Freedom.Tech

by Freedom.Tech Sep 22, 2026 · Edited

AI infrastructure day: two security patches, 35 releases

AI claimed fifteen of thirty-five releases, all infrastructure plumbing and tooling. vLLM shipped 0.30.0 with 762 commits from 315 contributors. llama.cpp landed new HMX-optimized GATED DELTA NET support. Privacy logged eleven items including two Thunderbird for Android point releases and a Mullvad Browser stable rebase onto Firefox 140.16.0esr. Two security patches closed: openclaw gateway-only extended-stable and Navidrome 0.64.1. Nostr shipped five releases including Amber 6.6.5 with hardened backup encryption. No model weights, no protocol changes.

by Freedom.Tech Sep 17, 2026 · Edited

Self-hosting leads with eight, Bisq 1.10.8 security patch

Self-hosting took the wire with eight releases: n8n, DAVx5, Audiobookshelf, Nextcloud Desktop, Uptime Kuma, Coolify, and Portainer. Privacy logged seven: Element Web, Nym Binaries, Nitrokey 3 Firmware RC, Signal Android, Logseq nightly, and two Standard Notes version bumps. AI brought four infrastructure items: Qwen Code nightly, llama.cpp, Olmoearth Pretrain Minimal, and Claude Agent SDK Python. Bitcoin had five: Bisq 1.10.8 closes security audit findings, Cashu and Cashu CDK with database migrations and recovery fixes, Lightning Terminal bundles taproot-assets 0.8.4, and Trezor Suite with a Sign & Verify UI refresh. The only Policy item was an EFF court victory on embedding links.

by Freedom.Tech Sep 16, 2026 · Edited

Privacy leads with eleven items, Bisq 2 ships Tor security patch

Privacy took the wire with eleven releases. Tor Browser reached 15.0.23. Bitwarden shipped web and server builds; Standard Notes pushed Desktop 3.202.5 and Clipper 1.1.600; Notesnook Android hit 3.4.13. Mullvad VPN tagged an Android release with a first-connection failure note for quantum-resistant and DAITA modes. SimpleX Chat issued beta.3 of 7.1.0. Logseq posted a nightly. BasicSwap DEX released 0.18.9 and Nostr VPN updated to 4.1.12. AI logged eight items, mostly tooling updates: llama.cpp, llamafile, ComfyUI, Ollama, Claude Agent SDK, Kimi Code, Maple, and an ElevenLabs CLI. Bitcoin had eight: Bisq 2 2.1.13 bundles the latest Tor security release. Cashu TS added draft Nutroot, BitBoxApp 4.52.0 introduced a mobile-only beta Lightning hot wallet, phoenixd fixed an electrum-client hang, and Envoy, Keystone 3, lightning-kmp, and Arkade TS SDK Swap all shipped point releases. Self-hosting brought four: n8n, Immich 3.2.2, Coolify, and Syncthing-Fork Android. Nostr had one: NYM Chat 3.75.545, a security hotfix.

by Freedom.Tech Sep 15, 2026 · Edited

AI dominance: 12 releases, Eclair security patch

AI infrastructure took half the wire again. llama.cpp switched to fp32 accumulators in flash-attention on MFMA devices, Ollama raised token repeat limits and added MLX memory checks, and Qwen Code capped web-search calls per session. Cline CLI introduced a native desktop app with task import and MCP marketplace. Deepseek Harness added MCP URI profiles and browser-use support. Bitcoin logged four items: Eclair shipped security hardening from project Loupe, Wasabi and Envoy beta both tagged point releases, and Keystone 3 pushed web3 changes. Privacy saw Thunderbird for Android fix attachment decoding, Notesnook Desktop 3.4.8, and Signal Desktop beta tweaks. Self-hosting brought Jellyfin 12.1, Immich 3.2.1 fixing connection pool exhaustion, and Nextcloud Android 35.0.0 RC3. Nostr had one item: Mostrix 0.3.2. No protocol work, no CVEs.

by Freedom.Tech Sep 14, 2026 · Edited

AI dominates with five releases, Privacy three, Self-hosting two

AI infrastructure took half the wire. llama.cpp added BF16 hardware-acceleration fallback, Qwen Code pushed a nightly with channel refactoring, Open Interpreter synced to upstream Codex rust, and Molmospaces tagged a pre-major-update stable. Privacy logged Mullvad VPN desktop, Obtainium track-only controls, and Anytype Android cross-space search. Self-hosting saw Vaultwarden fix password changes with newer web-vault and linkding add CORS plus SSRF protection. Bitcoin had one item: Electrs switched to bindex, requiring Core 31 and a full reindex. Nostr brought Lightning.Pub with no API changes. No CVEs, no protocol layer work.

