Try our Chrome extension
Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!Changedetection.io needs your support!
You can help us by supporting changedetection.io on these platforms;
- Rate us at AlternativeTo.net
- Star us on GitHub
- Follow us at Twitter/X
- G2 Software reviews
- Check us out on LinkedIn
- And tell your friends and colleagues :)
The more popular changedetection.io is, the more time we can dedicate to adding amazing features!
Many thanks :)
changedetection.io team
False
Generating summary…
You are a concise web change detector. Summarize ONLY what actually changed on the page in clear, plain English. Structure your reply using this exact format (omit sections with nothing to report): Added: - ... Changed: - ... Removed: - ... Focus only on meaningful changes. Ignore layout shifts, whitespace, timestamps, ads, cookies, or minor styling. Be direct and brief. Use bullet points.
tag:github.com,2008:https://github.com/sysadminsmedia/homebox/releases Release notes from homebox 2026-06-14T01:47:24Z tag:github.com,2008:Repository/816422401/v0.26.2 2026-06-14T02:10:07Z v0.26.2 <h2>What's Changed</h2> <ul> <li>fix: various new bugs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4657073886" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1553" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1553/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1553">#1553</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.26.1...v0.26.2"><tt>v0.26.1...v0.26.2</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.26.1 2026-06-13T15:45:10Z v0.26.1 <h1>Fixes</h1> <ul> <li>Search page issue</li> <li>Storage library regression breaking attachments on docker deployments</li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.26.0...v0.26.1"><tt>v0.26.0...v0.26.1</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.26.0 2026-06-13T15:36:14Z v0.26.0 <div class="markdown-alert markdown-alert-caution"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-stop mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>Caution</p><p>We recommend skipping direct to v0.26.1, this release has an issue with attachments for docker containers.</p> </div> <div class="markdown-alert markdown-alert-note"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-info mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>Note</p><p>As always, we highly recommend making a backup of your databases and files before upgrading! But especially this one for it's major architecture changes.</p> </div> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>This release requires an additional environment variable or CLI parameter to be set. <code>HBOX_AUTH_API_KEY_PEPPER</code> or <code>--auth-api-key-pepper</code> must be set to at least 32 characters random secret.</p> </div> <h1>Biggest Release Yet!</h1> <p>This is by far the biggest, most comprehensive release of Homebox since we took over. Below are the biggest, most important changes. Please read through the warnings and notes carefully, as they contain important upgrade information.</p> <h2>Entity Merge</h2> <p>This release officially implements the <strong>entity merge</strong>, one of the most comprehensive and complex changes to the Homebox backend ever. Items and locations now share a single underlying "entity" structure, allowing them to share custom fields, attachments, entity types, and templates — and preparing Homebox to take on the features and capabilities people have been asking for.</p> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>The entity merge introduces significant database re-work. You should always make a backup before updating, but a backup is <strong>especially</strong> important in this case.</p> </div> <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>If you are an integration/software developer, the <code>/v1/items*</code> and <code>/v1/locations*</code> endpoints have been <strong>entirely replaced</strong> by <code>/v1/entities*</code>. Please review our <a href="https://homebox.software/en/advanced/entity-merge-upgrade/" rel="nofollow">entity merge documentation</a> for the API changes.</p> </div> <h2>API Keys</h2> <p>Homebox can now generate static <strong>API Keys</strong> for developers/integrations. Each key takes on the access level of the user who created it. All Homebox keys are prefixed with <code>hb_</code> to help prevent secrets from being accidentally committed to source code repositories.<br> <a target="_blank" rel="noopener noreferrer" href="https://private-user-images.githubusercontent.com/3457368/607502730-ad02204f-6596-472c-9c7f-7e28ec239019.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3ODE2NDQ3ODIsIm5iZiI6MTc4MTY0NDQ4MiwicGF0aCI6Ii8zNDU3MzY4LzYwNzUwMjczMC1hZDAyMjA0Zi02NTk2LTQ3MmMtOWM3Zi03ZTI4ZWMyMzkwMTkucG5nP1gtQW16LUFsZ29yaXRobT1BV1M0LUhNQUMtU0hBMjU2JlgtQW16LUNyZWRlbnRpYWw9QUtJQVZDT0RZTFNBNTNQUUs0WkElMkYyMDI2MDYxNiUyRnVzLWVhc3QtMSUyRnMzJTJGYXdzNF9yZXF1ZXN0JlgtQW16LURhdGU9MjAyNjA2MTZUMjExNDQyWiZYLUFtei1FeHBpcmVzPTMwMCZYLUFtei1TaWduYXR1cmU9NWM2OGE1ZTBiMzljNDQ2NmM5MGQ2ZGMzNzk5YWM1MTYxY2ZmMmNlMWJmNjVmNjcyOTVhYTFmZDkxYThhOTA0YyZYLUFtei1TaWduZWRIZWFkZXJzPWhvc3QmcmVzcG9uc2UtY29udGVudC10eXBlPWltYWdlJTJGcG5nIn0.8AtIk12cWma8EAkM65H6bMhSEgY8aRt-ELj7XA6cNXU"><img width="1249" height="251" alt="image" src="https://private-user-images.githubusercontent.com/3457368/607502730-ad02204f-6596-472c-9c7f-7e28ec239019.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.8AtIk12cWma8EAkM65H6bMhSEgY8aRt-ELj7XA6cNXU" content-type-secured-asset="image/png" style="max-width: 100%; height: auto; max-height: 251px;"></a></p> <h2>Password Resets</h2> <p>Homebox now supports <strong>password resets</strong>. If the instance admin configures the SMTP environment variables, users can reset their password from the front-end quickly and easily. For those not wanting to set up SMTP, you can run <code>homebox reset-password --email=<email></code>, which outputs a random new password for that user (which they can then change from the UI).<br> <a target="_blank" rel="noopener noreferrer" href="https://private-user-images.githubusercontent.com/3457368/607502900-93fcbcc1-f85a-4925-a125-d2f5d3c664b0.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.dh6owy3I3EhfmVOA30ov_Nz6LlUmQVgaF5tTNZb20oM"><img width="455" height="295" alt="image" src="https://private-user-images.githubusercontent.com/3457368/607502900-93fcbcc1-f85a-4925-a125-d2f5d3c664b0.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.dh6owy3I3EhfmVOA30ov_Nz6LlUmQVgaF5tTNZb20oM" content-type-secured-asset="image/png" style="max-width: 100%; height: auto; max-height: 295px;"></a></p> <h2>Better Export/Import (Experimental)</h2> <p>Thanks to the entity merge, you can now <strong>export an entire collection's inventory</strong> (including attachments, tags, entities, etc.) into a single ZIP file. That ZIP can then be imported into a different Homebox instance (the receiving collection must be "empty"). A recurring background export task is included as well.</p> <h2>"AR" Scanner</h2> <p>Added more as a fun experiment, but we think some people will find it genuinely useful. Switch to <strong>"AR" mode</strong> and point your camera at a Homebox QR code — a hovering box appears with basic information about the entity, and if it has children, a list of those child entities.</p> <h2>Other Improvements</h2> <ul> <li><strong>External URL attachments</strong> — attach HTTP(S) links to entities via drag-and-drop; rendered as direct hyperlinks and stored as DB records (no blob storage used).</li> <li><strong>Convert entity type</strong> — convert an item into a location (or vice versa) directly from the edit view.</li> <li><strong>Entity types UI</strong> — new entity-types management page with improved UI and page titles.</li> <li><strong>Remember selected camera</strong> in the scanner.</li> <li><strong>Nix flake</strong> for reproducible dev/build environments.</li> <li><strong>Config redaction & stronger security protections</strong>, stronger API-key pepper hashing, group/permission fixes, and extensive new tracing.</li> <li>Numerous bug fixes: CSV import/export (parent relationships, location export), dark-theme styling, legacy Windows attachment paths, WebSocket auth/retry, DNS64 support, password-manager support, Swagger BaseURL, and more.