Normale weergave
macOS 26.5 beta 2 (25F5053d)
FileZilla Client 3.70.1 released
Bugfixes and minor changes:
- SFTP: Updated to fzssh 1.1.8 to address an issue with servers sending empty longnames
- SFTP: Updated to fzssh 1.1.8 to address an issue with servers incapable of handling large receive windows of 2^32 - 1 bytes
- SFTP: Fixed an issue creating directories during file upload
v4.0.0-beta.473
Fixes
- Fixed the upgrade modal to show the correct target version and cleared stale upgrade notifications when the instance was already up to date. (#7774, fixes #6039, #8707)
- Fixed user deletion cleanup so team-owned Git app sources were handled safely, while instance-wide sources were preserved for the root team. (#9435, fixes #8172)
- Fixed dashboard homepage add buttons so they remained visible in light mode. (#9456, fixes #9454)
- Fixed port mapping validation to accept protocol suffixes like
/tcp,/udp,/sctpand IP-bound mappings. (#9503, fixes #9501, #9504)
Improvements
- Updated
phpseclib/phpseclibto3.0.51. (#9500) - Updated
axiosto1.15.0for development dependencies. (#9515) - Updated
axiosto1.15.0incoolify-realtime. (#9516)
What's Changed (Github)
- fix(ui): Initialize latestVersion in Upgrade component mount by @andrasbacsai in #7774
- fix(user-deletion): safely clean up team-owned Git app sources by @andrasbacsai in #9435
- fix(ui): dashboard homepage add buttons are invisible in light mode by @rosslh in #9456
- fix(validation): allow protocol suffix and ip in port mappings (/tcp, /udp, /sctp) by @ShadowArcanist in #9503
- build(deps): bump phpseclib/phpseclib from 3.0.50 to 3.0.51 by @dependabot[bot] in #9500
- build(deps-dev): bump axios from 1.13.2 to 1.15.0 by @dependabot[bot] in #9515
- build(deps): bump axios from 1.13.6 to 1.15.0 in /docker/coolify-realtime by @dependabot[bot] in #9516
- v4.0.0-beta.473 by @andrasbacsai in #9521
New Contributors
Full Changelog: v4.0.0-beta.472...v4.0.0-beta.473
DistroWatch Weekly, Issue 1168
Review: pearOS 2026.03
News: Arch Linux adjusts firewall packages, Linux dropping i486 support, Red Hat extends its lifecycle, Debian's APT introduces rollbacks, Redox improves CPU scheduler
Questions and answers: Which distributions are adopting age verification?
Released last week: deepin 25.1.0, Trisquel 12.0
Torrent corner: deepin, Trisquel
Upcoming releases:....
Flowblade 2.24.1
Bugfix release.
HeidiSQL 12.17
12.17 - 2026-04-12
β°οΈ Features
- (packaging) Add libqt6pas dependency - (a3e6d0b)
- (packaging) Ship qt6 build in deb package, enhance control file fields - (992b673)
- (ui) Turn all TEdit's with NumbersOnly into TSpinEditEx - (96bb466)
- Select just created table copy - (18e9431)
- Add toolbar button for toggling reverse foreign key listing, so the user has the chance to disable its potentially long during query - (938f303)
- Reverse foreign keys on "Foreign keys" tab in table editor - (ca48343)
- Add menu item Edit > Copy column names - (ce93931)
- Prevent loading an SQL file multiple times into an editor - (153e61d)
- Add sshpass.exe v1.0.6 for Windows, and refactor Windows installer script - (d79d462)
- Inject app name and version into potentially long during SQL queries for the SQL export - (93e1b39)
- Run user startup script in DoAfterConnect call, which includes reconnects - (1b27b1d)
- Add "Display" main menu, move some spread items there, and add two items for toggling log panel and tree filters - (c0fbcff)
- Support BOOLEAN column type in MySQL - (e796ad1)
- Re-enable clickable "Analyze query" label on host > processes - (678c7b8)
- Create SQL export option for wrapping DML commands in a BEGIN/COMMIT transaction - (5560454)
- Display approximate row count of tables in database tab on MS SQL - (146044f)
- Support full table status option in SQLite, showing "Rows" from COUNT(*) for each table - (422935a)
- Add security policy for supported versions and reporting - (7ce4a23)
- Prefer KILL QUERY over KILL on MySQL and MariaDB, when using the "Kill process" menu item in Host > processlist - (b3743d8)
- New attempt to leave the main window invisible behind the session manager - (be5322c)
- Show virtual, stored and hidden columns in SQLite - (0a87a73)
π Enhancements
- Move color scheme submenu from Tools to Display menu - (f7f90e8)
- Export tables which are hidden through the table filter - (42e5277)
π Bug Fixes
- Crash on macOS, due to running Connection.ShowWarnings directly in the TQueryThread - (d62807a)
- Less aggressive debug compile mode, made the app unresponsive when trying to close - (8d48099)
- Two more exception causes found in uploaded reports - (e33ea1d)
- Sporadic "no database selected" when updating grid header with row details - (c9eb765)
- Wrong use of Copy(), which is one-based not zero-based, and remove translated appendix to snipped log message which may use critical chars and confuse SynEdit - (e3fc3f5)
- Various crash causes, reported in uploaded bug reports - (6215d19)
- Missing required package LazControls for TSpinEditEx - (519a84a)
- Remove default keystrokes from query editor: 2x ecRedo and 1x ecDeleteLine - (2bc9d78)
- Wrong SQL on MS SQL when renaming table per table editor - (a763fd1)
- Use default brew path to sshpass on macOS - (b7c3d07)
- Status bar text gets written into the panel right besides the current one, on Linux/macOS - (dfb86d5)
- Several crash causes Host subtabs when connection is lost externally - (1029657)
- Non stored global setting for "sort alphabetically" checkbox in column selection - (0ccb1ac)
- High CPU load and unresponsiveness through SynEdit highlighter when starting to edit large text in popup editor - (676fcd7)
- Crash when enabling TShellListView.MultiSelect in OnFormShow, now sets options per setter method, before FormShow - (2acce35)
- Crash on right-click in empty area of query result grid - (6309305)
- Data grid context menu not opening after click in empty area - (10fc117)
- Repaint columns list after move up/down a column - (6a0cbe3)
- Out-of-memory error in call to sqlite3_open() on a non-existent SQLite database file - (e93924f)
- Font bold + italic setting not stored in settings - (cc5b811)
- Potentially crashing typecast in LoadRecentFilter - (da07591)
- Non-themed white area on TTabControl, fix from zamtmn/metadarkstyle#75 - (7554364)
- Forgotten files in c01a439 - (8098296)
- Initial FK names assigned in TfrmTableEditor.listForeignKeysNewText() were lacking the referencing table's table name in case the referencing table was not created yet (pr from Jochen Neubeck) - (d8cd61c)
- Wrong schema queries in SQLite, always shows columns and indexes of first database file - (7072986)
- BIT values in MS SQL grid queries prefixed with MySQL b'' style - (7456c38)
- Random crash in dodgy typecast TEdit/TEditButton - (37add0f)
- Crash when moving added column to very bottom - (b739799)
- Load any foreign keys, anyway if the user owns them, on PostgreSQL - (dbab4cb)
- Wrong captions on quick filter actions shown in preferences > shortcuts - (3e0bf91)
- Crash in OpenTextFile, for a 0-bytes file - override the encoding to one without BOM - (27e26a6)
- Keep column default value in table editor, when user changes its datatype to one in the same category as before (int => bigint) - (3c518ad)
- Trim away spaces around name of routine parameter silently - (b681ebf)
- Re-enable dropping sql files on main form - (314db47)
- Missing translations, and rephrase the "themes not supported" text - (7dfad02)
