:skull360: We've upgraded our Mastodon server to v4.8.0-alpha.3+mementomods-2026-10-11. That is 253 new commits from upstream since our 15.9.2026 build.
Mastodon 4.7.3 is a security release and it is folded into this build.
🧭 About the new Mastodon design
On Tuesday, 6 October, Mastodon core enabled its upcoming 5.0 redesign for everyone running the nightly version, with no option to turn it off. It is still very much a work in progress, so we decided to stick with the latest update right before that switch. I feel it is not ready enough yet to force onto our users, and I still need to make plans for #MastodonBirdUI and its future.
Mastodon.social itself is also running a build from before it. We'll move to the new design once it is ready, perhaps when mastodon.social makes the move. In the meantime, nothing changes for you UI-wise.
🔒 Security
- Dependency updates from the Mastodon 4.7.3 security release.
- If you log in with just a password after more than 90 days away, Mastodon now asks for a security code it sends to your email first. Accounts with two-factor authentication are not affected (https://github.com/mastodon/mastodon/pull/40745).
- Fixed account creation through the API still being open on servers that only allow single sign-on sign ups (https://github.com/mastodon/mastodon/pull/40681). We don't use single sign-on here, so this one never applied to us.
🗑️ Privacy and account deletion
- Deleting an account now also removes its reported posts, avatar and header descriptions, link preview records and entries in featured collections (https://github.com/mastodon/mastodon/pull/40650, https://github.com/mastodon/mastodon/pull/40621, https://github.com/mastodon/mastodon/pull/40624, https://github.com/mastodon/mastodon/pull/40623).
- Account deletion notices are now sent to fewer servers, only those likely to know the account (https://github.com/mastodon/mastodon/pull/40283).
- Deleting your own account always asks you to type your username to confirm (https://github.com/mastodon/mastodon/pull/40576).
🔧 Fixes & improvements
- Dialogs no longer close by accident when you press Enter or click a menu item inside them, and long dialogs scroll properly on iOS (https://github.com/mastodon/mastodon/pull/40757, https://github.com/mastodon/mastodon/pull/40758, https://github.com/mastodon/mastodon/pull/40725).
- Mastodon no longer lists HEIC, HEIF and AVIF as supported upload formats, matching the temporary HEIF shutdown from the last round (https://github.com/mastodon/mastodon/pull/40542).
- Apps can ask the server to leave boosts, replies or quotes out of the home feed (https://github.com/mastodon/mastodon/pull/40468).
🛡️ Moderation
- Moderators can no longer issue a warning to moderators of a higher position (https://github.com/mastodon/mastodon/pull/40646).
- Rate limits now treat different spellings of the same email address as one (https://github.com/mastodon/mastodon/pull/40658).
- The moderation view shows which app an account was registered with (https://github.com/mastodon/mastodon/pull/40567).
🚀 Under the hood
- The 5.0 redesign took 96 of the 253 commits. As explained above, none of it is switched on here.
- Ruby was updated to 4.0.7.
📦 Dependency updates
- Routine bumps and translation updates.
🏠 Changes specific to our server
These went live on 25.-26.9.2026, between this post and the last one.
- The footer now credits https://upcloud.com, who sponsor our servers.
- If the search service has trouble, searching for accounts falls back to the database instead of returning nothing.
- Pinned hashtag columns in the advanced web interface were missing their Unpin and move buttons. I fixed that here, and the fix was also accepted into Mastodon itself (https://github.com/mastodon/mastodon/pull/40711).
Source code: https://github.com/mementomori-social/mastodon
As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts. :bunhdheart:
#MementoMoriSocial #Mastodon #MastoAdmin
