Lees weergave
Dopamine 3.0.10
[3.0.10] - 2026-08-28
Changed
- Improved the equalizer design
- Updated the German translation (Thank you @mgfirewater)
- Updated the Russian translation (Thank you @adem4ik)
Fixed
- Empty strings in Equalizer with incomplete language packs
- When sorting large playlists, songs sometimes still move back to their original position.
- Mini player has incorrect size on macOS
- Window restore issues on macOS and GNU/Linux (Wayland)
1.61 Update: Improved Material System Update
Today, we bring good news to our #BestCommunityEver! With the upcoming 1.61 update, the improved material system will be implemented on three additional trucks, so read on to find out more!
We first introduced the improved material system with the 1.60 update, when it was added to the DAF NGD and MAN TG3 TGX in Euro Truck Simulator 2, and the Mack Anthem and Western Star 49X in American Truck Simulator. With the next update to our games, we will be expanding this feature to the International LT and International LoneStar in American Truck Simulator, as well as the Volvo FH Series 6 in Euro Truck Simulator 2!
But that's not all, as we have also polished a few details in the interior and completely redesigned the seats in the International LT and LoneStar to better match their real-life counterparts. Along with that, we are introducing a new Diamond interior option with leather seats for both trucks!
The improved material system significantly enhances the lighting and visual quality of vehicle interiors, with a particular focus on how different interior materials react to light. This results in a more detailed, readable, and visually pleasing cabin environment. It also makes the differences between materials such as leather, fabric, plastic, and metal much more apparent, even in low-light conditions.
As promised, we are gradually bringing this feature to more trucks, allowing you to enjoy beautiful cabin interiors across a wider range of vehicles. If you would like to learn more about what the process of implementing this feature on new vehicles looks like, make sure to check out our Under the Hood blog, where we spoke with colleagues working on the improved material system.
We hope you will be happy to see the improved cabin interiors in more trucks with this upcoming update! Remember to stay tuned for more news from our games by following us on our X/Twitter, Facebook, Instagram, Bluesky, and YouTube. We would also appreciate it if you could sign up for our newsletter, so you can be informed. Until next time, keep on trucking!
Part-DB 2.16.0
Warning
After upgrade, you need to run php bin/console doctrine:migrations:migrate (or equivalent) as webserver user after upgrade.. If you are running a docker container, use sudo docker exec --user=www-data partdb php bin/console doctrine:migrations:migrate, or sudo -E inside the docker container, to ensure that the migrations are applied to the correct database.
Note
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8
Part-DB 2.16.0
New Features
- Add a component image generator for resistors, capacitors and inductors @Sebbeben in #1435
- Improved KiCAD API which should massively increase load speeds in KiCAD (after PR #1489)
- Added MCP tools to get attachment contents
- Added MCP tools to create, edit and delete parts, storage locations, categories, footprints, manufacturers and suppliers
- Log the access_method in change logs, to see whether the change was done via WebUI, REST API or MCP
- Log an unique request ID with change logs, so that all changes done in a single request can be easily grouped together
- Show max_input_vars and sqlite enforce fk status in server info page
- Allow to create a new lot at new location via lot move dialog @calebwest-SS in #1500
- Allow to edit part BOM entries from BOM table (PR #1488)
- Added "performance mode" for projects. When an project has more than 100 entries, the BOM cannot be edited via the project admin page anymore to avoid issues with too large forms.
Bugfixes
- Fixed attachment merging by @d-buchmann in #1498
- Allow alternative names with commas by @d-buchmann in #1465
- Fix merge part confirmation dialog by @mkne in #1506
Other changes
- Updated dependencies
- Updated GNU Unifont
- Updated documentation
- Updated translations
- Updated KiCAD lists
- Add VS Code dev container support by @alangibson in #1490
- Increased max_input_vars in docker images
- Bump mcp/sdk to v0.7.1 (fixes CVE-2026-53965 SSE buffer DoS) by @Sebbeben in #1495
New Contributors
- @robertpogue made their first contribution in #1487
- @duleorlovic made their first contribution in #1491
- @alangibson made their first contribution in #1490
- @calebwest-SS made their first contribution in #1500
Full Changelog: v2.15.0...v2.16.0
Release v2.4.5
You can install pre-built binaries from https://repo.dovecot.org/
Docker images can be found at https://hub.docker.com/r/dovecot/dovecot
Please review https://doc.dovecot.org/2.4.4/installation/upgrade/2.3-to-2.4.html and https://doc.dovecot.org/2.4.4/installation/installation.html.
Important
There are experimental features in 2.4, one is enabled with --enable-experimental-mail-utf8, and another with --enable-experimental-imap4rev2, and you also need to set mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in config.
Critical bug fixes
- CVE-2026-27852: Messages with a huge number of From/To/Cc/etc email addresses
could result in excessive memory usage. - CVE-2026-33263: Submission: Login service crashes with panic once
mail_max_userip_connections limit is reached. - CVE-2026-33604: The SMTP outbound dot-stuffing mechanism does not properly
escape dots following a bare \r in message bodies, potentially allowing
spoofed emails via malicious end-of-DATA injection. - CVE-2026-33606: Mail content stored by a user can be crafted so that it is
interpreted as dsync protocol commands when an administrator later runs dsync
with the stream protocol, for example during a migration. - CVE-2026-33607: IMAP LIST command could be used to cause excessive CPU usage.
