A busy release week with no coordinated CVEs, just a wide patch-now wallet wave and a pile of hardware-integration updates.

• Patch board
• Weekly threads
  • Mobile wallet hardware-integration wave
  • Coordinated lnd invoice-migration fix
  • Calendar and backup self-hosting cluster
• Release board
  • Privacy
  • Self-hosting
  • AI
  • Nostr
  • Bitcoin
• Research, policy & news
• What to watch
• By the numbers

§Patch board

No CVEs or coordinated security patches shipped this week. ZEUS 13.2.1, Nunchuk Android 2.8.5, and the Astra announcement carried ‘Patch now’ severity, but ZEUS and Nunchuk disclosed no CVE identifiers, the former for security hardening and BOLT 12 fixes, the latter for hardware-wallet integration and emergency notifications. Bitcoin Knots 29.4.1 mitigated an ongoing network attack and improved spam filters. ownCloud Android 4.8.4 closed a lock-bypass vulnerability. Operators should have already patched these four items.

• ZEUS 13.2.1. V13.2.1 Highlights: - LDK Node: BOLT 12 fixes - Boltcard fixes - Improved clipboard value UI - Further security hardening measures - Miscellaneous bug fixes - Miscellaneous UI improvements chore(de…
• Path to Astra: critical capabilities and frontier safeguards. Astra is the first OpenAI model to meet the Critical cybersecurity capability threshold under the Preparedness Framework, with stronger safeguards for release.
• Nunchuk Android 2.8.5. Nunchuk Android 2.8.5 adds Bitbox Bluetooth and USB support, Krux support, and emergency push notifications.

§Weekly threads

§Mobile wallet hardware-integration wave

Three mobile Bitcoin wallets shipped device-connectivity updates in parallel. Nunchuk Android 2.8.5 added Bitbox Bluetooth and USB support plus Krux. Bull Bitcoin 6.13.1 fixed send-to-self exclusions and coin labeling. ZEUS 13.2.1 hardened security and corrected Boltcard behavior. Operators running any of these clients should verify pairing behavior and coin-control workflows before relying on hardware paths in production.

§Coordinated lnd invoice-migration fix

lnd 0.21.3-beta and 0.20.4-beta both shipped a fix to the native SQL invoice migration path for AMP sub-invoices. The issue affected operators who migrated to SQL-backed invoice storage. Both releases carry no new migrations, so the update is a drop-in patch for clusters already on 0.21 or 0.20 branches. Lightning Terminal 0.17.4-alpha bundles lnd 0.21.3-beta.

§Calendar and backup self-hosting cluster

BorgBackup 2.0 landed as a major release after a long beta cycle. Duplicati 2.4.0 shipped as a canary build for testing. Radicale 3.8.0 added group-based sharing with htgroup, none, and from-auth types, plus a filesystem collision-check performance fix. Operators running any of these should verify migration paths and test group-permission logic before rolling calendars or backup repositories into production.

§Release board

§Privacy

• Tails 7.12. Tails 7.12 moves to a two-week release cadence to match Firefox’s new schedule.
• IronFox 155.0.1. 155.0.1 - changelog Signed-off-by: celenity
• Tor Browser 15.0.21. Tor Browser 15.0.21 is a routine update.
• Vanadium 152.0.7977. Vanadium 152.0.7977.84.0 updates to Chromium 152.0.7977.84.
• uBlock Origin 1.74. - Improve remove-node-text / replace-node-text scriptlets - Improve prevent-clipboard-write scriptlet - Address multiple static filter parser issues - Treat resources with data as redirectable - Add mpegdash-prune scriptlet - Improve xml…
• IVPN Desktop 3.15.15. IVPN Desktop 3.15.15 requires macOS 12 Monterey or later.
• XMRPod 0.1.19. Fixed - Validate Monero enabled podcast feeds on the device before showing them, so dead links, regular webpages and blog feeds without episodes no longer appear in the directory.
• Bitwarden Android Password Manager 2026.8.1. Bitwarden Android 2026.8.1-bwpm is a pre-release with improved account security and better phone-number autofill.
• Bitwarden iOS Authenticator 2026.8.1. Bitwarden iOS Authenticator 2026.8.1-bwa introduces a new Date Field Picker.
• Mullvad Browser 16.0a11. Mullvad Browser 16.0a11 is an alpha release.
• Mullvad Browser 15.0.21. Mullvad Browser 15.0.21 updates Firefox to 140.15.0esr, NoScript to 13.6.32.1984, and uBlock Origin to 1.74.0.
• Signal Android 8.26.2. The media editor has been completely redesigned to better support tablets and foldable devices, and now it looks great on screens of all sizes.

