Started working on bringing ActivityPub Polls to NodeBB

First step is adding in separate handling of the Question object. Right now NodeBB treats it as a "Note-like" and renders it like a post 50% of the way there... will need to link it to nodebb-plugin-poll...

One complication... the plugin ties votes to users. This data isn't reflected over-the-wire in AP, only the aggregate voter counts are shared [...]

https://github.com/NodeBB/nodebb-plugin-poll/pull/157

In a few days — perhaps in about a week — you’ll hear how all these Mastodon sites were hacked.

Why?

Because they didn’t update.

Some of you are running copies of Mastodon from two years ago or more, and you’ll still wonder why. 🤦

#Mastodon #Fediverse #ActivityPub

Hollo announces: Hollo 0.9.0 is out. https://hollo.social/@hollo/019e451e-f368-70e2-b993-77d01a14a677 #hollo #fediverse #ActivityPub

#Wanderer is a very nice project, but it is currently too raw to use. The last two releases just broke everything, and even a clean setup doesn't help. I'll follow the repository, but shut down my instance for now.

https://github.com/open-wanderer/wanderer

#SelfHosted #SelfHosting #SelfHost #homelab #ActivityPub #hiking

My Hollo instance has been updated to 0.9.1 if you wanna take a peek. It's shaking off the early UI look and feel for something more professional.

A lot of extra configurations that I didn't have time to review or enable, but some of it looks interesting, like more efficient handling of remote media.

https://hollo.box464.social/@hollo464

#FediDev #Hollo #ActivityPub

#Fediverse #ActivityPub #Snac2 #snac

- https://github.com/mastodon/mastodon/releases/tag/v4.5.10
- https://hollo.social/@fedify/019e4675-05bc-7725-bcf4-aa51d6af70a0
- https://shrimp.meow.company/notes/amhmis327j0wve4w
- https://shrimp.meow.company/notes/amhmiqtsbwgmt158
- https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.7
- https://hubzilla.org/item/53f3509f-d63d-494c-a431-ac84df9c6a57
- https://w.on-t.work/activitypub/may-2026-vulnerability

>Fix Linked-Data Signature bypass through JSON-LD graph restructuring features

JSON-LD adds nothing to Fediverse except bugs and security vulnerabilities.

Of course, there is an alternative to Linked Data signatures that doesn't require Linked Data, much simpler and more secure:

FEP-8b32: Object Integrity Proofs

#activityPub #fedidev

Here is my work-in-progress FEP for using JSON Resume with ActivityPub:

FEP-6158: ActivityPub 'Resume' Object: JSON Resume expressed as JSON-LD

https://codeberg.org/reiver/fep/src/branch/fep-6158/fep/6158/fep-6158.md

I prefer to write for clarity, so it still needs work.

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD #JSONResume #fep6158 #fep_6158

@hollo releases a new major version update, 0.90. Too many changes to hit in a single post! Skimming, the most notable to users will be the switch from Pico CSS (my weekend hobbyist fave) to Uno CSS. At least in screenshots, the new UI is taking on a polished look.

Planning to upgrade, but need to review this a bit more before flipping the switch.

https://github.com/fedify-dev/hollo/discussions/496

#FediDev #ActivityPub

My personal desire would be to create a format from scratch (because you are in control, you get something bespoke to your needs, and it is personally satisfying), but —

I think there is probably an advantage to using something (such as JSON resume) that already has wide adoption.

I guess that makes me inclined towards the latter.

...

So, if I go that way, I would have to decide: plain JSON or JSON-LD.

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD #JSONresume

I may have written a JSON-LD schema for JSON Resume.

It is defined in terms of ActivityPub.
For example:

'Resume' is a sub-type of an ActivityPub 'Object'. There are some new fields defined. Etc.

...

Now the question is — where do I put it?

Do I create a pull-request to the JSON Resume resume-schema repo?

Do I create a FEP?

Do I put it somewhere else?

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD #JSONresume

Loops Playlists will soon federate!

They will likely only be compatible with other Loops servers as we're using a new type of OrderedCollection.

#Loops #ActivityPub #LoopsPlaylists

Alt...

Loops Playlists feature

How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS is an excellent way to enjoy an efficient and secure Mastodon experience.
What is Mastodon?
Mastodon is a #decentralized social media platform that enables users to post ...
Continued 👉 https://blog.radwebhosting.com/how-to-host-your-own-mastodon-server-on-a-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosting #activitypub #installguide #rubygems #selfhosted #rubyonrails

Evan Prodromou says: For the #ActivityPubAPI, we need a profile of OAuth to use for accessing the actor's data. https://cosocial.ca/@evan/116591693871988651 #ActivityPub

RE: https://mastodon.social/@reiver/116597879302607072

More on a resume / CV on the Fediverse on Social Web.

