The Stable channel has been updated to 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Security Fixes and Rewards

Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

The Extended Stable channel has been updated to 152.0.7977.149 for Windows and Mac which will roll out over the coming days/weeks.

Security:

• Update to OpenSSL 3.5.9

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.09.29

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.09.29

Changes

• fix: apply the connect-time address guard to playlist/channel metadata files (a389660)

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Updated audit log to use the configured display timezone. Thanks to @assyrus-favolo. (#6170)
• Updated translations with latest changes from Crowdin. (#6229)
• Updated ZIP import handling to verify the actual uncompressed size before extraction.
• Updated PHP package versions.
• Fixed page permissions not being regenerated on chapter promotion. (#6226)
• Fixed API attachment list endpoint showing attachments for pages in the recycle bin. (#6194)

Thanks to ma4ter (GitHub) for responsibly reporting the ZIP import scenario.

New

• 

  Firefox's biggest visual refresh in years is now available, with a modernized look across the browser toolbars, sidebar, menus and individual features, built with our updated design system. It also includes:

  • New built-in themes with light and dark versions, to personalize the look of Firefox in one click.
  • A new compact mode that reduces toolbar and tab spacing to leave more room for web content, useful on smaller screens and in split-screen layouts.

• WebRTC video calls can now use hardware AV1 decoding on devices that support it, instead of always decoding AV1 video in software.

• Firefox now shows a warning in the site information panel (the shield icon in the address bar) and in Settings when it has been set up to record its encryption keys, which could let other software on the computer read encrypted web traffic.
  

• Firefox Suggest now offers suggestions in the address bar in Austria, Belgium, Czech Republic, Denmark, Finland, Hungary, Ireland, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, and Switzerland. They can be controlled in the Firefox Suggest settings. Learn more.

Fixed

• Fixed video from phones and tablets appearing sideways or upside down in WebRTC calls.

• Fixed the address bar searching for the typed text instead of opening the selected suggestion when a page was still loading, such as shortly after Firefox started.

• Fixed some HDR videos encoded in 8-bit color formats looking dull and gray on Windows instead of displaying in HDR.

• Improved audio and video synchronization when repeatedly changing the playback speed of videos, for example on YouTube.

• Fixed the Vertical Tabs sidebar not reappearing when the cursor moves to the edge of the screen in full screen mode.

• Fixed an issue on Windows where making a video full screen would leave the Windows taskbar showing over the video.

• Various security fixes.

Changed

• Pressing Tab now moves focus straight to the text field of the address bar and search bar instead of stopping on the search engine button first. The button can still be reached with Shift+Tab.

• Amazon is no longer included as a built-in search engine. It can still be added as a custom search engine in the search settings. Learn more.

• The updated sidebar is now enabled for everyone. Anyone still using the previous sidebar will keep a similar layout, with the panel switcher at the top of the sidebar. Additionally, the “Show sidebar” option has been removed from Settings.

  While we continue to refine the new design, the previous sidebar version can still be restored by setting sidebar.revamp to false in about:config. This also turns off vertical tabs. The preference will remain available until the end of 2027.

• Web page alert(), confirm() and prompt() dialogs, the color and date pickers, and form autocomplete drop-downs now match the page's light or dark color scheme.

Enterprise

• You can find information about policy updates and enterprise-specific bug fixes in the Firefox for Enterprise 157 Release Notes.

Developer

• Developer Information

Web Platform

• Firefox now supports the at-rule() function for @supports. This allows authors to detect browser support for specific at-rules, such as @supports at-rule(@scope).

• Firefox now supports the chain value for the CSS overscroll-behavior property.

Community Contributions

• With the release of Firefox 157, we are pleased to welcome the developers who contributed their first code change to Firefox in this release, 21 of whom were brand new volunteers! Please join us in thanking each of these diligent and enthusiastic individuals, and take a look at their contributions:

  • Alexander Gankov: 2033184
  • Amadi: 2053549, 2053553, 2065302, 2066478
  • Andrew: 2031465
  • Caleb Pickard: 2058970
  • David Torcivia: 2057758
  • dchen705: 2065655
  • Ekerin Agboola: 2064541
  • Giddeon Card: 2067328
  • gustavokrm: 2051536
  • Hanzala Sohrab: 2068111
  • Ivan Smagin: 2061540
  • Jieke Jiang: 2067179
  • Nazeer Ahmed Shaikh: 1703780, 2064544
  • Noah Varghese: 1625924, 2021799
  • perdomojuan755: 2069230
  • Raúl: 2066877
  • Rév O'Conner: 1594489
  • Samuel Mbabhazi: 2054228
  • sfshah: 2004273, 2067302
  • Valerie Racine (:v-racine): 1849963
  • Xiaosen Zhuang: 2069280

❗ This is a pre-release

• May contain bugs and unfinished features.