- TDBQuery.TableName always returned an empty string on MS SQL - (520a90c)
- TDBQuery.Col() crashes with "Column not available" on certain locales - (a01acd1)
- Reset DesignTimePPI in all forms from 120 to the default 96, let the IDE scale controls down and move or add some defaults like LCLVersion. - (e635ae5)
- Allow $$ as delimiter again on non-PostgreSQL connections, and ` on non-MySQL connections - (71bb25b)
π Refactor
- Migration from Array[TSQLSpecifityId] to TSqlProvider - (31ba8bf)
π Documentation
- (ui) Mark VCL styles as deprecated - (1ce80ea)
π¨ Styling
- (ui) Remove border around reverse foreign key list - (6ed145e)
βοΈ Miscellaneous Tasks
- Bump version for v12.16 release - (d141124)
- Move OpenSSL license file out of the dll folder - (5772d09)
- Add Wine deprecation note used in the Windows builds - (5e34fa9)
Localize
- Update compiled translation files from Transifex - (a5f1a19)
Ui
- Hint the user in which path we are going to look for sshpass (macOS and Windows) - (86a96bd)
Contributors
12.15.1.1 - 2026-01-30
β°οΈ Features
- Add a few items to the top of the grid's header context menu - (eb9cd8b)
- Add a newer FreetTDS library for Windows, from the last successful VS 2022 build on https://ci.appveyor.com/project/FreeTDS/freetds - (93bfda0)
- Make grid-highlight-same-text-color part of the predefined color schemes - (7854157)
- Switch color scheme from Tools main menu - (c8c3b23)
- Introduce global AppColorSchemes for managing SQL and grid colors, and sync both with the app's dark mode (still only on Windows) - (d313a59)
- Sync active line color and brace highlight with the app's dark or light mode - (3510728)
- Auto-switch to dark or light SQL colors in sync with the app's dark mode - (8a08e77)
- Support dark mode, using MetaDarkStyle from OPM, and provide the 3 known custom settings: automatic, light and dark - (3f9e867)
- Re-enable dropping files from file manager to "insert files to BLOB" dialog - (23fc9c0)
- Upgrade DPI awareness to Per-Monitor v2, add TMainForm.FormChangeBounds as a replacement for the missing OnAfter/OnBeforeMonitorDpiChanged events - (9eab28e)
- Re-enable menu item on list header context menu: "Toggle visibility of all columns" - (41169f7)
- Support European umlauts/accents as \w (word char) in some regular expression areas - (304cd26)
- Auto-uppercase keywords, data types and functions - (62cda84)
- Recreate previous state of trigger after realizing the user edited code has errors - (e7e5e11)
- Create a TSynEditMarkup descendant and use it for highlighting selected text occurrences - (8a667f2)
- Create custom setting so the user may define a terminal app himself, and auto-detect terminal app if the setting is yet empty - (613e207)
- Enable InnoSetup script for creating Windows installer - (317edcd)
- Re-enable codepage => charset mapping using GetACP from DelphiCompat unit - (79e4654)
- Re-enable ValidFilename function with platform specific lists of disallowed characters - (f3a0594)
- Re-enable support for hyperlinks in message dialogues, and use TTaskDialog again for simple messages on Windows - (15eb52b)
- Support portable mode with a portable.lock file in the app folder - (c528c5d)
- Re-enable hints on query result tabs - (88115ac)
- Show connection details as a hint over status bar - (e1ad5c3)
- Add missing LCL translations, compiled to .mo files with msgfmt from Poedit with support for msgctxt - (505e3ec)
- Use the more native MessageDlg on all platforms when we don't need additional dialog features - (8c0e61f)
- Show only mono-space fonts in SQL font selector - (3388d9f)
- Support compilation and usage on FreeBSD - (425d099)
- Include libssl 1.1 in macOS app bundle - (f51d2a9)
- Include libmysql plugins in macOS app bundle - (85a15f8)
- Provide libmariadb plugins in macOS app bundle - (2967ad2)
- Assign OK button to Enter and Cancel button to Esc - (3ea4a90)
- Add translation files to macOS app bundle - (08735bc)
- Provide libmariadb in macOS app bundle - (2a1c725)
- Support SynEdit hints when mouse is over function names, tables etc - (82ef10e)
π Enhancements
- Turn two more TButtons into TBitBtn with icon - (9300cbc)
- Immediately show new log lines on heavy operations, enhancing user experience - (b100479)
- Turn export options button into TBitBtn and give it an arrow-down icon - (4864900)
- Indicate drop-down menu through arrow-down image on buttons - (288b346)
- Reduce width of left gutter in popup text editor - (4215aee)
- Hide grid cell border lines in most VirtualStringTree's - (b31f78a)
π Bug Fixes
- (ci) Get libqt6pas on ubuntu via 3rd party repo - (4205774)
- Remove MetaDarkStyle from the required packages, instead add a latest snapshot of the relevant files from https://github.com/zamtmn/metadarkstyle/ - (9f9cde0)
- ERangeError when editing text grid values which allow more than 2^31 chars, e.g. LONGTEXT - (42b5d52)
- Set default value for ThemeIsDark for cases where AppleInterfaceStyle does not exist (= light mode) - (26ca75e)
- Reload color scheme after auto-apply, reintroduce ThemeIsDark with a detection for Windows and macOS, use MetaDarkStyle units only on Windows - (b4afc3a)
- Invalid typecast in List.Add(BaseForm.Components[i]), when running debug builds - (38faf57)
- Wrong length of text detected (always 0) - (930a815)
- Crash in data grid when switching to an empty table on ArchLinux - (e9b6835)
- Next attempt to fix ERangeError crash in TBaseVirtualTree.UpdateVerticalRange - (c8e8bed)
- Wrong ModalResult on "Replace all" button - (2367ac6)
- Increase too tight node height - (60ad998)
- Auto fit columns in search-on-server results, taking the header caption into account - (4ce827b)
- Remove space eating gutter from SynEdit in search text dialog, disable scrollbars as long as not required - (7423aa3)
- Form dimensions reset to default values each time, and wrong check for empty SynEdit - (dab1cda)
- Confusion about modified default setting for DoubleClickInsertsNodeText, reset to old value - (f8dc796)
- Wrong BOM characters written to grid export files, when encoding is set to "UTF-8 BOM" for instance - (f951b78)
- Auto-uppercase when pressing Enter immediately after a keyword - (d34be7f)
- Missing selection highlighting and auto-uppercasing in data tab filter editor - (2e31c5e)
- Prevent triggers without quoted trigger name or table name from failing to be parsed (alexanderglueck) - (3028076)
- Convert usages of UnicodeString to String, in jsonregistry unit, and fix handling of Chinese characters - (39df339)
- Broken integers and floats after locale formatting on macOS - (fa1db76)
- Crash in file-picker with Windows path within Linux - (7f8dc30)
- Some more compiler warnings and hints - (3b24707)
- Missing top anchor control for new terminal edit box - (4271040)
- Missing SSHPASS environment variable when starting tunnel with sshpass -e - (6ce846b)
- Non working MySQL command line launcher, for all platforms - (d9b6f87)
- A few more compiler hints and warnings - (e18b3db)
- Crash at right-click on data grid header - (f88405b)
- Add missing dlls and MySQL plugin dlls for use on Windows, remove unused macOS dylibs - (287abde)
- Non working "Insert row" actions and its friends - (d1faf6b)
- Stretched preview image, and image metadata label too small - (20aded3)
- Ban Windows API code used in OnAdvancedHeaderDraw for painting column headers with sort chars - (485fb7d)
