Added serial numbers to Thread client device details.
Added date selection for Port Manager statistics.
Added support for reordering columns in Traffic Flows.
Added Fallback status to the Device Uplink column for WiFi Uplink connections.
Added a Dashboard banner for sites automatically migrated to Zone-Based Firewall.
Improved Matter Thread device connectivity.
Improved WiFi Uplink status reporting after configuration changes.
Improved blocked Traffic Flows loading performance on consoles using external storage.
Improved device inform reliability when the database is under heavy load.
Improved the Internet WAN table layout by removing an unnecessary horizontal scrollbar.
Improved WiFi client System Logs with IP addresses and removed duplicate events.
Improved Virtual Network creation from Topology.
Prevented disabling radios used by WiFi Uplink.
Bugfixes
Fixed an issue where virtual machines and containers did not appear in Topology.
Fixed a rare issue where upgrading to Network 11 could fail.
Fixed an issue where View Only administrators could access VPN, Auto-Link, and device secrets.
Fixed an issue where offline HomePods could appear under an Apple TV's name in Thread networks.
Fixed an issue where the Collect Client Stats setting was not respected.
Fixed an issue where Time/Language setting changes didn't apply properly.
Fixed an issue where table header filters did not work in Traffic Flows.
Additional information
Β
Self-Hosted UniFi Deployments
For self-hosted deployments, we recommend transitioning to UniFi OS Server, which provides the full UniFi OS Platform experience, including the latest features, improvements, and integrations.
UniFi Cloud Gateways remain our recommended solution for deployments that do not require self-hosting.
macOS: shortcut keys now go through a virtual HID keyboard
When a button sends a keyboard shortcut, OpenLogi now presses the keys on a virtual keyboard named "OpenLogi Virtual Keyboard" instead of posting software key events. macOS handles these keys the way it handles keys from a USB keyboard. This is for shortcuts that work from a real keyboard but did not work from OpenLogi (#1653, #744). Apple granted OpenLogi the restricted HID virtual-device entitlement for this, and the signed OpenLogi Agent carries it (#1918, #1929).
You do not need to grant a new permission. The agent's signing identity did not change, so your Accessibility and Input Monitoring grants keep working.
If macOS does not let OpenLogi create the virtual keyboard, OpenLogi types the keys the old way.
Only the signed release builds have it. Builds from source and dev builds still use the old way.
To check that it is active, run ioreg -r -c IOHIDUserDevice | grep "OpenLogi Virtual Keyboard" while OpenLogi runs.
If a shortcut now behaves differently than in 0.8.15, please open an issue.
What's Changed
chore: track rust 1.99 as the stable floor by @AprilNEA in #1877
feat(inject): type synthesized macOS keys through a virtual HID keyboard by @AprilNEA in #1918
fix(agent): relaunch when Input Monitoring is granted after launch by @AprilNEA in #1919
fix(deps): bump rustls-webpki and webpki roots for emSign advisories by @AprilNEA in #1924
feat(inject,gui): slide desktop switches like a three-finger swipe by @AprilNEA in #1921
feat(macos,gui): say when Secure Input pauses key remapping by @AprilNEA in #1926
test(inject): check that the host's choice decides the next desktop switch by @AprilNEA in #1928
feat(xtask,ci): sign the macOS agent with its HID virtual-device profile by @AprilNEA in #1929
feat(core,agent,gui): pointer speed and precision mode for 0x2205 mice by @AprilNEA in #1922
feat(release): ship Sparkle delta updates by @AprilNEA in #1925
fix(device,agent): move linked devices after a keyboard that switches by itself by @AprilNEA in #1920
fix(desktop): show Pointer tab for mice and trackballs with software scroll inversion by @spartak8310 in #1880
feat(hidpp,device,agent): precision mode on mice with adjustable DPI by @AprilNEA in #1932
fix(hidpp): keep unmodelled backlight option bits on write by @AprilNEA in #1933
fix(device): restore thumb-wheel reporting as found and harden its capture by @AprilNEA in #1935
fix(hidpp,device): write all 0x8070 zones safely and gate v1 functions by @AprilNEA in #1936
fix(hidpp): gate the illumination effective maximum in its wrapper by @AprilNEA in #1937
fix(hidpp): bound 0x2111 torque and refuse a short capabilities reply by @AprilNEA in #1939
feat(pointer): light the DPI LED in precision mode by @AprilNEA in #1934
fix(hidpp,device): re-read settings on a 0x4521 disabled-key report by @AprilNEA in #1940
fix(hidpp,device,cli): keep getFwInfo transport bytes 9-15 raw by @AprilNEA in #1945
fix(gui): save a DPI only after the device confirms it by @AprilNEA in #1943
fix(hidpp,device): reconcile DPI after a sensor calibration broadcast by @AprilNEA in #1947
fix(agent): hand the haptic enable back after Actions Ring sessions by @AprilNEA in #1942
fix(device): drop short 0x2121 movements and re-read SmartShift on a ratchet switch by @AprilNEA in #1944
fix(hidpp): decode unified battery status bytes 3-5 by feature version by @AprilNEA in #1941
fix(hidpp,device): publish 0x1b04 reporting changes made by other clients by @AprilNEA in #1946
fix(device): read the 0x1000 battery capability before mapping levels by @AprilNEA in #1938
fix(hidpp,device): read the 0x2201 default DPI only from feature version 1 by @AprilNEA in #1952
fix(gui): choose the receiver before pairing a device by @hornej in #1614
fix(hidpp): publish the 0x8071 nv-effect sync event as raw bytes by @AprilNEA in #1951
This release backports the v4.4.7 security fixes to this release line. It is the same security release as v4.4.7, not a separate one. It fixes multiple critical CVEs in dependencies that Coolify uses, so update immediately.
Tip
Run this on your server to update to the security fix release of your line:
The script requires a stable release (not a beta, RC, or nightly). If you can, upgrade to v4.4.7 instead, because it also includes other security fixes that are not backported.
This release backports the v4.4.7 security fixes to this release line. It is the same security release as v4.4.7, not a separate one. It fixes multiple critical CVEs in dependencies that Coolify uses, so update immediately.
Tip
Run this on your server to update to the security fix release of your line:
The script requires a stable release (not a beta, RC, or nightly). If you can, upgrade to v4.4.7 instead, because it also includes other security fixes that are not backported.
This release backports the v4.4.7 security fixes to this release line. It is the same security release as v4.4.7, not a separate one. It fixes multiple critical CVEs in dependencies that Coolify uses, so update immediately.
Tip
Run this on your server to update to the security fix release of your line:
The script requires a stable release (not a beta, RC, or nightly). If you can, upgrade to v4.4.7 instead, because it also includes other security fixes that are not backported.
Release Highlights: Although GeForce Game Ready Drivers and NVIDIA Studio Drivers can be installed on supported notebook GPUs, the original equipment manufacturer (OEM) provides certified drivers for your specific notebook on their website. NVIDIA recommends that you check with your notebook OEM for recommended software updates for your notebook.
Game Ready for Phantom Blade Zero & Call of Duty: Modern Warfare 4 This new Game Ready Driver provides the best gaming experience for the latest new games and updates supporting DLSS and RTX technologies including Phantom Blade Zero, Call of Duty: Modern Warfare 4, NBA 2K27, Cyberpunk 2077, and Crimson Desert Enhanced: Charting the Unknown.
Fixed Gaming Bugs
Wuthering Waves: May crash during gameplay when using NVIDIA Freestyle filters with DLSS Frame Generation enabled. [5747079]
Star Citizen: Resolves a crash that may be seen when using Vulkan API [6680590]
Surviving Mars: Relaunched may crash during gameplay after updating to R595 drivers [5965452]
Fixed General Bugs
QHD monitor running at 360 Hz may have occasional black flash during gameplay [4846825]
When gaming on a 360Hz G-SYNC Pulsar monitor, FPS may drop to 320FPS [6408986]
Meta Horizon Link stream may freeze when connected over USB [6292679]
Intermittent dimming may be observed on certain Asus notebooks after updating to R620 drivers [6807011]
This release backports the v4.4.7 security fixes to this release line. It is the same security release as v4.4.7, not a separate one. It fixes multiple critical CVEs in dependencies that Coolify uses, so update immediately.
Tip
Run this on your server to update to the security fix release of your line:
The script requires a stable release (not a beta, RC, or nightly). If you can, upgrade to v4.4.7 instead, because it also includes other security fixes that are not backported.
This is a third security release in the continuation of 1.30.x, mostly to address some severe PHP vulnerabilities and update our official default Docker images (Debian) (but not our alternative Alpine images yet, which are delayed).
Note that our rolling-release channel (edge) is recommended for faster security patches.
This release fixes multiple critical CVEs in dependencies that Coolify uses. Update immediately.
Tip
Every v4 line has a security fix release. On v4.4, update from the dashboard: Settings β Update β Check now β Update. We recommend that everyone moves to v4.4.7, because the v4.1, v4.2, v4.3, v4.4 minior releases also include other security fixes that are not backported.
To update to a patched version of v4.0 to v4.3, run this on your server to update to the security fix release of your line:
The script requires a stable release (not a beta, RC, or nightly).
On a v4 beta or older release? First install the v4.0.1 security fix release manually by running the command below, then update to v4.4.7 right away from the dashboard (Settings β Update β Check > now β Update):
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The siduction project has published a new snapshot, version 2026.1.0. The new release, which is built using packages from Debian's "Unstable" branch, offers Fluxbox, KDE Plasma and Xfce editions: "The editions we offer with siduction 2026.1.0 are KDE Plasma 6.7.4, Xfce 4.20, X.Org and NOX. Unfortunately, GNOME, MATE....
docs: contributor docs are excluded from prettier checks (#28062)
lint: eslint fails to parse vitest.config.ts in admin/server packages (#28064)
lint: extra-policy oxlint perf on the blocking gate (#27671)
review-workflows: migrate unit tests from jest to vitest (#27388)
review-workflows: stop passing ignored populate to workflow create and update (#27865)
types: centralise the window.strapi type in @strapi/types (#26213)
upload: enforce the media MCP ambient guard by construction (#27617)
π Enhancement
database: describe connection pool timeouts (#28000)
utils: avoid rebuilding curried traversal wrappers on every call (#27947)
utils: remove per-key allocations from the query traversal (#27233)
β οΈ Changes to be aware of
Database driver update (knex 3.3.0)
Custom code that uses strapi.db.connection and calls delete() with limit or having, or truncate() with where, having or limit, now throws on PostgreSQL and SQLite. MySQL now applies the LIMIT. Before, the limit was ignored and every matching row was deleted, so check plugins or scripts that build such queries. Connection pool timeout errors now include the underlying connection error, and knex warnings now appear in the Strapi log as [database] knex: β¦.
Token and role names are limited to 255 characters
The name and description of API tokens, admin tokens, transfer tokens and admin roles now accept at most 255 characters. Longer values get a validation error under the field. Before, PostgreSQL returned a generic server error. Existing tokens with longer values keep working, but the admin rejects that long text on save until you shorten it.
Strapi now uses undici 8, which requires Node.js 22.19.0 or later. The engines field still says >=20.0.0, so check your runtime: this release was only tested on Node 22.20 and later.
The upload plugin now applies sharp.limitInputPixels. Strapi refuses to start if the value is not true, false or an integer of 0 or more. A value read straight from an environment variable is a string, so use env.int().
Known issue: deleting an entry changes past releases
When you delete an entry that belongs to a release that was already published, the entry is removed from that release, and the release status changes from "done" to "empty" or "ready". The published content is not affected. This already happened for localized entries, and it now happens for all entries.
In Settings > Webhooks, if you clear the last header row and type a new header name, the old text can stay in front of it (for example X-CX-D instead of X-D). Check the header names before you save.
Diep onder het ijs van Antarctica bevindt zich een gigantische detector die de meest ongrijpbare deeltjes van het heelal probeert te vangen: neutrinoβs. De Belgische natuurkundige Francis Halzen kreeg er dit jaar de Nobelprijs voor Natuurkunde voor. Diederik en Krijn duiken in de werking van IceCube en bespreken ook de Nobelprijzen voor Scheikunde en Geneeskunde. [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
Diep onder het ijs van Antarctica bevindt zich een gigantische detector die de meest ongrijpbare deeltjes van het heelal probeert te vangen: neutrino's.