⚠️ Note for macOS users

Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:

xattr -cr /Applications/marktext.app

Verifying downloads

All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:

sha256sum -c SHA256SUMS.txt --ignore-missing

What's Changed

• fix: restore code block legibility and text crispness (#5539) by @Jocs in #5553
• test: fold the two #5539 specs into one by @Jocs in #5557
• fix(muya): keep a hard line break's glyph on the line it ends (#2094) by @Jocs in #5556
• revert: keep grayscale antialiasing on editor text (#5539) by @Jocs in #5558
• fix(muya): keep sequence diagram arrowheads in exported PDFs (#2423) by @Jocs in #5561
• fix(muya): pair emphasis delimiters the way CommonMark does (#2086) by @Jocs in #5555
• fix(muya): parse link destinations the way CommonMark does (#2377) by @Jocs in #5562
• Add a zoom/pan viewer and image export for rendered diagrams by @Jocs in #5554
• fix: give the editor and Preferences windows their own menu bar (#2245) by @Jocs in #5560
• perf(muya): re-render only the two affected blocks when stepping through search (#5580) by @ycyc0421 in #5569

New Contributors

• @ycyc0421 made their first contribution in #5569

Full Changelog: v0.20.0-rc.6...v0.20.0-rc.7

We are super excited that the day many of you have been waiting for has finally arrived. Today, you can get ready to drive a new set of vehicles with the release of the Road Trip: Ford DLC for American Truck Simulator!

The Road Trip: Ford DLC is now released and available on Steam!

We first announced project Road Trip in April last year, and since then, it has been eagerly awaited by our #BestCommunityEver. A dedicated team was formed to bring this brand-new experience to American Truck Simulator, working closely with our vehicle team, programmers, testers, and many other colleagues across the company. The Ford DLC is the first release from the Road Trip project, and we're incredibly happy to finally bring it to our community!

Now, you can hit the open roads of American Truck Simulator like never before with this DLC as you take the wheel of:

• The iconic 1967 Ford Mustang Fastback
• The all-purpose 2023 Ford F-150
• The modern 2023 Ford Bronco
• and the legendary 1998–2012 Ford Crown Victoria

With the Road Trip: Ford DLC, you will unlock Car Mode, its related features, and all of these personal cars, which you can take out on the road and experience American Truck Simulator from a whole new perspective. Customise your vehicles with a variety of accessories and paint options, then hit the road and explore at your own pace.

Looking for something to do along the way? Take on smaller deliveries through Quick Jobs or the Dispatch Market and build your courier reputation, or discover the world around you with the new Atlas feature. Visit iconic locations, learn more about them, and collect beautifully designed postcards as you explore.

At release, the Atlas feature and its Tourist Boards will be available in California, and in the Oregon, Washington, Idaho, Montana, Wyoming, and South Dakota DLCs. The remaining states will be gradually included in future updates.

Step away from your big rig and get behind the wheel of iconic Ford vehicles, a fresh way to explore the world of American Truck Simulator. You can also team up with your friends in Convoy mode and hit the road together, with trucks and cars sharing the highways! And don't forget that if you own this DLC, you can also enjoy the Atlas feature from behind the wheel of a truck.

We're happy to have partnered with Ford to bring these iconic vehicles to life in American Truck Simulator, and we would like to thank them very much for their cooperation in making this possible. 

But now, it's all up to you - we can't wait to see where your next road trip takes you!

Release Live Stream

As we always do with our map expansions, we also plan to introduce the new Road Trip: Ford DLC to our community with a special release stream! Starting today at 3 pm CEST, we'll be joined by guests who worked on the DLC's development, chatting with them about the process while taking Ford cars out on the roads of American Truck Simulator. And at the end of the stream, we'll officially release the DLC together with you!

