❌

Normale weergave

Ontvangen — 1 Juli 2026 ⏭ Selfhosted

v12.1.0

✇Directus
Door: github-actions[bot]
13 Juli 2026 om 20:27

Note

Directus is free for individuals and organizations under $5M annual revenue and 50 employees.
Get your free license key at directus.com/oig

⚠️ Potential Breaking Changes

  • @directus/api
    • Limited sensitive system mutations defined by GRAPHQL_SINGLE_USE_MUTATIONS to single use (#27801 by @br41nslug)
    • Removed /utils/hash/generate and /utils/hash/verify endpoints (#27774 by @br41nslug)
    • Fixed failed TUS file replacements leaving orphaned file records. Hardened upload path validation to prevent writes to extension and temporary storage directories (#27803 by @br41nslug)
    • Updated GraphQL WebSocket restrictions to match the HTTP endpoint and hid validation hints when introspection is disabled (#27801 by @br41nslug)
    • Added CORS_ORIGIN checks for websocket connections (#27812 by @br41nslug)
  • @directus/specs
    • Removed /utils/hash/generate and /utils/hash/verify endpoints (#27774 by @br41nslug)
  • @directus/sdk
    • Removed /utils/hash/generate and /utils/hash/verify endpoints (#27774 by @br41nslug)
  • Hardened the published Docker image and added a distroless Docker Hardened Image (DHI) variant alongside it. The standard image now applies outstanding OS-level patches at build time and drops npm/npx from the runtime; the new DHI variant is published under a -dhi tag suffix (#27670 by @br41nslug)

✨ New Features & Improvements

🐛 Bug Fixes & Optimizations

  • @directus/app
    • Restored pre-v12 back button behavior: returns to the previously visited item/page when navigating via a relation, and to the collection listing when landing on an item directly (#27799 by @robluton)
    • Fixed the public page foreground image rendering side-by-side with the shader background instead of overlaying it (#27782 by @alvarosabu)
    • Added clearable indicator to input hash field (#27729 by @robluton)
    • Added lazy loading of social icons on v-button (#27724 by @alvarosabu)
    • Bumped version of @directus/license package (#27785 by @AlexGaillard)
    • Fixed array indexing (e.g. field[0] or field.0) in display and preview URL templates, so a template like {{ categories[0].name }} now resolves to the indexed value instead of rendering empty (#27773 by @dstockton)
    • Fixed a stored XSS vulnerability where the project color could break out of the generated favicon's SVG markup and inject arbitrary HTML (#27810 by @br41nslug)
    • Fixed an internal server error when validating out-of-range integer values (#27321 by @sourav-18)
    • Added interface settings for collection status field (#27781 by @robluton)
  • @directus/api
  • @directus/extensions-sdk
  • @directus/system-data
  • @directus/composables
  • @directus/validation
    • Fixed an internal server error when validating out-of-range integer values (#27321 by @sourav-18)
  • @directus/env
    • Limited sensitive system mutations defined by GRAPHQL_SINGLE_USE_MUTATIONS to single use (#27801 by @br41nslug)
  • @directus/utils
    • Classified the embedded IPv4 of IPv6 transition forms (IPv4-compatible, NAT64, 6to4) in IpBlocklist.checkAddress so they cannot bypass an IPv4 deny rule (#27698 by @joeltco)
  • License keys correctly validate, even when NODE_ENV=development

📦 Published Versions

  • @directus/app@16.2.0
  • @directus/api@37.0.0
  • @directus/composables@11.5.1
  • create-directus-extension@12.1.1
  • @directus/env@6.1.0
  • @directus/extensions@4.0.1
  • @directus/extensions-registry@4.0.1
  • @directus/extensions-sdk@18.0.1
  • @directus/memory@4.0.1
  • @directus/pressure@4.0.1
  • @directus/specs@15.0.0
  • @directus/storage-driver-azure@13.0.1
  • @directus/storage-driver-cloudinary@13.0.1
  • @directus/storage-driver-gcs@13.0.1
  • @directus/storage-driver-s3@13.0.1
  • @directus/storage-driver-supabase@4.0.1
  • @directus/system-data@4.5.1
  • @directus/themes@2.0.1
  • @directus/utils@13.5.1
  • @directus/validation@3.0.1
  • @directus/sdk@23.0.0

