Released on September 30, 2026.
- Upgraded Fedify to 2.1.25, which fixes a security vulnerability where the remote document loaders followed unbounded chains of alternate document links, which could exhaust resources during remote key and document resolution. Alternate links now share the 20-hop limit and loop detection with HTTP redirects, and preserve the caller's cancellation signal. [GHSA-97w4-f4rq-mgqm]