Make sure to share photos or videos from your road trip journeys with us on social media by tagging us on X/Twitter, Facebook, BlueSky, and Instagram. For more news from American Truck Simulator and further Road Trip development, don't forget to subscribe to our newsletter or follow us on our social media accounts. We will see you on the road!

Security:

• Fixed script injection in event scripts. With JScript, untrusted values passed to event handlers (such as the logon password in OnClientValidatePassword, or error text and UIDs sent by remote servers) could break out of their string. With either script language, a rule's "Run function" name could carry code. This would allow an attacker to run arbitrary code in the hMailServer process. Values are now escaped, and rule function names may only contain letters, digits and underscores.

If you are unable to install this version, disable JScript execution and do not give end-users access to the hMailServer COM API.

release: v2.0.19

Part-DB 2.19.2

Bug fix

• Fixed step 3D model viewer colors when one part contains multiple colors

Various changes

• Update KiCad symbols and footprints lists by @jbtronics in #1562
• Updated translations
• Updated dependencies

Full Changelog: v2.19.1...v2.19.2

• [p]Fixed pixel-gaps in various Rush rooms.[/p][/*]
• [p]Clipping adjustments in T/CT Castle rooms.[/p][/*]

Highlights

• Rév O’Conner added a settings popup to control the layout of the Inspector. “Auto” automatically switches the layout at a given toolbox width.
  • 
• The new sidebar (sidebar.revamp) and switcher setting will be enabled by default for users along with Nova in DevEdition, Beta and Release channels. To ease the transition for old sidebar users, the “Open tools from sidebar” option will be unchecked for those users to more closely resemble the old sidebar experience. The migration won’t apply to users who had already tried the new sidebar and reverted back.
• The custom wallpaper library for the New Tab page is coming along! This allows you to save multiple images to your wallpaper folder, rather than replacing one image at a time. While it’s still in development, you can test it by setting browser.newtabpage.activity-stream.newtabWallpapers.customWallpaper.library.enabled to true, starting in Firefox 157.
  • 
• Mark added an MDN search engine for Nightly and Developer Edition. Select it from the menus, or type @mdn <search term>.
  • 
  • 

Friends of the Firefox team

Resolved bugs (excluding employees)

Script to find new contributors from bug list

Volunteers that fixed more than one bug

• :Benjamin Peterson
• Amadi
• any1here
• Caleb Pickard
• Chris Vander Linden
• Gopalarathnam Venkatesan
• Igor [:ExplodingJoysticks]
• Khalid AlHaddad
• Lukáš Lipinský
• Mayank Bansal
• Nazeer Ahmed Shaikh
• Noah Varghese
• Sameem [:sameembaba]
• Sebastian Zartner [:sebo]
• sfshah
• Xiaosen Zhuang

New contributors (🌟 = first patch)

• Amadi:
  • Network monitor opens files in last tab
  • Remove the unused _discarded field in UrlbarParentController.sys.mjs
  • Update comments that point at the removed openUILinkIn function
  • Screenshot default filename contains trailing whitespace on pages without title
• Caleb Pickard
  • 🌟 Remove BROWSER_SEARCH_PREF constant
  • The phrase “The count URI loads…” appears repeatedly in the search telemetry code. It should read “The count *of* URI loads…”
• dchen705: Remove unnecessary module import in browser/components/urlbar/tests/browser/head.js
• Ekerin Agboola: Remove old documentation related to the removed SEARCH_SUGGESTIONS_LATENCY_MS histogram
• Igor [:ExplodingJoysticks]:
  • Cleanup dead code in PageThumbs (preserveAspectRatio)
  • Dead code in services/crypto/modules/utils.sys.mjs#
• Gopalarathnam Venkatesan:
  • “Add class” button (.cls) should be disabled when a class can’t be added to the selected node
  • Remove unused lightweightThemes.getMoreURL pref
  • Remove orphaned selectHistoryMode JSDoc from browser/components/preferences/tests/privacy/head.js
  • gBrowser.selectedTabs does not return tabs in tab order
• 🌟 Jieke Jiang: Remove unused AboutReaderParent._getArticle
• 🌟 Andrew: White flash on startup caused by abouthome_cache storing  incompatible startup frame
• 🌟 Rév O’Conner: Inspector does not respect panel layout
• 🌟 Kana: browser_privatebrowsing_resetPBM.js awaits an array instead of Promise.all, so the tab-close wait does nothing
• Raúl: L10nCache.add() throws on an unknown Fluent ID instead of reporting it
• 🌟 Samuel Mbabhazi: Use new color syntax throughout the DevTools
• K: “Go to line” sets a cursor line which does not exist in footer location indicator
• sfshah:
  • Turn devtools/client/jsonview/converter-child.js into an ES class
  • 🌟 Fix misspellings in SearchService.shouldShowInstallPrompt
• Nazeer Ahmed Shaikh
  • Remove deprecated logs from tt(c) harness
  • 🌟 test_dont_suggest_default_engine task is duplicated in browser_contextualsearch.js mochitest
• Noah Varghese:
  • Make browser/components/syncedtabs/sidebar.xhtml an HTML file
  • 🌟 Remove usages of “six” from toolkit/components/telemetry/tests/marionette/
• Valerie Racine (:v-racine): Fix incorrect assertion message in browser_adoptTab_failure.js
• 🌟 Xiaosen Zhuang:
  • Fix the undefined –border-color-dead-row custom property in aboutMemory.css
  • Use documentGlobal instead of the removed ownerGlobal in FormAutofillPreferences