- Broken sort arrows in grid column header - (377d402)
- Fails to run netstat or netstat.exe on Windows, try a cross-platform socket approach - (633ee44)
- Fix various compiler hints and warnings - (f1ac6dc)
- Crash when switching between tables - (c054884)
- Bad anchors on edit-variable dialog, overlapping/hiding radio buttons - (3e77c0d)
- Conflicting grid edit shortcuts - (ad52dd3)
- Crash in grid initializing, likely due to a wrong node height - (4c6204a)
- Compile error on Linux due to "identifier not found: LoadStringW" - (7a73769)
- Translate button captions on TTaskDialog using LoadStringW on Windows - (9723210)
- Set MySQL plugins folder like in the classic branch - (eccf7b2)
- No locale influence and no scientific notation in JSON reformatter - (825447f)
- Bad anchors on "start" tab of session manager, plus add an info label for portable users - (a140b19)
- Set Screen.HintFont globally to what the editors use - (2b7d31b)
- Do not show ugly/solid grid lines on macOS and Linux - (c35a35c)
- Prevent host sub-tabs from getting disabled on macOS - (6f5a2d1)
- Missing control anchors on create-database dialog - (d26f128)
- Prevent editors from getting an empty font name - (74abc16)
- Show file modification time in about dialog - (50b6864)
- Skip harmless error when PG has no COLLATION_NAME in IS.COLUMNS - (eb3937a)
- Broken compiler conditionals - (556e4fb)
- Missing control anchors on copy-table dialog - (6cc530b)
- Set runtime search path for linker, so openssl finds libssl.1.1.dylib and we can access https pages now - (230ac8d)
- Missing control anchors on search/replace dialog - (c07b155)
- Missing control anchors and tab order on column selector - (f72156d)
- Wrong button positioning on macOS caused by differences of TButton/TBitBtn - (ba9442b)
- Search for translation files in the right folder within macOS app bundle - (52b065a)
- Prefer TBitBtn over TSpeedButton for native look on macOS - (bee61ec)
- Assign no Syn highlighter by default and call it "Text", in texteditor - (446d78c)
- Anchoring in about box - (3605706)
- Copy functions-*.ini files to the right folder, add iconset - (2f92db2)
- Sign and notarize exe file and dylibs on macOS, fix ini filenames - (c34bde3)
- Load libs from ../Frameworks on macOS - (8f6ba68)
- Remove dead code - (5f39a44)
π Refactor
- Move grid null colors away from data types array to the new color scheme - (2bc36b4)
- Rename TSynEditHelper.TextIsEmpty to HasText - (ac095e4)
- Move macOS build to Makefile - (f41a6ff)
π¨ Styling
- Remove no longer needed and partly dead code for DpiChange detection - (23148e9)
- Remove dead code which is unlikely to get re-enabled in the future - (eb4a0b4)
- Remove non working context help button on session manager, we have a "general help" menu item in the "more" menu already - (b1122c5)
- Reduce borders around controls - (ff065ea)
βοΈ Miscellaneous Tasks
- Bump version to 12.15.1.1 - (cb03bec)
- Revert to using include-packages, now that it checks LazCompatibility to exclude outdated/incompatible package files from installation - (fcd45be)
- Attempt to fix compilation of unwanted and outdated package files - (04bee72)
- Attempt to fix broken dependency, use correct case of the package's DisplayName - (45e596c)
- Mention current Lazarus version in readme file, mention usage for macOS builds and plans for v13 - (93fdf77)
- Remove "Linux" from the Github release name, so I can have one release for all OS packages - (ab46fc5)
- Move translation source file from master to lazarus branch - (b211b44)
- Remove unused file extensions and add some others - (0b5ab25)
- Set release compiler option -WM10.15 identically to debug, relevant for macOS - (6144df2)
- Using the correct
lazbuild- (c9c6be0) - And I had to forget one more, right?!?! - (fc49d22)
- Windows executables have
.exeextension!!! - (35d2ebd) - Add Windows build to the matrix - (10776d6)
- Switch back to upstream setup-lazarus - (b2c049b)
- Add macOS - (6377e11)
- Test switching to forked setup-lazarus action - (dcdac1b)
- Debugging missing columns from IS.COLUMNS on PG v16 - (f65bd15)
- Remove dead code and calls: HasSizeGrip, FixControls, TranslateComponent, ConfirmIcon - (1527d35)
- Adding support for QT6 CI/CD - (c9d05e8)
- Dealing with end of line shenanigans - (d3fa0af)
- Remove Transifex integration, prefer precompiled .mo files in extra/locale/ - (4e5504f)
- Remove Wine hacks, now that we provide native Linux builds - (95df174)
- Remove notification for no longer created build updates - (5e2c8b5)
- Remove dead code - (fa4a14a)
- Set linker rpath for all build modes - (df80dbf)
- Notarize macOS bundle only with --notarize argument, include team id - (887a6cf)
- Apply trivial change to remaining units complaining about CR/LF mixup - (64cec90)
Contributors
New Contributors β€οΈ
12.14.1.1 - 2025-12-11
β°οΈ Features
- Shell script for creating macOS app bundle - (af24108)
- Support XML formatting in grid popup text editor - (913fc9d)
- Switch to grayscale icons on inactive query tabs - (917e046)
- Support SSH tunnel configuration per commandline - (35a5225)
- Display some known file type icons in file open/save dialog - (b4c0566)
- Finalize keyboard shortcut customization in preferences - (637d2d6)
- Add new keyboard shortcut editors on preferences dialog - (cc4e6f1)
- Keep time fractions intact for CSV exports - (06322de)
- Use custom folder icons in tree on file dialogs, in non-Windows mode - (3094d79)
- Show NULL values in system variables listing - (06b44eb)
- Highlight same text in grids based on all selected rows - (afc9d8c)
- Support fractional UNIX timestamps in grids - (65c1472)
- Add "source table: xyz" hint to query result column headers - (2863a80)
- Support click on path parts on top label of file dialog - (98b796b)
- Convert all save/open dialogs to the new custom one - (4a8c53c)
- Create file-save dialog with linebreaks selector - (d5d34ad)
- Recreate basic TExtFileOpenDialog without OS owned dialog and room for customization - (bac0d7a)
- Full support for different icon packs, Silk and Icons8 - (dbca69d)
- Add 206 Silk icons into new TImageList - (769afa5)
- Require libsybdb5 in DEB package - (e1781f9)
- Mark MS SQL protocols like named pipe as unsupported, advise the user to change to TCP/IP - (b20f121)
- Dirty and basic support for MS SQL - (3df3673)
- Show more detailed backtrace in crash dialog - (bc0a7de)
- Support SSH passwords via sshpass - (f2b2dc3)
π Enhancements
- Position session manager centered over main form, ignore position set by user - (571c671)
- Align bottom buttons on session manager - (ca7aad6)
- Set font style and color of size column in tree - (f987c81)
- Move RightEdge on SQL editors out of sight - (2a23e26)
- Light text color instead of ghosted/ugly icon for unseen tree nodes - (76aefb3)
- Disable tree option asDoubleClickInsertsNodeText by default - (1c9321c)
π Bug Fixes
- Connect MS SQL query to session transaction, run .ExecSQL - (59191da)
- Prevent SQL delimiter being set to PostgreSQL quotes - (a3acc04)
- Crash when grid-exporting without required key - (ff6050f)
- Delete CLI-created session settings from registry after disconnect - (8778d40)
- Another broken thousand separator - (24f3e36)
- New attempt to hide SynEdit caret when unfocused - (03f4a5f)
- A TSpeedButton connected to a TAction, and a TMenuItem were not auto-checking - (42abf46)
- Database icon in Icons8 list too small - (dda44be)
