#mementomorisocial

We've upgraded our Mastodon server to v4.7.0-alpha.2+mementomods-2026-07-27. A small one this time, mostly a security update, with 6 new commits from upstream since yesterday's build (mementomods-2026-07-26).

Upstream released 4.6.4 with three advisories, and those fixes are now in the nightly line we run:

Security:

• Two permission enforcement fixes, where some admin statistics and retention endpoints could be reached without the right role https://github.com/mastodon/mastodon/security/advisories/GHSA-7jvv-fhmg-wpfw and https://github.com/mastodon/mastodon/security/advisories/GHSA-hx34-2pfw-2qfj
• An SSRF protection bypass through IPv4 compatible IPv6 addresses, which could be used to make the server fetch addresses it should refuse https://github.com/mastodon/mastodon/security/advisories/GHSA-vwhj-3g83-v276

Fixes & improvements:

• Polls without an expiration date can be voted in again https://github.com/mastodon/mastodon/pull/39949
• Tighter enforcement of the collection item limit https://github.com/mastodon/mastodon/pull/39969

As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts.

If anything feels off, please let us know!

#MementoMoriSocial #Mastodon #MastoAdmin

@iju@mastodon.social Our costs are roughly 200 euros per month for a performance optimized, future-proof cluster, and we currently have about 1000 users. Since membership is optional, we do not expect even 10% to join as association members. If we get 40 members, we are covered. Of course, anything is subject to change and we can reconsider the membership fee later, especially if we get more members. Right now we have 3 members, which is us, the board (membership website in progress). @harald@mementomori.social #MementomoriRy #MementomoriSocial

@iju@mastodon.social @ry@mementomori.social @harald@mementomori.social For your information (and as background details of mementomori.social), I am well aware that Mastodon can be hosted on a Raspberry Pi or on a 3 euro VPS 😄 but that is not our goal. My main goal was to be able to follow Eurovision hashtags in real time without any delays in post queues. Many smaller servers had even hours of delays during spike times. I did not want that. I do servers for a living and wanted this to be as enterprise quality as our customer servers. #MementomoriSocial

We have successfully upgraded our Mastodon server to v4.7.0-alpha.1+mementomods-2026-07-26, running Mastodon Bird UI 4.0.0 nightly branch (new alpha for Mastodon v4.7.0-alpha coming soon). This daily build stays on the v4.7.0-alpha.1 nightly line, so this is a within-cycle daily build rather than a version jump, we've just brought it fully up to date with upstream, as our bi-weekly upgrades go.

This update includes 142 new commits from upstream since our 5.7.2026 build (mementomods-2026-07-05). The Docker build is also being updated according to our automatic workflow.

What's new in Mastodon core, these are the changes the Mastodon Team have introduced in the latest nightly version we are running:

✨️ New features

• Groundwork for the Mastodon 5.0 redesign started landing: new design tokens, webfonts and redesigned buttons, toggles and text inputs. It all sits behind a feature flag for now, so nothing changes visually yet https://github.com/mastodon/mastodon/pull/39802
• Emoji search was improved, so shortcodes find better matches https://github.com/mastodon/mastodon/pull/39815
• Remote accounts can now change their handle without breaking follows https://github.com/mastodon/mastodon/pull/39785
• Boosts are deduplicated across the last 80 posts instead of the last 40, so the same post repeats less often in your timeline https://github.com/mastodon/mastodon/pull/39784
• Admins now get notified about out of support Mastodon versions, with end of support dates shown next to available updates https://github.com/mastodon/mastodon/pull/39734

