Bisq 1.10.9 patches audit findings, 31 releases across five beats

• Bitcoin
• Nostr
• Privacy
• Self-hosting
• AI
• Other

§Bitcoin

• Bisq 1.10.9. Fixes vulnerabilities from recent audit; includes latest Tor security release.
• Nunchuk Android 2.9.0. Supports using own hardware signer as inheritance key in off-chain timelock plans.
• Coldcard Firmware 5.6.3. Coldcard Firmware v5.6.3
• Arkade TS SDK Swap 0.0.23. Fixes regtest timelocks so solver inventory stays spendable; groups operations.
• Arkade TS SDK 0.4.77. Fixes regtest timelocks so solver inventory stays spendable; groups operations.
• Phoenixd 0.9.2. Upgrades lightning-kmp to 1.13.2; fixes payment/outgoing/{uuid} endpoint.

§Nostr

• Sidecar 1.15.3. Sidecar 1.15.3 brings a few new things and a round of fixes; Bitcoin only.
• 0xchat 1.5.6. Fix Add ‘Disabled’ sound option & clean up.gitmodules; Block HTTP/WS connections when Tor proxy is configured but not r..

§Privacy

• Mullvad Browser 15.0.24. Rebases onto Firefox 140.17.0esr; updates NoScript and uBlock Origin.
• Nitrokey 3 Firmware 1.9.1. Fixes USB descriptor for Windows CCID compatibility.
• Tails 7.14. Updates Tor Browser to 15.0.24.
• GopenPGP 3.5.2. Fix compression tests for go 1.27 in
• Mullvad VPN Android 2026.12. Fixes empty Arabic and Persian translations.
• Anytype Android 0.50.4. DROID-4602 Editor | Fix | An inline query with a type source opens the type screen; DROID-4603 Editor | Fix | Tab and Shift+Tab indent and outdent a block.
• SimpleX Chat 7.1.0-beta.5. Alert when supporter badge renewal fails; Add link to SimpleX Network News channel in settings.
• Logseq Desktop app Nightly Release 20260930. This is a nightly release of the Logseq desktop app; It’s unstable compared to the official releases, use it with caution !
• The Tuta app has landed in the Nextcloud App Store!. The encrypted email service Tuta offers a lot of functionalities - email, calendar, contacts; But - if you fully want to quit the Google or Microsoft ecosystem so much more is needed..

§Self-hosting

• Immich 3.3.0-rc.1. Editors can update album title & description; Cull offscreen thumbnails on individual shared links.
• AdGuardHome 1.0.0-b.1. First 1.0 beta; changes compared to v0.108.0-b.91.
• Syncthing-Fork Android 2.1.6. Targets SDK 17; adds raw external storage access and local network permission.
• Home Assistant 2026.10. Report(ed) beta dashboards/UI/frontend issues; Report(ed) beta integrations/automations/backend/core issues.

§AI

• opencode 1.18.34. Sends namespaced session headers with model requests.
• Qwen Code 0.24.7-nightly.20260930.57e720bc97. Aligns Code Mode text with lazy tool discovery; honors approved cross-directory tool calls.
• Open Interpreter 0.0.55. Fixes offline model listing for non-OpenAI providers.
• Hugging Face Transformers 5.18.0. Adds Nemotron 3 Diarization model for streaming speaker diarization.
• langchain-openai== 1.6.7. Discovers Azure OpenAI models; refreshes model profile data.
• Anthropic Sdk Java 2.67.0. Adds refusal stop reason, session idle events, and Claude Enterprise analytics.
• Anthropic Sdk Ruby 1.75.0. Adds refusal stop reason, session idle events, and Claude Enterprise analytics.
• llama.cpp b11311. Replaces alloca() with std::vector in ggml-opencl.
• Vla Evaluation Harness 0.8.0. Shared episode scheduling; clearer shard failures; more reliable RoboTwin and container execution.
• MiniMax Code 0.5.10. Built from public source commit a36e640.

§Other

• Victory! California Appeals Court Refuses to Revive Surveillance Tech CEO’s Meritless Lawsuit Against Journalist. When the rich and powerful try to use the court to silence negative reporting about themselves, it’s worth calling out that behavior for what it is: an attack on free speech.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-01-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.