v4.3.24
Security fix release for Coolify 4.3. Apply it with: curl -fsSL https://cdn.coollabs.io/coolify/patch.sh | sudo bash
Security fix release for Coolify 4.3. Apply it with: curl -fsSL https://cdn.coollabs.io/coolify/patch.sh | sudo bash
Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -d com.apple.quarantine /Applications/MarkText.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
Full Changelog: v0.22.0...v0.23.0
OBS Studio 33.0.0 Release Candidate 3
OBS-Studio-33.0.0-rc3-Sources.tar.gz: 766bb443f7e3f265a702992d1108d699e3f5509be633eacc518262e41e7d1d2d
OBS-Studio-33.0.0-rc3-Ubuntu-26.04-x86_64-dbsym.ddeb: 25d791ca5563779f2a2c9a6ac7710eb61ef009571249176b846d30940ca8e1aa
OBS-Studio-33.0.0-rc3-Ubuntu-26.04-x86_64.deb: ac939c81a5f960f7edb252520549d00b279cfbeccaae2bb4b8c87dc5f568ebe1
OBS-Studio-33.0.0-rc3-Windows-arm64-PDBs.zip: dff75284092b3bdc9929049baa6649c539a4e02b6c29b793da9e55e8e3c13ece
OBS-Studio-33.0.0-rc3-Windows-arm64.zip: 1d0347968388ad7f187701bfa13e3748211e575bd4332bc4951d8e16e456ad57
OBS-Studio-33.0.0-rc3-Windows-x64-Installer.exe: f43ed5f1e08d8b31a34fe68577a088331aebbfa5f01634c3948a2ebec5df5202
OBS-Studio-33.0.0-rc3-Windows-x64-PDBs.zip: f1b408547de973a232a565877c96b157542f3e5cf909a128bbcdc90de551aa8d
OBS-Studio-33.0.0-rc3-Windows-x64.zip: 92db35465aec0f70ab11d033674be724603780620603f87a7c56e95ed990aa28
OBS-Studio-33.0.0-rc3-macOS-Apple-dSYMs.tar.xz: 233b358dae3006dba1079795afa101c512ebb532b850e8bfda91d5ef3b682af1
OBS-Studio-33.0.0-rc3-macOS-Apple.dmg: ead594ec544503aeb42df5033266c3a9d3de5bd07335449dd751a6681b4571e6
OBS-Studio-33.0.0-rc3-macOS-Intel-dSYMs.tar.xz: 93bdfa7d2fcfdaae26c5cad02defdf4c5001282fcc09c4acf7e714846b59b799
OBS-Studio-33.0.0-rc3-macOS-Intel.dmg: a4b38098ae9c370d4536a9d4dc5ed459ac9b9cf55cf1865951ae3d9e977c9f12
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.10.20GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.10.20
Full Changelog: v0.8.14...v0.8.15
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.10.19GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.10.19
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
APPEND and COPY/MOVE into another account's mailbox do not change the JMAP EmailDelivery state.SEARCH RETURN with MIN or MAX alongside ALL returns only the minimum and maximum in ALL, and SAVE combined with MIN or MAX and ALL or COUNT saves only the minimum and maximum instead of every match.VTIMEZONE definitions it carries, so an occurrence moved by an external organizer can reference a TZID (for example W. Europe Standard Time) the stored event no longer defines, and Apple Calendar shows both the original and the moved occurrence.http://127.0.0.1:45678) are not matched against registered loopback URIs on any port and are rejected by dynamic client registration.PROPFIND allprop returns DAV:current-user-principal, so Windows Explorer shows every file and folder under the account name.
Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -d com.apple.quarantine /Applications/MarkText.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
Full Changelog: v0.21.2...v0.22.0
Hi,
The OpenWrt community is proud to announce the sixth service release of the OpenWrt 25.12 stable series.
Download firmware images using the OpenWrt Firmware Selector:
Download firmware images directly from our download servers:
Only the main changes are listed below. See the full changelog for details.
