❌

Normale weergave

v1.21.0

23 September 2026 om 17:42

This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, a setting that keeps your system awake during long-running agent turns, and BYOK support for Claude Opus 5.5 (Anthropic) and GPT-6 Astra, Sol, and Luna (OpenAI).

Features

AI

  • Added SuperGrok sign-in so SuperGrok subscribers can use Grok models in the Agent Panel. (#63248; thanks thibaudgg)
  • Added the agent.prevent_idle_sleep setting, enabled by default, to prevent idle system sleep while agent threads are running. (#53130; thanks cppcoffee)
  • Added support for DeepSeek Flash 4.1. (#64014; thanks cppcoffee)
  • Added the agent.threads_sidebar_default_width setting to configure the width of the Threads Sidebar. (#62883; thanks porada)
  • Added the agent: rename selected thread action for renaming the active Terminal Thread from the Agent Panel. (#63660; thanks mauriciord)
  • Added BYOK support for Claude Opus 5.5 with an Anthropic API key. (#64627)
  • Added BYOK support for GPT-6 Sol and GPT-6 Luna with an OpenAI API key. (#64628)
  • Added BYOK support for GPT-6 Astra with an OpenAI API key. (#64420)
  • Added Z.ai GLM to the Mistral provider. (#63535; thanks ummon-v)
  • Improved ACP compatibility and async task wakeup handling. (#64077)

Git

  • Added Cut, Copy, and Paste context menu actions to the commit message editor. (#64142; thanks hooch)

Languages

  • Added a language server command picker and support for language servers to open files and URLs with showDocument requests. (#63607)
  • Added a prompt to install the Emmet extension when opening files in Emmet-supported languages. (#63750)
  • Added support for running language-server actions directly from actionable inlay hints. (#63605)
  • Improved rendering performance for Markdown code blocks in the Agent Panel, hover popovers, and Markdown preview. (#63138)
  • Improved development extension compilation by automatically replacing outdated WASI SDK installations. (#63816; thanks jkbz64)

Other

  • Added a comment_empty_lines parameter to the editor::ToggleComments keybinding action for multiline selections. Set it to true to comment blank lines or false to skip them; Zed's default keymap now uses true, while the VS Code keymap uses false. (#63961; thanks UdeshyaDhungana)
  • Added editor.code_lens.foreground for customizing CodeLens text independently. (#64084; thanks giorgiopogliani)
  • Added support for "..." in read_only_files so project settings can extend inherited read-only patterns. (#64222; thanks porada)
  • Added menu (Linux and Windows) and shift-f10 (all platforms) shortcuts to open the context menu for the selected Project Panel entry. (#46744; thanks CCXLV)
  • Improved editor rendering performance in syntax-highlighted files, especially with the minimap enabled. (#63145)

Bug Fixes

  • Fixed a bug where folders remained highlighted after they stopped being dragged. (#64038; thanks tidely)
  • Fixed the macOS traffic light animation when exiting fullscreen. (#64339; thanks tidely)
  • Fixed a bug where restored macOS windows reopened on the currently active Space instead of their original Space. (#58886; thanks tnayuki)
  • Fixed auto-compaction thresholds for GitHub Copilot models with a prompt limit below their context window. (#64195)
  • Fixed the Inline Assistant failing to select an available fallback model when no default model was configured. (#63963; thanks hferreiro)
  • Fixed a bug on macOS where moving the pointer over another app could trigger hover effects in a Zed window underneath it. (#64234)
  • Fixed a bug where deleted files appeared outside the file tree in the Outline Panel when viewing a diff. (#63570; thanks FrantisekGazo)
  • Fixed a crash during Python interpreter discovery when an executable emitted non-UTF-8 output. (#64040)
  • Fixed a crash when pasting in an expanded deleted diff hunk in Helix mode. (#64245)
  • Fixed a Linux startup crash when local XKB keyboard-definition files were unavailable. (#64113)
  • Fixed Anthropic credit exhaustion being classified as a malformed request instead of a payment issue. (#63988)
  • Fixed canceled external file drags on Linux Wayland sometimes remaining active and causing later clicks to copy the dragged file. (#64122; thanks itsfuad)
  • Fixed compilation of development extensions on Windows ARM64. (#63816; thanks jkbz64)
  • Fixed compilation of development extensions with large Tree-sitter grammars. (#63816; thanks jkbz64)
  • Fixed data-retention consent checks for hosted counting and compaction requests. (#64194)
  • Fixed diff statistics to use the theme's version-control colors for added and deleted line counts. (#64083; thanks kvechkanov)
  • Fixed font suggestions listing unavailable fallback fonts and internal font aliases. (#64095)
  • Fixed intermittent "database is locked" errors when sharing a database across Zed instances. (#63923; thanks whitecat1331)
  • Fixed Ollama being unable to access images returned by tool calls. (#64121; thanks marius851000)
  • Fixed Python decorator syntax highlighting conflicting with the matrix multiplication operator. (#58077; thanks allachance)
  • Fixed remote server removal prompts not capturing keyboard focus. (#60965; thanks cfiq)
  • Fixed terminal tool output in the Agent Panel to consistently use the theme's terminal.background color. (#64163; thanks chrisdrackett)
  • Fixed the gutter tooltip's modifier-click hint after holding Command. (#64124; thanks GautamBytes)
  • Fixed the Project Panel failing to scroll to collapsed parent folders. (#64207)
  • Fixed a crash when typing into an empty side of a merge conflict. (#64604)
  • Fixed newly available ChatGPT subscription models not appearing in the model picker. (#64625)
  • Fixed the Git Panel unexpectedly switching repositories when viewing changes in multi-repository projects. (#58795; thanks mengh04)
  • Fixed deleted Git gutter markers disappearing at narrow custom widths. (#64469; thanks rajin-khan)
  • Fixed a bug where a project root folder could not be renamed to match a child folder. (#64268; thanks D4r3NPo)
  • Fixed the thinking toggle for Mistral Small and Medium. (#63535; thanks ummon-v)

  •  

v1.22.0-pre

23 September 2026 om 18:21

This week's release includes BYOK support for Claude Opus 5.5 (Anthropic) and GPT-6 Astra, Sol, and Luna (OpenAI), per-call model overrides in spawn_agent, automatic subagent compaction, and dynamically fetched OpenCode models.

Features

AI

  • Added BYOK support for GPT-6 Astra with an OpenAI API key. (#64420)
  • Added BYOK support for GPT-6 Sol and GPT-6 Luna with an OpenAI API key. (#64628)
  • Added BYOK support for Claude Opus 5.5 with an Anthropic API key. (#64627)
  • Added an optional model parameter to spawn_agent to choose a model for that spawn instead of using the configured subagent model or inheriting the parent model, with the active model shown in its card. (#64498; thanks itsfuad)
  • Added Grok 4.7 to the SuperGrok and xAI providers and made it their recommended default. (#64567; thanks raphaelluethy)
  • Added Z.ai GLM to the Mistral provider. (#63535; thanks ummon-v)
  • Added the agent.threads_sidebar.auto_open setting to control whether opening a folder in an existing window also opens the Threads Sidebar. (#64259, #64395; thanks jackhwalters and joshkent94)
  • Added support for "..." in edit_predictions.disabled_globs and edit_predictions_disabled_in so settings can extend inherited edit prediction exclusions and scopes. (#64540, #64546; thanks porada)
  • Enabled compaction for subagents. (#64135)
  • Improved OpenCode model availability by fetching the Zen and Go model list dynamically instead of relying on one bundled with Zed. (#64585)
  • Improved Threads Sidebar sizing so changes to agent.threads_sidebar.default_width take effect even after manually resizing the sidebar. (#64395; thanks joshkent94)

Git

  • Added a unified/split toggle to the diff view opened with zed --diff <old> <new>. (#64529; thanks rn23thakur)
  • Improved how quickly branch diffs show their first changes when a branch has drifted far from its base. (#62536; thanks azeemshaik025)

Terminal

  • Added support for "..." in terminal.path_hyperlink_regexes to extend inherited regexes without repeating them. (#64552; thanks porada)

macOS

  • Added macOS three-finger Look Up and translation gestures for text in focused Markdown previews. (#59297; thanks cppcoffee)

Windows

  • Added MicaBackdrop and MicaAltBackdrop options for the background.appearance theme setting. (#48340; thanks Marocco2)

Other

  • Added support for "..." in file_scan_inclusions and hidden_files so project settings can extend inherited inclusion and hidden-file patterns. (#64440, #64484; thanks porada)
  • Added confirmation in the title bar when a manual update check found Zed was already up to date. (#64106; thanks tahayvr)
  • Improved the pending keystrokes indicator with grouped bindings, a scrollable list, and support for chords without a timeout, such as shortcuts starting with cmd-k. (#64362, #64522)

Bug Fixes

  • Fixed invalid file patterns discarding valid exclusion, hidden-file, read-only, and private-file rules or causing inclusion and file-type settings to panic. (#64525; thanks porada)
  • Fixed cmd-w (macOS) and ctrl-w (Linux/Windows) closing the active dock instead of the active pane item. (#64515)
  • Fixed newly available ChatGPT subscription models not appearing in the model picker. (#64625)
  • Fixed a crash when typing into an empty side of a merge conflict. (#64604)
  • Fixed ligatures being disabled on Windows unless buffer_font_features was set. (#62338; thanks interkelstar)
  • Fixed LSP completions without edit ranges ignoring the configured completions.lsp_insert_mode. (#64139)
  • Fixed the Settings window opening with its header off-screen at high DPI scaling on Windows. (#62073; thanks habisahmad)
  • Fixed the Git Panel unexpectedly switching repositories when viewing changes in multi-repository projects. (#58795; thanks mengh04)
  • Fixed importing VS Code files.exclude into file_scan_exclusions. (#64492; thanks porada)
  • Fixed β€œAdd to .git/info/exclude” failing in secondary Git worktrees. (#63967; thanks mateioprea)
  • Fixed terminals retaining about 2 MB of memory per command after the command finished. (#64405; thanks EcutAtom336)
  • Fixed external-agent terminals completing prematurely or reporting the wrong exit status. (#64544)
  • Fixed a memory leak when closing macOS windows with experimental accessibility enabled. (#64143; thanks feigeCode)
  • Fixed the terminal grid losing its top alignment when growing on Windows. (#63699; thanks 39ali)
  • Fixed a crash on Linux (X11) when a window was redrawn immediately after GPU device recovery. (#64570)
  • Fixed language servers not starting for files opened via UNC paths on Windows. (#56553; thanks Joblen)
  • Fixed PowerShell installed by Scoop not being detected when Scoop uses a custom installation directory. (#62473; thanks jliu666)
  • Fixed task worktree variables resolving to the wrong project when the global tasks.json file was focused, and paths containing spaces breaking Windows tasks. (#55727; thanks di404)
  • Fixed adding the current line to an Agent thread when no text was selected using cmd-> (macOS), ctrl-> (Linux), or ctrl-shift-. (Windows). (#64589)
  • Fixed a bug where a project root folder could not be renamed to match a child folder. (#64268; thanks D4r3NPo)
  • Fixed a bug where the block cursor hid the character underneath until its animation completed. (#64521; thanks linyisu)
  • Fixed columnar selections landing in the wrong column around non-ASCII text, tabs, soft wraps, and collapsed content. (#63723; thanks itsfuad)
  • Fixed the cursor drifting from the center of the editor when using a high vertical_scroll_margin for typewriter-style scrolling. (#63944; thanks rn23thakur)
  • Fixed cursor animations when moving between characters of different widths and during keyboard-triggered autoscrolling. (#64184; thanks tiny-paris)
  • Fixed deleted Git gutter markers disappearing at narrow custom widths. (#64469; thanks rajin-khan)
  • Fixed excerpt expansion when the selection was on deleted text in unified diffs. (#63946; thanks IbrahimKhan12)
  • Fixed a bug where β€œConfigure Excluded Files” selected the wrong list when a commented-out disabled_globs setting appeared before it. (#64540; thanks porada)
  • Fixed diagnostic navigation not linking nearby related diagnostics back to the primary diagnostic. (#64134; thanks GautamBytes)
  • Fixed missing editor underlines for language server diagnostics at positions without underlying text. (#63933; thanks itsfuad)
  • Fixed a bug where the Agent Panel created two terminals when starting a new terminal thread in a project with no existing terminals. (#62151; thanks restlessronin)
  • Fixed keyboard navigation and submission in ACP elicitation forms. (#64193)
  • Fixed errors when ACP agents returned null for empty response payloads. (#64457)
  • Fixed the thinking toggle for Mistral Small and Medium. (#63535; thanks ummon-v)
  • Fixed Markdown preview tabs not showing the source file path on hover. (#64318; thanks GautamBytes)
  • Fixed missing visual feedback when copying REPL output. (#64276; thanks Yao0454)
  • Fixed recording and searching for standalone modifier-key bindings in the Keymap Editor. (#64537)
  • Fixed remote external-agent exit errors appearing before the agent's final response updates were applied. (#64603)
  • Fixed the selection highlight flickering in the Threads Sidebar when clicking terminal threads. (#64387)
  • Fixed snippets from different extensions canceling each other out for the same language. (#58659; thanks LBF38)
  • Fixed Command-clicking a symbol opening a definitions multibuffer instead of the picker when lsp_results_location was set to "picker". (#64039; thanks v-shevtsov)
  • Fixed the macOS traffic light animation when exiting fullscreen. (#64339; thanks tidely)

Breaking Changes and Notices

  • Removed Stop controls from external-agent-managed terminals, which are controlled by the agent rather than a local process. (#64544)
  • Changed Threads Sidebar settings to agent.threads_sidebar.position, agent.threads_sidebar.default_width, and agent.threads_sidebar.auto_open, grouped together in the Settings Editor. Existing settings are migrated automatically. (#64395; thanks joshkent94)
  • Changed the shortcut for closing the active dock from cmd-w (macOS) or ctrl-w (Linux/Windows) to ctrl-alt-w on all platforms. (#64515)
  • Changed terminal.path_hyperlink_regexes so a top-level "..." entry now inserts inherited regexes. To retain the previous three-character regex, replace that entry with ["..."]. (#64552; thanks porada)
  • Stopped importing VS Code’s files.watcherInclude as file_scan_inclusions; watch roots are not Git-ignore overrides. (#64440; thanks porada)

  •  

v5.55.0

23 September 2026 om 14:40

5.55.0 (2026-09-23)

πŸš€ New feature

  • admin: record token management in audit logs (#27605)
  • admin: content type folders (#27419)

πŸ”₯ Bug fix

  • ai endpoints requested when the ai feature is unavailable (#27525)
  • admin: suppress MISSING_TRANSLATION errors to fix sluggish editing (#26108)
  • admin: sso default role placeholder shows "choose here" twice (#27685)
  • content-manager: create on the fly prefills inverse from component paths (#27636)
  • content-manager: saved list sort resets on base-route navigation (#27663)
  • core/core: koa response helper types missing in consumer projects (#27380)
  • database: updateMany with relation filter subquery (#26909)
  • database: document-id migration can take hours on large localized tables (#27404)
  • database: updateMany ignores _q and filters (#27769)
  • documentation: restore properties for repeated relation targets (#27592)
  • graphql: exclude custom resolvers from built-in query field detection (#27462)
  • upload: store unsigned urls in richtext and blocks fields (#27593)
  • upload: media library degrades for roles without settings.read (#27687)
  • upload: show more media grid columns on wider screens (#27711)
  • utils: normalize string chunks before buffering streams (#27700)

βš™οΈ Chore

  • deps: remove unused dependencies from @strapi/strapi (#27540)
  • docker: postgres dev container fails to start on postgres 18 (#27668)
  • upload: promote the new media library out of future/ (#27666)

❀️ Thank You

  •  

Let op: geld sparen kost geld | POM S12E05

23 September 2026 om 13:12

Milou Brand komt langs met haar boek en met een sticker erop die vloekt met alles wat we van kinds af aan hebben geleerd: let op, sparen kost geld. Waar je in 2000 een gezin een week lang voor 50 euro te eten gaf, kost datzelfde mandje nu 90. Je spaarrekening ziet er nog hetzelfde uit, maar je bent de helft kwijt. Ondertussen hebben we met z’n allen 600 miljard braaf apart gezet en kregen we vroeger een Pennymaat om vooral zo door te gaan.

Beleggen daarentegen is volgens het beeld dat wij ervan hebben iets voor mannen in pakken op RTL Z, of erger, voor Marco van Basten die na 9/11 in één dag tien miljoen kwijtraakte en toen ook nog alles verkocht. Milou legt uit waarom het over dertig jaar nog nooit is misgegaan, hoe je je inleg spreidt als je net zo emotioneel bent als Alexander en waarom een redacteur haar vroeg om vooral geen reclame te maken voor beleggen. Alsof dat ooit tegen iemand gezegd wordt over sparen.

En toen kwam het beste idee van Trump tot nu toe ter sprake. Ernst beleeft er zichtbaar plezier aan dat hij dat hardop mag zeggen.

Zwemmen in het geld is vanaf vandaag te koop via pom.press of bij je lokale boekhandel.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.pom.show

πŸ’Ύ

  •  

Counter-Strike 2 Update

23 September 2026 om 01:37
[p]\[ PREMIER ][/p]
  • [p]Updated the map selection process to give players more opportunities to play maps they've been learning.[/p][/*]
  • [p]Map selection process:[/p]
    • [p]Team 1 picks one map[/p][/*]
    • [p]Team 2 picks two maps[/p][/*]
    • [p]Team 1 picks a final map.Β [/p][/*]
    • [p]One of the four maps will be randomly selected and the match will begin.[/p][/*]
    [/*][p][/p][p]\[ RUSH ][/p]
    • [p]Rush is a fast-paced queued 3v3 game mode.Β [/p][/*]
    • [p]Players battle through a series of battle arenas to reach the opponent's castle and win the match.[/p][/*]
    • [p]Battle arenas are randomly selected for each match, so no two matches are the same.[/p][/*]
    • [p]Control the tower when you eliminate the enemy team (or time expires) to win the round.[/p][/*]
    [p][/p][p]\[ GAMEPLAY ][/p]
    • [p]Players can now reload silently (but slowly) by pressing and holding the reload key.[/p][/*]
    • [p]Un-scoping a sniper weapon no longer produces a sound.[/p][/*]
    • [p]Globally increased visual clarity and improved fidelity of bullet impact decals.[/p][/*]
    • [p]ammo_grenade_limit_total setting now also enforces the total number of grenades a player is allowed to purchase in a round.[/p][/*]
    • [p]Chickens now take damage from the Zeus x27.
      [/p][/*]
    [p]\[ SETTINGS ][/p]
    • [p]Crosshairs have been updated to be resolution independent.[/p]
      • [p]A new "Crosshair/Scopes" tab is available in the Settings menu, and includes updated crosshair settings.[/p][/*]
      • [p]Added new crosshair styles[/p][/*]
      • [p]Updated the default crosshair to "Dynamic Quad," which better represents weapon accuracy.[/p][/*]
      [/*][p][/p][p]\[ ENGINE ][/p]
      • [p]Updated engine code to the latest version of Source 2.[/p][/*]
      [p][/p][p]\[ MAPS ][/p][p]Ancient[/p]
      • [p]Fixed holes in world in Long A Main Hall.[/p][/*]
      • [p]Adjusted door geometry and grenade clipping inside Jaguar.[/p][/*]
      [p]Cache[/p]
      • [p]Some gap fixes and clipping adjustments around the blue doors in Mid.[/p][/*]
      [p]Mirage[/p]
      • [p]Reinforced scaffolding by balcony in A site.[/p][/*]
      [p]Train[/p]
      • [p]Blocked pixel gap in crates on bombsite A.[/p][/*]
      [p][/p][p]\[ MISC ][/p]
      • [p]Added ability to set a "Clan Tag" for players who are members of Steam Community Groups. You can adjust your Clan Tag from your Player Profile.[/p][/*]
      • [p]Added support for applying stickers to C4.[/p][/*]
      • [p]The Starjunk 95, Industrial Sunset Memories Music Kit is now available for purchase in standard and StatTrak versions through the STORE tab.[/p][/*]
      • [p]Halftime scoreboard stats should now fully reflect the results of the previous round.[/p][/*]
      • [p]Fixed a case where players could avoid a kick ban.[/p][/*]
      • [p]Players can now adjust music volume per game-mode.[/p][/*]
      [p][/p][p]\[ WORKSHOP ]Β [/p]
      • [p]Added "minimap_volume" entity which enables a custom minimap image when a player is within the volume.[/p][/*]
      • [p]Added "sky_camera_volume" and "sky_camera_volume_target", which enable custom location-specific skybox rendering.[/p][/*]
      • [p]Added "point_deathcam_bounds" entity that constrains the player death camera.[/p][/*]
      • [p]Added "env_shake_volume" entity that allows camera shake only within a specified volume.[/p][/*]
      [p][/p][p]\[ SCRIPTING ][/p]
      • [p]Added CSRadarPoint entity.[/p][/*]
      • [p]Added CSObservablePoint entity.[/p][/*]
      • [p]Added AddTeamMoney API method.[/p][/*]
      • [p]Added OnPlayerTeamChanged callback.[/p][/*]
      • [p]SetDialogVariableString now accepts a localization string.[/p][/*]
      •  

      Extended Stable Update for Desktop

      22 September 2026 om 20:19

      The Extended Stable channel has been updated to 152.0.7977.140Β for Windows and Mac which will roll out over the coming days/weeks.

      A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

      Srinivas Sista
      Google Chrome
      •  

      Stable Channel Update for Desktop

      22 September 2026 om 23:30

      The Chrome team is delighted to announce the promotion of Chrome 154 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

      Chrome 154.0.8037.57 (Linux)Β 154.0.8037.57/.58Β Windows/Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 154.

      Security Fixes and Rewards

      Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

      This update includes 108 security fixes. Please see the Chrome Security Page for more information.

      [$5,000][551573368] Critical CVE-2026-95350: Buffer overflow in ANGLE. Reported by Billy Jheng Bing Jhong, Muhammad Alifa Ramdhan, Pan Zhenpeng of STAR Labs SG Pte. LTd. on 2026-08-24

      [$2,500][530045332] Critical CVE-2026-95357: Out of bounds write in GPU. Reported by Anymous on 2026-07-01

      [TBD][548585299] Critical CVE-2026-95339: Use after free in ServiceWorker. Reported by Andrew Boni on 2026-08-18

      [TBD][551708184] Critical CVE-2026-95281: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd. on 2026-08-24

      [TBD][552665794] Critical CVE-2026-95313: Use after free in Fullscreen. Reported by WinD39 - Huynh Dinh Vu on 2026-08-26

      [N/A][553172761] Critical CVE-2026-95349: Buffer overflow in WebGL. Reported by Google on 2026-08-27

      [TBD][556435507] Critical CVE-2026-95284: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan (STARLABS SG) on 2026-09-03

      [TBD][556576992] Critical CVE-2026-95322: Out of bounds write in GPU. Reported by David Sievers (@loknop) on 2026-09-03

      [N/A][559320837] Critical CVE-2026-95329: Out of bounds write in WebGL. Reported by Google on 2026-09-09

      [TBD][560439699] Critical CVE-2026-95356: Use after free in WindowDialog. Reported by Xinyang Ge on 2026-09-12

      [TBD][562151598] Critical CVE-2026-95310: Use after free in AdFilter. Reported by Xinyang Ge on 2026-09-16

      [$5,000][540265100] High CVE-2026-95301: Missing authorization in Extensions. Reported by OGINOME Tomohito on 2026-07-29

      [$5,000][543471693] High CVE-2026-95291: UI misrepresentation in SecurityIndicators. Reported by NH DEV on 2026-08-07

      [N/A][508462481] High CVE-2026-95355: Incorrect authorization in Navigation. Reported by Google on 2026-05-01

      [N/A][517661385] High CVE-2026-95315: Use after free in Aura. Reported by Google on 2026-05-29

      [N/A][520516206] High CVE-2026-95298: Use after free in Browser. Reported by Google on 2026-06-05

      [N/A][534997484] High CVE-2026-95372: Use after free in Chromecast. Reported by Google on 2026-07-15

      [N/A][537857253] High CVE-2026-95324: Uninitialized resource in GPU. Reported by Google on 2026-07-22

      [N/A][543141419] High CVE-2026-95283: Buffer overflow in Tint. Reported by Google on 2026-08-06

      [TBD][550953039] High CVE-2026-95293: Uninitialized resource in GPU. Reported by TienPA - NGS Holdings on 2026-08-22

      [N/A][553116160] High CVE-2026-95274: Improper output encoding in DevTools. Reported by Google on 2026-08-26

      [N/A][553129513] High CVE-2026-95282: Use after free in Platform. Reported by Google on 2026-08-26

      [N/A][553130481] High CVE-2026-95373: Use after free in DevTools. Reported by Google on 2026-08-26

      [N/A][553136141] High CVE-2026-95277: Use after free in Views. Reported by Google on 2026-08-26

      [N/A][554558320] High CVE-2026-95348: Use after free in Bluetooth. Reported by Google on 2026-08-29

      [TBD][555299641] High CVE-2026-95335: Use after free in HID. Reported by WinD39 - Huynh Dinh Vu on 2026-09-01

      [TBD][556535630] High CVE-2026-95338: Use after free in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722) on 2026-09-03

      [TBD][556576976] High CVE-2026-95318: Buffer overflow in Video. Reported by alex.laboirie on 2026-09-03

      [TBD][557523002] High CVE-2026-95286: Type confusion in Bindings. Reported by @bean5oup on 2026-09-05

      [TBD][558764482] High CVE-2026-95365: Type confusion in IndexedDB. Reported by HoneyBee on 2026-09-08

      [TBD][559815527] High CVE-2026-95343: Use after free in WebAudio. Reported by HoneyBee on 2026-09-11

      [N/A][560406548] High CVE-2026-95280: Race condition in V8. Reported by Google on 2026-09-12

      [TBD][560536731] High CVE-2026-95304: Out of bounds write in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-12

      [TBD][560536735] High CVE-2026-95306: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-12

      [N/A][561997427] High CVE-2026-95299: Use after free in GPU. Reported by Google on 2026-09-15

      [TBD][562242429] High CVE-2026-95351: Use after free in Views. Reported by Xinyang Ge on 2026-09-16

      [N/A][495529018] Medium CVE-2026-95287: Missing authorization in Navigation. Reported by Google on 2026-03-23

      [N/A][497204165] Medium CVE-2026-95366: Use of released resource in Core. Reported by Google on 2026-03-28

      [N/A][497212105] Medium CVE-2026-95382: Improper input validation in Auth. Reported by Google on 2026-03-28

      [N/A][497603247] Medium CVE-2026-95381: Improper input validation in Printing. Reported by Google on 2026-03-30

      [N/A][500127519] Medium CVE-2026-95331: Out of bounds write in ANGLE. Reported by Google on 2026-04-06

      [N/A][501648493] Medium CVE-2026-95297: Missing authorization in Contextual Tasks. Reported by Google on 2026-04-11

      [N/A][502179319] Medium CVE-2026-95375: Incorrect authorization in BrowserTag. Reported by Google on 2026-04-13

      [N/A][502242455] Medium CVE-2026-95302: Incorrect authorization in WebAPKs. Reported by Google on 2026-04-13

      [N/A][511791538] Medium CVE-2026-95362: Cross-site request forgery in DevTools. Reported by Google on 2026-05-10

      [N/A][513049042] Medium CVE-2026-95369: Inappropriate implementation in XML. Reported by Google on 2026-05-14

      [N/A][513134076] Medium CVE-2026-95376: Externally controlled reference in DevTools. Reported by Google on 2026-05-14

      [N/A][513162143] Medium CVE-2026-95359: Uninitialized resource in GPU. Reported by Google on 2026-05-14

      [N/A][513992281] Medium CVE-2026-95294: UI misrepresentation in Browser. Reported by Google on 2026-05-17

      [N/A][514019137] Medium CVE-2026-95337: UI misrepresentation in Messages. Reported by Google on 2026-05-17

      [N/A][514059630] Medium CVE-2026-95346: UI misrepresentation in Chromoting. Reported by Google on 2026-05-17

      [N/A][514072284] Medium CVE-2026-95320: Missing authorization in Navigation. Reported by Google on 2026-05-17

      [N/A][514487499] Medium CVE-2026-95317: Incorrect authorization in MediaCapture. Reported by Google on 2026-05-19

      [N/A][516404074] Medium CVE-2026-95345: Use after free in Actor. Reported by Google on 2026-05-25

      [N/A][517163294] Medium CVE-2026-95330: Improper state validation in Downloads. Reported by Google on 2026-05-27

      [N/A][517417437] Medium CVE-2026-95370: Inappropriate implementation in NFC. Reported by Google on 2026-05-28

      [N/A][517442714] Medium CVE-2026-95303: Incomplete cleanup in SmartCard. Reported by Google on 2026-05-28

      [N/A][517584808] Medium CVE-2026-95360: Race condition in Editing. Reported by Google on 2026-05-28

      [N/A][517596255] Medium CVE-2026-95295: Information leak in Mobile. Reported by Google on 2026-05-28

      [N/A][517730821] Medium CVE-2026-95276: Improper input validation in Themes. Reported by Google on 2026-05-29

      [N/A][517802696] Medium CVE-2026-95314: Incorrect authorization in HID. Reported by Google on 2026-05-29

      [N/A][520504291] Medium CVE-2026-95371: Missing authorization in Views. Reported by Google on 2026-06-05

      [N/A][522061704] Medium CVE-2026-95353: Use after free in Bindings. Reported by Google on 2026-06-10

      [N/A][522344883] Medium CVE-2026-95363: UI misrepresentation in FileSystem. Reported by Google on 2026-06-10

      [N/A][523719002] Medium CVE-2026-95341: Improper input validation in Desktop. Reported by Google on 2026-06-14

      [N/A][524582798] Medium CVE-2026-95354: Use after free in Verifier. Reported by Google on 2026-06-16

      [N/A][526550688] Medium CVE-2026-95384: Race condition in Transactions Platform. Reported by Google on 2026-06-22

      [N/A][532962621] Medium CVE-2026-95336: Information leak in Transactions Platform. Reported by Google on 2026-07-09

      [N/A][536161355] Medium CVE-2026-95290: Missing authorization in NFC. Reported by Google on 2026-07-18

      [N/A][536648933] Medium CVE-2026-95325: Use after free in ANGLE. Reported by Google on 2026-07-19

      [TBD][542926849] Medium CVE-2026-95275: Incorrect reference resolution in MediaStream. Reported by Zabith Mohammed (@nmzabith) on 2026-08-05

      [TBD][543464436] Medium CVE-2026-95374: Incorrect authorization in Network. Reported by NH DEV on 2026-08-07

      [N/A][545449081] Medium CVE-2026-95300: Missing authorization in DevTools. Reported by Google on 2026-08-12

      [TBD][545879261] Medium CVE-2026-95321: UI misrepresentation in Payments. Reported by jodyritonga on 2026-08-13

      [TBD][546438368] Medium CVE-2026-95323: UI misrepresentation in Chromium. Reported by Wihdatu Nuuro Ahmadi on 2026-08-14

      [N/A][546639650] Medium CVE-2026-95332: Use of uninitialized variable in Tint. Reported by Google on 2026-08-14

      [N/A][547832510] Medium CVE-2026-95312: Information leak in Passwords. Reported by Google on 2026-08-17

      [TBD][548611433] Medium CVE-2026-95344: Race condition in DevTools. Reported by @bean5oup on 2026-08-18

      [TBD][549911100] Medium CVE-2026-95289: Incorrect authorization in Scroll. Reported by Vu Van Tien (@n0_Be3r) on 2026-08-21

      [TBD][550181232] Medium CVE-2026-95347: Use after free in Updater. Reported by a45hif on 2026-08-21

      [N/A][553123003] Medium CVE-2026-95311: Free of non-heap memory in Fonts. Reported by Google on 2026-08-26

      [N/A][553141660] Medium CVE-2026-95358: Incorrect authorization in Mobile. Reported by Google on 2026-08-26

      [TBD][559682346] Medium CVE-2026-95333: Use after free in Metrics. Reported by sean geofrey on 2026-09-10

      [$500][423956129] Low CVE-2026-95307: UI misrepresentation in ExtensionsMenu. Reported by Hafiizh on 2025-06-11

      [N/A][497094708] Low CVE-2026-95285: Missing authorization in WebView. Reported by Google on 2026-03-28

      [N/A][497344014] Low CVE-2026-95278: Missing authorization in WakeLock. Reported by Google on 2026-03-29

      [N/A][502077689] Low CVE-2026-95327: Information leak in Networking. Reported by Google on 2026-04-13

      [N/A][513403696] Low CVE-2026-95334: Incorrect reference resolution in WebProtect. Reported by Google on 2026-05-15

      [N/A][513714849] Low CVE-2026-95308: Integer overflow in Metrics. Reported by Google on 2026-05-16

      [N/A][513781838] Low CVE-2026-95292: Incorrect authorization in Safebrowsing. Reported by Google on 2026-05-16

      [N/A][513791872] Low CVE-2026-95352: Incorrect authorization in DevTools. Reported by Google on 2026-05-16

      [N/A][514012689] Low CVE-2026-95279: UI misrepresentation in Omnibox. Reported by Google on 2026-05-17

      [N/A][514524620] Low CVE-2026-95367: Information leak in DataTransfer. Reported by Google on 2026-05-19

      [N/A][517192965] Low CVE-2026-95385: Inappropriate implementation in PlatformIntegration. Reported by Google on 2026-05-27

      [N/A][522413520] Low CVE-2026-95368: Incorrect authorization in DevTools. Reported by Google on 2026-06-10

      [N/A][523765972] Low CVE-2026-95319: Use after free in Printing. Reported by Google on 2026-06-14

      [N/A][533041383] Low CVE-2026-95326: Incomplete cleanup in Bluetooth. Reported by Google on 2026-07-09

      [N/A][533074595] Low CVE-2026-95309: UI misrepresentation in Mobile. Reported by Google on 2026-07-09

      [N/A][533095855] Low CVE-2026-95361: Confused deputy in DevTools. Reported by Google on 2026-07-09

      [N/A][533102653] Low CVE-2026-95288: UI misrepresentation in Mobile. Reported by Google on 2026-07-09

      [N/A][534579660] Low CVE-2026-95380: Type confusion in V8. Reported by Google on 2026-07-14

      [TBD][547027738] Low CVE-2026-95342: Missing authorization in V8. Reported by Hongwei Li, Zhun Wang, Ziyue Pan, Junmin Zhu, Saastha Vasan, and Wenbo Guo on 2026-08-16

      [TBD][551296612] Low CVE-2026-95296: Missing authorization in Core. Reported by Quyền SƑn (@zer0qs1337) on 2026-08-23

      [N/A][552023752] Low CVE-2026-95316: Unchecked return value in Performance. Reported by Google on 2026-08-24

      [N/A][553148673] Low CVE-2026-95328: Confused deputy in Mobile. Reported by Google on 2026-08-26

      [N/A][553268567] Low CVE-2026-95340: Incorrect authorization in PictureInPicture. Reported by Google on 2026-08-27

      [N/A][553271219] Low CVE-2026-95364: Improper input validation in Passwords. Reported by Google on 2026-08-27

      [N/A][553921181] Low CVE-2026-95305: UI misrepresentation in Chromoting. Reported by Google on 2026-08-28

      We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

      Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

      Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.