</li> </ul> <h1>Security Fixes:</h1> <p>The following security advisories have been fixed:</p> <ul> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-r9pf-rg22-655m">GHSA-r9pf-rg22-655m</a> (pending CVE assignment)</li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-559j-7w3w-4fr7">CVE-2026-48826</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-ffcw-whqh-hgqf">CVE-2026-48974</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-7mr6-2wxw-27j9">CVE-2026-48975</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-mc8h-5c5v-37p7">CVE-2026-48976</a></li> </ul> <h2>What's Changed</h2> <ul> <li>chore(deps): bump dompurify from 3.3.3 to 3.4.0 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4273197811" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1434" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1434/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1434">#1434</a></li> <li>feat(frontend): remember previously selected camera by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li>feat: merge items and locations into "entities" by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4204939940" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1414" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1414/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1414">#1414</a></li> <li>feat: "ar" scanner functionality by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4235967433" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1421" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1421/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1421">#1421</a></li> <li>fix: correct apostrophe placement in default collection name on user registration by @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328992812" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1462" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1462/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1462">#1462</a></li> <li>Fix <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4153216733" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1398" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1398/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1398">#1398</a> by setting Swagger BaseURL to dynamic variable by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328776463" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1459" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1459/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1459">#1459</a></li> <li>Fix public docs to remove github URL by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4329121859" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1464" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1464/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1464">#1464</a></li> <li>Update baseURL by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4329138547" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1465" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1465/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1465">#1465</a></li> <li>fix: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2768898751" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/437" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/437/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/437">#437</a> hopefully by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328578171" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1455" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1455/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1455">#1455</a></li> <li>fix: improve password manager support for auth forms by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li>feat: add support for external URL attachments by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li>fix: location create modal shows 'Item Photo' instead of 'Location Photo' (closes <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328604666" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1456" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1456/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1456">#1456</a>) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li>fix: handle numeric list_price in upcitemdb response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> <li>feat: password reset by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4425388435" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1488" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1488/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1488">#1488</a></li> <li>feat: export/import capability by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4346928980" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1472" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1472/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1472">#1472</a></li> <li>fix: preserve CSV item parent relationships by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/saquibreja7-hash/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/saquibreja7-hash">@saquibreja7-hash</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4535521465" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1517" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1517/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1517">#1517</a></li> <li>i18n(ko-KR): translate sidebar, quick stats, collection menu by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/wonieby/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/wonieby">@wonieby</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4554430603" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1519" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1519/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1519">#1519</a></li> <li>Fixes bug where location is exported incorrectly for csv export by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bmyoungquist/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bmyoungquist">@bmyoungquist</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4124076117" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1393" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1393/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1393">#1393</a></li> <li>fix: dark theme styling issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4216289247" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1418" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1418/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1418">#1418</a></li> <li>fix: lack of page title for entity types page by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4630624344" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1540" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1540/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1540">#1540</a></li> <li>Add nix flake by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/6543/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/6543">@6543</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3711477063" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1119" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1119/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1119">#1119</a></li> <li>fix: improve entity type UI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4650057942" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1544" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1544/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1544">#1544</a></li> <li>fix: expose ability to change type to ui by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4652448217" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1546" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1546/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1546">#1546</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/saquibreja7-hash/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/saquibreja7-hash">@saquibreja7-hash</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4535521465" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1517" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1517/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1517">#1517</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/wonieby/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/wonieby">@wonieby</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4554430603" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1519" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1519/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1519">#1519</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/6543/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/6543">@6543</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3711477063" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1119" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1119/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1119">#1119</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.25.0...v0.26.0"><tt>v0.25.0...v0.26.0</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.26.0-rc.1 2026-05-25T16:06:37Z <div class="markdown-alert markdown-alert-caution"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-stop mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>Caution</p><p>We recommend skipping direct to v0.26.1, this release has an issue with attachments for docker containers.</p> </div> <div class="markdown-alert markdown-alert-note"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-info mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>Note</p><p>As always, we highly recommend making a backup of your databases and files before upgrading! But especially this one for it's major architecture changes.</p> </div> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>This release requires an additional environment variable or CLI parameter to be set. <code>HBOX_AUTH_API_KEY_PEPPER</code> or <code>--auth-api-key-pepper</code> must be set to at least 32 characters random secret.</p> </div> <h1>Biggest Release Yet!</h1> <p>This is by far the biggest, most comprehensive release of Homebox since we took over. Below are the biggest, most important changes. Please read through the warnings and notes carefully, as they contain important upgrade information.