Added
MaxRecipientsis now enforced for local posts too- Tighter validation for incoming requests: POST body must be signed,
Digestmust be correct and request age must not exceedMaxRequestAge - FEDERATION.md
Removed
- The dependency on github.com/go-fed/httpsig
Bug Fixes, Performance and Maintenance
- The key for the
nobodyuser is fetched only on startup, so no database query is needed before most outgoing requests - Updated dependencies; sqlite is finally updated to 3.45.1