#mastoadmin

🐦‍⬛ Mastodon Bird UI 5.0.0-beta.1-2026-11-08 (nightly) is out. This is Bird UI rebuilt for Mastodon 5, the new 5.0 design that is now in beta.

The nightly follows Mastodon 5.0.0-beta.1. If you are on Mastodon 4, stay on 4.7.3-2026-10-11 from the main branch.

New:

• Rewritten from scratch for the Mastodon 5 design
• Micro-interactions, likes and boosts are whimsical
• Notifications, content warnings, link cards and thread lines look like they did on Mastodon 4
• Follows Mastodon's own light, dark and high contrast settings
• A darker, blurred backdrop behind the composer and every popup
• A new install script for Mastodon 5, or paste dist/mastodon-bird-ui.css into Custom CSS
• The star favorite, light and language variants are no longer supported

You can see it live at https://mementomori.social

Release notes and full changelog: https://github.com/rollecode/mastodon-bird-ui/releases/tag/5.0.0-beta.1-2026-11-08

#MastodonBirdUI #BirdUI #Mastodon #MastoAdmin

Lots of nightly updates coming in today!

Most notable bugs:

• When you type a hashtag or at-person, the popout gets in the way
• Ultra Accessible themes for vision impaired have some font size issues
• Some hover states and element proportions, especially padding, have regressions from v5 and the new nightly theme
• Bugs in the advanced view

The latest changes are in the nightly branch, and work is still in progress. You can follow my work here: https://github.com/rollecode/mastodon-bird-ui/tree/nightly

Some of these are core issues and will probably be fixed or changed in Mastodon v5 stable. If not, fixes will go live in our fork.

#MastodonBirdUI #BirdUI #CSS #MastoAdmin #UI #Mastodon #OpenSource

Released 5.0.0-beta.1-2026-11-09 of Mastodon Bird UI: https://github.com/rollecode/mastodon-bird-ui/releases/tag/5.0.0-beta.1-2026-11-09#MastodonBirdUI #BirdUI #Mastodon #MastoAdmin

RE: https://mastodon.social/@pixelfed/117586194168536723 Mastodon Canada just committed to the Digital Platform of Rights and Freedoms with the following: "Mastodon Canada recognizes the importance of Data Sovereignty and, with this hosting, keeps our community's data on servers in Edmonton, Alberta, that we can physically touch. We are committed to the Mastodon Covenant and provide safeguards that respect the Canadian Charter of Rights and Freedoms. We are transparent with moderation and administration decisions and remain responsive to cybersecurity events. We are steadfast in our commitment to working with Project Arachnid in combating CSAM on the fediverse. Our team actively seeks out equity-seeking members to join our moderation and oversight team and looks forward to continuing to build upon this." I'm sure it'll be published shortly here: https://respectfulplatforms.org/ #mstdnca #fediverse #mastoadmin #mastodon

If you're running a public Mastodon server, it's really important that you have a plan for closing down gracefully *even if you have no intention of closing down*. Having a plan in place means your members don't have to worry about your server suddenly disappearing, as they know they will get plenty of warning if it happens. Here's a step-by-step guide to closing a Mastodon server gracefully (and much of this applies to any Fedi server): 🏡 https://fedi.tips/closing-your-mastodon-server-gracefully/ #MastoAdmin #FediAdmin

The first beta version for Mastodon 5.0 is now available! After testing it on mastodon.social for a few weeks, we believe that this version is stable enough to be deployed by others, so if you like testing our new things feel free to install this beta version and report any bugs your find on GitHub or our community forum (https://community.joinmastodon.org/) We expect the final release to happen within the next 2-3 weeks. Release notes and upgrade instructions here: https://github.com/mastodon/mastodon/releases/tag/v5.0.0-beta.1 #mastoadmin

Upgraded this Mastodon instance from 4.7.5 to 5.0.0-beta.1. Some sneaky version upgrades necessary, but I made it through. Lost the Tangerine UI, but not worried about it right now. Don't know if this was just me, but after the update I wasn't able to get to the Admin areas without logging out and back in again on my Admin account. #MastoAdmin

We just released Mastodon v4.7.5, v4.6.11, v4.5.21 and v4.4.28. They fix multiple high severity security issues. We encourage admins to update as soon as they can. Full release notes and update instructions are available on the GitHub releases page. https://github.com/mastodon/mastodon/releases #MastoAdmin

You can now add up to 10 links on your DMV.community profile page! #mastodon #fediverse #mastoadmin #LinksLinksLinks

We just released Mastodon v4.7.4, v4.6.10, v4.5.20 and v4.4.27.

For those using our nightly containers, the nightly.2026-10-30-security tag is available with the fix.

