LightZone 5.0.0~beta2-0obs1 💾

LightZone is a professional-level digital darkroom and photo editor for Mac, Windows, and Linux. It includes RAW processing and editing. Rather than using layers in the way that other photo editors do, LightZone lets the user build up a stack of tools which can be rearranged, readjusted, turned off and on, and removed from the stack. It's a completely non-destructive editor, where any of the tools can be re-adjusted or modified later — even in a different editing session. A tool stack can even be copied to a batch of photos at one time. LightZone always operates in a 16-bit linear color space with the wide gamut of ProPhoto RGB.

minor bugfix: Unstable; urgency=medium Upstream sync. -- Masahiro Kitagawa Sun, 06 Jun 2023 12:13:00 +0900.

BSDL capture digital-camera graphics-conversion viewer macos linux c

beerscan.lua 3.0 💾

beerscan.lua (formerly 'untappd.lua') is a lua script that displays beers currently available at venues using realalefinder.com and untappd.com. It had a tui interface and uses libUseful-lua and libUseful.

major feature: Added support for realalefinder.com Changed project name to 'beerscan.lua'.

GNU GPLv3 beer webscraping lua libuseful

CentSettle 0.1.0 💾

CentSettle is a zero-runtime-dependency Node.js CLI, importable ESM core, and static browser application that turns one shared-expense ledger into exact balances and a compact deterministic payment plan. Decimal strings are converted to exact BigInt cents; equal and weighted splits use largest-remainder allocation with declared participant order as the tie-break. The browser app needs no account, upload, network API, external asset, browser storage, telemetry, or analytics. CentSettle supports one three-letter display label and exactly two decimal places. It does not convert currency, apply ISO minor-unit rules, initiate payments, provide accounting, legal, or tax advice, or claim that its deterministic plan uses the mathematically minimum number of transfers.

major feature: Initial release with exact-cent equal and weighted splits, deterministic settlement ordering, stable text and schema-versioned JSON output, a bounded Node.js CLI, local-only static browser app, strict UTF-8 and duplicate-key handling, terminal-safe reporting, explicit resource ceilings, 41 tests, 1,000 randomized settlement checks, and zero runtime dependencies.

MITL expenses personal-finance privacy javascript nodejs cli local-first productivity

Xandikos 0.4.5 💾

Xandikos is a lightweight yet complete CardDAV/CalDAV server that backs onto a Git repository. Xandikos (Ξανδικός or Ξανθικός) takes its name from the name of the March month in the ancient Macedonian calendar, used in Macedon in the first millennium BC.

minor bugfix: Implement the RFC 3744 `principal-property-search` REPORT, the. `principal-collection-set` property, and the. `apply-to-principal-collection-set` search flag. (Jelmer Vernooij).

GNU GPLv3 self-hosted calendar contacts caldav carddav webdav server python

VectorSentry 0.1.0 💾

VectorSentry is a zero-runtime-dependency Node.js CLI and static browser application for conservative, local, text-only inspection of exactly one bounded UTF-8 SVG. It reports syntax-visible scripts, inline event handlers, external, relative, and data references, foreignObject elements, CSS URLs and imports, XML stylesheet instructions, entity declarations, duplicate IDs, unresolved internal fragment references, namespace anomalies, xml:base, and malformed lexical structure. It never renders, dereferences, executes, sanitizes, rewrites, uploads, or expands entities. VectorSentry is a lexical preflight, not a sanitizer, malware detector, complete XML/SVG conformance validator, exploitability verdict, or proof that an SVG is safe in every embedding context.

major feature: Initial release with a shared pure ESM scanner, Node.js CLI, static local-only browser interface, deterministic text and schema-versioned JSON reports, source locations, exact severity totals under bounded finding retention, strict UTF-8 and XML lexical handling, stable regular-file reads, explicit resource ceilings, 63 tests, and zero runtime dependencies.