- CVE-2026-40014: IMAP THREAD command could have used excessive amount of CPU
processing a single email with a massive number of Message-IDs in References
header. - CVE-2026-40015: Invalid IMAP command sent to imap-hibernate process might
crash it. - CVE-2026-40017: IMAP THREAD command could have used excessive amount of CPU
processing emails with a large number of specially crafted Message-IDs in
References header. The fix requires a new dovecot.index.thread file format,
which is enabled only after setting dovecot_storage_version or newer. This
rebuilds the index, so it will cause some extra CPU usage and extra
metacache disk IO usage. It shouldn't cause (much) extra object storage IO,
because all the fields should be coming from dovecot.index.cache. - CVE-2026-40203: When IMAP COMPRESS=DEFLATE was enabled, an attacker
could send mails into a victim's mailbox and observe network traffic to
determine whether a secret message matched a known string by comparing
compressed response sizes (a CRIME-style attack). The fix resets the
compression dictionary after each IMAP command, preventing information from
leaking between commands. - CVE-2026-40205: If multiple OAUTH scopes were required, then
this could have been only partially enforced with certain
configurations. - CVE-2026-4200: XCLIENT FORWARD allows to forward key only passdb
fields without the "forward_" prefix which allows connections from
trusted networks to set nopasswd field which allows to skip the
authentication. - CVE-2026-42391: Pre-login IMAP ID command could have used excessive
amount of memory, causing the process to become killed and disconnecting
all the other IMAP connections being proxied by the process. Or
alternatively it could have caused excessive CPU usage, slowing down
all the other IMAP connections being proxied by the process. - CVE-2026-42392: If URLAUTH is enabled, sending an invalid IMAP URLFETCH
can result in an untagged NO response containing uninitialized memory,
potentially leaking sensitive data. - CVE-2026-42393: Doveadm password length or API key length could still
be determined via timing based attacks. - CVE-2026-42395: XCLIENT FORWARD command from login_trusted_networks
could have been used to cause login processes to crash. - CVE-2026-52681: Sieve resource usage (sieve_max_cpu_time) was tracked
in the active Sieve binary. Switching to a different active binary
could have been used to reset (bypass) the resource usage. - CVE-2026-52687: Using IMAP COMPRESS ZSTD command can cause excessive
memory usage in imap-login process, possibly making it reach vsz_limit
and kill all the connections being served by the process. Fixed by
disabling COMPRESS command with all other compression algorithms than
the standard DEFLATE. - CVE-2026-73208: In oauth2, scope/aud checking was done with JWT tokens.
Now it requires all scopes. - CVE-2026-73209: Sending IMAP COMPRESS package containing zero-length
frames crashes imap or imap-login process.
Changes
- auth: SIGHUP no longer flushes the passdb cache and SIGUSR2 no longer
logs cache statistics. Use "doveadm auth cache flush" and the new
"doveadm auth cache status" instead. - auth: The OTP authentication mechanism, the {OTP} password scheme and
the passdb set-credentials support have been removed. They were
unmaintained and unused. This also drops the passdb_sql_update_query
setting. - config: doveconf no longer prints a flat global setting when a
top-level named filter overrides the same setting. - doveadm: The doveadm protocol has been bumped to v1.4. The server uses
the newer multiplex stream format with clients supporting it. Older
clients keep working unchanged. - imap: Change imap_compress_on_proxy default to yes.
- lib-dict-extra: Increase dict client request timeout from 30s to 65s,
so it stays above the SQL/Cassandra query timeout. - lib-http: HTTP requests are now parsed strictly: obsolete line folding
(obs-fold) and a bare LF line terminator are rejected. Both are
request desynchronization/smuggling risks. HTTP responses are still
parsed leniently. - lib-storage: A '~' in a mailbox name is now escaped only when it is at
the beginning of the mailbox name, not at the beginning of every
hierarchy part. Directories written by older versions are migrated
automatically while listing mailboxes. - lib-var-expand: Add %{time:unix} provider and the epoch, from_epoch,
date, iso8601 and escape filters. Deprecates the old time providers. - lib-var-expand: The safe filter must now be the last filter in the
chain. - master: Increase the timeout after config reload before killing still
running old processes from 6s to 35s, so that lib-master can stop them
gracefully first.
New features
- config: Support heredoc syntax for multi-line setting values:
key = <<EOD ... EOD. doveconf now outputs inline SET_FILE contents
(e.g. ssl_ca) using heredoc instead of the "inline:" prefix. The
"inline:" form is still accepted. - configure: Build imap-hibernate also when only kqueue notify is
available. - doveadm: Add "doveadm auth cache status" command, with --reset for
clearing the counters. - doveadm: dump - List all supported dump types, and print the key type
also for KEM and unsupported keys. - fts-flatcurve: Add support for phrase searching. This fixes false
positives where the searched words existed, but not as a phrase. - fts-flatcurve: Delete the FTS index directory also when a Maildir
mailbox is deleted. - imap: Add [THROTTLED] response code to tagged replies when a plugin
has throttled the command. - last-login: Add last_login_dict_fields setting for updating multiple
dictionary fields at login. - lib-dcrypt: Add ML-KEM-512/768/1024 support with OpenSSL 3.
- lib-dcrypt: Support AEAD with Dovecot key encryption.
- lib-settings: Expand %{variables} also in strlist and boollist keys.
- lib-sql: sqlite - Add sqlite_busy_timeout setting, default 1s.
- login-common: Log the destination also when a proxy connection fails.
- quota: Update quota-clone also when "doveadm quota recalc" is run.