Diederik Jekel en Krijn Soeteman bespreken de Nobelprijs voor natuurkunde 2026 voor Francis Halzen. Eerst kondigen zij een samenwerking met Met Nerds om Tafel en een livepodcast in Amsterdam aan. Daarna leggen zij uit waarom neutrinoβs een nieuwe manier zijn om het heelal te bestuderen: ze zijn elektrisch neutraal en hebben slechts zelden wisselwerking met [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
Diederik Jekel en Krijn Soeteman bespreken de Nobelprijs voor natuurkunde 2026 voor Francis Halzen. Eerst kondigen zij een samenwerking met Met Nerds om
Hoe meet je een paar nanogram PFAS in een liter water? In deze aflevering beantwoorden Diederik en Krijn een luisteraarsvraag over de extreem kleine hoeveelheden die tegenwoordig in drinkwater kunnen worden aangetoond. https://scientias.nl/waar-is-alles-van-gemaakt-scientias-podcast-23/ https://podcastfestival.nl/festival/wetenschapspodcastfestival-2026/ Uitgelezen? Luister ook eens naar de Scientias Podcast: !
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
In deze aflevering praten Diederik en Krijn over PFAS in het Nederlandse drinkwater. Wat zijn PFAS precies, waarom gebruiken we ze op zoveel plaatsen en wanneer vormen ze een risico? (En waarom we er echt zo snel mogelijk mee moeten proberen te stoppen). Daarna beantwoorden ze een luisteraarsvraag: hoe werkt geur eigenlijk? Van Aristoteles en [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
In deze aflevering praten Diederik en Krijn over PFAS in het Nederlandse drinkwater. Wat zijn PFAS precies, waarom gebruiken we ze op zoveel plaatsen en
Wie krijgt het miljoen? En heeft AI nou wel of niet de Navier-Stokesvergelijking opgelost, een van de millenniumproblemen, opgesteld door het Clay Mathematichs Institute of Cambridge, Massachusetts (VS). Diederik legt uit aan Krijn hoe het nou eigenlijk zit met die vloeistofdynamica, een nogal pittige tak van de natuurkunde. Luister hier naar de 88ste aflevering van [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
Krijn en Diederik vervolgen hun tweeluik over de Nancy Grace Roman Space Telescope met de vraag wat een panoramische ruimtetelescoop wetenschappelijk oplevert.Β Diederik legt uit waarom onze huidige methoden om exoplaneten te vinden een groot deel van alle planeten missen. Via gravitationele microlensing kan Roman juist planeten met wijde banen en zelfs losgeslagen planeten zonder moederster [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
Diederik en Krijn openen een tweeluik over NASAβs Nancy Grace Roman Space Telescope, die op 30 augustus 2026 met een Falcon Heavy is gelanceerd. Via naamgever Nancy Grace Roman en ruimtepionier Lyman Spitzer verschuift de aflevering naar de vraag waarom telescopen in de ruimte staan en hoe hun optiek door vier eeuwen probleemoplossing ontstond. Hans [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
In aflevering 85 lossen Diederik en Krijn het mysterie op van de Europese klokken die in 2018 zes minuten achterliepen. Daarna reconstrueren ze stap voor stap hoe oscillaties, oplopende spanning, verkeerd ingestelde beveiligingen en uitvallende productie-eenheden de stroomuitval in Spanje en Portugal veroorzaakten. Tot slot bespreken ze hoe grid-forming omvormers, batterijen, synchrone compensatoren en elektrische [β¦]
Meer wetenschap? Lees de nieuwste artikelen op Scientias.nl .
In aflevering 85 lossen Diederik en Krijn het mysterie op van de Europese klokken die in 2018 zes minuten achterliepen. Daarna reconstrueren ze stap voor
Ernst was in Barcelona en betaalde 73 euro per kind om een stadion in de steigers in en uit te lopen. Alexander verloor in Londen zijn rugzak met laptop in een taxi. Grokbot herkende een logootje in zijn bankapp en een uur later reed de chauffeur vanaf de andere kant van de stad terug.
En toen checkten we in bij de voorspelling van Sam Altman: het eerste eenpersoonsbedrijf van een miljard. Het aantal soloondernemers met meer dan een miljoen omzet verdubbelde en Rick Pastoor bouwt in zijn eentje een vervanger voor Google Workspace.
Verder: Alexander vindt rust in een Linux-laptop, Ernst heeft een titanium drinkbeker en we vragen ons af wanneer AI de dood van nu.nl wordt.
Deze aflevering wordt mede mogelijk gemaakt door itsme, de app die bewijst dat jij het bent. Download de app of ga naar itsme-id.com.
Co-existentie voorbestellen: Bestel Co-existentie van Ethan Mollick voor via pom.press en krijg de masterclass van Wietse over Claude Opus 5.5 cadeau. Bestel het hier via pom.press.
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show
Log in