MITL svg xml security privacy javascript nodejs cli static-analysis

CaptionSeam 0.1.0 💾

CaptionSeam is a zero-dependency Node.js CLI that preflights one explicitly selected SubRip subtitle file before publication or handoff. It reports malformed cue blocks, invalid or nonpositive timestamp ranges, sequence anomalies, out-of-order cues, overlaps, long gaps, mixed line endings, missing final newlines, UTF-8 BOMs, and unsafe control or invisible formatting characters. It reads strict UTF-8 locally, never uploads or edits subtitle text, and refuses incomplete analysis above deterministic file, line, cue, or finding limits. It does not establish media synchronization, translation quality, accessibility quality, player rendering, or correctness for the associated media.

major feature: Initial release with bounded SRT structure and timeline analysis, text and JSON reports, CI check statuses, configurable gap observations, private mode-0600 report output, verified file reads, and explicit unsupported-format and media-correctness boundaries.

MITL subtitles captions accessibility javascript nodejs cli media linux

ISBNNeedle 0.1.0 💾

ISBNNeedle is a zero-dependency Node.js CLI for preflighting mixed ISBN-10 and ISBN-13 lists before a catalog import, inventory merge, or metadata lookup. It removes permitted separators, validates check digits, converts ISBN-10 to 978 ISBN-13, converts compatible 978 ISBN-13 values back to ISBN-10, and reports duplicate editions represented in both forms. Processing is local and bounded, with strict UTF-8 and stable-file checks plus private mode-0600 report output. It performs no catalog lookup or upload, and it explicitly does not claim that a checksum-valid identifier was assigned, exists in a catalog, identifies the expected title or edition, is current, or came from a trustworthy source. A 979 ISBN has no ISBN-10 conversion.

major feature: Initial release with strict ISBN-10/ISBN-13 validation, 978 bidirectional conversion, the 979 no-conversion boundary, canonical duplicate-edition detection, text and JSON output, deterministic CI statuses, bounded stable-file reads, and private report creation.

MITL books isbn libraries publishing data-cleaning javascript nodejs cli linux

CIDRift 0.1.0 💾

CIDRift is a zero-dependency local CLI and static browser tool for checking one-CIDR-per-line IPv4 and IPv6 plans. It reports canonical ranges, exact address counts, duplicate entries, and containment relationships with original line numbers. Strict parsing refuses host bits, labels, inline comments, malformed addresses, and unsupported range notation rather than guessing. Analysis is local and bounded

major feature: Initial release with strict IPv4/IPv6 parsing, dotted IPv4 tails inside IPv6, deterministic text and JSON output, CLI exit codes, a static local-only browser interface, bounded input and finding limits, 21 tests, and explicit non-scanning boundaries.

MITL cidr subnet ipv4 ipv6 networking devops javascript cli

PassageCheck 0.1.0 💾

PassageCheck screens a rigid rectangular item against one clear rectangular opening in every distinct axis-aligned 90-degree orientation. It applies an optional margin per side, reports slack and the closest tested face, uses exact six-decimal fixed-scale comparisons, and runs as a local browser app or zero-dependency Node CLI. It explicitly does not claim diagonal movement or full-route feasibility.

major feature: Initial release with exact boundary arithmetic, up to six deduplicated orientations, per-side margin support, text and JSON CLI output, shareable browser URLs, and explicit diagonal and full-route limitations.

MITL javascript nodejs cli geometry furniture moving

TireShift 0.1.0 💾

TireShift is a local browser and zero-dependency CLI tool for comparing two passenger-metric tire sizes. It calculates nominal sidewall height, overall diameter, circumference, revolutions per kilometre and mile, radius change, and estimated speed under an explicit original-tire assumption. Its strict parser refuses unsupported LT, ST, flotation, and load/speed suffix syntax instead of silently producing a partial result. TireShift makes no network requests after the browser page loads and contains no analytics, telemetry, cookies, or runtime dependencies. It clearly limits its result to geometry rather than claiming vehicle fitment or safety approval.

major feature: First public release with a local browser calculator, zero-dependency Node.js CLI, JSON output, configurable diameter threshold, strict exit mode, shareable result URLs, 12 deterministic numeric reference vectors, and explicit fitment boundaries.