This release fixes several remotely triggerable vulnerabilities in core network
services that are enabled by default. Updating is strongly recommended.
params field in POST /ubus/call/ requests. GHSA-2mpg-6wp5-435p/ubus request. GHSA-83vv-qrc6-h3hx/ubus/subscribe/ could permanently block the listener. GHSA-wvgh-cm54-q6f6option apup, disabled by default). https://github.com/openwrt/openwrt/security/advisories/GHSA-78g5-4g76-r6jhcheck_cert_subject EAP server certificate check read uninitialized memory and could accept a certificate whose subject only matched as a prefix./etc/shadow. https://github.com/openwrt/openwrt/security/advisories/GHSA-q5gr-86pq-vvwrdns_query(). https://github.com/openwrt/openwrt/security/advisories/GHSA-j2f2-273j-r86head-client is not installed in the images, only the daemon is. https://github.com/openwrt/openwrt/security/advisories/GHSA-mq4v-mf82-24rr https://github.com/openwrt/openwrt/security/advisories/GHSA-8f8g-5c8x-8mhhMany optional packages in the packages feed were also updated to new versions with
security fixes, among them curl 8.22.0, OpenSSH 10.6p1, unbound 1.26.1, BIND 9.20.29,
OpenVPN 2.7.7, strongSwan 6.0.7, HAProxy 3.2.21, expat 2.8.4, nghttp2 1.70.0,
libssh 0.12.2, c-ares 1.34.8, Tor 0.4.9.13, Knot DNS 3.5.7, PowerDNS 4.9.17,
PowerDNS Recursor 5.2.13, Exim 4.100.1, Python 3.13.15, Node.js 22.23.2, xz 5.8.3
and rsync 3.5.1. These packages are not part of the default images; update the
installed packages to get these fixes.
Beyond the issues listed above, this release fixes a number of further security
problems for which no CVE number or dedicated advisory was assigned. We strongly
recommend upgrading to the latest OpenWrt release and installing all available
package updates.
WiFi: GCMP-256 and SAE-EXT-KEY are no longer offered by default
OpenWrt 25.12.0 to 25.12.5 offered the GCMP-256 pairwise cipher and, in some configurations, the SAE-EXT-KEY key management (SAE with a group-dependent hash, also called SAE-GDH) on WPA3 networks with WiFi 6 (HE) or WiFi 7 (EHT), but not in the way the Wi-Fi Alliance "WPA3 and Wi-Fi Enhanced Open Deployment and Implementation Guide" describes it. This configuration caused connection problems, for example with Pixel 10 phones (#21486) and with 802.11r Fast Transition (#22200).
The WPA3 specification makes GCMP-256 and SAE-EXT-KEY mandatory for WiFi 7 and recommends them otherwise. When the configuration recommended by the Wi-Fi Alliance was enabled in the OpenWrt development branch, it turned out that about 15% of the client devices in use are not compatible with it. For example:
See the discussion on the hostap mailing list (https://lists.infradead.org/pipermail/hostap/2026-July/045277.html) and pull request #23009 (#23009) for details.
Starting with 25.12.6, GCMP-256 and SAE-EXT-KEY are no longer offered by default in WPA3-Personal (sae) and WPA2/WPA3 mixed (sae-mixed) mode; only CCMP and plain SAE are offered. The old rsn_override option was removed.
We recommend using WPA3-Personal (sae) or WPA2/WPA3 mixed mode (sae-mixed). If some clients have problems with these modes, use the new WPA3-Personal Compatibility Mode (sae-compat, "WPA2-PSK/WPA3-SAE Compatibility Mode" in LuCI): WPA2 clients see a normal WPA2 network, while clients that support RSN overriding use WPA3.
Only enable GCMP-256 and SAE-EXT-KEY if you need them and if they do not cause problems with your clients. In LuCI, they are on the "Wireless Security" tab of the wireless network as "GCMP-256 pairwise cipher" and "SAE-EXT-KEY (SAE-GDH)". On the command line (replace default_radio0 with the name of your wifi-iface section):
uci set wireless.default_radio0.gcmp256='1'
uci set wireless.default_radio0.sae_ext_key='1'
uci commit wireless
wifi reload
gcmp256 offers GCMP-256 in addition to CCMP, but only if the WiFi driver supports GCMP-256. sae_ext_key offers SAE-EXT-KEY, and also FT-SAE-EXT-KEY when 802.11r is enabled.
DHCP client: the client identifier can be selected
Since OpenWrt 25.12.0, every device generates a random, UUID-based DUID on first boot and stores it in network.globals.dhcp_default_duid. The DHCPv6 client uses it as its DUID, and the DHCPv4 client sends it together with an interface-specific IAID as client identifier (DHCP option 61). This default follows the recommendation of RFC 4361 (https://www.rfc-editor.org/rfc/rfc4361) that DHCPv4 clients use the same DUID as DHCPv6, so the device is identified in the same way for DHCPv4 and DHCPv6. The UUID-based DUID format is defined in RFC 6355 (https://www.rfc-editor.org/rfc/rfc6355). OpenWrt 24.10 sent no client identifier with DHCPv4 and used a DUID-LL derived from the MAC address for DHCPv6. Some DHCP servers, including servers of some ISPs, do not work correctly with the new client identifier, and until now there was no way to go back to the old behavior.
