[0.16.14] - 2026-07-20

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push (RFC 9749).

Changed

Fixed

• IMAP:
  • Mailbox object-quota only enforced in JMAP.
  • Pipelined STORE and EXPUNGE can execute out of order.
• JMAP:
  • Read-only sharee cannot set isSubscribed on a shared mailbox.
  • Web Push payloads with Content-Encoding: aes128gcm should not be base64-encoded but sent as raw bytes.
  • Stale push subscription can block verification of a new one.
  • PushSubscription/set rejects the unpadded base64url keys the W3C Push API produces.
  • Email/import does not send push notifications for imported messages.
  • CalendarEvent/set silently ignores ifInState.
• CalDAV: calendar-query REPORT returns empty calendar-data for JMAP-created events.
• MTA:
  • DMARC is skipped when MAIL FROM SPF is unavailable.
  • queue_name variable not available in rate limiter expressions.
• Calendar:
  • No expanded occurrences are returned for a daily recurrences crossing DST.
  • Uppercase MAILTO calendar addresses become invalid SMTP recipients.
  • Scheduling invitations on a shared, non-owned calendar fail with MAIL FROM unauthorized.
• HTTP: Disable allowedEndpoints expression in recovery mode.
• Telemetry: Tasks are serialized to the wrong store when using separate stores for telemetry and data.

Check binary attestation here

Part-DB 2.13.3

Changes

• Added korean translation (thanks @progh2)
• Show an warning/recommendation banner on homepage, recommending to configure the TRUSTED_HOSTS env, for security hardening

Bug fixes

• Properly escape html characters in placeholder fields (#1446)
• Ensure that the password reset link is always pointing to a trustable host
• Fixed LCSC search (#1440)
• Fixed translation issue with canopy settings (#1386)

Other changes

• Updated dependencies
• Updated installation guide to docker 13

Full Changelog: v2.13.2...v2.13.3

With the upcoming 1.61 update for Euro Truck Simulator 2, we’re excited to introduce a complete rework of the Livestock Trailer, which our vehicle team has reworked from the ground up. Let’s take a closer look at what changes have been made! 

The Stable channel has been updated to 150.0.7871.128/.129 for Windows and Mac and 150.0.7871.128 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 7 security fixes. Please see the Chrome Security Page for more information.

[N/A][516987782] Critical CVE-2026-15899: Use after free in CameraCapture. Reported by Google on 2026-05-27

[N/A][523750584] Critical CVE-2026-15900: Use after free in GPU. Reported by Google on 2026-06-14

[N/A][533446300] Critical CVE-2026-15901: Use after free in Network. Reported by Google on 2026-07-10

[N/A][522436154] High CVE-2026-15902: Use after free in Cast. Reported by Google on 2026-06-10

[TBD][531503216] High CVE-2026-15903: Out of bounds read and write in V8. Reported by OpenAI Codex Security (amyb) on 2026-07-06

[N/A][532925350] High CVE-2026-15904: Use after free in Ozone. Reported by Google on 2026-07-09

[N/A][532970574] High CVE-2026-15905: Use after free in Aura. Reported by Google on 2026-07-09

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Daniel Yip

Google Chrome

The Stable channel has been updated to 151.0.7922.34/.35 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.

The Stable channel has been updated to 150.0.7871.124/.125 for Windows and Mac and 150.0.7871.124 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 15 security fixes. Please see the Chrome Security Page for more information.

[N/A][517100492] Critical CVE-2026-15764: Use after free in Ozone. Reported by Google on 2026-05-27

[N/A][518007484] Critical CVE-2026-15765: Use after free in Ozone. Reported by Google on 2026-05-29

[N/A][514010477] High CVE-2026-15766: Uninitialized Use in Skia. Reported by Google on 2026-05-17

[N/A][514748734] High CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google on 2026-05-19

[N/A][517931625] High CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas. Reported by Google on 2026-05-29

[N/A][519731111] High CVE-2026-15769: Insufficient validation of untrusted input in Linux Toolkit Theming. Reported by Google on 2026-06-03

[N/A][524792614] High CVE-2026-15770: Uninitialized Use in V8. Reported by Google on 2026-06-17

[N/A][525177160] High CVE-2026-15771: Insufficient validation of untrusted input in Media. Reported by Google on 2026-06-18

[N/A][525317502] High CVE-2026-15772: Use after free in GPU. Reported by Google on 2026-06-18

[TBD][527676561] High CVE-2026-15773: Use after free in Core. Reported by xinchaotian of Microsoft on 2026-06-25