  •  
  • ↗️

v2.5.4

✇Cloudpanel
Door: cloudpanel-io
1 Juli 2026 om 17:45

New

  • Node.js 24 LTS Support
  • MariaDB 12.3 Support
  • Ubuntu 26.04 Support

Bug Fixes

  • #758 site:delete does not remove user crontab in /var/spool/cron/crontabs/
  • #761 SitePhpSettingsType.php throws 500 error while managing PHP sites — TypeError: Unsupported operand types (string + int)
  • #771 Font files missing correct mime type header in NGINX

  •  
  • ↗️

v2.3.0

✇Arcane
Door: kmendell
1 Juli 2026 om 06:40

New features

  • add appearance toggles for blur and interface animations (#3091 by @othyn)

Bug fixes

  • edge tunnel go routine leak (#3073 by @kmendell)
  • users with env only scopes unable to access the UI (#3081 by @kmendell)
  • use correct disabletlsverification parameter for ntfy (#3084 by @kmendell)
  • dont create trivy cache in server/client mode (#3087 by @kmendell)
  • stop phantom and duplicate projects from broken syncs (#3088 by @kmendell)
  • image polling notifications context being canceled early or not registered at all (#3089 by @kmendell)

Dependencies

  • bump svelte from 5.56.3 to 5.56.4 (#3067 by @dependabot[bot])
  • align some backend dependencies to avoid tranisent imports (#3068 by @kmendell)
  • bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 in /backend (#3044 by @dependabot[bot])
  • bump gorm.io/gorm from 1.31.1 to 1.31.2 in /backend (#3046 by @dependabot[bot])
  • bump prettier from 3.8.4 to 3.8.5 (#3064 by @dependabot[bot])
  • bump @tanstack/virtual-core from 3.17.1 to 3.17.2 (#3047 by @dependabot[bot])
  • bump @xyflow/svelte from 1.6.0 to 1.6.1 (#3066 by @dependabot[bot])
  • bump react-email from 6.6.3 to 6.6.5 (#3059 by @dependabot[bot])
  • bump @tanstack/svelte-query from 6.1.34 to 6.1.35 (#3049 by @dependabot[bot])
  • bump actions/cache from 5.0.5 to 6.1.0 (#3071 by @dependabot[bot])
  • bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 in /backend (#3070 by @dependabot[bot])
  • bump @tanstack/svelte-table from 9.0.0-beta.17 to 9.0.0-beta.21 in the tanstack-svelte group across 1 directory (#3072 by @dependabot[bot])

Other

  • use atomic file writes and atomic bools for tunnel connections (#3097 by @kmendell)

Full Changelog: v2.2.0...v2.3.0

  •  
  • ↗️
Ontvangen — 29 Juni 2026 ⏭ Selfhosted

Part-DB 2.13.0

✇Part-DB
Door: jbtronics
29 Juni 2026 om 00:35

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.0

New features & Improvements

  • Improved password strength estimator and show time to crack estimate in tooltip
  • Use better library for alerts and dialogs, instead of the outdated bootbox
  • Improved page load error dialog
  • Added bootswatch*s brite theme as possible theme
  • Added Ollama as (local) AI provider
  • Allow to configure the timeout for AI providers, making it more suitable for slow local inference
  • Added full chinese translation (thannks @0x915)
  • Allow to edit info provider references in part edit form

Bug fixes

  • Fixed bug that stocktake date changed on part edit (#1390)

Other changes

  • Updated dependencies
  • Updated KiCad symbols
  • Fixed many deprecations

New Contributors

Full Changelog: v2.12.3...v2.13.0

  •  
  • ↗️
Ontvangen — 28 Juni 2026 ⏭ Selfhosted

v2.2.0

✇Arcane
Door: kmendell
28 Juni 2026 om 21:01

New features

Bug fixes

Dependencies

Other

Full Changelog: v2.1.0...v2.2.0

  •  
  • ↗️

v1.7.6 - Crypto Plugin API & Privileged Plugin Tier, S/MIME as a Plugin, Hide Folder Counts & Structured MFA Login

✇Bulwark
Door: rathlinus
28 Juni 2026 om 20:51

1.7.6 (2026-06-28)

Breaking Changes

  • S/MIME: The built-in S/MIME implementation has been removed from core and re-delivered through the new generic crypto plugin hooks (privileged same-origin plugin tier). S/MIME signing, encryption, decryption, certificate management, and the related settings UI now live in a plugin rather than the main app. Deployments that relied on built-in S/MIME must install the S/MIME crypto plugin to retain those features.

