Tor Project addresses Mullvad funding concerns
The notable item today sits outside the usual release cadence: the Tor Project published a statement on its funding relationship with Mullvad following concerns over a co-founder's political donation. Everything else is routine maintenance. AI again leads volume at nine releases, mostly coding-agent and SDK point bumps with no new model weights. Bitcoin's six releases run from wallet patches (ZEUS, Ledger Live, Nunchuk) to protocol-adjacent beta work (Fedimint). Self-hosting and Nostr each round out the day with incremental fixes. Two security-flagged items, ZEUS and Uptime Kuma, carry dependency and hardening updates rather than disclosed vulnerabilities.
Bitcoin
- ZEUS 13.2.3-rc1. Bundles LND v0.21.4 and rust-lightning security fixes via LDK Node; upgrade recommended for node operators running embedded LND.
- Minibits 0.4.5-beta. Fixes recurring NFC read issues; relevant for operators using tap-to-pay flows.
- Nunchuk Desktop 2.9.1. Fixes an Apple Silicon launch bug; relevant for Mac M-series users stuck on load.
- Fedimint 0.13.0-beta.1. Pre-release, unstable, explicitly not recommended for mainnet use.
- Ledger Live Mobile 4.23.1. 4.23.1 Patch Changes - 23138 4f37ff5 Thanks @live-github-bot!
- Ledger Live Desktop 4.23.1. 4.23.1 Patch Changes - 23138 4f37ff5 Thanks @live-github-bot!
Nostr
- Sprout Buzz Desktop 0.5.28. Fixes a false-denial bug in the Windows notification shim; relevant for Windows desktop users.
- Mostro 0.19.3. Add the import trust list; Answer user-info with own reputation.
- Mostrix 0.3.6. Ctrl+K Actions for dispute and Observer; Keycap command bars for dispute and Observer.
Privacy
- XSAs released on 2026-10-09. New Xen security advisories released; Qubes operators should check XSA details before patching.
- haveno 1.10.0. Minor fix release on top of 1.9.0.
- A statement on the Tor Project’s relationship with Mullvad. Tor Project responds to questions about its funding ties to Mullvad after a co-founder’s political donation drew scrutiny.
Self-hosting
- Uptime Kuma 2.5.6. Dependency update tagged as a security fix alongside a response-badge bug fix; low-risk upgrade.
- Coolify 4.4.6. Pins a stable PHP base image; fixes self-hosted startup failures some operators were hitting.
- N8n 2.43.3. Blocks workflows from using deprecated nodes going forward; check existing workflows before upgrading.
- StartOS Start SDK 3.0.4. Fixes input actions during service init and a manifest-read failure for uninstalled packages.
- rclone 1.75.2. This is the v1.75.2 release of rclone; Full details of the changes can be found in the changelog.
AI
- Cli mistral 0.8.0. Breaking change: binaries stop auto-loading .env/bunfig.toml from the working directory; check scripts that relied on this.
- Qwen Code 0.25.0-nightly.20261009.085a44f336. Replace selected remote Hosts without losing bindings; Wait 60s before the E2E build artifact download retry.
- Jan 0.8.6. Hotfix only, patches issues introduced in 0.8.5.
- NanoClaw 2026.10.0. Switches to calendar versioning and changes default update behavior to track published releases instead of main branch tip.
- Deepseek Harness 0.2.1-alpha.2. ,, BingGoogle DeepSeek Flash @tianyicui, @ZiyaZhang, @imccyu; Git Worktrees,, Agent Git checkout @tianyicui.
- llama.cpp b11540. Adds SYCL acceleration for MXFP4 MoE models via arithmetic decoding; relevant for Intel GPU inference setups.
- Claude Code Action 1.0.248
- Asana cuts model costs 76x in browser tests with GPT-6.1 Sol. Using GPT-6 Astra in Codex, Asana made its browser agent 76x cheaper and 5x faster in tests to offer customers more capable models.
- Mistral Vibe 2.26.1. Adds session-handoff visibility across processes and a /proxy-setup command for configuring proxy and SSL certs in the Rust CLI.
Read on Freedom.Tech: https://freedom.tech/posts/2026-10-10-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/
Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.
Write a comment