❌

Normale weergave

Vandaag ontvangen — 27 Oktober 2026 ⏭

v4.5.1

✇Coolify
Door: andrasbacsai
27 Oktober 2026 om 20:33

Breaking Changes

  • Removed the "Remove from Coolify only" service delete option. A normal delete now works when the server is unreachable, and the services API rejects delete_from_coolify_only with 422.
  • Removed the Highlight log drain because the service ended. Coolify stops its running containers.

Features

  • (Self-hosted only) Limited first root account registration to ten minutes after Coolify starts. Restart Coolify to open the window again.
  • Let team owners and admins require 2FA for all team members.
  • Skipped the Compose image build when the images match the build inputs, so runtime-only changes no longer rebuild.
  • Added a four-color custom theme dialog with presets and share codes.
  • Let admins drag project and server zones on the canvases.
  • Reworked the dashboard layout and showed live CPU and memory in the server table.
  • Synced metric chart tooltips across charts and added local or UTC tooltip times.
  • Made live refresh a toggle for every metrics and analytics range.
  • Added compact traffic metrics with scaled latency units.
  • Replaced native number spinners with a branded stepper.
  • Moved the file browser container picker to a header dropdown.
  • Added # coolify: flag directives (literal, buildtime, runtime) to the developer view of environment variables (#12349).
  • Added a "Use path-style URLs" setting to S3 storages for providers that need virtual-hosted-style URLs.

Improvements

  • Stopped 502 errors during rolling updates with proxy retries and a configurable drain time (#8627).
  • Made metrics faster with one Sentinel SSH command and Sentinel-side bucketing (#12300).
  • Stopped syncing file storages on every Compose parse.
  • Made canvas pan and zoom faster.
  • Added a confirmation when you clone with volume data, and stopped the source while data is copied.
  • Verified helper downloads by SHA256 and updated Docker CLI, Compose, Buildx, and Railpack.
  • Updated Sentinel images to 1.1.3.
  • Updated Laravel to 12.70.1, the PHP image to v5.0.3, and Nginx to 1.31.8.
  • Hid container tooling user agents in traffic analytics by default (#12335).
  • Added a DNS menu to the domains toolbar.
  • Explained what 100% CPU means in chart tooltips.
  • Retried connection failures of idempotent HTTP requests, including Cloudflare API calls.
  • Updated Fluent Bit for log drains from 2.0 to 5.1, and restarted running drains when their files change.
  • Fetched Sentinel analytics dashboards of all servers at the same time.
  • Validated new cloud servers automatically when they are running.

Fixes

  • Security: enforced resource permissions for stored secrets and hid locked and admin-only secrets in forms, Compose, and the API.
  • Security: closed holes in server transfer import, claim, and archives.
  • Security: blocked PostgreSQL restore scan bypasses and stopped restores on SQL errors (#12333).
  • Security: enforced GitHub App webhook signatures in the local environment.
  • Security: limited system-wide Gitea sources to instance admins and source app lists to the current team.
  • Security: hid database URLs in API create responses without sensitive access (#12297, fixes #11190).
  • Security: scoped database backup API endpoints to the database type (#12279).
  • Security: used the Cloudflare client IP for API allow-lists and audit logs (#12301).
  • Wrote the generated Compose file after the image build (#12331).
  • Wrote regular deployment files when the repository has symlinks (#12324).
  • Prevented Git fetches from hanging (#12321, fixes #10316).
  • Read the Compose file from Git objects and from Git submodules (#12320, fixes #11018).
  • Allowed safe percent-encoded repository paths (#12319).
  • Stripped paths and ports from COOLIFY_FQDN in env files (#12245, fixes #9649).
  • Used SSH user registry credentials for host image pulls (#12216, fixes #12205).
  • Rebuilt when a build secret value changed.
  • Replaced the Dockerfile HEALTHCHECK when the healthcheck was enabled (#10974).
  • Kept the healthy new container when a rolling update failed late (#12253).
  • Stopped false pending changes (#11101, #12284).
  • Found the current rollback image for containers with any name (#12296).
  • Reported a failed application stop (#11063).
  • Parsed mode suffixes in long-form bind targets.
  • Created one Compose service on repeated submits and rejected Compose without services (#11078).
  • Skipped the PORT mismatch warning when readonly labels were disabled (#10941).
  • Deployed previews with their own environment variables (#12325).
  • Kept custom preview domains on redeploy (#6536).
  • Built the PR commit on manual Bitbucket preview redeploys (#10806).
  • Keyed preview Docker tags by preview ID and stopped the DNS poll from re-queuing sync jobs.
  • Kept open preview volumes out of stale Compose volumes (#10855).
  • Kept locked variables and their preview copies locked with their values (#12299).
  • Kept omitted values and flags when patching env variables through the API (#12240, fixes #9977).
  • Included Infisical imported secrets (#12267).
  • Regenerated proxy labels when the API changed exposed ports (#12334, fixes #11074).
  • Saved is_auto_deploy_enabled for Docker image and Dockerfile apps created by the API (#12339).
  • Wrote file storage content to the server on API PATCH (#12248, fixes #11759).
  • Accepted API settings that the UI can change (#11092).
  • Showed only permitted MCP tools and actions in help and hints (#12295).
  • Kept privileges in PostgreSQL backups (#12244).
  • Signed S3 uploads with the storage region (#12264).
  • Saved removed databases in the backup list (#11548) and explained dumps that stopped without an error (#11549).
  • Identified the instance database backup by ID.
  • Used the instance URL in volume backup notifications (#12285).
  • Kept the proxy status current and stopped auto-start during proxy restarts.
  • Validated servers without a proxy (#11048) and explained Docker Engine version check failures (#11089).
  • Blocked server migration when the target proxy is not running.
  • Replaced wedged SSH multiplexing masters (#12241, fixes #10077, #11130).
  • Proxied realtime and terminal WebSockets on the dashboard port (#11707).
  • Kept new images during Docker cleanup (#11069) and skipped scheduled cleanups during deployments (#12183).
  • Removed orphaned legacy realtime containers.
  • Kept a detected public IP when the other IP family's lookup timed out (#12275).
  • Quoted root credentials in the installer .env (#12276) and kept operator SSH keys that mention coolify (#12278).
  • Reported a failed manual update check (#12266).
  • Passed the cloudflared Access service token to the terminal SSH (#12312).
  • Browsed files in containers without a shell (#12305).
  • Trimmed Telegram bot tokens and chat IDs (#12323).
  • Showed the server timezone in scheduled task help (#10904).
  • Listed production, staging, and development environments first (#12317).
  • Hid deleted resources on the environment page after the redirect.
  • Showed held-back package updates separately.
  • Fixed the filtered tag count in pagination.
  • Recreated the Mosquitto password file on each start (#11691).
  • Updated the Reactive Resume template to v6 (#12282).
  • Fixed server online status (#12289), disk detection (#12315), chart density (#12281), and loading on slow servers in metrics.
  • Fixed checkbox clicks in confirmation dialogs (#12338).
  • Fixed the database image picker (#12337) and server IDs in the new resource wizard (#12327).
  • Floated listbox panels over modals (#11529) and fell back to the default for invalid theme colors (#12287).
  • Fixed sidebar, tooltip, canvas, chart, list, and Compose loading issues in the UI.
  • Kept member API tokens when a member is promoted (#12342).
  • Returned success: false on API access denied responses (#12343).
  • Documented database and resource list responses in OpenAPI, and stopped requiring both environment_name and environment_uuid on create endpoints (#10449).
  • Allowed environment variable references in image tags (#10642).
  • Kept quoted values when saving the developer view of environment variables (#10406).
  • Reported Compose files with no parsed services during deployments.
  • Stopped containers again while they restart past their restart limit (#10761).
  • Showed container logs that contain invalid UTF-8 (#10628).
  • Fixed terminal connections that closed with "Missing required tokens" when the session cookie name was custom.
  • Updated breadcrumb names after a rename (#12341).
  • Showed why Hetzner, DigitalOcean, and Vultr API requests fail, stopped duplicate Hetzner create requests, and deleted unsaved VPS instances.
  • Recreated database TCP proxies that run an outdated configuration.
  • Skipped Git LFS downloads when Git LFS is disabled (#10360).
  • Kept the base directory in new repository applications (#10319).
  • Kept saving applications with unchanged legacy build commands.
  • Used the owner/repo slug for GitHub API calls with SSH repository URLs (#10175).
  • Showed GitHub App errors when loading repositories (#10174).
  • Fixed terminal authentication when a sibling subdomain sets another XSRF-TOKEN cookie.
  • Added an Axiom edge domain setting to log drains, so EU datasets work.
  • Hid out-of-stock and deprecated Hetzner server types, or showed them as disabled.
  • Let password managers autofill the confirmation password (#9963).
  • Checked out short commit SHAs with shallow clones (#9926).
  • Replaced the clone suffix instead of adding one for each clone (#9976).
  • Kept port-suffixed SERVICE_URL and SERVICE_FQDN variables in sync with the domain (#9877).
  • Returned logs of stopped containers through the API, like the UI.
  • Renamed the old Security labels to Keys & Tokens.

What's Changed

Full Changelog: v4.5.0...v4.5.1

  •  
  • ↗️

Road Trip: Ford Community Spotlight

✇SCS Software
Door: Alex
27 Oktober 2026 om 17:00

Since the release of the Road Trip: Ford DLC for American Truck Simulator, it has been fantastic to see so many of you swapping big rigs for four wheels and setting out to explore the USA in a whole new way! From scenic drives and sightseeing stops to screenshots, videos and stories from the road, we’ve really enjoyed following your adventures behind the wheel of these iconic Ford vehicles.


Today, we’d like to shine the spotlight on some of the amazing content shared by you and celebrate the many different ways you’ve been enjoying Road Trip!