Project Updates

Add-ons / Web Extensions

Addon Manager & about:addons

• As part of Project Nova related work:
  • Fixed responsive layout issues that caused horizontal scrolling in about:addons at high zoom levels – Bug 2059864
  • Fixed the “Discover extensions” button appearing multiple times in about:addons – Bug 2070281
  • Added telemetry for theme-picker shown events and for appearance/native-theme changes in about:addons – Bug 2069417 / Bug 2070341
  • Added an accessible name to the themes mode control in about:addons, fixed in Firefox 158 and uplifted to the Firefox 157 beta channel – Bug 2064563
    • Thanks to Mark Kennedy for the help on fixing this accessibility gap
  • Updated the built-in dark and light theme previews to use the nova style – Bug 2070274
    • Thanks to Emilio Cobos Álvarez for the fix to the default light and dark theme previews.
  • Fixed the Nova default and AMO curated theme previews to follow the OS light/dark mode while ignoring the Website appearance setting, fixed in Firefox 158 and uplifted to the Firefox 157 beta channel – Bug 2070562
• Stopped setting unused taarId session cookies for AMO on startup – Bug 1871561
  • Thanks to Manuel Bucher for helping us to clean up these unused internals.

WebExtension APIs

• Fixed webRequest requestBody parsing so POST form fields named __proto__ are no longer dropped – Bug 2061470
• Changed alarms.clearAll() to resolve with undefined instead of a boolean, starting in Firefox 157 – Bug 2067229
  • Thanks to Ollie Hensman-Crook for the fix to the alarms API.
• Implemented native messaging support via xdg-native-messaging-proxy for Flatpak and Snap builds – Bug 1955255
  • Thanks to Jan Horak for the native messaging work on Linux packaging.
• As part of Florian Quèze effort to investigate and fix intermittent failures:
  • Made windows.update() wait for the window to actually resize or move before resolving, fixing an intermittent Linux test failure – Bug 1307759
  • Fixed a pageAction popup incorrectly opening via a commands API shortcut while the extension was already shutting down – Bug 2039637
  • Fixed action.openPopup() rejecting when a tab hover preview was showing, a regression from Bug 2022281 in Firefox 150, with the fix shipping in Firefox 157 and no uplift planned – Bug 2062229

DevTools

• The team has a few sizable ongoing projects.
  • Bomsy is working on moving Stylesheets to the Debugger so we can retire the (XUL-based) Style Editor, and turn the Debugger into a “Sources” panel (keeping all the existing functionality of course).  (pref: devtools.debugger.features.stylesheets-in-debugger)
  • Alex is investigating ways to better handle CSS authored text and CSSOM changes in the Inspector, building information directly from the Rust CSS engine, with the hope it will bring performance improvement editing styles in the Rules view.
  • Nicolas is implementing a way to show to the user how the engine goes from a CSS declaration value to the computed value so it’s easier to follow what’s the result of the different call sites, or how the different units (em, %, vmin, …) are computed to their final (e.g. px) values.   (pref: devtools.inspector.css-explainers)

