❌

Normale weergave

Bitfocus Companion v4.3.0

Door: Julusian
25 April 2026 om 15:43

πŸ“¦ Downloads available at

πŸ’΅ Donate to

the project at

Companion v4.3.0 - Release Notes

Surface Module System

The biggest change in 4.3 is that surface support is now delivered through a downloadable module system β€” the same approach already used for connections.

Previously, support for every surface was baked into Companion itself, meaning you needed a full Companion update to get support for a new Stream Deck model or a surface bug fix.

This means:

  • New Stream Deck models (and other surfaces) can be supported by updating just the surface module, without waiting for a Companion release.
  • Each surface module can be updated independently, so a fix for one device doesn't require touching anything else.
  • The same module management UI used for connections applies to surfaces. See the Modules documentation for details.

We hope this will encourage others to add support for new types of surfaces. The development experience is similar to that of connection modules.

surface-modules

Enable and Disable Individual Surfaces

Surfaces can now be individually enabled or disabled from the Surfaces page. Disabling a surface stops Companion from claiming it, but preserves its configuration for when you want to re-enable it.

This is useful when running Companion alongside other software (such as the Elgato Stream Deck app) β€” you can pick which devices each application manages.

Expressions in Any Action or Feedback Field

The connection module API has had a major revision in this release. The main change is to make it possible for any action or feedback input field to support expressions. Where supported, a toggle button next to the input field lets you switch it into expression mode.

Unfortunately, this requires modules to update to the latest version of the module-api making this opt in. We hope to see many modules start to support this in the coming months β€” it greatly increases the flexibility of Companion.

expression-action

Sidebar and Header Bar Improvements

Sidebar.mp4
  • Add a help menu in the header bar
  • Add a context menu for managing the sidebar
    • Free up space by removing the now-redundant sidebar help section
    • Reduce the number of items in the Variables sidebar group
    • Manage expand/collapse of sidebar groups (Auto-close aka. Accordion Mode)
    • Add a new "Always-Narrow" sidebar mode

Modernising the Elgato Plugin

The Elgato Stream Deck plugin has been updated to support connecting over the Satellite API making it the preferred way for the plugin to connect to Companion.

Previously, the plugin communicated with Companion using an older, Elgato plugin-specific protocol. The Satellite API is a more modern, general-purpose alternative that is already used by the Satellite application and other third party software and hardware. Using it for the plugin means consistent behaviour across all surface types and a simpler integration overall.

If you are currently using the Elgato plugin, you can continue using it as before; however, we intend to remove support for the old protocol in a couple of Companion releases' time. When setting up a new connection, the plugin will now guide you toward using the Satellite API instead.

The plugin has also received a number of UI bug fixes.

And more

  • Surfaces are now implemented through a module system, similar to connections.
  • Option to enable/disable individual surfaces
    • This allows Companion to run alongside other software with each using just some of the connected stream decks
  • Support expressions in any action/feedback field
    • This requires modules to opt into supporting it for now
  • Get custom-variable via tcp #3999
  • preview local variable value next to editor
  • Ability to execute trigger at random intervals
  • Improving expressions
    • add URI encode/decode functions #3771
    • Add blink() function to expressions. This can be used in feedbacks to provide customisable blinking behaviour
    • Extended time formatting options
    • Date expression functions (#4021)
  • Rework various panels/lists to group connections by collections instead of as a flat list
  • Improve performance of some button drawing #3902 #3891
  • Various styling refinement
    • Rework button grid presentation
    • Add help icon to header bar
    • improve drag and drop previews
    • Update app icon on macos
    • add collapse/expand all buttons for collection items (#4063)
    • add or update help and close icons in panel headers (#4053)
  • Add support for SENTRY_DISABLE environment variable, to disable sentry reporting
  • Option to suppress header notifications (#4004)
  • Add docker COMPANION_ADMIN_PORT environment variable for admin port configuration (#4042)
  • Expand satellite api to cover full module and elgato plugin functionality
  • Add HTTP API endpoints for connection management (#4048)

🐞 BUG FIXES

  • Improve presentation of missing values in dropdowns
  • navigation to anchor link in /user-guide (#4036)
  • Local variable updates do not immediately apply #3953
  • show modules which only have prerelease version in the add list
  • upgrade scripts isInverted failing
  • certain triggers not being disabled with the collection (#3981)
  • respect multiline for connection config fields #3986
  • connection collections being lost during full import
  • udp service not listening when ipv6 enabled
  • preserve type of expressions when writing to custom/local variables #3954
  • child entities not being upgraded #3924
  • improve confusing trigger terminology "depress" (#3922)
  • ensure module manifest doesn't load root file from outside of package
  • Launch main companion process with the --use-system-ca flag (#4060)