- Cannot save new table when added column was removed - (1fe709a)
- Compile without MS SQL support on macOS - (9a4d841)
- Query batch stops at second last query if it has errors but StopOnErrors is off - (6e40c62)
- Drag'n drop on Linux requires VT.DragType = dtVCL - (4fd646c)
- Enable drag'n drop in table editor and session manager - (9afc60f)
- Detected empty text DEFAULT value for table columns - (4c0617d)
- Append quick filter without linebreak - (8ea3b94)
- Wrong icon sizes, disable right-click select for column list so selection is kept - (a145fc5)
- Remove dead code, fix some compiler hints - (79bcd1d)
- Bad position of TEdit on TInplaceEditorLink - (8d119a0)
- Quick filter > "more values" submenu not created/shown - (8696e61)
- Empty KeyStrokes list on text editor - (db00c83)
- Broken caption on inline text edit button - (1730956)
- User queries not showing up in log panel - (222a386)
- Do not edit grid cell on right-click, and set HotCursor on DBtree - (0257867)
- Flashing main form in background after cancel session manager - (0563b4d)
- Work around empty space artifact in ShellListView - (cf9ed85)
- Move all Application event assignments to .lpr file - (64919d6)
- Confusion with (selected) folder icons - (b488ca2)
- Tree with keyboard actions shows wrong captions - (5e20c53)
- Binary result values displayed as 000... - (4322372)
- TMySQLQuery.TableName() returns wrong string, and introduce apphelpers.GetAppDir - (bb517d7)
- Crash in AnyGridPaintText with no query result - (59659f0)
- Error: (4004) Variable identifier expected - (13a0127)
- Crash in printer dialog with 0 printers available - (6eecdd8)
- Missing file for previous commit - (857cca8)
- Some remaining issues in the new file-open/save dialogs - (34e3f32)
- Work around out-of-view item in left tree after FormShow - (ec4c237)
- Navigate to directory of currently loaded file when user opens dialog for loading another file - (251f632)
- Broken support for non UTF-8 encoding - (fe65231)
- Prompt to overwrite only if file exists - (91de2fc)
- Add encoding selector to file-open dialog - (56b783d)
- Crash when app exits, with deleted TSynGutterSeparator - (00627ae)
- Optical stuff, add bookmark icons for SynEdit - (29d1abc)
- Use GetApplicationName in InitMoFile as well, plus documentation - (93bf989)
- Make LCLTranslator independent of executable filename - (0469dd9)
- Make GetAppConfigDir independent of executable filename - (9e2611e)
- Make translation filename independent of executable filename - (5d487bb)
- More painting related crashes on QT, this time in OperationRunning() - (fbe32db)
- Compiler warnings, re-enable active line background - (a1c84ae)
- Two crashes in QT caused by aggressive control repainting - (7650efe)
- Hide library files which ldconfig shows up but don't exist - (85cf230)
- Provide at least one libmysql for macOS, plus its dependencies - (1fbc2ab)
- Fix compiler errors on macOS, set DYLD_LIBRARY_PATH run param to fix wrong path for libssl - (58b210a)
- Wrong integer size/type for ClientFlag in mysql_real_connect - (3213fe9)
βοΈ Miscellaneous Tasks
- Bump version to 12.14.1.1 - (1a2f1f3)
- Use Lazarus logo in readme - (aa49736)
- Remove now unused doc, written for converting to Lazarus - (b01e732)
- Fix generation of
.deb- (e95aca8) - Fix missing
Packagevariable - (13c55ce) - Using
v4ofgit-cliff-action- (81d613b)
Contributors
[12.13.1.1] - 2025-11-03
β°οΈ Features
- Sort session folders at top per setting - (93dc936)
- Filter box in user manager - (b57b764)
- Add checkbox "Open file after creation" to grid export dialog - (613f4d8)
- Allow sorting columns in table designer - (8541eb4)
π Enhancements
- Make file exit action OS friendly - (1f19d00)
π Bug Fixes
- List procedures in PostgreSQL - (db902f7)
- Missing DELETE HISTORY privilege on MariaDB - (f7b80db)
- Prevent crash in auto-refresh action - (2c25e04)
- Bad message with no library selected - (f9a486b)
- Generate missing values for geometry columns - (eb1b5ea)
- Allow modify length of index with binary column - (173efeb)
- End global "edit function" mode for grid editing early - (5cac850)
- Take care for escaped ENUM definitions - (328fb72)
- Support return data type of stored function containing white spaces - (d7b1faa)
- Safety replacement for folder separator when renaming a session or folder - (18a21ef)
- Leave away schema when double-click table for inserting into query editor - (b72f259)
- Sticky empty-password warning after setting a non-empty one - (f2028e1)
- Support double dollar quotes on PostgreSQL - (caeae88)
π Documentation
- (CHANGELOG) Proper changelog - (79bb279)
βοΈ Miscellaneous Tasks
- Bumping version to 12.13.1.1 - (bf23332)
- Using correct target of
build-*- (16a54a5) - Fixing some blantant mistakes - (76dfa98)
- New category: Enhancements - (dd1ad34)
- Removing unnecessary
tx-pushrecipe - (d293d64) - Forgot to copy
.inifiles onrun-*- (c513e53) - Completing
run-gtk2,run-qt5- (04650d9) - Adding empty
tx-pushtoMakefile- (3ceed39) - Adjusting workflow to skip secrets detection - (14dd9ce)
- Adding usage of
secrets.mk- (123a2e7) - Forgot to change the output folder - (78f1415)
- First batch of changes - (2bee126)
New Contributors β€οΈ
- @gcarreno made their first contribution
- @ansgarbecker made their first contribution
- @ made their first contribution
Note
For a list of all the changes up to date, please read CHANGELOG.md.
12.17-Windows
Bump version for v12.17 release
Distribution Release: Trisquel GNU/Linux 12.0
v0.5.0 - βThe Caesar-Augustus memorial sewerβ
0.5.0 (2026-04-12)
- Feature: [#23465] Change plugin JavaScript engine from Duktape to QuickJS-NG, allowing ES6+ features to be used in plugins.
- Feature: [#26178] Port of the Spinning Cars from RollerCoaster Tycoon 1.
- Improved: [#25314] Add unbanked and banked quarter helices to the Alpine, Corkscrew, Giga, Hybrid, Looping, Mine Ride, Mini, Multi-Dimension, Single Rail, Stand Up, Steeplechase and Twister tracks.
- Improved: [#26044] Simplify Android installation by bundling OpenRCT2 assets in APK.
- Improved: [#26293] Objects extracted from saves now have more information in their filenames.
- Improved: [objects#432] Allow saving scenery from RCT1 with track designs.
- Change: [#25962] The station style dropdown now shows entrance icons next to the labels for easier selection.
- Change: [#26175] The ride colour tab is made more compact by collapsing unavailable sections instead of only hiding them.
- Change: [#26178] Symmetric spinning trains and legacy βpre-reversedβ trains can no longer be reversed.
- Fix: [#10616] Quarter-tile trees cannot be placed on dry portions of half-water tiles.
- Fix: [#25128] Mute button displayed in wrong state after load.
- Fix: [#25460] Infinite loop when moving track design ghost queue over queue loop with zero clearances.
- Fix: [#25735] Ride synchronisation z-check works incorrectly.
- Fix: [#25919] Path drag tool error sound stacks when placement fails.
- Fix: [#25926] Path drag tool shows cost for single tile instead of total.
- Fix: [#25927] Wall drag tool error sound stacks and shows wrong cost.
- Fix: [#25962] Dropdown triangle glyphs are not optically centred.
- Fix: [#25993] Toggling βallow arbitrary ride type changesβ does not resize open ride windows.
- Fix: [#26111] Vehicle colours tab can go out of bounds in certain edge cases.
- Fix: [#26118] Windows installers for releases are not signed properly.
