A quieter week, but three patches you actually have to act on
Patch board
Tails 7.10.1. (CVE-2026-64560). This release is an emergency release to fix critical security vulnerabilities in the Linux kernel and the expat XML library
Qwen Code 0.21.8. Restored real-time autofix support for pull requests opened from forks review events to credentialed workflows
BTCPay Server 2.4.2. This release contains fix of a critical vulnerability that is being actively exploited
Bitwarden Android Password Manager 2026.7.1. Overview Fixed sync prompt appearing incorrectly during autofill Improved account security Community Highlight PM-40274 force LTR text direction for TOTP code display:shipi
Bitcoin Knots 29.4. Bitcoin Knots version 29.4.knots20260508 is now available from: This release includes various bug fixes, performance improvements, and extra safeguards
Release board
Privacy
uBlock Origin 1.73. Improve json-edit scriptlet - Revisit scriptlets' getExtraArgs implementation ---------- Commits to Master Since This Release How to Install the Developer
Vanadium 151.0.7922. Changes in version 151.0.7922.108.0: update to Chromium 151.0.7922.108
Yattee 2.0.0-beta.269. Add embedded audio/subtitle track selection for multi-track files Add loading external subtitle files for media-source playback Add view options to playlists list view Add search to playlists list view Show and label WebDAV/
Tuta 356.260805.0. - Improved sync performance - Shared mailboxes are now collapsible - Nested labels and unread mail counters on labels - General performance improvements Bugfixes - Fix LockedError while calling UpdateSessionKeyService - Fix ev
Invidious 2.20260804.1. Wrap-up This patch release fixes a regression in the OCI (container) build that omitted debug information, making it harder to diagnose issues in production
Bitwarden Server Version 2026.7.2. Removed feature flag for enforcing policies for accepted status members removed feature flag for pricing migrations Various under-the-hood improvements and minor shipit: Feature Development PM-38951 Add CreationDate to org user detail en
Tuta 356.260806.1. - Improved sync performance - Shared mailboxes are now collapsible - Nested labels and unread mail counters on labels - General performance improvements Bugfixes - Fix LockedError while calling UpdateSessionKeyService - Fix ev
Arti 2.5.1. Arti is our ongoing project to create a next-generation Tor implementation in Rust
Bitwarden iOS Authenticator 2026.7.1. Overview Various under-the-hood bug fixes and improvements shipit: Feature Development PM-40133 Add Send Controls policy support and AnyCodable array/dictionary decoding PM-38443 Add F
Nostr VPN 4.1.6. Reliability across every platform Reliability improvements and basic feature fixes across every platform
Signal Android 8.22.1. Now you can easily add an Android tablet as a linked device and bring your chats to the big screen
Self-hosting
N8n 2.34.0. 2.34.0 (2026-08-04) Bug Fixes ai-builder: Treat bound stored credentials as settled in setup analysis AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections core: Add incremental SSE response
authentik 2026.8.0-rc6. See stages/authenticator validate: fix intermittnetly failing throttling test (cherry-pick 24568 to version-2026.8)
n8n beta. 2.34.0 (2026-08-04) Bug Fixes ai-builder: Treat bound stored credentials as settled in setup analysis AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections core: Add incremental SSE response
Actual Budget 26.8.1. :link: View release notes Desktop releases Please note: Microsoft store updates can sometimes lag behind the main release couple of days while they verify the new version
DAVx5 4.5.19-ose. Bug fixes Backport from main: fix preemptive digest auth - Include correct tasks provider package in PRODID jtx Don't crash when main component is mis
Nextcloud Desktop 34.0.1. Prevent DiscoverySingleLocalDirectoryJob from hanging when target is file Eliminate O(N2) Realm work in large-folder enumeration
AI
llama.cpp b10270. Mtmd: support Qwen3-TTS (note: breaking change to llama-tts binary) convert text model main model load ok convert encoder ok speaker encoder loading ok speaker enc graph adapt vocab for backbone (with some tricks) add suppress tokens poc
Ollama 0.32.6. Qwen3.5 is faster on Apple GPUs: the MLX engine now uses the model's MTP head for speculative decoding automatically - /v1/chat/completions streaming now matches OpenAI's wire format: role only on the first chunk, finish reason on its
Cline CLI 3.0.51. Reasoning effort now applies consistently across providers instead of going through per-provider thinking overrides, including Ollama, and asking for reasoning to be off is respected everywhere (from SDK v0.0.71) - meta/muse-spark-1.2-
langchain-openai== 1.4.2. Changes since langchain-openai==1.4.1 release(openai): 1.4.2 handle ContextWindowExceededError
Cline 4.1.7. Added - Restore the "View Changes" button on completion rows, backed checkpoints, so you can review everything a task touched from the completion card
Nostr
Lightning.Pub 0.0.33. Breaking API changes (protobuf) - New message TxFeesReq ( sat per v byte or target conf oneof) for chain-fee estimation
Sprout Buzz Desktop 0.5.5. Desktop and shared changes - paste composer text without formatting ( ) - Revert "chore(release): release Buzz Desktop version 0.5.5" ( ) -
Amber 6.4.0. Redesign the multi-request approval screen with explicit Approve/Deny toggles per request and per group, replacing the select-and-confirm flow, with proper error responses for denied bunker requests - Add support for 113 mo
Bitcoin
Krux Version 26.08.0. This release tightens what the PSBT screens will show and sign, adds a vertical layout option for Stackbit 1248 backups, and replaces the pure-Python UR stack with the new uUR C module, so QR decoding is faster and uses less RAM
lnd 0.21.2-beta.rc1. Database Migrations This release introduces no new database migrations, but includes two important fixes to existing migration paths: The KV-to-SQL payment migration now handles historical routes containing an orphaned blinded total amou
Payjoin Dev Kit Release 1.0.0-rc.7. This release changes how the receiver's ownership guard identifies a coin, so check inputs not owned now takes a closure over &OutPoint rather than &Script
Blink Mobile 3.0.21. Bug Fixes - Keep the pending deposit amount visible beside the balance - Hand a locked migration with no resumable state to support Features - Transaction history CSV download for non-custodial accounts
Ride The Lightning 0.15.10-beta. 0.15.10-beta is primarily a secret-hygiene release: it tightens how RTL handles and exposes authentication material, both in its own API responses and in the node log files users routinely share when asking for help
Trezor Suite 26.7.4. - Added support for Robinhood Chain network - Tron (TRX) staking is now available directly in Trezor Suite - Users can now cancel pending EVM transactions - Option added to view and edit nonce in the EVM send form - A new pr
Qwen Code 0.21.8. Restored real-time autofix support for pull requests opened from forks review events to credentialed workflows
BTCPay Server 2.4.2. This release contains fix of a critical vulnerability that is being actively exploited
Bitwarden Android Password Manager 2026.7.1. Overview Fixed sync prompt appearing incorrectly during autofill Improved account security Community Highlight PM-40274 force LTR text direction for TOTP code display:shipi
Bitcoin Knots 29.4. Bitcoin Knots version 29.4.knots20260508 is now available from: This release includes various bug fixes, performance improvements, and extra safeguards
uBlock Origin 1.73. Improve json-edit scriptlet - Revisit scriptlets' getExtraArgs implementation ---------- Commits to Master Since This Release How to Install the Developer
Vanadium 151.0.7922. Changes in version 151.0.7922.108.0: update to Chromium 151.0.7922.108
Yattee 2.0.0-beta.269. Add embedded audio/subtitle track selection for multi-track files Add loading external subtitle files for media-source playback Add view options to playlists list view Add search to playlists list view Show and label WebDAV/
Tuta 356.260805.0. - Improved sync performance - Shared mailboxes are now collapsible - Nested labels and unread mail counters on labels - General performance improvements Bugfixes - Fix LockedError while calling UpdateSessionKeyService - Fix ev
Invidious 2.20260804.1. Wrap-up This patch release fixes a regression in the OCI (container) build that omitted debug information, making it harder to diagnose issues in production
Bitwarden Server Version 2026.7.2. Removed feature flag for enforcing policies for accepted status members removed feature flag for pricing migrations Various under-the-hood improvements and minor shipit: Feature Development PM-38951 Add CreationDate to org user detail en
Arti 2.5.1. Arti is our ongoing project to create a next-generation Tor implementation in Rust
Bitwarden iOS Authenticator 2026.7.1. Overview Various under-the-hood bug fixes and improvements shipit: Feature Development PM-40133 Add Send Controls policy support and AnyCodable array/dictionary decoding PM-38443 Add F
Nostr VPN 4.1.6. Reliability across every platform Reliability improvements and basic feature fixes across every platform
Signal Android 8.22.1. Now you can easily add an Android tablet as a linked device and bring your chats to the big screen
N8n 2.34.0. 2.34.0 (2026-08-04) Bug Fixes ai-builder: Treat bound stored credentials as settled in setup analysis AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections core: Add incremental SSE response
authentik 2026.8.0-rc6. See stages/authenticator validate: fix intermittnetly failing throttling test (cherry-pick 24568 to version-2026.8)
Actual Budget 26.8.1. :link: View release notes Desktop releases Please note: Microsoft store updates can sometimes lag behind the main release couple of days while they verify the new version
DAVx5 4.5.19-ose. Bug fixes Backport from main: fix preemptive digest auth - Include correct tasks provider package in PRODID jtx Don't crash when main component is mis
Nextcloud Desktop 34.0.1. Prevent DiscoverySingleLocalDirectoryJob from hanging when target is file Eliminate O(N2) Realm work in large-folder enumeration
llama.cpp b10270. Mtmd: support Qwen3-TTS (note: breaking change to llama-tts binary) convert text model main model load ok convert encoder ok speaker encoder loading ok speaker enc graph adapt vocab for backbone (with some tricks) add suppress tokens poc
Ollama 0.32.6. Qwen3.5 is faster on Apple GPUs: the MLX engine now uses the model's MTP head for speculative decoding automatically - /v1/chat/completions streaming now matches OpenAI's wire format: role only on the first chunk, finish reason on its
Cline CLI 3.0.51. Reasoning effort now applies consistently across providers instead of going through per-provider thinking overrides, including Ollama, and asking for reasoning to be off is respected everywhere (from SDK v0.0.71) - meta/muse-spark-1.2-
langchain-openai== 1.4.2. Changes since langchain-openai==1.4.1 release(openai): 1.4.2 handle ContextWindowExceededError
Lightning.Pub 0.0.33. Breaking API changes (protobuf) - New message TxFeesReq ( sat per v byte or target conf oneof) for chain-fee estimation
Sprout Buzz Desktop 0.5.5. Desktop and shared changes - paste composer text without formatting ( ) - Revert "chore(release): release Buzz Desktop version 0.5.5" ( ) -
Amber 6.4.0. Redesign the multi-request approval screen with explicit Approve/Deny toggles per request and per group, replacing the select-and-confirm flow, with proper error responses for denied bunker requests - Add support for 113 mo
Krux Version 26.08.0. This release tightens what the PSBT screens will show and sign, adds a vertical layout option for Stackbit 1248 backups, and replaces the pure-Python UR stack with the new uUR C module, so QR decoding is faster and uses less RAM
lnd 0.21.2-beta.rc1. Database Migrations This release introduces no new database migrations, but includes two important fixes to existing migration paths: The KV-to-SQL payment migration now handles historical routes containing an orphaned blinded total amou
Payjoin Dev Kit Release payjoin-cli 1.0.0-rc.2. Rc.8, whose check inputs not owned callback now identifies inputs instead of script
Blink Mobile 3.0.21. Bug Fixes - Keep the pending deposit amount visible beside the balance - Hand a locked migration with no resumable state to support Features - Transaction history CSV download for non-custodial accounts
BitBoxApp 4.51.4. Bundle BitBox02 firmware version v9.26.5
Arkade TS SDK 0.4.55. HD swap keys and multi-key restore; Explain the listener slack col
Ride The Lightning 0.15.10-beta. 0.15.10-beta is primarily a secret-hygiene release: it tightens how RTL handles and exposes authentication material, both in its own API responses and in the node log files users routinely share when asking for help
Trezor Suite 26.7.4. - Added support for Robinhood Chain network - Tron (TRX) staking is now available directly in Trezor Suite - Users can now cancel pending EVM transactions - Option added to view and edit nonce in the EVM send form - A new pr