</p> <h2>Entity Merge</h2> <p>This release officially implements the <strong>entity merge</strong>, one of the most comprehensive and complex changes to the Homebox backend ever. Items and locations now share a single underlying "entity" structure, allowing them to share custom fields, attachments, entity types, and templates — and preparing Homebox to take on the features and capabilities people have been asking for.</p> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>The entity merge introduces significant database re-work. You should always make a backup before updating, but a backup is <strong>especially</strong> important in this case.</p> </div> <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>If you are an integration/software developer, the <code>/v1/items*</code> and <code>/v1/locations*</code> endpoints have been <strong>entirely replaced</strong> by <code>/v1/entities*</code>. Please review our <a href="https://homebox.software/en/advanced/entity-merge-upgrade/" rel="nofollow">entity merge documentation</a> for the API changes.</p> </div> <h2>API Keys</h2> <p>Homebox can now generate static <strong>API Keys</strong> for developers/integrations. Each key takes on the access level of the user who created it. All Homebox keys are prefixed with <code>hb_</code> to help prevent secrets from being accidentally committed to source code repositories.<br> <a target="_blank" rel="noopener noreferrer" href="https://private-user-images.githubusercontent.com/3457368/607502730-ad02204f-6596-472c-9c7f-7e28ec239019.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.KySUN1-C2_lKPSlEb4iT2Wj7rZCeJN7sHn5PiqBYwJo"><img width="1249" height="251" alt="image" src="https://private-user-images.githubusercontent.com/3457368/607502730-ad02204f-6596-472c-9c7f-7e28ec239019.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.KySUN1-C2_lKPSlEb4iT2Wj7rZCeJN7sHn5PiqBYwJo" content-type-secured-asset="image/png" style="max-width: 100%; height: auto; max-height: 251px;"></a></p> <h2>Password Resets</h2> <p>Homebox now supports <strong>password resets</strong>. If the instance admin configures the SMTP environment variables, users can reset their password from the front-end quickly and easily. For those not wanting to set up SMTP, you can run <code>homebox reset-password --email=<email></code>, which outputs a random new password for that user (which they can then change from the UI).<br> <a target="_blank" rel="noopener noreferrer" href="https://private-user-images.githubusercontent.com/3457368/607502900-93fcbcc1-f85a-4925-a125-d2f5d3c664b0.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3ODE2NjYzODAsIm5iZiI6MTc4MTY2NjA4MCwicGF0aCI6Ii8zNDU3MzY4LzYwNzUwMjkwMC05M2ZjYmNjMS1mODVhLTQ5MjUtYTEyNS1kMmY1ZDNjNjY0YjAucG5nP1gtQW16LUFsZ29yaXRobT1BV1M0LUhNQUMtU0hBMjU2JlgtQW16LUNyZWRlbnRpYWw9QUtJQVZDT0RZTFNBNTNQUUs0WkElMkYyMDI2MDYxNyUyRnVzLWVhc3QtMSUyRnMzJTJGYXdzNF9yZXF1ZXN0JlgtQW16LURhdGU9MjAyNjA2MTdUMDMxNDQwWiZYLUFtei1FeHBpcmVzPTMwMCZYLUFtei1TaWduYXR1cmU9NTA3ZDNlZGE2OThjY2I0MjVmZTk4ZjExMzYwY2U3M2NiNDE3M2QzMzE2NDY0MzBhYWU1NWJkYTBhMDE4ZGM2MyZYLUFtei1TaWduZWRIZWFkZXJzPWhvc3QmcmVzcG9uc2UtY29udGVudC10eXBlPWltYWdlJTJGcG5nIn0.BN7_Zo0sY6hrr2WFTzncjDJiGClDNMCgvmhzQ6RaxI4"><img width="455" height="295" alt="image" src="https://private-user-images.githubusercontent.com/3457368/607502900-93fcbcc1-f85a-4925-a125-d2f5d3c664b0.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.BN7_Zo0sY6hrr2WFTzncjDJiGClDNMCgvmhzQ6RaxI4" content-type-secured-asset="image/png" style="max-width: 100%; height: auto; max-height: 295px;"></a></p> <h2>Better Export/Import (Experimental)</h2> <p>Thanks to the entity merge, you can now <strong>export an entire collection's inventory</strong> (including attachments, tags, entities, etc.) into a single ZIP file. That ZIP can then be imported into a different Homebox instance (the receiving collection must be "empty"). A recurring background export task is included as well.</p> <h2>"AR" Scanner</h2> <p>Added more as a fun experiment, but we think some people will find it genuinely useful. Switch to <strong>"AR" mode</strong> and point your camera at a Homebox QR code — a hovering box appears with basic information about the entity, and if it has children, a list of those child entities.</p> <h2>Other Improvements</h2> <ul> <li><strong>External URL attachments</strong> — attach HTTP(S) links to entities via drag-and-drop; rendered as direct hyperlinks and stored as DB records (no blob storage used).</li> <li><strong>Convert entity type</strong> — convert an item into a location (or vice versa) directly from the edit view.</li> <li><strong>Entity types UI</strong> — new entity-types management page with improved UI and page titles.</li> <li><strong>Remember selected camera</strong> in the scanner.</li> <li><strong>Nix flake</strong> for reproducible dev/build environments.</li> <li><strong>Config redaction & stronger security protections</strong>, stronger API-key pepper hashing, group/permission fixes, and extensive new tracing.</li> <li>Numerous bug fixes: CSV import/export (parent relationships, location export), dark-theme styling, legacy Windows attachment paths, WebSocket auth/retry, DNS64 support, password-manager support, Swagger BaseURL, and more.</li> </ul> <h1>Security Fixes:</h1> <p>The following security advisories have been fixed:</p> <ul> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-r9pf-rg22-655m">GHSA-r9pf-rg22-655m</a> (pending CVE assignment)</li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-559j-7w3w-4fr7">CVE-2026-48826</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-ffcw-whqh-hgqf">CVE-2026-48974</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-7mr6-2wxw-27j9">CVE-2026-48975</a></li> <li><a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-mc8h-5c5v-37p7">CVE-2026-48976</a></li> </ul> <h2>What's Changed</h2> <ul> <li>chore(deps): bump dompurify from 3.3.3 to 3.4.0 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4273197811" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1434" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1434/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1434">#1434</a></li> <li>feat(frontend): remember previously selected camera by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li>feat: merge items and locations into "entities" by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4204939940" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1414" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1414/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1414">#1414</a></li> <li>feat: "ar" scanner functionality by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4235967433" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1421" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1421/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1421">#1421</a></li> <li>fix: correct apostrophe placement in default collection name on user registration by @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328992812" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1462" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1462/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1462">#1462</a></li> <li>Fix <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4153216733" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1398" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1398/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1398">#1398</a> by setting Swagger BaseURL to dynamic variable by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328776463" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1459" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1459/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1459">#1459</a></li> <li>Fix public docs to remove github URL by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4329121859" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1464" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1464/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1464">#1464</a></li> <li>Update baseURL by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4329138547" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1465" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1465/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1465">#1465</a></li> <li>fix: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2768898751" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/437" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/437/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/437">#437</a> hopefully by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328578171" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1455" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1455/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1455">#1455</a></li> <li>fix: improve password manager support for auth forms by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li>feat: add support for external URL attachments by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li>fix: location create modal shows 'Item Photo' instead of 'Location Photo' (closes <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328604666" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1456" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1456/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1456">#1456</a>) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li>fix: handle numeric list_price in upcitemdb response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> <li>feat: password reset by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4425388435" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1488" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1488/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1488">#1488</a></li> <li>feat: export/import capability by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4346928980" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1472" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1472/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1472">#1472</a></li> <li>fix: preserve CSV item parent relationships by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/saquibreja7-hash/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/saquibreja7-hash">@saquibreja7-hash</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4535521465" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1517" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1517/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1517">#1517</a></li> <li>i18n(ko-KR): translate sidebar, quick stats, collection menu by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/wonieby/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/wonieby">@wonieby</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4554430603" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1519" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1519/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1519">#1519</a></li> <li>Fixes bug where location is exported incorrectly for csv export by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bmyoungquist/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bmyoungquist">@bmyoungquist</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4124076117" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1393" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1393/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1393">#1393</a></li> <li>fix: dark theme styling issues by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4216289247" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1418" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1418/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1418">#1418</a></li> <li>fix: lack of page title for entity types page by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4630624344" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1540" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1540/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1540">#1540</a></li> <li>Add nix flake by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/6543/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/6543">@6543</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3711477063" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1119" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1119/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1119">#1119</a></li> <li>fix: improve entity type UI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4650057942" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1544" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1544/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1544">#1544</a></li> <li>fix: expose ability to change type to ui by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4652448217" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1546" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1546/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1546">#1546</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/saquibreja7-hash/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/saquibreja7-hash">@saquibreja7-hash</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4535521465" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1517" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1517/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1517">#1517</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/wonieby/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/wonieby">@wonieby</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4554430603" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1519" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1519/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1519">#1519</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/6543/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/6543">@6543</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3711477063" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1119" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1119/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1119">#1119</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.25.0...v0.26.0"><tt>v0.25.0...v0.26.0</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.26.0-rc.1 2026-05-25T16:06:37Z v0.26.0-rc.1 <h1>Biggest Release Yet!</h1> <p>This is by far the biggest, most comprehensive release of Homebox since we took over. Below are the biggest most important changes. Please read through warnings and other notes carefully, as they contain important information.</p> <h2>Entity Merge</h2> <p>This release officially implements the entity merge, one of the most comprehensive, complex changes to the backend of Homebox ever, and preparing Homebox to take on the features and capabilities people want and need.</p> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>The entity merge being the biggest change in a long time introduces significant amounts of database re-work.<br> You should always make a backup before updating, but a backup is especially important in this case.</p> </div> <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>If you are a integration/software developer, please review our <a href="https://homebox.software/en/advanced/entity-merge-upgrade/" rel="nofollow">entity merge documentation</a> for the API changes</p> </div> <h2>API Keys</h2> <p>Homebox now has the ability to generated static API Keys for developers/integrations. These API Keys will take on the access level of the user who creates them. All Homebox keys are prefixed with <code>hb_</code> to aid in preventing secrets from being committed to source code repositories.</p> <div class="markdown-alert markdown-alert-warning"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-alert mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Warning</p><p>API Keys introduce a new <code>HBOX_AUTH_API_KEY_PEPPER</code> configuration option that <strong>MUST</strong> be configured before Homebox will start.</p> </div> <h2>Password Resets</h2> <p>Homebox now supports password resets, if the instance admin configures the SMTP environment variables this can be done from the front-end quickly and easily. For those not wanting to setup SMTP, you can use <code>homebox reset-password --email=<email></code> which will output a random new password to use for that user (that they can then change from the UI).</p> <h2>Better Export/Import (Experimental)</h2> <p>We've also added a new feature (thanks to the entity merge) that now makes it possible to export an entire collections inventory (including attachments, tags, entities, etc.) into a ZIP file. This ZIP file can then be imported into a different instance of Homebox (the receiving collection must be "empty")</p> <h2>"AR" Scanner</h2> <p>This one was added more as an experiment for fun, but we think some people might find it useful. Basically, if you use the "AR" mode and then point your camera at a QR code it will bring up a little hovering box containing basic information about the entity, and if it has children, a list of those children entities.