Freedom.Tech

freedom.tech

A daily intelligence desk for practical freedom technology from Foundation. Bitcoin, Lightning, Nostr, privacy, AI, self-hosting, open hardware, and security updates. Primary sources first.

AI volume day, no new model weights again

AI leads volume for the second straight day, six of seventeen releases, but every one is agent tooling or inference-server plumbing rather than a model drop. The rest of the day scatters thin: Privacy carries four point releases, Bitcoin and Nostr two apiece, Self-hosting one. Nothing here rises above routine maintenance, no disclosed CVEs, no protocol changes worth flagging on their own. The pattern is cadence, not content: teams shipping their regular point bumps on a Sunday with no single story forcing attention.

Cover image for AI volume day, no new model weights again

Tor Project addresses Mullvad funding concerns

The notable item today sits outside the usual release cadence: the Tor Project published a statement on its funding relationship with Mullvad following concerns over a co-founder's political donation. Everything else is routine maintenance. AI again leads volume at nine releases, mostly coding-agent and SDK point bumps with no new model weights. Bitcoin's six releases run from wallet patches (ZEUS, Ledger Live, Nunchuk) to protocol-adjacent beta work (Fedimint). Self-hosting and Nostr each round out the day with incremental fixes. Two security-flagged items, ZEUS and Uptime Kuma, carry dependency and hardening updates rather than disclosed vulnerabilities.

Cover image for Tor Project addresses Mullvad funding concerns

AI floods the wire, Bitcoin ships quiet infra

Thirteen of today's 32 releases come from AI, mostly coding agents and SDK point bumps, Claude Code, Qwen Code, MiniMax Code, LangChain packages, none carrying a new model. Privacy runs a close second at eight, led by routine client updates across IVPN, Signal, Vanadium, and Element Web. Bitcoin's six releases skew toward tooling and research rather than wallets: Arkade's TS SDK pair, BDK FFI bindings, a Fedimint beta, and a Delving Bitcoin write-up on multi-layer HTLC routing. No security advisories today. The pattern holds from recent days: volume concentrated in agent tooling and SDK maintenance, with the substantive work sitting in Bitcoin's protocol-research corner rather than in shipped product features.

Cover image for AI floods the wire, Bitcoin ships quiet infra

Radicale patches an auth bug, AI floods the wire

One real security story today: Radicale 3.8.3 fixes an auth flaw where rights and user groups weren't cleared before a conditional set, reported under FO-RAD-2026-001. Everything else is volume. AI leads the beat count with 12 releases, nearly all agent-tooling and SDK point bumps rather than new models. Self-hosting runs close behind with 11, a mix of sync, media, and PaaS updates. Bitcoin and Nostr stay quiet at three releases apiece, no notable hardening or protocol work in either.

Cover image for Radicale patches an auth bug, AI floods the wire

AI posts 15 releases, still no new weights

AI dominates the count again with 15 of 38 releases, but the pattern holds from recent days: SDK bumps, agent-tooling patches, and changelog diffs rather than model drops. The one genuine model entry, Hugging Face Transformers' EmbeddingGemma 2 addition, sits apart from a long tail of coding-agent and client updates. Bitcoin's six releases lean toward hardening, with BTCPay Server closing an SSRF gap and Fedimint backporting gateway payment-path fixes to its 0.11 line. Privacy and Self-hosting round out the board at six each, spanning wallet UX, sync clients, and a self-hosted PaaS update. No single story outweighs the volume itself: a wide, shallow day across every beat.

Cover image for AI posts 15 releases, still no new weights

Three security patches anchor a 39-release day

Three advisory-driven patches lead the wire: Vaultwarden, FreshRSS, and Bitkey App all ship security fixes today, a rare cluster of hardening work landing in the same cycle. Around them, AI again posts the highest count on the board with a dozen releases, but the pattern from recent days holds: SDK bumps, agent tooling, and changelog-only diffs rather than new weights. Self-hosting is the volume leader at ten releases, spanning calendar apps, document managers, and sync tools. Bitcoin and Nostr stay light, with payjoin tooling reaching a first stable CLI release worth noting on the Bitcoin side.