5 more Privacy releases tracked in the weekly totals.

§Self-hosting

• BorgBackup 2.0. BorgBackup 2.0 is a major release.
• Duplicati 2.4.0. This release is a canary release intended to be used for testing.
• Immich 3.2.0-rc.2. Immich 3.2.0-rc.2 is a release candidate with a warning banner.
• Home Assistant 2026.9. Home Assistant 2026.9 is a beta release (RC7 visible in other items suggests this is 2026.9.0b5).
• umbrelOS 2.0. umbrelOS 2.0.0-beta.1 is available for users enrolled in the Beta Program.
• Paperless-ngx 3.1.3. Paperless-ngx 3.1.3 Bug Fixes - use the header loading indicator on tasks page @shamoon - fix load sidebar size animating @shamoon - wrap long words without spaces in dropdowns @shamoon - tweak tool calling localzation prompt…

§AI

• Asta Autodiscovery 1.0.1. Published to PyPI: asta-autodiscovery 1.0.1 Release notes, including breaking changes: CHANGELOG.md
• Qwen Code 0.23.0. Highlights See the complete change list below.
• Kimi Code 0.41.0. Minor Changes 3423 b199e33 Thanks @RealKai42 !
• Ollama 0.33.3. Honor GGUF model defined default parameters MLX, MLX-C, llama.cpp update
• HelixML 2.12.9. Direct waitlist users to blog chore(model): refresh OpenRouter pricing metadata reconcile stale web service…
• Ollama 0.34.0. Use Ollama models in ChatGPT Desktop Ollama models can now be used directly in ChatGPT Desktop, so you can keep your existing workflow while running open models.
• Kimi Cli 1.50.0. Omit empty anthropic-beta header when no beta features declared chore(release): bump kosong to 0.56.0 deprecation-aware update flow with one-key migration to Kimi Code…
• Qwen Code Live Host 0.2.0. Make shared ECS Vitest concurrency tunable OpenTUI migration batch 4 - dialogs, commands, and session-rewind let the model propose a Goal the user approves in a dialog…
• OpenClaw 2026.8.1. 2026.8.1 2026.8.1 release notes Update help: If the automatic update fails, use a local coding harness to help complete the update, diagnose any migration errors, and verify that the Gateway starts correctly.
• opencode 1.18.29. Core Bugfixes - Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 - Fixes issue of gpt-6-astra not showing up for openai subscription users Thank you to 2 community

§Nostr

• ngit-cli 3.0.0-rc.5. - Fifth v3 release candidate, making automatic PR branch downloads opt-in, exposing issue edit history, improving release publication feedback and compatibility, hardening Windows credential writes, and avoiding private discovery request…
• Vector 0.4.4-2. Vectory Lap A deep stability release: the Concord community engine was hardened end to end, files got smart, and animated profiles stopped eating your GPU.
• Sprout Buzz Desktop 0.5.23. Desktop and shared changes - keep packaged frontendDist relative so Windows embeds assets ( dad5a33865fc81a2e55b3b60746632f615ec1e3a ) - simplify unread indicators and emphasize priority activity (…
• Amber 6.6.1. Changelog Amber 6.6.1 - Fix parsing of incoming permission lists when a permission has no kind field in its JSON, so the whole list no longer fails to load - Fix rejected signer requests not returning the request id in the result…
• Wisp 1.2.3. Nostr changes affect identity, relays, zaps, messaging, and wallet-connect workflows.
• YakiHonne Mobile 2.0.7. 2.0.7 - 2026-08-31 Added - Kind 1111 (NIP-22) comment support in notes and replies.
• Sidecar 1.12.0. Relays: what Sidecar knows about them, what it does when it cannot tell, and what it says when something fails.

§Bitcoin

• RoboSats 0.8.7-alpha. RoboSats 0.8.7-alpha is a pre-release.
• Specter-DIY 1.10.5. V1.10.5 Maintenance release: security hardening for the hardware RNG and for transaction/change handling.
• Bull Bitcoin 6.13.1. V6.13.1 exclude change from send-to-self amount allow coins with labels t…
• JoinMarket-NG 0.39.0. JoinMarket-NG 0.39.0 ships bug fixes, security hardening, and privacy improvements.
• Flint 1.0.4. Verify before you install Every artifact here is signed with GitHub build provenance - a Sigstore attestation binding the file’s digest to this repository, this workflow, and the commit that built it.
• lnd 0.21.3-beta. Database Migrations This release introduces no new database migrations, but includes an important fix to the existing SQL invoice migration path: - Native SQL invoice migration with their AMP sub-invoices.
• lnd 0.20.4-beta. Database Migrations This release introduces no new database migrations, but includes an important fix to the existing SQL invoice migration path: - Native SQL invoice migration with their AMP sub-invoices.
• Blockstream Green Desktop 3.5.4. What’s new in this release Changed - Updated Qt to 6.11.2 - Completed swaps are no longer restored at login Fixed - Stale swap status caused dropped while restoring pending swaps
• Cashu CDK 0.18.0. Cashu CDK 0.18.0 moves cdk-mintd to a database-authoritative configuration model.
• Bitcoin Knots 29.4.1. Bitcoin Knots 29.4.1.knots20260508 mitigates an ongoing network attack and improves spam filters.
• BitBox02 Firmware 9.27.1. - API: include the installed bootloader version in the device info response - Ethereum: display the EIP-712 message type before signing - Bitcoin: allow signing messages with keys in the m/48’ application namespace Note: When upgrading f…
• Coldcard Firmware 6.6. Coldcard Firmware 6.6.1X is a maintenance release with security hardening for the hardware RNG and transaction/change handling.

2 more Bitcoin releases tracked in the weekly totals.

7 lower-priority releases omitted from the board but counted below.

§Research, policy & news

• New Alpha Release: Tor Browser 16.0a11. Tor Browser 16.0a11 is an alpha release.

§What to watch

• Ollama 0.34.0 stable release following ChatGPT Desktop integration RC. Ollama 0.34.0-rc1 shipped with ChatGPT Desktop support, expanding the client surface. The stable release will determine whether the integration path introduces breaking changes for existing Ollama deployments. Operators should monitor the release notes and test before rolling to production.
• Jellyfin 12.0 stable release after RC7. Jellyfin 12.0-rc7 is the seventh release candidate, suggesting the stable release is imminent. Operators running Jellyfin media servers should prepare for the major-version upgrade and validate migration paths once the stable tag ships.
• Anthropic CLI 1.30.0 ‘ant apply’ workflow adoption and feedback. Anthropic CLI 1.30.0 introduced ‘ant apply’ for managing agents, skills, and deployments as code. Operators who integrate the CLI into automation should test the declarative workflow for idempotency and error handling. Early feedback will shape the apply command’s stability path.

§By the numbers

• Stories tracked: 150
• Featured: 58
• Releases: 138
• Active sources: 190
• Security patches: 3
• Days covered: 7

Top beats this week

• AI: 53
• Privacy: 33
• Bitcoin: 25
• Self-hosting: 18
• Nostr: 17
• Unspecified: 4

Read on Freedom.Tech: https://freedom.tech/posts/2026-09-06-weekly-recap/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.