Bug fixes
- Fix building on systems with a signed 32-bit time_t.
- Fix building with Lua when LUA_LIBS contains linker flags such as -L.
- anvil: Fix busy loop eating CPU after an admin socket connection was
disconnected. - auth: Fix authentication failing after a password change when the
passdb cache entry was verified by an auth worker. - auth: Fix the credentials scheme of one passdb leaking into the next
one during a multi-passdb lookup. - auth: oauth2 - Fix losing userdb_* fields during OAUTHBEARER
authentication. - auth: passwd-file - Fix %{passdb:...} and %{userdb:...} expansion
returning garbage or crashing. - config: Fix crash in "doveconf -f" for a filter that includes a @group.
- config: Fix crash when including a default @group into a filter.
- config: Fix hiding secrets in doveconf output.
- config: Fix startup failures with some settings containing %{variables}.
- configure: Fix BUILD_IMAP_HIBERNATE detection.
- doc: solr-schema-9.xml - Add the mandatory tokenizer class attribute.
- doveadm: compress-connect - Fix writing server input to a non-blocking
stdout. - doveadm: fs delete - Fix crash with concurrent async deletes.
- doveconf: Fix bogus "Multiple settings matched" error when stdout is
redirected to a file that already has content. - dsync: Fix truncating a mailbox attribute value when it is compared to
the local one, e.g. truncating a Sieve script. - dsync: backup - Mailbox attributes changed or created only in the
destination are now reverted or deleted. - fts-flatcurve: Ignore index directory entries that vanish during
iteration. - fts: Don't run FTS optimize on forced resync.
- fts: build-mail - Fix accessing Content-Type header buffer out of
bounds. - imap-login, pop3-login: Tolerate SASL continuations "+" without a
trailing space when proxying authentication. - imap: Don't report FETCH output stream errors as
"BUG: Unknown internal error". - imap: Fix hibernation always failing on FreeBSD.
- imap: Fix panic on GETMETADATA with an invalid UTF-8 mailbox pattern.
- imapc: Don't send SEEEN/UNSEEN to the remote server when private
indexes are used. - imapc: Fix SEARCH results pointing at wrong messages after an untagged
EXPUNGE. - imapc: Fix SORT returning an empty result when search criteria were
used. - imapc: Fix crash when copying a mail that was already expunged in the
source mailbox. - imapc: Fix stale SEARCH/SORT results after a STORE in the same
session. - imapc: Honor imapc_features=no-search also for SORT.
- imapc: Properly handle search criteria that can be sent to remote server.
- lib-dcrypt: Don't panic on key algorithms the backend doesn't support.
- lib-dcrypt: Fix x9.62 ECDSA signatures randomly failing verification.
- lib-dict-backend: cdb - Fix use-after-free of the returned key.
- lib-dns-client: Fix handling of a disconnect initiated by the
dns-client service. - lib-fs: Fix panic in fs_write_stream_abort(), e.g. when the disk is
full during FTS indexing. - lib-index: Fix "File is already open" error when appending to the
transaction log while another process is rotating it. This showed up
as "NO [SERVERBUG] Internal error occurred." without any logging. - lib-ldap: Fall back to system default CA paths, needed for OpenLDAP
built against GnuTLS. - lib-mail: istream-binary-converter - Fix heap use-after-free with a
bodyless MIME part. - lib-mail: message-parser - Fix out of bounds read with an empty
preamble, fix skipping the epilogue boundary line, and degrade to a
re-parse instead of panicking with an inconsistent cached MIME tree. - lib-master: Fix kick reason when the KICK-USER-SIGNAL command arrives
late, which logged "Killed with signal 15" instead of "User kicked". - lib-oauth2: jwt - Fix use-after-realloc, guard against an empty body
segment and percent-encode bare "." and ".." identifiers. - lib-program-client: Fix panic upon irregular termination.
- lib-settings: Fix sorting of the settings history, which caused
changed defaults and renames to be ignored once a plugin registered
its own history, if dovecot_config_version has been set to greater
than 2.4.0. - lib-smtp: Fix assert with an empty broken localpart.
- lib-smtp: xclient - Reject an invalid HELO parameter with 501.
- lib-sql: pgsql - Fix binary field values for rows after the first.
This mainly affected dict-sql maps with hexblob fields. - lib-ssl-iostream: Fix crash at process exit with OpenSSL 4.0.
- lib-storage: Don't log an error when the client resets the connection
while saving a mail. - lib-storage: Fix crash when reverting a failed mailbox deletion.
- lib-storage: Fix decoded size calculation for base64 attachments,
which could delete the cache record of a mail with a detached
attachment. - lib-storage: Fix handling escaped mailbox names in the mailbox list
index. - lib-storage: Fix rewriting non-NFC subscriptions with mUTF-7 storage
names, which caused repeated rename errors. - lib-storage: Fix searching flags when the view is not up to date. This
broke e.g. a pipelined UID STORE +FLAGS \Deleted followed by UID
EXPUNGE. - lib-storage: Fix the mailbox vsize header not being repaired when it
is corrupted, causing wrong mailbox sizes to be reported. - lib-storage: thread - Fix panic when running IMAP THREAD in multiple
connections in parallel. - lib-var-expand: Reject an empty separator in the index filter, which
caused an infinite loop. - lib: Fix crash and out of bounds reads when decoding IDN addresses.
Reachable only with the experimental mail UTF-8 support enabled. - lib: ioloop - Fix panic and delayed timeouts when time moves forwards.