MITL automotive calculator javascript cli web tire-size

Claude Code Trusted Discord 0.1.1 💾

Claude Code Trusted Discord is an unofficial Linux patcher for the official Claude Code Discord channel plugin. It lets one exact configured Discord account send direct messages into the currently active Claude Code background session through the authenticated local daemon, while every other sender and all guild messages retain the upstream untrusted channel path. It validates exact DM sender identity, stores the owner ID with mode 0600, creates timestamped backups, fails closed on source drift, and supports dry-run and uninstall. It does not read or modify the bot token, pairing allowlist, daemon control key, or transcripts.

minor bugfix: Clarify and enforce the background-session requirement, add explicit /background guidance when the active session is absent from the daemon roster, and move the trusted Discord owner ID out of plugin source into a protected configuration file.

Apache security communication chat python linux developers system-administrators artificial-intelligence

HarnessDelta 0.1.3 💾

HarnessDelta reviews semantic changes to coding-agent configuration before they land. It reads Git objects and working-tree files locally and reports newly executable hooks or MCP servers, permission broadening, weakened sandbox or approval policy, removed guardrails, changed instruction scope, plugin or skill changes, hidden controls, and likely embedded credentials. Reports use relative paths, counts, hashes, and redacted findings rather than configuration contents or secrets.

security: Reject symlinks, non-regular files, invalid UTF-8, and inputs above 2 MiB

MITL security software-development version-control javascript linux developers system-administrators artificial-intelligence

PermitLint 0.3.2 💾

PermitLint is a read-only static linter for Claude Code and Codex permission policies. It catches broad shell grants, missing wildcard boundaries, bypass modes, unsafe approval and sandbox combinations, and overly broad exec-policy prefixes without executing configuration code. A zero-install browser audit checks one settings.json, config.toml, or .rules file locally in the tab

security: Bound repository policy reads through no-follow file handles

MITL security software-development javascript linux developers system-administrators artificial-intelligence

Waybar Rss 0.1.0 💾

RSS reader as a Waybar custom module + HTML view — for Hyprland / Wayland compositors. How it works Waybar module: Shows RSS icon with article count for a configurable time window. Left click: Opens index.html with all articles from the last N hours, grouped by feed. Right click: Forces immediate refresh + HTML regeneration. systemd timer: Regenerates the HTML page every hour automatically.

major feature: Initial Release

MITL waybar hyprland rss

Habeas 0.4.1 💾

Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.

minor feature: Chore(release): 0.4.1 Manifest 0.4.0.1 - gt; 0.4.1, rename CHANGELOG Unreleased - gt; 0.4.1 2026-07-17, open a. Fresh Unreleased . Ships the consent-gated `list-sources` external hook.

Affero GPLv3 javascript mozilla financial-and-insurance-industry end-users information-technology

Markstream 1.0.6 💾

Markstream is an MIT-licensed collection of streaming Markdown renderers for AI chat and LLM output. It handles token-by-token and incomplete Markdown while providing Mermaid diagrams, KaTeX math, Shiki syntax highlighting, Monaco-powered code views, safe HTML, server-side rendering, and custom components. Packages are available for Vue and Nuxt, React and Next.js, Svelte 5, Angular, and Vue 2. It is intended for developers building chatbots, agent consoles, model playgrounds, and documentation assistants.

minor feature: Improves Markdown restore and token-stream rendering performance, stabilizes streaming code blocks and diff handoffs, strengthens virtual scrolling and deferred rendering for large documents, and fixes inline math, CJK emphasis delimiters, copy events, and code-block tooltip behavior. No breaking changes.

MITL markdown streaming-markdown vue react svelte angular typescript ai-chat llm

Horde Groupware 6.2.0 💾

Horde 6 is back with Exchange Activesync 16.1, caldav and carddav support, TOTP and OpenID Connect support.

minor feature: Chore(release): bump version to 6.2.0 Release version 6.2.0. Feat(horde): add ActiveSync Sync response streaming config. (horde): catch CapabilityException from lazy session generator. Chore(deps): bump minimum versions to latest stable releases. (theme): constrain secure-form lock badge to 16px.