Cover image for Three security patches anchor a 39-release day

AI day: five releases, infrastructure not models

AI dominates the wire, with five of seven releases touching inference and tooling plumbing rather than new model weights. vLLM lands a major version bump with 717 commits, InvokeAI ships a breaking database migration, and llama.cpp tunes CUDA kernels. Nostr and Privacy each contribute a single point release. Nothing here is a model drop; it is the scaffolding around them, upgrade paths, permission fixes, and kernel tiling.

Cover image for AI day: five releases, infrastructure not models

Scattered patch-now wave, two major-version jumps

Four "patch now" releases landed in a single stretch, touching four different trust boundaries: a Bitcoin wallet gateway (openclaw 2026.8.34), a router's management interface (StartOS StartWRT 1.2.1), a decentralized exchange client (Bisq 1.10.9, fixing audit findings plus a Tor bump), and a Lightning mobile wallet with a cross-device warning (ZEUS 13.2.2). That is a wider spread across the stack than most weeks produce in one batch. AI held volume leadership at 48 stories, but the pattern repeats from prior weeks: llama.cpp ran eight-plus nightly builds on backend-specific fixes, and Anthropic, LangChain, and Cline shipped routine SDK and compatibility bumps. Bitcoin's 26 stories skewed toward hardware and wallet UX, Coldcard shipping two firmware lines (1.5.3Q and 5.6.3) in parallel. Self-hosting stayed thin at 17 stories but included one real milestone: BorgBackup's long-running 2.0 beta cycle and Gitea's 28.0.0 major release both landed breaking changes operators will need to read before upgrading. Policy coverage from EFF ran heavier than usual, three separate items tracking surveillance litigation and one tracking a developer's forced deportation from Ecuador.

Cover image for Scattered patch-now wave, two major-version jumps

Nostr and Privacy lead a quiet point-release Sunday

No structural cuts or security advisories today. The wire is dominated by point releases across Nostr (five clients and relays, including Grain, Ditto, Mostro) and Privacy (IronFox, SimpleX Chat, BasicSwap DEX), with Bitcoin and AI each contributing smaller, incremental updates. Nothing here reads as urgent; most entries are maintenance bumps, changelog fixes, or nightly builds rather than new capability.

Cover image for Nostr and Privacy lead a quiet point-release Sunday

Qubes OS 4.3.2 stable lands amid a 24-release volume day

Qubes OS 4.3.2 is the one structural release on the wire, a stable cut landing inside a Privacy beat otherwise stacked with routine client bumps from Bitwarden and a GrapheneOS factory image. AI posted nine releases and none ship new models, mostly coding-tool and agent-SDK point updates (Qwen Code, Cline Desktop, llama.cpp, Claude Agent SDK). Bitcoin's five items are incremental: Phoenix and Bitcoin Keeper bug fixes, Ledger Live's matched mobile/desktop version bump, and a Payjoin Dev Kit interface change. Nostr and Self-hosting round out the day with single-digit point releases, no security advisories attached to either.

Cover image for Qubes OS 4.3.2 stable lands amid a 24-release volume day

Two security patches amid a heavy AI/privacy volume day

Two security fixes anchor the wire: openclaw's extended-stable gateway release and StartOS StartWRT 1.2.1, which closes management-interface vulnerabilities on routers. Everything else is volume. AI posted ten releases and Privacy nine, together accounting for most of today's 28 items, but none of the AI drops ship new models, and the privacy cluster skews toward Tor-adjacent infrastructure (Arti 2.7.0, a new Tor Browser alpha) alongside routine client updates from Bitwarden and Tuta. Bitcoin and Nostr round out the day with incremental point releases rather than anything structural.

