The Stable channel has been updated to 155.0.8059.26/.27 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in thelog.
You can find more details about early Stable releases here.
Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
1.12.0 lets you create filter rules straight from a message, offers the code from sign-in mail for one-click copying, and gives a phone linked with "Link Mobile App" a sign-in of its own, for every kind of account. Search now leaves Spam and Trash out by default, and emptying an ordinary folder moves its mail to the Trash. Browsers with many logins start up much faster. It also contains three security fixes, so please update.
Auth: The password+TOTP login no longer sends the webmail's OAuth client secret to a mail server the user chose when custom JMAP endpoints are allowed. Only admin-configured servers get it
Auth: The identity provider round trip for "Link Mobile App" can no longer sign the browser in as whichever account answered it, and a re-authentication the provider answered from an existing session instead of a fresh login is refused
Mail: Opening a previewed SVG attachment in a new tab no longer runs the sender's script in the webmail origin
Features
Mail: A "Rules" entry in the message right-click menu creates filter rules from the message: always move mail from its sender, domain or mailing list, mark it read, tag it, or block the sender. A new rule can also run on the messages already in the folder, and it can be undone from the toast
Filters: The rule editor suggests conditions from the message it was opened from (subject, recipients, List-Id, sender domain), and the new "is the address" and "has the domain" conditions match an address exactly
Mail: Codes from sign-in and confirmation mail show as a copy chip in the message, and in the list for a day. "Show Verification Codes" in settings turns it off
Mail: In the unified view, rows can be tinted with their account's color instead of showing the account dot, and tags this browser has no definition for, such as ones set by a server-side filter, get a color of their own instead of grey (#1052, thanks @lucamzanon)
Search: The folder dropdown shows subfolders indented under their parents
Composer: Pasted plain-text lines that start with "- ", "* ", "• ", "1. " or "1) " become real lists
Calendar: The event popover finds the join link of Teams, Zoom, Meet, Webex, Jitsi, Whereby and GoTo meetings in the location or description, and the location opens in maps, with a copy button next to it (#1095, thanks @lucletoffe)
Server: LIBRETRANSLATE_API_KEY_FILE, BULWARK_JWT_AUTH_SECRET_FILE, BULWARK_STALWART_MASTER_USER_FILE and BULWARK_STALWART_MASTER_PASSWORD_FILE read these secrets from files, and the admin config accepts oauthClientSecretFile and sessionSecretFile (#897, thanks @Cameo007)
Plugins: PLUGIN_SIGNING_KEY_FILE points at an existing Ed25519 key for signing managed plugin bundles, for read-only secret mounts (#996, thanks @mulatta)
Releases: Container images and release files come with a signed build provenance attestation, and the standalone tarballs get a .sha256. The README explains how to check them with gh attestation verify
Changes
Search: Search leaves out Spam and Trash unless "All folders" is picked in the folder dropdown. A search started in Spam or Trash searches that folder
Mail: Emptying a folder other than Trash or Junk moves its mail to the Trash, unless deleted mail is set to be removed permanently
Mobile app: "Link Mobile App" is offered for every account. Password and password+TOTP accounts confirm their password (and code) in the dialog. The phone gets a sign-in of its own, so signing out in the browser no longer signs it out, and a sign-in link to copy sits next to the QR code. Failed password attempts are limited per account
Calendar: Events are drawn as solid blocks of their calendar's color; declined and cancelled events are outlined
UI: Success and info toasts are plain cards; only errors and warnings are colored
Performance: With many logins, the browser restores them four at a time and no longer reloads every login's folders, identities and push connections each time one of them connects (#1132, thanks @lucamzanon)
License: An additional permission under section 7 of the AGPL allows distributing apps built from this code through app stores. It is provisional until every earlier contributor has agreed (consent request) and applies in full to contributions made since 30 September 2026
Docs: Guidelines for AI-assisted contributions in the README and CONTRIBUTING.md
Fixes
Mail: Clicking a folder's unread count lists only that folder's unread mail, not unread mail from every folder of every account
Mail: In "unread first" lists, a message you open stays in place until you open another
Mail: The message list no longer flashes a reload right after the page opens
Mail: On tablets, the message list comes back when the reading pane empties, for example after the open message is deleted or moved
Mail: Dividers between rows no longer disappear at 125% or 150% display scaling
