Update ghcr.io/mastodon/mastodon Docker tag to v4.2.8 (#48)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/mastodon/mastodon](https://github.com/mastodon/mastodon) |
patch | `v4.2.7` -> `v4.2.8` |

---

### Release Notes

<details>
<summary>mastodon/mastodon (ghcr.io/mastodon/mastodon)</summary>

###
[`v4.2.8`](https://github.com/mastodon/mastodon/releases/tag/v4.2.8)

[Compare
Source](https://github.com/mastodon/mastodon/compare/v4.2.7...v4.2.8)

<h1><picture>
<source media="(prefers-color-scheme: dark)"
srcset="./lib/assets/wordmark.dark.png?raw=true">
<source media="(prefers-color-scheme: light)"
srcset="./lib/assets/wordmark.light.png?raw=true">
<img alt="Mastodon" src="./lib/assets/wordmark.light.png?raw=true"
height="34">
</picture></h1>

> \[!WARNING]
> **We recently released important security updates fixing major
security updates. If you are using Mastodon v4.2.6 or below, v4.1.14 or
below, or any older version, please update as soon as possible.**
>
> See updates for the [4.1.x
branch](https://github.com/mastodon/mastodon/releases/tag/v4.1.15),
the [4.0.x
branch](https://github.com/mastodon/mastodon/releases/tag/v4.0.15) and
the [3.5.x
branch](https://github.com/mastodon/mastodon/releases/tag/v3.5.19).

#### Changelog

> \[!IMPORTANT]
> **This update changes registrations to be closed by default.**
>
> Running a social media platform where anyone can sign up without
active moderation is dangerous.
>
> We are changing the default, so that opening registrations is always a
conscious choice. If you have never changed or saved the registrations
mode yourself, this update will switch your server to not accepting new
users. Simply change the setting again after the update if you wish to
restore the old behaviour.

##### Added

- Add hourly task to automatically require approval for new
registrations in the absence of moderators
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/29318),
[ClearlyClaire](https://github.com/mastodon/mastodon/pull/29355))
In order to prevent future abandoned Mastodon servers from being used
for spam, harassment and other malicious activity, Mastodon will now
automatically switch new user registrations to require moderator
approval whenever they are left open and no activity (including
non-moderation actions from apps) from any logged-in user with
permission to access moderation reports has been detected in a full
week.
When this happens, users with the permission to change server settings
will receive an email notification.
This feature is disabled when `EMAIL_DOMAIN_ALLOWLIST` is used, and can
also be disabled with
`DISABLE_AUTOMATIC_SWITCHING_TO_APPROVED_REGISTRATIONS=true`.

##### Changed

- Change registrations to be closed by default on new installations
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/29280))
If you are running a server and never changed your registrations mode
from the default, updating will automatically close your registrations.
Simply re-enable them through the administration interface or using
`tootctl settings registrations open` if you want to enable them again.

##### Fixed

- Fix processing of remote ActivityPub actors making use of `Link`
objects as `Image` `url`
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/29335))
- Fix link verifications when page size exceeds 1MB
([ClearlyClaire](https://github.com/mastodon/mastodon/pull/29358))

#### Moderation tooling

While we work on better tools to fight spam and abuse, we want to draw
your attention to the tools already at your disposal:

-   Manual review for new user registrations
- [Blocking disposable/temporary e-mail
providers](https://docs.joinmastodon.org/admin/moderation/#blocking-by-e-mail-server)
(such as `any.pink` being used in the current wave)
- [Setting up
hCaptcha](https://docs.joinmastodon.org/admin/optional/captcha/)

#### Known issues

When setting up a new server, the admin account created by the
`mastodon:setup` task will not be automatically approved. You will need
to approve it from the command-line interface with `tootctl modify
<username> --approved`.

#### Upgrade notes

To get the code for v4.2.8, use `git fetch && git checkout v4.2.8`.

> \[!NOTE]
> As always, **make sure you have backups of the database before
performing any upgrades**. If you are using docker-compose, this is how
a backup command might look: `docker exec mastodon_db_1 pg_dump -Fc -U
postgres postgres > name_of_the_backup.dump`

##### Dependencies

With the exception of Ruby's recommended version, external dependencies
have not changed since v4.2.0, the compatible Ruby, PostgreSQL, Node,
Elasticsearch and Redis versions are the same, that is:

-   Ruby: 3.0 to 3.2
-   PostgreSQL: 10 or newer
- Elasticsearch (recommended, for full-text search): 7.x (OpenSearch
should also work)
-   LibreTranslate (optional, for translations): 1.3.3 or newer
-   Redis: 4 or newer
-   Node: 16 or newer
-   ImageMagick: 6.9.7-7 or newer

##### Update steps

The following instructions are for updating from 4.2.7.

If you are upgrading directly from an earlier release, please carefully
read the upgrade notes for the skipped releases as well, as they often
require extra steps such as database migrations.

**Non-Docker only:**

1. Install dependencies: `bundle install` and `yarn install
--frozen-lockfile`
2. Precompile the assets: `RAILS_ENV=production bundle exec rails
assets:precompile`
3.  Restart all Mastodon processes

**Using Docker:**

1.  Restart all Mastodon processes

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/enoki-coop/helm-charts).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

charts/enoki-mastodon/Chart.yaml

@@ -7,7 +7,7 @@ type: application
 version: 0.3.12
 
 # renovate: image=ghcr.io/mastodon/mastodon
-appVersion: v4.2.7
+appVersion: v4.2.8
 
 dependencies:
   - name: mastodon

charts/mastodon/Chart.yaml

@@ -21,7 +21,7 @@ version: 4.0.12
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # renovate: image=ghcr.io/mastodon/mastodon
-appVersion: v4.2.7
+appVersion: v4.2.8
 
 dependencies:
 - name: common