Three security patches anchor a 39-release day

• Bitcoin
• Nostr
• Privacy
• Self-hosting
• AI

§Bitcoin

• Bitkey App 2026.13.0. Access the Bitkey release notes to view the features included in this release; Emergency Access !IMPORTANT Download if you’ve lost access to the Bitkey app for Android or iOS.
• Payjoin Dev Kit Release payjoin-cli 1.0.0. First stable CLI for Payjoin Dev Kit, tracking payjoin 1.2.0.
• Payjoin Dev Kit Release payjoin-mailroom 0.1.3. Enforces region/IP blocklists on ACME and manual TLS paths, fixes OHTTP key persistence across first restart.
• Sparrow Frigate 1.6.1. Fixes a shutdown deadlock by sequencing bitcoind polling stop before index/db closure.
• Cake Wallet 6.4.6. Monero-side enhancements and bug fixes; no Bitcoin-specific changes noted.

§Nostr

• Amber 6.6.7. Fixes relays staying stuck disconnected until force-close; dead relays now retry after a 15-minute cooldown.
• Sidecar 1.15.8. Fixes note tagging and posting behavior.
• Amethyst 1.17.0. Adds picture and video kinds to all home feed legs, plus a SecureKeyStorage cleanup.

§Privacy

• Thunderbird for Android K-9 Mail 24.0. HTML signatures per identity and a reply/reply-all prompt land; minor UI fixes round out the update.
• Thunderbird for Android 24.0. Same feature set as the K-9 Mail build: HTML signatures, reply prompts, account drawer fixes.
• Orbot for Android 17.9.7. Bridge list update only, bundled with Tor 0.4.9.13.2.
• Bitwarden Android Password Manager 2026.9.1. Password fields no longer leak length visually, plus clearer generator actions and better TalkBack support.
• Notesnook Desktop 3.4.9. Read about what’s new in Notesnook Desktop v3.4.9 on Notesnook’s blog
• Am I Exposed 0.38.0. Am I Exposed v0.38.0
• Signal Android 8.30.2. New emoji, sticker, and GIF keyboard; cosmetic update with no security notes.
• Proton Pass iOS 1.21.2. Proton Pass iOS 1.21.2

§Self-hosting

• Vaultwarden 1.37.4. Security-fix release, no advisory details given.
• FreshRSS 1.30.1. Security-oriented follow-up to 1.30.0 with patches and bug fixes.
• StartOS Start SDK 3.0.2. Single-fix patch: package migrations now run correctly after a flavor switch.
• Jellyfin 12.2. New stable Jellyfin release; check the full changelog before upgrading production media servers.
• N8n 2.41.7. API keys can now inherit variable scopes from global members; community node editor gets credit promos.
• Radicale 3.8.2. Adds read-only free/busy views via GET, sharing tokens, and a WebUI calendar URL for free/busy exposure.
• Syncthing 2.1.6. Devices and folders can now be grouped in the GUI, part of the broader 2.1 changes.
• Stirling-PDF 3.1.0. Major update adding Stirling Sign, signature improvements, and a beta Stirling Office Convert tool.
• Nextcloud Android 35.0.1. Bugfix and performance release; minimum requirements stay at NC 22 server and Android 9.
• Paperless-ngx 3.3.0. Adds more control over suggestion requests, manifest CORS for credentials, and Django admin with 2FA support.

§AI

• Claude Code Action GitHub 1.0. Claude Code’s GitHub Action hits 1.0 and general availability, the stabilization point for CI workflows built on it.
• Diffusers 0.41.0. Adds the Qwen-Image 2.1 pipeline: text-to-image, editing, native transparency, LoRA training.
• NanoClaw 2026.10.0-rc.2. Second RC for the first calendar-versioned NanoClaw release; update flow now tracks published releases instead of main.
• Qwen Code SDK TypeScript 0.1.18. Bundles CLI 0.25.0; routine SDK/CLI version alignment update.
• ComfyUI 0.39.0. Adds Minimax-H3 VAE support and higher-quality defaults for video encoding.
• Qwen Code Desktop 0.25.0. Adds a managed runtime attestation client and a time-range selector for trajectory overviews; mostly tooling plumbing.
• openclaw 2026.10.1-beta.1. Fixes session/memory handling across registry changes and stalled transcript aliases; beta for active-turn stability.
• llama.cpp b11435. Fixes a k-pool scatter data race affecting shared sequences; relevant for multi-session inference setups.
• Maple 3.4.3. Improves chat usability and fixes iOS subscription recovery plus device clock error handling.
• Claude Code Action 1.0.243
• Elevenlabs Js 2.71.0. SDK regeneration only, no functional changes noted.
• Elevenlabs Python 2.71.0. SDK regeneration only, matching the JS release.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-06-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.