[N/A][530646115] High CVE-2026-15774: Use after free in Skia. Reported by Google on 2026-07-03

[TBD][531319201] High CVE-2026-15775: Insufficient policy enforcement in V8. Reported by wang1r923096443@gmail.com on 2026-07-05

[TBD][532595489] High CVE-2026-15776: Type Confusion in V8. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-07-08

[N/A][532929679] High CVE-2026-15777: Use after free in UI. Reported by Google on 2026-07-09

[N/A][513795122] Medium CVE-2026-15778: Insufficient validation of untrusted input in Navigation. Reported by Google on 2026-05-16

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Daniel Yip

Google Chrome

When we released the Schwarzmüller Trailer Pack for Euro Truck Simulator 2 back in 2016, it quickly became a popular addition to many players’ fleets. With the upcoming 1.61 update, we’re excited to begin updating the Schwarzmüller Trailer Pack DLC to better reflect the new modern trailer designs, starting with a complete rework of one of its low loader trailers and accessories. Let’s take a closer look!

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.07.18

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.07.18

Changes

• feat: graceful cancel — SIGINT with SIGKILL escalation so partial files are finalized (closes #438) (4b05022)
• ci: enforce the 25k Docker Hub limit on README.md (0dc9b0b)
• docs: restructure README around the wiki as companion documentation (96f5ffe)
• docs: add test gotchas, option checklist, and security invariants to AGENTS.md (1eafecd)
• docs: encode project scope boundary in AGENTS.md (8fe81de)
• docs: document pairing MeTube with a music tagger (fa02717)

Releases Notes for 30.3.14

Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm

Windows intel x32 releases are marked -ia32-

ChangeLog:

• Uses electron 42.7.0
• #2235 , #1026 , #1278 , #2312 , #1245
• Updates to draw.io core 30.3.14.

As the development of the upcoming Coaches DLC for Euro Truck Simulator 2 advances, today, we'd like to show you some of the new vehicle features we have developed for this expansion. Let's take a look!

Coaches feature a variety of systems and functions that trucks don't. So we needed to dive deeper and faithfully recreate new vehicle systems for the Coaches DLC, which we believe will enhance the driving experience and make every journey feel even more immersive when this expansion releases.

The first thing we have decided to implement is the destination display panel visible at the top of the windshield, showing the coach's final stop. It is a removable accessory, giving players the option to decide whether they want to use it or not, and is also visible from the interior. We've fine-tuned its appearance, including text length, colour, and other visual details to ensure it fits well across different destinations.

Another difference between coaches and trucks is that coaches have larger windshields, which means sunlight can be a greater challenge while driving. That is why we have developed adjustable sun visors. On coaches that support this feature, the visors are split into left and right sections, allowing each side to be controlled independently and positioned as needed. They are also visible from the exterior and include animated controls, as well as sound effects.

Since coaches are long vehicles, judging what's behind you can be quite a challenge. That's why modern coaches are typically equipped with rear-view cameras, which we've also included in this DLC. The camera feed is integrated directly into the dashboard, automatically switching from the navigation display when a reverse gear is engaged. Since we've aimed to recreate bus stations and stops as faithfully as possible, including real-life situations a coach driver might encounter, we believe the camera will prove especially useful in many situations.

We've also added interior lighting options to brighten up the journey for you and your passengers. The first is ambient lighting, which allows you to choose the color to suit your preference. The second is the main ceiling light, which can be switched on and off with a button, particularly useful at night when stopping to pick up or drop off passengers.

We hope you are looking forward to taking advantage of the new vehicle features we developed for Coaches. If so, then don't forget to add the Coaches DLC to your Steam wishlist! Also, make sure to keep track of future updates by following us on X/Twitter, Facebook, Instagram, Bluesky, and YouTube, or sign up for our newsletter. Until next time, safe travels!

Part-DB 2.13.2

Bug fixes

• Respect the attachment file limits, when Part-DB downloads a file, or a file gets uploaded base64 encoded via API
• Prevent formula injection when exporting tables as excel files
• Fixed problem with javascript and CSS not loading when using apache with mod_php (#1423)

Other changes

• Updated dependencies
• Improved documentation (@Apfelwurm, #1438)
• Improved translations

New Contributors

• @Apfelwurm made their first contribution in #1438

Full Changelog: v2.13.1...v2.13.2

• Hotspot temperature on NVIDIA RTX 50 GPUs (fixed in 1.65.1). (big thanks to PauloGomesTeam for their help with the hotspot reading and decoding)
• Preliminary support of Lisuan 7G100 GPU.