Thank you for your donations:

One-time

  • Anonymous

Monthly

Features

  • Plugins: Privileged same-origin plugin tier with a crypto API surface
  • Plugins: Plugin hooks for email details, headers, and source
  • Mail: Option to hide the total message count on folders (#498)

Fixes

  • Mail: Hide the server scheduled folder when the virtual one is shown (#495)
  • Mail: Stop the unified mailbox from mutating client-returned email objects
  • Composer: HTML-escape sender and subject in the reply/forward quote header (#482)
  • Calendar: Send calendar invites by setting organizerCalendarAddress
  • Identity: Sync the default identity (preferredPrimaryId) to server settings (#507)
  • Auth: Support MFA login via the structured auth endpoint
  • Admin: Show all built-in themes in the admin theme controls (#496)
  • i18n: Add missing translation keys across 19 locales

  •  
  • ↗️

Release 2026.06.28

✇MeTube
Door: github-actions[bot]
28 Juni 2026 om 20:23

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.06.28

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.06.28

Changes

  • upgrade to Angular 22 (51fd203)
  • upgrade dependencies (d136344)
  • Bump actions/checkout from 6 to 7 in the github-actions group (33f1412)

  •  
  • ↗️
Ontvangen — 26 Juni 2026 ⏭ Selfhosted

v1.6.0

✇VersityGW
Door: benmcclelland
26 Juni 2026 om 21:10

Changelog

  • ac5c3b4 Add WebsiteConfiguration types, validation, and S3 error codes
  • 375c276 Add website integration tests and remove NotImplemented stubs
  • 04bb314 chore(deps): bump actions/checkout from 6 to 7
  • 0d03381 chore(deps): bump the dev-dependencies group across 1 directory with 12 updates
  • 8453a5b chore(deps): bump the dev-dependencies group with 23 updates
  • 2a40e19 chore(deps): bump the dev-dependencies group with 24 updates
  • 27e90ce feat(helm): Make it possible to specify deployment strategy
  • 4599daa feat: Add 'topologySpreadConstraints'
  • 6f1dfe8 feat: add options extensions to embed config
  • 27f04ad feat: add windows functional test coverage and fix some windows behavior
  • 1625c59 feat: improve static website hosting support
  • 4d391ca feat: migrate Fiber to v3.3.0
  • f08f76f feat: support x-amz-website-redirect-location
  • 9610ef8 fix: prevent connection errors in space/quotas error paths
  • cf4bc65 fix: prevent index-out-of-range panic in s3proxy GetBucketOwnershipControls
  • 50e64f7 fix: prevent nil pointer panic in webhook sendLog
  • 422b5a7 fix: prevent panic in ParseCopySource on empty input
  • 12fb5a6 fix: reject empty Content-MD5 on PUT operations
  • 6df901b fix: support asterisk read preconditions
  • 67af0af fix: validate object lock default retention upper limits
  • 8495cf4 s3api: add WithOnListen option for server readiness notification

  •  
  • ↗️
Ontvangen — 24 Juni 2026 ⏭ Selfhosted

v1.7.5 - Cross-Account "All Accounts" Views, Attachment Zip Download, Send-Now for Scheduled Mail & New Address Book

✇Bulwark
Door: rathlinus
24 Juni 2026 om 20:15

1.7.5 (2026-06-24)

Thank you for your donations:

One-time

  • Anonymous

Monthly

Features

  • Mail: Cross-account "All accounts" views with full group/shared-account support
  • Mail: Per-account "All Mail" folder selection
  • Mail: "Download all" button to bundle attachments into a zip (#466)
  • Mail: Return to the list after deleting or marking the open message unread — configurable (default on)
  • Mail: Collapse-all-threads action in thread-list selection
  • Calendar: Option to disable the calendar
  • Composer: Send-now button on scheduled/delayed messages
  • Composer: Email a contact or group via the in-app composer
  • Composer: Split a pasted address list into recipient chips
  • Contacts: "New address book" creation UI (#415)
  • OAuth: OAUTH_AUTHORIZE_URL to override the authorize endpoint
  • i18n: Farsi (fa) locale — complete (2654 strings)
  • i18n: Romanian (ro) locale

Fixes

  • Composer: Keep HTML signature styling in the editor and on send
  • Composer: Guard Send against double-submit
  • Composer: Strip display names from the EmailSubmission envelope addresses
  • Calendar: Disable iMIP scheduling on calendar import (#411)
  • Mail: Localize special-folder names by JMAP role (#404)
  • Mail: Block remaining email tracking vectors (#457)
  • Mail: Route counter and unread updates to the email's own account in aggregate views
  • Mail: Fix blank space in plain-text emails
  • Mail: Fix toolbar re-render when opening emails
  • Mail: Truncate long subjects so they don't overlap the timestamp
  • Mail: Strip reply/forward prefixes followed by a full-width colon
  • Mail: Add breathing room between the unread dot and the avatar
  • Mail: Isolate per-account state snapshots from leakage and mutation
  • Mail: Cap filename tokens at the full 200-char limit
  • Spam: Fetch mailboxes with accountId in markAsSpam
  • Filters: Load mailboxes when opened directly (#485)
  • Settings: Surface server errors on password change and TOTP toggle
  • Send now: Gate the toolbar label and translate send_now across locales
  • Directory: Fix fetching display names
  • Push: Reap only relay-confirmed-dead leftover subscriptions
  • i18n: Add the missing fa locale to the client IntlProvider messages map
  • i18n: Add missing translation keys across 19 locales

  •  
  • ↗️

v5.49.0

✇Strapi
Door: internal-releases[bot]
24 Juni 2026 om 12:45

5.49.0 (2026-06-24)

🚀 New feature

  • mcp: export defineTool/defineResource/definePrompt builders (#26603)

🔥 Bug fix

  • add support for initiallySelectedAssets (#26679)
  • homepage dashboard duplicates entries for users with multiple roles (#25860)
  • avoid buffering large uploads for MIME detection (#26678)
  • throw ValidationError when populate exceeds qs arrayLimit (#25632, #25916)
  • push anchor into view to prevent off-screen tooltips (#26303)
  • admin: support array of links in StrapiApp.addSettingsLink (#26433)
  • admin: admin users logged out mid-session by access-token expiry timer (#26680)
  • content-manager: use top-level Core type import in MCP types (#26681)
  • content-manager: save draft with Cmd/Ctrl+Enter, publish with Cmd/Ctrl+Shift+Enter (#26621)
  • content-manager: reduce MCP relation output to identity-only shape (#26560)
  • content-manager: deduplicate MCP tool names when plugin has multiple content types (#26710)
  • core/core: mcp misleading lifecycle docs (#26698)
  • create-strapi-app: allow pnpm to build better-sqlite3 for SQLite scaffolds (#26675)
  • data-transfer: transfer admin menu and auth logos with configuration (#26425)
  • database: stop full-schema component_type IN on dynamic zone populate (#26734)
  • document-service: preserve published relations from non-dp sources (#26654)
  • strapi: default allowedHosts and pin Vite HMR to main server in dev (#26244)
  • types: add explicit return types to recursive functions (#26704)

📚 Documentation Changes

  • fix spelling typos in content-manager relations guide (#26724)

⚙️ Chore

  • removing coderabbit status (#26703)
  • core: upgrade package-json to 10.0.1 + rollup interop 'auto' (#26673)
  • deps: bump markdown-it from 14.1.1 to 14.2.0 in the richtext-editor-security group across 1 directory (#26688)
  • deps: bump dompurify from 3.4.5 to 3.4.9 (#26684)
  • deps: bump nodemailer from 8.0.5 to 8.0.9 (#26689)
  • deps: bump tar from 7.5.11 to 7.5.16 (#26691)
  • deps: bump form-data from 4.0.4 to 4.0.6 (#26692)
  • deps: bump anthropics/claude-code-action from 1.0.123 to 1.0.132 (#26727)
  • deps: bump piscina from 4.9.2 to 4.9.3 (#26716)
  • deps: bump undici from 6.25.0 to 6.27.0 (#26714)
  • deps: bump dompurify from 3.4.9 to 3.4.11 (#26719)
  • deps-dev: bump @babel/core (#26667)