Full Changelog: v4.2.6...v4.3.0

  •  

v4.0.0-beta.473

13 April 2026 om 11:33

Fixes

  • Fixed the upgrade modal to show the correct target version and cleared stale upgrade notifications when the instance was already up to date. (#7774, fixes #6039, #8707)
  • Fixed user deletion cleanup so team-owned Git app sources were handled safely, while instance-wide sources were preserved for the root team. (#9435, fixes #8172)
  • Fixed dashboard homepage add buttons so they remained visible in light mode. (#9456, fixes #9454)
  • Fixed port mapping validation to accept protocol suffixes like /tcp, /udp, /sctp and IP-bound mappings. (#9503, fixes #9501, #9504)

Improvements

  • Updated phpseclib/phpseclib to 3.0.51. (#9500)
  • Updated axios to 1.15.0 for development dependencies. (#9515)
  • Updated axios to 1.15.0 in coolify-realtime. (#9516)

What's Changed (Github)

  • fix(ui): Initialize latestVersion in Upgrade component mount by @andrasbacsai in #7774
  • fix(user-deletion): safely clean up team-owned Git app sources by @andrasbacsai in #9435
  • fix(ui): dashboard homepage add buttons are invisible in light mode by @rosslh in #9456
  • fix(validation): allow protocol suffix and ip in port mappings (/tcp, /udp, /sctp) by @ShadowArcanist in #9503
  • build(deps): bump phpseclib/phpseclib from 3.0.50 to 3.0.51 by @dependabot[bot] in #9500
  • build(deps-dev): bump axios from 1.13.2 to 1.15.0 by @dependabot[bot] in #9515
  • build(deps): bump axios from 1.13.6 to 1.15.0 in /docker/coolify-realtime by @dependabot[bot] in #9516
  • v4.0.0-beta.473 by @andrasbacsai in #9521

New Contributors

Full Changelog: v4.0.0-beta.472...v4.0.0-beta.473

  •  

Asterisk Release 23.3.0

9 April 2026 om 18:37

The Asterisk Development Team would like to announce
the release of asterisk-23.3.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.3.0
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 23.3.0

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-23.3.0

Links:

Summary:

  • Commits: 50
  • Commit Authors: 21
  • Issues Resolved: 34
  • Security Advisories Resolved: 0

  •  

Asterisk Release 22.9.0

9 April 2026 om 18:24

The Asterisk Development Team would like to announce
the release of asterisk-22.9.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.9.0
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 22.9.0

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-22.9.0

Links:

Summary:

  • Commits: 50
  • Commit Authors: 21
  • Issues Resolved: 34
  • Security Advisories Resolved: 0

  •  

Asterisk Release 20.19.0

9 April 2026 om 18:13

The Asterisk Development Team would like to announce
the release of asterisk-20.19.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.19.0
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 20.19.0

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-20.19.0

Links:

Summary:

  • Commits: 50
  • Commit Authors: 21
  • Issues Resolved: 34
  • Security Advisories Resolved: 0

  •  

v4.0.0-beta.472

9 April 2026 om 12:19

What's Changed

Security & Fixes

  • Allow quoted arguments in custom Docker run options (#9481, fixes #9343)
  • Patched Alpine packages in helper, realtime, and development Docker images (#9437)
  • Bumped Alexandrie images to address upstream security advisory (#9434)

New Services & Templates

  • Added Grimmory one-click service, the successor to Booklore (#9109)
  • Comprehensive Supabase template update to latest versions (#8316)
  • Allow overriding GOTRUE_SITE_URL in Supabase for separate frontend domains (#9079, fixes #5581)
  • Added sensible CORS defaults to Directus templates (#9081, fixes #5024)
  • Updated Rivet template to v2.2.0 (#9378)
  • Updated Convex to current latest version (#9392)
  • Fixed LibreChat healthcheck and upgraded Meilisearch image (#9358)
  • Fixed n8n task-runners health check (#9309, fixes #9306)
  • Increased Nextcloud healthcheck interval to prevent worker exhaustion (#9440, fixes #9439)
  • Updated Nextcloud healthcheck endpoint to /status.php (#9470)
  • Fixed Netbird client volume path so settings persist across restarts (#9484)
  • Corrected Minecraft template category to games (#9387)
  • Corrected several template categories that were set incorrectly (#9449)

Improvements

  • Removed Algora bounty program references from community docs and templates (#9436)

What's Changed (Github)