Cover image for Two security patches amid a heavy AI/privacy volume day

Bisq 1.10.9 patches audit findings, 31 releases across five beats

One security patch led the wire: Bisq 1.10.9 fixed vulnerabilities from a recent audit and bundled the latest Tor release. AI infrastructure again dominated volume with eleven releases, none adding models. Hugging Face Transformers 5.18.0 added Nemotron 3 Diarization for streaming speaker detection. Anthropic SDK releases for Java and Ruby added refusal stop reasons and Claude Enterprise analytics. Privacy posted nine items, led by Tails 7.14 and Mullvad Browser 15.0.24, both carrying Tor Browser 15.0.24. Self-hosting logged four releases including Home Assistant 2026.10 beta and AdGuardHome 1.0.0-b.1. Bitcoin beat saw six releases: Phoenixd 0.9.2, Coldcard Firmware 5.6.3, Nunchuk Android 2.9.0 with off-chain inheritance support, and two Arkade TS SDK releases. Nostr posted two client updates. One policy item from EFF.

Cover image for Bisq 1.10.9 patches audit findings, 31 releases across five beats

AI leads with eight releases, Self-hosting and Bitcoin trail

AI claimed eight of twenty-eight items on the wire, all infrastructure and SDK maintenance. openclaw 2026.8.33 arrived as the first extended-stable gateway release, equivalent to LTS. Anthropic shipped Claude Code 2.1.284 with Sonnet 5.5 as the new default, and a matching Agent SDK release. Mistral, LangChain, DeepSeek, llama.cpp, and MiniMax all logged minor versioning. Self-hosting posted five: Nextcloud Desktop, AdGuardHome beta, StartWRT with Wi-Fi regulatory support, Immich, and Audiobookshelf. Bitcoin logged six, led by Fedimint's first Android SDK beta and Blockstream Green iOS 5.7.0 with manual coin selection. Privacy beat logged five across Nostr VPN, uBlock Origin, GopenPGP, and Am I Exposed. Nostr saw four small releases. No protocol work. No CVEs beyond the LTS tag.

Cover image for AI leads with eight releases, Self-hosting and Bitcoin trail

Light weekend: BorgBackup 2.0, four Nostr patches

A slow Sunday before month-end. Self-hosting claimed three of fifteen items, led by BorgBackup 2.0, the first stable release of the rewritten deduplication engine. Nostr logged four: YakiHonne Web, Sidecar, Ditto, and nostream, all minor. AI posted four maintenance releases across opencode, llama.cpp, InvokeAI, and MiniMax Code. Bitcoin saw two: JoinMarket-NG 0.40.0 now exports BIP-329 wallet labels for CoinJoin outputs and change addresses, while LNDg 1.11.1 addressed zero-index edge cases in payment tracking. The Privacy beat logged only Delta Chat Desktop 2.62.0. No CVEs. No protocol work.

Cover image for Light weekend: BorgBackup 2.0, four Nostr patches

Core Lightning patch-now, umbrelOS 2.0 lands

Three patch-now releases cut across different stacks. Stirling-PDF 3.0.1 fixed Windows-specific regressions introduced in its major release. openclaw 2026.7.35 shipped as a gateway-only extended-stable patch. Navidrome 0.64.2 and Core Lightning 26.06.8 both landed bug fixes, the latter patching responsibly disclosed vulnerabilities. AI again dominated by volume at 53 stories, but most weight remained incremental: llama.cpp shipped fourteen nightly builds addressing backend tuning and model-specific edge cases, while several LangChain partner packages bumped minor versions. Bitcoin saw scattered releases including Cashu TS 5.0.0-rc.11 completing the Nutroot wire format for BLS keysets and Payjoin Dev Kit 1.1.0 hardening validation on both sides of a payjoin. Self-hosting remained quiet with no coordinated activity. Nostr logged 14 stories, the lowest volume beat this week.

Cover image for Core Lightning patch-now, umbrelOS 2.0 lands

Privacy dominated, AI and Nostr filled the rest

Privacy tools took six of twelve releases on the wire. Delta Chat Android 2.62.0 now onboards new users to multiple randomly selected relays instead of the hardcoded nine.testrun.org default. SimpleX Chat, Am I Exposed, GrapheneOS, and a Logseq nightly all shipped. AI logged three: llama.cpp b11207 added Hexagon-tiled Q4_0 and Q8_0 GET_ROWS support, koboldcpp patched to 1.122.1, and MiniMax Code reached 0.5.5. Nostr posted cln-nip47 0.2.1 with updated dependencies and Ditto 2.42.0. Self-hosting saw one item, Stirling-PDF 3.0.1, which fixed double title bars and temp log growth on Windows desktop. Bitcoin logged a single ESP-Miner test build.