by Freedom.Tech Sep 13, 2026 · Edited

Gateway and relay fixes lead a busy release week

The week shipped two coordinated gateway security patches across Fedimint branches 0.11.3 and 0.12.1, both addressing LNv1 payment bugs and hardening LNv2, LND, and LDK backends. AI activity dominated the beat count again, 49 stories versus Bitcoin's 22, but much of it landed in incremental build releases: llama.cpp pushed eight nightly builds addressing GDN normalization, Kimi-K3 recurrent-state rollback, and Vulkan tile-size tuning. Three self-hosting releases touched related backup and sync infrastructure: Duplicati 2.4.0 entered canary, Syncthing-Fork Android 2.1.5 modernized its recent-changes UI, and Jellyfin shipped a major 12.0 release with database schema changes that block rollback without restore. Nostr saw its third ngit-cli major release in three months, now at 3.0.0, alongside a credential-bypass patch in Citrine 3.1.1 that fixed NIP-42 AUTH signature validation.

by Freedom.Tech Sep 13, 2026 · Edited

AI day: five infrastructure releases, no models

Five of nine items came from AI projects, all SDK or runtime work. llama.cpp refactored JSON schema handling to use a common internal representation. Mistral Vibe patched connector discovery to exclude raw HTTP connectors that lack MCP tool support. Claude Agent SDK TypeScript reached parity with Claude Code v2.1.270. Qwen Code and one other AI nightly appeared. Bitcoin logged a Fedimint gateway security fix for LNv1 payment handling. Privacy brought BasicSwap DEX and Radar, the latter now supporting BOLT11 invoice payments. Nostr had Amethyst. Self-hosting saw Navidrome add experimental Jellyfin Music API support. No CVEs, no protocol work.

by Freedom.Tech Sep 12, 2026 · Edited

AI holds seven of twenty-one items, all plumbing

AI took seven of twenty-one releases, every one SDK or runtime plumbing. No model releases. llama.cpp updated its WebGPU implementation to a recent Dawn version. Anthropic SDK Ruby added auto-mode tool permissions for Managed Agents and user profile beta values. ElevenLabs Python accepted every music model ID and composition plan type. Mistral Vibe added a branch command for forking conversations. Bitcoin logged five items, Privacy three, Self-hosting three, Nostr two. Citrine patched an NIP-42 auth bypass where kind-22242 AUTH events were added without signature verification. GrapheneOS shipped build 2026091000. No CVEs, no protocol patches.

by Freedom.Tech Sep 11, 2026 · Edited

AI dominates: 11 of 25 releases, all tooling

AI took 11 of 25 releases, every one SDK or runtime plumbing. No model releases, though OpenAI announced ChatGPT for Financial Services with GPT-6 Astra data integration. llama.cpp optimized Vulkan small-matrix paths, whisper.cpp shipped 1.9.4, openclaw added rollback recovery for compatible failed updates. Bitcoin logged five items: LNbits UI refactors, Trezor Suite revamped Sign & Verify UI, Arkade SDK swap packaging docs, JoinMarket-NG awaiting signature quorum. Privacy had Signal Desktop granular notification settings and Signal Android tablet-optimized media editor, gopass 1.17.2 build fixes, Nostr VPN Cashu exit reliability. Self-hosting saw Coolify mandate Sentinel on regular servers, StartOS StartWRT device-driven port forwarding, n8n performance work, Immich 3.2.0. Nostr shipped one ngit-cli release leaving skill-install files uncommitted. No CVEs, no protocol patches.

by Freedom.Tech Sep 10, 2026 · Edited

AI claimed 13 of 23 releases, no models

AI dominated the wire with 13 of 23 releases, but every item was SDK or infrastructure plumbing. No model releases, despite OpenAI announcing GPT-6 Astra. Hugging Face Transformers added HYV4 support, vLLM shipped 594 commits from 277 contributors, and llama.cpp patched a Vulkan workgroup limit on Intel GPUs. Privacy contributed six items: Signal Android redesigned its media editor for tablets, gopass added passwordless profiles, FreshRSS urged immediate upgrade for security patches. Self-hosting saw FreshRSS security fixes and authentik patch endpoint enforcement. Bitcoin had one Blink Mobile prerelease. Nostr shipped Amber 6.6.3 fixing boot-service persistence. No protocol work, no CVEs, no concentrated technical signal beyond the AI count.

by Freedom.Tech Sep 9, 2026 · Edited

Privacy wave: 11 of 28 releases, dual Thunderbird Android drops

Privacy claimed 11 of 28 releases today, the strongest single-beat signal in weeks. Two Thunderbird for Android variants shipped identical 23.0 builds fixing composition-default signature parsing. Tor Browser pushed 15.0.22. Bitwarden Server patched route enforcement. Vanadium updated to Chromium 153. Tuta shipped two builds, one for Drive and one for iOS mail. Signal Android redesigned the media editor for tablets. AI contributed nine releases, all SDK and infrastructure work: no models. Elevenlabs Python entered alpha 3.0 territory; llama.cpp reverted a HIP build change; Claude Agent SDK, Kimi Code, and DeepSeek Harness all shipped minor updates. Self-hosting saw Coolify add missed-backup alerts and Syncthing-Fork modernize its recent-changes UI. Bitcoin released Phoenix 2.8.2 with four new languages and NodeGuard 0.30.1 with PSBT-template enforcement. Nostr had ngit-cli 3.0 and a Damus TestFlight build. Qubes published an XSA bulletin. No CVEs, no protocol work, no concentrated technical signal beyond the Privacy count.

by Freedom.Tech Sep 8, 2026 · Edited

AI day: nine releases, all infrastructure plumbing

Nine of nineteen releases today came from AI projects, all infrastructure work with no new models. Open Interpreter improved provider discovery and added Qwen tool-use diagnostics. llama.cpp added Kimi-K3 recurrent-state rollback. Qwen Code gained workflow visualization. ElevenLabs pushed two Python SDK and CLI updates. Bitcoin had six items scattered across client and middleware layers: BTCPay disabled NFC payments by default, Ride The Lightning hardened login lockout, NodeGuard added RBF fee-bump logic. Privacy saw four releases, most minor or nightly. No protocol work, no CVEs, no concentrated signal beyond the AI count.

by Freedom.Tech Sep 7, 2026 · Edited

Balanced Monday: AI infrastructure, privacy tooling, Nostr patches

Ten releases spread across four beats. AI had three infrastructure updates: llama.cpp fixed GDN normalization math, Qwen Code added workflow visualization, InvokeAI patched bugs from the previous version. Privacy releases outnumbered others with four items: GrapheneOS shipped a device-spanning build tag, Obtainium fixed certificate-pinning GitHub fetches, BasicSwap DEX and IronFox both issued minor updates. Nostr saw two client patches. Bitcoin had one firmware update preparing Passport Prime for the next major version. No concentrated signal, no CVEs, no protocol work.

by Freedom.Tech Sep 6, 2026 · Edited

A busy release week with no coordinated CVEs, just a wide patch-now wallet wave and a pile of hardware-integration updates.

The week logged one operator-critical mobile wallet patch. ZEUS 13.2.1 shipped with security hardening, BOLT 12 fixes, and Boltcard corrections marked "Patch now" alongside two other mobile Bitcoin wallets, Nunchuk Android 2.8.5 and Bull Bitcoin 6.13.1, that added hardware-wallet connectivity and coin-selection fixes. AI infrastructure continued its cadence: Ollama moved from 0.33.3-rc0 through 0.34.0-rc1 with ChatGPT Desktop integration, Qwen Code hit 0.23.0, and OpenAI announced Astra, the first model to meet the Critical cybersecurity capability threshold under the Preparedness Framework. Self-hosting releases clustered around backup and calendar: BorgBackup 2.0, Duplicati 2.4.0 canary, and Radicale 3.8.0. The Lightning stack remained quiet; lnd shipped two coordinated betas, 0.21.3 and 0.20.4, fixing the native SQL invoice migration path. CVE disclosures were absent. The week tallied 53 AI stories, 25 Bitcoin, 33 Privacy, 18 Self-hosting, and 17 Nostr.

by Freedom.Tech Sep 6, 2026 · Edited

AI-heavy Sunday: six AI releases, two Bitcoin, two privacy

Six of eleven stories today came from AI projects, all infrastructure tooling. Claude Code and Claude Agent SDK both shipped plugin-delivery fixes for Windows environments with large plugin counts. Ollama 0.34.0 added ChatGPT Desktop integration. llama.cpp, Qwen Code, and openclaw all released with performance or backend work. Bitcoin saw Specter-DIY harden its hardware RNG and Fedimint Web issue a canary build. Privacy releases came from IronFox and XMRPod, the latter validating Monero podcast feeds on-device. Nostr had a single desktop client update.

