AI infrastructure day: two security patches, 35 releases

• Bitcoin
• Nostr
• Privacy
• Self-hosting
• AI
• Other

§Bitcoin

• Blockstream Green Desktop 3.6.0. Adds Lightning address and LNURL pay in send flow, configurable Electrum gap limit.

§Nostr

• Amber 6.6.5. Backup events now encrypted with HKDF-derived key outside NIP-44 namespace, not main identity key.
• Grain 0.8.0-rc4. Vitals panel beside the live feed - this relay’s own event count, active connections, uptime, storage used vs the nostrdb map ceiling, Go heap vs the configured limit, and writer health.
• ngit-cli 3.0.3. Fixes proposal base selection for PR pushes and draft patches.
• Wisp 1.2.5
• Rx Nostr 3.7.7. Ignores non-relay tags in default relays.

§Privacy

• Nitrokey 3 Firmware 1.9.0. Adds R2 hardware revision support for FM11NT082C NFC chip.
• Bitwarden Clients Browser 2026.9.1. Reverts core-js bump from 3.50 to 3.49.
• Nostr VPN 4.1.15. Improves pause behavior, keeps background refunds from delaying payments.
• Mullvad Browser 15.0.23. Rebased onto Firefox 140.16.0esr, updated NoScript to 13.6.33.1984.
• Thunderbird for Android K-9 Mail 23.1. Fixes attachment filename decoding for non-ASCII characters.
• Thunderbird for Android 23.1. Fixes attachment filename decoding for non-ASCII characters.
• Tuta Calendar 360.260921.0. Fixes NotAuthorizedError.
• Tuta 360.260921.0. Fixes NotAuthorizedError.
• Anytype Desktop 0.56.10-beta. Refactors auth flow to return account synchronously.
• Logseq Desktop app Nightly Release 20260921. This is a nightly release of the Logseq desktop app; It’s unstable compared to the official releases, use it with caution !
• Proton Pass CLI 2.4.1. Proton Pass CLI 2.4.1

§Self-hosting

• Navidrome 0.64.1. Security fixes; upgrade recommended.
• N8n 2.39.9. Fixes HTTP 405 on PATCH credentials endpoint, tears down workflow triggers when node type cannot load.

§AI

• openclaw 2026.7.35. Gateway-only extended-stable branch, equivalent to LTS.
• opencode 1.18.32. Bedrock image attachments now hoisted only for Claude, Nova, Llama 4.
• Qwen Code 0.24.3-nightly.20260922.c5920f479b. Add monitor tool to system prompt guidance; Add batched workspace session catalogs.
• vLLM 0.30.0. 762 commits from 315 contributors, 104 new.
• LlamaIndex 0.14.25. Resolves security alerts across multiple agent and callback packages.
• langchain-deepseek== 1.1.1. Fixes compatible minimum OpenAI dependencies.
• ComfyUI 0.37.0. Auto-detects and enables –fast-disk when disk is fast.
• Hermes Agent 0.21.4. Hermes update (git installs), or re-run the installer one-liner; Docker / Hermes Cloud: images build from this tag (nousresearch/hermes-agent:v2026.9.21).
• langchain-openai== 1.6.3. Exposes inferred Responses API routing at initialization, supports GPT-6 request constraints.
• Cline CLI 3.0.63. Context compaction no longer degrades to truncation on OAuth providers.
• Open WebUI 0.11.4. Adds smaller slim image.
• llama.cpp b11095. New HMX-optimized GATED DELTA NET with pipelining.
• Kimi Cli 1.51.0. Archived; points users to Kimi Code CLI.
• Expanding OpenAI Academy with new learning paths. Explore new OpenAI Academy learning paths for employees, developers, leaders, educators, and students to build and demonstrate practical AI skills.
• MiniMax Code 0.5.1. Built from public commit 2b2f242.

§Other

• EU Kids Act Won’t Keep the Internet Accountable and Trustworthy. The EU Commission draft law to restrict young people’s access to the internet that it presented last week will come at a high cost: it will put online services behind age gates…

Read on Freedom.Tech: https://freedom.tech/posts/2026-09-22-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.