  • fix(services): bump images of alexandrie to fix security issue by @Smaug6739 in #9434
  • feat(service): update Convex to current latest version by @sebous in #9392
  • fix(template): Minecraft was on wrong category by @Iisyourdad in #9387
  • feat(service): update Rivet to v2.2.0 by @yipfram in #9378
  • fix(service): fix librechat healthcheck and update dependencies by @GauthierPLM in #9358
  • fix(service): n8n task-runners health check fails by @frank-netkey in #9309
  • feat(service): add grimmory by @RickyWanga in #9109
  • fix(service): directus cors not applied in preflight requests by @xidik12 in #9081
  • feat(service): update Supabase to current latest versions by @Vadko in #8316
  • fix(service): allow overriding GOTRUE_SITE_URL in Supabase template by @xidik12 in #9079
  • fix(service): nextcloud workers exhaustion due to low interval healthcheck by @ShadowArcanist in #9440
  • fix(docker): add apk upgrade to helper, realtime, and development Dockerfiles by @andrasbacsai in #9437
  • chore(community): remove Algora bounty program references by @andrasbacsai in #9436
  • chore(service): update nextcloud healthcheck endpoint by @ShadowArcanist in #9470
  • fix(validation): allow quoted docker run options in custom config by @andrasbacsai in #9481
  • build(deps-dev): bump vite from 7.3.0 to 7.3.2 by @dependabot[bot] in #9457
  • fix(service): Several templates on wrong catagory. by @Iisyourdad in #9449
  • fix(service): netbird-client wrong volume path by @iamimmanuelraj in #9484
  • v4.0.0-beta.472 by @andrasbacsai in #9492

New Contributors

Full Changelog: v4.0.0-beta.471...v4.0.0-beta.472

  •  

v4.0.0-beta.471

9 April 2026 om 09:16

What's Changed

Security & Fixes

  • Harden model mass assignment protection across all models (#9282)
  • Scope server and project queries to current team (#9230)
  • Harden GetLogs component with locked properties and input validation (#9229)
  • Add validation and escaping for Docker network names (#9228)
  • Add URL validation for notification webhook fields (#9224)
  • Use server-side config for password reset URL generation (#9193)
  • Add input validation for install/build/start command fields (#9227)
  • Add input validation for resource limit fields (#9238)
  • Add IP validation for custom DNS servers input (#9239)
  • Add URL validation for proxy redirect input (#9241)
  • Add input validation for server advanced settings page (#9242)
  • Add input validation for sentinel configuration (#9243)
  • Add input validation for database backup timeout (#9245)
  • Add input validation for emails configuration (#9259)
  • Add input validation for database public port and proxy timeout
  • Add validation to block unsafe webhook URLs
  • Use random_int() for email change verification codes (#9226)
  • Move admin route into middleware group (#9225)
  • Enforce team-scoped project/env lookups in onboarding
  • Add input validation for port exposes and port mappings fields

New Services & Templates

  • Added ElectricSQL template (#8190)

Fixes

  • Fix intermittent pre-deployment command failures (#9165, fixes #9076)
  • Fix Grafana GF_SERVER_DOMAIN using FQDN instead of URL (#9080, fixes #5307)
  • Fix listmonk db config env typo (#9250)
  • Fix Langfuse by pinning ClickHouse version to avoid init errors
  • Fix cloning persistent volumes with missing uuid (#9290, fixes #9270)
  • Fix redirect value not persisting in setRedirect (#9279)
  • Fix cloud subscription notification links (#9296)
  • Fix slash branches in public repo URLs
  • Fix shared env vars resolving on wrong server
  • Fix database SSL/status state and clone writes
  • Fix auto-generate missing CA cert on SSL regeneration
  • Fix backup notification failures affecting backup status (fixes #9088)
  • Fix backup retention enforcement and stale execution cleanup
  • Fix password visibility toggle using Alpine state
  • Fix GitHub branch state when refreshing repositories

Improvements

  • Shared server environment variables (#7764)
  • Refresh repos on private GitHub app (#8621)
  • Support Docker image tags for preview deployments
  • Add preserve repository option to deployment API (#8371)
  • Implement exponential backoff for unreachable servers (#9184)
  • Improve scheduled task single view UX (#9266)
  • Add two-step confirmation to enable self-registration (#9277)
  • Add public port timeout configuration for databases
  • Make textarea monospace opt-in and improve multiline toggle

What's Changed (Github)

New Contributors

Full Changelog: v4.0.0-beta.470...v4.0.0-beta.471

  •  

Asterisk Release 23.3.0-rc2

2 April 2026 om 19:03

The Asterisk Development Team would like to announce
release candidate 2 of asterisk-23.3.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.3.0-rc2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 23.3.0-rc2

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-23.3.0-rc2

Links:

Summary:

  • Commits: 2
  • Commit Authors: 2
  • Issues Resolved: 3
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • George Joseph: (1)
  • nappsoft: (1)

Issue and Commit Detail:

Closed Issues:

  • 1844: [bug]: cdrel_custom isn't respecting the default time format for CEL records
  • 1845: [bug]:res_cdrel_custom produces wrong float timestamps
  • 1852: [bug]: res_cdrel_custom: connection to the sqlite3 database closes from time to time

Commits By Author:

  • George Joseph (1):

    • res_cdrel_custom: Resolve several formatting issues.
  • nappsoft (1):

    • res_cdrel_custom: do not free config when no new config was loaded

Commit List:

  • res_cdrel_custom: do not free config when no new config was loaded
  • res_cdrel_custom: Resolve several formatting issues.