      Srinivas Sista

      Google Chrome

      Share on TwitterΒ 
      •  

      v12.4.0

      22 September 2026 om 20:54

      ⚠️ Potential Breaking Changes

      Updated MapLibre GL JS from 1.15.3 to 6.9.0 (#28216)
      The map layout and the geometry interface now require WebGL2, which MapLibre has mandated since v3. Browsers that only support WebGL1, chiefly Safari 14 and earlier and older Android devices, will no longer render maps.

      Dragging with a pointer or a mouse wheel keeps the hovered item popup pinned to the cursor as before. Touch drags no longer reposition it, since the underlying touch event carries no cursor coordinates.

      Updated Unhead from 1.11.20 to 3.4.1 (#28248)
      @directus/themes now requires @unhead/vue 3.x as a peer dependency. Projects that pair it with their own Unhead instance need to upgrade and follow the v2 and v3 migration guides.

      Updated outdated type definitions for directus_comments, directus_flows, directus_operations, directus_presets, directus_roles, and directus_versions (#27956)
      The following fields are now correctly marked as nullable:

      • @directus/types: Comment.user_created, Comment.user_updated, FlowRaw.user_created, OperationRaw.options, OperationRaw.user_created, Preset.collection, Role.description, and ContentVersion.hash
      • @directus/sdk: DirectusRole.parent and DirectusVersion.hash

      Updated outdated type definitions for directus_relations, directus_policies, directus_shares, directus_access, directus_comments, and directus_versions (#27970)
      Breaking changes in @directus/sdk:

      • DirectusRelation.meta and DirectusRelation.schema are now nullable
      • DirectusPolicy.ip_access and DirectusRelation.meta.one_allowed_collections are now correctly typed as string[]

      Breaking changes in @directus/types:

      • Policy.enforce_tfa is no longer nullable
      • Share.name, role, password, user_created, date_created and times_used are now nullable

      Fixed read permissions not enforced when resolving item keys for updateByQuery and deleteByQuery (#28143)
      Update/delete by query now resolves the affected items with the read permissions enforced:

      • Read access to the collection's primary key field is now required.
      • The affected items are scoped to what the role can read, irrespective of update rights.
      • Nested o2m saves require read access on the child collection.

      Added native mailtrap email transport support via EMAIL_TRANSPORT=mailtrap (#27873)
      The transport is configured through the following environment variables:

      • EMAIL_MAILTRAP_TOKEN β€” an API token from https://mailtrap.io/api-tokens. Required.

      • EMAIL_MAILTRAP_SANDBOX β€” send to the testing inbox instead of real recipients.

      • EMAIL_MAILTRAP_TEST_INBOX_ID β€” which testing inbox to send to. Required in sandbox mode.

      • EMAIL_MAILTRAP_BULK β€” send via the bulk stream. Cannot be combined with sandbox mode.

      • @directus/app

      • @directus/themes

      • @directus/types

        • Updated outdated type definitions for directus_relations, directus_policies, directus_shares, directus_access, directus_comments, and directus_versions (#27970 by @kheiner)
      • @directus/sdk

        • Updated outdated type definitions for directus_relations, directus_policies, directus_shares, directus_access, directus_comments, and directus_versions (#27970 by @kheiner)
        • Removed the unused helper types ToTuple and TupleToUnion (#27956 by @kheiner)

      ✨ New Features & Improvements

      • @directus/app
        • Disabled inactive collections in the Studio, preventing them from being selected or used while being viewable (#27792 by @br41nslug)
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
        • Added support for hiding a manual Flow's own button, so it runs only from a Manual Flow field (#28206 by @robluton)
        • Added support for setting the From Name in the Send Email operation (#28206 by @robluton)
      • @directus/api
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
        • Added support for hiding a manual Flow's own button, so it runs only from a Manual Flow field (#28206 by @robluton)
        • Added support for setting the From Name in the Send Email operation (#28206 by @robluton)
        • Added native mailtrap email transport support via EMAIL_TRANSPORT=mailtrap (#27873 by @tsokolovs)
      • @directus/system-data
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
      • @directus/specs
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
      • @directus/types
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
      • @directus/cli
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
      • @directus/sdk
        • Moved Flows into its own module and improved how they're organized and managed, including folders, search and filtering, import and export, and duplication (#28206 by @robluton)
      • @directus/env
        • Added native mailtrap email transport support via EMAIL_TRANSPORT=mailtrap (#27873 by @tsokolovs)