For those of you who haven’t yet started your own journey, we’ve picked out a few YouTube videos from creators who have been exploring the Road Trip: Ford DLC. Whether they’re taking a relaxed drive across the open road, collecting postcards using our new Atlas feature, or taking on some courier jobs, we're sure there is something everyone can enjoy watching below.







A big thank you to everyone who we featured above! Be sure to check out their channels, leave them a like and subscribe for more content.

We also reached out to several content creators who have been checking out Road Trip: Ford DLC and asked them to share their thoughts. Take a look at what they had to say below, and be sure to visit their channels for even more great Truck Simulator content!

Krewlex


"Road Trip is a completely new avenue for ATS. From when it was announced, many of us were optimistic, and some were confused. Having now tried the first iteration of it, I can confidently say that it is a great addition. The ability to step away from your truck, have a casual cruise, and explore roads from a different angle, is an awesome experience. I have already obtained two of the postcards available in the Atlas mode, and will definitely be hunting the rest over the coming months. 

With the Ford DLC pack, we got the first examples of the vehicles we'd be driving. The vehicles themselves are very well made, and they all sound great. A personal favourite for now is the Mustang. The gritty sound of the engine when it growls is great. I would often sit stationary while mashing my pedal to the floor, just to hear it. The customisation options in all of the vehicles are very well made as well, allowing you to get it looking just right. I'm optimistic for future additions to the Road Trip mode, and to the variety of vehicles we'll soon be driving"

DaSimSimma


"I had an absolute blast with Road Trip. I’ll admit I questioned the direction at first, but spending time in the Mustang completely turned that around. The parcel runs didn’t hit me the same way trucking does, but just driving and exploring with Atlas really hooked me. Being at that height, at those speeds, with that handling completely changes the way you experience the game. Roads I already knew felt different, and it made me want to go see the whole map all over again."

My Over-The-Road Trucking Adventure


"When Road Trip Ford DLC was first announced, I was not enthused about the idea of adding 4-wheelers to a truck driving simulator. As a former real life truck driver, I enjoy the truck driving simulation provided in ATS. I didn't see the point of adding cars to a truck driving simulator; but, SCS has proven they can think outside the truck! I didn't realize until shortly before release that this was going to be much more than just driving cars around the ATS map! The Dispatch Market feature has added a delivery system I didn't anticipate and the Atlas feature, with its Tourist Boards adds something I wish I'd had the ability to do when driving truck; leisurely sightseeing all the awesome things to see that I never seemed to have time for while trucking. I've already collected a few post cards and I'm looking forward to collecting them all!" 

Our social media channels have also been full of fantastic Road Trip content since its release on X, Bluesky, Instagram, Facebook, TikTok and more. Thank you to everyone who has tagged us and shared their first experiencing Road Trip with us. Our team always enjoys seeing where the road has taken you, and here are just a few of the posts that caught our eye!


We’d also like to thank everyone who has taken the time to share their thoughts and leave a review on Steam. Your feedback is incredibly valuable to the teams working on American Truck Simulator and Road Trip, and it has been wonderful reading about your experiences with this new way of exploring the game world. 


If you’ve been enjoying the Road Trip: Ford DLC, we’d really appreciate it if you considered leaving a review on its Steam Store page. Whether you’ve been hunting down Postcards, completing jobs or simply enjoying something different to drive, we’d love to hear what you think!

Thank you once again to everyone who has joined us on this latest journey. We’re delighted to see you discovering American Truck Simulator from a new perspective, and we look forward to seeing where your next Road Trip takes you!


  •  
  • ↗️

v12.6.0

✇Directus
Door: github-actions[bot]
27 Oktober 2026 om 19:52

⚠️ Potential Breaking Changes

Added recommended default AI allowed models that update with Directus releases and apply while the setting is unset (null). ... (#28344)
Deprecated LLM models from providers have been removed. Please recheck AI assistant settings before trying to use the AI assistant.

Raised the minimum required Node.js version to 26. Node.js 22 is no longer supported. (#27737)
Updated minimum nodejs version requirement to 26

Renamed the OpenAPI schema x-metadata to Metadata for consistency with other schema names (#28323)
List responses now reference #/components/schemas/Metadata for meta, in both @directus/specs and /server/specs/oas. Update any $ref to x-metadata and regenerate clients built from the spec.

Updated the default TELEMETRY_URL and COMPLIANCE_URL to https://telemetry.directus.com (#28385)
Telemetry and compliance reports are now sent to telemetry.directus.com instead of telemetry.directus.io.

If your deployment restricts outbound traffic, allow telemetry.directus.com before upgrading. Otherwise reporting will fail without logging an error.

  • @directus/app
    • Raised the minimum required Node.js version to 26. Node.js 22 is no longer supported. (#27737 by @br41nslug)
  • @directus/api
    • Raised the minimum required Node.js version to 26. Node.js 22 is no longer supported. (#27737 by @br41nslug)
    • Renamed the OpenAPI schema x-metadata to Metadata for consistency with other schema names (#28323 by @kheiner)
  • create-directus-project
    • Raised the minimum required Node.js version to 26. Node.js 22 is no longer supported. (#27737 by @br41nslug)
  • @directus/specs
    • Renamed the OpenAPI schema x-metadata to Metadata for consistency with other schema names (#28323 by @kheiner)
  • @directus/env
    • Updated the default TELEMETRY_URL and COMPLIANCE_URL to https://telemetry.directus.com (#28385 by @alexvdvalk)
  • @directus/schema-builder
    • Added snapshot() and types() to the SchemaBuilder to generate schema snapshots and TypeScript types (#28309 by @Nitwel)

✨ New Features & Improvements

  • @directus/app
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
    • Added recommended default AI allowed models that update with Directus releases and apply while the setting is unset (null). (#28344 by @bryantgillespie)
      Existing saved selections are unchanged.
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
    • Showed license warnings in the sidebar so admins see them outside Settings > License (#28394 by @robluton)
  • @directus/api
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
    • Added recommended default AI allowed models that update with Directus releases and apply while the setting is unset (null). (#28344 by @bryantgillespie)
      Existing saved selections are unchanged.
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
  • @directus/system-data
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
  • @directus/types
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
  • @directus/sdk
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
  • @directus/specs
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
  • @directus/cli
    • Added a Default Exports Folder project setting for exports saved to the File Library. The export drawer now warns about File Library visibility and only offers options the user has permission to use. (#28333 by @robluton)
  • @directus/ai
    • Added recommended default AI allowed models that update with Directus releases and apply while the setting is unset (null). (#28344 by @bryantgillespie)
      Existing saved selections are unchanged.
  • @directus/extensions
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
  • @directus/extensions-sdk
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
  • @directus/composables
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)
  • @directus/constants
    • Added the richtext app extension type, which lets extensions add Tiptap nodes, marks and toolbar buttons to the WYSIWYG interface per field (#28384 by @alvarosabu)

🐛 Bug Fixes & Optimizations

  • @directus/app
    • Bumped nodejs, dompurify, basic-ftp, vite, zod, body-parser, undici, happy-dom, @azure/msal-node, sanitize-html, vitest, (#28406 by @br41nslug)
      stream-json, nodemailer, fastifiy and serialize-javascript.
    • Fixed markdown rendering getting slower over time by registering the sanitizer hook once instead of on every render (#28416 by @bryantgillespie)
    • Fixed duplicate vertical scrollbar in Rich-text(WYSIWYG) Formats dropdown (#28375 by @Vedant005)
    • Fixed flows to send only changed fields on save (#28260 by @flcrom)
    • Fixed the flow status getting out of sync between the flow editor and its configuration drawer (#28392 by @robluton)
    • Fixed the Public policy warning and save confirmation to apply to every policy attached to the Public role and to policies edited from the Public role page, and removed the PUBLIC_POLICY_ID constant (#28348 by @robluton)
    • Fixed the WYSIWYG font family, font size and color pickers closing the toolbar's "Show More" menu, and stopped clicks inside a nested menu from closing its parent menus (#28370 by @alvarosabu)
  • @directus/api
    • Fixed directus init exiting with a missing DB_CLIENT error before creating the .env file (#28405 by @Nitwel)
    • Fixed a foreign key violation in the retention schedule when a revision's parent revision was already deleted. Capped RETENTION_BATCH at the database's maximum number of query bindings (#28223 by @wakqasahmed)
    • Updated /mcp to return 405 Method Not Allowed for authenticated GET and HEAD requests (#28360 by @harshillvashisht)
    • Fixed redactObject skipping a key path when an earlier path matched the same key (#28212 by @datrixlab)
    • Updated the built-in OpenAI, Anthropic, and Google AI model lists with the latest models and removed deprecated ones (#28344 by @bryantgillespie)
    • Bumped nodejs, dompurify, basic-ftp, vite, zod, body-parser, undici, happy-dom, @azure/msal-node, sanitize-html, vitest, (#28406 by @br41nslug)
      stream-json, nodemailer, fastifiy and serialize-javascript.
  • @directus/ai
    • Updated the built-in OpenAI, Anthropic, and Google AI model lists with the latest models and removed deprecated ones (#28344 by @bryantgillespie)
  • @directus/system-data
    • Updated the built-in OpenAI, Anthropic, and Google AI model lists with the latest models and removed deprecated ones (#28344 by @bryantgillespie)
  • @directus/extensions-registry
    • Bumped nodejs, dompurify, basic-ftp, vite, zod, body-parser, undici, happy-dom, @azure/msal-node, sanitize-html, vitest, (#28406 by @br41nslug)
      stream-json, nodemailer, fastifiy and serialize-javascript.
  • @directus/constants
    • Fixed the Public policy warning and save confirmation to apply to every policy attached to the Public role and to policies edited from the Public role page, and removed the PUBLIC_POLICY_ID constant (#28348 by @robluton)
  • @directus/sdk
    • Fixed customEndpoint requests with FormData bodies incorrectly defaulting to the JSON content type (#28339 by @smit153)