Release Candidate 2 Changes

• Fixed right-click not working on disable Sources in Sources list in Beta 1 to RC1 [RytoEX]
• Adjusted Add Source dialog according to feedback [Warchamp7]

Release Candidate 1 Changes

• Fixed empty name label in volume meter in Beta 1-3 [Warchamp7]

Beta 3 Changes

• Fixed extra padding on some UI elements on Windows in Beta 1-2 [Warchamp7]
• Fixed NVIDIA Audio Effects not working in Beta 1-2 [pkviet]
• Fixed issues with long item names in the Audio Mixer in Beta 1-2 [Warchamp7]
• Removed redundant "Monitor Only" from the Advanced Audio Properties window [Warchamp7]
  • Mute and Monitor are handled independently in the new Audio Mixer
• Removed Close button from What's New dialog [Warchamp7]
• Removed margins from What's New dialog [Warchamp7]

Beta 2 Changes

• Fixed a CI deployment issue. There are no application changes since Beta 1.

32.2 New Features

• Replaced add source dropdown with new dialog [Warchamp7]
• Improved FPS selector UX [jcm93]
• Added missing file support for filters [exeldro]
• Added ability for plugins to set custom icons for new source types [cg2121]
• Included .webp files when adding a directory to Image Slide Show source [TarunCore]
• Added copy paste functions to frontend API [exeldro]
• Added filter to compose SDR into HDR [jpark37]
• Added delete as a hotkey to delete sources on macOS [PatTheMav]
• Added dynamic bitrate support to multitrack video [lexano-ivs]

32.2 Changes

• Forced Intel-based installations to update to Apple Silicon version on macOS [PatTheMav]
  • This change means that OBS Studio versions built for Intel-based Macs but running on Apple Silicon Macs will automatically update to OBS Studio built for Apple Silicon Macs. If an installation was using third-party plugins, those plugins will no longer load until replaced with Apple Silicon versions.
• Fixed audio mixer state getting out of sync when changing settings via websockets or plugins [Warchamp7]
• Added theming for checked QToolButtons [glikely]
• Improved OpenGL performance slightly on low-end machines [kkartaltepe]
• Set minimum size for color source to 1 pixel [exeldro]
• Added minimum width to spinboxes [Warchamp7]
• Disallowed overwriting the crash handler [sebastian-s-beckmann]
• Applied process mitigation policies for Windows [notr1ch]
• Adjusted description of multitrack video [jhnbwrs]
• Changed new capture devices to use fallback frame rate by default [PatTheMav]
• Improved DLL loading behavior on Windows [notr1ch]
• Limited multitrack video config to Custom service [PatTheMav]

32.2 Bug Fixes

• Fixed OAuth and dock state save corruption [PatTheMav]
• Fixed group bounds not resizing when removing items [howellrl]
• Fixed canvas mixes not being restored after video reset [dsaedtler]
• Fixed some erroneous crashes during shutdown [Warchamp7]
• Fixed display capture sometimes capturing black after a duplicator failure [ThrowTop]
• Fixed color of controls dock output buttons in System theme [shiina424]
• Fixed virtual camera reset failures [stephematician]
• Fixed potential crash when user discards changes in the settings window [suogesi]
• Fixed incorrect return value in virtualcam filter [xtfo]
• Fixed source toolbar buttons not working after dragging a source into a group [Warchamp7]
• Fixed properties hint icon spacing [Warchamp7]
• Fixed potential crash when a video device reconnects on macOS [jcm93]
• Fixed an issue where PipeWire could fail on NVIDIA GPUs [hoshinolina]
• Fixed obs_canvas_get_video_info returning incorrect framerate [dsaedtler]
• Fixed NVENC using incorrect bitrate in CQVBR mode [Lordmau5]
• Fixed VAAPI AV1 not working when streaming with WHIP [RytoEX]

32.2 Deprecations

• Deprecated obs_properties_add_button [sebastian-s-beckmann]