- Fix: [#26128] The loan spinner widget does not appear on the same baseline as the text around it.
- Fix: [#26140] The time a guest has spent in a queue overflows back to 0 after it reaches 65535 (about a year).
- Fix: [#26159] The map generator window is not resized correctly in Enlarged UI mode.
- Fix: [#26196] The sprites of one angle of the Steeplechase left large turn are misaligned (original bug).
- Fix: [#26214] The wrong sprite is used for one angle of the gentle diagonal slope of Alpine, Hybrid and Single Rail tracks.
- Fix: [#26243] Increase max dropdown size from 512 to 1024 to accommodate parks with more than 512 rides.
- Fix: [#26306] Platform::FindApp fails to locate Homebrew-installed tools on macOS.
- Fix: [#26339] Crash when setting up a marketing campaign.
- Fix: [objects#430] The RCT1 Reverse Freefall car can be reversed and show broken sprites when doing so.
Release created in https://github.com/OpenRCT2/OpenRCT2/actions/runs/24303301342
SHA256 checksums:
545aacbbce6e0f00097c6a2efe9d1d7a4226f20f8f120304e41324e955406387 ./OpenRCT2-v0.5.0-Linux-bookworm-x86_64.tar.gz
b390cba3ecfecb5c3188fe33b8391a7045a039739c382e0fa6b9ff0f0d4c101e ./OpenRCT2-v0.5.0-windows-symbols-arm64.zip
7736205ec96e93203c129038475026764a267d7883f11095b4ed0b98ca49852c ./OpenRCT2-v0.5.0-macos-universal.zip
af94d53b5259c28d8639f264e8dfe88a4ca68aa60b90631cb27a66caa895a6b2 ./OpenRCT2-v0.5.0-sha256sums.txt
f714431d73d77e66f4808e728a4b54c14c59b931b36d49e4d4ac238e2490aac3 ./OpenRCT2-v0.5.0-windows-symbols-win32.zip
8d1d6fd2afe324ed8b74b4483ee5693256cdc69a1a3159818bbbba49914b2e13 ./OpenRCT2-v0.5.0-windows-installer-x64.exe
20260b77324bd8e9cad95a8e4da2ef69d56a95e6715de0a64d824be8e57333b5 ./OpenRCT2-v0.5.0-Linux-trixie-x86_64.tar.gz
99d626e6aca3168ff48900dc4c3aa0c3f3a7026f5974181840b62f1f099202b1 ./OpenRCT2-v0.5.0-windows-symbols-x64.zip
5557043fe8e12457307a1bdf743a1daeb772bba9c36637664731fdebed19b948 ./OpenRCT2-v0.5.0-windows-portable-x64.zip
74d1b920033ee54effb35674fa53659ad8b942378649a98dd7efc6ba923f236c ./OpenRCT2-v0.5.0-windows-installer-win32.exe
e1dbdf337c3a02a03b7722752a749303277c20fcae962471705f214d4c14b9fc ./OpenRCT2-v0.5.0-Linux-resolute-x86_64.tar.gz
8f5660356449a086667d02525fc63c9d85e9883f47cb50d501febc4476551d41 ./OpenRCT2-v0.5.0-windows-installer-arm64.exe
cb174ca94e48a3aa8d83fa8f9e5b13df281b8d56f1bd67f7a5f5ed5dc0addb31 ./OpenRCT2-v0.5.0-android.apk
0d1f01be35d8d4632aa3dc67d33b084f610576a2b1d966011964951eac15e303 ./OpenRCT2-v0.5.0-windows-portable-win32.zip
e1c27003ba27bea8dc7cf7c1f41fc51e2a271269b8911ffa19905dc2447a3d97 ./OpenRCT2-v0.5.0-windows-portable-arm64.zip
42885a0f51bed6f145488161a6d932912050a15f2f3ac32bb7a5d48d42b03a6d ./OpenRCT2-v0.5.0-Linux-noble-x86_64.tar.gz
780c2a48f0ab917dd4b10079eb13c57093919410a5c7a356492c728315b6cb9a ./OpenRCT2-v0.5.0-linux-x86_64.AppImage
v1.4.13 β Trusted Senders, Tag Management, Attachment Guard, and Secret File Support
1.4.13 (2026-04-12)
Thank you for your donations:
One-time
Monthly
- You? Become a sponsor!
Features
- Contacts: Store trusted senders in a dedicated JMAP address book (#176)
- Email: Warn on send when attachment keyword found but no file attached (#172)
- Email: Enable keyword reordering (#174) and multi-tag support per email (#173)
- PWA: Add "don't remind me again" option to install prompt
- Auth: Add
SESSION_SECRET_FILEandOAUTH_CLIENT_SECRET_FILEenvironment variable support - Plugins: Add
onAvatarResolveplugin hook - Docker: Publish main and dev branches as separate GHCR packages
Fixes
- Email: Style links in plain text emails
- Email: Seed list history entry when app initializes on an email view
- Email: Remount composer on draft edit and preserve identity (#60)
- Contacts: Display contact names stored in
name.full(#179) - Contacts: Fix category dropdown blocking Save button in contact form (#177)
- Contacts: Resolve TS error from optional
name.componentsin vCard parser - Search: Search all folders when filtering emails by tag (#175)
- Auth: Include mount prefix in SSO redirect URI when app is served under a subpath
- PWA: Correct PWA icons with proper sizing, transparency, and dark/light mode support
Distribution Release: deepin 25.1.0
Animgraph 2 Beta Update
- [p]Reduced network bandwidth utilization[/p][/*]
FileZilla Client 3.70.0 released
Bugfixes and minor changes:
- Replacing of invalid characters in filenames when downloading can no longer be disabled
- If saving of password was disabled, temporarily remembering passwords until FileZilla gets closed could result in additional password prompts
- SFTP: Fix accessing symbolic links
- FileZilla is now distributed under the terms of the GPL version 3 or later (formerly version 2 or later)
v1.4.12 β PWA Support, Birthday Calendar, Identity Sync, and multiple New Locales
1.4.12 (2026-04-09)
Thank you for your donations:
One-time
Monthly
- You? Become a sponsor!