💅 Enhancement

  • upload: add optional replace method to upload providers (#26582)

❤️ Thank You

⚠️ Changes to be aware of

Content Manager keyboard shortcuts

Save a draft with Cmd/Ctrl+Enter (or Cmd/Ctrl+S). Publish with Cmd/Ctrl+Shift+Enter. Since v5.31.3, plain Cmd/Ctrl+Enter published immediately — that shortcut now saves instead. (#26621)

  •  
  • ↗️
Ontvangen — 21 Juni 2026 ⏭ Selfhosted

Part-DB 2.12.3

✇Part-DB
Door: jbtronics
21 Juni 2026 om 00:04

Important

This version contains security fixes, it is recommended to update to this version immediately.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.12.3

Security fixes

  • Fixed missing SVG sanitatization, when file was uploaded with non-svg extension
  • Added CSP headers to static files, to prevent script execution, should an vulnerable file be uploaded somehow

Other changes

  • Updated KiCad symbols
  • Updated dependencies

Full Changelog: v2.12.2...v2.12.3

  •  
  • ↗️
Ontvangen — 20 Juni 2026 ⏭ Selfhosted

Release 2026.06.20

✇MeTube
Door: github-actions[bot]
20 Juni 2026 om 09:05

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.06.20

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.06.20

Changes

  • fix open download of cookie files (ce897ee)
  • upgrade dependencies (dd1b4c2)

  •  
  • ↗️
Ontvangen — 19 Juni 2026 ⏭ Selfhosted

v2.1.0

✇Arcane
Door: kmendell
19 Juni 2026 om 04:00

New features

CLI - New features

Bug fixes

CLI - Bug fixes

Dependencies

Other

Full Changelog: v2.0.3...v2.1.0

  •  
  • ↗️
Ontvangen — 18 Juni 2026 ⏭ Selfhosted

Release 2026.06.18

✇MeTube
Door: github-actions[bot]
18 Juni 2026 om 05:55

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.06.18

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.06.18

Changes

  • Incorporate PR feedback (04b9366)
  • Create AUDIO_DOWNLOAD_DIR in Docker image (d157444)

  •  
  • ↗️
Ontvangen — 17 Juni 2026 ⏭ Selfhosted

v5.48.1

✇Strapi
Door: internal-releases[bot]
17 Juni 2026 om 12:03

5.48.1 (2026-06-17)

🚀 New feature

  • linking to the Billing Portal (3df113f545)
  • pointing Upsell Banner to Strapi Billing (06b0c31f47)
  • add optional openapi spec route (#26239)
  • updating billing portal address (2d3fea21ff)
  • openapi: gate endpoint access with config (#26574)
  • upload: add paginated GET /api/upload/files/page endpoint (#26597)

🔥 Bug fix

  • upload returns unsigned URL on update media info (#25195)
  • widgets show error when role has no access to mainfield of ct (#26537)
  • correct IME Enter key handling in BlocksInput (#24997)
  • admin: return empty object for empty json body in fetch client (#26277)
  • admin: exclude disabled plugins from admin build (#26448)
  • admin: rate limit and serialize first admin registration (#26576)
  • admin: validate current user email updates (#26591)
  • admin: guard stale admin configuration (#26625)
  • build: build does not run install; add install-deps arg (#26483)
  • ci: run build:size as full command for compressed-size-action v3 (#26556)
  • ci: restore allowed paths-filter pin (#26575)
  • ci: avoid syncing CPR labels to CMS tickets (#26648)
  • content-manager: use ReadonlyArray for layout prop and fix Repeatable test fixture (#26522)
  • content-manager: raise z-index of code block language selector (#25010, #26324)
  • content-manager: dedupe bulk delete document ids (#26613)
  • content-manager: replace sanitize-html with dompurify in Wysiwyg preview (#26150)
  • core: validate numeric inputs before DB unique checks (#26101)
  • core/admin | content-manager: combine multi-role field-level permissions (#26055)
  • data-transfer: skip links referencing data that was never transferred (#26531)
  • data-transfer: buffer push assets before invoking uploadStream (#26086)
  • database: restore join-table relation sort order in components (#26553)
  • database: avoid double finalising completed transactions (#26122)
  • database: move document_id secondary indexes to schema sync (#26241)
  • strapi: stabilize admin redux deps during upgrade (#26249)
  • tsconfig: remove lodash from server compilerOptions.types (#26627)
  • upload: folder navigation bugs in Media Library (#26515)
  • upload: preserve animation frames in GIF and WebP images (#26126)
  • users-permissions: support documentId user relations (#26607)
  • utils: ignore empty sort when building orderBy (#26427)