External contributions

• Chris Vander Linden finalized a multi-months project to add a search toolbar in the Netmonitor Raw Response panel, adapting and reusing the component we are using in the Debugger (#1941575)
  • 
• Amadi made the “Open in new tab” context menu entry to open tab next to the selected tab, not at the very end of the tab list (#2059979)
• Mayank Bansal optimized the performance of console.clear() (#2068156, #2068157, #2067000)
• Benoit added JSON Lines (JSONL/NDJSON) support in the Netmonitor Response panel (#2059673)
• Gopalarathnam Venkatesan made the “Add class” button (.cls) to be disabled when a class can’t be added to the selected node (e.g. it’s a text node, or a comment, or the doctype node) (#2000150)
• K fixed an issue with the “Go to line” action in the Debugger (#2064575)
• Samuel Mbabhazi refactored our CSS codebase to use new color syntax (e.g. rgb(255 0 0) instead of rgb(255, 0, 0)) (#2054228)
• sfshah turned devtools/client/jsonview/converter-child.js into an ES class (#2004273)

Team/Project Update

• Florian Quèze [:florian] is working on fixing test flakiness in devtools/client/debugger and already landed an impressive stack of patches (#2001947, #2070917, #2070920, #2070932, #2070970, #2027953, #1932082, #2070923, #2070933, #1814093, #1868969, #2071238)
  • that also includes fixing various accessibility issues that were spotted by a11y_checks #2070911, #2070955, #2071227, #2071231)
  • Note that Julian Descottes [:jdescottes] also has an ongoing quest to reduce intermittent failures in our codebase and fixed a few those last 2 weeks (#1767707, 2069100, #2009386)
  • [florian] 24 patches landed on Friday, you can see the impact on https://tests.firefox.dev/tests.html?path=devtools%2Fclient%2Fdebugger
• Nicolas Chevobbe [:nchevobbe] fixed a few issues spotted by Jake in the Inspector for the new-ish attr()CSS function (#2068479, #2068480, #2068483)
• Alexandre Poirot [:ochameau] fixed an OOM crash when viewing source mapped file for a large wasm module with many workers (#2058286)
• Julian Descottes [:jdescottes] improved performance of the Inspector when Devtools was opened on a page with many grid elements (#1988868)
• Hubert Boma Manilla (:bomsy) fixed an infinite loop in the Debugger search if you were searching for $ on a big JS file (#2068517)

WebDriver

• Sameem merged two internal helpers (remote/shared/Sync.sys.mjs and remote/marionette/sync.sys.mjs) which removed some code duplication.
• Khalid AlHaddad unified the navigation commands in Marionette and WebDriver BiDi to always initiate navigations via browsingContext.loadURI().
• Khalid AlHaddad updated the WebDriver BiDi client used by WebDriver tests so that browsing_context.locate_nodes returns the nodes array directly instead of the enclosing result object, matching the updated command response.
• Julian Descottes made the destinationFolder mandatory when calling the browser.setDownloadBehavior command with type=”allowed” – which aligns us with the specification. In order to restore the default behavior without having to specify a folder, clients should call setDownloadBehavior with null instead.
• Henrik Skupin fixed a bug in geckodriver where specifying androidIntentArguments in the capabilities caused the default intent arguments to be omitted.

Fluent

• According to arewefluentyet.com, ~74.77% of our strings are now using Fluent!

Lint, Docs and Workflow

• According to arewemozsrcyet.com, ~59% of our modules are now using moz-src.
• eslint-plugin-mozilla has switched from using Mocha to Jest for tests.
  • Planning on future updates to investigate getting devtools & newtab to use the jest installed at the top-level, rather than separately installed copies.

Information Management/Sidebar

• We’re working away on bug fixes for sidebar, vertical tabs, split-view, and Nova
• Thanks Florian (:fqueze) for landing a set of patches that have markedly reduced test flakiness in the Sidebar component

