This release fixes a security vulnerability which allows an attacker to delete images uploaded by other users. You can read the details in the security advisory. Thanks to @Nothing4You for discovering and fixing it.
A new donation dialog is shown to users once per year, to help fund Lemmy development.
There are also various backports from the development branch. Importantly the “Private instance” setting can now be used with federation enabled. This way only logged-in users can browse posts and comments, which stops AI crawlers from overloading the server. Also moderators can now view votes in the post/comment options.
They are just hidden, but I think no one has access to them via UI. We also have a discussion issue going about respecting the visibility a like activity specifies.
I am torn on this issue. Just because you theoretically can always spin up an instance and just collect the info that way one should not make it as easy as it is today (imo)… But the community seems to be heavily leaning towards @Fitik@fedia.io 's view
I’m okay with the way Lemmy implemented it in this version:
But I’m not an Mbin user, so that should probably be discussed with your users
That’s where I am as well, but if Mbin ever takes off we’ll see if our reservations about completely public votes were baseless fears.