OpenWrt 25.12.6 adds the new per-interface option sendclientid:
auto (default): use the client ID configured with the clientid option, else the default DUID of the device, else the MAC address. This is the behavior of 25.12.0 to 25.12.5 and follows RFC 4361.global: always use the default DUID of the device, even if clientid is set.hardware: use the MAC address of the interface (DHCPv4) or a DUID-LL derived from it (DHCPv6).none (DHCPv4 only): do not send a client identifier at all.We recommend keeping the default auto, which matches the behavior of OpenWrt 25.12.5. Only if the DHCP server of your ISP does not work with it, switch back to the behavior of OpenWrt 24.10 by setting none on the DHCPv4 interface and hardware on the DHCPv6 interface:
uci set network.wan.sendclientid='none'
uci set network.wan6.sendclientid='hardware'
uci commit network
service network reload
In LuCI, the option is called "Preferred client ID" and is on the "Advanced Settings" tab of the interface (Network β Interfaces β Edit). Select "None" for the DHCPv4 interface (wan) and "Hardware address" for the DHCPv6 interface (wan6). Note that the DHCP server sees a changed client identifier as a new client, so you may get a different IPv4 address or IPv6 prefix.
New devices supported in 25.12.6:
New image variants for already supported devices:
Device fixes:
sae and sae-mixed mode (see "Important changes" above)sae-compat): WPA2 clients see a normal WPA2 network, while clients that support RSN overriding use WPA3transition_disable option to tell clients to stop falling back to older security modes on a WPA3-only networkaltsubject_match, domain_match, domain_suffix_match), and accept the old priv_key / priv_key_pwd option names again, so EAP-TLS client configurations from 24.10 work again (#22599)multicast_to_unicast option works againsendclientid to choose the DHCPv4/DHCPv6 client identifier (see "Important changes" above)demand option) works again. It was broken since the update to ppp 2.5.0 (#24454).TCP_NODELAY), can bind to addresses that are not yet configured, and supports SNI-based redirectsifstatus also with peerdns disabled; support for the Quectel EG120K-EA modem (qmi_wwan); NCM support for Fibocom FG621-EA modems (e.g. ASUS 4G-AX56, TP-Link TL-MR500 v1)luci-theme-footstrap; the optional luci-mod-dashboard got live charts and a configurable layout; new apps luci-app-librespeed and luci-app-weechatUpgrading from 24.10 to 25.12 should be transparent on most devices, as most configuration data has either remained the same or will be translated correctly on first boot by the package init scripts.
For upgrades within the OpenWrt 25.12 stable series, Attended Sysupgrade is also supported, which allows preserving the installed packages.
Sysupgrade from 23.05 or earlier to 25.12 is not officially supported.
Cron log level was fixed in busybox. system.@system[0].cronloglevel should be set to 7 for normal logging. 7 is the default now. If this option is not set, the default is used and no manual action is needed. fc0c518
Bananapi BPI-R4: Interface eth1 was renamed to sfp-lan or lan4, and interface eth2 was renamed to sfp-wan to match the labels. You have to upgrade without saving the configuration. cd8dcfe
DHCP client identifier: Since 25.12.0, the DHCP clients identify the device with a UUID-based DUID instead of the MAC address. If your ISP's DHCP server has problems with this, set the new sendclientid option to get the behavior of OpenWrt 24.10 back, see "Important changes" above.
bcm53xx devices with NAND flash: Since 24.10, sysupgrade lost the configuration on these devices. This is fixed in 25.12.6, but because the fix is in the firmware that does the flashing, the upgrade to 25.12.6 loses the configuration one last time. Back up your configuration before upgrading and restore it afterwards. 67b18c1
Freescale P2020RDB: The switch was converted from swconfig to DSA. The configuration cannot be migrated, so upgrade without keeping the settings (sysupgrade -n).
TP-Link RE355 v1, RE450 v1 and RE450 v2: The partition layout and block size changed in OpenWrt 25.12.1 to fix configuration loss on sysupgrade. Users upgrading from OpenWrt 25.12.0 or earlier must use sysupgrade -F to force the upgrade. The image must not exceed 5.875 MB (6016 KiB).
