Self-hosting leads a 23-release maintenance day

Six self-hosting releases, from Paperless-ngx to Miniflux to StartOS's SDK and CLI, edge out seven AI items as the day's heaviest beat, but nothing here is a new capability push. The pattern holds across beats: point releases and bug fixes, not features. FreshRSS bills itself explicitly as a security and bug-fix continuation. Privacy logs five updates including Mullvad Browser rebasing onto a new Firefox ESR and a Signal Android cosmetic bump. Bitcoin stays thin at three items, led by a Ride The Lightning release addressing multi-node session correctness. Two policy filings, from Coin Center on stablecoin rules and EFF on ALPR warrants, round out the wire. Skim for anything in the self-hosting stack; little else demands action.

Bitcoin#

JoinMarket-NG 0.42.1. Pre-release pending signature quorum; not yet promoted to main.
Ocean DATUM Gateway 0.5. Removes a client-count multiplier that was limiting throughput on large mining setups.
Ride The Lightning 0.15.14-beta. Multi-node correctness fix: sessions on one node can no longer interfere with another.

Nostr#

YakiHonne Mobile 2.1.0. Adds spam-reply filtering with reveal controls and author-level spam marking.

Privacy#

Mullvad Browser 16.0a14. Rebases onto Firefox 153.5.0esr and backports Tor Browser 158 security fixes; alpha channel, update when stable lands.
Nostr VPN 4.1.18. Improves peer discovery and network joining reliability across platforms.
Signal Android 8.32.2. Cosmetic keyboard update for emoji, stickers, and GIFs; no functional changes of note.
Thunderbird for Android Thunderbird Beta 25.0b2. Disables remote feature flags to debug a splash-screen startup freeze; fixes a rotation crash in the composer.
Proton Pass CLI 2.5.0. Proton Pass CLI 2.5.0

Self-hosting#

Paperless-ngx 3.3.3. Fixes global search layout shift and dashboard widget wrapping; low-risk upgrade.
FreshRSS 1.30.2. Second security and bug-fix release in the 1.30.x line; apply if running 1.30.x.
StartOS Start SDK 3.1.0. Service packages can now run CI on self-hosted Forgejo and validate StartOS types at runtime; relevant for package maintainers.
Miniflux 2.3.4. Adds Gotify push notification support for feed alerts.
StartOS start-cli 2.4.2. Packs container images into less disk space; useful for storage-constrained StartOS hosts.
N8n 2.44.4. Fixes webhook connection reuse for log streaming and disables expression spans by default.

AI#

Qwen Code 0.25.3-nightly.20261019.5dcf7c7cb1. Support session-targeted Skill and Extension refresh; Bound initial publication guard waits.
HelixML 2.12.36. Fixes a Mac VM image build failure tied to ZFS install errors.
Hugging Face Transformers Patch 5.20.2. Fixes a type-preservation bug in generate() affecting multimodal model inputs; patch if running multimodal pipelines.
Qwen Code SDK TypeScript 0.1.21. Bundles Qwen Code CLI 0.25.3; sync versions if pinning both.
Jan 0.8.7. Minor update adding shell switching and image size limits; low-priority bump.
llama.cpp b11750. SYCL backend warning cleanup only; no functional change.
Sandbox Runtime 0.0.81. Windows-only fixes; no impact on other platforms.

Other#

Comment of Coin Center to the Department of the Treasury on GENIUS Act Regulations on Payment Stablecoin Issuance, Offer, and Sale. A PDF version of this filing is available here.
Require Police to Get a Warrant to Search ALPR Data. This post was co-written by Andi Cao, an EFF legal intern; Automated license plate readers (ALPRs) are mass surveillance.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-20-bitcoin-daily-brief/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation. Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.