GoToSocial<p>What's that coming over the hill, is it a monster? Is it a monster?</p><p>Yes actually, it's version 0.19.0 of <a href="https://gts.superseriousbusiness.org/tags/gotosocial" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GoToSocial</span></a>, aka Seditious Sloth 😈! It's busted out of the release candidacy process and it's ready to kick some ass.</p><p>You can get the release from here:</p><p><a href="https://github.com/superseriousbusiness/gotosocial/releases/tag/v0.19.0" rel="nofollow noopener noreferrer" target="_blank">https://github.com/superseriousbusiness/gotosocial/releases/tag/v0.19.0</a></p><p>Or use either the <code>latest</code> or <code>0.19.0</code> Docker tag.</p><p>The update contains several database migrations, so please read the migration notes carefully for instructions on how to upgrade to this version!</p><p><strong>Release highlights</strong></p><ul><li><strong>OAuth token scope enforcement</strong>: Token scopes (<code>read</code>, <code>write</code> etc) now actually do stuff! So we removed the big "scopes don't do stuff!" warning in the docs. The enforced scopes match the Mastodon API token scopes, so there shouldn't be any surprises for bot owners / app developers.<br>See <a href="https://docs.gotosocial.org/en/latest/api/swagger/" rel="nofollow noopener noreferrer" target="_blank">https://docs.gotosocial.org/en/latest/api/swagger/</a> for more info.</li><li><strong>Token review / invalidation</strong>: You can now review and invalidate tokens issued for your account in the settings panel, to help keep your account secure.<br>Docs: <a href="https://docs.gotosocial.org/en/latest/user_guide/settings/#access-tokens" rel="nofollow noopener noreferrer" target="_blank">https://docs.gotosocial.org/en/latest/user_guide/settings/#access-tokens</a></li><li><strong>Create and manage applications in the settings panel</strong>: Handy for people who want to run bots and applications with GoToSocial!<br>Docs: <a href="https://docs.gotosocial.org/en/latest/user_guide/settings/#applications" rel="nofollow noopener noreferrer" target="_blank">https://docs.gotosocial.org/en/latest/user_guide/settings/#applications</a></li><li><strong>Gallery-style profile layout option</strong>: You can now choose to lay out the web view of your profile in a 'gram style gallery. Good for people who mostly post media and want to put that at the forefront.<br>Docs: <a href="https://docs.gotosocial.org/en/latest/user_guide/settings/#select-layout" rel="nofollow noopener noreferrer" target="_blank">https://docs.gotosocial.org/en/latest/user_guide/settings/#select-layout</a></li><li><strong>Support for two-factor authentication (aka 2FA)</strong>: If your instance isn't configured to use an OIDC provider, you can now secure your account with 2FA via a QR code and an authenticator app. When logging in with 2FA enabled, you will have to provide a time-based one-time password. Security!<br>Docs: <a href="https://docs.gotosocial.org/en/latest/user_guide/settings/#two-factor-authentication" rel="nofollow noopener noreferrer" target="_blank">https://docs.gotosocial.org/en/latest/user_guide/settings/#two-factor-authentication</a></li><li><strong>Lots of web view tweaks</strong> including nicer media rendering on chrome, proper blurhash support, <em>much</em> better support for keyboard-based page navigation, wider font support for different scripts, tidier status info bar, and more.</li><li><strong>OAuth bugfixes</strong> should allow more flexibility and compatibility when logging in with or authorizing third-party applications.</li><li><strong><a href="https://bandwagon.fm/" rel="nofollow noopener noreferrer" target="_blank">bandwagon.fm compatibility fixes</a></strong>: you can now follow Bandwagon.fm artists from your GoToSocial account and receive posts / announcements from them.</li><li><strong>Edit domain permissions</strong>: you can now edit the obfuscate and public and private comment fields in domain permissions (blocks/allows) instead of having to remove and recreate the permission to update the comments.</li></ul>