Meraki MX60: Direct sysupgrade to 25.12.6 is not possible without manual preparation β meraki_loadaddr must be changed before upgrading, as the default value is insufficient to boot OpenWrt 25.12+. See the device wiki page for instructions.
Sitecom WLR-7100 (X7 AC1200): This device was moved from the ath79/generic target to the ath79/tiny target in OpenWrt 25.12.4. Users upgrading from 25.12.3 or earlier need to flash the new image from the ath79/tiny target (use sysupgrade -F).
eth1 to wan β check and update your network configuration after upgrading.cake_mq): throughput may be unexpectedly low on some configurations. #22344Full release notes and upgrade instructions are available at
https://openwrt.org/releases/25.12/notes-25.12.6
In particular, make sure to read the known issues before upgrading:
https://openwrt.org/releases/25.12/notes-25.12.6#known_issues
For a detailed list of all changes, refer to
https://openwrt.org/releases/25.12/changelog-25.12.6
To download the 25.12.6 images, navigate to:
https://downloads.openwrt.org/releases/25.12.6/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org?version=25.12.6
As always, a big thank you goes to all our active package maintainers, testers, documenters and supporters.
Have fun!
The OpenWrt Community
To stay informed of new OpenWrt releases and security advisories, there
are new channels available:
a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce
a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14
other announcement channels (such as RSS feeds) might be added in the
future, they will be listed at https://openwrt.org/contact
OBS-Studio-33.0.0-rc2-Sources.tar.gz: eb0e7a3e7de80c8287e8f79f17e9668b1b442166ec83e98be3189de0658e734e
OBS-Studio-33.0.0-rc2-Ubuntu-26.04-x86_64-dbsym.ddeb: d841e42f585fd0342cc6fe43c61b81da1b99a32022a3f7ebc43b33ac370b0cd5
OBS-Studio-33.0.0-rc2-Ubuntu-26.04-x86_64.deb: 192cedf133fdff0aab69b25fc1352a2b70bbfbcd3c8bfe402299cdd2b3d54c5c
OBS-Studio-33.0.0-rc2-Windows-arm64-PDBs.zip: 01e7c384fdfca68da782dfe7ef6b0ebea23b478bade23b43a45f970960ea9ea3
OBS-Studio-33.0.0-rc2-Windows-arm64.zip: af0260b5a54bfe76c227735eab30f37e7d71951320188f618ad15bc9327e2a2a
OBS-Studio-33.0.0-rc2-Windows-x64-Installer.exe: b69aa721a77c22768fa13a2a44b0e878fc8a908ecc9d6e643fe8581dd745b008
OBS-Studio-33.0.0-rc2-Windows-x64-PDBs.zip: 31b1bea2b3ecfa124e87ec77be25564a214bfcfafcd23ced6d1ddcad74f09fdc
OBS-Studio-33.0.0-rc2-Windows-x64.zip: 33d5fab2e23ffbcd0e32a4a33ee11c26ebe7b99276a2e550445b27feb75a4127
OBS-Studio-33.0.0-rc2-macOS-Apple-dSYMs.tar.xz: d65ef9b09b253ae36dd376e4380143725e0cc31d8c63c18274425bf2765fe2c1
OBS-Studio-33.0.0-rc2-macOS-Apple.dmg: ba72fcdd79dcb1f15dbc20cd22d8e540c92fc7a4a0cee048d0e1db74145d393e
OBS-Studio-33.0.0-rc2-macOS-Intel-dSYMs.tar.xz: 86c61cefe7d95a1094ae365f64e30489608b8de9d82c7104aaa44196de973509
OBS-Studio-33.0.0-rc2-macOS-Intel.dmg: 36865933190a18cd67f6dd83946dba32e06956b2499695674408e24ef9a87523
Full Changelog: v0.8.13...v0.8.14
Graphics improvements
Misc UX
APIs
Expressions
Variables
Controls
Misc
Full Changelog: v5.0.7...v5.1.0
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
sd_notify support.Mailbox/set allows moving a mailbox under a parent that already has a child with the same name, and rejects renames that only change the case of a mailbox name with alreadyExists.hickory-resolver patched fork at https://github.com/stalwartlabs/hickory-dns.SMFIP_NOHDRS without SMFIP_NOEOH, so the transaction stalls until it times out.claimUsername claim but has an email claim, the account is built from email without consulting the userinfo endpoint.onSuccessUpdateEmail and onSuccessDestroyEmail entries in EmailSubmission/set that name an existing submission by id update or destroy the Email with the same id instead of the submission's own Email.VacationResponse/set that only sets isEnabled on an account without a vacation response activates an empty Sieve script.