🔧 Fixes & improvements

• "Hide media with a warning" filters are applied correctly again https://github.com/mastodon/mastodon/pull/39946
• Very wide images no longer overflow posts horizontally https://github.com/mastodon/mastodon/pull/39812
• Embedded videos no longer restart when you interact with the post, or with other posts in the same feed https://github.com/mastodon/mastodon/pull/39746
• Quote post text can be edited again https://github.com/mastodon/mastodon/pull/39837 and the content warning is no longer copied into the body when editing a quote with empty text https://github.com/mastodon/mastodon/pull/39823
• The accept and reject actions in follow requests are no longer swapped https://github.com/mastodon/mastodon/pull/39862
• Saving custom profile fields no longer refreshes the page https://github.com/mastodon/mastodon/pull/39828
• The account language selector works again https://github.com/mastodon/mastodon/pull/39801
• Relative timestamps were fixed https://github.com/mastodon/mastodon/pull/39742
• Timelines can load more posts again when the last item is a follow suggestion carousel https://github.com/mastodon/mastodon/pull/39773
• Notification filter selection is kept after changing settings https://github.com/mastodon/mastodon/pull/39872
• Announcement reaction bars no longer overlap pagination https://github.com/mastodon/mastodon/pull/39814
• The admin dashboard and the admin collection page got noticeably faster queries https://github.com/mastodon/mastodon/pull/39929

🔒 Federation & security (under the hood)

• Added support for outgoing HTTP Message Signatures, part of the ongoing work to harden how servers verify each other's requests https://github.com/mastodon/mastodon/pull/39756
• Added ML-DSA-44 support for Object Integrity Proofs and keys, a post quantum signature scheme https://github.com/mastodon/mastodon/pull/39522
• Tightened the relevancy check on incoming activities https://github.com/mastodon/mastodon/pull/39892
• Remote accounts are now deleted when fetching them returns 410 Gone https://github.com/mastodon/mastodon/pull/39865
• Suspended accounts no longer linger in the follow request count https://github.com/mastodon/mastodon/pull/39858

📦 Dependency updates

• Routine bumps this round (Ruby 4.0.6, Bundler 4.0.16, Yarn, Vite, formatjs, AWS SDK, CI actions and translation updates).

🏠 Changes specific to our server

• The "For you" feed is a lot faster and no longer times out when the server is busy. The ranking is now cached and refreshed in the background instead of being calculated from scratch on every single load.
• Emoji autocomplete now puts whole word matches first, so typing :sweat also finds :grinning_face_with_sweat: instead of only custom emojis that happen to contain those letters.
• Lots of performance improvements under the hood.

🐦‍⬛ Mastodon Bird UI (nightly)

Still on unreleased nighly branch, with a batch of navigation fixes vendored in this round:

• The left navigation scrolls properly at extreme browser zoom on low resolution screens, and only on desktop, so the mobile drawer is left alone.
• The mobile navigation bar sits above the slideout pane again, so it no longer covers the hamburger menu, and the mobile navigation links got proper padding.
• Fixed the compact navigation font size on screens below 1080px height, which was being overridden by the desktop rule.
• Navigation hover highlights are no longer clipped on their left edge on larger screens.

Source code for our Mastodon: https://github.com/mementomori-social/mastodon

As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts.

If anything feels off, please let us know!

#MementoMoriSocial #Mastodon #MastoAdmin

Just made some performance updates to the Mastodon "For you" -feed https://github.com/mementomori-social/mastodon/pull/4 #MementomoriSocial

Association Update: A board decision was made today regarding membership fees; the minimum is 5 euros per month (approximately 5.70 USD). Membership is not mandatory; mementomori.social will continue to be a free, public-interest service for everyone. The members-only website and the membership sign-up process are currently being developed and will be available soon at https://members.mementomori.social #MementomoriRy #MementomoriSocial

#Introduction time! Hei everyone. Just dropping a quick intro post now that the move to #MementoMoriSocial is complete. I recently migrated over from @twop0intfive@corteximplant.com. There was absolutely no ill will or drama over there, I just felt like it was the right time for a change of scenery. I work in IT compliance to pay the bills, but family and creative projects take up the rest of my time. A big piece of that is being behind the camera and handling the editing for my wife's social media accounts. When I get a rare quiet window to myself, I am usually tweaking Docker containers in the homelab, playing video games and silent streaming them, or just starting to mess around with making electronic music. Diasporic Boricua, keeping connected to my roots and needing that occasional agua salá recharge when the machine gets too loud. Good to connect with everyone here. Verification link is below. https://twop0intfive.xyz #Boricua #Homelab #Gaming #SilentStream

