890))
- Fix incoming status creation date not being restricted to standard
ISO8601
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27655),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/28081))
- Fix some posts from threads received out-of-order sometimes not being
inserted into timelines
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27653))
- Fix posts from force-sensitized accounts being able to trend
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27620))
- Fix error when trying to delete already-deleted file with OpenStack
Swift
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27569))
- Fix batch attachment deletion when using OpenStack Swift
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27554))
- Fix processing LDSigned activities from actors with unknown public
keys
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27474))
- Fix error and incorrect URLs in `/api/v1/accounts/:id/featured_tags`
for remote accounts
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27459))
- Fix report processing notice not mentioning the report number when
performing a custom action
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27442))
- Fix handling of `inLanguage` attribute in preview card processing
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27423))
- Fix own posts being removed from home timeline when unfollowing a used
hashtag ([kmycode](https://github.com/mastodon/mastodon/pull/27391))
- Fix some link anchors being recognized as hashtags
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27271),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/27584))
- Fix format-dependent redirects being cached regardless of requested
format
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27634))

##### Upgrade notes

To get the code for v4.2.3, use `git fetch && git checkout v4.2.3`.

> As always, **make sure you have backups of the database before
performing any upgrades**. If you are using docker-compose, this is how
a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U
postgres postgres > name_of_the_backup.dump`

##### Dependencies

External dependencies have not changed since v4.2.0, the compatible
Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same,
that is:

-   Ruby: 3.0 to 3.2
-   PostgreSQL: 10 or newer
- Elasticsearch (recommended, for full-text search): 7.x (OpenSearch
should also work)
-   LibreTranslate (optional, for translations): 1.3.3 or newer
-   Redis: 4 or newer
-   Node: 16 or newer
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your
installed ImageMagick version is older than the new minimum version
(6.9.7-7), for example if you are running Ubuntu 18.04. If this happens,
you can find more information and ways to fix it [on this
page](https://github.com/mastodon/mastodon/issues/25776).

##### Update steps

The following instructions are for updating from 4.2.1.

If you are upgrading directly from an earlier release, please carefully
read the upgrade notes for the skipped releases as well, as they often
require extra steps such as database migrations.

**Non-Docker only:**

1. Install dependencies: `bundle install` and `yarn install
--frozen-lockfile`
2. Precompile the assets: `RAILS_ENV=production bundle exec rails
assets:precompile`
3.  Restart all Mastodon processes

**Using Docker:**

1.  Restart all Mastodon processes

###
[`v4.2.2`](https://github.com/mastodon/mastodon/releases/tag/v4.2.2)

[Compare
Source](https://github.com/mastodon/mastodon/compare/v4.2.1...v4.2.2)

<h1><picture>
<source media="(prefers-color-scheme: dark)"
srcset="./lib/assets/wordmark.dark.png?raw=true">
<source media="(prefers-color-scheme: light)"
srcset="./lib/assets/wordmark.light.png?raw=true">
<img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true"
height="34">
</picture></h1>

This is a bugfix release for the 4.2.0 version, if you're installing
from an earlier version, please check the [4.2.0 release
notes](https://github.com/mastodon/mastodon/releases/tag/v4.2.0) as
they contain important information on how to update.

##### Changelog

##### Changed

- Change dismissed banners to be stored server-side
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27055))
- Change GIF max matrix size error to explicitly mention GIF files
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27927))
- Change `Follow` activities delivery to bypass availability check
([ShadowJonathan](https://github.com/mastodon/mastodon/pull/27586))
- Change single-column navigation notice to be displayed outside of the
logo container
([renchap](https://github.com/mastodon/mastodon/pull/27462),
[renchap](https://github.com/mastodon/mastodon/pull/27476))
- Change Content-Security-Policy to be tighter on media paths
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/26889))
- Change post language code to include country code when relevant
([gunchleoc](https://github.com/mastodon/mastodon/pull/27099),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/27207))

##### Fixed

- Fix upper border radius of onboarding columns
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27890))
- Fix incoming status creation date not being restricted to standard
ISO8601
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27655),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/28081))
- Fix some posts from threads received out-of-order sometimes not being
inserted into timelines
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27653))
- Fix posts from force-sensitized accounts being able to trend
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27620))
- Fix error when trying to delete already-deleted file with OpenStack
Swift
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27569))
- Fix batch attachment deletion when using OpenStack Swift
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27554))
- Fix processing LDSigned activities from actors with unknown public
keys
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27474))
- Fix error and incorrect URLs in `/api/v1/accounts/:id/featured_tags`
for remote accounts
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27459))
- Fix report processing notice not mentioning the report number when
performing a custom action
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27442))
- Fix handling of `inLanguage` attribute in preview card processing
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27423))
- Fix own posts being removed from home timeline when unfollowing a used
hashtag ([kmycode](https://github.com/mastodon/mastodon/pull/27391))
- Fix some link anchors being recognized as hashtags
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27271),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/27584))
- Fix format-dependent redirects being cached regardless of requested
format
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/27634))

##### Upgrade notes

To get the code for v4.2.2, use `git fetch && git checkout v4.2.2`.

> As always, **make sure you have backups of the database before
performing any upgrades**. If you are using docker-compose, this is how
a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U
postgres postgres > name_of_the_backup.dump`

##### Dependencies

External dependencies have not changed since v4.2.0, the compatible
Ruby, PostgreSQL, Node, Elasticsearch and Redis versions are the same,
that is:

-   Ruby: 3.0 to 3.2
-   PostgreSQL: 10 or newer
- Elasticsearch (recommended, for full-text search): 7.x (OpenSearch
should also work)
-   LibreTranslate (optional, for translations): 1.3.3 or newer
-   Redis: 4 or newer
-   Node: 16 or newer
-   ImageMagick: 6.9.7-7 or newer

> If your uploaded images are broken after the upgrade, it means your
installed ImageMagick version is older than the new minimum version
(6.9.7-7), for example if you are running Ubuntu 18.04. If this happens,
you can find more information and ways to fix it [on this
page](https://github.com/mastodon/mastodon/issues/25776).

##### Update steps

The following instructions are for updating from 4.2.1.

If you are upgrading directly from an earlier release, please carefully
read the upgrade notes for the skipped releases as well, as they often
require extra steps such as database migrations.

**Non-Docker only:**

1. Install dependencies: `bundle install` and `yarn install
--frozen-lockfile`
2. Precompile the assets: `RAILS_ENV=production bundle exec rails
assets:precompile`
3.  Restart all Mastodon processes

**Using Docker:**

1.  Restart all Mastodon processes

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/enoki-coop/helm-charts).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3LjE1My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

charts/enoki-mastodon/Chart.yaml

@@ -7,7 +7,7 @@ type: application
 version: 0.3.8
 
 # renovate: image=ghcr.io/mastodon/mastodon
-appVersion: 4.2.1
+appVersion: v4.2.5
 
 dependencies:
   - name: mastodon

charts/mastodon/Chart.yaml

@@ -21,7 +21,7 @@ version: 4.0.9
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # renovate: image=ghcr.io/mastodon/mastodon
-appVersion: v4.2.1
+appVersion: v4.2.5
 
 dependencies:
 - name: common