Commit Details:

res_cdrel_custom: do not free config when no new config was loaded

Author: nappsoft
Date: 2026-04-02

When the res_cdrel_custom modules is reloaded and the config has not been changed asterisk should not free the old config. Otherwise the connection to the database will be closed and no new connection will be opened.

Resolves: #1852

res_cdrel_custom: Resolve several formatting issues.

Author: George Joseph
Date: 2026-03-31

Several issues are resolved:

  • Internally, floats were used for timestamp values but this could result
    in wrapping so they've been changed to doubles.

  • Historically, the default CEL eventtime format is <seconds>.<microseconds>
    with <microseconds> always being 6 digits. This should have continued to be
    the case but res_cdrel_custom wasn't checking the dateformat setting in
    cel.conf and was defaulting to %F %T. res_cdrel_custom now gets the default
    date format from cel.conf, which will be whatever the dateformat parameter
    is set to or <seconds>.<microseconds> if not set.

  • The timeval field formatter for both CDR and CEL wasn't handling custom
    strftime format strings correctly. This is now fixed so you should be able
    to specifiy custom strftime format strings for the CEL eventtime and CDR
    start, answer and end fields. For example: eventtime(%FT%T%z).

Resolves: #1844
Resolves: #1845

  •  

Asterisk Release 22.9.0-rc2

2 April 2026 om 18:52

The Asterisk Development Team would like to announce
release candidate 2 of asterisk-22.9.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.9.0-rc2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 22.9.0-rc2

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-22.9.0-rc2

Links:

Summary:

  • Commits: 2
  • Commit Authors: 2
  • Issues Resolved: 3
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • George Joseph: (1)
  • nappsoft: (1)

Issue and Commit Detail:

Closed Issues:

  • 1844: [bug]: cdrel_custom isn't respecting the default time format for CEL records
  • 1845: [bug]:res_cdrel_custom produces wrong float timestamps
  • 1852: [bug]: res_cdrel_custom: connection to the sqlite3 database closes from time to time

Commits By Author:

  • George Joseph (1):

    • res_cdrel_custom: Resolve several formatting issues.
  • nappsoft (1):

    • res_cdrel_custom: do not free config when no new config was loaded

Commit List:

  • res_cdrel_custom: do not free config when no new config was loaded
  • res_cdrel_custom: Resolve several formatting issues.

Commit Details:

res_cdrel_custom: do not free config when no new config was loaded

Author: nappsoft
Date: 2026-04-02

When the res_cdrel_custom modules is reloaded and the config has not been changed asterisk should not free the old config. Otherwise the connection to the database will be closed and no new connection will be opened.

Resolves: #1852

res_cdrel_custom: Resolve several formatting issues.

Author: George Joseph
Date: 2026-03-31

Several issues are resolved:

  • Internally, floats were used for timestamp values but this could result
    in wrapping so they've been changed to doubles.

  • Historically, the default CEL eventtime format is <seconds>.<microseconds>
    with <microseconds> always being 6 digits. This should have continued to be
    the case but res_cdrel_custom wasn't checking the dateformat setting in
    cel.conf and was defaulting to %F %T. res_cdrel_custom now gets the default
    date format from cel.conf, which will be whatever the dateformat parameter
    is set to or <seconds>.<microseconds> if not set.

  • The timeval field formatter for both CDR and CEL wasn't handling custom
    strftime format strings correctly. This is now fixed so you should be able
    to specifiy custom strftime format strings for the CEL eventtime and CDR
    start, answer and end fields. For example: eventtime(%FT%T%z).

Resolves: #1844
Resolves: #1845

  •  

Asterisk Release 20.19.0-rc2

2 April 2026 om 18:41

The Asterisk Development Team would like to announce
release candidate 2 of asterisk-20.19.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.19.0-rc2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 20.19.0-rc2

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-20.19.0-rc2

Links:

Summary:

  • Commits: 2
  • Commit Authors: 2
  • Issues Resolved: 3
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • George Joseph: (1)
  • nappsoft: (1)

Issue and Commit Detail:

Closed Issues:

  • 1844: [bug]: cdrel_custom isn't respecting the default time format for CEL records
  • 1845: [bug]:res_cdrel_custom produces wrong float timestamps
  • 1852: [bug]: res_cdrel_custom: connection to the sqlite3 database closes from time to time

Commits By Author:

  • George Joseph (1):

    • res_cdrel_custom: Resolve several formatting issues.
  • nappsoft (1):

    • res_cdrel_custom: do not free config when no new config was loaded

Commit List:

  • res_cdrel_custom: do not free config when no new config was loaded
  • res_cdrel_custom: Resolve several formatting issues.

