Two security patches anchor a 32-release AI-heavy day

AI again tops the volume count, fifteen releases, but the actual news sits in two security-grade patches elsewhere. JoinMarket-NG ships maker coin-selection fixes and security hardening, while Bitkey posts a dated app update. Privacy carries the next-largest block, led by Tor Browser 15.0.25 and a same-day Tails 7.15 pickup of that build, plus a Qubes OS advisory tied to upstream Xen. Self-hosting and Bitcoin round out the day with routine point releases. The pattern: AI supplies the bulk, security supplies the stakes.

Bitcoin#

JoinMarket-NG 0.41.0. Security hardening plus a maker coin-selection fix that cuts UTXO bloat; coinjoin makers should update.
Bitkey App 2026.16.0. Access the Bitkey release notes to view the features included in this release; Emergency Access !IMPORTANT Download if you've lost access to the Bitkey app for Android or iOS.
Wasabi Wallet 2.8.4. Exchange rates and fee rates no longer get stuck; Coinjoin payments now return from "in progress" to the queue and are attempted again once a previous signature is invalidated.
Nunchuk Android 2.9.1. Adds XPUB export for software keys, useful for watch-only setups or migrating to other coordinators.

Nostr#

nostream 3.4.0. 821 36d2a30 Thanks @Ferryx349!
Nostur 1.33.0. Allow pasting media in DM and show thumb preview; Clean up abandoned temporary media and inactive WoT snapshots.

Privacy#

Tor Browser 15.0.25. Routine point release; Tails 7.15 pulls in the same Tor Browser build same day.
XSAs released on 2026-10-13. New Xen security advisories affect dom0 isolation; check XSA numbers before deferring an update.
Nym Binaries 2026.20-glasgow. The v2026.20-glasgow release of the Nym Binaries.
Bitwarden Clients Web 2026.10.0. Fixes vault load failures tied to SSH key items and garbled LastPass import characters; relevant if migrating from LastPass.
Bitwarden Server Version 2026.10.0. Adds temporary share links and configurable access token lifetime; self-hosted server admins should review the new settings before rollout.
Tails 7.15. Bundles Tor Browser 15.0.25; upgrade for the same fixes as the standalone browser release.
Signal Android 8.31.2. A new and improved keyboard for emojis, stickers, and animated GIFs is our GIFt to you; For automatic updates, we recommend using Obtainium.
Element Web 1.12.31. Device verification can no longer be skipped by default; expect a changed first-login flow for new devices.
Proton Mail Android 7.11.10. Improved the PIN lock screen; Fixed an issue where remote images would fail to load in some messages.
Tor is Powered by you: One donation today can impact 4M+ people. Unlike Big Tech, Tor has never and will never sell your data to make money; 6,490 donors, and thousands of volunteer relay operators and others, keep Tor powered for 4M+ at any given moment at zero cost to users.

Self-hosting#

Syncthing-Fork Android 2.1.7. Other enhancement(custom http cert): Improved custom http certificate and key validation
DAVx5 4.5.21-rc.1-ose. Adds Android 17 local network permission handling and a confirmation step before local data removal; relevant for CalDAV/CardDAV sync setups on newer Android.
Syncthing 2.1.7-rc.2. Release candidate adds GUI grouping for devices and folders; still pre-release, test before production use.

AI#

Qwen Code 0.25.1-nightly.20261013.6212189f1f. Nightly build fixing agent-broker robustness; not for production pinning.
openclaw 2026.10.3. Large contributor-count release; check changelog before upgrading agent pipelines built on it.
Cline 4.1.24. Default model for unconfigured Cline/OpenRouter setups switches to Claude Sonnet 5.5; check cost implications if running without explicit model selection.
llama.cpp b11609. WebGPU fix for duplicate expert IDs in mixture-of-experts matmul; relevant only to WebGPU backend users.
Hermes Agent 0.22.0. Large version bump billed as a major release; review breaking changes before upgrading production agents.
ComfyUI 0.40.0. Server.py Update CSP to allow blob: and data; Add comfy attention and AttentionTensorContainer support to rest of models.
koboldcpp 1.123. Introducing koboldcpp.net, our new community website!
AnythingLLM 1.18.0. Fixes Kubernetes health probe path and a crash when removing files with attached images; relevant for k8s deployments.
Cline Desktop 0.0.46. A new outline along the left edge of the conversation lists each prompt you sent.
HelixML 2.12.34. Fixes a cross-tenant repo listing and org-create injection issue; multi-tenant HelixML deployments should patch promptly.
Claude Agent Sdk Python 0.2.166. Adds typed hook output classes, replacing untyped dicts; relevant for developers building custom hooks against the SDK.
Google DeepMind and Singapore Government collaborate to build fine-tuned AI model for scam detection. On-device Gemma model for scam detection in private chats, built with GovTech Singapore; no cloud data egress claimed.
Packages Types 0.25.0. Minor Changes bac5c96: Add the conversation history server event and the persistent session token field on conversation initiation metadata.
Packages React 1.18.0. Bac5c96: Forward the experimental onConversationHistory callback to @elevenlabs/client; Updated dependencies bac5c96 @elevenlabs/client@1.28.0.
Nvsentinel Provider Mistral v0.1.1. Narrow fix for NVSentinel connectivity under default network policies; only relevant to that integration.

Other#

Privacy's Defenders Podcast: No Privacy Without Encryption. When we communicate online today - from your personal emails and DMs to secure international commerce - we usually do so with encryption.
Open-source Bitcoin multisig coordinator: shared signing queue, hardware wallets, live signet demo. Self-hosted, watch-only multisig coordinator with shared signing queue and hardware wallet support; live signet demo available for testing before deploying.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-14-bitcoin-daily-brief/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation. Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.