</p> <h2>Standard Change Log</h2> <ul> <li>feat(frontend): remember previously selected camera by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li>feat: merge items and locations into "entities" by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4204939940" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1414" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1414/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1414">#1414</a></li> <li>feat: "ar" scanner functionality by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4235967433" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1421" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1421/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1421">#1421</a></li> <li>Fix <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4153216733" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1398" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1398/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1398">#1398</a> by setting Swagger BaseURL to dynamic variable by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/katosdev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/katosdev">@katosdev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328776463" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1459" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1459/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1459">#1459</a></li> <li>fix: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2768898751" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/437" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/437/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/437">#437</a> hopefully by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328578171" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1455" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1455/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1455">#1455</a></li> <li>fix: improve password manager support for auth forms by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li>feat: add support for external URL attachments by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li>fix: location create modal shows 'Item Photo' instead of 'Location Photo' (closes <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4328604666" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1456" data-hovercard-type="issue" data-hovercard-url="/sysadminsmedia/homebox/issues/1456/hovercard" href="https://github.com/sysadminsmedia/homebox/issues/1456">#1456</a>) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li>fix: handle numeric list_price in upcitemdb response by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> <li>feat: password reset by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4425388435" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1488" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1488/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1488">#1488</a></li> <li>feat: export/import capability by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4346928980" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1472" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1472/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1472">#1472</a></li> <li>security fixes</li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/lpiepiora/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/lpiepiora">@lpiepiora</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4247059743" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1425" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1425/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1425">#1425</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinfrancois/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/martinfrancois">@martinfrancois</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4370130968" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1477" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1477/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1477">#1477</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/szaiser/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/szaiser">@szaiser</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4400653674" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1481" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1481/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1481">#1481</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bskthefirst/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bskthefirst">@bskthefirst</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4426179487" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1490" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1490/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1490">#1490</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaaaaadrian/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaaaaadrian">@aaaaaadrian</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4265605820" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1432" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1432/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1432">#1432</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.25.0...v0.26.0-rc.1"><tt>v0.25.0...v0.26.0-rc.1</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.25.0 2026-04-13T14:20:07Z v0.25.0 <div class="markdown-alert markdown-alert-note"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-info mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>Note</p><p>As always, we highly recommend making a backup of your databases and files before upgrading!</p> </div> <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>This release fixes <a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-6pvm-v73p-p6m9">CVE-2026-40196</a> which allowed a user removed from their default group to still access it via the API.</p> </div> <h1>Big Changes</h1> <ul> <li><strong>Tag Relationships</strong>: Tags can now have parents/children, and icons.</li> <li><strong>Fractional/Decimal Quantities</strong>: You can now have partial quantities like 1.2, 3.45, etc.</li> <li><strong>User Settings Stored in DB</strong>: Your user preferences are now stored in the DB, settings persist across devices and browsers.</li> <li><strong>OpenTelemetry Support</strong>: Homebox now has basic <a href="https://homebox.software/en/advanced/opentelemetry/" rel="nofollow">OpenTelemetry tracing, logging and error tracking</a>. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.</li> <li><strong>More Barcode Providers</strong>: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.</li> <li>And plenty of other improvements and bug fixes.</li> </ul> <h2>What's Changed</h2> <ul> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4060791562" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1365" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1365/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1365">#1365</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4065515276" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1366" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1366/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1366">#1366</a></li> <li>Update to go 1.26, and other various backend updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4055064253" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1364" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1364/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1364">#1364</a></li> <li>chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4076040712" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1370" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1370/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1370">#1370</a></li> <li>Add OpenTelemetry tracing to backend and frontend with full chain support in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3834568950" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1256" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1256/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1256">#1256</a></li> <li>chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4098832634" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1383" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1383/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1383">#1383</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4098227733" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1382" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1382/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1382">#1382</a></li> <li>Improve tag handling by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3945140491" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1327" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1327/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1327">#1327</a></li> <li>chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4104922666" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1385" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1385/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1385">#1385</a></li> <li>Add backend to store user settings in the DB by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3348597582" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/958" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/958/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/958">#958</a></li> <li>Add a page for tags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4117610607" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1392" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1392/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1392">#1392</a></li> <li>feat: fractional/decimal quantity by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4076479190" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1372" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1372/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1372">#1372</a></li> <li>Fix incorrectly generated Swagger docs for <code>/labelmaker/asset/{id}</code> route by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adarshp/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adarshp">@adarshp</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3635386078" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1084/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1084">#1084</a></li> <li>chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4153328175" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1399" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1399/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1399">#1399</a></li> <li>chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4153593281" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1400" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1400/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1400">#1400</a></li> <li>feat(frontend): Make