Commit Details:

res_cdrel_custom: do not free config when no new config was loaded

Author: nappsoft
Date: 2026-04-02

When the res_cdrel_custom modules is reloaded and the config has not been changed asterisk should not free the old config. Otherwise the connection to the database will be closed and no new connection will be opened.

Resolves: #1852

res_cdrel_custom: Resolve several formatting issues.

Author: George Joseph
Date: 2026-03-31

Several issues are resolved:

  • Internally, floats were used for timestamp values but this could result
    in wrapping so they've been changed to doubles.

  • Historically, the default CEL eventtime format is <seconds>.<microseconds>
    with <microseconds> always being 6 digits. This should have continued to be
    the case but res_cdrel_custom wasn't checking the dateformat setting in
    cel.conf and was defaulting to %F %T. res_cdrel_custom now gets the default
    date format from cel.conf, which will be whatever the dateformat parameter
    is set to or <seconds>.<microseconds> if not set.

  • The timeval field formatter for both CDR and CEL wasn't handling custom
    strftime format strings correctly. This is now fixed so you should be able
    to specifiy custom strftime format strings for the CEL eventtime and CDR
    start, answer and end fields. For example: eventtime(%FT%T%z).

Resolves: #1844
Resolves: #1845

  •  

Release v2.4.3

Door: cmouse
27 Maart 2026 om 08:58

You can install pre-built binaries from https://repo.dovecot.org/

Docker images can be found at https://hub.docker.com/r/dovecot/dovecot

Please review https://doc.dovecot.org/2.4.3/installation/upgrade/2.3-to-2.4.html and https://doc.dovecot.org/2.4.3/installation/installation.html.

Important

There are experimental features in 2.4, one is enabled with --enable-experimental-mail-utf8, and another with --enable-experimental-imap4rev2, and you also need to set mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in config.

Critical bug fixes

  • CVE-2025-59028: Invalid base64 authentication can cause DoS for other
    logins.
  • CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks
    and read unintended files during indexing. Fixed by dropping the script.
  • CVE-2026-24031: SQL injection possible if auth_username_chars is
    configured empty. Fixed escaping to always happen. v2.4 regression.
  • CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would cause
    excessive CPU usage. Fixed by limiting number of parameters to process.
  • CVE-2026-27860: LDAP query injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4 regression.
  • CVE-2026-27857: Sending excessive parenthesis causes imap-login to use
    excessive memory.
  • CVE-2026-27856: Doveadm credentials were not checked using timing-safe
    checking function.
  • CVE-2026-27855: OTP driver vulnerable to replay attack.

Changes

  • Remove default service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default mail_access_groups=$SET:default_internal_group.
  • The version file has been renamed as version.txt to avoid clash with
    C++ headers.
  • auth: oauth2 - Do not export token automatically, must be exported using
    fields.
  • config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size, submission_max_recipients
    and quota_mail_size.
  • imap, pop3: Don't autoexpunge if Dovecot is shutting down or process
    is killed.
  • imap: LIST - Handle invalid mUTF-7 mailbox names as never matching anything
  • lazy-expunge: Change lazy_expunge_only_last_instance default to yes.
  • lda: Use EX_TEMPFAIL (75) if configuration is invalid instead of 89.
    v2.4 regression.
  • lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s to 30s
  • lib: crc32 - Use zlib's built-in CRC32 function

New features

  • Improve UTF-8 support for mail storage.
  • auth: Add default auth-token UNIX socket for token-based authentication.
  • doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  • doveadm: dsync - Search mails when exporting to reduce number of mails
    exported by dsync-server.
  • dovecot-sysreport: Add -D|--destdir support.
  • imap, imap-hibernate: Use DOVECOT-TOKEN authentication for unhibernation.
    Default imap-master socket permissioms have been changed due to this.
  • imap: Add APPENDLIMIT capability when configured with quota_mail_size.
  • imap: Support STATUS (DELETED) for IMAP4rev2.
  • imapc: Add support for SEARCH MIMEPART
  • imapc: Improve error forwarding.
  • imapc: Support SORT and ESORT extensions.
  • imapc: Support STATUS (DELETED) for IMAP4rev2.
  • lib-sql: Support parameterized queries.
  • lib-test: Add new test-dir API for better temporary test directory
    handling.
  • lmtp: Advertize SIZE capability when configured with quota_mail_size.
  • lmtp: Support XCLIENT DESTADDR and DESTPORT
  • pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  • submission-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  • Various optimizations have been made to the code.

