Caddy v2.11.4: security fixes, TLS and SNI stability, reverse proxy robustness, HTTP and tooling updates, spammy reports blocked, many contributors credited
Caddy v2 11 4: security fixes, TLS and SNI stability, reverse proxy and request body hardening, HTTP and template fixes, perf tweaks, community contributions
HomeAssistant Core 2026 6 0: major UI, automation, integration and API updates, compatibility and safety notes, backup and rollback advice, upgrade checklist

A public GitHub repository should not have been holding AWS GovCloud credentials, yet there they were, alongside backups, passwords and internal deployment files. I spent too long on the dull bit, because the dull bit is usually where the damage starts.
Nextcloud v32 0 11: security hardening and patches, stability and bug fixes in core and apps, performance improvements, updater guidance, upgrade promptly
AdGuard v010777: security fix CVE202641448 GLiNET auth path traversal, new reason query param GET control querylog, response status deprecated, upgrade now
Nextcloud v32 0 11: critical security hardening, Files WebDAV sharing fixes, performance and stability improvements, upgrade and app notes
AdGuard Home v0 107 77 fixes critical GLiNET auth path traversal CVE 2026 41448, adds reason filter for GET control querylog replacing response status, update
n8n 2 23 2: Fixes Insights paywall, uses slugs for MCP registry, makes timestamps timezone aware, clears editor pin, reverts name validation
ESPHome 2026 5 2: clean builds, toolchain fixes, readable ESP32 backtraces, RTL8710B IRAM fix, areas persisted, storage API, Windows and sx126x cal fixes
Uptime Kuma 2 4 0: new EgoSMS and VKTeams notifications, RSS incident entries, token and bearer auth for monitors, bug fixes, security patch and translations
Uptime Kuma 2 4 0: adds EgoSMS, VKTeams, incidents in RSS, bearer token and gamedig token support, bug fixes, authenticated RCE fix, translation updates
NocoDB 2026 05 3: fixes schema and linking issues, UI and CSV and form and email tweaks, admin role controls, API auth and data source stability improvements
n8n v226: fixes Insights paywall, preserves code builder thread suffix, uses slugs for MCP registry, sets timestamptz, resets workspace pins

Cloudflare Managed Ruleset updates do not always announce themselves politely; the useful clues often turn up first in Security Events. I keep checking there, because a rule can keep the same name while its behaviour shifts underneath it, and that is how tidy dashboards start lying.
Nextcloud v33 0 4 maintenance update: recommended security and stability fixes, backup and plan maintenance, apply update, run occ upgrade and verify integrity
Argo CD v3 4 3: quick start for Non HA and HA, signed images and provenance, bug fixes and UI and controller fixes, security updates, upgrade guidance
Tempo v3 highlights: new ingest and write architecture, live store correctness, TraceQL metrics GA, vParquet5, span profiling, redaction, tempo cli tool
Prometheus v3 12 0: security hardening and fixes, new PromQL features, TSDB and agent performance gains, expanded discovery, scraping and UI improvements
authentik 2026 5 2: security backports and metadata update, DB and cert fixes, improved provider interoperability and auth flows, docs and logging cleanups
Nextcloud v33 0 4: security, files sharing and federation fixes, performance and job reliability gains, app compatibility notes, admin upgrade checklist
Argo CD v3 4 3: quick install for HA and non HA, cosign signed images and provenance, key bug fixes and security updates, upgrade guidance and full changelog
Tempo v3: new ingest write architecture, migration tools, TraceQL GA, vParquet5 improvements, metrics generator, redaction, security fixes
Prometheus v3 12 0: security hardening and remote write OTLP limits, PromQL functions and fixes, TSDB and agent performance, discovery and UI API improvements
authentik v2026 5 2: security backports, auth and provider fixes, docs and packaging updates, database and event stability improvements