GNU LGPL groupware

Agent Island 1.7.1 💾

Agent Island is an open-source desktop status companion for Claude Code and Codex. It gives developers a visual workspace for seeing when coding agents are working, waiting, or need attention, and provides maintained releases for macOS and Windows.

minor feature: Stable desktop release with maintained macOS DMG and Windows x64 ZIP packages.

MITL developer-tools ai-agents desktop monitoring macos windows

fzf 0.74.1 💾

An interactive command line filter program for any kind of list; files, command history, processes, hostnames, bookmarks, git commits, etc. It implements a "fuzzy" matching algorithm, so you can quickly type in patterns with omitted characters and still get the results you want. Highlights 📦 Portable — Distributed as a single binary for easy installation ⚡ Blazingly fast — Highly optimized code instantly processes millions of items 🛠️ Extremely versatile — Fully customizable via an event-action binding mechanism 🔋 Batteries included — Includes integration with bash, zsh, fish, Vim, and Neovim

minor bugfix: And improvements. - Each frame is now wrapped in synchronized update mode (mode 2026) to reduce flickering on supported terminals. - Reduced rendering output by 10-23 by skipping redundant SGR sequences. Ghost characters and misplaced colors inside Zellij by using CHA instead of CR + CUF for horizontal cursor movement. Cursor restoration on exit with `--height --no-clear` inside Neovim terminal by using DECSC/DECRC instead of `CSI s`/`CSI u`. Nushell: deprecation error of `str downcase` on nushell 0.114.0 or above.

MITL cli finder go ruby shell

Brush Photo Video Library 💾

Brush Photo & Video Library converts raw pointer samples into smooth rounded paths and places repeated Unicode text along them by measured arc length. It is an open-source MIT graphics library for photo editors, video-frame overlays, SVG workflows, drawing tools, and other graphics software. Equivalent dependency-free implementations and runnable examples are included in 20 programming languages.

minor feature:

MITL graphics library unicode svg text-on-path photo video drawing

Habeas 0.2.0 💾

Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.

major feature: Added support to extract information from WebSocket-based data sources.

Affero GPLv3 javascript mozilla financial-and-insurance-industry end-users information-technology

FreeRDP 3.29.0 💾

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Enjoy the freedom of using your software wherever you want, the way you want it, in a world where interoperability can finally liberate your computing experience.

major security: Security, and maintenance release. We've received a very rigorous review since our last release by a couple of Security researchers, so this release contains quite a number of advisories. An update is highly recommended. CVE and advisories: Bin Luo, University of Electronic Science and Technology of China (UESTC). Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-43hh-p3vw-hfx3. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mwwh-mhp9-q7vm. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whq8-c3v3-p8v8. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8v6m-2cmc-chx9. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5wr6-8m8j-3h7f. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-89c6-jjrw-96h4. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8xqm-wp3f-rfp9. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-34hq-hwjw-q8v3. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-33gg-h66j-3697. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v89x-pc32-hqr7. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pfxq-3qmw-8vjx. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5. @canomer. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-69xf-pqrw-596x. Reported by Team Atlanta. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg. @HEXER365. Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3. Cbcs found

Apache rdp remote-desktop networking c

mkc 0.5 💾

A build configuration tool.

minor feature: 0.5 2026-7-15 * Bug Fixes: * Fix check/success/fail processing. * Fix local variable processing. * Fix check_include_guards on windows. * New Features: * set temporary ... * return (function).

Zlib c console cross-plattform developers

CMOC 0.1.99 💾

CMOC is a 6809-generating cross-compiler for a large subset of the C language. It produces executables for the Motorola 6809 processor to be used under the Tandy Color Computer Disk Basic environment, OS-9 and others. It runs under GNU/Linux and other Unix-like environments.

minor bugfix: Fixed buggy optimization removeRepeatedLDX. Inline assembly statements now support referring to the offset of a struct member in an instruction, e.g., LDA Foo::member,X. Added -Wno-non-void-function-without-return, which turns off the warning about non-void functions that have no return statement. Added -Wno-return-without-argument-in-non-void-function and -Wno-calling-undeclared-function. Added -Wno-builtin-macro-redefined, to avoid warning when a builtin macro gets redefined. Can be useful to suppress warnings about the __cplusplus macro that are issued on some platforms. Other minor optimizations added.