Bug fixes

  • Fix building dovecot with BSD, Solaris and macOS.
  • auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  • auth: Fix request leak when client authenticates with unsupported mechanism.
  • auth: Some passdbs would default to PLAIN instead of CRYPT scheme.
  • config: Section and setting names could have been intermixed, resulting
    in the setting being silently ignored.
  • configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  • doveadm: dsync - -e parameter was handled wrong with dsync-server.
  • fts-flatcurve: Mailbox leak would occur if mailbox failed to open.
  • imap: Fix potential issues with unhibernation and process state handling.
  • imapc: SEARCH failure handling was done wrong.
  • imapc: UID STORE commands included extra comma in uidset.
  • lib-auth-client: auth-master - Fix panic when reconnecting after
    handshake timeout.
  • lib-compression: Lz4 algorithm would assert-crash with malicious data.
  • lib-dcrypt: Fix digest algorithm handling.
  • lib-dict: Escape username paths to prevent traversal issues with dict-fs.
  • lib-http: Fix HTTP parsing edge cases and state handling.
  • lib-iostream: Disallow empty ssl_min_protocol.
  • lib-json: Fix incorrect character handling logic.
  • lib-ldap: Fix various TLS related bugs.
  • lib-mail: Fix charset translation and MIME parsing edge cases.
  • lib-mail: Fix multiple bounds checks and parsing issues in message handling.
  • lib-var-expand: Multiple fixes and improvements for expansion handling.
  • lib: Fix punycode decoding out-of-bounds reads.
  • lib: Fix unicode normalization edge cases causing crashes.
  • lib-http: Chunked transfer trailer size was not limited.
  • login-common: Improve logging and internal error handling.
  • login-common: login_log_format_elements was split by spaces naively, which
    could break variable expansion. Use template aware splitting now.
  • master: Dovecot would fail to start if listen directive was used and
    dovenull or dovecot user was missing.
  • pop3c: Connection might've hung with SSL.
  • util: Fix handling of environment variables containing control characters.
  • Many other bugs have been fixed.

  •  

Asterisk Release certified-22.8-cert2

26 Maart 2026 om 21:11

The Asterisk Development Team would like to announce
the release of Certified asterisk-22.8-cert2.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert2
and
https://downloads.asterisk.org/pub/telephony/certified-asterisk

Repository: https://github.com/asterisk/asterisk
Tag: certified-22.8-cert2

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-certified-22.8-cert2

Links:

Summary:

  • Commits: 1
  • Commit Authors: 1
  • Issues Resolved: 1
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • Mike Bradeen: (1)

Issue and Commit Detail:

Closed Issues:

  • 1833: [bug]: Address security vulnerabilities in pjproject

Commits By Author:

  • Mike Bradeen (1):

    • res_pjsip: Address pjproject security vulnerabilities

Commit List:

  • res_pjsip: Address pjproject security vulnerabilities

Commit Details:

res_pjsip: Address pjproject security vulnerabilities

Author: Mike Bradeen
Date: 2026-03-25

Address the following pjproject security vulnerabilities

GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username
GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header
GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions
GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing

Resolves: #1833

  •  

Asterisk Release certified-20.7-cert10

26 Maart 2026 om 21:09

The Asterisk Development Team would like to announce
the release of Certified asterisk-20.7-cert10.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert10
and
https://downloads.asterisk.org/pub/telephony/certified-asterisk

Repository: https://github.com/asterisk/asterisk
Tag: certified-20.7-cert10

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-certified-20.7-cert10

Links:

Summary:

  • Commits: 1
  • Commit Authors: 1
  • Issues Resolved: 1
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • Mike Bradeen: (1)

Issue and Commit Detail:

Closed Issues:

  • 1833: [bug]: Address security vulnerabilities in pjproject

Commits By Author:

  • Mike Bradeen (1):

    • res_pjsip: Address pjproject security vulnerabilities

Commit List:

  • res_pjsip: Address pjproject security vulnerabilities

Commit Details:

res_pjsip: Address pjproject security vulnerabilities

Author: Mike Bradeen
Date: 2026-03-24

Address the following pjproject security vulnerabilities

GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username
GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header
GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions
GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing

Resolves: #1833

  •  

Asterisk Release 21.12.2

26 Maart 2026 om 20:54

The Asterisk Development Team would like to announce
the release of asterisk-21.12.2.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/21.12.2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 21.12.2

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-21.12.2

Links:

Summary:

  • Commits: 1
  • Commit Authors: 1
  • Issues Resolved: 1
  • Security Advisories Resolved: 0

User Notes:

Upgrade Notes:

Developer Notes:

Commit Authors:

  • Mike Bradeen: (1)

Issue and Commit Detail:

Closed Issues:

  • 1833: [bug]: Address security vulnerabilities in pjproject

Commits By Author:

  • Mike Bradeen (1):

    • res_pjsip: Address pjproject security vulnerabilities

Commit List:

  • res_pjsip: Address pjproject security vulnerabilities

Commit Details:

res_pjsip: Address pjproject security vulnerabilities

Author: Mike Bradeen
Date: 2026-03-25

Address the following pjproject security vulnerabilities

GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username
GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header
GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions
GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing

Resolves: #1833

  •  

Asterisk Release 22.9.0-rc1

26 Maart 2026 om 20:39

The Asterisk Development Team would like to announce
release candidate 1 of asterisk-22.9.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.9.0-rc1
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 22.9.0-rc1

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-22.9.0-rc1

Links:

Summary:

  • Commits: 48
  • Commit Authors: 20
  • Issues Resolved: 31
  • Security Advisories Resolved: 0

  •  

Asterisk Release 23.3.0-rc1

26 Maart 2026 om 20:31

The Asterisk Development Team would like to announce
release candidate 1 of asterisk-23.3.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.3.0-rc1
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 23.3.0-rc1

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-23.3.0-rc1

Links:

Summary:

  • Commits: 48
  • Commit Authors: 20
  • Issues Resolved: 31
  • Security Advisories Resolved: 0

  •  

Asterisk Release 20.19.0-rc1

26 Maart 2026 om 20:31

The Asterisk Development Team would like to announce
release candidate 1 of asterisk-20.19.0.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.19.0-rc1
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 20.19.0-rc1

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-20.19.0-rc1

Links:

Summary:

  • Commits: 48
  • Commit Authors: 20
  • Issues Resolved: 31
  • Security Advisories Resolved: 0

  •  
  •  

uNmINeD 0.19.60-dev

Door: megasys
26 Maart 2026 om 00:12

New uNmINeD development snapshot is available for download!

Changes:

  • (GUI) Datapack and mod load errors are now ignored when opening a world
  • (GUI) The log now include a stack trace of errors that occur when opening the world
  • Improved handling of broken mods/datapacks
  •  
  •  

uNmINeD 0.19.59-dev

Door: megasys
24 Maart 2026 om 22:48

New uNmINeD development snapshot is available for download!

Changes:

  • (Hytale) Added texture average color calculation for vanilla blocks from the latest installed game assets
  • (Hytale) Added texture average color calculation for custom blocks added by mods
  • (Hytale) Updated vanilla stylesheet to version 2026-03-23
  • (Minecraft) Fixed an issue where the Bedrock vanilla resource pack would not load in some cases
  • (GUI) Fixed a zoom glitch when a map marker was under the mouse cursor
  •  

v4.0.0-beta.470

24 Maart 2026 om 22:00

What's Changed

Security & Fixes

  • Fixed proxy config validation to ensure stored config matches the current proxy type (#9146, fixes #9127)
  • Fixed environment variables being incorrectly resolved in compose files instead of preserving ${VAR} references (#9147, fixes #9136)
  • Fixed deployment issues with shell argument escaping in nixpacks commands (#9122, fixes #9042)
  • Fixed GitHub webhook errors for unsupported event types (#9119, fixes #9090)
  • Fixed server limit checks when using API tokens (#9123, fixes #9116)
  • Fixed hostname validation to be case-insensitive and allow more characters (#9134, fixes #9131)
  • Fixed duplicate subscription creation
  • Fixed environment variable refresh when variables are missing or stale
  • Fixed Docker cleanup logging when server is unreachable

New Services & Templates

  • Added EspoCRM one-click service template (#8658)

Improvements

  • Improved mobile responsiveness for confirmation modals
  • Simplified Docker installation process
  • Added storage API endpoints with UUID support for databases and services
  • Added Nightwatch monitoring support
  • Disabled Booklore service template (#9105)
  • Bumped Sentinel and Traefik versions

What's Changed (Github)

New Contributors

Full Changelog: v4.0.0-beta.469...v4.0.0-beta.470

  •  

MariaDB 13.0 Preview Now Available

24 Maart 2026 om 13:49

We are pleased to announce the availability of a preview of the MariaDB 13.0 series. MariaDB 13.0 is a preview rolling release, published on 23 March 2026, and it continues the work started in 12.3 while adding a solid set of entirely new features. And this one is interesting. This preview release brings a nice […]

