What's Changed
- Pass the remote status through the proxy by @pfefferle in #3665
- Improve permission checks for the ActivityPub API by @pfefferle in #3670
- Match blocked actors on canonical URIs by @pfefferle in #3664
- Add a notification setting for likes, reposts and quotes by @pfefferle in #3582
- Enable RFC 9421 signature by default by @obenland in #2859
- Handle unexpected WebFinger responses from remote servers by @pfefferle in #3673
- Federate podcast episodes from both Jetpack podcast features by @pfefferle in #3575
- Fix embed crash when a post's author or avatar is sent in an unexpected format by @jeherve in #3677
- Stop Update and Create dispatching to each other on a disabled post by @pfefferle in #3679
- Gate the reader's REST routes on the ActivityPub capability by @jeherve in #3674
- Add Fediverse and ActivityPub icons to the icon library by @pfefferle in #3694
- Strip hidden elements including their text content by @pfefferle in #3693
- Let an author request win over a stray term id by @pfefferle in #3681
- Improve handling of content and profiles from remote servers by @pfefferle in #3703
- Improve validation of incoming activities by @pfefferle in #3711
- Improve handling of ActivityPub routes with unusual capitalisation by @pfefferle in #3713
- Improve handling of remote follow and reply links by @pfefferle in #3715
Full Changelog: 9.2.2...9.3.0