[ANN] Prosody 13.0.1 released

16 views
Skip to first unread message

Matthew Wild

unread,
Apr 3, 2025, 6:09:48 PMApr 3
to Prosody IM Users Group, Prosody IM Developers Group, prosody-...@googlegroups.com
Hi folks,

We are pleased to announce the release of Prosody 13.0.1.

As is the tradition with software, here is our first patch release
following shortly behind our major 13.0.0 release announced a few weeks
ago. It fixes some important bugs that were discovered after the
release.

Many thanks to everyone who reported issues and helped with testing the
fixes for this release. We appreciate it!

For those of you on 0.12.x who haven’t upgraded yet, skip 13.0.0 and
jump straight to 13.0.1 if you can. It will be a smoother upgrade.

A summary of changes since the previous release:

Fixes and improvements

- mod_admin_shell: Add debug:cert_index() command to aid debugging of
automatic certificate selection
- mod_tls: Enable Prosody’s certificate checking for incoming s2s
connections (fixes #1916: Impossible to override certificate
verification policy in 13.0)
- portmanager: Multiple fixes to use correct certificates for direct
TLS ports (fixes #1915)
- net.server_epoll: Use correct connection timeout when initiating
Direct TLS
- mod_roster: Fix shell commands when a component is involved (fixes
#1908: error in prosodyctl shell roster attempting to subscribe a
component)
- mod_http_file_share: Explicitly reject all unsupported ranges
- mod_http_file_share: Fix off by one in Range response
- mod_admin_shell, prosodyctl shell: Report command failure when no
password entered (fixes #1907: prosodyctl adduser: unexpected
account creation on password mismatch)

Minor changes

- mod_storage_sql: Drop legacy index without confirmation to ease
upgrades
- util.adminstream: Fix traceback on double-close (fixes #1913:
Prosody fails to completely stop while shell watch:log is active)
- certmanager: Improve logging for all cases where certs are skipped
- mod_tls: Collect full certificate chain validation information
- mod_s2s: Fix error detection with newer versions of OpenSSL
- portmanager: Add debug log message to state which certificate we end
up using
- prosodyctl check certs: Use correct hostname in warning message
about HTTPS
- prosodyctl check: Be more robust against invalid disco_items, and
show warning
- spec/tls: Add TLS/certificate integration tests
- mod_http_file_share: Improve error reporting by using util.error
more
- core.storagemanager: Fix tests by removing an assert that upset
luarocks
- core.usermanager: Fix COMPAT layer for legacy is_admin() function
- certmanager: Remove obsolete and verbose index log (replaced by
shell command)
- doap: Add XEP-0333, XEP-0334, XEP-0156 and mod_http_altconnect

# Download

As usual, download instructions for many platforms can be found on our
download page: https://prosody.im/download

If you have any questions, comments or other issues with this release,
let us know! https://prosody.im/discuss
Reply all
Reply to author
Forward
0 new messages