group invitation link work when user is logged in by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mdrkrg/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mdrkrg">@mdrkrg</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4203196280" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1412" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1412/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1412">#1412</a></li> <li>fix: apply collection currency changes immediately by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4199112844" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1409" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1409/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1409">#1409</a></li> <li>feat: add OpenFoodFacts as barcode lookup provider by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/palini762/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/palini762">@palini762</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4186970999" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1406" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1406/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1406">#1406</a></li> <li>Add Open Facts barcode sources by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/RobinMJD/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/RobinMJD">@RobinMJD</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4248662223" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1426" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1426/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1426">#1426</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adarshp/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adarshp">@adarshp</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3635386078" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1084/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1084">#1084</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mdrkrg/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mdrkrg">@mdrkrg</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4203196280" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1412" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1412/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1412">#1412</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/palini762/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/palini762">@palini762</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4186970999" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1406" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1406/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1406">#1406</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/RobinMJD/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/RobinMJD">@RobinMJD</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4248662223" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1426" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1426/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1426">#1426</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.24.2...v0.25.0"><tt>v0.24.2...v0.25.0</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.25.0-rc.1 2026-03-27T13:35:13Z v0.25.0-rc.1 <h2>What's Changed</h2> <ul> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4060791562" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1365" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1365/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1365">#1365</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4065515276" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1366" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1366/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1366">#1366</a></li> <li>Update to go 1.26, and other various backend updates by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4055064253" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1364" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1364/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1364">#1364</a></li> <li>chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4076040712" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1370" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1370/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1370">#1370</a></li> <li>Add agentic workflow daily-doc-updater by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4079302053" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1373" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1373/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1373">#1373</a></li> <li>Add OpenTelemetry tracing to backend and frontend with full chain support in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3834568950" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1256" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1256/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1256">#1256</a></li> <li>chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4098832634" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1383" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1383/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1383">#1383</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4098227733" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1382" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1382/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1382">#1382</a></li> <li>Improve tag handling by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> and @tonyaelli in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3945140491" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1327" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1327/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1327">#1327</a></li> <li>chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4104922666" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1385" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1385/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1385">#1385</a></li> <li>Add backend to store user settings in the DB by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> and @tonyaelli in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3348597582" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/958" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/958/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/958">#958</a></li> <li>Add a page for tags by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4117610607" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1392" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1392/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1392">#1392</a></li> <li>feat: fractional/decimal quantity by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4076479190" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1372" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1372/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1372">#1372</a></li> <li>Fix incorrectly generated Swagger docs for <code>/labelmaker/asset/{id}</code> route by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adarshp/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adarshp">@adarshp</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3635386078" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1084/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1084">#1084</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adarshp/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adarshp">@adarshp</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3635386078" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1084/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1084">#1084</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.24.2...v0.25.0-rc.1"><tt>v0.24.2...v0.25.0-rc.1</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.24.2 2026-03-09T20:04:51Z v0.24.2 <ul> <li>Actually fixes the item page crash (multiple validated reports and tests)</li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.24.1...v0.24.2"><tt>v0.24.1...v0.24.2</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.24.1 2026-03-07T15:51:53Z v0.24.1 <h2>What's Changed</h2> <ul> <li>fix: stop the items page crashing when attachments connected</li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4024875030" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1355" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1355/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1355">#1355</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4034260031" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1357" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1357/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1357">#1357</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.24.0...v0.24.1"><tt>v0.24.0...v0.24.1</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.24.0 2026-03-03T16:20:33Z v0.24.0 <div class="markdown-alert markdown-alert-important"><p class="markdown-alert-title"><svg data-component="Octicon" class="octicon octicon-report mr-2" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>Important</p><p>This release includes 3 security vulnerability patches. These include issues with CVE scores ranging from 4.6 to 7.4 scores.