$< in HTML export and align rectangular task-list markers with text.Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -d com.apple.quarantine /Applications/MarkText.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
Full Changelog: v0.20.0...v0.21.2
guestsEntertained to Entertainer interface.Simplex Height Map with a higher width than height.PermissionType for drag_path_area is missing.openrct2 parkinfo objects crashes when called with a scenario instead of save.TrackElement.seatRotation fails on every ride except mazes, where it does not apply.Release created in https://github.com/OpenRCT2/OpenRCT2/actions/runs/38050382779
SHA256 checksums:
eaa68d775d108b86128971eed9a16f2a8a06a0e12c8613b0c8378db1f015dca7 ./OpenRCT2-v0.5.6-windows-symbols-x64.zip
597a85c2d6bfd0f462d9bfbcc3c0d27d0f437b81e56f52dab64409b474b25e4d ./OpenRCT2-v0.5.6-sha256sums.txt
5f57e48dbe438fd6fd5059954afe521a01365a36c11085b190067ea3204b6565 ./OpenRCT2-v0.5.6-macos-universal.zip
8909f8e87ccb8fd08840952101028a6d879b159d78a7c168148bf2c9ac0e2795 ./OpenRCT2-v0.5.6-windows-portable-win32.zip
8198b5ef8b9b07685fc860f3f04ce88a5f07ce6c1e5a9e2badffa811ed0f2eba ./OpenRCT2-v0.5.6-linux-x86_64.AppImage
10fb9aa612bb18d629cd27fc707a89714a481c96b023bbfa89e4c4aad334094c ./OpenRCT2-v0.5.6-windows-installer-win32.exe
cd52a20793a854ddd4c42275ad7ebd7776e5bac931d802638f95a654b66df989 ./OpenRCT2-v0.5.6-Linux-resolute-x86_64.tar.gz
49705d0c3f89fd729254edeece0e43c620396ee0ddbfd50eb59a4ae4ea6df5db ./OpenRCT2-v0.5.6-android.apk
2220407872ed9aba2c7c67dbf46bb321bb7b88b4b526123d8f075938cc4c6c02 ./OpenRCT2-v0.5.6-Linux-noble-x86_64.tar.gz
0e128e3c0293ce18f3244989dfe6e04b21fc3f85e02d904eb531fb404f1b90d9 ./OpenRCT2-v0.5.6-windows-portable-arm64.zip
180fa9e562289af6ee25c738d04d8c872d0a91b9cef2d7d8e949d75aec6c6f58 ./OpenRCT2-v0.5.6-windows-symbols-win32.zip
d439ad72b5206f8ad5b75f7419c13a2dd93743f6636bd37987cc1292375e6e42 ./OpenRCT2-v0.5.6-Linux-bookworm-x86_64.tar.gz
d26c44b12fbb54dd0a436568c328230cd9d80d84e4e8ebe534e842e7470b0147 ./OpenRCT2-v0.5.6-windows-symbols-arm64.zip
af2f9c76c4b56441eb6c4cda3cd009865df56b147497e86d410668ccf5d48da6 ./OpenRCT2-v0.5.6-Linux-trixie-x86_64.tar.gz
64d88e94c4b926e77ec9738255050f8003583a8a13947dec8bc36e26020cca88 ./OpenRCT2-v0.5.6-windows-installer-arm64.exe
b7c56919f82e0d8edde5437fa0e344b9e2b47a17e94a5b79739c17f308f22f3e ./OpenRCT2-v0.5.6-windows-installer-x64.exe
6c07393312a828f845c71c9c18cefe2da5b759fe2b17ee02fbb9e4540b396280 ./OpenRCT2-v0.5.6-windows-portable-x64.zip
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.11...v0.8.12
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.10.09GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.10.09
General
API
Media-Over-QUIC
RTSP
RTMP
HLS
WebRTC
Dependencies
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check
OBS-Studio-33.0.0-rc1-Sources.tar.gz: 1a73e95b5ad8addd79aeb5b48e5292b982dd2ffa69744294930a7c474c958fe0
OBS-Studio-33.0.0-rc1-Ubuntu-26.04-x86_64-dbsym.ddeb: d85dc2bdd26a21f29ea0a3dee8a6a31ae0a2a142df48fc56d41df9fb3571711e
OBS-Studio-33.0.0-rc1-Ubuntu-26.04-x86_64.deb: 7f2264131413b8b0d49b74c5693c044c4884f5ca923f08cb07c3ffd2b7369024
OBS-Studio-33.0.0-rc1-Windows-arm64-PDBs.zip: b855ec251576313f6de129213f0b57ece8d3b5970b6fb402f528b5791feeea0b
