Daily Brief Wed, Jul 22, 2026 2 min read

Security day: Element, Bitwarden, InvokeAI patches lead a 24-item Wednesday

Security work dominated today with three patches. Element Android closed a file-storage sanitization hole. Bitwarden Server shipped its monthly stable. InvokeAI 6.13.7 patched a config-file exposure that affected all versions through 6.13.6. The remaining 21 releases split across AI infrastructure (nine items), privacy tooling (five), and three each for Bitcoin and Nostr. AI saw langchain-anthropic and langchain-openai add reasoning-effort parameters, Cline Desktop ship its first signed macOS build, and llama.cpp fix draft-repo sidecar resolution. Privacy brought Tuta timezones, Nym binaries, and Notesnook Android. Bitcoin released BlueWallet 8.0.1 with iOS 26 design and BC-UR v2 air-gap scanning, Trezor Suite with Tron staking, and Vexl 1.45.1. Nostr pushed Sidecar 1.5.0 for Firefox, Ditto 2.32.0, and strfry 1.1.1. No Lightning, no protocol changes.

Bitcoin

BlueWallet 8.0.1. iOS 26 Liquid Glass design, BC-UR v2 air-gap support for OneKey and Keystone, RBF for watch-only wallets.
Trezor Suite 26.7.1. Adds Tron staking, pending EVM transaction cancellation, nonce editing in send form.
Vexl 1.45.1. Vexl v1.45.1 880

Nostr

Sidecar 1.5.0. Now ships on Firefox; adds three themes.
Ditto 2.32.0. Ditto v2.32.0
strfry 1.1.1. Strfry 1.1.1

Privacy

Element Android 1.6.62. Closes GHSA-fr74-76wm-x6pp: file-storage sanitization issue.
Bitwarden Server Version 2026.7.0. PM-37648 Fix double HTML encoding in emergency access emails; PM-38928 - Add name, email to org user update.
Tuta 355.260720.0. Adds event timezones, reminder previews, and search-refresh after indexing.
Nostr VPN 4.1.3. Nostr VPN for macOS (Apple Silicon): nostr-vpn-v4.1.3-macos-arm64.dmg; Nostr VPN for Debian/Ubuntu (.deb): nostr-vpn-v4.1.3-linux-x64.deb.
Nym Binaries 2026.14-amsterdam. The v2026.14-amsterdam release of the Nym Binaries; The full list of changes is in the CHANGELOG.
Notesnook Android 3.4.7. Read about what's new in Notesnook Mobile v3.4.7 on Notesnook's blog.
Bitwarden Clients Web 2026.7.0. PM-39180 correct various typos in browser extension; PM-39177 correct various typos in shared libraries and documentation.

Self-hosting

N8n 2.32.0. Ai-builder: Honor eq @version conditions in generated node type definitions (9a48bc5); Ai-builder: Open agent chat preview on the same tab on instance AI (6d56cee).
ownCloud Android 4.8.3. - Bugfix - Fix Help url.

AI

Mistral Vibe 2.22.0. Adds /new alias for /clear and ACP review support with live refresh.
langchain-anthropic== 1.5.0. Adds reasoning-effort as a standard parameter; fixes builtin tool recognition.
InvokeAI 6.13.7. Closes config-file exposure affecting all versions through 6.13.6.
langchain-openai== 1.4.0. Adds reasoning-effort parameter; bumps Pillow to 12.3.0.
Maple 3.2.0. Adds manual Agent project ordering and prevents Markdown image loading.
Cline Desktop 0.0.2. First signed, notarized macOS build (Apple Silicon and Intel) for running and inspecting Cline sessions.
llama.cpp b10081. Fixes draft-repo sidecar resolution when -hfd points to a repo with speculative sidecars.
Introducing Gemini 3.6 Flash 3.5. We're introducing new Gemini models, including Gemini 3.6 Flash, 3.5 Flash-Lite and 3.5 Flash Cyber.
Introducing the ChatGPT for small business program. OpenAI launches the ChatGPT for Small Businesses program, helping entrepreneurs build AI skills, automate work, and grow with ChatGPT Work.

Primary Sources