- lib: ostream-multiplex - Fix stalls, busy loops and a panic when
streaming data through a multiplexed connection, e.g. IMAP FETCH
through a login proxy or TLS connections. - login-common: Fix connection hanging if an ostream write failed. This
happened at least with HAProxy health check connections. - login-common: Fix real_remote_ip being looked up incorrectly.
- login-common: Reject proxy credentials with ASCII control characters.
- login-proxy: Fix "doveadm kick" for proxied connections in
high-security mode, and log "Kicked by admin" as the reason. - maildir: Fix random SEARCH failures when another session concurrently
expunges mails. - quota: Fix maildir quota dropping to zero after IMAP MOVE or REPLACE.
- submission-login: proxy - Fix crash and unbounded memory usage with a
multi-line or malformed AUTH reply from the backend.
v4.3.14
Fixes
- Fixed standalone Docker destination setup on non-Swarm servers by creating networks with Docker's default bridge driver instead of the Swarm-only overlay driver.
Full Changelog: v4.3.13...v4.3.14
v4.3.13
Features
- Added a one-click Executor service template with persistent storage and health checks (#11530).
Improvements
- Served profile avatars and project icons directly from configured S3 storage or an optional CDN, with local routes as a fallback.
Fixes
- Fixed missing service logos in global search and the service catalog by retrying a remote source before showing the default icon.
- Gave Sentinel startup migrations enough time to finish before Docker health checks could restart the container.
- Fixed stale Livewire keys and refresh races that could leave domain, storage, file, log, proxy, and scheduled job controls unresponsive after list changes.
- Preserved PostgreSQL init script identity when files were renamed.
- Rejected single-label hostnames in application and service domains while continuing to accept IP addresses.
- Preserved custom application container names during consistent deployments and removed containers left under legacy generated names.
- Fixed navigation after deleting or converting services, backups, scheduled tasks, sources, storage, and destinations.
What's Changed
- feat(services): add Executor one-click deployment template by @andrasbacsai in #11530
Full Changelog: v4.3.12...v4.3.13
Release 2026.08.28
Docker Images
Docker images have been built and pushed:
Docker Hub:
alexta69/metube:latestalexta69/metube:2026.08.28
GitHub Container Registry:
ghcr.io/alexta69/metube:latestghcr.io/alexta69/metube:2026.08.28
Changes
- feat: collapse the Downloading, Completed and Subscriptions sections (closes #1070) (7938837)
- fix: show the post-download processing phase in the UI (closes #424) (1251613)
- fix: accept HOST=* so IPv6 users get a dual-stack bind (closes #795) (70d1975)
- docs: fix where the download folder selector lives in the UI (f11b376)
Distribution Release: Ubuntu 26.04.1
5.5.0-beta.0
Changelog
Features
- b5fd864: feat: optional per-device IP address tracking via periodic ARP scan (#1763) (@mwpastore)
Bug fixes
- e3c7342: fix: only allow valid ipv4 addresses as netmask, close #1761 (@seriousm4x)
- 297518f: fix: only allow valid ipv4 addresses as netmask, close #1761 (@seriousm4x)
- d8eafbc: fix: set device status for lazy ping devices, close #1762 (@seriousm4x)
Others
- df7a577: remove info (@seriousm4x)
- 9057fa7: update deps (@seriousm4x)
- 11bdb8a: use correct pocketbase app values (@seriousm4x)
Asterisk Release 22.11.0
The Asterisk Development Team would like to announce
the release of asterisk-22.11.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.11.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 22.11.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-22.11.0
Links:
Summary:
- Commits: 39
- Commit Authors: 16
- Issues Resolved: 28
- Security Advisories Resolved: 0
Asterisk Release 23.5.0
The Asterisk Development Team would like to announce
the release of asterisk-23.5.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.5.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 23.5.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-23.5.0
Links:
Summary:
- Commits: 39
- Commit Authors: 16
- Issues Resolved: 28
- Security Advisories Resolved: 0
Asterisk Release 20.21.0
The Asterisk Development Team would like to announce
the release of asterisk-20.21.0.
The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.21.0
and
https://downloads.asterisk.org/pub/telephony/asterisk
Repository: https://github.com/asterisk/asterisk
Tag: 20.21.0
This release resolves issues reported by the community
and would have not been possible without your participation.
Thank You!
Change Log for Release asterisk-20.21.0
Links:
Summary:
- Commits: 39
- Commit Authors: 16
- Issues Resolved: 28
- Security Advisories Resolved: 0
Road Trip: Vehicle Configuration & Purchase Process Video Trailer
Last week, we shared a dedicated blog with you about the Vehicle Configuration & Purchase Process in our upcoming Road Trip module for American Truck Simulator. Today, we're happy to share a new video trailer showing you how it all works!
Our talented video producers have put together a trailer showcasing both the vehicle purchase process and how you can configure and customize your vehicle, which will work a little differently from what you may be used to with trucks in ATS. We hope you enjoy the video and that it gives you a clearer look at what to expect when Road Trip arrives further down the road.
If you're excited about Road Trip, make sure to add its DLCs, the Ford Car Pack and the RAM & Dodge Car Pack, to your Steam Wishlist!
Also, remember to follow us on X, Facebook, Instagram, Bluesky, and YouTube for all the latest Road Trip news and other American Truck Simulator updates, or sign up for our newsletter to stay informed. We'll see you on the road!
