Bisq 2 security patch anchors a 16-release AI flood

AI dominates the wire count again, sixteen releases against single digits everywhere else, but almost all of it is routine point bumps across agent SDKs and inference tooling. The one release that actually matters sits in Bitcoin: Bisq 2 2.1.14 patches vulnerabilities found in a recent security audit alongside a Tor security backport. Privacy and Nostr contribute a steady run of client updates, Session Android, Mullvad Browser, Amber, Amethyst, none carrying security weight of their own. Self-hosting stays quiet with small fixes to Immich, DAVx5, authentik and n8n. The pattern holds from recent days: AI supplies the volume, Bitcoin supplies the one line worth reading closely.

Bitcoin#

Bisq 2 2.1.14. Upgrade promptly.
Cashu CDK 0.18.2. Adds seed-based key recovery for known mint quotes and fixes LND payment validation, rounding, and persisted wallet state bugs.
Fedimint Web Android SDK 0.1.0-beta.1. First Android SDK release for Fedimint Web, testing only, not production-ready.
Ledger Live Desktop 4.24.0. 23017 eaff720 Thanks @mcayuelas-ledger!
NodeGuard 0.32.0. Merges Spark wallet management into a unified service and improves payment timeout handling for Spark swaps.
Flint 1.3.1. Bump Breez.Sdk.Spark: 0.26.0 - 0.26.1; Regenerate lock files in the Breez SDK bump workflow.
Ledger Live Mobile 4.24.0. 23139 320d2a1 Thanks @mcayuelas-ledger!

Nostr#

Mostrix 0.3.8. Extend OSC 52 fallback to shortcuts; Expose order book sorting controls.
Amber 6.6.9. Fixes nostrconnect:// requests silently failing to reply when approved from the multi-request screen, plus groups pending requests by app.
Amethyst 1.19.0. Adds a new login flow and remote signer support on Android, plus Wayland compatibility.

Privacy#

Mullvad Browser 15.0.25. Backports upstream Tor Browser security fixes and updates NoScript; routine update, apply on normal cadence.
Session Android 1.33.7. Fixes voice and audio playback broken by a media3 library bump.
Signal Android 8.32.0. A new and improved keyboard for emojis, stickers, and animated GIFs is our GIFt to you; For automatic updates, we recommend using Obtainium.
Proton VPN Android 5.20.74. Fixes a rare condition that could unintentionally send logs; privacy-relevant patch worth taking.
Proton Authenticator iOS 1.4.5. Merge branch 'translations 2026-10-13 125709 c7ab885b' into 'develop' i18n(weekly-mr): Upgrade translations from crowdin (853c6375).
Padloc staging deployment channel. { "schema": 1, "sequence": 3, "tag": "staging-2026-10-14-issue753-01", "sha": "", "server image": "ghcr.io/padloc/padloc-staging-server@

Self-hosting#

DAVx5 4.5.21-rc.2-ose. Small bug fix release correcting exception handling in storage client; low-impact unless hitting sync crashes.
Immich 3.3.3. Show the memories date in every app language; Improve people query performance.
authentik 2026.8.4. Fixes SAML metadata serving the full PEM chain instead of the leaf cert and a duration-handling overflow.
N8n 1.123.85. 1.123.85 (2026-10-14)

AI#

Open WebUI 0.12.2. Adds support for MinerU 4.x document parsing servers.
Qwen Code 0.25.1-nightly.20261015.415925cbda. Connector and broker robustness from the 12692 R2 review; H4e-b2 the lead's mailbox over Session messages.
Hermes Agent 0.22.1. Agent): add nemotron super 3.5 default parameters (c59d2994) - @elisam0; Cli): add curated model list at the top in the model picker list (e6835fd3) - @elisam0.
Ollama 0.40.5. Ports Metal custom kernels to CUDA, relevant for Nvidia GPU users running mlx-style workloads.
langchain-openai== 1.7.2. Changes since langchain-openai==1.7.1 release(openai): 1.7.2 keep Responses stream items on one block when output index drifts
langchain== 1.4.6. Adds opt-in per-call interrupts to the human-in-the-loop middleware.
Deepseek Harness 0.2.1-alpha.3. Web HTTP DeepSeek @lsdsjy; , @ZiyaZhang.
InvokeAI Windows ARM64 wheels (win-arm64-wheels-v1). Self-built Windows ARM64 wheels; only relevant to ARM64 Windows users installing InvokeAI.
MLX 0.32.4. Adds VJP support for scaled dot product attention, needed for training/backprop workflows using MLX attention layers.
llama.cpp b11640. Vulkan backend gets L2-friendly workgroup scheduling for matrix multiplication; relevant for Vulkan GPU inference performance.
Amp puts AI agents to work beyond code with OpenAI models. See how Amp pushes the frontier of what agents can do with GPT-6 Astra, Ultrafast, GPT-Live-1, and Sign in with ChatGPT.
Claude Agent Sdk Python 0.2.167. Internal/Other Changes Updated bundled Claude CLI to version 2.1.300 PyPI: pip install claude-agent-sdk==0.2.167
Kimi Code 2.2.0. 4145 242ac23 Thanks @wbxl2000 !
Anthropic Sdk Csharp GoogleCloud 0.2.0. Features client: add OpenTelemetry tracing; AnthropicGoogleCloudClient emits its spans from the com.anthropic.sdk.csharp.googlecloud activity source.
Cli 1.5.1. Install elevenlabs-cli 1.5.1 Install prebuilt binaries via shell script curl --proto ' =https ' --tlsv1.2 -LsSf | sh Install prebuilt binaries via powershell script powershell...
Nvsentinel Provider Mistral v0.1.2. Prepare v0.1.2: patch dependencies and include runtime licenses

Other#

DHS Inspector General Finds That TSA is Not Properly Safeguarding Passenger Facial Recognition Data. DHS watchdog report, not a product release; flags gaps in how TSA secures facial recognition data collected at checkpoints.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-15-bitcoin-daily-brief/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation. Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.