Mail: The unread dot is centred on the sender avatar
Mail: Attachments declared with a type the browser cannot show, such as application/x-as400attachment from IBM i systems, application/x-pdf or a catch-all type, preview according to their file name (#1127, thanks @dealerweb)
Send: Recipients the server refuses at send are reported. When it refuses all of them, the message stays open as not sent; otherwise a warning names the refused ones (#1123)
Composer: The message body stays reachable in short reading panes, such as the bottom reading pane on a laptop (#1114)
Composer: Pasted plain text keeps its blank lines
Push: A notification link waits for a login that is still reconnecting instead of reporting the account as signed out, opens the folder of the right account, and no longer pulls you away from something you opened in the meantime (#1131, thanks @lucamzanon)
Push: A browser subscribed with another VAPID key resubscribes on its own, and Firefox can turn push on again when it cannot read its old subscription (#1121, thanks @shukiv)
Calendar: Dragged events no longer disappear: all-day events moved in the month view keep their start, and occurrences of recurring events with a UTC start, as in Google Calendar exports, no longer shift by the time-zone offset (#1119)
Calendar: A failed calendar fetch no longer hides every calendar or leaves only the birthday calendar selected
Calendar: The all-day area of the week view is sized from the visible week, stacks each day's tasks under its all-day events, and collapses to three rows with a toggle (#1122, thanks @sanitz)
Calendar: The Save button shows while an event is saving, and a save refused for its length says so (#921, thanks @texchi2)
Calendar: Invitations no longer carry blank participant names or an empty description (#748, thanks @lucletoffe)
Files: Files shared with you open and save in the office editor (#1094)
Files: Office editing works behind a reverse proxy at a sub-path (NEXT_PUBLIC_BASE_PATH) (#1101, thanks @dealerweb)
Accounts: Adding a sixth account through server-side SSO no longer overwrites the first account's sign-in
Mobile app: The app's "Sign in via webmail" keeps working past the first token expiry when the webmail uses a confidential OAuth client or an identity provider on another host
Admin: Admin sign-in works over plain HTTP. The admin cookie's Secure flag follows the request, or COOKIE_SECURE when it is set (#1063, thanks @lucamzanon)
Admin: The OAuth scope fields show the actual default scopes, which do not include offline_access (#1126)
Lite: SSO sessions survive a page reload with identity providers such as Rauthy that refuse an early token refresh (#552)
UI: The app retries loading its configuration after a timeout or a failed request instead of staying broken (#1112, thanks @theLucius7)
Docker: The image builds from a remote Git context (#1118)
Whether you're hauling cargo beneath the glow of city lights, crossing long stretches of desert highway, or watching the horizon for anything unusual in the Nevada skies, the Silver State always has another road, town, or surprise waiting ahead.
Today, we're taking a closer look at some of the cities featured in the upcoming Nevada Rework for American Truck Simulator and how our team has rebuilt them from the ground up, bringing more detail, improved & updated road networks, and plenty of new places to discover along the way. Let's check it out!
Reno
First stop, Reno! Known as "The Biggest Little City in the World", Reno is one of northern Nevada's most important urban centres. Located close to the Sierra Nevada mountains and not far from Lake Tahoe, the city has long been an important hub for travel, industry, entertainment, and commerce in the region.
Often described as a "mini Vegas", Reno attracts millions of visitors each year to its resorts, vibrant local culture, and entertainment scene, which keeps the city busy around the clock! You'll be sure to find no shortage of jobs taking you in and out of the city, with its surrounding highway network connecting drivers with destinations across Nevada and neighbouring California.
In the Nevada Rework, Reno has been completely rebuilt from scratch, recreating the city with greater detail, updated scenery, and an improved road network. Our team has worked to better capture the character and scale of Reno, while retaining important and familiar elements from the original version and adding plenty of new details for players to discover.
Carson City
Just south of Reno lies Carson City, the capital of Nevada. Sitting at the foot of the Sierra Nevada mountains, the city offers a very different atmosphere from its larger neighbour, with historic streets, government buildings, and plenty of scenic surroundings.
As the centre of Nevada's state government, Carson City is home to several important landmarks, including the Nevada State Capitol, while its location also places it close to routes leading towards Lake Tahoe and other parts of western Nevada. Whether you're passing through or making a delivery in the city, there will be plenty to take in along the way.