</p> <ul> <li>7.4 <a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-j86g-v96v-jpp3">CVE-2026-27981</a></li> <li>5.0 <a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-cm7p-5mg5-82pm">CVE-2026-27600</a></li> <li>4.6 <a href="https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-55fv-9q6q-vpcr">CVE-2026-26272</a></li> </ul> <p>Thank you to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/G3XAR/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/G3XAR">@G3XAR</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/djnnvx/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/djnnvx">@djnnvx</a> for their responsible disclosures of these issues.</p> </div> <h2>What's Changed</h2> <ul> <li>Add Documentation Detailing Websocket Requirement for Reverse Proxies by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KevinFumbles/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KevinFumbles">@KevinFumbles</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3889099080" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1297" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1297/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1297">#1297</a></li> <li>Add a tenant get param when generating labels on the item page. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdjk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdjk">@cdjk</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910464136" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1303" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1303/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1303">#1303</a></li> <li>Migrate to Startlight Documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910629140" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1304" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1304/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1304">#1304</a></li> <li>docs: update links in <code>README.md</code> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924993010" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1314" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1314/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1314">#1314</a></li> <li>feat: add new field types to template_fields schema by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929381658" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1315" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1315/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1315">#1315</a></li> <li>fix: tenant miss in export download URLs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924422756" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1313" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1313/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1313">#1313</a></li> <li>fix: hardcoded frontend strings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3920423311" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1311" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1311/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1311">#1311</a></li> <li>chore(deps): bump nanotar from 0.2.0 to 0.2.1 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929410387" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1317" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1317/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1317">#1317</a></li> <li>Update incorrect env variables in quick-start/configure/database by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KillerOfPie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KillerOfPie">@KillerOfPie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929907947" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1320" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1320/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1320">#1320</a></li> <li>fix: improve mobile image popup sizing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3931195204" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1321" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1321/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1321">#1321</a></li> <li>feat: add skip-first-labels and location-row toggle to label generator by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/max2697/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/max2697">@max2697</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3911386669" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1306" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1306/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1306">#1306</a></li> <li>chore(deps): bump markdown-it from 14.1.0 to 14.1.1 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3939020428" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1324" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1324/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1324">#1324</a></li> <li>implement show/hide items for locations tree by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3953913722" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1328" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1328/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1328">#1328</a></li> <li>chore(deps): bump ajv from 8.17.1 to 8.18.0 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3958465973" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1330" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1330/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1330">#1330</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3963733283" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1331" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1331/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1331">#1331</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969979178" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1334" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1334/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1334">#1334</a></li> <li>feat: add configurable security options for generic notifiers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3971261477" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1335" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1335/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1335">#1335</a></li> <li>Update currencies.json by @github-actions[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3954714955" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1329" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1329/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1329">#1329</a></li> <li>fix(currencies): update CLP decimals to 0 to comply with ISO 4217 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sRamosDev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sRamosDev">@sRamosDev</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986281825" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1342" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1342/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1342">#1342</a></li> <li>chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4004736006" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1347" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1347/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1347">#1347</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KevinFumbles/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KevinFumbles">@KevinFumbles</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3889099080" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1297" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1297/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1297">#1297</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdjk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdjk">@cdjk</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910464136" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1303" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1303/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1303">#1303</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924993010" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1314" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1314/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1314">#1314</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KillerOfPie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KillerOfPie">@KillerOfPie</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929907947" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1320" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1320/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1320">#1320</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/max2697/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/max2697">@max2697</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3911386669" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1306" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1306/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1306">#1306</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sRamosDev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sRamosDev">@sRamosDev</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986281825" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1342" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1342/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1342">#1342</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.23.1...v0.24.0"><tt>v0.23.1...v0.24.0</tt></a></p> tankerkiller125 