Me allekirjoittaneet olemme perustaneet Mementomori ry -nimisen yhdistyksen, liittyneet siihen jäseniksi ja hyväksyneet sen säännöt. @rolle@mementomori.social @ikkeT@mementomori.social @mustikkasoppa@mementomori.social Ilmoitus on siirtynyt PRH:n käsiteltäväksi. #MementomoriRy #Yhdistys #vainYhdistysJuttuja #MementoMoriSocial #MementoMoriSocialFi

@tharkonen@mastodon.social Tänään saatiin yhdistys rekisteriin! Eli pian voi tukea meidän toimintaa mementomori.socialissa. Jos Fediversumi Suomessa yleisesti kiinnostaa: @fediversuomi@mastodontti.fi Meidän instanssimme mementomori.social ei Fediversuomi ry yhdistyksen toiminnasta toistaiseksi hyödy. Päätimme perustaa oman yhdistyksemme käytännön byrokratian helpottamiseksi, koska meillä on aika räätälöity Linux-kalusto ja ehkä hieman erilainen uniikki suunta - lisäksi tarjoamme palvelua kansainvälisesti englanniksi, ei rajoitu Suomeen tai suomen kieleen. @ikkeT@mementomori.social @mustikkasoppa@mementomori.social #MementomoriRy #MementomoriSocial #MementoMoriSocialFi

RE: https://mementomori.social/@rolle/116869105771249603 Mementomori ry is now officially a registered Finnish nonprofit association 🎉 The association's board of directors: @rolle@mementomori.social @ikkeT@mementomori.social @mustikkasoppa@mementomori.social Official purpose of the association as stated in its founding documents: The purpose of the association is to promote open, European, decentralized, and digitally sovereign social media, as well as open and ethical online communication. The association is not established for the purpose of generating profit or other financial gain for its members, nor are its activities limited to a specific group of people. Use of the servers (e.g. mementomori.social and chat.mementomori.social) maintained by the association is open and free of charge and does not require membership. Association Registry: https://yhdistysrekisteri.prh.fi/basicinformation?userLang=en&businessId=3637371-4&timeZone=Europe%2FHelsinki #MementomoriSocial #MementomoriRy

Uudet pride-emojit lisätty Mementomori.socialiin #MementomoriSocial #pride

Experimenting with an opt-in ranked home timeline ("For you" feed) for Mastodon, just for myself and in my own fork. Draft: https://github.com/mementomori-social/mastodon/pull/4 #MastoAdmin #Mastodon #MementoMoriSocial #BuildInPublic #OpenSource

We just upgraded our Mastodon fork on Mementomori.social to Mastodon 4.6.0 theme variations.

Mastodon Bird UI is now at 4.0.0-alpha.8.rc with support for Color scheme and Contrast settings.

New settings in Settings → Preferences → Appearance:

• Use stars instead of hearts for favourites
• Hide Translate links on Finnish posts
• Hide all Translate links

These used to be separate themes; now you can mix and match.

The Theme dropdown is shorter for the same reason: Light, Dark and Contrast moved into Mastodon's own radios just below the dropdown. If your previous theme is gone, pick Mastodon Bird UI and set Color scheme + tick the new checkboxes to match what you had.

Fixes in Mastodon Bird UI:

• Star icon alignment when Reduce motion is enabled
• Sparkle and ring animations now fire in both motion modes
• Notification colors that disappeared when your OS was light but Mastodon was set to dark

If anything feels off, let me or the admins know.