Our map designers have rebuilt Carson City from the ground up, bringing greater detail to its streets, scenery, and surrounding areas, while giving some of its key landmarks and locations a fresh new look. Familiar elements from the original map have also been rebuilt where possible, bringing them up to the quality and level of detail found in our latest map and asset work.
Elko
Heading east across northern Nevada brings you to Elko, an important regional centre surrounded by wide open landscapes and mountain scenery. The city has strong connections with the mining & farming industries which have played a major role in shaping both Elko and northeastern Nevada as a whole.
Elko also sits along one of northern Nevada's most important transport corridors, making it a natural stopping point for travellers and freight moving across the state. Beyond its industrial connections, the area is also well known for its farming heritage and the vast landscapes which surround the city.
Our team has worked to give the area more of its own identity, while also improving the locations where drivers will pick up and deliver cargo, including new custom depots designed specifically for the area.
Winnemucca
Located along the Humboldt River, Winnemucca has long served as an important stopping point for travellers crossing northern Nevada. Its position along a major east-west transport corridor has helped make it an important regional centre for transport and cargo.
The city also has strong ties to several of the large industries found throughout this part of Nevada. Surrounded by broad valleys, distant mountain ranges, and open desert landscapes, Winnemucca offers the kind of scenery many drivers associate with journeys across the Silver State. Players can expect an updated city layout that better reflects the character of the real-world location.
Ely
In eastern Nevada you'll find Ely, a remote city surrounded by rugged mountains and expansive desert landscapes. Located along U.S. Route 50, famously known as the "Loneliest Road in America", Ely offers a noticeably different setting from many other cities in the state.
For the Nevada Rework, our team has aimed to preserve Ely's distinctive atmosphere and important locations, while bringing its roads, scenery, and surroundings up to the quality of our latest map work.
Across all of these locations, we've also added a variety of new custom depots, refreshed some company branding, and introduced many smaller details to make each city feel more unique. And of course, there is one major Nevada city missing from today's blog! Las Vegas will receive its own dedicated spotlight in the future, so stay tuned for that.
We hope you've enjoyed this latest look at the Nevada Rework. Be sure to follow our social media channels for more news and previews from American Truck Simulator!
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Warith Al Maawali has announced the release of Kodachi OS 10.0.3, an updated version of the project's Debian-based Linux distribution with integrated privacy and security features on top of a highly customised Xfce desktop: "The first stable release of Kodachi 10. It contains everything in the Kodachi 10....
This week's release includes BYOK support for GPT-6.1 Sol and the ability to preview JSONL and NDJSON files as tables.
Features
AI
Added BYOK support for GPT-6.1 Sol with an OpenAI API key. (#64968; thanks ktKongTong)
Added the agent.max_idle_retained_threads setting to control how many idle agent threads remain loaded. (#64547; thanks hazicy)
Improved Google AI error messages and added automatic retries when a model was overloaded. (#64865)
Improved OpenCode model resolution performance and hid deprecated models. (#64666)
Improved plan updates from ACP agents, including panel refreshes after status changes. (#64884)
Improved the Agent Panel error shown when a Zed sign-in expired. (#64754)
Improved visibility of keyboard-selected agent conversations in the Threads Sidebar. (#63922; thanks jaklyk2103)
Git
Added a folder-specific context menu in the Git Panel's tree view. (#59853; thanks Sondeyy)
Languages
Added JSONL and NDJSON support to the tabular data preview. Open previews alongside the source with cmd-k v (macOS) or ctrl-k v (Linux/Windows). (#64471; thanks unshDee)
Added extension installation suggestions for many more languages when opening unsupported files. (#63211; thanks haolamnm)
Added support for rewrapping text in Typst files. (#64858; thanks AdinAck)
Remote Development
Added support for terminal.shell in remote sessions. (#61451; thanks quinn)