OBS-Studio-33.0.0-rc1-Windows-arm64.zip: 7205f9c3acb048c167c7fc38b2c3efd11d534f0f42242caa496a036785471a3c
OBS-Studio-33.0.0-rc1-Windows-x64-Installer.exe: 89cda9af39aaa0c6bbdae4d5db3bbfed127c82a6ef57b79acc6a745a872fa85c
OBS-Studio-33.0.0-rc1-Windows-x64-PDBs.zip: e7be732e7d61a59418cfdbdbe4790424ed8d3441676bd03c70710f4baef4f386
OBS-Studio-33.0.0-rc1-Windows-x64.zip: 2934bda03b5288378ca32a51dfe1003d4a557531a6af2ba105d7671d7557ad1f
OBS-Studio-33.0.0-rc1-macOS-Apple-dSYMs.tar.xz: 30e35c09bbbe7bed0d203cdd7439b1a239d9c4f9ef5c32570c5e1a0596ad5e67
OBS-Studio-33.0.0-rc1-macOS-Apple.dmg: 9322e6266140c0b82378848ded76d22cb721de550282c525d57b05590c94bbf6
OBS-Studio-33.0.0-rc1-macOS-Intel-dSYMs.tar.xz: dbe0dc36f8f064ccda4ec835ffcb279349efa88583b315336b576fa8e41b8737
OBS-Studio-33.0.0-rc1-macOS-Intel.dmg: fd0fd30ad54c4c18a4849fdfe2a3c8c7bd5e8f49325cb2861fc10b65c7aef683
Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -d com.apple.quarantine /Applications/MarkText.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
Full Changelog: v0.21.0...v0.21.1
The macOS arm64 assets below crash immediately on launch with EXC_BAD_ACCESS (Code Signature Invalid). A newly added Electron fuse rewrote the Electron Framework binary, which invalidated its ad-hoc signature, and the build was not re-signed afterwards.
Two ways to get a working app:
sudo codesign --force --deep --sign - /Applications/MarkText.app
xattr -cr does not fix this crash. The macOS Intel (x64) and the Windows/Linux builds are unaffected.
Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -d com.apple.quarantine /Applications/MarkText.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
Full Changelog: v0.20.0...v0.21.0
Fixed TFA enforcement to use effective permissions (#28176)
Policies with an IP allow list are now accounted for when enforcing TFA within the allowed range.
Improved license handling so a failed license request keeps the current license in effect and is retried by a scheduled license check, with a warning in the app showing why the license could not be renewed and when it lapses (#28331)
The /server/license response no longer includes downgrade_reason. Read invalid_reason instead, which also reports why a license that is still in effect could not be renewed.
@directus/errors no longer exports LicenseManagedByEnvError, LicenseOfflineUnsupportedError, LicenseResolveIncompleteError or LicenseServiceUnavailableError, or their error codes. License request failures now surface as LICENSE_INVALID with a failure extension, or as the standard FORBIDDEN, INVALID_PAYLOAD, REQUESTS_EXCEEDED and SERVICE_UNAVAILABLE errors.
Removed the ip-matching dependency (#28243)
Policy ip_access and IMPORT_IP_DENY_LIST values are now more strictly validated. Subnets with a malformed prefix such as 10.0.0.0/ 24 or 10.0.0.0/+24, are no longer accepted.
Existing policies that already store such a value will fail every request for users with that policy.
Fixed requests failing after a process was stopped during schema building (#28316)
CACHE_SCHEMA_MAX_ITERATIONS has been removed. CACHE_SCHEMA_SYNC_TIMEOUT now also limits the schema build itself and defaults to 60000 ms.
If you have configured a lower value, make sure it is long enough for your schema to finish building.