GNU GPLv3 compiler c developers

mkc 0.4 💾

A build configuration tool.

minor feature: 0.4 2026-7-14 * Bug Fixes: * Fix 'continue' statement. * Fix unary-op type check. * New Features: * Add 'check_include_guards'. * Add 'check_include_compile'. * Add 'success', 'failure' attribute. * Units: 'units/commonpaths.mkc', 'units/libintl.mkc'.

Zlib c console cross-plattform developers

Jenkins 2.573 💾

Jenkins provides hundreds of plugins to support building, deploying and automating any project.

minor feature: lt;ul gt;. lt;li gt;. Major RFE: Refresh the status icons to show the status of the current job, without including status of previous job. lt;/li gt;. lt;li gt;. the confirmation text in the experimental Manage Jenkins UI. lt;/li gt;. lt;li gt;. Add online help to clarify the timezone used for SCM polling. lt;/li gt;. lt;/ul gt;.

MITL ci automation java

FreeFileSync 14.10 💾

FreeFileSync allows comparing and synchronizing local file folders. It's performant and without GUI complexity. It detects moved and renamed files, detect conflicts, can operate on locked files, understands symlinks, allows automatic syncing, copyies extended file permissions (NTFS), and it's cross-platform.

minor bugfix: Added CRC32 verification for application resource files Improved error reporting when application files become corrupted access denied error for Windows SFTP server Updated toolchain and library dependencies to latest versions

GNU GPLv3 synchronization file-management backup version-control mirroring cpp

Roundup Issue Tracker 2.6.0 💾

Roundup is a simple-to-use and install issue-tracking system with web, command-line xmlrpc, rest (in the 2.0 development line) and e-mail interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry Track design competition. Downloading the source allows you to start a demo instance in a few minutes to see if it will fill your needs. Unpack the tarball and run: python demo.py

security: This release is a security, bugfix and feature release (49 changes), so make sure to read `docs/upgrading.txt `_ to bring your tracker up to date. Version 2.6.0 requires Python version 3.10 or newer. Among the significant enhancements in version 2.6.0 compared to the 2.5.0 release are: * **Filter history entries where permissions are handled by check function** When a property's permission uses a check command, the history of changes for that property were shown. The permissions are now properly checked using the check function. * **Fix old CSRF prevention for PATCH method** The PATCH method was not covered by the old CSRF protection method. * **Modern CSRF prevention method available** This release implements CSRF protection using `Cross-Site Request Forgery by Filippo Valsorda `_. This is an effective method for CSRF protection and is much simpler as well. There are no configurable options unlike the 8 options for the older method. This can be opted into using config.ini. * **Require reauthentication when making changes to sensitive fields** You can trigger a reauthentication when the user changes particular fields. For example you can rquire a password be entered before the user changes their password. * **Classic UI interface modernization.** The classic tracker has basic responsive support for mobile. The table based layout was removed and HTML 5 landmarks (main, nav ...) are used along with flex and grid layouts. The left hand menu now collapses to a grid layout in a single column when on a smaller display. This can be retrofitted to existing classic trackers. When you moved from one page to the next on an index, the query/search name was lost. This release now preserves the search name. Queries triggered from the query edit page now include the query name in the index view. The web UI now allows users to log in w

Mixed information management issue tracking www email cli python customer-service developers system-administrators topic

helio-workstation 3.17 💾

Helio Workstation is free and open-source music sequencer, designed to be used on all major platforms. Why another sequencer? Most of the DAW interfaces often seem overcomplicated, and they only tend to get more and more bloated over time. Many of them are commercial, proprietary-licensed and almost none of them support all major operating systems at the same time. Helio is an attempt to rethink a music sequencer to create a tool that feels right. It aims to be a modern music creation software, featuring linear-based sequencer with a clean interface, high-performance C++ core, integrated version control providing intelligent synchronization between devices, saved undo history, translations to many languages and more.