Checksums

OBS-Studio-32.2.0-rc2-Sources.tar.gz: 3d813d852701ba37b7a887bc3c99d4c5c4ffaa52afb3e2d281185b613f5831c1
OBS-Studio-32.2.0-rc2-Ubuntu-24.04-x86_64-dbsym.ddeb: abeb5dea2fb0999036f2c723a086f349e9566d5fc44bedfd37cc22bac08baff5
OBS-Studio-32.2.0-rc2-Ubuntu-24.04-x86_64.deb: 6fdeff435c295c8a915b91733c15ff85f11e7604808a5ba2e6b5cbb381d2a8d9
OBS-Studio-32.2.0-rc2-Ubuntu-26.04-x86_64-dbsym.ddeb: 3b49ac3dd84e07f52f91aee77b37f7361cb7930fd486447cafa32d60390b897f
OBS-Studio-32.2.0-rc2-Ubuntu-26.04-x86_64.deb: 6432a2a781b0ffa97da223b7e226d7968889d023275b54b6d37795598ea15d3e
OBS-Studio-32.2.0-rc2-Windows-arm64-PDBs.zip: c59e25a34774937428f4060903e38951b8e8f1d386ba761d50c8543864184ade
OBS-Studio-32.2.0-rc2-Windows-arm64.zip: 87f9bd65a8d48dd5e9a574f3f276277f6547846860cd7679994a724e8639362b
OBS-Studio-32.2.0-rc2-Windows-x64-Installer.exe: 80482d8b08b4650cecb2e1a68b6a5bf420660c0cde8a8664cdefcb63b3f93b44
OBS-Studio-32.2.0-rc2-Windows-x64-PDBs.zip: 719b3912e9e7cb5ea666f6a86b4adb811a3a83ab18e72f9d08d78cc49de06b24
OBS-Studio-32.2.0-rc2-Windows-x64.zip: b33ff9917b6440505d1b62906f7dbd0d8e910d7137f1269572817bf538a914ed
OBS-Studio-32.2.0-rc2-macOS-Apple-dSYMs.tar.xz: 2a84fda1b52ce60f6a6cbc5e4923c1e2ce13f4f27cdb6bea5c5518e8cbde8c7f
OBS-Studio-32.2.0-rc2-macOS-Apple.dmg: 19dcdd8fe01d916f63617db4e4d62501e4881f6a737359e3462101fe76d8d3df
OBS-Studio-32.2.0-rc2-macOS-Intel-dSYMs.tar.xz: 13d83b972de76c7acd215dd0a1c3d61c2d1b8b0a9d21b47b93364e37d82d336e
OBS-Studio-32.2.0-rc2-macOS-Intel.dmg: dfe081310f8444fd38912763dee1b8db5c1164a17da6a78d2cff272638e22681

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.07.16

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.07.16

Changes

• upgrade dependencies (8071611)
• fix: prefer topic channel for album artist (220f991)
• fix: block SSRF via user-submitted URLs (6d05287)
• feat: add AlbumArtistPostProcessor to fill missing album-artist metadata (c104e30)

Changelog

Others

• c4cf006: update deps (@seriousm4x)

The countdown to one of the biggest gaming events of the year has begun, and we're excited to share that SCS Software will be attending Gamescom 2026! From August 26th to August 30th, you'll be able to find us in the Entertainment Halls, where we'll have our biggest booth yet. We will be located in Hall 10.1, Booth B022-C023.

We're looking forward to meeting our #BestCommunityEver once again. Whether you've been trucking with us for years or are just discovering our games, we'd love for you to stop by, say hello, and spend some time with the team. Meeting our community in person is always one of the highlights of the year, and we can't wait to see familiar faces as well as meet new ones.

Visitors to our booth will have the opportunity to get behind the wheel and try exclusive demo builds showcasing several of our upcoming map expansions. We plan to bring special preview versions featuring the breathtaking landscapes of the upcoming Euro Truck Simulator 2: Iceland DLC, explore the stunning roads and scenery of British Columbia in the upcoming American Truck Simulator: British Columbia DLC, and get a first taste of the upcoming South Dakota DLC for American Truck Simulator.

We're also doing everything we can to bring playable demonstrations of our upcoming Road Trip and Coaches projects to Gamescom. While we're not ready to make any promises just yet, we're working hard behind the scenes and hope we'll be able to let visitors get an early hands-on experience with these exciting new additions as well.

To make the experience even more immersive, we're thrilled to be partnering with Thrustmaster once again. They will be equipping our booth with a brand-new product that visitors will have the exclusive chance to test! We can't wait for everyone to get their hands on it and experience what's in store. A huge thank you to Thrustmaster for helping us make our Gamescom booth even more exciting!

We'd also like to extend our sincere thanks to Volvo Trucks for helping us prepare something truly special for Gamescom. While we'll keep the details under wraps a little longer, let's just say that fans of Volvo trucks won't want to miss our booth. We'll be showcasing something truly exclusive straight from Volvo that every truck enthusiast will want to see up close.

