Merge tag '0.3.6' into 0.4-maintenance

Hollo 0.3.6
fedify-dev · Jan 20, 2025 · 484755f · 484755f
2 parents 0be5b4a + 7cc6266
commit 484755f
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 7 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -6,6 +6,9 @@ Version 0.4.4
 
 To be released.
 
+ -  Upgrade Fedify to 1.3.4, which includes [security
+    fixes][@dahlia/fedify#200] [[CVE-2025-23221]]
+
 
 Version 0.4.3
 -------------
@@ -82,6 +85,18 @@ Released on December 30, 2024.
 [#65]: https://github.com/dahlia/hollo/issues/65
 
 
+Version 0.3.6
+-------------
+
+Released on January 21, 2025.
+
+ -  Upgrade Fedify to 1.3.4, which includes [security
+    fixes][@dahlia/fedify#200] [[CVE-2025-23221]]
+
+[@dahlia/fedify#200]: https://github.com/dahlia/fedify/discussions/200
+[CVE-2025-23221]: https://github.com/dahlia/fedify/security/advisories/GHSA-c59p-wq67-24wx
+
+
 Version 0.3.5
 -------------
 

diff --git a/package.json b/package.json
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@aws-sdk/credential-providers": "^3.716.0",
-    "@fedify/fedify": "^1.3.3",
+    "@fedify/fedify": "^1.3.4",
     "@fedify/markdown-it-hashtag": "0.2.0",
     "@fedify/markdown-it-mention": "^0.1.1",
     "@fedify/postgres": "^0.2.2",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml