Patch board
LND: Zero-Timestamp Gossip DoS disclosure. The issue discussed below was originally disclosed at nishantbansal2003.github.io
Weekly threads
Tor Browser 15.0.16 bundled into downstream releases
Tor Browser 15.0.16 shipped on June 17. Tails 7.9 bundled it two days later, and Mullvad Browser matched the same base on June 18. The coordinated lift suggests a shared Firefox ESR update, though no CVE flags appeared in the data. Operators running any of these three should already be on 15.0.16 or newer.
Blockstream wallet stack bumped GDK to 0.77.6 and LWK to 0.18
Blockstream Green iOS, Green Android, Green Desktop, and Liquid GDK all shipped within two days, each citing GDK 0.77.6 and LWK 0.18. The GDK release notes mention libwally 1.5.4 and zlib 1.3.2, plus a singlesig fix for GDK use over REST. Operators who run custom integrations against GDK should verify REST compatibility if they bypassed the official clients.
AI tooling churn: vLLM, Ollama, transformers, and HelixML all patched
vLLM 0.23.0 arrived as a minor release, Ollama 0.30.9 fixed single-token output issues for coding agents, Hugging Face transformers patched to 5.10.3 and 5.12.1, and HelixML 2.11.20 added disk-pressure admission control. None flagged CVEs. The churn reflects the AI stack's short release cadence, not a coordinated security wave.
Release board
Privacy
- IronFox 152.0. 152.0 Signed-off-by: celenity
Cashu CDK 0.17.1. 0.17.1 Fixed - cdk: Token handling now decodes proofs from inactive keysets when redeeming or inspecting tokens ( thesimplekid )
Immich 3.0.0-rc.2. \ !WARNING\ Disclaimer This is a release candidate, not a stable release
Mostro Mobile 1.2.9. Mostro Mobile v1.2.9 A new version of the Mostro P2P Bitcoin trading app is here!
Vanadium 149.0.7827. Changes in version 149.0.7827.159.0: update to Chromium 149.0.7827.159
Bisq 1.10.2. DAO Consensus Security - DAO merit validation is hardened at and after block 954 200
Anytype Desktop 0.55.5. Changes from v0.55.4 to v0.55.5 Summary: 40 tasks, 159 commits, 64 merged PRs High Priority - JS-9783: Opened widget state (2 commits) - JS-9751: Update Notion import screen (2 commits) - JS-9579: Quotes from editor and comments - JS-- haveno 1.8.0. User Experience - Support passphrase protection for all offer types - Support IPv6 Monero nodes
- Syncthing-Fork Android 2.1.2. Fixes bug(onboarding): fix state consistency in onboarding activity (fixes 292) Features Upgrade onboarding experience to material design
- Kopia 0.23.1. Kopia v0.23.1
AI
NanoClaw 2.1.17. Every package.json bump merged since the v2.1.0 tag- Claude Code 2.1.183. Improved auto mode safety: destructive git commands ( git reset --hard, git checkout --
- Qwen Code 0.18.3. Stop after cancelled ask user question 5218; Render slash suggestion descriptions on a single truncated line 5236 c
vLLM 0.23.0. VLLM v0.23.0 Release Notes Please note that Minimax M3 is not yet supported in this version
Ollama 0.30.9. Support for Cohere2Moe architecture Fixed LFM2 parser/render for cases where thinking was not emitted Fixed issue where ollama launch claude and other coding agent or assistant use cases would only output one token Ollama- openclaw 2026.6.10-beta.1. - More reliable agent turns and session state: OpenClaw now preserves pending subagent completion announcements, keeps chat history transcripts non-empty, maintains media index alignment, restarts dormant follow-up drains, and
- Cline CLI 3.0.29. Costs are now hidden for Cline free models - Fixed Z.ai model metadata resolution for Z.ai models accessed through the Cline provider - Reverted the model-name-only display change from v3.0.28; The model picker, selector, and status ba
Nostr
- nostream 3.0.0
- Citrine 3.0.1. Fixed a crash when unregistering an unregistered Pokey receiver
- Sprout Buzz Desktop 0.3.24. Refine thread-unread badge to two-token form ( 1069) ( ) -; Prevent reconnect storms from reaped ephemeral channels ( 1071) ( ) -; Trim oversized observer frames to fit instead
Amethyst 1.12.6. Add translator credit automation via Crowdin sync Seed translator npub placeholders- Coracle 0.6.35. Fix reposts being hidden when replies are disabled
- Grain 0.8.0-rc1. GRAIN v0.8.0 A Nostr client - and the library it's built on
Privacy
- Tails 7.9. Changes and updates Update Tor Browser to 15.0.16
- Tor Browser 15.0.16. Is now available from the Tor Browser download page and also from our distribution directory
SimpleX Chat 7.0.0-beta.0. Beta.0: - channel web previews: read recent posts before joining
Mullvad Browser 15.0.16. All Platforms Updated Firefox to 140.12.0esr Updated NoScript to 13.6.24.1984 Updated uBlock Origin to 1.71.0 Bug 553: Rebase Mullvad Browser stable onto 140.12.0esr mullvad-browser Bug 45044: NS 13.6.19.902 DocStartInjection regressed t- Nym Wallet 1.2.22. The v1.2.22 release of the Nym Wallet
- SimpleX Chat 6.5.5. New in 6.5.5: - Initial support for supporter badges - Fix file names without an extension saved with a trailing dot - Shorter "close to tray" setting (desktop) Commits: - simplex-chat-nodejs: bump libraries ( 7042) - core: store context
Bitcoin
Blockstream Green iOS 5.5.1. Bump LWK to version 0.18.0 Fixed - Minor UI issues
Liquid GDK 0.77.6. 06-16 Added - Python: Add Python 3.14 wheels for release - Python: Add OSX Python wheels from 3.10-3.14 for release Changed - Dependencies: Update zlib to 1.3.2, libwally to 1.5.4 - Dependencies: Update for Rust depen
Lightning
ZEUS 13.1.1-beta1. Empty fiat inputs on Currency Converter initial render by- Arkade 0.9.9. Add Settings domain with DB persistence and admin CRUD API make version interceptor configurable
Research, policy & news
- AI Regulation Should Be Rational, Not Retaliatory. The Trump administration's approach to AI safety, particularly the generative AI models that regularly grab headlines, has been haphazard at best
- Privately running wallet privacy heuristics on your own UTXOs without needing to run your own node. Privacy-heuristic tools have gotten a lot of attention lately