      πŸ› Bug Fixes & Optimizations

      • @directus/app
        • Fixed the image editor's error notice rendering as an unstyled info message instead of an error (#28245 by @Nitwel)
        • Updated Unhead from 1.11.20 to 3.4.1 (#28248 by @br41nslug)
        • Fixed relational edits made in quick succession saving duplicate create or update entries for the same row, which made the stale entry win and dropped block editor changes inside translations (#28247 by @alvarosabu)
        • Fixed the filter delete (x) button in the search bar's filter popover becoming unclickable on hover. (#28114 by @aniruddhav25)
        • Fixed table row context menus staying open when opening the menu on another row (#28191 by @robluton)
        • Updated outdated type definitions for directus_comments, directus_flows, directus_operations, directus_presets, directus_roles, and directus_versions (#27956 by @kheiner)
        • Updated outdated type definitions for directus_relations, directus_policies, directus_shares, directus_access, directus_comments, and directus_versions (#27970 by @kheiner)
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
        • Updated dompurify, joi, express, qs, uuid, diff, pm2, OpenTelemetry and AI SDK dependencies to address CVEs (#28242 by @br41nslug)
        • Fixed the date picker calendar showing English weekday names and starting the week on Sunday regardless of the user language (#28147 by @lazerg)
        • Replaced lodash with lodash-es in the Studio (#28245 by @Nitwel)
        • Added new DEV_APP_PORT env var for setting the app port while in development mode (#28112 by @robluton)
      • @directus/api
        • Updated outdated type definitions for directus_comments, directus_flows, directus_operations, directus_presets, directus_roles, and directus_versions (#27956 by @kheiner)
        • Updated outdated type definitions for directus_relations, directus_policies, directus_shares, directus_access, directus_comments, and directus_versions (#27970 by @kheiner)
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
        • Updated dompurify, joi, express, qs, uuid, diff, pm2, OpenTelemetry and AI SDK dependencies to address CVEs (#28242 by @br41nslug)
        • Updated stream-json from 1.9.1 to 3.6.0 (#28251 by @br41nslug)
        • Fixed read permissions not enforced when resolving item keys for updateByQuery and deleteByQuery (#28143 by @br41nslug)
        • Fixed relational fields ordering to align with the order of fields in query parameters. (#28197 by @wakqasahmed)
        • Fixed Oracle JSON filtering and json() function returning quoted strings for scalar string values (#28264 by @wofiporia)
        • Fixed schema cache synchronization timeouts leaving stale bus subscriptions and pending timers behind (#28178 by @lazerg)
        • Fixed the global access cache ignoring the client IP (#28190 by @br41nslug)
        • Updated sharp, nodemailer, tiptap, js-yaml and mysql2 dependencies (#28219 by @br41nslug)
        • Fixed the block editor flickering and losing its controls while editing a version (#28105 by @alvarosabu)
        • Fixed schema diff generation for nested metadata additions and removals (#27880 by @thribhuvan003)
        • Fixed FilesService.uploadOne to prevent client payloads from overwriting system fields (e.g., uploaded_by, created_on etc) (#28208 by @br41nslug)
        • Fixed year() function on Oracle returning the ISO week-numbering year instead of the calendar year, and made the Oracle date part functions (year, month, week, day, weekday, hour, minute, second) return numbers instead of zero padded strings (#28257 by @galshir)
        • Fixed uploaded_on not being set for TUS uploads (#28043 by @kheiner)
        • Fixed comment updates and deletes enforcement (#28162 by @kheiner)
        • Fixed foreign key constraints being dropped when updating a relation with a partial payload (#28137 by @lazerg)
        • Updated Flows and Operations tools to automatically fix incorrect X/Y positions for flow operations when used through (#28159 by @bryantgillespie)
          MCP and AI Assistant
      • @directus/types
        • Updated outdated type definitions for directus_comments, directus_flows, directus_operations, directus_presets, directus_roles, and directus_versions (#27956 by @kheiner)
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
      • @directus/sdk
        • Updated outdated type definitions for directus_comments, directus_flows, directus_operations, directus_presets, directus_roles, and directus_versions (#27956 by @kheiner)
        • Added missing empty-parameter validation to readRelationByCollection, createField, deleteCollection, utilsExport, utilsImport, utilitySort, triggerFlow, and readShareInfo (#27970 by @kheiner)
        • Updated known-but-not-enforced string fields on directus_users, directus_settings, directus_deployment_runs (#28129 by @kheiner)
      • @directus/errors
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
      • @directus/schema-builder
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
      • @directus/utils
        • Blocked crud usage for inactive collections and added a COLLECTION_INACTIVE error (#27792 by @br41nslug)
      • @directus/memory
        • Fixed the local key-value store treating equal setMax values as updates (#28172 by @jashkarangiya)
        • Fixed concurrent local KV updates losing increments or overwriting larger values in setMax. (#28194 by @jashkarangiya)
      • @directus/release-notes-generator

      πŸ“¦ Published Versions

      • @directus/app@18.0.0
      • @directus/api@39.2.0
      • @directus/cli@12.3.0
      • @directus/composables@11.6.3
      • create-directus-extension@12.1.5
      • @directus/env@6.3.0
      • @directus/errors@2.5.2
      • @directus/extensions@4.0.5
      • @directus/extensions-registry@4.0.4
      • @directus/extensions-sdk@18.0.5
      • @directus/memory@4.0.5
      • @directus/pressure@4.0.5
      • @directus/release-notes-generator@3.0.2
      • @directus/schema-builder@1.0.3
      • @directus/specs@15.2.0
      • @directus/storage-driver-azure@13.0.5
      • @directus/storage-driver-cloudinary@14.0.2
      • @directus/storage-driver-gcs@13.0.5
      • @directus/storage-driver-s3@14.0.2
      • @directus/storage-driver-supabase@5.0.2
      • @directus/system-data@4.7.0
      • @directus/themes@3.0.0
      • @directus/types@17.0.0
      • @directus/utils@13.5.5
      • @directus/validation@3.0.5
      • @directus/sdk@26.0.0

      •  

      Minecraft 26.4-snapshot-1 (snapshot) Released

      22 September 2026 om 15:38
      26.4 Snapshot 1 (known as 26.4-snapshot-1 in the launcher) is the first snapshot for Java Edition 26.4, released on September 22, 2026, which makes minor changes and fixes bugs. Full changelog: https://minecraft.wiki/Java_Edition_26.4-snapshot-1
      •  

      BSD Release: NetBSD 10.2

      22 September 2026 om 17:29
      The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The NetBSD project has announced the release of NetBSD 10.2, which introduces several fixes and small improvements to the highly portable operating system. "Changes since NetBSD 10.1 - Userspace: calendars: updated dates of moving holidays for 2026. build.sh: fixed various compilation issues with newer GCC versions. build.sh: add....
      •  

      Distribution Release: Univention Corporate Server 5.2-7

      22 September 2026 om 16:18
      The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Univention project has published an update for Univention Corporate Server which introduces new security options, selecting password hashes, performing Keycloak monitoring and simplifies managing Microsoft 365 Classroom tools. "The latest patch-level release of Univention Corporate Server bundles all new features and improvements from the past months onto....
      •  

      NVIDIA Driver 617.14

      22 September 2026 om 00:00
      Release Highlights:
      Although GeForce Game Ready Drivers and NVIDIA Studio Drivers can be installed on supported notebook GPUs, the original equipment manufacturer (OEM) provides certified drivers for your specific notebook on their website. NVIDIA recommends that you check with your notebook OEM for recommended software updates for your notebook.

      Game Ready for CONTROL Resonant, Gears of War: E-Day, The Witcher 3: Wild Hunt – Remastered & AION 2
      This new Game Ready Driver provides the best gaming experience for the latest new games supporting DLSS and RTX technologies including CONTROL Resonant, Gears of War: E-Day, The Witcher 3: Wild Hunt – Remastered and AION 2.

      Fixed Gaming Bugs
      • Judgement/Lost Judgement/ Virtua Fighter 5 R.E.V.O. may fail to launch after updating to driver 616.56 [6681537]

      Fixed General Bugs
      • No picture on Samsung Odyssey G95NC monitor when connected via HDMI after updating to R615 drivers [6771206]
      • Certain monitors may not wake from sleep when connected via DisplayPort after updating to R615 drivers [6757568]

      Learn more in our Game Ready Driver article here.

      Game Ready Driver

      •  

      Firefox 156.0.1

      22 September 2026 om 14:50

      Fixed

      • Fixed the NVDA screen reader not announcing address bar buttons when the mouse pointer moves over them. (Bug 2069276)

      • Fixed elements inside a link not showing their CSS :active styles while being clicked. (Bug 2067272)

      • Fixed Firefox becoming unresponsive on some pages that use CSS anchor positioning. (Bug 2070171)

      • Fixed Firefox windows on macOS 27 immediately returning to maximized after being restored by double-clicking the title bar. (Bug 2066632)

      • Fixed Firefox leaking system handles on Windows as content processes were started and stopped. (Bug 2069644)

      •  

      v1.18.32

      22 September 2026 om 00:51

      Core

      Bugfixes

      • Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models.
      • Fixed Together AI streaming usage reporting.