Features
- PWA: Add PWA support with service worker and install prompt
- Calendar: Add birthday calendar feature with settings and localization
- Calendar: Clamp February 29 birthdays in non-leap years
- Identity: Add automatic identity synchronization (#167)
- Plugins: Disable plugins by default and require admin approval
- Plugins: Replace auth header exposure with a secure HTTP proxy API for plugins
- Auth: Add configurable OAuth scopes and cookie security via environment variables
- Email: Sync mail view to browser history for back/forward navigation
- Contacts: Add ability to rename address books (#152)
- UI: Add version badge in settings
- i18n: Add Latvian (lv) locale support
- i18n: Add Polish language support
- i18n: Add Korean language support
- i18n: Add Simplified Chinese (zh_CN) locale support
Fixes
- Email: Show recipient instead of sender in Sent and Drafts folder lists
- Email: Embed dropped images as data URLs and prevent duplicate attachments (#163)
- Email: Fix logic for marking email as read in EmailViewer
- Email: Fix archive action passing MouseEvent as argument
- Mailbox: Preserve search filters on push-triggered mailbox refresh (#164)
- Mailbox: Align shared account folders with primary folders (#151)
- Mailbox: Fetch mailboxes on mount in FolderSettings when store is empty
- Mailbox: Improve mailbox deletion error handling
- Calendar: Improve calendar event retrieval by batching requests to avoid server limits (#141)
- Calendar: Compute per-occurrence UTC start/end in recurrence expansion (#116)
- Calendar: Guard against undefined trigger in calendar event alert popover (#143)
- Files: Stream WebDAV PUT uploads to avoid buffering in memory (#162)
- Files: Prune recent files against server nodes on refresh (#146)
- Files: Fix file deletion logic to update recent files and handle errors (#146)
- Files: Extend file drop zone to fill remaining viewport height
- Files: Fallback to application/octet-stream for long MIME types
- Security: Replace unguarded crypto.randomUUID() with safe generateUUID() utility
- Security: Validate plugin HTTP post URL against origin with regression tests
- Security: Allow blob images in CSP for inline drag-and-drop (#163)
- Auth: Resolve settings sync identity mismatch for OAuth/SSO sessions (#127)
- Contacts: Fix address book ID namespacing for shared contacts in create and update operations (#133)
- UI: Fix focused mode expanding beyond screen bounds (#156)
- API: Handle 403 on principal fetch without console error
- API: Enhance error handling in Stalwart API responses
macOS 26.4.1 (25E253)
Asterisk Release 23.3.0
The Asterisk Development Team would like to announce
the release of asterisk-23.3.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.3.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 23.3.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-23.3.0
Links:
Summary:
- Commits: 50
- Commit Authors: 21
- Issues Resolved: 34
- Security Advisories Resolved: 0
Asterisk Release 22.9.0
The Asterisk Development Team would like to announce
the release of asterisk-22.9.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.9.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 22.9.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-22.9.0
Links:
Summary:
- Commits: 50
- Commit Authors: 21
- Issues Resolved: 34
- Security Advisories Resolved: 0
Asterisk Release 20.19.0
The Asterisk Development Team would like to announce
the release of asterisk-20.19.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.19.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 20.19.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-20.19.0
Links:
Summary:
- Commits: 50
- Commit Authors: 21
- Issues Resolved: 34
- Security Advisories Resolved: 0
Minecraft 26.2-snapshot-2 (snapshot) Released
PHP 8.5.5 released!
PHP 8.4.20 released!
Minecraft 26.1.2 (stable) Released
v4.0.0-beta.472
What's Changed
Security & Fixes
- Allow quoted arguments in custom Docker run options (#9481, fixes #9343)
- Patched Alpine packages in helper, realtime, and development Docker images (#9437)
- Bumped Alexandrie images to address upstream security advisory (#9434)
New Services & Templates
- Added Grimmory one-click service, the successor to Booklore (#9109)
- Comprehensive Supabase template update to latest versions (#8316)
- Allow overriding GOTRUE_SITE_URL in Supabase for separate frontend domains (#9079, fixes #5581)
- Added sensible CORS defaults to Directus templates (#9081, fixes #5024)
- Updated Rivet template to v2.2.0 (#9378)
- Updated Convex to current latest version (#9392)
- Fixed LibreChat healthcheck and upgraded Meilisearch image (#9358)
- Fixed n8n task-runners health check (#9309, fixes #9306)
- Increased Nextcloud healthcheck interval to prevent worker exhaustion (#9440, fixes #9439)
- Updated Nextcloud healthcheck endpoint to
/status.php(#9470) - Fixed Netbird client volume path so settings persist across restarts (#9484)
- Corrected Minecraft template category to games (#9387)
- Corrected several template categories that were set incorrectly (#9449)
Improvements
- Removed Algora bounty program references from community docs and templates (#9436)
What's Changed (Github)
- fix(services): bump images of alexandrie to fix security issue by @Smaug6739 in #9434
- feat(service): update Convex to current latest version by @sebous in #9392
- fix(template): Minecraft was on wrong category by @Iisyourdad in #9387
- feat(service): update Rivet to v2.2.0 by @yipfram in #9378
- fix(service): fix librechat healthcheck and update dependencies by @GauthierPLM in #9358
- fix(service): n8n task-runners health check fails by @frank-netkey in #9309
- feat(service): add grimmory by @RickyWanga in #9109
- fix(service): directus cors not applied in preflight requests by @xidik12 in #9081
- feat(service): update Supabase to current latest versions by @Vadko in #8316
- fix(service): allow overriding GOTRUE_SITE_URL in Supabase template by @xidik12 in #9079
- fix(service): nextcloud workers exhaustion due to low interval healthcheck by @ShadowArcanist in #9440
- fix(docker): add apk upgrade to helper, realtime, and development Dockerfiles by @andrasbacsai in #9437
- chore(community): remove Algora bounty program references by @andrasbacsai in #9436
- chore(service): update nextcloud healthcheck endpoint by @ShadowArcanist in #9470
- fix(validation): allow quoted docker run options in custom config by @andrasbacsai in #9481
- build(deps-dev): bump vite from 7.3.0 to 7.3.2 by @dependabot[bot] in #9457
- fix(service): Several templates on wrong catagory. by @Iisyourdad in #9449
- fix(service): netbird-client wrong volume path by @iamimmanuelraj in #9484
- v4.0.0-beta.472 by @andrasbacsai in #9492
New Contributors
- @sebous made their first contribution in #9392
- @Iisyourdad made their first contribution in #9387
- @frank-netkey made their first contribution in #9309
- @RickyWanga made their first contribution in #9109
- @iamimmanuelraj made their first contribution in #9484
Full Changelog: v4.0.0-beta.471...v4.0.0-beta.472
v4.0.0-beta.471
What's Changed
Security & Fixes
- Harden model mass assignment protection across all models (#9282)
- Scope server and project queries to current team (#9230)
- Harden GetLogs component with locked properties and input validation (#9229)
- Add validation and escaping for Docker network names (#9228)
- Add URL validation for notification webhook fields (#9224)
- Use server-side config for password reset URL generation (#9193)
- Add input validation for install/build/start command fields (#9227)
- Add input validation for resource limit fields (#9238)
- Add IP validation for custom DNS servers input (#9239)
- Add URL validation for proxy redirect input (#9241)
- Add input validation for server advanced settings page (#9242)
- Add input validation for sentinel configuration (#9243)
- Add input validation for database backup timeout (#9245)
- Add input validation for emails configuration (#9259)
- Add input validation for database public port and proxy timeout
- Add validation to block unsafe webhook URLs
- Use random_int() for email change verification codes (#9226)
- Move admin route into middleware group (#9225)
- Enforce team-scoped project/env lookups in onboarding
- Add input validation for port exposes and port mappings fields
New Services & Templates
- Added ElectricSQL template (#8190)
Fixes
- Fix intermittent pre-deployment command failures (#9165, fixes #9076)
- Fix Grafana GF_SERVER_DOMAIN using FQDN instead of URL (#9080, fixes #5307)
- Fix listmonk db config env typo (#9250)
- Fix Langfuse by pinning ClickHouse version to avoid init errors
- Fix cloning persistent volumes with missing uuid (#9290, fixes #9270)