📦 Published Versions

  • @directus/app@19.0.0
  • @directus/api@41.0.0
  • @directus/ai@1.4.0
  • @directus/cli@12.4.0
  • @directus/composables@11.7.0
  • @directus/constants@14.6.0
  • create-directus-extension@12.1.7
  • create-directus-project@14.0.0
  • @directus/env@7.0.0
  • @directus/extensions@4.1.0
  • @directus/extensions-registry@4.0.6
  • @directus/extensions-sdk@18.1.0
  • @directus/memory@4.1.1
  • @directus/pressure@4.0.7
  • @directus/schema-builder@2.0.0
  • @directus/specs@16.0.0
  • @directus/storage-driver-azure@13.0.7
  • @directus/storage-driver-cloudinary@14.0.4
  • @directus/storage-driver-gcs@13.0.7
  • @directus/storage-driver-s3@14.0.4
  • @directus/storage-driver-supabase@5.0.4
  • @directus/system-data@4.9.0
  • @directus/themes@3.0.2
  • @directus/types@18.1.0
  • @directus/utils@14.0.1
  • @directus/validation@3.0.7
  • @directus/sdk@27.1.0

  •  
  • ↗️

Minecraft 26.4-snapshot-6 (snapshot) Released

✇Minecraft Server
27 Oktober 2026 om 14:40
26.4 Snapshot 6 (known as 26.4-snapshot-6 in the launcher) is the sixth snapshot for Java Edition 26.4, released on October 27, 2026, which adds the snow bricks block set and the cold sulfur cube archetype. Full changelog: https://minecraft.wiki/Java_Edition_26.4-snapshot-6
  •  
  • ↗️

Everything Smart Home joins Works with Home Assistant

✇Home Assistant
Door: Home Assistant
27 Oktober 2026 om 01:00
Everything Smart Home joins Works with Home Assistant

We’re detecting a new presence in the Works with Home Assistant program… and we’re pretty excited about it! A big welcome to our newest partner, Everything Smart Home 🎉 Founded by long-term community member Lewis Barclay and his dad, Dave Barclay, the family-run business brings the Everything Presence line of sensors to the program: the Lite, One, and Pro. All built on ESPHome and designed to keep your data fully local and under your control.

A community sensation

If your smart home journey has involved a YouTube rabbit hole or two, chances are you’ve come across Everything Smart Home. And if not, allow us to introduce you! UK-based Lewis created the YouTube channel in 2020. Since then, he’s built a solid reputation in our community and beyond by posting monthly recaps of Home Assistant releases, along with plenty of tips, tricks, and guides on all things home automation.

Lewis’s videos were such a hit with Home Assistant DIYers and enthusiasts that in 2022 Everything Smart Home became one of the first members of our Home Assistant Creator Network. That same year, Lewis and Dave, an electrical engineer, launched Everything Smart Technology to sell smart home gear they believe in (including official Home Assistant hardware from Nabu Casa!). But they didn’t stop there. Lewis also wanted to create devices he’d use in his own home, ones with features he couldn’t find elsewhere. And so the Everything Presence sensor range was born ⚒️

Made ESPecially for you

All three Everything Presence sensors run ESPHome, which lets them talk to Home Assistant directly over your home network, with no cloud connection required. They also carry the Made for ESPHome badge: our guarantee that each device runs ESPHome out of the box, can be fully controlled without opening the case or soldering anything, and has its code made available for all to see.

Everything Smart Home take this responsibility to heart. Their GitHub is a true collective project where users suggest fixes, add features, and find inspiration for sensors of their own. And that commitment goes beyond code: Lewis even joined us at our Open Home Foundation Summit in Dublin last year to discuss what community members want from their tech. We love to see a partner build so openly for our community, and dedicate their time to keeping smart homes local and built to last.

“Home Assistant has been a huge part of our journey from day one, so joining the Works with Home Assistant program with our Everything Presence sensors feels like a natural next step. The Home Assistant community has been incredibly supportive of me ever since pressing publish on that very first video, and we’re incredibly proud to be part of a program that shares our commitment to open, local smart home tech that puts control (and privacy!) firmly in the hands of users.”

— Lewis Barclay, Everything Smart Home

Devices

Like every certified device in the program, the Everything Presence Lite, One, and Pro were tested by our in-house team for local control, privacy, and sustainability, and Everything Smart Home are dedicated to providing long-term support and firmware updates for all three. It’s a commitment that comes naturally: Lewis has plenty of experience using his YouTube channel to listen to users and improve the sensors based on their feedback, so we’ve no doubt the team will continue to bring that same care to our community.

The Everything Presence Lite, One, and Pro sensors shown side by side in three panels. A sensor for every situation: the Everything Presence Lite, One, and Pro (left to right)

So, what makes an Everything Presence sensor different from the motion sensor you might already have? Most motion sensors rely on passive infrared (PIR) alone, so if you sit still long enough, they assume you’ve left (cue: waving at the ceiling). Each Everything Presence sensor uses millimeter-wave (mmWave) radar, which picks up movements as small as breathing, and the One and Pro pair it with PIR for an instant response the moment you walk in. That means lights that stay on while you read, heating that only warms the rooms you’re in, and screens that switch off when you’ve wandered away. All three double as Bluetooth proxies, too, extending Home Assistant’s Bluetooth range around your home.

The devices certified to the program are:

  • Everything Presence Lite – A more affordable mmWave sensor that tracks up to three people across four zones you set up yourself, bringing multi-zone presence detection to every room.
  • Everything Presence One – Combines mmWave presence, PIR motion, temperature, humidity, and light sensing in one ESPHome device, covering everything a room automation needs from a single sensor.
  • Everything Presence Pro – A professional-grade sensor with two mmWave radars (long-range static and multi-target tracking), PIR motion and light sensing, and built for wired reliability in larger spaces and professional installs.

The most recent addition to the range, the Everything Presence Pro, stands out for pairing 802.3af Power over Ethernet (PoE) with Ethernet. This means that a single cable carries both power and data, so installers can mount it in a ceiling like a Wi-Fi access point or security camera, with no Wi-Fi dropouts or power outlet to worry about.

Want to check out other nifty devices like these? Head to our certified device list to see everything on offer.

Everything, everywhere, all at once

Wi-Fi or wired, all three sensors do everything they need entirely within your home. But if you’d like to check in from afar, Home Assistant Link (formerly Home Assistant Cloud) lets you see which rooms are occupied, or whether the heating’s still on in an empty house, from wherever you are. Best of all, every subscription directly funds the Open Home Foundation – the non-profit behind Home Assistant, ESPHome, and this program – helping us bring more partners like Everything Smart Home on board.

On our radar

Everything Smart Home’s story shows what’s possible with the power of community. Like so many of you, Lewis started out as a home automation enthusiast, and went from recapping our releases to building hardware of his own. With Dave’s engineering know-how and the support of fellow tinkerers, they’ve turned a passion project into a family-led hardware company that we’re thrilled to welcome to the program. We can’t wait to see what they build next 👀

FAQs

Q: If I have a device that is not listed under Works with Home Assistant does this mean it’s not supported?

A: No! It just means that it hasn’t gone through a testing schedule with our team or doesn’t fit the requirements of the program. It might function perfectly well but be added to the testing schedule later down the road, or it might work under a different connectivity type that we don’t currently test under the program.

Q: OK, so what’s the point of the Works with program?

A: It highlights the devices we know work well with Home Assistant and the brands that make a long-term commitment to keeping support for these devices going. The certification agreement specifies that the devices must have the functionality you would expect within Home Assistant, operate locally without the need for cloud, and that they will continue to do so long-term.

Q: How were these devices tested?

A: Everything Smart Home’s certified devices were tested using Home Assistant over a standard Wi-Fi connection. If you have another setup that’s not a problem, but we test this way as it’s the most effective method for our team to certify within our ecosystem.

Q: Will you be adding more Everything Smart Home devices to the program?

A: Why not! We’re thrilled to foster a close relationship with the team at Everything Smart Home to work together on any upcoming releases or add in further products that are not yet listed here.

  •  
  • ↗️

Firefox 159.0

✇Mozilla Firefox
27 Oktober 2026 om 16:32

New

  • Sharing on macOS now uses the native macOS share picker, which shows a preview of the page and recent contacts alongside AirDrop, Messages, and other apps. Several selected tabs can also be shared at once.

    Screenshot showing the native macOS share picker

  • Saved passwords are now available from the sidebar by default, without having to add the Passwords tool first.

    Screenshot showing saved passwords being available in the browser sidebar

  • Smart Window can now watch pages for changes such as price drops or restocks. Type /watch in the chat to set one up, and Firefox sends a desktop notification when it finds a match. Watches can be managed from the Tasks button in the toolbar or the about:smartwindowtasks page.

Fixed

  • Fixed the file upload dialog opening in the last folder a file was saved to, such as Downloads, instead of the folder last used for uploads.

  • Fixed memory usage growing rapidly when sites such as the Zoom web app were left open in a minimized window.

  • Fixed some videos displaying incorrectly on Windows when NVIDIA RTX Video HDR is enabled.

  • Fixed bookmarks not being imported from Google Chrome profiles that are signed in to a Google account.

  • Fixed the Replace button in Apple Writing Tools on macOS inserting the clipboard contents instead of the rewritten text on some sites, such as Gmail.

  • Fixed long drop-down lists on web pages sometimes showing blank space in place of the last options until the list was scrolled.

  • Fixed some sites, such as Slack, failing to load instead of falling back to HTTP/2 when the site rejected an HTTP/3 request.

  • Fixed Firefox using excessive memory on Linux with AMD graphics when viewing map or place results on sites such as ChatGPT.

  • Fixed quick gamepad button presses sometimes being missed in web games on macOS.

  • Fixed tabs sometimes detaching into a new window when clicked on Linux with Wayland.

  • Fixed menus and panels fading in on Windows and Linux when animation effects are turned off in the operating system.

  • Various security fixes.

Changed

  • On macOS, apps that sign in through the default browser, such as ChatGPT, now open their sign-in page in Firefox instead of Safari when Firefox is the default browser.

  • The AI chatbot's Summarize page option now sends the page's address to the chatbot provider instead of the page's text, so long pages are no longer cut short to a partial summary.

  • Open tabs can now be searched with a keyboard shortcut: Ctrl+Shift+A on Windows and Linux, Cmd+Shift+A on macOS. The Extensions and Themes shortcut is now Ctrl+Shift+F on Windows and Linux, and Cmd+Shift+E on macOS. These shortcuts can be changed in about:keyboard.

  • Web addresses written in the Javanese, Balinese, Canadian Aboriginal Syllabics, and N'Ko scripts are now displayed in their own script instead of as encoded "xn--" text.

Enterprise

Developer

  • Developer Information

  • The Web Console now allows let, const, and class variables to be declared again, so a snippet can be edited and re-run without a redeclaration error.

Web Platform

  • Firefox now supports scroll-driven animations, so CSS animations and Web Animations API animations can progress with the scroll position of a container or with an element's visibility as it scrolls into view. This adds the animation-timeline, scroll-timeline, view-timeline, and animation-range properties and the ScrollTimeline and ViewTimeline interfaces.

  • Firefox now supports scoped custom element registries. A registry created with the CustomElementRegistry() constructor is separate from the global window.customElements registry, so custom elements that share a tag name can coexist on the same page.

  • On compatible devices, WebGL now supports the EXT_clip_control and EXT_texture_mirror_clamp_to_edge extensions and WebGL 2 supports EXT_texture_norm16.

  • The Sanitizer API now sanitizes HTML as it is parsed rather than afterwards, so custom element constructors no longer run for elements the sanitizer removes.

Community Contributions

  • With the release of Firefox 159, we are pleased to welcome the developers who contributed their first code change to Firefox in this release, 12 of whom were brand new volunteers! Please join us in thanking each of these diligent and enthusiastic individuals, and take a look at their contributions:

  •  
  • ↗️

Distribution Release: ZelixOS 2026.10.26

✇DistroWatch
Door: distro@distrowatch.com
27 Oktober 2026 om 11:44
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Muhammed Yasir Peker has announced the availability of an updated build of ZelixOS, an Arch-based Linux distribution with a focus on a clean and streamlined desktop experience, dedicated in-house utilities and user freedom: "After extensive testing and polishing, the full ZelixOS Aurora 1.0.0 release is here. It refines....
  •  
  • ↗️

v2.2.0

✇Opencode
Door: github-actions[bot]
27 Oktober 2026 om 10:04

Highlights

  • Create, install and share Desktop plugins (experimental) (#55246, #59469, #59489)
  • Refreshed the desktop app experience (#56898, #58865, #55838, #57962)
  • Add experimental image and decision generation APIs to plugins and sdk, allowing image generation or decision model (think typesafe, clef, etc) workflows. (#59190, #59380, #58758)
  • Plugins can now attach and update keyed session instructions with ctx.session.instructions.entry.put/list/remove. Instead of editing the system prompt and busting the prompt cache, each change is added as a small update at the next step. The entries also survive compaction and reverts, and they don't start an extra model turn. (#56550)
  • Restored the Todo tool in desktop via opt-in (#59092)
  • Add configurable prompt cache TTLs per provider/model (#59157)

Breaking changes

@opencode/ai root is now the Promise API

@opencode/ai now works like @opencode/sdk and @opencode/client: the package root exports the Promise API, and the Effect API moved to @opencode/ai/effect. @opencode/ai/promise is removed, and the wildcard subpath export is replaced with an explicit list of provider and protocol entry points. (#58847, #59183)

-import { AI } from "@opencode/ai/promise"
-import { LLM } from "@opencode/ai"
+import { AI } from "@opencode/ai"
+import { LLM } from "@opencode/ai/effect"

The OpenCode GitHub Action is removed

The OpenCode GitHub Action is no longer published. Remove it from your workflows. (#59032)

TUI plugins require OpenTUI 0.7

@opencode/plugin now requires @opentui/core and @opentui/solid 0.7.0, up from 0.6.8 or later. Plugins that depend on OpenTUI 0.6 fail to install until they upgrade. In OpenTUI 0.7, custom renderables read their hooks from their class at construction: assign renderBefore, renderAfter, and onLifecyclePass in the constructor instead of as class fields, call refreshHooks() after adding a hook by reflection, and replace defineNativeIntegration() with a static nativeIntegration declaration. See the OpenTUI 0.7.0 release notes. (#59295)

Core

Improvements

  • Add experimental image and decision generation API endpoints. (#59190)
  • Add image and decision entrypoints for catalog providers. (#59380)
  • Improve integration rebuild performance. (#59402)
  • Let custom model configuration set a model type. (#59388)
  • Let model-list API requests filter by type. (#59355)
  • Make external-directory permission checks use the project's filesystem. (#59089)
  • Reduce memory use when code search finds very large lines. (#59205)
  • Let plugins filter event subscriptions by type. (#58864)
  • Add configurable prompt-cache TTLs. (#59157)
  • Move image resizing off the main process and release idle image memory. (#58820)
  • Reduce repeated session-history loading during a step. (#59091)
  • Add an experimental API for session media and opt-in media URI support. (#59103)
  • Add the machine hostname to /api/info. (#59090)
  • Add experimental content-addressed blob storage for session media behind experimental.media_blob. (#58656, #58741)
  • Start session history from the latest completed compaction. (#59020)
  • Reduce work encoding durable event payloads that are not persisted. (#58923)
  • Expose MCP server titles from serverInfo. (#58950)
  • Apply OpenCode Console workspace configuration as a configuration layer. (#57703)
  • Replace experimental evaluations with Decision APIs in the AI pkg, including OpenAI Decisions, System One, and Cloudflare Run models. (#58758, #58382, #58379, #58381)
  • Convert tool schemas once to speed up tool execution. (#58798, #58848)
  • Make Git project discovery faster while recognizing repository changes. (#58616)
  • Show OpenCode Console budget limits and Go usage where they block you. (#58694, #58714)
  • Record provider-reported session costs. (#58562)
  • Find Git more reliably on macOS. (#58602)
  • Resolve model details once per prompt step. (#58601)
  • Let plugins manage session instruction entries for subsequent model requests. (#56550)
  • Add GPT-6.1 Terra and GPT-6.1 Terra Fast to Sign in with ChatGPT. (#59359)

Bug fixes

  • Wait for plugins to finish reloading before each session step and tool call. Thanks @kernel-oops and @Tarquinen. (#51133)
  • Size session compaction from the provider's reported token count to preserve usable context. (#59441)
  • Skip unavailable models.dev API entrypoints instead of failing model catalog updates. (#59475)
  • Return a server error with a reference ID when the server cannot encode a response. (#59459)
  • Avoid warming a session while its model request is running. (#59325)
  • Preserve legacy MCP codemode settings during migration. Thanks @tneemo. (#59126)
  • Use the correct Vertex AI endpoints for the eu and us multi-regions. (#59335)
  • Accept Databricks hosts that include http:// or https://. (#59334)
  • Keep files intact when patch edits move a file onto itself. (#59197)
  • Preserve literal $0 and $ARGUMENTS text in custom command input. (#59198)
  • Close project locations concurrently during shutdown. (#59326)
  • Treat equivalent directory paths, including trailing slashes, as one location. (#59327)
  • Send valid tool schemas to Kimi for tuple, default, and keyword-like arguments. (#59207)
  • Expose Code Mode MCP tools directly when the execute permission is denied. (#59315)
  • Coordinate OAuth credential refreshes across locations and processes. (#54023)
  • List and search remote Git branches correctly without bare remote names. (#58597)
  • Detect AVIF, HEIC/HEIF, QuickTime, and M4A attachments correctly. (#58480, #58886, #58887)
  • Reduce memory retained by long-running tool calls and unchanged hooked model requests. (#58448, #58449)
  • Load session diffs without reading every message, improving performance for large sessions. (#57686)
  • Keep active locations alive when session events use an equivalent directory path. (#56259)
  • Reload compatibility skills only when their own sources change. (#59086)
  • Avoid publishing redundant catalog updates when configuration is unchanged. (#56267)
  • Avoid booting idle or deleted project locations while polling session forms. (#59083)
  • Wait for plugins before returning agent and provider lists, preventing incomplete catalogs. (#59082)
  • Manage sessions and instruction entries after their project directory is deleted. (#58997)
  • Start fuzzy file search only on first use, reducing project startup work. (#58959)
  • Exit after 10 seconds when shutdown hangs and report pending work. (#58817)
  • Keep the models catalog fresh without redownloading it when unchanged. (#58813)
  • Send xAI Responses top_k settings and stop sending unsupported penalties. (#58868)
  • Honor shared parallel tool-call and service-tier settings for Groq. (#58871)
  • Retry throttled requests instead of misreporting them as context overflows. (#58866)
  • Preserve streamed text and reasoning that arrive after an OpenAI Chat finish reason. (#58851)
  • Classify AWS REST JSON errors consistently regardless of where the error type appears. (#58770)
  • Validate large base64 attachments without slowdowns or hangs. (#58811)
  • Retry Bedrock throttling errors as rate limits instead of context overflows. Thanks @Irish-Joseph. (#58759)
  • Keep working MCP tools available when a server returns malformed ones. (#58350)
  • Match absolute instruction-file globs across directories. Thanks @heimoshuiyu. (#58749)
  • Use configured provider regions in Bedrock endpoint URLs. (#58538)
  • Handle unknown OpenAI Chat finish reasons without failing the response. (#58608)
  • Avoid unnecessary Azure model updates when endpoint transforms make no change. (#58600)
  • Prefer JPEG for opaque browser screenshots, reducing attachment size. (#56990)
  • Detect generated image types from their bytes when compatible hosts omit the format. (#58475)
  • Keep project services alive while sessions run long tools or wait for input, with a 24-hour inactivity cap. (#57274)
  • Prevent unrelated configuration changes and compatibility-skill update bursts from repeatedly reloading skills. (#56260)

TUI

Improvements

  • Reduce CPU use while animated session-tab pulses are visible. (#59235)
  • List OpenCode Console before OpenCode Go in the integration picker. (#59107)
  • Add /usage, model-picker, prompt, sidebar, warning, and error details for OpenCode Console usage limits. (#58731)
  • Make CLI service registration more reliable when concurrent processes update its files. (#59105)

Bug fixes

  • Return opencode run --format json server connection errors as JSON. Thanks @andreivince. (#59366)
  • Preserve pasted prompt text when copying it back out. (#59209)
  • Reliably update the background service on Windows when its files are briefly locked. (#59105)
  • Keep the background service state directory out of tool shells and identify processes blocking its port. (#58815)
  • Refresh Git branch details after switching branches. (#58982)
  • Keep the TUI running when a plugin slot or route renders bare text. Thanks @anmol0b and @Tarquinen. (#58144)
  • Accept --server and --standalone anywhere in supported CLI commands. (#58505)
  • Release closed and background session transcripts to prevent memory growth. (#58434, #57025)
  • Connect remote access tunnels through HTTP proxies. (#58464)
  • Keep development builds on a separate server, database, and port from released builds. (#58331)

Desktop

Improvements

  • Manage desktop plugins from Settings › Extensions › Plugins. (#59489)
  • Add a persistent desktop zoom setting. (#59277)
  • Capture heap snapshots in desktop debug builds on SIGUSR2 when explicitly enabled. (#58317)
  • Show the open session title in the browser tab. (#59131)
  • Show todowrite tasks above the composer. (#59092)
  • Load session history once when returning to a session tab. (#59166)
  • Answer questions with number keys and show multi-select choices as checkboxes. (#58595)
  • Add an always-available Add project action to the location picker. (#57962)
  • Let you rewind or fork from any message. (#58865)
  • Let you edit line comments and copy shell output. (#58970, #58974)
  • Render Mermaid diagrams in messages much faster, sized to fit the column. (#57483, #57004)
  • Add opt-in memory logging and remote debugging for desktop debug builds. (#58315)
  • Show web sources for a turn behind the experimental Sources setting. (#58307)
  • Jump from a completed shell notification to its shell output. (#58663)
  • Keep the composer usable while the voice-call panel floats. (#58587)
  • Use the Soft Radar activity spinner by default and provide experimental variations. (#58010, #57903)
  • Add an experimental new model picker. (#58413)
  • Add experimental Console voice calls in Desktop beta. (#58249)
  • Add a timeline width setting. (#58308)
  • Improve command, session, and model search lists with sticky sections. (#58222)
  • Add search to recently closed sessions. (#55721)
  • Open extension configuration and skills in side tabs. (#58023)
  • Open session extension lists on hover and follow keyboard navigation. (#58021)
  • Add video previews with zoom controls. (#57924)
  • Add generated project avatars and an experimental avatar-style switcher. (#57871, #57930)
  • Add recently closed side tabs to the new-tab view. (#57863)
  • Add a searchable prompt history picker. (#57716)
  • Find settings from the command palette. (#57651)
  • Group queued and steered messages, and group consecutive user messages under one metadata line. (#57561, #57552)
  • Improve file-tree and folder-picker performance. (#57573, #57557)
  • Keep branch search results visible while new results load. (#57531)
  • Add a session-details menu to the session header. (#57528)
  • Show a subagent's model, status, and elapsed time in its composer area. (#57473)
  • Let you delete sessions from tab menus and rename the current session with Ctrl+R. (#57453, #57423)
  • Restore session summary and project menu actions. (#57781)
  • Let you place the background-activity capsule at the left, center, right, or hide it. (#57962)
  • Show project and worktree details in the session header and location menu. (#57962)
  • Add text-rendering controls to the debug bar. (#57326)
  • Show elapsed time for background work. (#57218)
  • Improve streamed Markdown rendering reliability and performance. (#57016)
  • Split the side pane and add a draggable bottom pane with tabs. (#56960)
  • Add consistent MCP sign-in and error-status links across connection, session, and Settings views. (#57962)
  • Open multiple file tabs at once and open side-panel content in tabs. (#57182, #57094)
  • Move running work to the background when you steer a session. (#57142)
  • Let the timeline scroll beneath the composer while keeping its content visible. (#57141)
  • Simplify Settings into a flat list with a per-server switcher. (#57962)
  • Quote selected timeline or terminal text into the composer. (#55664, #58420)
  • Search sessions across online servers from the title bar. (#57962)
  • Add a Reduce motion appearance setting. (#57103)
  • Show projects from all servers in the new-session location picker. (#57962)
  • Pick models from a searchable dialog with favorites and recent models. (#55838)
  • Attach the new-session location picker below the composer. (#56952)
  • Open image previews directly from message and composer thumbnails. (#56896)
  • Start new worktrees from the current branch in the simplified location picker. (#57962)
  • Manage running subagents and shells from the composer activity capsule. (#57962)
  • Sync projects from each server and prioritize projects you use on Home. (#57962)
  • Choose between Focus and Pro interface layouts in Settings. (#56898)
  • Open terminals as side-panel tabs. (#57962)
  • Choose a project and worktree from one new-session location dialog. (#57962)
  • Show subagents as separate timeline rows by default. (#57962)
  • Add a sidebar toggle for vertical tabs. (#55646)
  • Add ⌘1–9 and ⇧⌘[ / ⇧⌘] shortcuts for side-panel tabs. (#57301)
  • Let you choose a new directory or worktree when a session location is unavailable. (#56087)
  • Refresh the Manage models, MCP, and fork dialogs with compact searchable lists. (#56029, #56028)
  • Install future Windows desktop updates in about a second. (#55933)
  • Show individual Code Mode tool calls in Execute rows. (#55649)
  • Add a Commentary timeline category and display setting. (#55248)
  • Support @ links to other sessions in messages. (#57480)
  • Polish spacing, alignment, borders, and typography across the session header, titlebar, composer, file tree, browser pane, timeline, and Settings. (#58195, #57776, #57570, #57782, #57336, #57363, #58100, #58979)

Bug fixes

  • Prevent duplicate tab shortcuts and remove uninstalled plugin commands from Shortcuts. (#59499)
  • Keep todo items from shrinking in the todo panel. (#59430)
  • Keep question-dock answers and controls positioned correctly when changing questions. (#59383)
  • Keep the @ menu open while it searches. (#59425)
  • Finish quitting after Cmd+Q on macOS. Thanks @anmol0b. (#59144)
  • Toggle MCP servers for the current session location from Settings. (#59132)
  • Deliver steering messages when an earlier move was missed. (#58984)
  • Keep session and command-palette search results stable while searching. (#58908, #57479)
  • Restrict Search projects to the project list. (#58978)
  • Let custom Close tab shortcuts close terminal and browser tabs. (#58945)
  • Prevent live status rows from jumping or leaving gaps above the composer. (#58691, #58697)
  • Keep browser tabs still behind open dialogs. (#58958)
  • Keep side-panel content and browser pages visible while the sidebar or panel moves. (#58202, #58185)
  • Render session diffs reliably.
  • Keep keyboard focus in terminals, side panels, dialogs, and the composer when appropriate. (#57980, #57297, #56273)
  • Preserve empty browser and side-panel tabs instead of closing them automatically. (#58440)
  • Reduce desktop memory use by releasing closed transcripts, discarded tool-result images, retained UI batches, and aborted timeline work. (#57025, #58434, #58427, #58560, #58447, #58439, #58432)
  • Restore horizontal scrolling and sticky change badges in the file tree. (#58117)
  • Show live Thinking for reasoning-only turns. (#58299)
  • Stop loading older history after completing the initially visible turn and prioritize the first transcript page. (#57700, #57741)
  • Keep Home project and session lists reliable during refreshes.
  • Keep deleted sessions from reappearing on Home. (#55349)
  • Find sessions immediately in @ mentions, including multi-word titles. (#57683)
  • Keep queued messages editable while changes sync with the server. (#57569)
  • Open image and video URLs in the browser pane. (#57562)
  • Mark submitted generated forms as complete and send each response only once. (#57537)
  • Improve file-view performance with reused views, virtualized medium files, and cached diffs. (#57551)
  • Group untracked folders into one expandable review row. (#57527)
  • Let you paste into the composer from the session view. (#57545)
  • Recover failed beta background servers and preserve their required CLI versions. (#57321)
  • Restore branch selection when starting a new worktree session. (#57962)
  • Keep the running server available while beta updates install. (#57309)
  • Make links in user messages, shell output, and Code Mode output clickable. (#57211, #57303)
  • Make Check for Updates always report its result. (#57296)
  • Reopen the last closed side-panel tab with ⇧⌘T and open a browser tab with ⌘T. (#57269, #57156)
  • Keep OpenCode keyboard shortcuts working in the browser pane. (#56697, #55240)
  • Preview image attachments supplied by file path. (#57249)
  • Apply configured code and UI fonts consistently. (#57242)
  • Keep activity and busy indicators steady while switching sessions. (#57196)
  • Reserve ⇧⌘W for closing the window so ⌘W does not. (#57150)
  • Make image preview transitions resize smoothly without clipping or blocking clicks. (#56997, #57324)
  • Keep in-session search reliable alongside titlebar session search. (#57962)
  • Return focus to the prompt after keyboard model selection.
  • Open searchable pickers at the top with search focused. (#57962)
  • Keep tables visible beneath sticky headers. (#57050)
  • Fit provider connection steps without shifting a dialog's top edge. (#57006)
  • Give unavailable-server panels clear error styling. (#57003)
  • Make mouse-wheel and keyboard scrolling respond immediately on Linux. (#57962)
  • Keep long Execute tool code contained and show successful Code Mode output. (#56915)
  • Focus the most useful control when dialogs open, including Cancel in delete confirmations. (#57453)
  • Install Windows beta, stable, and nightly builds into separate directories. (#56904)
  • Keep session tabs recoverable when their server becomes unreachable. (#56248)
  • Keep the composer model's provider and session-model resolution consistent with the TUI. (#56225)
  • Reread open files without resetting their scroll position. (#55899)
  • Hide agent names when agents are disabled. (#57525)
  • Polish sidebar, panel, composer, activity, question-dock, loading, and motion behavior across light and dark themes. (#57449, #58013, #58577, #57944, #58052, #58494, #58073, #58114)
  • Polish hover states, cursors, tooltips, focus rings, scrollbars, and transitions across desktop controls. (#57653, #57787, #57304, #58971, #57221, #57192, #58575, #58580)

SDK

Improvements

  • Add GUI plugin APIs for toasts, dialogs, notifications, tabs, composer controls, and custom UI. (#59469)

Bug fixes

  • Fix generated Promise client input types for TypeScript consumers. (#58875)
  • Let SDK clients discard inline tool-result file payloads to reduce memory use. (#59101)
  • Avoid unnecessary catalog refreshes for locations an SDK client has not loaded. (#55237, #59099)
  • Restore running sessions created while an SDK client was disconnected. (#53012)
  • Release omitted tool-image payloads from memory instead of retaining their base64 data. (#58560)

  •  
  • ↗️

Release 2026.10.27

✇MeTube
Door: github-actions[bot]
27 Oktober 2026 om 01:18

Docker Images

Docker images have been built and pushed:

Docker Hub:

  • alexta69/metube:latest
  • alexta69/metube:2026.10.27

GitHub Container Registry:

  • ghcr.io/alexta69/metube:latest
  • ghcr.io/alexta69/metube:2026.10.27

Changes

  • upgrade yt-dlp from 2026.10.21 to 2026.10.26 (cf16674)

  •  
  • ↗️
Gisteren ontvangen — 26 Oktober 2026 ⏭

12.4

✇Jellyfin - Web
Door: jellyfin-bot
26 Oktober 2026 om 22:30

🚀 Jellyfin Web 12.4

We are pleased to announce the latest stable release of Jellyfin, version 12.4! This minor release brings several bugfixes to improve your Jellyfin experience. As always, please ensure you take a full backup before upgrading!

Discuss this release further on our forums.

Changelog (1)

📈 General Changes

  •  
  • ↗️

12.4

✇Jellyfin - Server
Door: jellyfin-bot
26 Oktober 2026 om 22:30

🚀 Jellyfin Server 12.4

We are pleased to announce the latest stable release of Jellyfin, version 12.4! This minor release brings several bugfixes to improve your Jellyfin experience. As always, please ensure you take a full backup before upgrading!

Discuss this release further on our forums.

Changelog (1)

📈 General Changes

  •  
  • ↗️

Part-DB 2.20.4

✇Part-DB
Door: jbtronics
26 Oktober 2026 om 22:10

Caution

There is a significant security issue in PHP known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), that can allow take over of your server. If you have not done, you should update your PHP immediately to a patched version. If you are using docker, the images of this tag, contain an patched PHP version.

Note

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.20.4

Improvements

  • Security hardening of attachment uploads

Other changes

  • Updated dependencies
  • Updated documentation (thanks @DDR0)

New Contributors

Full Changelog: v2.20.3...v2.20.4

  •  
  • ↗️

v1.18.0 - Stalwart 1.0

✇Bulwark
Door: rathlinus
26 Oktober 2026 om 22:05

1.18.0 (2026-10-26)

1.18.0 works with Stalwart 1.0, released today, as well as with 0.16. Sign-in, calendars, contacts, files and sending were adapted to what changed in 1.0, and a Stalwart that was moved from 0.16 to 1.0 with Stalwart's migration tool keeps working with the same open tabs. It also fixes the findings of a security review of the whole webmail, more places where an action in a view that mixes accounts could hit another account's message with the same id, and a series of calendar bugs around repeating events. Plugins can show their own search results and a count on their buttons, quick reply can be turned off, and a new device offers to restore your saved account list.

Thank you for your donations:

One-time

  • @bultester
  • Anonymous
  • Anonymous
  • Anonymous
  • Anonymous

Monthly

Upgrading to Stalwart 1.0

  • After moving Stalwart to 1.0, run Auto-configure OAuth once on the admin Authentication page. It registers Bulwark with Stalwart as a first-party client. Without it, mail, contacts, calendars and files work, but the account security settings (password, two-factor, app passwords) are not available, and single sign-on through Stalwart needs the registered client
  • Stalwart 1.0 can't be installed over 0.16: its migration tool (stalwart-migrate) copies the data into a new store. Ids and sync state are kept, so Bulwark carries on without reloading anything, but OAuth tokens are not migrated: everyone who signed in with single sign-on, or with a password and a two-factor code, signs in again. Keep the server's public URL the same
  • Admin sessions are signed out once by this update, and they now also end when you sign out or change the admin password

Security

  • Plugins: /api/plugin-approval-status refuses plugin packages while user plugins, plugin uploads or their review are turned off. Any signed-in user could fill the admin's review queue and the data directory with packages (GHSA-qc44-275p-gqw9, thanks @oguzyilmaznet)
  • Sidebar apps: With COOKIE_SECURE=true, the unprefixed sidebar-app cookie is no longer trusted behind a TLS proxy that sends no X-Forwarded-Proto, so a sibling subdomain can't add origins to the page's frame-src (GHSA-cjm9-m826-mh78, thanks @oguzyilmaznet)
  • Sign-in: A stored credential that the mail server refused (password changed, app password revoked) is not sent again for an hour, and a global cap stops a loop of them, so a stale session can't get the webmail's address banned by Stalwart for every user. Server-side calls forward the client address (GHSA-g6c7-r7wq-xrm2, thanks @oguzyilmaznet)
  • Multi-account: More actions name both the login and the account. Removing a login whose folder was open, the Scheduled list, contacts in shared address books or another login, plugin moves, single-message archive and delete, the replied/forwarded flags, scheduled badges and Undo for a signed-out login could act on another account's message, contact or submission with the same id (GHSA-8x23-qw3w-mhrx)
  • Sign-in: On a server that reports a bare login name, a token sign-in could claim that name on any domain and reach the synced settings and stored plugin credentials of that address
  • Sign-in: A password and two-factor sign-in to a server you typed went to the default server when custom servers are allowed, and the password sign-in followed a mail server's redirect to another host with the password
  • Sign-in: A password and two-factor sign-in without "Remember me" ends with the browser session instead of staying signed in for 30 days
  • Mail: A link in a printed message can't redirect the webmail tab, links in conversation messages go through the same link check as the reader, a winmail.dat part whose type a browser would drop is downloaded instead of opened, and an unquoted cid: image no longer hides the rest of the message
  • Mail: Outlook-style replies (plugin) no longer load the quoted message's remote images
  • Calendar: Only a counter proposal from one of the meeting's participants can be applied to your meeting; anyone who knew its UID could propose a new time or place to all attendees
  • Admin: config.json, the admin password hash and the setup token are written readable only by the app's user, a synced settings file can no longer pass as an admin session, and the setup wizard refuses a session secret under 32 characters
  • Server: Request bodies over 10 MB are no longer buffered for every path before routing (only WebDAV uploads, the plugin proxy and office saves take more, and cap it themselves), answers from a mail server you picked are read up to a size limit, and the app files in the Docker image are read-only for the user it runs as
  • Dependencies: undici 7.30.1 (GHSA-xjj6-f33q-929c)

Features

  • Stalwart 1.0: Calendars, tasks, contact photos, files, free/busy, sending past Stalwart 1.0's submission limit, phrase search, and its rules for keywords, file names and time zones work on 1.0 as on 0.16. Bulwark Lite installs as a Stalwart 1.0 Application
  • Plugins: Plugins can show their own results in search and open the message a result names (#1336, #1338, thanks @HOLOEYE-JZ), and show a count on their buttons (#1345, thanks @HOLOEYE-JZ). email.get, email.getRaw and email.getAttachment take an optional account id, and summaries carry it
  • Accounts: A new device offers to restore the saved account list (#1363, thanks @lucamzanon)
  • Mail: Quick reply below messages can be turned off in Settings (#1370, thanks @maxhaomh)
  • Mountain View: The inbox splits into Unread and Everything else, and attachment and code chips look like Gmail's
  • Server: iCal subscriptions and other server-side fetches go through the outbound proxy when NODE_USE_ENV_PROXY=1 is set. Bulwark still checks the address itself and asks the proxy for exactly that address (#1367, thanks @Jan0oo)

