This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
ReleasePort's take
Light signalThe release renames preconfigured LLMs to generic names and enables Authelia on the home network when business mode is selected.
Why it matters: If you use business mode, verify Authelia configuration after upgrade; rename handling requires updating any scripts that reference old LLM identifiers.
Summary
AI summaryRenamed preconfigured LLMs to generic names and enabled Authelia on the home network when business mode is selected.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Caddy headers updated for increased security hardening Caddy headers updated for increased security hardening Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
EmailClassifierAI, OpenSkills, and Linkwarden MCP servers added EmailClassifierAI, OpenSkills, and Linkwarden MCP servers added Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
MCP containers being added for selected services MCP containers being added for selected services Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Authelia enabled on home network for business installs Authelia enabled on home network for business installs Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Shared directories enable volume sharing between services Shared directories enable volume sharing between services Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Consume directory and processes added to speakr Consume directory and processes added to speakr Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Shared directories for documents, photos, and knowledge bases enabled for volume sharing between services Shared directories for documents, photos, and knowledge bases enabled for volume sharing between services Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Dependency | Medium |
Docker updated to most recent version Docker updated to most recent version Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Container images updated for Nextcloud, Immich, Paperless, and others Container images updated for Nextcloud, Immich, Paperless, and others Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Additional race condition prevention measure added to locks Additional race condition prevention measure added to locks Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Reserved docker network pool increased to prevent exhaustion Reserved docker network pool increased to prevent exhaustion Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Selected reserved docker networks resized Selected reserved docker networks resized Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
systemd-resolved masking added after disabling systemd-resolved masking added after disabling Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Installation state check added to LE email notifications Installation state check added to LE email notifications Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Custom images refactored to check repo tag first Custom images refactored to check repo tag first Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Preconfigured LLMs renamed to generic names Preconfigured LLMs renamed to generic names Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Heimdall home page default ordering updated Heimdall home page default ordering updated Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
- Added EmailClassifierAI, OpenSkills (disabled), and Linkwarden MCP Server
- Performed host system updates
- Updated docker to most recent version
- Increased reserved docker network pool
- Resized selected reserved docker networks
- Added another measure to avoid race conditions on locks
- Added shared directories for documents, photos, knowledge bases so that volumes can be shared between services
- Started container image updates - Nextcloud, Immich, Paperless, Dolibarr, OpenWebUI, BarAssistant, Excalidraw
- Started adding MCP containers for selected services
- Renamed preconfigured LLMs to generic names like chat, reason, embed, etc.
- Set authelia to enabled on home network if business is selected during install
- Added mask systemd-resolved after disabling
- Added consume directory and processes to speakr
- Performed numerous other minor updates and bugfixes
- Refactored custom images to check repo for tag first
- Added check for installation state when sending LE info emails
- Performed updates to caddy headers for increased hardened security
- Updated default ordering on heimdall home page
- Renamed default models
- Performed various other updates/bug fixes
Breaking Changes
- Renamed preconfigured LLMs (e.g., chat, reason, embed) replacing previous specific names
- Enabled Authelia by default on the home network when business mode is selected during installation
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About HomeServerHQ
All-in-one home server infrastructure and installer. Have a fully configured email server, VPN, and public website(s) set up in less than an hour, even behind CGNAT.
Related context
Related tools
Beta — feedback welcome: [email protected]