Exciting updates for Sneaky Sasquatch come to Apple Arcade

Distribution Release: Butterbian 0.4.0
Distribution Release: NawaOS 2.0
NVIDIA Driver 616.56
Although GeForce Game Ready Drivers and NVIDIA Studio Drivers can be installed on supported notebook GPUs, the original equipment manufacturer (OEM) provides certified drivers for your specific notebook on their website. NVIDIA recommends that you check with your notebook OEM for recommended software updates for your notebook.
Game Ready for STAR WARS Zero Company™
This new Game Ready Driver provides the best gaming experience for the latest new games supporting DLSS and RTX technologies including STAR WARS Zero Company™, Resonance: A Plague Tale Legacy, and Hell Let Loose: Vietnam.
Fixed Gaming Bugs
- DOOM: The Dark Ages & Indiana Jones and the Great Circle: Frame rate may exceed V-SYNC when DLSS Frame Generation 3x or higher is used [6061475]
- Outer Worlds: Texture flicker may be observed while playing after updating to R595 and R610 drivers [6238668]
Fixed General Bugs
- ASUS Armory Crate: GameVisual color profiles are not getting applied when using R590 drivers [5860581]
- Chief Architect: 610.47 driver crash on Geforce RTX 4000 series cards [6226227]
- Claude Desktop: Driver incorrectly detects application as a 3D app [6468260]
- Resolves issue that some instances can cause a driver crash with 32-bit DirectX 12 apps [5725350]
- Tycho Tracker: Unable to create individual OpenCL buffers greater than 2GB [6538978]
Learn more in our Game Ready Driver article here.

uNmINeD 0.20.5-dev
New uNmINeD development snapshot is available for download!
Changes:
- Right click menu items now work in isometric mode
- Fixed isometric block rotation mismatches (mushroom blocks, logs)
- Fixed isometric tile rendering failures (broken in 0.20.4)
- Fixed isometric tile pixel alignment glitches (sometimes there was an one pixel gap between tiles)
v1.9.2 - Security Fix for DNS-Rebinding SSRF (GHSA-24w9-8r42-8jwm) & Spam-Free Push Notifications
1.9.2 (2026-08-26)
Thank you for your donations:
- You? Become a sponsor!
One-time
- Anonymous
- @elsbrock
- @getpankajyadav
Monthly
- @NABarnes
- @felixzieger
- @pr0ton11
- @zeddD1abl0
- @fpauser
- @proxforge
- @spss20
- @elgringoYan
- @pauladams8
- @djpriest
- @umakers
- @zplizzi
- @jeremiah
- @Theoretisch1337
- @svandive
- @HiltMundell
Security
- Calendar / Auth: Pin the resolved IP address at socket-connect time when fetching caller-supplied URLs (iCalendar subscriptions, JMAP login and TOTP token-exchange servers). The public-host check used to run before
fetch()opened its socket, so an attacker who controlled DNS for a hostname could rebind it to loopback, RFC-1918 or cloud-metadata addresses between the check and the connect and read up to 10 MB of the internal response through the unauthenticated/api/fetch-icalendpoint. Redirect targets are now validated the same way (GHSA-24w9-8r42-8jwm, thanks @Tike00)
Features
- Push: Re-sync existing push registrations in the background on app start, so registrations created before the delivery filter existed — or whose Junk mailbox id went stale — get repaired without re-enabling notifications
Fixes
- Push: Stop sending notifications for spam — the push subscription now carries a JMAP
emailPushdelivery filter that excludes$junkand the Junk mailbox (needs a server advertising theemailPushcapability, e.g. Stalwart ≥ 0.16.16; older servers keep the previous behaviour)
v4.3.12
Fixes
- Applied authentication rate limits per real client behind reverse proxies and Cloudflare, preventing visitors from sharing one rate-limit bucket (#11515).
- Reset a server's unreachable counter after a successful connection check, preventing stale failures and false unreachable alerts (#11417, closes #11416).
- Corrected placeholder alignment in code editor fields (#11514, closes #11420).
- Queued Cloud registration verification emails with retries, making delivery more reliable.
What's Changed
- fix(server): reset unreachable_count after successful connection check by @mrcleanandfresh in #11417
- fix(ui): monaco editor placeholder alignment by @peaklabs-dev in #11514
- fix(auth): rate limit by proxy-aware client IP by @peaklabs-dev in #11515
New Contributors
- @mrcleanandfresh made their first contribution in #11417
Full Changelog: v4.3.11...v4.3.12
UniFi Network Application 10.6.101
Overview
UniFi Network Application 10.6.101 adds Drift Inspector, Topology Spotlight, and expanded Safe Ops features, along with the improvements and bug fixes listed below.
Added Drift Inspector to Blueprints in Site Manager
- Make local changes to sites using Blueprint orchestrations, with a clear view of configuration drift and an easy way to resolve it.
Added Topology Spotlight
- Quickly highlight and filter selected devices for easier navigation and troubleshooting in large topologies.
Improved SafeOps features
- Expanded Test & Confirm support to VPN and Management networks.
- Added Nightly Channel AI Optimization with configurable radio selection and an improved optimization algorithm.
Improved Time Machine Experience
- Added Time Machine for Radios to review radio usage metrics, configuration changes, and radio events from the past 24 hours.
- Expanded Port Manager Time Machine to All Ports, making it easier to identify and troubleshoot problematic network segments.
Improvements
- Added a flapping devices filter to Port Manager Time Machine for clients with frequent reconnections.
- Added the Reduced Firewall State Timeouts profile for EFG, EF-Core, and UXG-Enterprise.