tag:github.com,2008:Repository/816422401/v0.24.0-rc.1 2026-02-22T17:22:47Z v0.24.0-rc.1 <h2>What's Changed</h2> <ul> <li>Add Documentation Detailing Websocket Requirement for Reverse Proxies by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KevinFumbles/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KevinFumbles">@KevinFumbles</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3889099080" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1297" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1297/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1297">#1297</a></li> <li>Comprehensive backend cleanup with github.com/samber/lo helpers by @Copilot in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3908233425" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1301" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1301/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1301">#1301</a></li> <li>Add a tenant get param when generating labels on the item page. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdjk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdjk">@cdjk</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910464136" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1303" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1303/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1303">#1303</a></li> <li>Migrate to Startlight Documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910629140" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1304" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1304/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1304">#1304</a></li> <li>docs: update links in <code>README.md</code> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924993010" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1314" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1314/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1314">#1314</a></li> <li>feat: add new field types to template_fields schema by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929381658" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1315" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1315/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1315">#1315</a></li> <li>fix: tenant miss in export download URLs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924422756" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1313" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1313/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1313">#1313</a></li> <li>fix: hardcoded frontend strings by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3920423311" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1311" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1311/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1311">#1311</a></li> <li>chore(deps): bump nanotar from 0.2.0 to 0.2.1 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929410387" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1317" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1317/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1317">#1317</a></li> <li>Update incorrect env variables in quick-start/configure/database by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KillerOfPie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KillerOfPie">@KillerOfPie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929907947" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1320" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1320/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1320">#1320</a></li> <li>fix: improve mobile image popup sizing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3931195204" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1321" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1321/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1321">#1321</a></li> <li>feat: add skip-first-labels and location-row toggle to label generator by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/max2697/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/max2697">@max2697</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3911386669" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1306" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1306/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1306">#1306</a></li> <li>chore(deps): bump markdown-it from 14.1.0 to 14.1.1 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3939020428" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1324" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1324/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1324">#1324</a></li> <li>implement show/hide items for locations tree by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tonyaellie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tonyaellie">@tonyaellie</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3953913722" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1328" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1328/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1328">#1328</a></li> <li>chore(deps): bump ajv from 8.17.1 to 8.18.0 in /docs in the npm_and_yarn group across 1 directory by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3958465973" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1330" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1330/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1330">#1330</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3963733283" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1331" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1331/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1331">#1331</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3969979178" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1334" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1334/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1334">#1334</a></li> <li>feat: add configurable security options for generic notifiers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tankerkiller125/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tankerkiller125">@tankerkiller125</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3971261477" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1335" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1335/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1335">#1335</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KevinFumbles/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KevinFumbles">@KevinFumbles</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3889099080" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1297" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1297/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1297">#1297</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdjk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdjk">@cdjk</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3910464136" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1303" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1303/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1303">#1303</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/IceeAn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/IceeAn">@IceeAn</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3924993010" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1314" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1314/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1314">#1314</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KillerOfPie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/KillerOfPie">@KillerOfPie</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3929907947" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1320" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1320/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1320">#1320</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/max2697/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/max2697">@max2697</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3911386669" data-permission-text="Title is private" data-url="https://github.com/sysadminsmedia/homebox/issues/1306" data-hovercard-type="pull_request" data-hovercard-url="/sysadminsmedia/homebox/pull/1306/hovercard" href="https://github.com/sysadminsmedia/homebox/pull/1306">#1306</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sysadminsmedia/homebox/compare/v0.23.1...v0.24.0-rc.1"><tt>v0.23.1...v0.24.0-rc.1</tt></a></p> tankerkiller125