This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryUpdates Authentication / Profile, pre-release, and Full changelog https://github.com/sipcapture/homer/compare/11.0.225...11.0.226 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
GET /api/v4/me exposes the email field for the Profile UI. GET /api/v4/me exposes the email field for the Profile UI. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Bugfix | Medium |
Profile password/email update fix for the bundled UI. Profile password/email update fix for the bundled UI. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Bugfix | Medium |
PATCH /api/v4/me now allows internal-auth users to update email and password. PATCH /api/v4/me now allows internal-auth users to update email and password. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Bugfix | Medium |
External-auth accounts receive a 403 response with a clear message when attempting profile updates. External-auth accounts receive a 403 response with a clear message when attempting profile updates. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
Full changelog
Homer Core 11.0.226 (pre-release)
Profile password/email update fix for the bundled UI.
Authentication / Profile
PATCH /api/v4/me: Profile panel can update email and password for internal-auth users (was 404).GET /api/v4/me: exposesemailfield for the Profile UI.- External-auth accounts (OAuth/LDAP without a local
usersrow) receive 403 with a clear message.
Fixes #742.
Upgrade
Install binaries/packages from this pre-release tag, or build from homer11 at 11.0.226.
homer --version # homer-core 11.0.226
Full changelog
https://github.com/sipcapture/homer/compare/11.0.225...11.0.226
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v11.0.222 The API endpoint /api/v1/config has been removed.
Beta — feedback welcome: [email protected]