minor bugfix: Removed update checks and project sync features from desktop builds, the app is now offline on both desktop and mobile platforms. - Added initial support for keyboard-only editing in the sequencer, more hotkeys for menus, pop-ups, and dialogs. - More UI performance improvements. - Added more translations. - Desktop platforms: added support for back/forward mouse buttons, VST3 plugin windowing, misc in plugin scanning. - Mobile platforms: enabled an option to render to OGG format, QoL for the velocity editor panel. - Android: layout flickering on app start. - iOS: enabled all screen orientations on iPads.

GNU GPLv3 daw sequences music

FreeRDP 3.28.0 💾

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Enjoy the freedom of using your software wherever you want, the way you want it, in a world where interoperability can finally liberate your computing experience.

major security: Feature and release. iOS client has been revived by @bho3538. Android client build updates by @svncibrahim. Windows client did get some updates by @zorjen122. Server side smartcard API by @joantolo. Improved client statistics interface, now also supports static channels. Improved fuzzer and unit tests. CMake preset support making it easier to create a working build configuration, see https://github.com/FreeRDP/FreeRDP/wiki/Compilation#presets. CVE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjqx-v446-x7fc CVE-XXXX-XXXXX by Claude and Ada Logics. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9g22-w2gr-vcmp CVE-XXXX-XXXXX by Claude and Ada Logics. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f27x-frr8-j9hc CVE-XXXX-XXXXX by Claude and Ada Logics. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72j9-356v-88xq CVE-XXXX-XXXXX by Claude and Ada Logics. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v64m-xxfw-hrv6 CVE-XXXX-XXXXX by @rahulhoysala. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mp3f-59pg-c5pp CVE-2026-57158 by @hextheshadow. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47fr-jw86-c3fj CVE-2026-57157 by Owais Lone (Owais Lone). https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v5wf-j8j4-77h7 CVE-2026-57156 by @HEXER365. Security: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rq8f-9xjh-pr3m. ## What's Changed. feat(client): Modernize iOS client. (iFreeRDP). client,ios remove some deprecation warnings. Ios cmake. client,ios add openh264 build. client,android riscv64 support. client,android make release configurable. client,android allow overriding version name and code. client,android redesign touch pointer. client,android move external deps to own CMake file. Android build. client,sdl guard file clipboard. client,sdl Askpass. client,sdl throw a real exception instead of invalid bare th

Apache rdp remote-desktop networking c

Weblate 2026.7.1 💾

Weblate is an open source web-based translation tool with version control. It includes several hundred languages with basic definitions, and enables the addition of more language definitions, all definitions can be edited by the web community or a defined set of people, as well as through integrating machine translation, such as DeepL, Amazon Translate, or Google Translate.

minor feature:

GNU GPLv3 translation localization web python html

mkc 0.3 💾

A build configuration tool.

minor feature: 0.3 2026-7-10 * Bug Fixes: * Various * Changes: * 'path' attribute is repeatable. * New features: * Add 'check_include_dependencies' * Add 'foreach' * Add 'function'

Zlib c console cross-plattform developers

MLT Multimedia Framework 7.42.0 💾

The engine of a non-linear video editor that can be used in all sorts of apps, not just desktop video editors. MLT is an open source multimedia framework, designed and developed for television broadcasting. It provides a toolkit for broadcasters, video editors, media players, transcoders, web streamers and many more types of applications. The functionality of the system is provided via an assortment of ready to use tools, XML authoring components, and an extensible plug-in based API.

major feature: Framework Added list-based image-conversion callback dispatch on mlt_frame. Use `mlt_frame_append_convert_image()` to register a converter instead of. Setting `frame- convert_image` directly. Multiple converters are tried in Registration order; the first that succeeds wins. New public API: `mlt_frame_prepend_convert_image()`. - `mlt_frame_append_convert_image()`. - `mlt_frame_convert_image()`. - `mlt_frame_next_convert_image()`. - `mlt_frame_has_convert_image()`. - `mlt_frame_copy_convert_image()`. - API behavior change: `mlt_frame_s::convert_image` is now read-only after. Init and is permanently set to the dispatcher `mlt_frame_convert_image()`. External code that set this field directly to a custom function will no. Longer have that function called. If you really need that (never heard of Someone who does), clear the frame's "_convert_image_callbacks" property And use `mlt_frame_append_convert_image()` instead. Modules. - Image converters (`movit.convert`, `avcolor_space`, `imageconvert`) are. Now attached data-driven via `loader.ini` key `image_convert`.

GNU GPLv3 audio video

Horde Groupware 6.1.0 💾

Horde 6 is back with Exchange Activesync 16.1, caldav and carddav support, TOTP and OpenID Connect support.

minor feature: Chore(release): bump version to 6.1.0 Release version 6.1.0. (health-check): catch Throwable when probing modern AuthService. I18n(perms): update de translations for negative-permissions admin UI. Feat(perms): Negative-permissions admin UI, templates and configswitch. Feat(admin-api): add GET /api/v1/admin/registry for compiled registry introspection. Feat: Update French translations. Style(prefs): Use consistent punctuation for preference labels. Chore: Document the previously hidden mode switch for session encryption.

GNU LGPL groupware

Czkawka 12.0.1 💾

Czkawka (tch•kav•ka (IPA: [ˈʧ̑kafka]), "hiccup" in Polish) is a simple, fast and free app to remove unnecessary files from your computer. Krokiet ((IPA: [ˈkrɔcɛt]), "croquet" in Polish) same as above, but uses Slint frontend. Features Written in memory-safe Rust Amazingly fast - due to using more or less advanced algorithms and multithreading Free, Open Source without ads Multiplatform - works on Linux, Windows, macOS, FreeBSD and many more Cache support - second and further scans should be much faster than the first one CLI frontend - for easy automation GUI frontend - uses GTK 4 or Slint frameworks No spying - Czkawka does not have access to the Internet, nor does it collect any user information or statistics Multilingual - support multiple languages like Polish, English or Italian Multiple tools to use: Duplicates - Finds duplicates based on file name, size or hash Empty Folders - Finds empty folders with the help of an advanced algorithm Big Files - Finds the provided number of the biggest files in given location Empty Files - Looks for empty files across the drive Temporary Files - Finds temporary files Similar Images - Finds images which are not exactly the same (different resolution, watermarks) Similar Videos - Looks for visually similar videos Same Music - Searches for similar music by tags or by reading content and comparing it Invalid Symbolic Links

minor feature: Core: problem with showing console windows on Windows, when running ffmpeg internally -. Added `BuildRuntimeInfo` - a new module that probes compile-time features (HEIF, LibRAW, AVIF) and runtime availability (FFmpeg, FFprobe) at startup, with support for re-probing process-based tools without restarting the app -. Added a 500 MB size guard for image loading to prevent out-of-memory crashes on unexpectedly large files -. Krokiet: Added a new "About / Diagnostics" panel, to check for build/runtime features and to test if certain image files are recognizable -. Added a "Test image file" button in the diagnostics view to verify that a user selected file can actually be decoded -. Cedinia: invalid status in progress bar -. auto selection of language on first run -.

GNU GPLv3 rust gtk-rs gtk duplicates cleaner multiplatform similar-images similar-music similar-videos

Jenkins 2.571 💾

Jenkins provides hundreds of plugins to support building, deploying and automating any project.