Other
Added alt-/ to show the bindings that can complete a pending multi-keystroke shortcut. (#64803)
Added a soft_wrap_indent setting ("none", "same", "extra_one", "extra_two") to configure indentation for soft-wrapped continuation lines. (#63468; thanks arusahni)
Improved responsiveness when watching paths on slow or unresponsive filesystems. (#63410; thanks RemcoSmitsDev)
Improved editor: select next and editor: select previous to respect the buffer search whole-word option. (#64137; thanks yawnnn)
Bug Fixes
Debugger: Fixed "Rerun last debug scenario" not running the last scheduled scenario. (#64856; thanks MeiramSh)
Fixed a crash on Windows when reading a stored credential that has no username. (#64735)
Fixed a crash when pasting multiple selections at the end of a file in Vim mode. (#64876)
Fixed a crash when typing the start of a multi-key binding at the end of a read-only file. (#64730)
Fixed agent notifications showing a thread's original title after the thread was renamed. (#64907; thanks IFafaa)
Fixed commit details and diffs waiting behind an in-progress fetch, pull, or push before opening. (#64720; thanks azeemshaik025)
Fixed external-agent sessions remaining loaded after their conversation was closed during loading. (#64717)
Fixed images in Markdown table cells ignoring column alignment and vertical centering. (#64914; thanks dremnik)
Fixed issues where OpenAI model tool calls to MCP servers treated optional fields as required, causing errors. (#64920)
Fixed missing or outdated output in agent tool results. (#64708)
Fixed search highlights in Markdown Preview that hid matched text when the theme used opaque highlight colors. (#64788; thanks IFafaa)
Fixed stale agent responses that could clear a newer prompt or show errors from an earlier send. (#64917)
Fixed syntax highlighting for fenced code blocks with extra text after the language name. (#64694; thanks maxmalkin)
Fixed the pending keybindings list showing task: spawn instead of the task name for bindings that spawn a task. (#64937; thanks frinyvonnick)
Fixed the Zed Cloud connection failing with UnknownIssuer behind corporate TLS-inspecting proxies whose root CA is installed in the system trust store. (#63686; thanks joepjoosten)
ACP: Fixed partial tool-call display updates when content referenced an unavailable terminal. (#64784)
Fixed a bug where inlay hints positioned past the end of a buffer could appear on its last line, and inlay hints exactly at the end of a file without a trailing newline could be hidden. (#64659; thanks HuaGu-Dragon)
Fixed a rare crash when hovering wrapped Markdown text on Linux. (#64672)
Fixed delayed selection of the first entry when opening a context menu. (#64365)
Fixed entries folding when clicked in the Outline Panel. (#64736)
Fixed Helix buffer picker opening in the wrong pane on space b. (#64494; thanks GautamBytes)
Fixed hover flicker after dismissing native menus on macOS. (#64175; thanks yay)
Fixed incorrect selected and hover colors for threads in the Threads Sidebar. (#62597; thanks Robot-Inventor)
Fixed indentation corruption during multicursor editing and block indentation. (#64675; thanks GautamBytes)
Fixed language server formatting scrolling to the bottom when the server replaces the entire buffer. (#57269; thanks kalilamodow)
Fixed Project Panel requiring two left presses to collapse opened files’ parent. (#64733)
Fixed row separator lines in tabular data previews extending past the last column. (#63367; thanks HalavicH)
Fixed soft-wrap continuation line indentation calculation for unindented lines starting at column 0. (#63468; thanks arusahni)
Fixed syntax highlighting for Markdown emphasis, links, and code blocks when viewing a file at a historical commit. (#64683; thanks Sudarsh1010)
Fixed terminal tool call output covering the rounded corners of its card in the Agent Panel. (#64328; thanks chrisdrackett)
Fixed window controls shifting by one pixel when the Threads Sidebar was open on Linux. (#64381; thanks Piyushrathoree)
Fixed wrap guides showing in the Agent Panel before a conversation started. (#64886; thanks virajbhartiya)
Breaking Changes and Notices
Changed title-bar application menus on Linux and Windows to require a click before opening. Enable title_bar.open_menus_on_hover to restore opening on hover. (#48496; thanks pauldipietro)
This week's release includes BYOK support for GPT-6.1 Sol, on-the-fly model selection for new subagents, automatic subagent compaction, a unified/split toggle for diffs opened from the command line, and dynamically fetched OpenCode models.