Another option could be to use something like "JSON resume":

https://jsonresume.org/

https://github.com/jsonresume/resume-schema/blob/master/job-schema.json

It seems to be popular.

It isn't JSON-LD. Although I think it would be straightforward to translate it to JSON-LD, if that was desired.

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD #JSONresume

fedicat boosted

@reiver ⊼ (Charles) » 🌐 2026-05-18
@reiver@mastodon.social

RE: https://mastodon.social/@reiver/116597841178183282

There is also the other question of — would the resume / CV be JSON-LD.

On one hand, if it was in JSON-LD, it would make it machine-legible similar to ActivityPub.

On the other hand, I don't think anyone is going to write JSON-LD (especially HTML embedded in a JSON string value) by hand. But, I do think some people will want to write their resume by hand.

It feels like user-experience is fighting with JSON-LD based machine-legibility.

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD

RE: https://mastodon.social/@reiver/116597841178183282

There is also the other question of — would the resume / CV be JSON-LD.

On one hand, if it was in JSON-LD, it would make it machine-legible similar to ActivityPub.

On the other hand, I don't think anyone is going to write JSON-LD (especially HTML embedded in a JSON string value) by hand. But, I do think some people will want to write their resume by hand.

It feels like user-experience is fighting with JSON-LD based machine-legibility.

#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD

https://github.com/macports/macports-ports/pull/32773

GitHub Continuous Integration checks passed!

It's up to someone else with commit access to merge it.

Thanks to you and la_ninpre, trondd555, sergiodj, kpm, zen, pmjv and anyone else I may have missed for the improvements in this release!

My apologies for taking so long to get around to submitting a PR. I check repology.org multiple times a day, most days, but for some reason only saw snac needed attention a few hours ago! This may inspire me to rejigger MacPorts' livecheck stuff for local/sanity check/resilience/not putting all my eggs into one basket/etc.

#snac #MacPorts #OpenSource #ActivityPub #Mastodon #NoDatabaseNeeded
#NoJavaScript #NoCookiesEither #NotMuchBullShit #snacAnnounces

For the #ActivityPubAPI, we need a profile of OAuth to use for accessing the actor's data. There's a suggested flow here:

https://github.com/swicg/activitypub-api/blob/main/OAuth%202.0%20for%20ActivityPub%20Activity%20Diagram.png

There's an example client here:

https://swicg.github.io/activitypub-api/examples/oauth/index.html

It tries discovery via RFC 8414 or getting the endpoints straight from the actor.

It then provisions a client ID using CIMD, FEP d8c2, or DCR (in that order).

It then tries to do an authorization code flow.

I'm interested in seeing it tested with more ActivityPub API servers.

#ActivityPub

Remote Inbox Architecture

1/

This, the Remote Inbox Architecture, is an architecture for a Fediverse back-end server that I think could be useful.

Here is how it works — there are (at least) 2 servers involved: (1) the main back-end server, and (2) a remote inbox server.

The actor file on main back-end server "points" the inbox to the remote server.

It separates the user's content front the front-end related functionality

...

#ActivityPub #ActivityStreams #FediDev #RemoteInbox

Remote Inbox Architecture

2/

The Remote Inbox server deals with incoming activities, objects, etc, from other users..

The front-end can get the inbox (and other feeds') data from the Remote Inbox server.

(You'd probably want to store cached data from the Fediverse elsewhere from these two servers, as I've said before. But, that is a separate thread.)

#ActivityPub #ActivityStreams #FediDev #RemoteInbox

I'm getting closer to something showable on my side project, a recipe and baking app, #federated with #ActivityPub, https://cookifed.dev.
I'm not ready to accept new users yet, but @dmathieu@cuisine.social is the first ever #cookifed federated account!

I've been working on improving Loops federation in preparation to reuse it and it's powerful builder/handler/validation pattern for Pixelfed!

This will solve many federation issues in Pixelfed, like missing comment threading, mentions, blocks and unblocks and much more.

Then I will abstract it into a reusable Laravel package, so any laravel project can easily add federation support in minutes

I also submitted a NLnet grant application for this 🤞

https://github.com/dansup/laravel-activitypub

#ActivityPub #Laravel

@publicspaces will have a pre-conference unconference on June 4th.

This unconference is an open invitation to discuss & forge relationships between people involved with the #OpenSocialWeb. From app builder & protocol architects to advocates, sysadmins, moderators, community organisers & more. Let's forge bonds across cultures, protocols & apps!

