Hello, we heard everyone has been having a great time with security releases so we're doing one as well. Here's v0.22.3 of #GoToSocial aka Shrubbiest Sloth Ever:

https://codeberg.org/superseriousbusiness/gotosocial/releases/tag/v0.22.3

Release highlights

• Bump required Go build version to v1.26.10 to mitigate CVE-2026-111943 by distrusting select intermediary authorities so server admins (and docker users) don't have to update ca-certificates themselves (see https://github.com/golang/go/issues/82348).
• Fix an issue in the dereferencer where remote accounts could masquerade as other remote accounts with sneaky URL shenanigans. Thanks to @elise for reporting this.

⚠️⚠️ We recommend everyone running GoToSocial update to this release at their earliest convenience. ⚠️⚠️

For everyone already on v0.22.x it's a simple update with no migrations or config changes. For everyone below v0.22.x, see the release notes for migration instructions.

Thanks! Sorry! Thanks!