Technical details: https://github.com/rollecode/mastodon-bird-ui/releases/tag/4.0.0-alpha.8.rc

#MementoMoriSocial #Mastodon #MastoAdmin #MastodonBirdUI #BirdUI

@saruwine@mementomori.social Yes, and it has a story. I wish I could find the original post where this was asked for the first time, but the question was literally "How do you have the heart to host your own server, since you could die at any moment?" I turned this around and wanted the name specifically because it would serve as a reminder of mortality. https://help.mementomori.social/mementomori.social/about-mementomori.social/why-the-name-memento-mori #MementomoriSocial

We've successfully upgraded our Mastodon server to v4.6.0-alpha.7+mementomods-2026-05-02, along with Mastodon Bird UI 4.0.0-alpha.7 (nightly).

This update includes today's latest daily build with 207 new commits from upstream since mementomods-2026-04-05.

What's new in Mastodon core - These are the changes Mastodon Team have introduced us in the latest nightly version we are running:

✨️ New features

• Collections continue to mature - per-user maximum number of collections, "Featuring you" tab, "Follows you" badge in lists, federated Flag activities, "added to collection" notifications with full context menus, and viewing unlisted collections on your own Featured tab
• New collection editor - final design for account dropdown menu, account search dropdown, accounts editor page, "Must follow" section in suggestions, grouped Combobox results
• Profile redesign keeps polishing - full join date (currently in modal), animated/transparent avatars, illustrations using CSS vars, control over follower/following list visibility, bot toggle in editing, advanced view overflow fix
• Server thumbnail alt text - admins can now define alt text for the server thumbnail, surfaced in the frontend
• Fallback attributes for new and infrequent notification types so no event renders as an empty card
• Keyboard-only modal form submission
• Extended date display for relative times when feature_approval cooldown applies, including new AccountMigration#remaining_cooldown_days helper
• New domain_variants helper on DomainNormalizable for IDN handling

🔧 Fixes & improvements

• Several profile bugs - minor visual glitches, gap in fields layout, dropdown blocking missing the confirmation modal, follower/following list error for accounts that never posted
• Custom emoji not appearing in autocomplete
• Stale collections list after deleting a collection, broken client-side collection routes, collection item limit, multiple occurrences of the same user in a collection
• Quote blocked user issue
• Bio line clamping in AccountListItem
• Combobox loading state and confusing admin list hover states
• Streaming server uses WHATWG URL API instead of deprecated url.parse
• Signature verification fixes carried from previous nightly
• Importing emoji loader statically inside the inline worker (Vite 8 compatibility)
• Hero image radius brought back into repo

📦 Dependency updates

• Ruby 4.0.3 (from 4.0.2), Puma 8.0.1, Vite 8.0.10, Node.js 24.15, Yarn 4.14.1, Sidekiq 8.1.3, propshaft, formatjs, opentelemetry-ruby, and dozens of smaller bumps

🐦‍⬛ Mastodon Bird UI 4.0.0-alpha.7 (nightly)

• Fix duplicate profile buttons after upstream class name change
• Remove padding-top from account__header__buttons on viewports under 420px
• Apply --font-size variables to display name, form field wrapper, app form link text, and simple_form hints so accessible themes scale them correctly
• Move field list row-gap 5px to all viewports
• Fix follows you badge and pinned badge styling
• Fix familiar followers margin spacing
• Fix profile badge and username spacing
• Map --color-text-brand to --color-accent for consistent link colors

🔧 Mementomori.social Mastodon fork fixes

• Fixed private mention styles and follow requests styling
• Fixed emoji worker loader using a static import for Vite 8 inline worker compatibility
• Fixed trends alignment and trends counter missing tagName after the upstream FormattedMessage wrapper removal
• Fixed uncaught play() promise rejections on autoplay-blocked browsers

Source code: https://github.com/mementomori-social/mastodon

As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts.

If anything feels off, please let us know!