Fixes

  • Sign-in: Password and two-factor sign-in, Bulwark Lite and phone pairing work on Stalwart 1.0, single sign-on asks for mail, contacts, calendar and file access there, and a background account signed in with OAuth renews its own token instead of the active account's (#989, thanks @Almost-Senseless-Coder)
  • Sign-in: Signing out of one login switches to the remaining one when it was signed in before the page loaded, instead of signing out of all, and an OAuth account that can't be restored has its refresh token cleared
  • Mail: Bulk archive in the unified inbox creates each account's Archive, and a group account's year and month archive folders are reused
  • Mail: The unified inbox shows new mail of a group or shared account and of another signed-in login without a click (#1350, thanks @ClapsAndJiggles), and message links open the message of the account they name (#1351, thanks @ClapsAndJiggles)
  • Mail: The list keeps loading older mail when the server sent no total (#1364, thanks @inceblog), inline images whose part name is a path show (#1371, #1373, thanks @motofix), and Outlook-style HTML quotes without a border are kept (#1355, thanks @maxhaomh)
  • Mail: Sent paragraphs keep the spacing the composer shows (#1340, thanks @arnauda-gh), replies to deeply nested quotes and mails full of blockquotes no longer freeze the page, and attachment names drop direction-override characters everywhere
  • Sending: "Send now" of a group identity's delayed mail no longer drops it back into Drafts, own and group scheduled mail stay apart, a send refused for some recipients says so, and a held reply from a Pro compose tab still marks the original as answered
  • Calendar: The open calendar updates and reminders fire on time when events change elsewhere (#1349, thanks @ClapsAndJiggles), events sit and resize at their clock time on DST change days (#1348, thanks @ClapsAndJiggles), a calendar added later follows the server's visibility (#1372, thanks @somus), a colour from the system colour dialog is applied (#1366, thanks @chodid), and hiding every calendar sticks
  • Calendar: Editing, moving, splitting and answering repeating events keeps their changed and cancelled occurrences, organizer and answers, and asks attendees again only when the time changes
  • Calendar: A subscribed feed's changes to events it still carries are applied, meeting replies are checked against the attendee who answers, exported events keep emoji and names with a colon, and the Calendar Agenda shows all-day events on their day west of the server
  • Contacts: Photos, UIDs and group members are kept on Stalwart 1.0, and a closed directory says so instead of reporting a failed refresh
  • Files: Folders and uploads work on Stalwart 1.0, symlinks show as links, shared folders sit under "Shared with me", and files copy between your drive and shared drives
  • Push: Mail in an account shared into another signed-in login gets its notification again, previews work when the webmail reaches Stalwart on an internal address, and two logins with the same account id get a plain notification instead of the wrong preview
  • Lite: A replayed deep link keeps its query parameters (#1352, thanks @ClapsAndJiggles)
  • Admin: The allowed frame ancestors saved in the dashboard reach the header, and setup.sh asks again for a pasted session secret under 32 characters
  • Accessibility: The rail's Mail entry is named "Mail" for screen readers, not its unread count
  • i18n: Missing Estonian strings and the quick reply setting are translated, and the German account-list restore prompt addresses you formally

  •  
  • ↗️

Iceland: Viewpoints

✇SCS Software
Door: Petr
26 Oktober 2026 om 17:00

Today, we're taking a closer look at some of the viewpoints you'll be able to visit in the upcoming Iceland DLC for Euro Truck Simulator 2, where you can take a break from the road and enjoy the surrounding scenery!

Viewpoints in our games highlight notable places recreated by our map designers to represent their real-world locations. If you've visited one before, you'll know how it works: simply drive up to the viewpoint and activate the trigger to start a special cutscene, taking you around the area and showcasing its most interesting features.

As you might expect, Iceland will feature plenty of viewpoints, with many of them highlighting the country's remarkable natural beauty. We've got quite a few prepared for you to discover, but we don't want to spoil all the fun of exploring them for yourself. So, today, we're sharing just a selection of what awaits you on the roads of Iceland!

One of the first viewpoints we'd like to show you is the famous Seljalandsfoss waterfall in southern Iceland, located right next to the Ring Road. This beautiful waterfall cascades around 60 metres down a cliff face, landing in a small pool below.

If you venture southwest from Reykjavík to the Reykjanes Peninsula, you will come across another one - the Blue Lagoon - a popular health and geothermal spa. The Blue Lagoon was formed by chance in 1976 during the construction of the Svartsengi Geothermal Power Plant. The plant's excess geothermal seawater flowed into a nearby lava field, gradually forming the lagoon we know today. Its distinctive milky-blue colour comes from its high silica content, which reflects sunlight in a unique way.

When you travel east of the capital city instead, you can find the Gullfoss Waterfall, also known as the "Golden Falls", one of Iceland's most famous waterfalls. Gullfoss stands out for its two-tiered drop, glacial source, and canyon setting, and it ranks among the most visited stops on waterfall tours.

In eastern Iceland, make sure to see the Stuðlagil Canyon, a remarkable basalt rock formation in Jökuldalur Valley. It became visible in 2009, when a hydroelectric project lowered the water level of the Jökulsá á Dal River, revealing its impressive basalt walls. The canyon is known for its striking rock formations and the vivid blue glacial river flowing through it.

Near Akureyri, don't miss the Goðafoss Waterfall, one of the most iconic places you can see in the Land of Fire and Ice. It takes its name from a legend dating back to around 1000 AD, when Iceland adopted Christianity. According to the story, chieftain Þorgeir Ljósvetningagoði threw his pagan idols into the waterfall to mark the country's peaceful transition to the new faith.

There are plenty more viewpoints waiting for you to discover, including Þingvellir, Geysir, Jökulsárlón, and many more. But we'll leave the rest for you to explore and enjoy for yourself! If you're looking forward to discovering these places, be sure to add the Iceland DLC to your Steam wishlist!

Don't forget to follow us on X/Twitter, Instagram, Facebook, Bluesky, and TikTok to receive all the recent updates straight to your feed. You can also subscribe to our newsletter to stay informed. Until next time, happy haulin'!

  •  
  • ↗️

Distribution Release: Maze Linux 2026.10.26

✇DistroWatch
Door: distro@distrowatch.com
26 Oktober 2026 om 17:34
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Berk Küçük has announced the release of a new version of Maze Linux, an Arch-based Linux distribution focused on security, privacy and artificial intelligence (AI). It ships a customised and hardened KDE Plasma desktop with defensive and anonymity tools installed and pre-configured: "Maze Linux 2026.10.26 - Qlam 2,....
  •  
  • ↗️

v1.0.0

✇Stalwart
Door: github-actions[bot]
26 Oktober 2026 om 19:28

[1.0.0] - 2026-10-26

This version includes multiple breaking changes and a new database layout, so existing v0.16.x deployments cannot be upgraded in place. Please read the migration documentation for more information on how to migrate from v0.16.x.

Added

  • Full-text search:
    • Text extraction and indexing of PDF, Microsoft Office (docx, xlsx, pptx), OpenDocument (odt, ods, odp), EPUB and RTF documents found in attachments and files.
    • Full-text search of file storage contents.
    • Index queue with per-partition status, concurrency control, retries and index rebuilds.
  • Metadata:
    • JMAP Object Metadata (draft-ietf-jmap-metadata-04) for e-mails, mailboxes, Sieve scripts, calendars, events, address books, contacts and files.
    • IMAP METADATA extension (RFC 5464).
  • DKIM2:
    • Post-quantum composite signatures using ML-DSA-44 and Ed25519 with SHA-512.
    • Configurable Message-Instance hash algorithms (SHA-256 and SHA-512).
  • OAuth and OIDC:
    • OAuth Client ID Metadata Documents (draft-ietf-oauth-client-id-metadata-document-02).
    • OAuth scopes (mail, contacts, calendars and files) per client and grant.
    • Connected applications: users can list and revoke the applications authorized to access their account.
    • First-party clients, post-logout redirect URIs and per-client grant types.
    • External OIDC directories: audience matching, opaque token validation via UserInfo or token introspection and a policy for unscoped tokens.
  • Caching:
    • Redesigned cache subsystem with a dedicated tier for large accounts.
    • Cache snapshots can be swapped to local disk, Redis or the blob store.
  • Built-in local in-memory store for single-node deployments.
  • Azure Blob Storage authentication using shared keys, SAS tokens, client secrets, managed identities or workload identities.
  • Secondary LDAP servers for failover.
  • SSRF protection for outbound HTTP requests (webhooks, OIDC discovery, AI and DNS providers).
  • Configurable client IP source (X-Forwarded-For or Forwarded) and number of trusted proxy hops.
  • Memory budget for buffered data.
  • Configurable limits for e-mail headers, keywords and mailboxes per message, calendars, address books and spam filter text processing.
  • TLS options for Kafka and NATS cluster coordinators.
  • Automatic cleanup of per-user data after a share is revoked.
  • AI (Enterprise):
    • AI models from multiple providers: OpenAI-compatible endpoints (OpenAI, Azure, vLLM, llama.cpp), Anthropic, Google Gemini and Ollama, with per-model rate limits, concurrency caps, timeouts and reasoning levels.
    • AI spam classifier with structured verdicts, model tiers with escalation, training from AI verdicts and optional web search.

Changed

  • New database layout: the key layout was redesigned and the database schema version is now tied to the edition (AGPL-only or AGPL/SEL). Data must be migrated from v0.16.x using the migration tool.
  • Settings schema: multiple objects, fields and enumeration values were renamed, restructured (AI models, OIDC directories, Azure Blob Storage, HTTP forwarded headers) or removed, and internal identifiers were renumbered. See SCHEMA_CHANGES.md for the full list.
  • Telemetry: New events and metrics were added and event identifiers were renumbered. See SCHEMA_CHANGES.md.
  • OAuth: The OAuth Profile for Open Public Clients is now fully enforced. If you use an external OIDC provider, make sure it conforms to the draft; otherwise mail clients such as Apple Mail will stop working with it as they adopt the profile. Ask your provider to add support, or, at your own risk, relax the corresponding security checks.
  • Updated IETF drafts:
  • Performance improvements in storage backends, expression evaluation, IMAP parsing, spam filter tokenization and search.
  • Development: Test suites (unit, integration, conformance and stress) are now kept in a private repository, and new features are developed privately before release. The source code of every release remains public under the AGPL-3.0. Learn why

Fixed

  • Multiple bug and security fixes.

