Foundation

by Freedom.Tech Aug 3, 2026 · Edited

Monday split: self-hosting major, AI metal indexer

A four-story Monday weighted toward self-hosting infrastructure. Jellyfin ships its fourth release candidate for the 12.0 series, while Actual Budget increments to 26.8.0 with no elaborated changes. The AI beat contributes a single llama.cpp commit implementing a Metal Lightning Indexer for 128-dimensional, 64-head inputs. The Nostr wire carries a minor Jumble patch adding a save button to the full-screen image viewer. No Bitcoin or protocol work on the wire today.

by Freedom.Tech Aug 2, 2026 · Edited

A signing-device vulnerability puts hardware wallets in the spotlight

The week opened with a multi-project security push. Bitcoin Optech Newsletter 416 flagged a severe COLDCARD wallet-generation vulnerability, Bisq shipped 1.10.4 to resolve audit-identified issues, and n8n 2.33.3 addressed security-audit risk-reporter imports. Vaultwarden 1.37.1 patched invitation breakage introduced in the preceding point release, while OpenWrt 24.10.8 and AdGuard Home 0.108.0-b.90 both carried "Patch now" severity. AI volume stayed high at 44 items, again dominated by llama.cpp nightly snapshots and model-specific patches. Self-hosting scored 18 stories, privacy 26, Bitcoin 24. The week also saw two Liana wallet release candidates and three separate Coldcard firmware branches shipped for distinct hardware generations.

by Freedom.Tech Aug 2, 2026 · Edited

Quiet Saturday: three AI releases, one Bitcoin RC

Three of five items came from AI infrastructure projects. koboldcpp removed row-split mode in favor of tensor split, NanoClaw shipped a rollup covering 36 commits, and llama.cpp tagged build 10223 with CI fixes. Bitcoin saw a second release candidate for Liana Business, the wallet designed for timelocked recovery paths. Karakeep reached 0.33.1 on the self-hosting beat. No protocol work, no CVEs, no stable releases.

by Freedom.Tech Aug 1, 2026 · Edited

Quiet multi-beat day: Coldcard CVE, three AI releases

Bitcoin Optech flagged a severe COLDCARD vulnerability plus two Core Lightning denial-of-service bugs. The Bitcoin beat saw a Bisq hotfix for the BitcoinJ chainwork bug, Coldcard Firmware 6.6, and a Fedimint Web RPC stream fix. AI infrastructure shipped three updates: llama.cpp added a driver version check for Windows Intel GPUs to mitigate crashes, InvokeAI 6.14.0 added video generation via Wan 2.2, and Cline CLI 3.0.48 moved history rendering into the TUI. Privacy side saw Tuta Calendar 355.260730.0 and a Proton blog post on document management systems. Self-hosting saw rclone 1.75.0.

by Freedom.Tech Jul 31, 2026 · Edited

AI day: seven infrastructure releases, one pricing post

AI projects dominated the wire with seven of twelve items. Six were infrastructure: llama.cpp tested alternative convolution layouts, llm CLI switched its default model to GPT-5.6 Luna, Mistral Vibe added a skill-creator flow and session cache-hit tracking, and two ElevenLabs libraries shipped conversation and multipart-field fixes. OpenAI published a pricing post on GPT-5.6 Luna and Terra. Bitcoin contributed four stories: Sparrow 2.5.3 with XDG directory support and ERA hardware wallet compatibility, Coldcard 5.6.0, and a dummy Ledger Live release. Nostr saw Primal Android 3.5.25 ship a follow mute list and remote signer protocol updates. The only security work was AdGuard Home beta 90.

by Freedom.Tech Jul 26, 2026 · Edited

A patch-heavy week led by a forced Bitwarden upgrade across every client

July's fourth week delivered a coordinated patch wave across password management, messaging, and self-hosting stacks. Bitwarden shipped version 2026.7.0 across all clients, iOS, Android, browser, server, and authenticator, requiring companion server updates and forcing Vaultwarden operators to upgrade to 1.37.0 or risk breakage. Element Android 1.6.62 patched a file-storage sanitization vulnerability flagged GHSA-fr74-76wm-x6pp. Invidious 2.20260723.0 hardened security and added instance-level API endpoint controls in response to YouTube backend changes. Bisq 1.10.4 fixed vulnerabilities identified during a recent security audit. Beyond security, the week saw RTL hit zero production vulnerabilities in 0.15.9-beta, Cake Wallet refactor its core engine, and Nextcloud Desktop ship a macOS 12-drop pre-release. AI volume again topped 40 items, nearly all nightly noise. Bitcoin and Nostr stayed quiet.

by Freedom.Tech Jul 26, 2026 · Edited

Six releases across five beats, no clustering

No single beat dominated today. Privacy shipped two incremental updates: Delta Chat Desktop 2.56.0 reworked relay management and removed OAuth, Bitwarden iOS Authenticator 2026.7.0 added fill-assist domain models under the hood. AI infrastructure saw vLLM 0.26.0 land 411 commits from 212 contributors. Bitcoin tooling contributed LNDg 1.11.0 with a new peer offline report and payment data optimizations. Nostr delivered Nostur 1.30.0 with nested replies and share-sheet integration. Self-hosting closed with Paperless-ngx 3.0.3 bug fixes for proxy trust and Gotenberg conversion. A distributed day with no actionable CVEs and no protocol-layer work.

by Freedom.Tech Jul 25, 2026 · Edited

Three Bitwarden security patches lead privacy-heavy day

Privacy tooling dominated the wire. Three security patches shipped from the Bitwarden ecosystem: iOS and Android Password Manager 2026.7.0 fix authentication crashes and autofill failures, Vaultwarden 1.37.0 is required for compatibility with the new client versions. The remaining privacy releases were maintenance: Mullvad Browser 16.0a9 rebased to Firefox 153, KeePassDX added Passkey PRF extension support, NetNewsWire 7.1 fixed parsing bugs. AI work centered on Claude Opus 5 announcement and incremental updates. Bitcoin delivered btcd 0.26.2 input-parsing hardening. Self-hosting saw Miniflux 2.3.3 add feed language detection. A quiet Nostr day with Ditto 2.34.0 as the sole entry.

by Freedom.Tech Jul 24, 2026 · Edited

Two security patches: Invidious hardens, Bisq audit fixes

Security dominated the signal. Invidious patched YouTube backend breaks and hardened its API surface. Bisq shipped fixes from a recent audit. The remaining 15 items spread across wallets, AI SDKs, and privacy clients. Bitcoin brought Cashu offline-rehydration docs, BTCPay BIP-329 label import, Fedimint beta and UI releases, and two Ledger Live updates. Privacy saw Tor Browser alpha nine, Bitwarden browser and CLI with Keepass import, and a Nym Wallet patch. AI released llama.cpp NVFP4 activation-quantization work and two Anthropic SDK updates for Managed Agents threading. Self-hosting shipped Nextcloud iOS media-preview backfill handling. Proton covered the EU Google fine.

by Freedom.Tech Jul 23, 2026 · Edited

Privacy leads with six items, Bitcoin and AI trail

Privacy tooling took the front seat today with six of eighteen items. Delta Chat Android added multi-file sending and missed-call notifications, NewPipe dropped Android 5 support, and Anytype Desktop shipped collection-sorting fixes. Vanadium and Proton Pass iOS both pushed version bumps. The rest split across Bitcoin (five releases including a Cashu database migration and a Wasabi Wallet update), AI infrastructure (four items, notably llama.cpp adding depthwise convolution and Elevenlabs Python shipping HMAC-signed webhook config), and self-hosting (BorgBackup 2.0 beta and StartOS start-tunnel switching to per-device signing keys). Core Lightning patched to 26.06.6 after pypi publishing issues. No Lightning protocol work beyond that. Blockstream published a technical explainer on zero-confirmation infrastructure for Liquid and Elements. OpenAI announced Presence, an enterprise agent platform for voice and chat workflows.

by Freedom.Tech Jul 22, 2026 · Edited

Two security patches, nine AI releases, quiet protocols

Security work centered on Element Android and Bitwarden Server, both addressing file-handling and data-handling issues. AI infrastructure saw nine releases, led by LangChain's reasoning-effort parameter additions for Anthropic and OpenAI integrations, Cline Desktop's first public macOS agent client, and InvokeAI's security patch. Privacy tooling contributed seven items, including Tuta timezone support and Notesnook Android and Bitwarden client updates. Bitcoin delivered three wallet releases: BlueWallet 8.0.1 with iOS 26 Liquid Glass design and BC-UR v2 air-gap support, Trezor Suite 26.7.1 with Tron staking and EVM transaction cancellation, and a Vexl patch. Nostr added Sidecar 1.5.0 on Firefox, strfry 1.1.1, and Ditto 2.32.0. No Lightning, no protocol CVEs beyond the two patches.

by Freedom.Tech Jul 21, 2026 · Edited

Privacy day: five releases, one tablet feature

Privacy tools dominated the wire. Five of thirteen items came from the Privacy beat, led by Signal Android adding tablet linking, Thunderbird for Android shipping an incognito keyboard setting, and maintenance releases for Anytype and NewPipe Extractor. AI projects released three library updates with minimal operational detail. Nostr saw Amber improve multi-request approval grouping and Wisp add tracking-param stripping. Bitcoin releases were routine: Cake Wallet added home-screen upgrades and Zcash updates, Liquid GDK bumped dependencies, and Fedimint Web issued a canary build. No Lightning. No protocol patches. Operators running Signal or Thunderbird on Android gain new privacy controls; the rest is dependency churn.

by Freedom.Tech Jul 20, 2026 · Edited

Two Lightning security disclosures, three quiet releases

Security day on the Lightning side. Ride The Lightning ships a dependency patch with zero production vulnerabilities. Delving Bitcoin surfaces twin memory exhaustion DoS vectors in Core Lightning. The rest of the wire is maintenance: Bitcoin Safe rebrand and BDK 3.0 bump, Radicale MIME fix, Qwen Code point release. No protocol changes, no bitcoin-core, no infrastructure alerts. Operators running RTL or CLN should read the disclosures; the remaining updates are low-urgency.

by Freedom.Tech Jul 19, 2026 · Edited

Weekly Recap - Jul 12 to Jul 19, 2026

Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security fix, also tagged patch-now. Both releases anchored a scattered maintenance wave across privacy and self-hosting stacks, Vanadium tracking Chromium to 150.0.7871, AdGuard Home pushing two beta builds and a stable 0.107.78 patch, uBlock Origin 1.72 refining scriptlets. No coordinated disclosure, no CVE cluster, but enough operator-lift releases to keep patch logs busy. AI volume again topped 40 items, mostly nightly churn. Bitcoin and Lightning stayed quiet; Nostr shipped incremental client updates. The week had a clear self-hosting security pulse at the top and long tail below.

by Freedom.Tech Jul 19, 2026 · Edited

Sun, Jul 19, 2026

A slow day across beats. Self-hosting delivered the only security work: BorgBackup 1.4.5 patches a low-severity issue alongside feature additions. Privacy logged two client updates, Trilium notes and Yattee video. AI contributed two llama.cpp commits within the same build window. No protocol changes, no Lightning, no Bitcoin core. Operators running Borg should stage the update; the rest is maintenance.

by Freedom.Tech Jul 18, 2026 · Edited

Sat, Jul 18, 2026

AI claimed four of nine releases, all framework or library patches. No models. Privacy logged Whonix and Proton Mail Android. Nostr shipped Zap Store 1.1.0 with device keys and background auto-updates, plus a Mostrix point release. Bitcoin contributed a single Ledger Live Desktop build. The day carries no protocol changes, no security advisories, no Lightning. Operators running Mistral tooling, llama.cpp, or Buffa have updates staged.

by Freedom.Tech Jul 17, 2026 · Edited

Fri, Jul 17, 2026

AI claimed half the wire, shipping six infrastructure releases spanning model runtimes, CLI tooling, and mobile SDKs. No model weights, no protocol changes. Privacy logged three items: FreeTube shipped feature work, Nostr VPN and Logseq posted routine builds. Bitcoin added two wallet updates. Self-hosting contributed one Nextcloud Android RC. No clustering within beats, no security advisories, no Lightning. Operators running llamafile, llama.cpp, or Transformers have patches waiting.

by Freedom.Tech Jul 16, 2026 · Edited

Thu, Jul 16, 2026

AI and Privacy dominate the wire with eight and seven releases respectively. The AI cluster is pure infrastructure: llama.cpp b10034 excludes miscompiled MoE kernels on Adreno GPUs, ComfyUI 0.28.0 fixes Qwen3-VL tokenizer crashes, Hugging Face Transformers 5.14.0 adds Inkling multimodal support, and Maple 3.1.5 introduces MCP server support. Privacy moves span messaging, VPNs, and mapping: Signal Desktop 8.20.0-beta.1 ships disappearing call events, IVPN Desktop 3.15.13 upgrades Electron from v25 to v42, Organic Maps patches route warnings and opening hours. Bitcoin logs four client updates including Nunchuk Android 2.7.0 with USDT-on-Liquid support and Payjoin Dev Kit payjoin-cli 1.0.0-rc.0 migrating from sled to rusqlite. Self-hosting rounds out the count with n8n 2.31.1, authentik 2026.5.5, Nextcloud Desktop 34.0.0-rc2, and StartOS start-tunnel 1.1.0 adding HTTP-to-HTTPS redirects. No Lightning. No Nostr. One policy item from EFF on wearable transparency reports sits outside the release pattern.

by Freedom.Tech Jul 15, 2026 · Edited

Wed, Jul 15, 2026

Two releases on the wire. Nostr posted Ditto 2.31.0. AI logged llama.cpp b10015, addressing OpenCL buffer creation for CL 2.x targets and shipping updated macOS, iOS, and Linux binaries. No security patches. No protocol work. A quiet mid-week day after Tuesday's 27-item slate.

by Freedom.Tech Jul 14, 2026 · Edited

Tue, Jul 14, 2026

Privacy projects took half the wire: six of twelve releases. Two self-hosting tools carried security patches: Gitea 1.27.0 hardened access checks and migration validation, AdGuard Home 0.107.78 shipped five fixes. The privacy beat logged maintenance across the stack: dnscrypt-proxy added post-quantum DNSCrypt 2026 support, Logseq entered 2.0 beta with database-backed storage, Session updated both iOS and Android clients. Nostr posted Noscall 0.6.0 with integrated Cashu wallet and Lightning flows. AI logged llama.cpp b9993 adding Tencent Hunyuan 3 MoE architecture support and an ElevenLabs Python SDK refresh. One Bitcoin release rounded out the day.