Features
AI
Added an optional model parameter to spawn_agent to choose a model for that spawn instead of using the configured subagent model or inheriting the parent model, with the active model shown in its card. (#64498; thanks itsfuad)
Added BYOK support for GPT-6.1 Sol with an OpenAI API key. (#64968; thanks ktKongTong)
Added Grok 4.7 to the SuperGrok and xAI providers and made it their recommended default. (#64567; thanks raphaelluethy)
Added the agent.threads_sidebar.auto_open setting to control whether opening a folder in an existing window also opens the Threads Sidebar. (#64259, #64395; thanks jackhwalters and joshkent94)
Added support for "..." in edit_predictions.disabled_globs and edit_predictions_disabled_in so settings can extend inherited edit prediction exclusions and scopes. (#64540, #64546; thanks porada)
Improved OpenCode model availability by fetching the Zen and Go model list dynamically instead of relying on one bundled with Zed. (#64585)
Improved performance when resolving OpenCode models. (#64666)
Improved Threads Sidebar sizing so changes to agent.threads_sidebar.default_width take effect even after manually resizing the sidebar. (#64395; thanks joshkent94)
Added a unified/split toggle to the diff view opened with zed --diff <old> <new>. (#64529; thanks rn23thakur)
Improved how quickly branch diffs show their first changes when a branch has drifted far from its base. (#62536; thanks azeemshaik025)
Terminal
Added support for "..." in terminal.path_hyperlink_regexes to extend inherited regexes without repeating them. (#64552; thanks porada)
macOS
Added macOS three-finger Look Up and translation gestures for text in focused Markdown previews. (#59297; thanks cppcoffee)
Windows
Added MicaBackdrop and MicaAltBackdrop options for the background.appearance theme setting. (#48340; thanks Marocco2)
Other
Added support for "..." in file_scan_inclusions and hidden_files so project settings can extend inherited inclusion and hidden-file patterns. (#64440, #64484; thanks porada)
Added confirmation in the title bar when a manual update check found Zed was already up to date. (#64106; thanks tahayvr)
Improved the pending keystrokes indicator with grouped bindings, a scrollable list, and support for chords without a timeout, such as shortcuts starting with cmd-k. (#64362, #64522)
Bug Fixes
Fixed invalid file patterns discarding valid exclusion, hidden-file, read-only, and private-file rules or causing inclusion and file-type settings to panic. (#64525; thanks porada)
Fixed cmd-w (macOS) and ctrl-w (Linux/Windows) closing the active dock instead of the active pane item. (#64515)
Fixed ligatures being disabled on Windows unless buffer_font_features was set. (#62338; thanks interkelstar)
Fixed LSP completions without edit ranges ignoring the configured completions.lsp_insert_mode. (#64139)
Fixed the Settings window opening with its header off-screen at high DPI scaling on Windows. (#62073; thanks habisahmad)
Fixed importing VS Code files.exclude into file_scan_exclusions. (#64492; thanks porada)
Fixed “Add to .git/info/exclude” failing in secondary Git worktrees. (#63967; thanks mateioprea)
Fixed terminals retaining about 2 MB of memory per command after the command finished. (#64405; thanks EcutAtom336)
Fixed external-agent terminals completing prematurely or reporting the wrong exit status. (#64544)
Fixed a memory leak when closing macOS windows with experimental accessibility enabled. (#64143; thanks feigeCode)
Fixed the terminal grid losing its top alignment when growing on Windows. (#63699; thanks 39ali)
Fixed a crash on Linux (X11) when a window was redrawn immediately after GPU device recovery. (#64570)
Fixed language servers not starting for files opened via UNC paths on Windows. (#56553; thanks Joblen)
Fixed PowerShell installed by Scoop not being detected when Scoop uses a custom installation directory. (#62473; thanks jliu666)
Fixed task worktree variables resolving to the wrong project when the global tasks.json file was focused, and paths containing spaces breaking Windows tasks. (#55727; thanks di404)
Fixed adding the current line to an Agent thread when no text was selected using cmd-> (macOS), ctrl-> (Linux), or ctrl-shift-. (Windows). (#64589)
Fixed a bug where the block cursor hid the character underneath until its animation completed. (#64521; thanks linyisu)
Fixed columnar selections landing in the wrong column around non-ASCII text, tabs, soft wraps, and collapsed content. (#63723; thanks itsfuad)