Updated outdated type definitions for directus_notifications, directus_permissions, directus_extensions, directus_fields, directus_activity, directus_collections, and directus_revisions (#28072)
Breaking changes in @directus/sdk:
DirectusNotification.id is now correctly typed as number.DirectusField.schema is now nullable.FieldMetaConditionOptionType has been removed; condition options is now Record<string, any>.FieldMetaConditionType.hidden, readonly, required, and options are now optional, and rule is typed as a filter.ExtensionSchema properties are now optional, and DirectusExtension.schema can also be an ExtensionSchemaEntry.Breaking changes in @directus/types:
Notification.id is now correctly typed as number.
Notification.status and timestamp are now nullable.
@directus/api
@directus/errors
@directus/utils
@directus/types
@directus/sdk
<a href><img></a> markup now survives loading without triggering the normalization warning (#28289 by @alvarosabu)hash option to redis memory, improving cache clear performance (#28214 by @Nitwel)usingLock to override the lock's duration and retry count. A signal is now passed to the callback that aborts if the lock is lost before it finishes (#28331 by @ComfortablyCoding)DEFAULTS (#28077 by @br41nslug)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)directus_notifications, directus_permissions, directus_extensions, directus_fields, directus_activity, directus_collections, and directus_revisions (#28072 by @kheiner)version to only change when the generated spec does (#28109 by @kheiner)geometry.Point) (#28308 by @PINYOPATTANAWASANPORN)hash option to redis memory, improving cache clear performance (#28214 by @Nitwel)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)getRelationInfo (#28246 by @Nitwel)__proto__ field alias being able to write a property onto Object.prototype. (#28211 by @datrixlab)directus-extension validate passing or crashing on missing extension paths (#28320 by @PINYOPATTANAWASANPORN)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)geometry.Point) (#28308 by @PINYOPATTANAWASANPORN)getRelationInfo (#28246 by @Nitwel)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)undici, axios, nodemailer, basic-ftp, ip-address, and fast-uri to address CVEs (#28330 by @br41nslug)@directus/app@18.1.0@directus/api@40.0.0@directus/cli@12.3.1@directus/composables@11.6.4@directus/constants@14.5.0create-directus-extension@12.1.6@directus/env@6.4.0@directus/errors@3.0.0@directus/extensions@4.0.6@directus/extensions-registry@4.0.5@directus/extensions-sdk@18.0.6@directus/memory@4.1.0@directus/pressure@4.0.6@directus/schema-builder@1.0.4@directus/specs@15.2.1@directus/storage-driver-azure@13.0.6@directus/storage-driver-cloudinary@14.0.3@directus/storage-driver-gcs@13.0.6@directus/storage-driver-s3@14.0.3@directus/storage-driver-supabase@5.0.3@directus/stores@3.0.2@directus/system-data@4.8.0@directus/themes@3.0.1@directus/types@18.0.0@directus/update-check@14.0.1@directus/utils@14.0.0@directus/validation@3.0.6@directus/sdk@27.0.0
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
MaskedEmail with emailDomain fails with forbidden for every domain when the account has addresses on more than one domain.mobilesync), are answered with the Outlook settings instead of error 601.LOGIN and AUTHENTICATE with a wrong, expired or unknown app password or API key are answered with an untagged NO, so clients keep waiting for the command to complete until the connection times out.NO before the connection is closed.DkimManagement task is created for them.PYZOR.match expression are never enforced, including the global queue quota created on first start.LOG, LOG.old.*) grows without limit because log rotation and retention are left at RocksDB defaults.