by Freedom.Tech Sep 5, 2026 · Edited

AI leads with nine releases, Nostr seven, privacy and Bitcoin four each

Twenty-eight releases today, heavy on AI infrastructure. Nine AI items include llama.cpp 0.4.0 adding Qwen3.8-Flash-Next support, Anthropic SDK 0.124.0 with workspace ID and compliance reporting, and LangChain-core 1.6.2 with async tool support. Nostr shipped seven: Sprout Buzz Desktop 0.5.22, Amber 6.6.1 fixing permission parsing, Sidecar 1.12.0 improving relay handling, Mostro daemon and mobile updates, Zap Store 1.1.2, and Jumble 26.9.2. Bitcoin had four releases including JoinMarket-NG 0.39.0 with privacy hardening, Cake Wallet 6.4.4 adding hardware wallet capabilities, Cashu TS 3.7.2 dual-licensing under MIT or Apache-2.0, and Bull Bitcoin 6.13.4. Privacy saw Signal Android 8.26.2 redesign the media editor for tablets, Bitwarden iOS 2026.8.1, XMRPod 0.1.18 adding Monero podcast search, LibreTube nightly, and a Tuta blog post on Dropbox. Self-hosting yielded Immich 3.2.0-rc.3, rclone 1.75.1, and two StartOS registry and tunnel updates. OpenAI announced GPT-6 Astra.

by Freedom.Tech Sep 4, 2026 · Edited

Twenty-eight releases: Privacy and AI tie at nine each

Privacy and AI each shipped nine releases today. Privacy was all maintenance: Tails and Mullvad Browser moved to Firefox's new two-week cycle, Bitwarden pushed three platform updates, IVPN Desktop now requires macOS Monterey, and Signal Desktop added notification controls. AI remained infrastructure-focused: Anthropic CLI added agent and deployment tooling, llama.cpp hit build 10794, LangChain 1.4.0 introduced an MCP namespace, and Mistral CLI now merges generated files instead of overwriting. Bitcoin saw five releases, including Lightning Terminal 0.17.4-alpha bundling lnd 0.21.3-beta and Coldcard 5.6.2. Self-hosting had four, led by Duplicati's first stable release since 2.3.0.4 and Paperless-ngx 3.1.3. Nostr yielded two: ngit-cli 3.0.0-rc.6 and Primal Android 3.5.27.

by Freedom.Tech Sep 3, 2026 · Edited

AI volume drops sharply after sustained run

Ten AI releases today, down from fifteen yesterday. The mix remains infrastructure: SDKs from Anthropic and ElevenLabs, a llama.cpp fix for idefics3 preprocessing, HelixML plumbing, and two DeepSeek harness and Qwen host updates. No model weights. Privacy saw seven items, all maintenance releases. Signal redesigned its media editor for tablets and foldables. Tor Browser alpha continues the 16.x cycle. Bitcoin yielded nine releases, including two security patches: ZEUS 13.2.1 with LDK BOLT 12 fixes and Boltcard hardening, and Nunchuk Android 2.8.5 adding Bitbox Bluetooth and Krux signer support. Bitcoin Knots 29.4.1 ships spam-filter improvements and attack mitigation. Self-hosting had three: umbrelOS 2.0 beta, Radicale 3.8.0 with group-based sharing, and Coolify 4.3.15 with per-domain port overrides.

by Freedom.Tech Sep 2, 2026 · Edited

Wed, Sep 2, 2026

1 security patch: Path to Astra: critical capabilities and frontier safeguards. 28 releases: 13 AI, 6 Privacy, 5 Nostr, 2 Self-hosting.

by Freedom.Tech Sep 1, 2026 · Edited

Busy day: 13 releases across five beats

Bitcoin claimed five of thirteen releases, all client-side maintenance. The rest scattered: three AI stories including llama.cpp recurrent-state rollback for MTP speculative decoding, two self-hosting patches, two privacy updates, one Nostr signer, and one policy piece. The ownCloud Android patch closes a passcode-bypass vector. Mullvad shipped a desktop-only beta. Syncthing-Fork modernized its recent-changes screen. Amber added manual pre-approval for individual permissions. No consensus changes, no Lightning work, no model releases. The EFF piece argues against copyright expansion in AI litigation.