Discourse 3.4.3 is a stable release focused on bug fixes and UX improvements, with security updates addressed via community and HackerOne reports. While the ‘stable’ branch prioritizes minimal change, all releases—including tests-passed and beta—are production-ready. Key plugin updates include: discourse-activity-pub with bug fixes for ActorHandler and delivery locks, plus UX enhancements; discourse-ai introducing persona/LLM selection, AI usage metrics, and context window improvements; discourse-follow adding a following feed to /filter; discourse-gamification fixing scoring regressions; discourse-just-chat hiding search; discourse-login-client retrieving avatars and correcting OAuth payloads; discourse-open-graph adding Open Graph overrides; and discourse-prometheus expanding metrics for HTTP requests, Sidekiq jobs, and CPU usage. For a full list of changes, users are encouraged to review the Additional Features and Fixes section. hugh and tgxworld highlight the breadth of updates, emphasizing that many changes go undocumented in summaries.
Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on lack of change than lack of bugs - all releases, including those on tests-passed and beta are production ready.
Security Updates
This release includes fixes for these security issues reported by our community and HackerOne.
But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.
Plugin improvements
discourse-activity-pub
Bug Fixes
Prevent ActorHandler from attempting to apply updates to categories or tags (208)
Only update actors to available if they are unavailable (204)