Admission free, registration required:
https://tickets.publicspaces.net/publicspaces/pubconf2026/

#ActivityPub #Fediverse #ATProto #Matrix #OpenSource #PublicSpaces #PubConf2026

Hear me out, if we can integrate these 4, in a seamless frictionless integrated experience for both, companies and users, we could have a nice alternative to #LinkedIn that is actually not crap.

Any interest?

#fediverse #mastodon #activitypub #lemmy #badgefed

Alt...

A diagram titled "An ActivityPub-based LinkedIn" is presented on a light blue background. The image features four colored rectangular boxes arranged in a grid around a central horizontal bar. The top row includes a light purple box with the text "Professional Profile and Badges" and "fediprofile," alongside a dark purple box with the text "Social Graph and Updates" and "mastodon." A dark blue horizontal bar in the center contains the text "Single Login Identity." The bottom row consists of a black box with the text "Job posts and discussions" and "lemmy," and an orange box with the text "Achievements and Certifications" and "badgefed."

Week in Fediverse 2026-05-15

Servers

- PieFed v1.6.23
- Hollo v0.8.3
- Ktistec v3.3.8
- Wafrn v2026.05.01
- snac v2.92
- Mitra v5.3.0
- Iceshrimp v2026.4.2
- Hollo v0.8.4
- Vernissage v1.37.0
- Bonfire v1.0.3
- Hometown v1.2.1
- tootik v0.22.1
- NeoDB v0.14.2
- NodeBB v4.11.3
- PieFed v1.6.23
- Wanderer v0.19.0
- Aktor: A headless, Mastodon-compatible ActivityPub server

Clients

- FediLab v3.40.0
- tooi v0.25.0
- Holos v1.5.6
- Phanpy changelog
- lemmy-tray: Read lemmy posts in system tray

Tools and Plugins

- FediFetcher v7.1.18
- slurp v1.1.1

For developers

- BotKit v0.4.1
- APx v0.24.0

Articles

- There Are a Million Fediverses. Some of Them Are Louder than Others

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/019e0915-d395-7e60-aad7-f2f1a354264a

We just released Bonfire Social 1.0.3 🔥

Blog post with all the details: bonfirenetworks.org/posts/bo...

It comes with dozens of bug fixes and UX improvements, plus:

• Federated comments embeddable on any web page.

• Deep Ghost integration: SSO, membership tier sync, and automatic article import.

• New dashboard widgets: spotlight, polls closing soon, top discussions.

• #CalmEmpowerment: a new design pattern that starts with a few sensible defaults, offers a middle layer of common adjustments, and reveals the full options only when you need them. Boundaries and post permissions got this treatment first, more to follow...

• Modular community rules: a first step in bringing research and co-design with students and researchers at @hci@micro.blogs.princeton.edu into Bonfire, so governance becomes something communities can better define and share, and that others can fork and adapt.

#Bonfire #Fediverse #ActivityPub #Ghost #CommunityRules

Does anyone have recommendations for a Mastodon fork that doesn't require visitors to enable JavaScript to view basic content? The JavaScript dependency is a security risk and user hostile. Visitors should not be required to enable JavaScript when simply visiting a Mastodon server. Plus, the recommendation to use a native app doesn't even work for all Mastodon/ActivityPub instances.

Also, the requirement for JavaScript makes the Mastodon development team seem incompetent. They can't even make a basic web site that doesn't require JavaScript. I could do that when I was in middle school.

>To use the Mastodon web application, please enable JavaScript. Alternatively, try one of the native apps for Mastodon for your platform.

#Mastodon #ActivityPub #MastoAdmin #SelfHost #Security

Alt...

To use the Mastodon web application, please enable JavaScript. Alternatively, try one of the native apps for Mastodon for your platform.

So #Vine is coming back, this time as #DiVine!
Does anyone know anyone who can get me an invite code? I want in!
The App is coming back with no #AI allowed, and will allow people to own their own content.

For the geeks: it's built on the #OpenSocial protocol #Nostr, and apparently they're experimenting with integrating the #ATProtocol, future integration with #ActivityPub, the protocol behind #Mastodon and #Flipboard.
https://www.youtube.com/watch?v=zUGnNIh60-0

#Holos is a new social network working with #ActivityPub. This is not an app where you can connect your Mastodon, Pixelfed or PeerTube account.
There is no web version and no API because the ActivityPub server runs on the device itself. That's the whole challenge behind this project.
If there is more engagement, I plan to build a desktop version and even sync between different devices.

The official account for all announcements is @HolosSocial

More: https://holos.social/how-it-works

#HolosSocial

There are a LOT of Fediverse projects out there!

If you're a techy person interested in self-hosting Fediverse platforms, you might like to check out the "Delightful Fediverse" list which tries to feature every Fediverse project available:

🌱 https://codeberg.org/fediverse/delightful-fediverse-experience

(It's worth noting the meaning of the emoji next to project names, as the status of different projects varies.)

#Fediverse #ActivityPub #SelfHosting #FOSS

#snac2 #fediverse #frugalfediverse

Changed default: for newly created instances, disable_inbox_collection is set to true (see snac(8) for more information). The reason is because it seems to be used for harrasing people.

Changed default: for newly created instances, disable_history is set to true (see snac(8) for more information). The reason is because archived history files don't reflect reality after posts are deleted or modified (they always have been an ugly kludge).

Changed default: in previous versions, posts with a scope of unlisted were shown in public pages and RSS feeds. Now, they are no longer shown. If you want to get back to previous behaviour, use a new toggle in the User Settings section (see snac(1) for more information).

New admin configuration option: if the purge_static value is set to true in server.json, each user's static directory is explored and those files there that are no longer attached to any post or referenced anywhere are deleted. See snac(8) for more information about those cases where you may not want to enable this option.

Allow serving files from subdirectories of the static/ subdirectory (contributed by la_ninpre).

Minor tweak to webfinger code to handle Hubzilla's peculiarities.

Fixed a search case where URLs to GotoSocial statuses were misidentified as accounts.

Accounts that follow you are now marked with a thumb-up emoji, because followers are adorable people.

Fixed some account export errors.

Fixed an incorrect hash in post links.

Show an account's location link in the people page, if they have one.

Mastodon API: Fixed hashtags loosing the link after editing a post, minor tweak in access token processing (contributed by trondd555).

Drop usage of PATH_MAX (contributed by sergiodj).

New Polish translation (contributed by kpm).

Updated German and Czech translations (contributed by zen and pmjv).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Following the recommendations I got, I set up a #NodeBB forum to discuss the projects #Fedilab, #Holos, #CastLab and #Fedle.

Each category federates over #ActivityPub, so you can follow it directly from your Fediverse account: @fedilab, @holos, @castlab, @fedle.

More details: https://forum.fedilab.app/post/2

Week in Fediverse 2026-05-08

Servers

- Vernissage v1.35.0
- Pleroma v2.10.2
- Funkwhale v2.0.2
- Betula v1.7.0
- Hollo v0.8.2
- Akkoma v2026.05
- Ktistec v3.3.7
- NodeBB v4.11.0
- Misskey v2026.5.1
- Ties v0.2.1
- PieFed v1.6.21
- Lemmy Development Update April 2026

Clients

- Nicolium v0.2.1
- Fedilab v3.39.0
- Pachli v3.6.1
- Mastodon for Android v2.12.0
- Coho v1.0
- PixelDroid v1.0.beta42
- Blorp v1.13.0
- Mitra Mini v0.4.0
- Holos v1.5.5

Tools and Plugins

- Fediverse Redirect v1.15.1

For developers

- APx v0.23.0

Articles

- Join the fediverse! zine
- A Bridge to Somewhere: How to Link Your Mastodon, Bluesky, or Other Federated Accounts

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/019de52a-a351-7ee2-a48b-7306090edfe6

Hashtag following also allow URLs to RSS feeds of ActivityPub objects (like e.g. https://mastodon.social/tags/ThankYouTuesday).

Users can now configure a webhook to receive an HTTP POST for every notification. This can be useful for implementing bots that react to activities, like autorepliers, chatbots or interactive textual games (see snac(1) for more information).

The number of pending follow confirmations is shown next to the "people" link.

Faster performance metrics (contributed by dandelions).

Improved lowercasing in hashtags (contributed by postscriptum).

A search-by-url tweak for implementations that return 200 for invalid webfinger queries (e.g. piefed).

Mastodon API: added follow confirmation endpoints, fixed collisions in attachment file names.

Fixed potential crashes in attachment uploads.

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Notifications are now shown in a more compact way (i.e. all reactions are shown just above your post, instead of repeating the post ad nauseam for every reaction).

New command-line option unmute to, well, no-longer-mute an actor.

The private timeline now includes an approximate mark between new posts and "already seen" ones.

Fixed a spurious 404 error in the instance root URL for some configurations.

https://comam.es/what-is-snac

If you find #snac useful, please consider contributing via LiberaPay: https://liberapay.com/grunfink/

#snacAnnounces

This release has been inspired by the song The Answers to the Questions by #Christabell and #DavidLynch.