Fixed the cursor drifting from the center of the editor when using a high vertical_scroll_margin for typewriter-style scrolling. (#63944; thanks rn23thakur)
Fixed cursor animations when moving between characters of different widths and during keyboard-triggered autoscrolling. (#64184; thanks tiny-paris)
Fixed excerpt expansion when the selection was on deleted text in unified diffs. (#63946; thanks IbrahimKhan12)
Fixed a bug where “Configure Excluded Files” selected the wrong list when a commented-out disabled_globs setting appeared before it. (#64540; thanks porada)
Fixed diagnostic navigation not linking nearby related diagnostics back to the primary diagnostic. (#64134; thanks GautamBytes)
Fixed missing editor underlines for language server diagnostics at positions without underlying text. (#63933; thanks itsfuad)
Fixed a bug where the Agent Panel created two terminals when starting a new terminal thread in a project with no existing terminals. (#62151; thanks restlessronin)
Fixed keyboard navigation and submission in ACP elicitation forms. (#64193)
Fixed errors when ACP agents returned null for empty response payloads. (#64457)
Fixed Markdown preview tabs not showing the source file path on hover. (#64318; thanks GautamBytes)
Fixed Project Panel requiring two left presses to collapse opened files’ parent. (#64733)
Fixed recording and searching for standalone modifier-key bindings in the Keymap Editor. (#64537)
Fixed remote external-agent exit errors appearing before the agent's final response updates were applied. (#64603)
Fixed the selection highlight flickering in the Threads Sidebar when clicking terminal threads. (#64387)
Fixed snippets from different extensions canceling each other out for the same language. (#58659; thanks LBF38)
Fixed syntax highlighting for Markdown emphasis, links, and code blocks when viewing a file at a historical commit. (#64683; thanks Sudarsh1010)
Fixed Command-clicking a symbol opening a definitions multibuffer instead of the picker when lsp_results_location was set to "picker". (#64039; thanks v-shevtsov)
Breaking Changes and Notices
Removed Stop controls from external-agent-managed terminals, which are controlled by the agent rather than a local process. (#64544)
Changed Threads Sidebar settings to agent.threads_sidebar.position, agent.threads_sidebar.default_width, and agent.threads_sidebar.auto_open, grouped together in the Settings Editor. Existing settings are migrated automatically. (#64395; thanks joshkent94)
Changed the shortcut for closing the active dock from cmd-w (macOS) or ctrl-w (Linux/Windows) to ctrl-alt-w on all platforms. (#64515)
Changed terminal.path_hyperlink_regexes so a top-level "..." entry now inserts inherited regexes. To retain the previous three-character regex, replace that entry with ["..."]. (#64552; thanks porada)
Stopped importing VS Code’s files.watcherInclude as file_scan_inclusions; watch roots are not Git-ignore overrides. (#64440; thanks porada)
Stijn Bronzwaer schuift aan met een ongeautoriseerde biografie van Ali Niknam, volgens hem de meest succesvolle ondernemer die Nederland op dit moment heeft. Drie bedrijven van meer dan een miljard, waaronder Bunq, en een managementstijl die volgens een Silicon Valley-kenner eerder Chinees is dan Amerikaans. We lopen de anekdotes langs: het pak melk dat buiten de koelkast bleef staan waarna het hele kantoor twee weken zonder zat, de honkbalknuppel van twee meter met “is het al af?” erop en de sollicitant die op de wc werd bijgeleerd hoe je één papieren handdoekje gebruikt.
En toen ging het over de phishingzaak. Klanten die in twintig minuten een ton kwijtraakten en bij een chatbot terechtkwamen die hen een fijne dag wenste. Voor het eerst een strijd die Niknam verloor.
Ondertussen kantelt het gesprek naar de journalistiek zelf. Alexander en Ernst zaten allebei ooit aan de andere kant en herkennen te veel. Waarom staat “maar lijdt nog verlies” altijd in de kop? Waar is de nieuwsgierigheid naar hoe het iemand wél lukt? Stijn houdt vol dat CEO’s gewoon niet gewend zijn aan een journalist die zich echt heeft voorbereid. Het boek kost NRC overigens meer aan advocaten dan het ooit oplevert.
The Stable channel has been updated to 154.0.8037.92/.93 for Windows andMac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 32 security fixes. Please see the Chrome Security Page for more information.