New Tab Page

• Custom wallpaper library
  • Dre added a “Your images” folder to the wallpaper picker on the New Tab Page, letting users save and switch between multiple custom wallpapers directly from the picker UI (desktop channels), which reduces friction for users who frequently change backgrounds.
  • Dre implemented storage and migration for multiple custom wallpapers so users keep their existing wallpaper during upgrade while gaining the ability to save and switch multiple wallpapers — migration moves old single-wallpaper prefs into the new multi-wallpaper storage and the NTP now reads the wallpaper array at load/sync points.
  • Dre updated New Tab Page strings to support multiple custom wallpapers so users now see accurate, localized labels and accessibility text when managing or switching between multiple custom backgrounds, reducing confusion in the UI during wallpaper selection.
  • Dre added a delete affordance for saved custom wallpapers inside the New Tab Page picker so users can remove unwanted images from their saved set without going to profile files or prefs, improving manageability of user-provided wallpapers.
• We’ve completed a mass migration of our unit tests from Mocha (not mochi) / Karma to Jest/RTL, which is more modern and actively maintained.
• Sections is now enabled globally for all regions that show the content feed!
• Reem Hamoui fixed Lists widget so that keyboard users can now tab to completed items on the New Tab Page and see a visible selection/focus state
• Reem Hamoui fixed the Timer widget so that keyboard users can toggle focus vs break modes with standard keys (Enter/Space/arrow keys) thanks to restored keyboard handlers and tabindex semantics.
• Reem Hamoui made it so that screenreaders now announce wallpaper names via added aria-labels/alt text and role improvements in the Customize UI.
• Maxx Crawford made it so that the Customize UI now filters wallpapers by their metadata and no longer surfaces images marked hidden or in specific visibility groups.
• Irene Ni added Section Layout Name (String) telemetry to newtab content impression & click events so impressions/clicks now carry layout identifiers for more granular UX and A/B analysis
• Reem Hamoui added accessible names (aria-label/aria-labelledby) to the HNT Customize panel back buttons to fix screen-reader discoverability and keyboard/AT announcement when navigating the New Tab Customize flow.
• Nina Pypchenko [:nina-py] preserved iframe rendering for New Tab Page widgets during drag operations to prevent iframe-backed widgets from going blank while being moved.
• Nina Pypchenko [:nina-py] restored the Stocks widget dropdown and menu visibility under High Contrast Mode by adjusting contrast-aware CSS and ARIA roles so users relying on HCM can access stock controls again.
• Nina Pypchenko [:nina-py] fixed a results text overflow for long search queries in the Stocks widget by adding word-wrap/clamping to result lines, preventing layout breakage and truncated controls when users enter long symbols or queries.
• Nina Pypchenko [:nina-py] added telemetry for theme selection in the New Tab customization panel by emitting a selection ping on change, enabling measurement of user theme choices without changing UX.
• Irene Ni restored the Lists widget switcher checkmark for the selected list by fixing menu item selection-state rendering so users can again see which list is active in the switcher.
• Reem Hamoui updated the Privacy widget CTA and spacing on the New Tab Page, adjusting CSS/layout and CTA copy so the action is more discoverable and has a clearer tap/click target across responsive breakpoints.
• Reem Hamoui updated the zero-state copy for the New Tab Privacy widget to clarify what the widget does and the next steps for users when no privacy events or trackers are present, reducing confusion for first-time or cleared-state users.
• Maxx Crawford landed Fluent strings for the Nova launch New Tab customization callout, enabling localized text in the New Tab customization callout so users in supported locales see translated UI instead of missing-string fallbacks.
• Nina Pypchenko made the customization panel reset when closed, ensuring about:newtab customization state (temporary tile/layout previews) is cleared on close so users no longer see stale previews when reopening the panel.
• Dão Gottwald fixed New Tab to pick up system High Contrast Mode on Linux and macOS, restoring correct high-contrast colors/contrast on those platforms for users who rely on OS-level accessibility settings.
• Irene Ni restored theme matching for New Tab context menus by reapplying theme-aware CSS variables in the New Tab Page contextmenu styles, fixing mismatched colors for users with custom/light/dark themes.
• Dustin Whisman fixed New Tab section context menu button color regression by adjusting the section-contextmenu button style rules (button color variables and state selectors) so section actions now respect theme contrast.
• Irene Ni restored transparency to New Tab card backgrounds by removing opaque background rules so cards correctly display background images/themes and improve visual consistency across DPI/compositing setups.

Picture-in-Picture

• Thanks to Sebastian Zartner [:sebo] for fixing broken Dailymotion captions on the PiP player.
• kpatenio fixed YouTube’s displayed playback speed settings being out of sync with PiP.
  • Reminder that the playback speed settings can be enabled with media.videocontrols.picture-in-picture.playback-speed.enabled.
  • 
• Thanks to Sylvestre Ledru [:Sylvestre] for helping fix a broken link in our PiP docs as a part of Bug 2071683.