📚 Documentation Changes

  • add CLAUDE.md alias and link PR template from AGENTS.md (#26251)
  • fix typos across contributor docs (#26590)
  • fix broken relative cross-doc links (#26601)
  • deprecate Node 20 in documentation (#26623)
  • openapi: add contributor documentation (#26410)

⚙️ Chore

  • remove experimental-dev example app (#26552)
  • update .gitignore for AI tooling directories (#26526)
  • release v5.48.0 update develop (#26599)
  • adding check for valid template on issue creation (#26546)
  • adding translations for manage subscription (aa0b3da3eb)
  • getting tests to pass (d2c06c6ca2)
  • *: support Node 26 (#26232)
  • ai/skills: add writing-a-skill skill (#26428)
  • ai/skills: add commit conventions (#26431)
  • ci: drop Node 20 from test workflow matrices (6f1a21c528)
  • ci: drop Node 20 from test workflow matrices (#26609)
  • core/strapi: dynamically import browserslist-to-esbuild (#25507)
  • data-transfer: move types into src so they are type-checked (#26352)
  • deps: bump axios from 1.16.1 to 1.17.0 (#26539)
  • deps: bump the testing-library group across 1 directory with 2 updates (#26506)
  • deps: bump actions/setup-node from 4 to 6 (#26496)
  • deps: bump actions/stale from 10 to 10.2.0 (#26497)
  • deps: bump preactjs/compressed-size-action from 2 to 3 (#26498)
  • deps: resolve vulnerable transitive deps via lockfile dedupe and resolutions (#26540)
  • deps: bump cheerio from 1.0.0 to 1.2.0 (#26569)
  • deps: bump dorny/paths-filter from 3.0.3 to 4.0.1 (#26566)
  • deps: bump actions/download-artifact from 4.3.0 to 8.0.1 (#26564)
  • deps: bump follow-redirects from 1.15.6 to 1.16.0 (#26580)
  • deps: bump shell-quote from 1.8.1 to 1.8.4 (#26585)
  • deps: bump @vitejs/plugin-react-swc (#26567)
  • deps: bump the rollup group across 1 directory with 3 updates (#26505)
  • deps: bump nrwl/nx-set-shas from 4 to 5 (#26565)
  • deps: bump anthropics/claude-code-action from 1 to 1.0.123 (#26640)
  • deps: bump trunk-io/analytics-uploader from 1.15.0 to 2.0.9 (#26638)
  • deps: bump rollup from 4.60.1 to 4.60.4 in the rollup group across 1 directory (#26641)
  • deps: bump open from 8.4.0 to 8.4.2 (#26643)
  • deps: bump stream-json and @types/stream-json (#26645)
  • deps: bump koa-helmet from 7.0.2 to 7.1.0 (#26642)
  • deps: bump axios from 1.17.0 to 1.18.0 (#26647)
  • deps-dev: bump the eslint group across 1 directory with 10 updates (#26500)
  • deps-dev: bump @types/delegates from 1.0.0 to 1.0.3 (#26570)
  • deps-dev: bump the nx group across 1 directory with 2 updates (#26502)
  • deps-dev: bump @types/webpack-hot-middleware from 2.25.9 to 2.25.12 (#26568)
  • deps-dev: bump @types/invariant from 2.2.36 to 2.2.37 (#26644)
  • repo: skip change freeze ownership check when freeze disabled (#26474)