And if that isn't enough, our 4D motion simulator will also be making its return! If you've always wanted to experience the feeling of driving a truck with added motion effects, be sure to give it a try during your visit.

We can't wait to see you in Cologne this August! We'll have more information to share as Gamescom gets closer, including our booth location and additional activities, so make sure to keep an eye on our social media channels and give us a follow on X/Twitter, Facebook, Instagram, Bluesky, and YouTube, or sign up for our newsletter, so you never miss any news. Safe travels, and we'll see you there!

The PostgreSQL Global Development Group announces that the second beta release of PostgreSQL 19 is now available for download. This release contains PostgreSQL 19 feature previews ahead of general availability, though some details of the release can change during the beta period.

You can find information about all of the PostgreSQL 19 features and changes in the release notes:

https://www.postgresql.org/docs/19/release-19.html

In the spirit of the open source PostgreSQL community, we strongly encourage you to test the new features of PostgreSQL 19 on your systems to help us eliminate bugs and other issues. While we do not advise you to run beta versions in production environments, we encourage you to find ways to run your typical application workloads against this beta release.

Your testing and feedback help the community ensure that PostgreSQL 19 upholds our standards of delivering a stable, reliable release of the world's most advanced open source relational database. Please read more about our beta testing process and how you can contribute:

https://www.postgresql.org/developer/beta/

Upgrading to PostgreSQL 19 Beta 2

To upgrade to PostgreSQL 19 Beta 2 from an earlier version of PostgreSQL, you will need to use a strategy similar to upgrading between major versions of PostgreSQL (e.g. pg_upgrade or pg_dump / pg_restore). For more information, please visit the documentation section on upgrading.

Changes Since Beta 1

Fixes and changes in PostgreSQL 19 Beta 2 include:

• Fix a regression in vacuumdb --analyze-in-stages for partitioned tables.
• Fix servicefile to show correct file after fallback to system file.
• Fix tuple deformation optimization for virtual generated columns.
• Allow pg_createsubscriber to accept duplicate publication names.
• Fix REPACK worker not being cleaned up on a FATAL exit.
• Several fixes for the new FOR PORTION OF temporal table syntax.
• Fix race condition when logical decoding activation is concurrently interrupted.
• Disallow negative values for max_retention_duration.
• Fix md5_password_warnings for role and database settings.
• Several fixes for the new SQL/PGQ property graph feature.
• Fix autovacuum's multixact-age score calculation, which could become infinite.
• Revert non-text output formats for pg_dumpall.
• Fix locking for ALTER DOMAIN ... VALIDATE CONSTRAINT.
• Fix how postgres_fdw handles imported foreign-table statistics.

Please see the release notes for a complete list of new and changed features:

https://www.postgresql.org/docs/19/release-19.html

Testing for Bugs & Compatibility

The stability of each PostgreSQL release greatly depends on you, the community, to test the upcoming version with your workloads and testing tools to find bugs and regressions before the general availability of PostgreSQL 19. As this is a Beta, minor changes to database behaviors, feature details, and APIs are still possible. Your feedback and testing will help determine the final tweaks on the new features, so please test in the near future. The quality of user testing helps determine when we can make a final release.

A list of open issues is publicly available in the PostgreSQL wiki. You can report bugs using this form on the PostgreSQL website:

https://www.postgresql.org/account/submitbug/

Beta Schedule

This is the second beta release of version 19. The PostgreSQL Project will release additional betas as required for testing, followed by one or more release candidates, until the final release around September/October 2026. For further information please see the Beta Testing page.

Links

• Download
• Beta Testing Information
• PostgreSQL 19 Beta Release Notes
• PostgreSQL 19 Open Issues
• Submit a Bug
• Donate

Releases Notes for 30.3.13

Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm

Windows intel x32 releases are marked -ia32-

ChangeLog:

• Uses electron 43.1.0
• #2490 , #2485 , #1993 , #2447 , #2282 , #2487 , #2183 , #2476 , #2433 , #2319 , #2248
• Updates to draw.io core 30.3.13.

nginx-1.30.4 stable and nginx-1.31.3 mainline versions have been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

5.50.2 (2026-07-15)

🚀 New feature

• admin: make admin auth cookie name configurable (#26931)
• i18n: complete Korean (ko) translation (#26941)

