Notices by Firefish (firefish@info.firefish.dev)

We have released a new version (20241121) of Firefish with multiple critical security fixes. Please upgrade (or migrate) your server as soon as possible! This is a coordinated release with Iceshrimp, Sharkey and Misskey, so there will be updates for those software as well.

Please also bear in mind that Firefish’s support period will end at the end of this year: https://info.firefish.dev/notes/9xsukr38m3komd63

Upgrade guide: https://firefish.dev/firefish/firefish/-/blob/main/docs/upgrade.md

Announcement: Firefish will enter maintenance mode

For those who have been supporting Firefish and me, I can’t thank you enough. But today, I have to make an announcement of my very difficult decision: As of today’s release, Firefish will enter maintenance mode and reach end-of-support at the end of the year. The main reasons for this are as follows.

In February, Kainoa suddenly transferred the ownership of Firefish to me. This transition came without prior notice, which took me aback. I still wish Kainoa had consulted with me in advance. At that time, some people were already saying that “Firefish is coming back”, making it challenging to address the situation. Also, since there were several hundred active Firefish servers at that point, I could not suddenly discontinue the project, so I took over the project unwillingly.

Over the past seven months, I have been maintaining Firefish alone. All other former maintainers have left, leaving me solely responsible for managing issues, reviewing merge requests, testing, and releasing new versions. This situation has had a significant impact on my personal life.

Frankly speaking, there are numerous bugs and questionable logic in the current Firefish codebase. While I attempted to fix them, balancing this work with my personal life made it clear that it would take ages, and I’ve started thinking that I can’t manage this project in the long run. Additionally, vulnerabilities have been reported approximately once a month. Addressing vulnerabilities, communicating privately with reporters, and testing fixes have proven overwhelming and unsustainable. Moreover, a certain percentage of users have made insulting comments, which have severely affected my mental well-being and made me fearful of opening social media apps.

I will do my best to refund the donations made to Firefish via OpenCollective, but that’s not guaranteed.

firefish.dev and info.firefish.dev will remain operational until the end of February 2025, after which they will return a 410 Gone status.

Server admins may downgrade Firefish to version 20240206/1.0.5-rc and migrate to another *key variant, or may fork Firefish to maintain.

Downgrade instructions: https://firefish.dev/firefish/firefish/-/blob/downgrade/docs/downgrade.md

Thanks,
naskya

A critical security issue has been fixed in version 20240430. Please upgrade your Firefish server as soon as possible.

Upgrade guide: https://firefish.dev/firefish/firefish/-/blob/main/docs/upgrade.md
Changelog: https://firefish.dev/firefish/firefish/-/blob/main/docs/changelog.md

A critical security issue has been fixed in version 20240330. Please upgrade your Firefish server as soon as possible.

Upgrade guide: https://firefish.dev/firefish/firefish/-/blob/main/docs/upgrade.md
Changelog: https://firefish.dev/firefish/firefish/-/blob/main/docs/changelog.md

Firefish version 20240319 requires a new dependency. Please check the documentation before upgrading.
https://firefish.dev/firefish/firefish/-/blob/v20240319/docs/notice-for-admins.md

We have just released version 20240217-1, which fixes a critical security issue. Please upgrade your server as soon as possible!

Upgrade instruction: https://firefish.dev/firefish/firefish/-/releases/v20240206#upgrade-instruction
Changelog: https://firefish.dev/firefish/firefish/-/blob/main/docs/changelog.md

New release!
https://firefish.dev/firefish/firefish/-/releases/v20240206