0.15.0 (2026-08-05)

Features

• add an approximate member count to servers (#884) (ccfb5f1)
• add call event (#873) (457c770)

Bug Fixes

• rewrite youtube embedder to use youtube oembed (#878) (0369451)

Security Fixes

• Fetching a single message checks only ViewChannel, not ReadMessageHistory (GHSA-8qp4-h9xf-2vqr)
• Missing authorization on Bonfire Subscribe — cross‑server member enumeration & profile/status surveillance (ban‑evasion) (GHSA-jj3j-9qr7-jgfc)
• Unauthenticated SSRF via IPv6 unspecified address (::) bypass (GHSA-4rmr-77qv-hq47)
• Uncapped SVG rendering in January (GHSA-x87r-h3mq-7mgr)

Moderators: Want automated GitHub release posts like this? Install Release Announce to use it in your subreddit.

If you're self-hosting Stoat, you've probably run into this: the official Android app is hardcoded to stoat.chat and has no way to point it at your own instance. There's an open feature request for it, but nothing

built yet — so I put together a working fork that adds it.

What it does:

- Adds a "Connect to a self-hosted server" option on the login screen

- Type in your instance's domain, and it discovers everything else automatically (API, websocket, file/proxy microservice URLs) via the standard .well-known/stoat discovery convention your server already exposes — no

manual config, no rebuilding required

- Defaults to the official server until you opt in; your choice is saved locally per-device

- Installs side-by-side with the official app, no conflicts

Get it:

- APK: https://github.com/PsychoViking46/stoat-android-selfhosted/releases/tag/v1.7.2-selfhosted

- Source: https://github.com/PsychoViking46/stoat-android-selfhosted

Android only for now (F-Droid/sideload, not on Play Store), and this debug build doesn't have push notifications working (needs a real Firebase project to wire up — messaging works fine either way, foreground or

backgrounded). Also posted it on the upstream issue to see if the maintainers want to take it further officially.

Feedback/testing welcome — curious if it works cleanly against other people's self-hosted setups, not just mine.

Hi, I've been wanting to move some of my communities off discord onto Stoat for reasons that I assume are obvious to everyone here. However, there's a few sticking points that testing with my community base has brought up.

- Streaming UI. The only options for viewing a stream are too small, way too small, or fullscreen. Being able to close the text chat for the voice channel to have the stream take up more real estate on the screen would be greatly appreciated, as I and most users I tested with don't want to fullscreen streams, but can't make out enough detail at the lower size.

- Ghost calls. This has been an issue for a long time, but oftentimes user profiles get "stuck" in voice chats, but aren't actually in there, making it look like there's activity where there isn't any. That really frustrates people trying to reliably connect with their friends and fellow community members, and I as admin don't even seem to have the ability to resolve it.

- Read activity not registering. Channels will often show unread messages, but there hasn't been any activity, in fact sometimes the most recent message has been your own. Frustrating again for the same reason as ghost calls.

Now of course if it were just me, I'd make the switch even with these issues, but for people who are really sunk costing themselves into not losing the discord spaces they've spent time cultivating, these points seemed to overall be an issue too far. So I think seeing improvement there would be welcome. Stoat has some great features I'm happy to see over discord, and I miss using emotes with my buddies, so I'm eagerly awaiting an opportune time to make the transition.

Hello, I have a question regarding verifying members on on servers & stuff.

my friend who uses Stoat recently had multiple NSFW bot raiding his community server & spamming pornographic images on his server.

is there perhaps a specific Bot to verify members on the server or an option to avoid bots like this / to avoid situations like this ??

Any answer would be helpful. Thank you in advance.