🔥 Bug fix

• admin: prevent deprecated CJS Vite Node API warning on startup (#26947)
• admin: pre-commit fails when staging files ignored by ESLint (#26958)
• admin: show plan label instead of edition in dashboard (#26891)
• admin: restore runtime default for context helper (#26809)
• ci: reduce false positives in issue template checker (#26955)
• ci: use npm install in issue template checker workflow (#26974)
• content-manager: clear stale Blocks editor selection on external value change (#26959)
• core: backward compat - reject 'status' attribute when draftAndPublish is enabled (#26890)
• core: validate license registry responses with zod (#26935)
• core: preserve duplicate form relation edits when cloning (#26961)
• data-transfer: bump ws to 8.21.0 to fix CVE-2026-48779 (#26898)
• database: include status sort expression in SELECT when using DISTINCT (#26751)
• database: lint script does not run type check (#26819)
• email: only warn about sendmail provider in development (#26893)
• openapi: add bearerAuth and bracket pagination query params (#26948)
• strapi: auto-exclude pre-built plugin UI libs from Vite optimizeDeps (#26944)
• strapi: fix develop blank admin from optimizeDeps auto-exclude (#27014)
• upgrade: prompt to pin ranged @strapi/* dependencies before upgrading (#26929)
• upload: load remote asset thumbnails with crossOrigin to prevent CORS preview failures (#26581, #26901)
• utils: align remaining convert-query-params errors with ValidationError (#26908)

⚙️ Chore

• ai-tooling: sync skills when cursor sets up a new worktree (#26954)
• data-transfer: clarify --exclude files CLI messaging (#26914)
• deps: patch/minor dependency bumps (#26823)
• deps: bump @xhmikosr/decompress from 10.2.0 to 10.2.1 (#26928)
• deps: bump sharp from 0.33.5 to 0.34.5 (#26993)
• deps: bump @internationalized/date from 3.5.4 to 3.12.1 (#26994)
• deps: bump design-system and icons to v2.2.3 (#27002)
• eslint: enforce zero warnings in package lint scripts (#26922)
• husky: run git hooks through yarn exec (#27006)
• tooling: remove unused find-up after lint-staged 16 (#26792)
• types: drop CommonJS tsconfig overrides, build JS via rollup (#26934)
• typescript: scope tsconfig types per workspace (#26699)
• typescript-utils: migrate to typescript (#26811)
• typescript-utils: bump internal deps to 5.50.1 (#26946)

⚠️ Changes to be aware of

Admin auth cookie name

You can set admin.auth.cookie.name in admin config to rename the access-token cookie (default remains jwtToken). Useful when another app on a shared parent domain sets a jwtToken cookie and breaks admin login.

(#26931)

status attribute with Draft & Publish

In v5, status is reserved for draft/published filtering. If a content type has Draft & Publish enabled and a custom status field, Strapi now logs a startup warning instead of failing boot. The Content-Type Builder still blocks adding status or enabling D&P when status already exists.

(#26890)

Upgrade tool and ranged @strapi/* versions

@strapi/upgrade now warns and offers to pin ranged @strapi/* dependencies (e.g. ^5.50.0) before upgrading, so upgrades don't silently report "already up-to-date" when node_modules resolved ahead of package.json.

(#26929)

❤️ Thank You

• Abdallah M. @abdallahmz
• akash-dabhi-qed @akash-dabhi-qed
• Ali Ataf @aliataf
• Andrei L @unrevised6419
• arun @aun009
• Bassel Kanso
• Ben Irvin
• Giulio Montagner @giu1io
• Jamie Howard @jhoward1994
• jasleenkaur-qed42
• moduvoice
• Monu Meena @Monu01123
• Nico André