Check binary attestation here

  •  
  • ↗️

FileZilla Server 1.13.0-beta1 released

✇FileZilla
Door: Tim Kosse
26 Oktober 2026 om 15:04

Fixed vulnerabilities:

  • TVFS: Fixed directory deletion and renaming potentially bypassing restrictions configured in mount points
  • TVFS: Fixed simultaneous file requests potentially exceeding the limit on open files per session
  • Web Client: Fixed shared-link tokens potentially being used to renew login sessions
  • Web Client: All REST API requests and shared links now require HTTPS
  • Web Client: Updated Quasar to fix a security vulnerability
  • Web Client: Fixed filenames containing special characters being interpreted as HTML in delete confirmation dialogs
  • Web Client: Limited request sizes, excluding file uploads, to prevent excessive memory use and server termination

New features:

  • System users can now sign in without a password while accessing files with their system account's permissions
  • Directories configured in mount points are now created when first accessed, rather than in advance
  • UI: Expand a session to see its active transfers, their source addresses and start times, and the session's overall progress
  • UI: Enable or disable individual listeners without removing their settings; protocol now appears before address and port
  • New installations include disabled Web Client HTTPS listeners on port 443 for IPv4 and IPv6
  • Added browser-based file access and sharing through the Web Client
  • Web Client: Choose a light, dark or system theme and adjust text size and color intensity; preferences are remembered and shared across browser tabs
  • Web Client: Administrators can choose sign-in as the default page when no public site is enabled, and All files as the destination after signing in from Home
  • Web Client: Can be installed as an app in supporting browsers
  • Web Client: Uploads continue while browsing other pages, with grouped progress and controls to pause, resume, cancel and retry
  • Web Client: Added upload history stored in the browser, with completion dates and recovery of interrupted uploads when access to the original file is available
  • Web Client: Files, shared links, uploads and account sessions have table and timeline views, with a searchable date index
  • Web Client: Navigation and preview layouts adapt to available space, keeping controls accessible on narrow screens; desktop sidebar expansion is remembered
  • Web Client: Upload entire folders, including nested files and empty subfolders, by selecting or dropping them where supported
  • Web Client: When a file already exists, choose whether to replace it or resume its upload. Choices can apply to the whole upload batch
  • Web Client: File lists now identify symbolic links and shared files and directories
  • Web Client: Move files and folders individually or in groups using a destination picker, or move an item by entering a destination path when renaming
  • Web Client: Improved dark-mode contrast for controls, links and selected items
  • Web Client: Added audio playback and seeking in audio and video previews without downloading the entire file first
  • Web Client: Improved file previews with keyboard navigation, syntax highlighting, clearer playback errors and updates after renaming or replacing files
  • Web Client: Preview details show file formats, text encodings, sizes and modification times; UTF-16 text with a byte-order mark displays correctly
  • Web Client: Added Compact interface density, with smaller icons and tighter spacing while preserving text size; small screens use it automatically
  • Web Client: Administrators can enable browser caching of files accessed while signed in. Caching is disabled by default because copies may remain on the device after sign-out
  • Web Client: Added an account page to view active sessions and end them remotely
  • Web Client: Added controls to copy, edit, delete and temporarily disable shared links. Editing or re-enabling a link preserves its URL
  • Web Client: Shared links can optionally identify their owner to recipients
  • Web Client: Public file sharing can now be controlled globally and per user or group
  • Web Client: Added browsable REST API documentation with search, examples and descriptions of request and response formats
  • Web Client: Administrators can publish Markdown pages with customizable navigation and offer files for download. Built-in help and an optional example site are included
  • Web Client: Public pages support rich Markdown, embedded files and media, and customizable layouts
  • Web Client: Added an always-accessible Copyright and License page with the software license and third-party notices

Bugfixes and minor changes:

  • FTP: Fixed MLST and MLSD permission facts being sent as "perms" instead of the standard "perm", preventing clients from recognizing advertised permissions
  • Directory listings retain unavailable mounts with unknown metadata instead of failing the entire listing
  • UI: Improved dialog positioning, spacing and font scaling
  • Fixed transfers potentially being reported as complete before files had finished being written and closed
  • Fixed connections potentially stalling while sending data or closing
  • Fixed potential login failures caused by invalid data in pending authentication requests
  • Fixed a user's group membership potentially being applied more than once
  • The %<home> placeholder now requires accessing files with the system account's permissions (filesystem impersonation), not just using that account to sign in; otherwise its home directory may be unavailable
  • Fixed handling of certificate chains and user-provided certificate paths
  • Fixed inherited mount paths and permissions not updating when overridden by user or group settings
  • Fixed misleading errors when automatically creating mount-point directories that already exist
  • TLS: Fixed misleading errors when clients disconnect during connection setup
  • TLS: Fixed missing client addresses in connection throttling logs
  • FTP: Fixed failed or stalled passive-mode transfers and cancellation while resolving the server's address
  • FTP: Fixed the response code sent at the end of a STAT directory listing
  • FTP: Transfer error messages now distinguish socket reads and writes and no longer describe an unknown error source as a file-write failure
  • FTP: Fixed LIST and STAT showing full paths instead of file names when requesting information about individual files
  • Web Client: Resumed downloads check that the file has not changed, avoiding a mix of data from different versions
  • UI: Banning an IP from an expanded transfer now targets that transfer's source address
  • UI: Session protocol names now indicate whether the connection is encrypted
  • UI: The session list no longer jumps to another scroll position when sessions are added or removed
  • UI: Path validation errors now give relevant guidance, and invalid mount paths remain available for correction instead of reverting to the previous value
  • UI: Fixed a crash when hovering over sessions immediately after connecting
  • UI: Added warnings when the server cannot access files or load the home directory using the selected system account
  • UI: Fixed duplicated users retaining the original identity and a crash when removing users or groups
  • Web Client: Fixed handling of spaces in form fields, including credentials and shared paths
  • Web Client: Fixed outdated sign-in status and requests failing when the login session needs to be renewed
  • Web Client: Warn before leaving unfinished operations and offer to reload the app after a server update
  • Web Client: Reduced application download sizes
  • Web Client: Fixed the upload form not appearing in Firefox
  • Web Client: Downloads use the browser's download manager, with a separate Save as... action where supported
  • Web Client: File lists now refresh reliably after changes to files and folders
  • Web Client: Clearer file-operation errors with readable resource paths
  • Web Client: Common file and shared-link actions are available directly on rows when space permits
  • Web Client: Shared links follow files and folders renamed or moved through the Web Client, and are disabled if an affected change fails
  •  
  • ↗️

v8.3.2

✇PeerTube
Door: Chocobozzz
26 Oktober 2026 om 13:51

SECURITY

  • critical Upgrade vulnerable sharp (image processing dependency) that can lead to a RCE with a special crafted SVG file GHSA-wq5f-xc86-pv6w
  • high Fix federation vulnerability where a remote attacker could exploit the redirection of cached remote objects to impersonate actors of another instance and modify its videos federated on an instance GHSA-5j4v-77rx-h5qg

Bug Fixes

  • Update whisper-ctranslate2 package to fix installation on Python 3.12+
  • Fix channel deletion cancel showing success message #7837
  • Fix podcast feed podcast:medium value with audio enclosure preference
  • Fix audio download with a webp thumbnail #7833
  • Fix crash when remote video has no likes/dislikes collections #7836
  • Limit resource usage when generating thumbnails

  •  
  • ↗️

Distribution Release: Kali Linux 2026.3

✇DistroWatch
Door: distro@distrowatch.com
26 Oktober 2026 om 10:31
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Kali Linux, a Debian-based distribution built for penetration testing, security research, digital forensics and reverse engineering, has been updated to version 2026.3 - now with build scripts for generating a personalised Kali Linux distribution: "We are back with Kali Linux 2026.3, the third release of the year. We....
  •  
  • ↗️

DistroWatch Weekly, Issue 1196

✇DistroWatch
Door: distro@distrowatch.com
26 Oktober 2026 om 01:41
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
Review: Ubuntu 26.10
News: Fedora updates virtual console driver, OpenBSD tests new WINE port, installing FreeBSD with web-based installer, SparkyLinux publishes new branch
Questions and answers: Gazing into the future
Released last week: OpenBSD 8.0, siduction 2026.1.0, Distribution Release: Essora Eos 20261021, UBports 24.04-2.2 and 24.04-1.6
Torrent....
  •  
  • ↗️
Ontvangen — 25 Oktober 2026 ⏭

Part-DB 2.20.3

✇Part-DB
Door: jbtronics
25 Oktober 2026 om 23:05

Caution

There is a significant security issue in PHP known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), that can allow take over of your server. If you have not done, you should update your PHP immediately to a patched version. If you are using docker, the images of this tag, contain an patched PHP version.

Note

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.20.3

Improvements

  • Optimzed part table database logic
  • Compress PHP responses if modules are available in the webserver
  • Only show languages digikey actually offer for digikey settings

Bug fixes

  • Massively reduced query count and database retrieval time for KiCad category requests (#1610)
  • Removed unnecessary database query on every page load
  • Fix Range intersects Value range filter matching non-overlapping ranges by @SAY-5 in #1622
  • Correctly perform comparisons for amount filter (#1620)
  • Fixed Oauth authentication button on digikey settings page (#1618)
  • Fixed layout issue on old iPad (#1609)
  • Fixed floating point issue on project builds (#1613)

Other changes

  • Updated dependencies
  • Updated dependencies
  • Updated KiCad symbols and footprint list

New Contributors

Full Changelog: v2.20.2...v2.20.3

  •  
  • ↗️
❌