- Added a confirmation prompt when updating all devices from the Devices filter side panel.
- Added sorting to Network Lists and descriptions on hover.
- Added column sorting to tables in Settings Overview.
- Added an Allow Empty Password option for RADIUS MAC Authentication.
- Added the ability to disable the LCM screen on meshed UX7 devices.
- Added Sort by Topology to the Devices page.
- Added a notice for unsupported devices in Test & Confirm settings.
- Added a disabled port filter to Port Manager.
- Added an Additional Labels option to Infrastructure Topology.
- Added a warning in Topology when Sonos devices with mixed wired and wireless connections are detected.
- Added validation to prevent OpenVPN Server and Site-to-Site VPNs from using the same UDP port.
- Added a Spotlight selection option in Topology.
- Added the ability to disable insecure OpenVPN compression.
- Added Multicast Suppressor support.
- Requires UAP 8.8 or newer.
- Added a Lock Port to UniFi Device option to Port Manager.
- Requires Switch firmware version 7.6 or newer.
- Added support for adopting multiple U5G devices on the same site over LAN.
- Added support for using Domain Network Lists in QoS Policies.
- Added support for customizing WAN interfaces used for Automatic Speed Tests.
- Added Bulk Update Management to the Devices page.
- Improved Device Auto-Recovery stability.
- Improved Data Plane Protection resiliency.
- Improved Traffic Activity Statistics accuracy.
- Improved the Observability section.
- Improved the device revert experience by allowing easy reversion for all devices with the same Device model and version.
- Improved DHCP Options validation.
- Improved the Dynamic DNS settings user experience.
- Improved RADIUS settings validation.
- Improved Virtual Network management in Topology.
- Improved the AV Manager user experience.
- Improved Honeypot validation.
- Improved the display of unstable links in Infrastructure Topology.
- Improved network subnet validation against static route destinations.
- Improved Port Profiles management in Port Manager.
- Improved Port Manager by automatically opening Time Machine.
- Improved the Device Update confirmation screen by showing the number of connected devices that might be interrupted.
- Improved OpenVPN server configuration files by removing periodic TLS key renegotiation.
- Requires UniFi OS 5.1 or newer
- Improved VPN Server settings validation.
- Improved application startup resiliency.
- Improved the Port Forwarding table user experience.
- Removed the Network Override option for WAN-adopted U5G devices.
- Removed the STP Edge note from Port Manager when Auto STP Edge is disabled.
- Separated the Reset Stats and Clear Last Seen Device actions in Port Manager.
- Enabled DHCP Guarding by default on new networks.
Bugfixes
- Fixed an issue where client devices with a configured Power Source could be automatically enrolled in Device Auto-Recovery.
- Fixed an issue where the AP Stopped Mesh system log could be generated repeatedly after an AP switched to a wired uplink.
- Fixed an issue where the High Traffic alarm incorrectly reported wireless client downloads as uploads.
- Fixed an issue where SD-WAN Mesh VPN tunnels could remain after the configuration was removed.
- Fixed an issue where the client count in the WiFi Broadcast overview was incorrect when MLO clients were connected.
- Fixed an issue where filter counters could flicker on the Connectivity page in rare cases.
- Fixed an issue where the hostname was not set correctly for a UX7 connected via mesh.
- Fixed an issue where a custom APN could be lost after moving a SIM between slots on a U5G.
- Fixed an issue where the UX7 did not display connected wireless clients in the Devices list.
- Fixed a rare issue where opening Client Observability could impact system stability.
- Fixed an issue where DAS/DAC (CoA) was unavailable when using Open security with RADIUS MAC Authentication.
- Fixed an issue where MC-LAG configurations could be lost after restoring a backup.
- Fixed an issue where the Connectivity page was missing some roaming events.
- Fixed a rare issue where adopting an LTE device could cause a gateway configuration error.
Additional information
UniFi OS Server
Going forward, we recommend users upgrade to UniFi OS Server for all self-hosted deployments. It provides the full UniFi OS Platform experience, ensuring you receive the latest features, improvements, and integrations.
UniFi Network Native Application for UniFi OS
Compatible with UDM, UDR, UDR7, UDR 5G Max, Express, Express 7, and UCG models (Ultra, Max, Fiber, and Industrial) on UniFi OS 3.1.6 or later. UDM-Pro, UDM-SE, and UDW have been using it since UniFi OS 5.1.5.
- The UniFi OS update utilizes the application version compatible with your console.
- The manual update process via SSH requires a compatible package. Incompatible packages will be rejected on installation.
- Older UniFi OS versions (prior to UniFi OS 3.1.6) on the UDM and UDR continue to utilize the standard UniFi Network Application for UniFi OS.
