Weekly Recap - Jul 12 to Jul 19, 2026

Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security fix, also tagged patch-now. Both releases anchored a scattered maintenance wave across privacy and self-hosting stacks, Vanadium tracking Chromium to 150.0.7871, AdGuard Home pushing two beta builds and a stable 0.107.78 patch, uBlock Origin 1.72 refining scriptlets. No coordinated disclosure, no CVE cluster, but enough operator-lift releases to keep patch logs busy. AI volume again topped 40 items, mostly nightly churn. Bitcoin and Lightning stayed quiet; Nostr shipped incremental client updates. The week had a clear self-hosting security pulse at the top and long tail below.

Freedom.Tech · Jul 19, 2026