restic v0 19 1: safer FUSE mounts and mountpoint checks, robust backup source and exclude handling, clearer CLI JSON output, Windows SFTP deletion fixes
restic v0 19 1: safer mounts and mount fixes, improved backup source handling and excludes, snapshot grouping and timezone fixes, SFTP Windows file removal fix
n8n 2 28 6: fixes duplicate zod instance blocking npm install, aligns editor params, dedupes AI Gateway notices and adds contextual hints
HomeAssistant Core 2026 7 1: fixes for integrations, devices, migrations, networking and privacy, plus dependency bumps and frontend update
Immich v3 0 1: fixes critical mobile album visibility bug, adds recently added sidebar link, improves input spacing, updates translations
Immich v3 0 1: Restores mobile album visibility, adds Recently added link in web sidebar, fixes settings description spacing, updates web translations
n8n 2 28 5: Patch preserves Date in expressions, shows Free badge for Tool nodes, normalizes empty 204 responses in Salesforce JWT auth
Grafana v13 1 0: alerting UX and rule updates, logs traces metrics improvements, provisioning GitOps fixes, accessibility and dev experience polish
Prometheus v3 13 0 LTS: security fixes and dependency updates, PromQL and TSDB improvements, better scraping and remote write, perf and correctness fixes
headscale v0 29 2: concurrent map generation prevents reconnect storms, ts2021 websocket GET fix for JS WASM clients, graceful invalid FQDN handling
Grafana v13 1 0: accessibility and UI polish, alerting and observability, Git and provisioning hardening, breaking Prometheus and Zipkin changes
Prometheus v3 13 0 LTS: security updates, safer HTTP redirects, PromQL and TSDB fixes, scraping, service discovery, UI improvements
headscale v0 29 2: fixes map lock bottleneck, prevents reconnect storms, enables ts2021 WebSocket GET for JS WASM, skips invalid FQDNs, adds tests
n8n 2 28 4: AI agent memory preserves parallel tool outputs, core credential and variable fixes, editor UX tweaks, Python runner allows transitive imports
ESPHome 2026 6 4: RP2040 ADC VSYS fixes, ES8388 DAC mute unmute restored, MIPI SPI stability fixes, wireless validation improvements, device builder 1 0 23
Home Assistant Core 2026 7 0: automation and scheduler revamp, improved device integrations, energy analytics, deprecations, performance and security fixes
A forged `cifs.spnego` request should die in the kernel, but on affected builds it reaches root-owned helper code instead. The ugly bit is `cifs.upcall`, where CIFS authentication key descriptions can cross a namespace boundary and hand attacker-controlled data to NSS while privileges are still live.
Flux v2 9 0: CLI plugin system, UX and build fixes, Kustomize SOPS Age and drift rules, Helm post render, Git signing, Workload Identity, automation fixes
Tempo v3 0 2: Security build updated to Go 1 26 3, includes upstream fixes issue 7423, adopt v3 0 2 for security fixes, contribution by ie pham
PAN-OS GlobalProtect authentication bypass is not a clever trick, it is a trust error with a neat finish. I prefer the boring fix, disable auth override cookies, then check the portal and gateway properly, because convenience is a poor trade when the device is already being eyed up.
Grafana v13 0 3: Alpine Docker base bumped to 3 24 1, folder metadata saved on create and move, provisioning and PR link fixes, datasource API and migration fixes
SOPS v3.13.2: install, verify via Cosign and SHA256, container images for amd64 arm64 with signatures, SLSA provenance and SBOMs, fixes and deps updates
Traefik v3 7 6: migration note, stability and bug fixes for Kubernetes, Gateway API, middleware, headers, TLS, WebSocket, dependency and docs updates
Flux v2 9 0: CLI plugins and UX, Kustomize drift control, SOPS Age, Helm post render, literal values, signing, repo auth, automation, receivers
Tempo v3 0 2: Security build bump to Go 1 26 3, no functional changes, update dev and CI toolchains, follow rolling upgrade, verify builds, issue 7423