Cover image for Privacy dominated, AI and Nostr filled the rest

Privacy beat dominates with seven of fifteen releases

Privacy tools claimed seven of fifteen items on the wire. Signal Android 8.29.1 redesigned the media editor for tablets and foldables. Nostr VPN 4.1.16 fixed discovery of private exit nodes on mobile and now auto-collects pending earnings from expired seller channels. KeePassDX, Trilium, Joplin, and Element Android all shipped patches. AI logged five including llama.cpp b11191, which fixes unicode path handling on Windows and corrects directory creation, plus desktop releases from Cline and Qwen Code. Bitcoin posted lnd 0.21.4-beta.rc1 with no migrations. Self-hosting logged n8n and Duplicati canary.

Cover image for Privacy beat dominates with seven of fifteen releases

AI day: 11 of 24 items, infrastructure only

AI infrastructure claimed eleven of twenty-four items on the wire. The beat split between code assistants, model-integration SDKs, and inference engines. Ollama 0.40.0 runs MLX-compatible architectures by default on Apple Silicon. llama.cpp merged b11177 fusing RMS NORM and SCALE into a single CUDA kernel. Cline, Claude Code, and Hermes Agent shipped patch releases. ElevenLabs pushed Python and JavaScript SDK updates stripping residency suffixes from API keys before JWT verification. The Privacy beat logged four including Tuta Drive, Bitwarden Browser, Proton Pass iOS, and a Logseq nightly. Bitcoin shipped Payjoin Dev Kit 1.1.0 hardening validation, lightning-kmp 1.13.2 persisting funding confirmations received offline, Macadamia 0.11.0 supporting all advertised payment methods, and Blockstream Green Android 5.7.0. Nostr logged Sprout Buzz Desktop 0.5.25 and Ditto 2.41.2. Self-hosting logged Stirling-PDF 3.0.0, Navidrome 0.64.2, and Nginx Proxy Manager 2.16.0.

Cover image for AI day: 11 of 24 items, infrastructure only

AI day: fifteen releases, mostly infrastructure and integrations

AI infrastructure claimed half the wire. Fifteen of thirty items came from the AI beat, split between model-integration libraries, code assistants, and inference engines. LangChain shipped patches for Anthropic and OpenAI endpoints adding Opus 5.5 and GPT-6 profile augmentations. llama.cpp merged b11153 rejecting certain MUL_MAT_ID calls when src1 precision is F32. Cline released CLI and SDK fixes for long sessions on local models. Privacy logged seven including Vanadium updating to Chromium 154, Signal Android 8.29.0 with a redesigned media editor, and Mullvad VPN Android 2026.11 fixing a rare map-view crash. Bitcoin shipped three Arkade TS SDK releases and ZEUS 13.2.2 with an iOS multi-device warning. Nostr logged Sidecar 1.14.1, Ditto 2.41.0, and Divine 1.0.23.

Cover image for AI day: fifteen releases, mostly infrastructure and integrations

AI takes half the wire, two new GPT-6 models

AI claimed fifteen of thirty releases, split between infrastructure updates and two new OpenAI frontier models. GPT-6 Sol and Luna arrived with different capability-cost profiles. The plumbing layer shipped Ollama 0.34.4 fixing intermittent model-not-found errors, llama.cpp b11117 with HIP optimizations for IQ2 and IQ3, and llm CLI 0.36 adding both GPT-6 endpoints. Privacy logged seven items including KeePassXC 2.8.0-beta1 with remote database sync and Proton VPN Windows 5.1.8 fixing split tunneling. Bitcoin shipped three: Core Lightning 26.06.8 with vulnerability fixes, Cashu TS 4.11.0 backporting v5 fixes to the v4 line, and Ledger Live Desktop 4.21.1. Nostr logged four including Sprout Buzz Desktop 0.5.24 and Sidecar 1.14.0 with alt-text support.

Cover image for AI takes half the wire, two new GPT-6 models