#MementoMoriSocial #Mastodon #MastoAdmin

It's funny to think that I named the instance mementomori.social, and now we have around a thousand users, including companies, politicians, organizations, publishers, authors, and more. The name came from my stoic side, and I wanted something unique, like Mastodon. I could have launched the instance with a name like "newsocial" or "socialnetwork", something more appealing and generic. I could have even built a custom UI to make it more "mainstream-friendly", similar to Mastodon Bird UI. But I decided not to. I kind of like it this way. I wanted people to have that reaction, "What is mementomori.social?". I like that it's a bit obscure and different. Still, it feels strange when a really prominent person posts under this domain. It's cool though, definitely something to be happy about. Maybe I'm being too modest about it all. Thoughts about the name, in Finnish or English? How do you approach it? What are the pros and cons? Not that I would change it, because a) I like it, and b) it would be difficult or even impossible technically. #MementoMoriSocial

I've been pretty tired, stressed out, and overwhelmed lately, so there haven't been strictly bi-weekly upgrades to the server as I planned. We're still on v4.6.0-alpha.6+2026-04-05, and I don't have the energy to do the upgrades today. Maybe next week. #MementomoriSocial

It's just nice to stop by this instance again... it's still the instance close to our hearts. @rolle@mementomori.social #MementoMoriSocial

We've successfully MEGA-upgraded our Mastodon server to v4.6.0-alpha.6+mementomods-2026-04-05, along with Mastodon Bird UI 4.0.0-alpha.6 (nightly).

This update includes today's latest daily build with 163 new commits from upstream since mementomods-2026-03-21.

What's new in Mastodon core - These are the changes Mastodon Team have introduced us in the latest nightly version we are running:

✨️ New features

• Profile redesign is now live (feature flag removed) — new layout with "Follows you" badge, split fields, rearranged number fields, featured tab, account featured tags nudge, alt text on avatars/headers
• Collections are now fully federated — remote account support, new page design, compact buttons, topic suggestions, tag linked FeaturedCollection objects over ActivityPub
• Email subscriptions on profiles — visitors can subscribe to public posts via email with MX record validation
• Profile editing — new API with character counter, field inline messages, avatar/header description uploads, visual fixes
• Support for FEP-2c59 and multiple keypairs for remote accounts
• Media description length limit increased from 1500 to 10,000 characters for remote attachments
• Improved relative time display when post time is in the future
• Disable extraneous Devise strategies option via DISABLE_DEVISE_TWO_STRATEGIES

🔧 Fixes & improvements

• Fix signature verification when key ID is an acct: URI
• Fix refreshing keys from stale actors on signature verification error
• Fix regressions in notifications caused by translation wrapper element
• Fix jump when loading more media gallery items
• Fix being unable to disable sound for quote update notification
• Fix Webfinger endpoint not handling new AP ID scheme
• Improve resilience of tootctl maintenance fix-duplicates command
• Improve contrast for text-warning and text-success design tokens

📦 Dependency updates

• Rails 8.1.3, Vite 8.0.3, TypeScript 6, Yarn 4.13.0, Ruby version 4.0.2
• Drop support for Ruby 3.2

🐦‍⬛ Mastodon Bird UI 4.0.0-alpha.6 (nightly)

• Fix translate button color not matching link color
• Fix extra border-left showing up in mobile devices
• Fix focusable background color standing out too much for account name
• Fix install script for Mastodon 2026-03-21 common.scss removal
• Fully modularize _base.scss into 40+ focused module files
• Fix Browsersync CSS hot reload by stripping CSP headers from proxied responses
• Support new profile page structure
• Remove calendar icon for "Joined" field no longer in new profile
• Style new profile page components and fix profile button colors
• Update theme tokens with latest design system tokens (upstream PR #38387)
• Remove select hack fixed in upstream
• Fix install script for new profile subdirectories

🔧 mementomods fork fixes

• Restored role badge colors lost in the profile redesign (reported upstream: https://github.com/mastodon/mastodon/issues/38567)
• Fixed search reference page: migrated from removed injectIntl to useIntl hook, removed non-functional search operators

Source code: https://github.com/mementomori-social/mastodon

As always, if you notice anything unusual or buggy, please reach out to me or any of the admins. Enjoy your time here, and feel free to message me with any questions or thoughts.

If anything feels off, please let us know!

#MementoMoriSocial #Mastodon #MastoAdmin