Covers everything since 3.45.0, including a few commits that landed on main between releases.
Spotting accounts parked to watch the server
New Settings → Moderation section. An account can stay connected and showing green for hours without posting, joining voice, or changing its status. That is what a script left running to log a server looks like, because a real client trips auto-away when the person actually steps away.
The section lists accounts that have been online and idle past a threshold you set, default 4 hours, longest-idle first. It is read-only, something to look at rather than an automatic action, and it is available to admins and to moderators who can act on it (ban, kick, audit, or view members). A moderator sees only this section, none of the admin-only ones.
Nothing here can prevent someone joining an open server or reading public channels, which is inherent to being open. What it does is make the always-on, never-idle account easy to see instead of something you have to notice by hand.
Also new
- An invite-users permission. Handing out invite links used to require admin or manage-server, so delegating "you can bring people in" meant handing over the whole server. There is now a permission for exactly that. Holders see and edit only the links they made, capped at 25, and cannot touch the server-wide code.
- The admin panel says which settings come from the environment. Server name, STUN, TURN and the GIF keys can be set in the panel or through an environment variable, with the stored value winning. Those fields now show the environment value as a placeholder and a note saying which variable it comes from, instead of a blank box that leaves you guessing.
- A short identity note on new DMs. Haven does not verify who anyone is, and on an open server someone can register a name matching a person you trust and message you as them. A small dismissable reminder now sits at the top of a DM. Shows once, on both DM views, with a "don't show again" button.
Fixed
- Pasting a file into a thread posted it instantly, with no chance to cancel a stray Ctrl+V. Threads now hold pasted and dropped files as previews and send them only when you send the reply, like the other composers. Thanks to test1.
- Channel management reached outside the channel it was granted on (#5467). Creating a sub-channel accepted a global create-channels permission, so anyone allowed to start a channel could add rooms inside channels they had nothing to do with. It is scoped to the specific parent now, and the menu only offers the buttons where you actually hold the permission.
- Deleting a channel or a just-posted DM image left the file orphaned in uploads. Both clean up now, skipping any file another surviving message still links to.
Restart your server to pick this up. Nothing needs configuring; the idle list is under Settings → Moderation.