From 40f9b82de396d63abd9d96d0e77c9957559bf0ca Mon Sep 17 00:00:00 2001 From: Claire Date: Thu, 25 Jun 2026 10:23:20 +0200 Subject: [PATCH] Bump version to v4.4.20 --- CHANGELOG.md | 6 ++++++ docker-compose.yml | 6 +++--- lib/mastodon/version.rb | 2 +- 3 files changed, 10 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bdb0423af13..15af4117cba 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,12 @@ All notable changes to this project will be documented in this file. +## [4.4.20] - 2026-06-25 + +### Security + +- Update FFMpeg version used in the container image to fix [CVE-2026-8461](https://github.com/advisories/GHSA-qff7-4q6c-m8h6) (critical severity) + ## [4.4.19] - 2026-06-24 ### Security diff --git a/docker-compose.yml b/docker-compose.yml index 869a9ef37a1..3f603bc66c5 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -59,7 +59,7 @@ services: web: # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes # build: . - image: ghcr.io/mastodon/mastodon:v4.4.19 + image: ghcr.io/mastodon/mastodon:v4.4.20 restart: always env_file: .env.production command: bundle exec puma -C config/puma.rb @@ -83,7 +83,7 @@ services: # build: # dockerfile: ./streaming/Dockerfile # context: . - image: ghcr.io/mastodon/mastodon-streaming:v4.4.19 + image: ghcr.io/mastodon/mastodon-streaming:v4.4.20 restart: always env_file: .env.production command: node ./streaming/index.js @@ -102,7 +102,7 @@ services: sidekiq: # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes # build: . - image: ghcr.io/mastodon/mastodon:v4.4.19 + image: ghcr.io/mastodon/mastodon:v4.4.20 restart: always env_file: .env.production command: bundle exec sidekiq diff --git a/lib/mastodon/version.rb b/lib/mastodon/version.rb index 52d665c3e02..5628f024b52 100644 --- a/lib/mastodon/version.rb +++ b/lib/mastodon/version.rb @@ -13,7 +13,7 @@ module Mastodon end def patch - 19 + 20 end def default_prerelease