Checksums
c8c6398042ebc33a683c96850aa24b44 | UniFi-installer.exe 3128c428fa31641367b85c5c1b9b73a7 | UniFi-Network-Server.dmg fe450c8e838c4fc3c93edaab901585f1 | UniFi.unix.zip 338929b19c8a14cb2f0db93906c1ad52 | unifi_sysvinit_all.deb 353b46578d3c008eb05e8eb9966d6be2 | unifi-uos_sysvinit.deb 4fd0700d012cf05323bea1684f409508 | unifi-native_sysvinit.deb 601df32736f41e40a80a3e472450a3e1 | unifi_sh_api ------------------------------------------------------------------------------------------------------------------------ 75d6fda3b5b11722bda1e1f1680e7513e95de0862fa441ac30fb1b017fecf5ec | UniFi-installer.exe 62aae907b989a34392f82818ce339829b441d59d40643e7d3c8c78b8e3d08fbb | UniFi-Network-Server.dmg 18db9cbe4572de443df204ecf8ff30a906579058cc8d67dfba990ad163881477 | UniFi.unix.zip b5ab809c2680b7ec22106ef19c7942f1fa343338c3eed1829303d95b2ce4fdd7 | unifi_sysvinit_all.deb 0e93972c1bc02aa2352812d84fa15cbb7433b6ec753308e706bd65068a2eda8d | unifi-uos_sysvinit.deb 00c8f461f576a03a6124abec433d2a71fcb854a6f07bebfa77f32cd32a9460e7 | unifi-native_sysvinit.deb 1791685039ea795970bcc7a61eec854058e3e6fc13c52770e31e20f3beb622eb | unifi_sh_api
Early Stable Update for Desktop
The Stable channel has been updated to 153.0.8010.12/.13 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.
You can find more details about early Stable releases here.
Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome
v1.9.1 - Fix Next 16.3 Navigation Redirect Loop & DAVx5 Calendar Sync
1.9.1 (2026-08-26)
Thank you for your donations:
- You? Become a sponsor!
One-time
- Anonymous
- @elsbrock
- @getpankajyadav
Monthly
- @NABarnes
- @felixzieger
- @pr0ton11
- @zeddD1abl0
- @fpauser
- @proxforge
- @spss20
- @elgringoYan
- @pauladams8
- @djpriest
- @umakers
- @zplizzi
- @jeremiah
- @Theoretisch1337
- @svandive
- @HiltMundell
Fixes
- Navigation: Forward every request header through the proxy — Next 16.3's RSC header check rejected the stripped router headers and sent navigations into a 307 redirect loop (#919)
- Calendar: Stop emitting
RSCALE=GREGORIAN;SKIP=OMITon plain Gregorian recurrence rules — DAVx5 rejected them as invalid and Android sync broke (#805, thanks @hildebrandttk)
Nevada Rework Project: Meet the Team
Today, we’re excited to introduce you to some of the talented team members behind the upcoming Nevada Rework for American Truck Simulator. This project brings a fresh look to one of the game’s original states, with updated roads, cities, landscapes, and landmarks that better reflect our current standards.
In this Meet the Team episode, you’ll hear directly from the developers who have been working on different parts of Nevada and learn more about their experiences, favorite locations, and what they’re most looking forward to players discovering. So, let’s take a closer look at the people helping bring the Silver State back to life!
Ella - Senior Map Designer
I’ve been at SCS for close to 7 years, and in that time I’ve worked on many projects, starting my journey with the Utah DLC in 2019. From there, I moved on to work on large cities across several states, such as El Paso, Texas; San Diego, California; and Albuquerque, New Mexico.
As our team’s road specialist, I oversee Nevada’s road layout and also do work on some of the truck stops there, which are critical for our gameplay by providing players an opportunity to refuel and rest. Besides that, I’m working on the city of Phoenix, Arizona, which will be included as another part of our Rework project.
I’m looking forward to watching players explore the newly added locations and seeing their reactions as well as getting their feedback, which is always appreciated. I love creating maps so many people enjoy driving in; that always feels very rewarding on its own.
Johny - Senior Map Designer
I’ve been at SCS for six years. I started out working on sections of Texas and Montana before moving fully into Rework. I’ve been part of the rework team since the very beginning.
Over the years, I’ve worked on both roads and cities, including San Jose, Santa Cruz, El Centro, and Grand Canyon. Most recently, for the Nevada Rework, I’ve been working on the roads around Panaca and Las Vegas, as well as Panaca itself and the northern part of Las Vegas.
I love working on epic scenery, which is why I really enjoyed working on the Grand Canyon, and I’m having just as much fun working on Las Vegas now. I think Nevada will now meet our current standards, and players can look forward to a faithful recreation of the real-life locations.
Pavel - Senior Map Designer
I've been part of SCS for almost four years now. I started my journey with the third phase of the California Rework, where Fresno was the first city I had the opportunity to work on. Since then, I've remained part of the Rework team, working on cities across different projects. As part of the Nevada Rework, I'm currently working on Reno and Fallon.
Reno is being completely rebuilt from the ground up, and one of my main goals was to capture the atmosphere and scale of the city. I put a lot of focus on the city's layout, character and recognizable landmarks, while also trying to keep some of the feeling of the original city that players might remember. The area will also feature reworked sections of I-80, which I'm really looking forward to seeing players experience.
Fallon is a much smaller city, but its location gives it a character of its own. Surrounded by the vast Nevada desert, it feels almost like a small oasis in the middle of nowhere, with the greenery and farmland around the city standing out against the otherwise dry landscape. There is definitely a lot for players to look forward to, and I hope they'll enjoy exploring these areas as much as I enjoyed working on them.
Tom - Map Designer
I'm doing mainly landscape, and I'm in the rework team since California's 2nd phase; my favourite tasks were forests with mountains and lakes, which I haven't seen in a while.
Luckily, Nevada offers dry mountains and hills providing interesting tall horizons which diversify the barren desert.
Nevada is also unique for long straight roads compared to other DLCs. If you enjoy driving into the distant horizon, you'll most likely enjoy it.
Roman - Map Designer
This October marks my fourth year at SCS. In my time on the ATS rework team, I had the chance to work on multiple phases of the California rework, the Route 66 rework project, and now Nevada. With each rework, I slowly figured out that I enjoy making detailed cities more than anything else, though the cities have never been as large or famous as the one I have been working on now.