- Fix redirect value not persisting in setRedirect (#9279)
- Fix cloud subscription notification links (#9296)
- Fix slash branches in public repo URLs
- Fix shared env vars resolving on wrong server
- Fix database SSL/status state and clone writes
- Fix auto-generate missing CA cert on SSL regeneration
- Fix backup notification failures affecting backup status (fixes #9088)
- Fix backup retention enforcement and stale execution cleanup
- Fix password visibility toggle using Alpine state
- Fix GitHub branch state when refreshing repositories
Improvements
- Shared server environment variables (#7764)
- Refresh repos on private GitHub app (#8621)
- Support Docker image tags for preview deployments
- Add preserve repository option to deployment API (#8371)
- Implement exponential backoff for unreachable servers (#9184)
- Improve scheduled task single view UX (#9266)
- Add two-step confirmation to enable self-registration (#9277)
- Add public port timeout configuration for databases
- Make textarea monospace opt-in and improve multiline toggle
What's Changed (Github)
- fix(backup): prevent notification failures from affecting backup status by @andrasbacsai in #9162
- fix(preview-env): ensure auto-created preview env vars inherit runtime/buildtime flags by @andrasbacsai in #9164
- fix(api): validate server ownership in domains endpoint and scope activity lookups by @andrasbacsai in #9166
- fix(backup): validate MongoDB collection names in backup input by @andrasbacsai in #9168
- fix(terminal): apply authorization middleware to terminal bootstrap routes by @andrasbacsai in #9169
- fix(livewire): add Locked attributes and consolidate container name validation by @andrasbacsai in #9171
- fix(livewire): add input validation to unmanaged container operations by @andrasbacsai in #9172
- feat(deployment): add command_hidden flag to hide command text in logs by @andrasbacsai in #9167
- fix(deployment): normalize whitespace in pre/post deployment commands by @andrasbacsai in #9173
- fix(storage): consistent path validation and escaping for file volumes by @andrasbacsai in #9176
- fix(backup): use escapeshellarg for credentials in backup commands by @andrasbacsai in #9175
- fix(storage): use escapeshellarg for volume names in shell commands by @andrasbacsai in #9185
- refactor: simplify remote process chain and harden ActivityMonitor by @andrasbacsai in #9189
- Add URL validation for GitHub source fields by @andrasbacsai in #9190
- refactor: split invitation endpoint into GET/POST flow by @andrasbacsai in #9192
- fix: sanitize error output in server validation logs by @andrasbacsai in #9197
- fix: use server-side config for password reset URL generation by @andrasbacsai in #9193
- refactor: move admin route into middleware group by @andrasbacsai in #9225
- Add URL validation for notification webhook fields by @andrasbacsai in #9224
- refactor: use random_int() for email change verification codes by @andrasbacsai in #9226
- fix: add input validation for install/build/start command fields by @andrasbacsai in #9227
- refactor: scope server and project queries to current team by @andrasbacsai in #9230
- fix: add validation and escaping for Docker network names by @andrasbacsai in #9228
- fix(application): persist redirect value in setRedirect by @andrasbacsai in #9279
- fix: harden GetLogs Livewire component properties by @andrasbacsai in #9229
- feat(api): Add support for Preserve Repository During Deployment in API by @ahmadw13 in #8371
- fix(clone): exclude uuid when replicating persistent volumes by @andrasbacsai in #9290
- fix(notification): updated cloud subscription links to valid url by @ShadowArcanist in #9296
- feat(ui): add two step confirmation to enable self registration by @ShadowArcanist in #9277
- fix(service): listmonk db config env typo by @mxswd in #9250
- fix(service): pin clickhouse version on Langfuse service to avoid error during clickhouse init by @GauthierPLM in #9236
- fix(service): use FQDN instead of URL for Grafana GF_SERVER_DOMAIN by @xidik12 in #9080
- feat(service): Add ElectricSQL by @matfire in #8190
- refactor: define explicit fillable attributes on all Eloquent models by @andrasbacsai in #9282
- fix(validation): add input validation for database public port and proxy timeout by @ShadowArcanist in #9272
- feat(ui): improve schedule task single view for better UX by @ShadowArcanist in #9266
- fix(validation): add input validation for emails configuration by @ShadowArcanist in #9259
- fix(validation): add input validation for database backup timeout by @ShadowArcanist in #9245
- fix(validation): add input validation for sentinel configuration by @ShadowArcanist in #9243
- fix(validation): add input validation for server advanced settings page by @ShadowArcanist in #9242
- fix(validation): add URL validation for proxy redirect input by @ShadowArcanist in #9241
- fix(validation): add input validation for port exposes and port mappings fields by @ShadowArcanist in #9240
- fix(validation): add IP validation for custom DNS servers input by @ShadowArcanist in #9239
- fix(validation): add input validation for resource limit fields by @ShadowArcanist in #9238
- feat: refresh repos on private github app by @adiologydev in #8621
- feat: Shared server environment variables by @ShadowArcanist in #7764
- chore(deps): bump aws/aws-sdk-php from 3.371.3 to 3.374.2 by @dependabot[bot] in #9222
- chore(deps): bump picomatch by @dependabot[bot] in #9178
- build(deps): bump league/commonmark from 2.8.1 to 2.8.2 by @dependabot[bot] in #9047
- build(deps): bump phpseclib/phpseclib from 3.0.49 to 3.0.50 by @dependabot[bot] in #9044
- feat(jobs): implement exponential backoff for unreachable servers by @andrasbacsai in #9184
- fix(deployment): resolve intermittent pre-deployment command failures by @andrasbacsai in #9165
- v4.0.0-beta.471 by @andrasbacsai in #9206
New Contributors
- @mxswd made their first contribution in #9250
- @xidik12 made their first contribution in #9080
- @matfire made their first contribution in #8190
Full Changelog: v4.0.0-beta.470...v4.0.0-beta.471
iOS 26.4.1 (23E254)
Extended Stable Updates for Desktop
Β The Extended Stable channel has been updated to 146.0.7680.188Β for Windows and Mac which will roll out over the coming days/weeks.
Minecraft 26.1.2-rc-1 (snapshot) Released
v5.42.0
5.42.0 (2026-04-08)
π New feature
- removing A/B testing from the prompt Currently A/B testing opt-in isn't used, so removing it from the CLI (8d5b04ece4)
- changing sonar variable (0d822ade04)
- data-transfer: add directory export/import format (#25867)
π₯ Bug fix
- change return to continue in deleteRelations when using foreign keys (#25857)
- hide legacy options (da9cdfc640)
- contains filter no longer returns empty data (#25810)
- typos in documentation plugin README (4ff54bff36)
- admin: p is not function error (#25663)
- content-manager: pass component schemas when rebuilding list view headers (#25872)
- content-manager: wrap single type displayName with formatMessage (#25880)
- core: relation handling preserves order during unpublish/republish cycles (#25764)
- create-strapi-app: generate .yarnrc.yml for Yarn projects (#25869)
- documentation: use dist extensions path in production (#25863)
π Documentation Changes
- fix typos in documentation plugin README (8e11e41247)
βοΈ Chore
- add .claude directory to gitignore (e85aa81cdf)
- sonarqube variables like in their docs (40f9ecd6c7)
- deps: bump minimatch from 10.2.4 to 10.2.5 (#25879)
- deps: bump @xmldom/xmldom from 0.8.6 to 0.8.12 (#25877)
- deps: bump path-to-regexp from 8.2.0 to 8.4.0 (#25850)
- deps: bump undici from 6.24.0 to 6.24.1 (#25785)
- deps: bump handlebars from 4.7.7 to 4.7.9 (#25841)
- deps: bump yauzl from 3.2.0 to 3.2.1 (#25729)
- deps: bump bn.js from 4.12.0 to 4.12.3 (#25691)
- deps: bump js-yaml from 3.14.1 to 3.14.2 (#25680)
- deps: bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#25681)
- deps: bump path-to-regexp from 8.4.0 to 8.4.1 (#25888)
- deps: bump simple-git from 3.21.0 to 3.32.3 (#25704)
- deps: bump file-type from 21.0.0 to 21.3.2 (#25728)
- deps: bump @octokit/plugin-paginate-rest from 9.2.1 to 9.2.2 (#25693)
- deps: bump @octokit/request from 8.4.0 to 8.4.1 (#25694)
- deps: bump picomatch from 2.3.1 to 2.3.2 (#25828)
- deps: bump nodemailer from 8.0.1 to 8.0.4 (#25848)
β€οΈ Thank You
- Adrien L @Adzouz
- Adrien Lepoutre @Adzouz
- Alexandre BODIN
- Bassel Kanso @Bassel17
- Ben Irvin
- guoyangzhen
- Jamie Howard @jhoward1994
- Joshua Klinesmith
- Simon Norris
Stable Channel Update for Desktop
Β The Chrome team is delighted to announce the promotion of Chrome 147 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes multiple security fixes. Please see the Chrome Security Page for more information.
