LoginSign Up
← Back to all sparks
M

Misskey

COMMS
Velocity5.0

Decentralized microblogging server for the fediverse

misskey-hub.net ↗

Misskey offloads its embedded ML stack to external services and ships a critical security patch in consecutive major releases.

fediverseactivitypubself-hostedcontent-moderationsecurity-patches
◆Current state
Misskey maintains a monthly major release cadence with an explicit beta/RC pipeline before stable releases. The 2026.7.0 cycle's defining architectural change was removing the bundled TensorFlow/nsfwjs NSFW detection in favor of an external HTTP service—substantially reducing installation complexity and ML dependency weight for self-hosters. The 2026.9.0 stable release carried critical security vulnerability fixes requiring urgent instance operator updates.
◆Where it's heading
Misskey is reducing its embedded dependency footprint, making instances lighter and more modular. Offloading NSFW detection to a configurable external service is the clearest example: instances that don't need content moderation avoid the ML stack entirely, while those that do can point to a dedicated service. This trend toward externalizing heavy subsystems continues the project's decentralized, operator-customizable philosophy.
◆Prediction
Continued dependency reduction and broader ActivityPub federation improvements are likely. The 2026.8.0 alpha cycle signals the next major feature set is in active development, though content is not yet visible from the alpha.

◆Recent moves

  1. 10d ago

    2026.9.0

    The 2026.9.0 stable release carries critical security vulnerability fixes requiring immediate instance operator action—the project's own advisory flags these as serious. Alongside the fixes: CW (content warning) text is now included in note translation, and the image viewer gains a pixel-art upscaling mode. The urgency of the security fixes somewhat overshadows the feature additions.

    View source ↗
  2. 1mo ago

    2026.8.0-alpha.0

    An alpha preview of the next development cycle, sharing the same image viewer pixel art mode and Blurhash rendering fix as 2026.9.0. Alpha releases in Misskey's pipeline are staging points for features under active development; substantive capability changes are not yet visible here.

    View source ↗
  3. 1mo ago

    2026.7.0

    The 2026.7.0 stable release replaces Misskey's bundled nsfwjs/TensorFlow NSFW detection with an external HTTP service (`sensitive-detector`), removing the native ML stack from the install requirements. Instance operators who need content moderation must now run a separate service, but those who don't eliminate significant dependency weight. This is the most architecturally significant change in the recent release window.

    View source ↗
  4. 1mo ago

    2026.7.0-rc.0

    Release candidate for 2026.7.0, containing the same NSFW detection architecture change as the stable release. RC stages in Misskey's pipeline are primarily for operator testing before broad deployment.

    View source ↗
  5. 1mo ago

    2026.7.0-beta.6

    Beta 6 in the 2026.7.0 cycle, focused on the NSFW detection migration and associated system requirement changes. Substantive feature additions are not visible from this pre-release stage.

    View source ↗
  6. 1mo ago

    2026.7.0-beta.5

    Beta 5 in the 2026.7.0 release cycle, carrying the same NSFW detection architectural changes as the subsequent betas and stable release. Pre-release stages in Misskey's pipeline accumulate fixes without introducing new features.

    View source ↗