In addition to several bugfixes and dependency updates, they fix a critical security issue that can be used to impersonate remote accounts and activities. We urge admins to update as soon as possible.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#MastoAdmin

Met bijna vierduizend actieve gebruikers krijgen we nu zo’n 100 a 150 moderatieverzoeken in 30 dagen. Dat is de laatste tijd wel behoorlijk toegenomen. Gemiddeld zijn dat er dan tussen de 3 en 5 per dag en als je er zo naar kijkt valt het heel erg mee. Mastodon.nl heeft een moderatie team met 5 moderatoren die elkaar ondertussen behoorlijk kennen. Moeilijke of onduidelijke gevallen worden eerst besproken voor we een beslissing maken. De laatste tijd zijn we wat strenger op reclame, spam en het veelvuldig posten van AI gegenereerde content. Zijn daar vragen over? We beantwoorden ze graag. Cc @support@mastodon.nl#moderatie #mastoadmin

📬 Trunk & Tidbits for September 2026 is now out! Our monthly blog post series is there to showcase what we worked on last month. A lot happened last month in preparation of our upcoming Mastodon 5.0 release. We also merged an optimisation to account deletion federation (which requires signed fetches for accounts), a few improvements to the moderation panel and to our FASP integration. https://blog.joinmastodon.org/2026/10/trunk-tidbits-september-2026/ #mastodev #mastoadmin #TrunkAndTidbits

We are planning to release new Mastodon security updates for versions 4.4, 4.5, 4.6, 4.7 and nightly this Thursday, Oct 29, at around 14:00 UTC. It solves a critical severity security issue. We encourage server administrators to plan for an update in the hours following the release to ensure their instance is protected. These versions will not require database migrations. #MastoAdmin

Progress update: Mastodon Bird UI support for Mastodon v5 is progressing nicely. Vanilla Mastodon v5 on the left Mastodon v5 with Mastodon Bird UI v5 on the right My goal is to keep the familiar Mastodon Bird UI on the latest version of Mastodon. And yes, I'll add some trending posts and other stuff to the empty right panel, but those will only be available on our instance. #BuildInPublic #MementomoriSocial #MastodonBirdUI #BirdUI #Mastodon #MastoAdmin #UI #CSS

Mastodon v5 alpha with Mastodon Bird UI v5 alpha and additional sidebar content in the test/dev environment for our Mastodon fork, mementomori.social. It's coming together nicely. #UI #CSS #Experimental #MastodonBirdUI #Mastodon #MastoAdmin #MementomoriSocial #OpenSource

I know VPNs exist, but if there was an option in the Mastodon admin interface to only allow new users to register if they have an IP-address that resolves to Norway... that would get rid of 99% of spam sign-ups and I would probably open registration (as opposed to requiring approval). #Mastodon #MastoAdmin #Administrators #Allheimen #Fediverse #Norway #Norge #MastodonFeedback

In the wake of the compromise of the eMudhra Intermediate CA, we strongly encourage all Mastodon administrators to make sure their systems are up-to-date. For those using our official Mastodon container images, we just rebuilt them (with the same tags) so they contain the latest updates to the list of CA certificates. Please update them as soon as possible. For more information about this compromise and ways to check if your server is impacted, please read https://emudhra.we-have-a-problem.com #mastoadmin

Mastodon admins! There is a spam wave hitting the Fediverse consisting of many mentions and a dubious/dangerous web link. You can find help for dealing with this at: ➡️ @iftas@mastodon.iftas.org IFTAS is posting and sharing lots of practical suggestions, and it is well worth following them anyway as they provide valuable resources for Fediverse safety. If you browse their timeline at @iftas@mastodon.iftas.org you'll see all their posts and shares. #MastoAdmin #FediAdmin #Spam

There are major account take-over problems happening right now on mastodon instances - all appearances are that the actor is using stolen passwords, probably from malware running on desktops. I've suspended hundreds of compromised accounts over the past 48 hours, but only two on mine. If you run a mastodon instance, here is a postgres query I use to randomize the passwords of accounts that have been inactive for 6 months or more. It also removes logged in sessions. This doesn't lock people out, just makes them perform a password reset. Yes, I wish I didn't have to do this, but here we are. I hope it helps someone else. BEGIN; CREATE TEMP TABLE dormant_batch ON COMMIT DROP AS SELECT u.id AS user_id FROM users u WHERE COALESCE(u.current_sign_in_at, u.created_at) < now() - interval '6 months' AND NOT u.otp_required_for_login AND NOT EXISTS (SELECT 1 FROM webauthn_credentials w WHERE w.user_id = u.id) AND NOT EXISTS (SELECT 1 FROM oauth_access_tokens t WHERE t.resource_owner_id = u.id AND t.revoked_at IS NULL AND t.last_used_at > now() - interval '6 months'); UPDATE users u SET encrypted_password = '$2a$10$' || left(replace(gen_random_uuid()::text || gen_random_uuid()::text, '-', ''), 53), updated_at = now() FROM dormant_batch b WHERE u.id = b.user_id; UPDATE oauth_access_tokens t SET revoked_at = now() FROM dormant_batch b WHERE t.resource_owner_id = b.user_id AND t.revoked_at IS NULL; DELETE FROM session_activations s USING dormant_batch b WHERE s.user_id = b.user_id; SELECT COALESCE(y::text, 'total') AS last_seen_year, count(*) AS locked FROM (SELECT date_part('year', COALESCE(u.current_sign_in_at, u.created_at))::int AS y FROM dormant_batch b JOIN users u ON u.id = b.user_id) s GROUP BY ROLLUP (y) ORDER BY y NULLS LAST; COMMIT; #mastoadmin #fediadmin

#MastoAdmin question: when I get the warning about “Followers their users would lose” in the federation admin menu, is there a way to see *which* users are being followed by people from my server?