hollo

v0.9.8 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 16d Communication & Email

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

activitypub fediverse microblog

Affected surfaces

auth

Summary

AI summary

Fixed Mastodon API bug allowing authenticated users to view their own following list when the public setting is disabled.

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes Mastodon API compatibility bug for private following lists. Fixes Mastodon API compatibility bug for private following lists. Source: llm_adapter@2026-07-15 Confidence: low	—
Bugfix	Low	Allows authenticated owners to view their own private following list via Mastodon API. Allows authenticated owners to view their own private following list via Mastodon API. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—

Full changelog

Released on July 11, 2026.

Fixed a Mastodon API compatibility bug where accounts with Make following list public disabled could not view their own following list in clients. Authenticated account owners can now access their own following list while it remains hidden from everyone else. [#548]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track hollo

Get notified when new releases ship.

About hollo

Federated single-user microblogging software