Las Vegas has been quite a challenge compared to my previous cities, but it also gives many opportunities for fun detail work and making the city feel alive. I hope that the NEW Vegas is fun to explore for new players and even more fun to re-explore for returning trucking veterans.
Margo - Map Designer
Hi there! It’s been a ride here in the Rework team since I joined the company in 2022. Every year, a new project brings us something new to work on. I had the pleasure of working on the California rework, parts of Arizona, and now Nevada as well. Reworking Nevada brought me something I already knew and made me rethink my working approach, as my perspective changed a lot through the years.
Creating for me always comes with a deeper meaning to it. I don’t want my work to be just purely mechanical and soulless; I like hiding fun details in the ordinary. If spotting it makes someone smile or catches their attention - it’s worth it.
We really should be cultivating our curiosity and wonder more in our daily lives. So if you are already wondering about the brand new Nevada, that’s a good starting point. There are many cool places to see and some nice UFO references to spot!
Filip - Map Designer
Hello everybody! My map designer journey began during the fourth phase of the California rework, where I worked on smaller tasks suited for a rookie like me. On the Route 66 rework project, I was responsible for the design of I-191 and Page. I got to experience a bit of everything: a diverse road with settlements, scenic views, beautiful landscapes, and a challenging hilly city.
The experience I gained, I can now utilize in a brand new look of Nevada, where I am working on Carson City, its surroundings, and a small surprise.
I hope the work of our team will bring a fresh, up-to-date look to Nevada and that players will be able to rediscover this awesome state for a second time!
Mykyta - Map Designer
I have been working at SCS Software for two years, and during that time I have worked on projects such as Route 66 around Tucumcari.
As part of the Nevada Rework, I am currently working on the towns of Elko and Carlin and their surrounding areas.
Players can look forward to driving through the Carlin Tunnel, and if they pay close attention along the way, they may also discover some beautiful and interesting places in the surrounding landscape.
Jakub - Map Designer
I have been in SCS for more than a year. I started with reworking the northern part of Arizona and New Mexico. Now, reworking Nevada is another dream project of mine.
As a big fan of clean, big open landscapes and amazing mountains, rocks, and other unique hills, I enjoyed every road I've been working on, and now I am happy that Nevada looks like Nevada.
Rob - Junior Map Designer
Hi everyone, I’m Rob, and I’ve been with SCS for over a year now. The Nevada Rework is my first major project. Before that, I mainly worked on smaller projects in Arizona.
My part of the map is located in northern Nevada, where I’ve been working to bring the area as close to reality as possible and capture the atmosphere of sun-baked roads stretching through the endless desert. Players can look forward not only to the rugged, arid landscape, but also to beautiful and highly detailed cities.
I’m happy that we can give players a fresh take on familiar content and offer them the chance to experience Nevada in a slightly different and completely new way.
Filip - Junior Map Designer
Hi, I’ve only been in SCS for four months, but I already feel right at home here. Nevada is a beautiful state, and I’ve really enjoyed exploring it.
I was tasked with completing the road from Las Vegas to Panaca. It was a privilege to work on the surrounding mountain ranges and finish the work started by my colleague Johny. There is also a Visitor Center near Panaca, and I think I managed to capture it in all its beauty. So, I’d definitely recommend that players take a little detour from the road and explore the area around it.
Samuel - Junior Map Designer
Hi, my name is Sam, and I recently passed the five-month mark at SCS Software. Having grown up playing SCS games, being able to contribute to their development is a dream come true for me.
On this project, I worked on shorter roads in the western part of Nevada. Hopefully, I managed to capture the authentic feel of the landscape, biomes, and unique character of the area, and you'll enjoy driving through them! I’m really looking forward to showing you even more of my work in future DLCs.
That concludes today’s Meet the Team! We’d like to thank everyone featured in this blog for taking the time to share a little about themselves and their work on the Nevada Rework.
We always enjoy giving our community a glimpse behind the scenes and highlighting the talented people who help bring our virtual worlds to life. We hope you enjoyed learning more about the team and the passion they’re putting into giving Nevada a fresh new look.
As development continues, we look forward to sharing more from the Nevada Rework with you. Be sure to follow us on X/Twitter, Instagram, Facebook, Bluesky, YouTube, and TikTok, or subscribe to our newsletter, so you never miss any updates. Until next time, we will see you on the road!
Development Release: Haiku R1 Beta 6
Anonymous and open to all: The Home Assistant survey dataset
Our why as an organization is clear: to fight for privacy, choice, and sustainability for smart homes, and for every person who lives in one. But who does live in them?
In December 2024, we launched the first Home Assistant survey to find out. Our goal was simple: to make Home Assistant more inclusive and approachable by listening directly to the diverse community of people who use it.
In the spirit of building in the open, today we’re thrilled to announce the anonymized results of that survey are now freely available. In this post, we’ll run you through what the survey covered, why and how we’re publishing this data, what the data is not (read: identifiable), how we’re using this information to improve what we do, and opportunities for further understanding and research.
FileZilla Client 3.71.1 released
Bugfixes and minor changes:
- macOS: Work around a bug in macOS 27 where setting the locale to non-English triggers crashes in AppKit
- SFTP: Improved heuristic when keyboard-interactive requests are treated as a simple password prompt on servers not offering the password authentication method
