[TBD][551673541] Critical CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx on 2026-08-24 [N/A][517312707] High CVE-2026-102317: Improper privilege management in Mojo. Reported by Google on 2026-05-28 [TBD][551668264] High CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga on 2026-08-24 [N/A][556789073] High CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google on 2026-09-03 [TBD][556908674] High CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni on 2026-09-04 [N/A][556926296] High CVE-2026-102306: Use after free in Bluetooth. Reported by Google on 2026-09-04 [N/A][556959073] High CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google on 2026-09-04 [TBD][559266114] High CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10 [N/A][559727039] High CVE-2026-102303: Uninitialized resource in GPU. Reported by Google on 2026-09-10 [N/A][559737160] High CVE-2026-102311: Uninitialized resource in GPU. Reported by Google on 2026-09-10 [TBD][560062638] High CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security) on 2026-09-11 [TBD][560233248] High CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-11 [TBD][560238698] High CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge on 2026-09-11 [TBD][560251736] High CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-11 [TBD][560536732] High CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-12 [TBD][560867085] High CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey on 2026-09-13 [N/A][561994362] High CVE-2026-102325: Uninitialized resource in Skia. Reported by Google on 2026-09-15 [N/A][561997480] High CVE-2026-102308: Use after free in Views. Reported by Google on 2026-09-15 [N/A][562004351] High CVE-2026-102301: Out of bounds write in GPU. Reported by Google on 2026-09-15 [N/A][562042411] High CVE-2026-102319: Uninitialized resource in GPU. Reported by Google on 2026-09-15 [TBD][562174487] High CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt on 2026-09-15 [N/A][562279351] High CVE-2026-102318: Out of bounds read in WebGL. Reported by Google on 2026-09-16 [TBD][563297615] High CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec on 2026-09-18 [N/A][563351482] High CVE-2026-102315: Uninitialized resource in Media. Reported by Google on 2026-09-18 [N/A][563716534] High CVE-2026-102302: Buffer overflow in V8. Reported by Google on 2026-09-19 [TBD][565328105] High CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint on 2026-09-23 [TBD][554038924] Medium CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous on 2026-08-28 [$1,000][477726837] Low CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact on 2026-01-22 [N/A][496212975] Low CVE-2026-102327: Incorrect authorization in WebView. Reported by Google on 2026-03-25 [N/A][498793976] Low CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google on 2026-04-02 [N/A][514059780] Low CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google on 2026-05-17 [N/A][533021953] Low CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google on 2026-07-09
Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
The Extended Stable channel has been updated to 152.0.7977.149for Windows and Mac which will roll out over the coming days/weeks.
A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
26.4 Snapshot 2 (known as 26.4-snapshot-2 in the launcher) is the second snapshot for Java Edition 26.4, released on September 29, 2026, which fixes bugs, brings changes to render distance fog, and redesigns the debug screen.
Full changelog: https://minecraft.wiki/Java_Edition_26.4-snapshot-2
Firefox's biggest visual refresh in years is now available, with a modernized look across the browser toolbars, sidebar, menus and individual features, built with our updated design system. It also includes:
New built-in themes with light and dark versions, to personalize the look of Firefox in one click.
A new compact mode that reduces toolbar and tab spacing to leave more room for web content, useful on smaller screens and in split-screen layouts.
WebRTC video calls can now use hardware AV1 decoding on devices that support it, instead of always decoding AV1 video in software.
Firefox now shows a warning in the site information panel (the shield icon in the address bar) and in Settings when it has been set up to record its encryption keys, which could let other software on the computer read encrypted web traffic.
Firefox Suggest now offers suggestions in the address bar in Austria, Belgium, Czech Republic, Denmark, Finland, Hungary, Ireland, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, and Switzerland. They can be controlled in the Firefox Suggest settings. Learn more.
Fixed
Fixed video from phones and tablets appearing sideways or upside down in WebRTC calls.
Fixed the address bar searching for the typed text instead of opening the selected suggestion when a page was still loading, such as shortly after Firefox started.
Fixed some HDR videos encoded in 8-bit color formats looking dull and gray on Windows instead of displaying in HDR.
Improved audio and video synchronization when repeatedly changing the playback speed of videos, for example on YouTube.
Fixed the Vertical Tabs sidebar not reappearing when the cursor moves to the edge of the screen in full screen mode.
Fixed an issue on Windows where making a video full screen would leave the Windows taskbar showing over the video.
Pressing Tab now moves focus straight to the text field of the address bar and search bar instead of stopping on the search engine button first. The button can still be reached with Shift+Tab.
Amazon is no longer included as a built-in search engine. It can still be added as a custom search engine in the search settings. Learn more.