      Thank you to 1 community contributor:

      • @dc85:
        • docs: add DeepSeek V4.1 Flash to Zen (#49897)
        • feat: add Grok 4.7 to Zen and Go (#50288)

      •  

      v1.11.0-beta.2 - Bulwark Lite (Pre-release)

      Door: rathlinus
      21 September 2026 om 20:56

      Pre-release. This is a test build for Bulwark Lite. Not recommended for production. The latest Docker tag stays on 1.10.0. To try the server build, use ghcr.io/bulwarkmail/webmail:1.11.0-beta.2.

      Bulwark Lite

      • bulwark-lite-1.11.0-beta.2.zip: unpack it on any static web host and set your JMAP server in config.json. The JMAP server must allow CORS from the webmail origin.
      • bulwark-lite-stalwart.zip: a Stalwart Application bundle that serves itself under the configured prefix (e.g. /webmail).

      The Lite zips are attached once the Build Static Lite workflow finishes (a few minutes after publishing).

      Changes since beta.1

      • Toasts for mail actions that had no feedback, plus an "email sent" toast after immediate sends
      • Toasts show again
      • Deep links resolve to the local instance
      • A staged attachment is kept until its upload finishes

      Please report problems in the issue tracker.

      •  

      uNmINeD 0.20.10-dev

      Door: megasys
      21 September 2026 om 14:42

      New uNmINeD development snapshot is available for download!

      Changes:

      • Fixed Bedrock LevelDB parsing errors
      • (GUI) Fixed random black isometric tiles
      •  

      v0.16.23

      21 September 2026 om 11:57

      [0.16.23] - 2026-09-21

      If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

      Added

      • Expressions: bit_and function.

      Changed

      Fixed

      • MTA:
        • A mailing list whose recipients include another mailing list is accepted at RCPT TO and then rejected at local delivery with 550 5.5.0 Mailbox not found.
        • DMARC aggregate reports carry two spf elements per record and the version element of a DMARC aggregate report is written as 1 instead of 1.0.
        • DSNs generated for an alias rewrite or a list expansion emit a doubled addr-type in Original-Recipient (rfc822;rfc822;user@example.org).
        • DSNs that cannot be written to the store are discarded, the recipients are flagged as notified and the original message is removed from the queue, losing both the bounce and the message.
      • POP3:
        • TOP msg n counts the n lines from the first byte of the message instead of from the first byte of the body.
        • A message whose very first line begins with . is not byte-stuffed.
      • Spam filter: Moving or copying a message from one account into another creates no training sample, so the classifier never learns from it.
      • Sieve: envelope "orcpt" yields the bare address for an ORCPT supplied over SMTP. It now carries the addr-type prefix in every case, as required by RFC 6009.
      • ACME: The _acme-challenge TXT records published for a DNS-01 authorization are never removed.
      • DNS: The DNSSEC resolver queries a single nameserver at a time, working around a hickory-resolver race that cancels the TCP retry when two nameservers return a truncated response in parallel.
      • Troubleshoot tool:
        • MX records are resolved through the DNSSEC-validating resolver, matching the resolver used by the delivery path.
        • A TLSA lookup that fails or returns bogus records stops the delivery attempt for that host, instead of continuing without DANE.
      • OIDC: Bearer tokens that carry no email, preferred_username or upn claim are always authenticated against the default directory.
      • Meilisearch: A confirmation timeout is treated as a failed write even when failOnTimeout is disabled, so an index whose batches take longer than pollInterval x maxRetries never completes an indexing task and resubmits the same batch indefinitely.
      • WebUI: A failed update no longer takes an Application offline.
      • FoundationDB: The cached read version is invalidated when any broadcast is received from another node.
      • Redis:
        • On a cluster, the rate limiter and the blob upload quota issue INCR and EXPIRE as a MULTI/EXEC transaction, whose MOVED redirects collapse into a single EXECABORT that never refreshes the slot map.
        • A connection that fails because it is addressing the wrong server is returned to the pool and reused, since the recycle check only issues PING.

      Check binary attestation here

      •  

      DistroWatch Weekly, Issue 1191

      21 September 2026 om 02:14
      The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
      Review: Command line shells
      News: Orphaned Void packages, Ubuntu finishes migration from GNU to Rust Coreutils, new CoW filesystem for OpenBSD, new features in GNU Coreutils
      Questions and answers: The legacy of filenames on Linux
      Released last week: Raspberry Pi OS 2026-09-15, Parted Magic 26.09, Clonezilla....
      •  

      Distribution Release: MX Linux 25.3

      21 September 2026 om 01:59
      The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The MX Linux project has published a new update to the 25.x series. Along with importing new security fixes and firmware from its Debian parent, the MX Linux project includes a number of new changes: "On the MX side, we have pushed most of our updates as we’ve....
      •  

      Part-DB 2.18.0

      Door: jbtronics
      20 September 2026 om 22:33

      Warning

      After upgrade, you need to run php bin/console doctrine:migrations:migrate (or equivalent) as webserver user after upgrade.. If you are running a docker container, use sudo docker exec --user=www-data partdb php bin/console doctrine:migrations:migrate, or sudo -E inside the docker container, to ensure that the migrations are applied to the correct database.

      Note

      If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

      Part-DB 2.18.0

      New features

      • Added generic AI client, that can be used for any OpenAI compatible LLM API (#1551)
      • Allow to specify a color for custom part states by @killecaptron in #1537
      • Retrieve and store stock levels from info providers for parts by @killecaptron in #1538
      • Allow to configure which field groups are exported to KiCad by @lukas-runge in #1533
      • Show DEFAULT_URI value in server info page
      • Report an AI provider error instead of ending the request with a 500 by @killecaptron in #1539
      • Added an debug_vars() twig functions in the twig label sandbox to list all available variables
      • Do not download non-downloadable attachments and improve handling changing URLs on attachment merge by @killecaptron in #1531
      • Rate limit requests to info providers by @killecaptron in #1536
      • Allow direct refreshing parts from the info provider they were created with & batch refreshing by @killecaptron in #1532

      Bug fixes

      • fix(mcp): gate the read-only get_part_details tool with read permission by @wangzhengzhuo05 in #1546
      • Fixed compatibility of AI extractor with OpenAI LLMs @killecaptron in #1540
      • Version the cache keys of the info provider DTOs to avoid exceptions after upgrade by @killecaptron in #1530
      • Fix stale KiCad category listing after EDA settings change by @lukas-runge in #1534
      • fix(eda): inherit KiCad reference prefix from ancestor categories by @wangzhengzhuo05 in #1547
      • Correctly reset collection forms on form reset (thanks @LMatt08)
      • Fixed error that unique entitity validation failed, even when one of two duplicate entries should be deleted

      Other changes

      • Updated dependencies
      • Updated translations
      • Removed jquery dependency
      • Updated KiCAD symbols and footprints
      • Fixed deprecations & code structure

      New Contributors

      Full Changelog: v2.17.0...v2.18.0

      •  
      ❌