Self-hosting leads with eight, Bisq 1.10.8 security patch

Self-hosting took the wire with eight releases: n8n, DAVx5, Audiobookshelf, Nextcloud Desktop, Uptime Kuma, Coolify, and Portainer. Privacy logged seven: Element Web, Nym Binaries, Nitrokey 3 Firmware RC, Signal Android, Logseq nightly, and two Standard Notes version bumps. AI brought four infrastructure items: Qwen Code nightly, llama.cpp, Olmoearth Pretrain Minimal, and Claude Agent SDK Python. Bitcoin had five: Bisq 1.10.8 closes security audit findings, Cashu and Cashu CDK with database migrations and recovery fixes, Lightning Terminal bundles taproot-assets 0.8.4, and Trezor Suite with a Sign & Verify UI refresh. The only Policy item was an EFF court victory on embedding links.
Self-hosting leads with eight, Bisq 1.10.8 security patch

Bitcoin

  • Bisq 1.10.8. Closes vulnerabilities identified in a recent security audit; operators should upgrade.
  • Cashu 0.21.0. Includes database migrations for mint and mint authentication databases.
  • Cashu CDK 0.17.7. Limits payment status checks during mint recovery to ten seconds, defers timed-out sagas without releasing reserved proofs.
  • Lightning Terminal 0.17.5-alpha. Bundles taproot-assets v0.8.4.
  • Trezor Suite 26.9.2. Sign & Verify UI refresh with dedicated copy buttons for message, address, and signature.

Privacy

Self-hosting

  • N8n 2.39.6. Core: Check Gateway credits eligibility against the correct sub-node (0cf7e99); Core: Add v3 breaking change rule for the storage directory rename (c3dcbbe).
  • DAVx5 4.5.20-beta.2-ose. Disable dependenciesInfo block for reproducible builds; Do not exclude at.bitfire.
  • Audiobookshelf 2.36.1. Collapse series not working when filters are enabled 2807 3049; Podcast rescan emitting stale episodes on item updated.
  • Nextcloud Desktop 34.0.4. Chore/improve clang format configuration; Fix (fileprovider): Consume lock ETags before File Provider content updates.
  • Uptime Kuma 2.5.5. Fixes memory leak from tcp monitor.
  • Coolify 4.3.20. Adds an All option to the log viewer; log APIs now accept lines=all.
  • Portainer 2.45.1. On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot; Podman environments aren’t supported by auto-onboarding script.

AI

Other


Read on Freedom.Tech: https://freedom.tech/posts/2026-09-17-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.


Write a comment