[$43000][493319454] Critical CVE-2026-5858: Heap buffer overflow in WebML. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-17
[$43000][494158331] Critical CVE-2026-5859: Integer overflow in WebML. Reported by Anonymous on 2026-03-19
[$11000][486495143] High CVE-2026-5860: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[$3000][486927780] High CVE-2026-5861: Use after free in V8. Reported by 5shain on 2026-02-23
[TBD][470566252] High CVE-2026-5862: Inappropriate implementation in V8. Reported by Google on 2025-12-21
[TBD][484527367] High CVE-2026-5863: Inappropriate implementation in V8. Reported by Google on 2026-02-14
[TBD][490642831] High CVE-2026-5864: Heap buffer overflow in WebAudio. Reported by Syn4pse on 2026-03-08
[TBD][491884710] High CVE-2026-5865: Type Confusion in V8. Reported by Project WhatForLunch (@pjwhatforlunch) on 2026-03-12
[TBD][492218537] High CVE-2026-5866: Use after free in Media. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-13
[TBD][492668885] High CVE-2026-5867: Heap buffer overflow in WebML. Reported by Syn4pse on 2026-03-14
[TBD][493256564] High CVE-2026-5868: Heap buffer overflow in ANGLE. Reported by cinzinga on 2026-03-16
[TBD][493708165] High CVE-2026-5869: Heap buffer overflow in WebML. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-18
[TBD][495534710] High CVE-2026-5870: Integer overflow in Skia. Reported by Google on 2026-03-23
[TBD][495679730] High CVE-2026-5871: Type Confusion in V8. Reported by Google on 2026-03-24
[TBD][496281816] High CVE-2026-5872: Use after free in Blink. Reported by Google on 2026-03-25
[TBD][496301615] High CVE-2026-5873: Out of bounds read and write in V8. Reported by Google on 2026-03-25
[$11000][485397279] Medium CVE-2026-5874: Use after free in PrivateAI. Reported by Krace on 2026-02-18
[$4000][430198264] Medium CVE-2026-5875: Policy bypass in Blink. Reported by Lyra Rebane (rebane2001) on 2025-07-08
[$2000][41485206] Medium CVE-2026-5876: Side-channel information leakage in Navigation. Reported by Lyra Rebane (rebane2001) on 2023-12-18
[TBD][333024273] Medium CVE-2026-5877: Use after free in Navigation. Reported by Cassidy Kim(@cassidy6564) on 2024-04-05
[TBD][365089001] Medium CVE-2026-5878: Incorrect security UI in Blink. Reported by Shaheen Fazim on 2024-09-06
[TBD][40073848] Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE. Reported by parkminchan, working for SSD Labs Korea on 2023-10-01
[TBD][424995036] Medium CVE-2026-5880: Incorrect security UI in browser UI. Reported by Anonymous on 2025-06-14
[TBD][454162508] Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess. Reported by asnine on 2025-10-22
[TBD][480993682] Medium CVE-2026-5882: Incorrect security UI in Fullscreen. Reported by Anonymous on 2026-02-02
[TBD][482958590] Medium CVE-2026-5883: Use after free in Media. Reported by sherkito on 2026-02-09
[TBD][484547633] Medium CVE-2026-5884: Insufficient validation of untrusted input in Media. Reported by xmzyshypnc on 2026-02-15
[TBD][485203823] Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML. Reported by Bryan Bernhart on 2026-02-17
[TBD][485397283] Medium CVE-2026-5886: Out of bounds read in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][486079015] Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads. Reported by daffainfo on 2026-02-20
[TBD][486506202] Medium CVE-2026-5888: Uninitialized Use in WebCodecs. Reported by Identified by the Octane Security Team: Giovanni Vignone, Paolo Gentry, Robert van Eijk on 2026-02-22
[TBD][486906037] Medium CVE-2026-5889: Cryptographic Flaw in PDFium. Reported by mlafon on 2026-02-23
[TBD][487259772] Medium CVE-2026-5890: Race in WebCodecs. Reported by Casper Woudenberg on 2026-02-24
[TBD][487471101] Medium CVE-2026-5891: Insufficient policy enforcement in browser UI. Reported by Tianyi Hu on 2026-02-25
[TBD][487568011] Medium CVE-2026-5892: Insufficient policy enforcement in PWAs. Reported by Tianyi Hu on 2026-02-25
[TBD][487768771] Medium CVE-2026-5893: Race in V8. Reported by QYmag1c on 2026-02-26
[$1000][481882038] Low CVE-2026-5894: Inappropriate implementation in PDF. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-02-05
[TBD][374285495] Low CVE-2026-5895: Incorrect security UI in Omnibox. Reported by Renwa Hiwa @RenwaX23 on 2024-10-18
[TBD][40064543] Low CVE-2026-5896: Policy bypass in Audio. Reported by Luan Herrera (@lbherrera_) on 2023-05-13
[TBD][419921726] Low CVE-2026-5897: Incorrect security UI in Downloads. Reported by Farras Givari on 2025-05-24
[TBD][470295118] Low CVE-2026-5898: Incorrect security UI in Omnibox. Reported by saidinahikam032 on 2025-12-19
[TBD][474817168] Low CVE-2026-5899: Incorrect security UI in History Navigation. Reported by Islam Rzayev on 2026-01-11
[TBD][475265304] Low CVE-2026-5900: Policy bypass in Downloads. Reported by Luan Herrera (@lbherrera_) on 2026-01-13
[TBD][479673903] Low CVE-2026-5901: Policy bypass in DevTools. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-01-29
[TBD][483109205] Low CVE-2026-5902: Race in Media. Reported by Luke Francis on 2026-02-10
[TBD][483771899] Low CVE-2026-5903: Policy bypass in IFrameSandbox. Reported by @Ciarands on 2026-02-11
[TBD][483851888] Low CVE-2026-5904: Use after free in V8. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-02-12
[TBD][483899628] Low CVE-2026-5905: Incorrect security UI in Permissions. Reported by daffainfo on 2026-02-12
[TBD][484082189] Low CVE-2026-5906: Incorrect security UI in Omnibox. Reported by mohamedhesham9173 on 2026-02-13
[TBD][484665123] Low CVE-2026-5907: Insufficient data validation in Media. Reported by Luke Francis on 2026-02-15
[TBD][485115554] Low CVE-2026-5908: Integer overflow in Media. Reported by Ameen Basha M K & Mohammed Yasar B on 2026-02-17
[TBD][485203821] Low CVE-2026-5909: Integer overflow in Media. Reported by Mohammed Yasar B & Ameen Basha M K on 2026-02-17
[TBD][485212874] Low CVE-2026-5910: Integer overflow in Media. Reported by Ameen Basha M K & Mohammed Yasar B on 2026-02-17
[TBD][485785246] Low CVE-2026-5911: Policy bypass in ServiceWorkers. Reported by lebr0nli of National Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab on 2026-02-19
[TBD][486498791] Low CVE-2026-5912: Integer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][487195286] Low CVE-2026-5913: Out of bounds read in Blink. Reported by Vitaly Simonovich on 2026-02-24
[TBD][490023239] Low CVE-2026-5914: Type Confusion in CSS. Reported by Syn4pse on 2026-03-05
[TBD][494341335] Low CVE-2026-5915: Insufficient validation of untrusted input in WebML. Reported by ningxin.hu@intel.com on 2026-03-20
[TBD][490139441] Low CVE-2026-5918: Inappropriate implementation in Navigation. Reported by Google on 2026-03-05
[TBD][483423893] Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets. Reported by Richard Belisle on 2026-02-10
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome