We're pleased to be publishing v2.16.0, a new stable release. This release contains bug fixes and some minor updates.
This release includes changes to the config file format, all of which are fully backwards-compatible and do not require updating the file before upgrading. It includes no changes to the database file format.
Many thanks to @csmith, @delthas, donio, @emersion, @KlaasT, @knolley, @Mailaender, and @prdes for reporting issues and helping test.
Config changes
- Added
apiblock for configuring the new HTTP API. If this block is absent, the API is disabled (#2231) - Added
server.additional-isupportfor publishing arbitrary ISUPPORT tokens (#2220, #2240) - Added
server.command-aliasesto configure aliases for server commands (#2229, #2236) - Added options to
roleplayto customize the NUH's sent forNPCandSCENE. Roleplay remains deprecated and disabled by default. (#2237)
Security
- Mitigated HTTP DoS attacks by rejecting IRC sessions that begin with an HTTP verb, such as
POST. If you were relying on this to create IRC sessions via an HTTP client, please open an issue. (#2239)
Added
- Added an HTTP API, providing programmatic access to Ergo functionality (#2231, thanks @KlaasT!)
- Added SAFERATE to 005 ISUPPORT tokens (#2223, thanks @delthas!)
- Added support for ed25519-sha256 for DKIM. However, enabling this algorithm is not recommended since mainstream email providers still do not support it. (#1041, #2242)
Fixed
- Fixed
CHATHISTORY TARGETSfrom MySQL backend reporting incorrect timestamps when the server timezone is not UTC (#2224) - Fixed batch name parameter in
draft/isupportresponses (#2253) - Fixed
NS UNREGISTERnot deleting the stored push subscriptions (#2254) - Fixed cases where
NS SAREGISTERcould create clients without applying the default user modes (#2252, #2254, thanks donio!) - Improved validation of
CHATHISTORYparameters (#2248, #2249, thanks @prdes!) - Added validation to ensure the MOTD is UTF-8 when
enforce-utf8is enabled (the recommended default) (#2228, #2233, thanks @KlaasT!) - The client's own
QUITline now respects theserver-timecapability (#2218, #2219) - Fixed sending unnecessary replies to certain invalid
MODEchanges (#2213) - Improved safety of ISUPPORT length limits (#2241)
Changed
- The
draft/message-redactioncapability is no longer advertised whenallow-individual-deleteis disabled (#2215, #2216, thanks @delthas!) - Receiving the UTF-8 BOM (byte-order mark) at the start of an IRC connection now produces an explicit error (#2244, #2247, thanks @csmith, @Mailaender!)
Internal
- Release builds use Go 1.24.3 (#2217)