The updated sidebar is now enabled for everyone. Anyone still using the previous sidebar will keep a similar layout, with the panel switcher at the top of the sidebar. Additionally, the “Show sidebar” option has been removed from Settings.
While we continue to refine the new design, the previous sidebar version can still be restored by setting sidebar.revamp to false in about:config. This also turns off vertical tabs. The preference will remain available until the end of 2027.
Web page alert(), confirm() and prompt() dialogs, the color and date pickers, and form autocomplete drop-downs now match the page's light or dark color scheme.
Firefox now supports the at-rule() function for @supports. This allows authors to detect browser support for specific at-rules, such as @supports at-rule(@scope).
Firefox now supports the chain value for the CSS overscroll-behavior property.
Community Contributions
With the release of Firefox 157, we are pleased to welcome the developers who contributed their first code change to Firefox in this release, 21 of whom were brand new volunteers! Please join us in thanking each of these diligent and enthusiastic individuals, and take a look at their contributions:
We are super excited that the day many of you have been waiting for has finally arrived. Today, you can get ready to drive a new set of vehicles with the release of the Road Trip: Ford DLC for American Truck Simulator!
We first announced project Road Trip in April last year, and since then, it has been eagerly awaited by our #BestCommunityEver. A dedicated team was formed to bring this brand-new experience to American Truck Simulator, working closely with our vehicle team, programmers, testers, and many other colleagues across the company. The Ford DLC is the first release from the Road Trip project, and we're incredibly happy to finally bring it to our community!
Now, you can hit the open roads of American Truck Simulator like never before with this DLC as you take the wheel of:
The iconic 1967 Ford Mustang Fastback
The all-purpose 2023 Ford F-150
The modern 2023 Ford Bronco
and the legendary 1998–2012 Ford Crown Victoria
With the Road Trip: Ford DLC, you will unlock Car Mode, its related features, and all of these personal cars, which you can take out on the road and experience American Truck Simulator from a whole new perspective. Customise your vehicles with a variety of accessories and paint options, then hit the road and explore at your own pace.
Looking for something to do along the way? Take on smaller deliveries through Quick Jobs or the Dispatch Market and build your courier reputation, or discover the world around you with the new Atlas feature. Visit iconic locations, learn more about them, and collect beautifully designed postcards as you explore.
At release, the Atlas feature and its Tourist Boards will be available in California, and in the Oregon, Washington, Idaho, Montana, Wyoming, and South Dakota DLCs. The remaining states will be gradually included in future updates.
Step away from your big rig and get behind the wheel of iconic Ford vehicles, a fresh way to explore the world of American Truck Simulator. You can also team up with your friends in Convoy mode and hit the road together, with trucks and cars sharing the highways! And don't forget that if you own this DLC, you can also enjoy the Atlas feature from behind the wheel of a truck.
We're happy to have partnered with Ford to bring these iconic vehicles to life in American Truck Simulator, and we would like to thank them very much for their cooperation in making this possible.
But now, it's all up to you - we can't wait to see where your next road trip takes you!
Release Live Stream
As we always do with our map expansions, we also plan to introduce the new Road Trip: Ford DLC to our community with a special release stream! Starting today at 3 pm CEST, we'll be joined by guests who worked on the DLC's development, chatting with them about the process while taking Ford cars out on the roads of American Truck Simulator. And at the end of the stream, we'll officially release the DLC together with you!
Make sure to share photos or videos from your road trip journeys with us on social media by tagging us on X/Twitter, Facebook, BlueSky, and Instagram. For more news from American Truck Simulator and further Road Trip development, don't forget tosubscribe to our newsletter or follow us on our social media accounts. We will see you on the road!
Fixed script injection in event scripts. With JScript, untrusted values passed to event handlers (such as the logon password in OnClientValidatePassword, or error text and UIDs sent by remote servers) could break out of their string. With either script language, a rule's "Run function" name could carry code. This would allow an attacker to run arbitrary code in the hMailServer process. Values are now escaped, and rule function names may only contain letters, digits and underscores.
If you are unable to install this version, disable JScript execution and do not give end-users access to the hMailServer COM API.
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8
Part-DB 2.19.2
Bug fix
Fixed step 3D model viewer colors when one part contains multiple colors
Various changes
Update KiCad symbols and footprints lists by @jbtronics in #1562
Log in