Search and Urlbar

Address Bar

• Dao and Moritz are working on bringing the full urlbar experience into the newtab page, now enabled on nightly and going through polish and improvements.. (Bug 2068104, Bug 2068633, Bug 2069260, Bug 2064747)
• Drew enabled AMP and Wikipedia by default in AT, BE, CH, ES, IE, LU, NL, PL, PT and SE. (Bug 2066294)
• James gated adaptive autofill page results behind a minimum score threshold. (Bug 2066171)
• any1here stopped disabled Manage AI and Labs quick actions being displayed when disabled. (Bug 2070378)

Search

• Dale landed the Recent Searches widget which will be be used launched as an experiment (Bug 2063718)
  • 
• Caleb fixed the search box eating the first character typed into it. (Bug 1953361)
• Mark configured Wikipedia search for Sardinian (sc) to use the Sardinian Wikipedia rather than the Italian one. (Bug 2057690)

Places

• Marco fixed bookmarked Google Maps using Google’s default favicon. (Bug 1575809)
• Marco fixed the Downloads and History windows going full-screen instead of floating on macOS. (Bug 2058062)

Tests

• Dashboards:
  • Most frequent oranges: https://tests.firefox.dev/intermittent.html#date=21days
  • Folders with the most flaky tests: https://tests.firefox.dev/flaky.html?kind=mochitest#date=21days&view=list
  • Issues of tests in a given folder: https://tests.firefox.dev/tests.html
    • Eg devtools debugger tests shows progress of the recent effort to fix these tests recently
• Flakiness burn down
  • Multi-agent Claude sessions running for hours investigating and fixing tests of a given set provided in the prompt. Still iterating on the process. Did this 3 times so far:
    • Bug 2062142 – [meta] Fix the flakiness in browser/components/extensions/test/browser
    • Top 20 intermittent mochitest bugs annotated by sheriffs.
      • Probably what made the mochitest line go down for the first time on https://tests.firefox.dev/
      • And what helped with the sidebar component, even though sidebar wasn’t my target.
    • Bug 2070797 – [meta] Fix the flakiness in devtools/client/debugger/test/mochitest
      • https://tests.firefox.dev/tests.html?path=devtools%2Fclient%2Fdebugger%2Ftest%2Fmochitest
• Profile your claude session for cost and context size: https://github.com/fqueze/claude-profiler
  • To monitor cost during your sessions, try https://github.com/padenot/foxtail

Archived hMailServer builds, from 4.1.1 to 5.6.9 build 2607. These versions are no longer supported and are kept for reference only. Use the latest release for new installations.

• View downloads

• View downloads

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.09.28

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.09.28

Changes

• fix: confine playlist/channel metadata files to the download directory (098cba4)
• fix: also prompt in ask mode when only chapter files remain on disk (b2b4908)
• feat: add an ask mode to DELETE_FILE_ON_TRASHCAN that prompts before deleting files (closes #1012) (52638fa)

SECURITY

• This release addresses vulnerabilities ranging from medium to critical severity affecting PeerTube. In a week, this changelog will be updated to disclose the vulnerabilities.

Bug fixes

• Force video encoding if there are rotation info
• Fix broken studio on only intro/outro/cut task
• Fix broken sorts/invalid sort checkers for channel syncs and ownership changes
• Fix downloading a download-protected video for admins
• Fix broken email title in some emails
• Fix broken notification window if the list contains a broken change ownership notification
• Fix table pagination after a search
• Include muted muted videos when admins/moderators display all videos of an account/channel

Core

Bugfixes

• Cloudflare AI Gateway models now honor provider response and stream timeouts. (@danlapid)
• MCP browser launch failures are now reported when the launcher exits immediately.
• Debug configuration output now redacts credentials and sensitive headers.
• Gemini thinking defaults and effort options now match the supported controls across model generations. (@markmcd)

Thank you to 5 community contributors:

• @dc85:
  • docs(web): add Claude Opus 5.5, GPT 6 Sol, and GPT 6 Luna to Zen (#50708)
• @vglafirov:
  • maint(gitlab): bump gitlab-ai-provider to 6.16.0 (#50742)
• @markmcd:
  • fix(gemini): switch thinking default logic (#50841)
• @remorses:
  • docs(web): link kimaki to product website (#49735)
• @danlapid:
  • fix(opencode): apply provider timeouts to Cloudflare AI Gateway models (#51549)

Part-DB 2.19.1

Bug fix

• Fixed content security policy that prevented the step loading capability of the 3D model viewer

Full Changelog: v2.19.0...v2.19.1

Part-DB 2.19.0

New features

• Added 3D model viewer, with support of STL, 3MF, OBJ, STEP, and more

• Improved builtin footprint gallery viewer

• Support to add custom "builtin footprints"
• Added additional footprint images based on KiCad 3D models. You can download them with php bin/console partdb:attachments:download-footprint-images

Improvements

• Optimized performance of part table views

Bugfixes

• Fix remembered tabs hiding validation errors by @LMatt08 in #1559

Various changes

• Updated dependencies
• Updated KiCad symbols and footprints
• Updated translations

New Contributors

• @LMatt08 made their first contribution in #1559

Full Changelog: v2.18.0...v2.19.0

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.09.27

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.09.27

Changes

• feat: pair the video password with presets, give custom yt-dlp options a full row (345b8ae)
• feat: add per-download video password for protected videos (closes #670) (080dcea)
• ci: install corepack instead of relying on the copy bundled with Node (47553e8)
• build: ship Python 3.14 in the image (be1d349)
• build: move the frontend to pnpm 12 (2ffb718)
• fix: let a cancel's SIGINT actually stop the download (c86f351)
• ci: sync the Docker Hub description with a maintained action (aecd86d)

[0.16.24] - 2026-09-27

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• DNS: PowerDNS Authoritative provider for automatic DNS record management.

Changed

Fixed

• Troubleshoot tool: TLSA records are looked up for every MX host, including hosts whose zone is not DNSSEC signed.
• Spam filter:
  • OpenPhish and PhishTank entries containing uppercase characters never match, since message URLs are lowercased while HTTP lookup entries keep their original case. HTTP lookups now match keys case-insensitively.
  • URL shortener links are followed using the lowercased URL, so case-sensitive short links resolve to the wrong destination or not at all.
  • Incremental training never advances its position past the first run, so every retained sample added since then is trained again, and counted again in the reservoir, on each run until it expires.
  • Updating the rules only adds new objects, so upstream changes to existing rules, DNSBL servers, HTTP lookups, lookup keys and file extensions never reach an existing installation.
  • Updating the rules reports success when objects fail to import, or when a configuration error stops the updated settings from being activated.
• JMAP:
  • A PushSubscription created within the verification rate limit window of another one on the same account never receives its PushVerification, since the blocked verification is dropped instead of being sent once the window expires.
  • A push notification retried after a failed delivery can report an older state than a change queued during the failed attempt, since the older state changes are merged last and overwrite the newer ones.
  • Changes made while a push request is in flight are not delivered until the next change reaches the same subscription, since a successful delivery cancels the pending retry.
  • The VAPID aud claim is derived from a hand-written parse of the push URL, so a crafted push URL can make the server sign a token for a push service other than the one the request is sent to.
  • Email/import rejects a blobId that refers to a Blob/upload creation id in the same request ("#u0") with Invalid blob id..
  • Email/set with a full mailboxIds object identical to the current mailboxes, together with a keyword change, stores the message with IMAP UID 0, so IMAP clients stop seeing it.
• MTA:
  • A node without the outboundMta role stops replying to DATA and to JMAP submissions once about 1024 messages have been queued on it.
  • MX records are resolved through the DNSSEC-validating resolver even when DANE is disabled.
  • A DATA stage Sieve script does not see headers added by milters or MTA hooks, and discards every milter and MTA hook change when it edits the message.
• MySQL: Range deletions and search index removals start with a single unbounded DELETE and switch to chunks only after a timeout.
• IMAP: COPY and MOVE fail with NO [CONTACTADMIN] when another session changes the same message at the same time.
• Autodiscover: Implicit TLS ports (993, 995, 465) are advertised with <Encryption>TLS</Encryption>, which Outlook reads as STARTTLS.
• HTTP: Idle keep-alive connections are never closed.

Check binary attestation here