Mastodon v4.7.3 releases with security fixes and account deletion improvements

The Mastodon v4.7.3 release focuses on security and data integrity, specifically addressing issues where account data remained after deletion. It includes dependency updates to fix thread leaks and installation errors. Notably, this update requires administrators to recompile assets during the upgrade process.

Technical changes in v4.7.3

• Security: Added logging for account data removal and fixed an issue where the POST /api/v1/accounts endpoint remained accessible when SSO_ACCOUNT_SIGN_UP was enabled.
• Data Integrity: Fixed several bugs where reported statuses, avatars, headers, and PreviewCardsStatus records were not being deleted alongside the account.
• Dependencies: Updated aws-sdk-s3 to fix a thread leak and updated yarn to v4.18.1 to resolve installation errors.
• Moderation: Fixed a bug allowing moderators to issue warnings to moderators of a higher position.
• Deployment: Requires manual asset recompilation using rails assets:precompile for non-Docker installations.

Why it matters

This release improves privacy compliance by ensuring more thorough account data deletion and strengthens the security posture of Fediverse instances.