MariaDB 13.0 Preview Now Available appeared first on MariaDB.org

  •  

v4.0.0-beta.469

20 Maart 2026 om 16:39

What's Changed

Security & Fixes

  • Fixed sporadic SSH "permission denied" errors during key rotation (#8990, fixes #7724)
  • Fixed deployment failures when build server is enabled during restart operations (#9045, fixes #9013)
  • Fixed breadcrumb queries causing out-of-memory crashes (#9048, fixes #9009)
  • Fixed GitHub App webhook endpoint defaulting to IPv4 instead of instance domain (#8948)
  • Fixed Hoppscotch service failing to start due to database health check (#8949)
  • Fixed Docker Compose not respecting preserveRepository for project directory (#8956, fixes #8953)
  • Fixed backup error when S3 storage is missing or deleted (#9038, fixes #9035)
  • Fixed Stripe subscription error handling and resilience (#9030)
  • Fixed Heyform template configuration (#8747)
  • Fixed API resource UUID extraction from route parameters
  • Fixed Docker cleanup stale container warning on cloud instances
  • Fixed Compose file-not-found error now includes git branch info

New Services & Templates

  • Added LibreSpeed service for self-hosted speed testing (#8626)
  • Added imgcompress service for offline image processing (#8763)
  • Updated Databasus to v3.16.2 (#8586)
  • Updated n8n with Postgres and Worker to v2.10.4 (#8807)
  • Updated SeaweedFS images to v4.13 (#8738)
  • Fixed Castopod service port from 8000 to 8080 (#8817)

Improvements

  • Added per-volume control of PR suffix in preview deployments (#9006, fixes #7802, fixes #7343)
  • Added auto-population of FQDN from docker_compose_domains for compose previews (#8963, fixes #8958)
  • Added force deletion option for servers with existing resources (#8962)
  • Added auto-fetch of server metadata after validation (#8964)
  • Added container label escape control to services API (#8955, fixes #8954)
  • Added database environment variable management API endpoints
  • Added storage management API endpoints for applications and backup schedules
  • Added support for comments in bulk environment variable API endpoints
  • Added placeholder hints for magic environment variables
  • Added next billing date and billing interval display for subscriptions
  • Added cache-based deduplication for delayed cron execution
  • Simplified environment variable settings by removing buildtime/runtime options

What's Changed (Github)

  • fix(git): GitHub App webhook endpoint defaults to IPv4 instead of the instance domain by @ShadowArcanist in #8948
  • feat(service): update n8n-with-postgres-and-worker to 2.10.4 by @michachan in #8807
  • Change Castopod service port from 8000 to 8080 by @SeriousM in #8817
  • fix(service): hoppscotch fails to start due to db unhealthy by @ShadowArcanist in #8949
  • fix(api): allow is_container_label_escape_enabled in service operations by @andrasbacsai in #8955
  • fix(docker-compose): respect preserveRepository when injecting --project-directory by @andrasbacsai in #8956
  • feat(server): allow force deletion of servers with resources by @andrasbacsai in #8962
  • feat(compose-preview): populate fqdn from docker_compose_domains by @andrasbacsai in #8963
  • feat(server): auto-fetch server metadata after validation by @andrasbacsai in #8964
  • feat(templates): Add imgcompress service, for offline image processing by @ariqpradipa in #8763
  • fix(template): fix heyform template by @iMuFeng in #8747
  • chore(service): Update SeaweedFS images to version 4.13 by @FabioHAraujo in #8738
  • feat(service): Add librespeed by @diogo24m in #8626
  • feat(service): update databasus to v3.16.2 by @Luzefiru in #8586
  • fix(preview): enable per-volume control of PR suffix in preview deployments by @andrasbacsai in #9006
  • fix: prevent sporadic SSH permission denied on key rotation by @pannous in #8990
  • fix(stripe): add error handling and resilience to subscription operations by @andrasbacsai in #9030
  • fix(backup): throw explicit error when S3 storage missing or deleted by @andrasbacsai in #9038
  • perf(breadcrumb): optimize queries and simplify navigation to fix OOM by @andrasbacsai in #9048
  • fix(deployment): disable build server during restart operations by @andrasbacsai in #9045
  • v4.0.0-beta.469 by @andrasbacsai in #9007

New Contributors

Full Changelog: v4.0.0-beta.468...v4.0.0-beta.469

  •  

v4.0.0-beta.468

12 Maart 2026 om 14:28

What's Changed

Security & Fixes

  • Fixed SSH connection retry failures during deployments (#8927, fixes #8926)
  • Fixed deployment type selection when using GitHub/GitLab Apps (#8934, fixes #8917)
  • Fixed deployment authorization endpoint returning incorrect 404 errors (#8931, fixes #8925)
  • Fixed shared variables not resolving in Docker Compose environments (#8930, fixes #8918)
  • Fixed SSH keys not being used for git submodule and LFS operations (#8933, fixes #8895)
  • Added support for scoped npm packages in file path validation (#8928, fixes #8924)

Improvements

  • Added log filtering capability based on log level in deployment logs (#8784)

What's Changed (Github)

Full Changelog: v4.0.0-beta.467...v4.0.0-beta.468

  •  
❌