Homebridge 2.5.0 adds Matter device types for solar, battery, EV chargers, meters, tariffs and water heaters, and spends the rest of its list on behaviour that used to go wrong: air quality reporting only two levels, thermostats registering late, restored accessories losing their uniqueId or owner, and cache reads that took the accessory with them. It also bumps @matter/main to v0.18.0 and @homebridge/hap-nodejs to v2.3.0.
Mealie 3.30.0 moves AI prompt control into the app, so prompts can be appended to, replaced or extended with global instructions, and it retires the OPENAI_CUSTOM_PROMPT_DIR variable while importing existing prompts automatically. Instruction steps gain individual durations, meal plan entries can cover a full week, and a batch of fixes tightens import scoping, locale lookup and the permissions needed to manage units, tools, labels and recipe actions.
Memos 26.10.0 is the first release under calendar versioning, and its upgrade notes matter more than its features: old installs need a 0.31.0 waypoint, cached access tokens expire on upgrade, the /etc/secrets files from 0.31.0 are no longer read, member export disappears, and the old upload and memo-length settings are replaced without migration. The features are a rich editor by default, per-user usage limits and declarative configuration.
borgmatic 2.2.0 adds a beta tarballs data source that streams a tar file into Borg as individual files, so VM exports deduplicate instead of sitting in the archive as one packed blob. The release also fixes a hang that hit database dumps with heavy output, file-descriptor exhaustion when dumping hundreds of databases, and a regression that cost ZFS, LVM and Btrfs hooks their Borg cache hits.
Paperless-ngx 3.4.0 lets workflow title templates use custom fields, adds relative date queries, and generates PDF thumbnails through poppler in the release that drops ImageMagick from the dependency list. Local 2FA is now skipped when an OIDC login carries a trusted AMR claim, and a set of quiet fixes covers re-index ordering, folder exports with --delete, and revoked task results.
Stalwart, the self-hosted mail and collaboration server, announced v1.0 on 26 October. The release finalises the database schema so upgrades stop being migrations, rewrites full-text search with phrase matching and indexing inside PDFs and office documents, and publishes the project's own benchmarks against Postfix and Dovecot.
Open WebUI v0.12.4, published 25 October, rebuilds the Docker image on Python 3.12 and Debian 13, so pip packages inside the container need 3.12 support. It also makes Direct Integrations off actually disable saved tool servers, moves sharing changes into Access settings, and adds lazy skill loading plus visible context compaction.
Tube Archivist v0.6.0, published 25 October, can run under a dedicated non-root user, which meant removing the bundled nginx and serving media from the application. The release calls that a security improvement and a set of breaking changes: HOST_UID and HOST_GID go, ownership is yours to set, TA_BACKEND_PORT gives way to TA_PORT, media URLs changed, and Elasticsearch moves from 8.19.0 to 9.5.5.
Garage v2.5.0, published 24 October, is the S3 store this desk named when MinIO archived its repository. It ships three upgrade notes that matter more than its feature list: no downgrading an upgraded node, bucket lifecycle endpoints restricted to owner-permission keys as a deliberate security change, and a new public_endpoint setting to add to garage.toml.
wg-easy v15.5.0, published 24 October, carries Node.js runtime updates the project describes as fixing some Node.js vulnerabilities, linking Node's October advisory, plus AmneziaWG 3.1 support, trusted-proxy handling and a promised configurable interface name.
ntfy v2.33.1 rebuilds the service with Go 1.27.3 so certificate chains through the compromised eMudhra intermediates are rejected, adds per-peer and database pool metrics for its experimental cluster, and fixes the crash that hit older CPUs in 2.33.0. Take 2.33.1, not 2.33.0.
Paperless-ngx published v3.3.4 on 22 October to update certifi for the eMudhra/emSign CA incident and to pick up security fixes in Pillow and aiohttp. The project calls all of it third-party dependency work and recommends updating for everyone; the documented Docker route is a backup, a stop, a pull and a foreground start.
Unraid OS 7.2.9 is a targeted security patch for the 7.2 branch: PHP 8.4.27 covering ten CVEs including the PHP2Shell pair, a CA bundle that addresses the eMudhra compromise, and an API update whose bundled Node 22.23.4 resolves the certificate issue. Unraid still points 7.2 users at 7.3.4 for the newer kernel.
qBittorrent 5.3.0 fixes how the WebUI resolves the client address behind a reverse proxy, closing a spoofing bypass of the subnet whitelist, and adds session controls, RSS rule cloning and export, a backup revamp and a CSRF hardening pass.
The feed-to-static-page CLI's first release since April is a stability pass: stable ordering, discoverable sort options, six fewer indirect dependencies, four sorting and template fixes, and a new snapshot suite that renders more than 70 real-world feeds.
Two days after v2.31.0 fixed messages lost on reconnect, ntfy ships the fix for the database overload that followed on ntfy.sh: an index that makes since= reconnects cheap again, friendlier schema handling for rollbacks, and exact upgrade notes.
The Rust VMM's first live-migration compatibility guarantee accepts arrivals from v52.0 and v53.0, and the release adds VFIO device migration and migration cancellation, changes two defaults, tightens upgrade checks, and fixes silent data corruption after live migration.
The first v16 major of the ESP8266/ESP32 firmware fixes unauthenticated UFS writes on password-protected web interfaces, removes direct migration from versions before v8.1.0, and adds ESP32-S31, C61 and P4R3 support, optional MQTT 5.0, Matter 1.6.1 and expanded DALI-2.
The self-hosted AI interface gives direct messages and private channels temporary end-to-end encrypted sessions, encrypted in the browser with MLS and relayed without being saved; the same release removes Google Drive's verification wall for self-hosted installs and lightens Redis streaming.
The quarterly Forgejo feature release replaces the action-run webhooks with workflow-run events that cannot be migrated automatically, changes how absolute links resolve in repository documents, and lands as the 16.0 branch nears end of life on 29 October.
A major release whose operator-facing parts are the defaults it changes: JWT on, WOPI hosts named explicitly, reworked converter tokens, new kill switches for the public APIs, and a 43-item security section that includes WOPI session hijacking.
The release candidate removes the v1 version marker, moves every REST route and gRPC procedure, renames a long list of methods and fields, and gives the old paths one release of 410 Gone, alongside editor suggestions and audio transcription.
The release formerly tested as TrueNAS 26 ships its first release candidate on OpenZFS 2.4 and kernel 6.18: TrueSearch, WebShare, Fusion Pools 2.0, stateful SMB failover, and an early S3 interface.
Fifty-one changelog entries: Dolby Vision profile 8 moves to the hvc1 tag, malformed FLAC stops hanging the library, EPUB covers work on Windows, and a missing database now stops the server cold.
Stirling Sign leaves alpha and turns on for new users, a faster Office converter arrives behind a beta flag, and the text editor learns to edit tables and OCRed PDFs.
The self-hosted deployment platform ships built-in analytics for Traefik and Caddy that store rollups only, an experimental SQLite database service, OIDC sign-in, third-party secret managers, and Cloudflare DNS management.
Two releases in three days: 11.2.0 puts load, disk and uptime on the host card and adds a time filter for logs; 11.3.0 turns container updates into a managed operation that can roll back.
Classification now weighs the whole frame, NSFW detection is rebuilt on ONNX, every built-in model can run on a supported NVIDIA card, and new face clusters name themselves.
The lightweight monitoring stack now lists pending package updates, tracks Wi-Fi signal strength, checks TLS expiry on HTTPS monitors, and shows systemd logs, with ten first-time contributors in the batch.
Audio scenes that keep track of who said what, ordered failover across local and remote models, structured decision endpoints and signed OCI galleries, in a 15-day window with 243 merged pull requests.
The task app's release lands 856 commits, one high and five medium vulnerabilities, scoped tokens so assistants can use your tasks safely, a rebuilt date picker and a proxy for servers without direct internet.
The minimal agent harness reaches 1.0 with a JavaScript tool sandbox, deferred tool loading and Anthropic cache warming, and spins out Pi Durable for agents that checkpoint every step to SQLite or JSONL.
A Miele induction hob, Philips Hue hardware, a Somfy curtain motor and dozens of Tuya-family modules join the supported list, alongside fixes for cover states, MQTT reconnects and transaction handling.
The self-hosted AI chat's new release lets you interrupt, steer, queue and approve what agents do mid-run, and bundles background tasks, scheduled chats and a refreshed model lineup.
The second candidate for v3.3 opens people sharing across accounts, adds birthday memories and edit stacking on mobile, and syncs OAuth claims on every login. Still a release candidate.
The beta channel moves from 0.108.0-b.91 to the project's first 1.0.0 build, bringing the new UI, a Go security bump, four small fixes, and the end of macOS 13 support.
A major release with three breaking lines for busy instances: Git network operations now go through an internal proxy with new egress settings, Actions can auto-delete old runs, and 32-bit and gogit builds are gone. Audit logging, bot accounts, deploy tokens and admin impersonation lead the features; the security write-up lands in about a week.
The Wayland-only switch is official: no X11 session at login, with XWayland carrying old apps. The beta adds kup as Plasma's backup tool, pushes Union theming into QtWidgets apps, and builds out the remote-desktop stack, with the X11 session supported into early 2027 for anyone not ready.
The installer for October's Arch ISO refresh gains linux-rt options, GRUB and Limine EFI support on AArch64, moves its four Wayland compositor profiles from polkit to systemd-logind, and fixes a class of unverified fetches.
The self-hosted trail database ships a public beta of its Android and iOS app, a security pass across eight advisories, and one required environment variable that must be set before the server upgrade.
The RC lands with Immutable Mode selectable in the installer — read-only root, transactional-update snapshots, rollback — appliances that carry over from Leap Micro, and an experimental migration tool for 6.2 boxes. Same GNOME 48; Plasma moves to 6.6.
Two library endpoints stop syncing as a side effect of being read — API consumers move to POST .../sync and PUT .../{id} — and the UI gets ntfy tags, Gotify poster embeds, a hide-already-requested toggle, and fixes across quotas, seasons and duplicate requests.
The self-hosted page watcher gets HTTP caching for its UI assets, its first PWA support, LLM summaries that run without freezing the interface, stricter type checks on imports and API updates, and a leaner title extractor.
The self-hosted yt-dlp web UI gains a video-password field for protected videos (pairable with presets), a full row for custom yt-dlp options, Python 3.14 in the image, and a fix so cancelling a download actually sends the right signal.
A NAS OS from a single developer that installs Debian 12 on any 64-bit PC and runs everything from a browser: Btrfs or ZFS pools, 31 curated apps plus a converted community catalog, KVM virtual machines, cameras, versioned backups and a WireGuard VPN. Two months old, 252 versions deep, and an outside audit already reshaped 2.0.
Selkies 2.0.0 rebuilt every LinuxServer.io desktop container on a new streaming stack: five codecs behind one fallback ladder, WebRTC as a first-class transport, zero-copy capture on X11, and an x86_64 GPU the container configures on its own. Here is the short list of things to change.
A new self-hosted map stack for a Raspberry Pi: local vector maps, local search, BRouter driving routes and an optional Wikipedia layer, all served from a verified data bundle with no public geocoder or map API involved. The first supported edition is Western Australia on ARM64.
First release since June: a logs viewer and per-path access lists headline, a security batch underneath, and the bundled certbot bump comes with a warning for DNS plugin users.
Version 3.0 turns batch work into pipelines that watch folders, FTP and S3, keeps the AI features optional, and draws the free line for automated processing at 1,000 PDFs a month.
The largest update in a decade replaces the navigation, redesigns Discover, and uses Android's pre-approval install API. The post is candid about what did not come back.
The first stable of the 4.25 series makes AES the default key set on modern domains, fixing CVE-2026-20833, and offers SMB3 persistent handles with an unusually direct cost list.
The September update modernises the desktop with an icon dock, a full-screen launcher and a rebuilt Control Centre, all optional. The same week, the two-year-old firmware lock on RAM upgrades resurfaced because memory prices keep climbing.
Anaconda gains a Stratis option: pools and filesystems through Cockpit, plus stratispool and stratisfs for kickstart installs. Caching and passphrase-free encryption still wait for post-install.
A native Proxmox storage backend turns VM disk requests into zvols on the array, delivers OpenZFS snapshots over iSCSI or NVMe/TCP, and ships now as an Early Adopters release, Community Edition first.
Jellyseerr and Overseerr merged into one project in February; since then Seerr has ended its feature freeze, patched a critical security release, and kept a steady preview train; the newest branch reworks authentication around OpenID Connect.
The new stable treats the data folder's permissions as a hard requirement: exact permissions or it will not run, with three documented ways out for the setups that cannot comply.
New repositories will default to SHA-256, reftable and the branch name `main`, Rust becomes a required part of the build, and the last 2.x ships as a long-term support release.
Homebrew 7.0.0 ships brew vulns for checking installed packages against an in-house advisory database, fixes eight advisories, sandboxes installs, and moves Intel Macs to Tier 3 with no new bottles.
Portainer 3.0 rebuilds the product around Kubernetes. Community Edition stays on 2.x, Docker environments keep working but stop growing, and the recommended path out is a Docker-to-Kubernetes translator.
Nextcloud Hub 26 Summer is out as Server 35.0.0, with a Euro-Office desktop client, team workspaces, a redesigned Photos app and one-time passwords for shares, while Hub 25 Autumn goes end of life.
Frigate 0.18.0 is the first stable of the 0.18 line, bringing full UI configuration, profiles, a GenAI chat agent and rebuilt exports, with a config migration, a WebP-only snapshot change and an FFmpeg 8 trap in go2rtc.
Immich 3.2.0 lands a new search API and cross-user face grouping that requires a facial recognition reset, and drew two hotfixes in the five days after release.
Tailscale open-sourced tailcat, a netcat-like CLI and Go library that connects two machines over the same WireGuard and NAT-traversal stack as Tailscale, without an account, a control plane or any IP addresses.
Umbrel's biggest update to its home-server OS adds multiple users, a Photos app, iOS and Mac apps, GPU support, an MCP server for AI agents, and a Storage Manager with RAID.
Jellyfin 12.0 makes its Modern layout the default and rebuilds how playlists and collections are stored — and it rewrites your database on first boot, so the backup is the only way back.