💅 Enhancement

  • admin: hide deploy-now widget in production (#26660)
  • core/core: rounded thin borders for startup banner (#26273)
  • graphql: use discriminated unions instead of unsafe type casting (#25913)
  • upgrade: unhide and document upgrade to command (#26446)

🚨 Security

❤️ Thank You

  •  
  • ↗️
Ontvangen — 16 Juni 2026 ⏭ Selfhosted

Release 2026.06.16

✇MeTube
Door: github-actions[bot]
16 Juni 2026 om 21:08

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.06.16

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.06.16

Changes

  •  
  • ↗️

v1.7.4 - QR-Code Mobile Pairing, Files Sharing, All Mail View & Calendar Recurrence Editor

✇Bulwark
Door: rathlinus
15 Juni 2026 om 23:34

1.7.4 (2026-06-15)

Thank you for your donations:

One-time

  • Anonymous

Monthly

Features

  • Mail: New "All Mail" view across folders and accounts
  • Mail: Edit contact directly from the email viewer contact sidebar
  • Calendar: Recurrence editor, set-default calendar, and timezone-aware calendar queries
  • Calendar: Agenda plugin sidecar
  • Composer: Email display name support
  • Composer: Drag-and-drop recipient chips between To/CC/BCC fields, with the address shown in the drag preview
  • Composer: Avatars in recipient autocomplete suggestions, including directory users
  • Files: JMAP file/folder sharing in the Files app (#408)
  • Auth: QR-code SSO login and device pairing between webmail and the mobile app
  • Auth: Require re-authentication for device pairing and SSO
  • Accounts: Manage shared/group account settings from the Accounts page
  • Setup: Opt-in telemetry in the web setup wizard
  • Mail: Persist the email detail sidebar state

Fixes

  • Mail: Preserve line breaks in the generated text/plain alternative (#421)
  • Mail: Fix inconsistent threading of email messages in the inbox and folders
  • Mail: Stop draft emails from being marked as unread
  • Mail: Prevent wide email tables from rendering with rotated headers (#409)
  • Mail: Preserve the folder list when a mailbox refetch hits the concurrent-request limit
  • Mail: Correct dark-mode background-image inversion and height clipping in the email viewer
  • Calendar: Dedupe scheduling emails and use Stalwart-compatible calendar filters
  • Calendar: Redesign the custom recurrence editor to match the modal UI
  • Files: Don't send the connected-account key as the JMAP accountId when sharing files (#408)
  • Routing: Strip the build-time basePath from router.push redirects after login (#390)
  • Nav: Open recent contact emails at / instead of 404ing on /mail
  • Nav: Hide the Add App button when sidebarAppsEnabled is false
  • Settings: Move the "Plain Text Only" setting from Reading to Composing (#422)
  • Privacy: Make telemetry opt-in
  • UI: Fix the context menu being invisible on first right-click after page load
  • Admin: Remove the JMAP status from the admin dashboard
  • i18n: Add missing translation keys across 17 locales

  •  
  • ↗️
Ontvangen — 14 Juni 2026 ⏭ Selfhosted

Part-DB 2.12.2

✇Part-DB
Door: jbtronics
14 Juni 2026 om 23:50

Important

This version contains security fixes, it is recommended to update to this version immediately.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.12.2

Security fixes

  • MEDIUM: Fixed XSS vulnerability in project BOM import
  • MEDIUM: Fixed XSS vulnerability in project BOM table

Bug fixes

  • Fixed invalid reference in api docs (PR #1403, @d-buchmann)
  • Fixed problem that sidebar hide state was not persisted over page reloads (PR #1404, @d-buchmann)
  • Do not log deprecations as the files can quickly get very large, old behavior can be reenabled via env setting. This might also give a small performance boost (fixes #1405)

Other changes

  • Updated KiCad symbols
  • Updated dependencies
  • Fixed deprecations

Full Changelog: v2.12.1...v2.12.2

  •  
  • ↗️
Ontvangen — 13 Juni 2026 ⏭ Selfhosted

Release 2026.06.13

✇MeTube
Door: github-actions[bot]
13 Juni 2026 om 16:50

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.06.13

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.06.13

Changes

  •  
  • ↗️
❌