OBS-Studio-33.0.0-beta6-Sources.tar.gz: c0774b6d3d44b4ceeac9640ba752493c5e038e594f2f75fe45902352a896fdc1
OBS-Studio-33.0.0-beta6-Ubuntu-26.04-x86_64-dbsym.ddeb: 13954f91f15d18a91ac9fc1d37b397f53c511eaf7a319337a6fc461678981bcc
OBS-Studio-33.0.0-beta6-Ubuntu-26.04-x86_64.deb: 743d9d45f24e3206c382ebf15325f57e241655ee2b3d0e04119da2399cd12528
OBS-Studio-33.0.0-beta6-Windows-arm64-PDBs.zip: 905d01dbc84655176d8bea82a98793b36ee8cdd41ff2ec14b87ded8ac87fd6a3
OBS-Studio-33.0.0-beta6-Windows-arm64.zip: 51d411d19f11d5c1d54119677ec55aa6af8a1773edc4893d9753eb6cb60728d7
OBS-Studio-33.0.0-beta6-Windows-x64-Installer.exe: 2718bb13120cae63da3ad8c7c6da97d5dca72453c04aca710a1c43f052aeffa9
OBS-Studio-33.0.0-beta6-Windows-x64-PDBs.zip: 8a636784183fcf7151bf8a6878019c2754107e358759fc3c0a6b5db0218b092b
OBS-Studio-33.0.0-beta6-Windows-x64.zip: e132c58934a5b0755fff0fc92a49d665a592e323ce0871618738721e20d0ebb3
OBS-Studio-33.0.0-beta6-macOS-Apple-dSYMs.tar.xz: e1b4b66245179fdc59e391ad8f455e7216d7eaef23fac61fc93e6bbe8da5a533
OBS-Studio-33.0.0-beta6-macOS-Apple.dmg: 06fe6deaf96645f88593dbc2085c2195714584df3989f4c1aba1a3bfe0be4c40
OBS-Studio-33.0.0-beta6-macOS-Intel-dSYMs.tar.xz: 707ad42c7eaa7a0d6bca419aca11a06f785275306eb683dfdfeb9356b5fc55b2
OBS-Studio-33.0.0-beta6-macOS-Intel.dmg: 80351ba0c886ab8d7c0f32ab782fadf335e5c644c8483f43ced994756cfda3c9
Full Changelog: v0.8.10...v0.8.11
Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:
xattr -cr /Applications/marktext.app
All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:
sha256sum -c SHA256SUMS.txt --ignore-missing
/ trigger when quick-inserting front matter by @Jocs in #4481_ prefix for private members via lint by @Jocs in #4535c++/h++ as aliases for the cpp code grammar by @Jocs in #4794\% as a comment by @Jocs in #4795$β¦$ (#5446) by @Jocs in https://github.com/marktext/marktext/pull/5449marktext on PATH on every platform by @Jocs in https://github.com/marktext/marktext/pull/5459any in .vue (#4257) by @Jocs in https://github.com/marktext/marktext/pull/5521Full Changelog: v0.19.0...v0.20.0
Full Changelog: v5.0.6...v5.0.7
OBS-Studio-33.0.0-beta5-Sources.tar.gz: 5b8d65c0b2981aa779eaf5bae9739ba5681290f03025b9eddd40cf5da2eb566a
OBS-Studio-33.0.0-beta5-Ubuntu-26.04-x86_64-dbsym.ddeb: 6fd06d0ee256f560875622da516880b119083b725e9280a7105221d589128952
OBS-Studio-33.0.0-beta5-Ubuntu-26.04-x86_64.deb: db1fdfad893d4d20adb3f899bd8ee24cf26b6088e23764c5ffbfe3eef6ca6153
OBS-Studio-33.0.0-beta5-Windows-arm64-PDBs.zip: 8b5860e48349a7d90794ab61e8b42458f270ccc4aeb53c4aa6d1f0469335b9af
OBS-Studio-33.0.0-beta5-Windows-arm64.zip: 7a7b3c3759dfc49df65d1b4e14cc23ad6092f4f36d83e44ea2978ec9f54a3c9f
OBS-Studio-33.0.0-beta5-Windows-x64-Installer.exe: 7ee61670a7e8738b4753487d3c3e75f30c35ddbe2937cdb75eb31b86054c3cf9
OBS-Studio-33.0.0-beta5-Windows-x64-PDBs.zip: 643c1b735da59b40052887ec0b891bd2852d2bd47c87227f268e3da026a0a86f
OBS-Studio-33.0.0-beta5-Windows-x64.zip: 8de0d330582083bc3b429e7dbe01d1fbc995dfdeeb3229eedf454a2f931c6481
OBS-Studio-33.0.0-beta5-macOS-Apple-dSYMs.tar.xz: 5b0545a3724c2920b02aa3df07c76f39bec73b1b814fcf78d1cb53dbae52393f
OBS-Studio-33.0.0-beta5-macOS-Apple.dmg: e7d289a68ee27e0d21900f380fd3d0c2c4c5c48ec0e1661fe6b093258b07eaa5
OBS-Studio-33.0.0-beta5-macOS-Intel-dSYMs.tar.xz: f4192371f6bc9ab92f2403893eb3c945fda37585185b3bce31a6d4fdef7a7229
OBS-Studio-33.0.0-beta5-macOS-Intel.dmg: 33b5a80275eaa7331cb39a71d530e63d3937672c62d6c9fb5c48039490b255df
Full Changelog: v0.8.9...v0.8.10