minor feature: lt;ul gt;. lt;li gt;. RFE: Display operating system end of life messages when we are within 6 months of the end of life for Alpine Linux 3.21 - 3.24, CentOS Stream 9 - 10, Debian 13, Fedora 42 - 44, Red Hat Enterprise Linux 10, Rocky Linux 10, and Ubuntu 26.04. Correct the end of life date for Fedora 41. lt;/li gt;. lt;li gt;. RFE: Refine the 'System Log' Manage Jenkins page lt;/li gt;. lt;li gt;. RFE: Update bundled Script Security Plugin from 1402.v94c9ce464861 to 1402.1405.vc96e74964250. lt;/li gt;. lt;li gt;. breadcrumb overflow menu items not rendering lt;/li gt;. lt;li gt;. weird animation artifact when clicking "Apply". lt;/li gt;. lt;li gt;. incorrect pluralization in the file deletion retry failure message. lt;/li gt;. lt;li gt;. Move lt;code gt;log.markAsComplete() lt;/code gt; into lt;code gt;finally lt;/code gt; block in lt;code gt;TaskThread.run() lt;/code gt; to prevent permanently stuck task UI when lt;code gt;perform() lt;/code gt; throws an lt;code gt;Error lt;/code gt;. lt;/li gt;. lt;/ul gt;.

MITL ci automation java

LedgerSMB 1.13.7 💾

The LedgerSMB project provides small and mid-size businesses with solid open source accounting software: integrating invoicing, order processing, quotations and more (ERP). LedgerSMB aims to provide a strong (multi-currency accounting) basis to build your business on -- without vendor lock-in. The project team considers correctness and performance equally important key usability features and is dedicated to providing both, even on the biggest data sets. Sales (Invoices, Orders, Quotations) Receivables & Payables General ledger Inventory management Fixed asset accounting & depreciation Profit & cost centers, departments, projects Output documents in PDF, HTML, CSV, Office formats Mail documents (e.g. invoices) from within the application Translatable to your language (comes with 45 languages) and more The fact that LedgerSMB is open source - meaning that the source code is freely available - makes it even more customizable and flexible.

minor bugfix: Changelog for 1.13.7 * Fix error thrown when selecting 'All accounts' on the trial balance (#9699) * Docker images with latest security fixes applied

GNU GPL accounting invoicing orders erp perl postgresql bookkeeping web

LedgerSMB 1.12.20 💾

The LedgerSMB project provides small and mid-size businesses with solid open source accounting software: integrating invoicing, order processing, quotations and more (ERP). LedgerSMB aims to provide a strong (multi-currency accounting) basis to build your business on -- without vendor lock-in. The project team considers correctness and performance equally important key usability features and is dedicated to providing both, even on the biggest data sets. Sales (Invoices, Orders, Quotations) Receivables & Payables General ledger Inventory management Fixed asset accounting & depreciation Profit & cost centers, departments, projects Output documents in PDF, HTML, CSV, Office formats Mail documents (e.g. invoices) from within the application Translatable to your language (comes with 45 languages) and more The fact that LedgerSMB is open source - meaning that the source code is freely available - makes it even more customizable and flexible.

minor bugfix: Changelog for 1.12.20 * Fix error thrown when selecting 'All accounts' on the trial balance (#9699) * Docker images with latest security fixes applied

GNU GPL accounting invoicing orders erp perl postgresql bookkeeping web

Xandikos 0.4.4 💾

Xandikos is a lightweight yet complete CardDAV/CalDAV server that backs onto a Git repository. Xandikos (Ξανδικός or Ξανθικός) takes its name from the name of the March month in the ancient Macedonian calendar, used in Macedon in the first millennium BC.

minor feature: Add WebDAV-Push support, notifying subscribed clients of collection. Changes. (Jelmer Vernooij) Icalendar: reject and normalize empty VTIMEZONE blocks. (Jelmer Vernooij). Accept a non-zero `Depth` header for addressbook-multiget reports. (Jelmer Vernooij, #692). Return 412 Precondition Failed when a `pre_put_hook` raises a. Precondition failure. (Jelmer Vernooij) Handle `OutOfSpace` more gracefully. (Jelmer Vernooij). Web: apply the `SCRIPT_NAME` preto the schedule-default-calendar URL. (Jelmer Vernooij). Caldav: don't path-quote scheme URIs in calendar-user-address-set. (Jelmer Vernooij). Web: only fall back to the `EMAIL` environment variable in. Single-user mode. (Jelmer Vernooij)

GNU GPLv3 self-hosted calendar contacts caldav carddav webdav server python