What's Changed

New Features 🎉

• Allow search for empty string when tags are set by @magshee in #1845
• Complete ItemMetadataRefresh Logic by @JPKribs in #1834
• Customizable Jump Intervals by @JPKribs in #1849
• [10.11] Enable HDR/DV Device Profiles Conditions by @JPKribs in #1861
• VLCKit 3.7.0 by @JPKribs in #1874
• Complete DV & HDR Badges by @JPKribs in #1883
• Gesture: Support long press for speed optimization by @ShiSheng233 in #1911
• [tvOS] Add accent colors to settings by @Comet1903 in #1452
• Persist user selected playback speed by @jbenge1 in #1923
• Utilize ContentUnavailableView by @JPKribs in #1938
• TV Shows watching indicators by @hqueiroga in #1769
• Display remaining episodes count for TV shows #1821 by @amtrevisan in #1825
• Swizzle Liquid Glass by @LePips in #1946
• Improve Spotlight Discovery by @chickdan in #1964
• Filter Unusable Sort Options & Include More SortBy Options Based on Type by @JPKribs in #1969
• Make LearnMoreModal focusable and scrollable on tvOS by @henryauryn in #1913
• Playback Info by @JPKribs in #1941
• Filter ServerLogsView by @JPKribs in #1987
• Finish LetterPickerBar by @JPKribs in #1988
• Supplement Customization, People Supplement, & VLCKit 3.7.2 by @JPKribs in #1984
• Focus LetterPickerView on Entry by @JPKribs in #1994
• Add additional parts to movie item content view by @kilian-jost in #1993
• Fix autofill for sign in fields by @xrvk in #2015
• Default Track Settings & Unify VideoPlayerSettingsView by @JPKribs in #1888
• Fix ListRowMenu when isLiquidGlassEnabled by @JPKribs in #2028
• [tvOS] Media Player by @JPKribs in #1902
• Implement a SocketManager, Migrate ActiveSessions over to the Socket, & set up some SessionCommands by @JPKribs in #2042
• Content Groups by @LePips in #2075

Bug Fixes 🛠

• Fix External Screen Playback & Now Playing Observers by @LePips in #1863
• Fix ItemView Crash by @JPKribs in #1865
• Fix MediaView Random Images by @JPKribs in #1880
• Admin Dashboard: ServerTasks Perpetual Loading Fix & ActiveSessions Spacing Fix by @JPKribs in #1877
• Fix Version Selection by @JPKribs in #1897
• BaseItemDto Editing Cleanup by @JPKribs in #1870
• Fix marketing version by @LePips in #1955
• Fix rotation on app foreground by @LePips in #1959
• Fix iPad rotation, status bar presentation, cleanup by @LePips in #1972
• Fix tvOS Storage by @LePips in #1876
• Wrap isLiquidGlassEnabled as DEBUG by @JPKribs in #1978
• Close Player at Queue End by @JPKribs in #1991
• Jump to End/Start by @JPKribs in #1992
• Disable Conflicting Player Gestures by @JPKribs in #2016
• Fix Add User Button by @LePips in #2025
• Fix Select User Empty Hitch by @LePips in #2026
• tvOS Stepper Cleanup by @JPKribs in #2027
• Fix Video Bar Subtitle Truncation by @LePips in #2029
• Workaround for TabView by @JPKribs in #2003
• Fix URL paths with client by @LePips in #2031
• fix #1885 Native Player not saving playback progress by @quangDecember in #2035
• No audio on iOS after alarm or timer goes off (issue #1975) by @quangDecember in #2037
• Index/Track Fixes by @JPKribs in #1882
• Report LiveStreamId in playback start, progress, and stop by @awkimball in #2062
• Fix Missing ProgramsView Routing by @JPKribs in #2065

Other ⚙️

• Replace ListRowButton with Button .primary style by @Lukas-Michel in #1843
• Deprecate SplitFormWindowView & LearnMore Types by @JPKribs in #1838
• @Stateful - Server Tasks by @JPKribs in #1812
• [Meta] 2026 Disclaimer by @JPKribs in #1886
• Fix Fastlane in CI by @chickdan in #1899
• Link: LLM/"AI" Development Policy into Contributor Documentation by @JPKribs in #1905
• Update Fastlane Runner and SwiftFormat by @LePips in #1912
• Dynamic Video Compatibility Checks by @JPKribs in #1891
• [tvOS] Stepper & ListRowMenu for 26 by @JPKribs in #1858
• Unify DeviceProfile Views by @JPKribs in #1917
• Unify OrderedSectionSelectorView by @JPKribs in #1919
• LocalUser View Unification by @JPKribs in #1920
• Add Scroll Axis to ScrollIfLargerThanContainer by @JPKribs in #1925
• Update fastlane runner by @LePips in #1929
• Unify CustomizationSettingsView by @JPKribs in #1857
• Cleanup UserButtons by @JPKribs in #1926
• Unify AppSettingsView & AboutAppView by @JPKribs in #1933
• Unify EditServerView by @JPKribs in #1932
• Unify FontPickerView by @JPKribs in #1935
• Unify ExperimentalSettingsView by @JPKribs in #1936
• Unify ItemOverviewView, MediaSourceInfoView, & MediaStreamInfoView by @JPKribs in #1934
• tvOS Form Clipping & Fading by @JPKribs in #1937
• Cleanup Deletion Logic by @JPKribs in #1940
• Cleanup Item Identification by @JPKribs in #1945
• GitHub Action to Look for Unused Strings by @JPKribs in #1951
• Monthly TestFlight by @JPKribs in #1953
• Bump Transmission to 2.8.3 by @JPKribs in #1965
• Unify & @stateful ItemSubtitlesViewModel by @JPKribs in #1944
• Update fastlane TestFlight Versioning by @LePips in #1977
• Contributing Guide Cleanup by @JPKribs in #1979
• Cleanup Deprecated Code & Fastlane Updates by @LePips in #1981
• Pin Fastlane & Ruby Versions by @JPKribs in #1980
• Localization Checks by @JPKribs in #1986
• Unified & Composite FilterView by @JPKribs in #1823
• Bump SDK to 1.0.0 by @JPKribs in #2009
• Use ServerDiscovery from the SDK by @JPKribs in #2011
• Unify SelectUserView by @JPKribs in #1921
• General Cleanup | ChevronButton & Deprecations by @LePips in #2017
• ItemImage & PhotoPicker Rework by @JPKribs in #1949
• Consolidate App Defaults Observation by @LePips in #2023
• UserSession, ServerConnection, Permissions, DeepLink by @LePips in #2045
• Generic Paging Libraries by @LePips in #2047
• Update TestFlight Deployment by @LePips in #2002
• App state consolidation, remove AppDelegate by @LePips in #2059
• BlurHashKit update and Color Quantization by @LePips in #2066
• Poster Image Source Cleanup by @LePips in #2068
• Fix TestFlight Action Inputs by @LePips in #2069
• Update StatefulMacros by @LePips in #2071

New Contributors

• @Lukas-Michel made their first contribution in #1843
• @magshee made their first contribution in #1845
• @ShiSheng233 made their first contribution in #1911
• @Comet1903 made their first contribution in #1452
• @jbenge1 made their first contribution in #1923
• @amtrevisan made their first contribution in #1825
• @henryauryn made their first contribution in #1913
• @kilian-jost made their first contribution in #1993
• @xrvk made their first contribution in #2015
• @awkimball made their first contribution in #2062

Full Changelog: 1.4...1.5

Changelog

• 1335bb4 Remove go report card
• 2ca9a23 chore(deps): bump the dev-dependencies group across 1 directory with 21 updates
• 03f02a9 chore(deps): bump the dev-dependencies group with 14 updates
• 26319f5 chore(deps): bump the dev-dependencies group with 15 updates
• 568d4a2 feat: add chart sidecar and versioning directory support
• 9db2c9c feat: add configurable default ETag for files without metadata
• 05cfa0f fix azure etag quote bytes
• efa7e77 fix azure multipart etag quoting
• 9ac52cd fix: LDAP access key filter injection
• a37b655 fix: add section for goreleaser deb/rpm
• 67aaa80 fix: copy-source parsing mismatch that could bypass path validation
• 8a3dbcf fix: omit null version id for suspended buckets
• 1a92f39 fix: prevent nil pointer panic in s3proxy ListMultipartUploads and ListParts
• 2f6b984 fix: update Fiber to v3.4.0
• dbc9bb1 fix: update example config with recent options
• 12f2283 make azure multipart part etags quoted and consistent
• 40cbe85 test(azure): widen multipart test parts above min size; tighten isQuotedEtag

• [p]Updated to the latest version from the Community Workshop (Update Notes).[/p][/*]

• [p]Updated to the latest version from the Community Workshop (Update Notes).[/p][/*]

• [p]Updated to the latest version from the Community Workshop (Update Notes).[/p][/*]

• [p]Updated to the latest version from the Community Workshop (Update Notes).[/p][/*]

• [p]Various stability and security fixes.[/p][/*]

📦 Downloads available at

• https://user.bitfocus.io/download

💵 Donate to the project at

• open collective https://opencollective.com/companion

Companion v5.0.1 - Release Notes

🐞 BUG FIXES

• macos mdns collision messages
• ensure control elements are cloned when imported/loaded #4306
• launch gui button broken if all interfaces ipv4+ipv6 selected #4308
• preserve first line of text when font is too tall to fit the bounding box
• allow negative rotation values for graphics elements #4313
• topbar border not very visible
• surface config not allowing static-text fields
• ensure connection thread is ready before init is executed
• suppress udev rules sync messages when running in docker #4318
• reduce default intensity of gauge tracks

Full Changelog: v5.0.0...v5.0.1