This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Summary
AI summaryUpdates Image Downloads, StartWRT Checksums, and BananaPi-F3 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds StartWRT, an OpenWrt‑based router OS for home self‑hosting. Adds StartWRT, an OpenWrt‑based router OS for home self‑hosting. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds per‑device Security Profiles assigned by Ethernet port, WiFi password, or inbound VPN. Adds per‑device Security Profiles assigned by Ethernet port, WiFi password, or inbound VPN. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds inbound and outbound WireGuard VPNs with support for VPN chaining. Adds inbound and outbound WireGuard VPNs with support for VPN chaining. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds WiFi schedule functionality. Adds WiFi schedule functionality. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds dynamic DNS and published‑port forwarding capabilities. Adds dynamic DNS and published‑port forwarding capabilities. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Provides flashable SD card image for SpaceMiT K1 (BananaPi‑F3) as fresh install. Provides flashable SD card image for SpaceMiT K1 (BananaPi‑F3) as fresh install. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Provides sysupgrade image for OTA updates via OpenWrt sysupgrade. Provides sysupgrade image for OTA updates via OpenWrt sysupgrade. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Includes SHA‑256 and BLAKE‑3 checksums for both images. Includes SHA‑256 and BLAKE‑3 checksums for both images. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
What's Changed
First stable release of StartWRT — Start9's OpenWrt-based router OS for home
self-hosting, built around per-device Security Profiles (assigned by Ethernet
port, WiFi password, or inbound VPN), with inbound/outbound WireGuard VPNs and
VPN chaining, WiFi schedules, dynamic DNS, and published-port forwarding.
Ships as a flashable image for the SpaceMiT K1 (BananaPi-F3), with OTA updates
delivered through the Start9 registry.
Image Downloads
StartWRT Checksums
SHA-256
91c9ca2c07f720768752ed5ff6bbf673077057b81d37390df0fb53ec029f441d startwrt-1.0.0-4c42944_spacemit-k1-sdcard.img.gz
a26f435fdd051828efb04833e16e38ce8578e802c11d8cec9fcbc41ef48722c4 startwrt-1.0.0-4c42944_spacemit-k1-sysupgrade.img.gz
BLAKE-3
ff067def9b4d7c0d47dce2afa1934a34e88c2b77081614cc5d651f78bcecb4c5 startwrt-1.0.0-4c42944_spacemit-k1-sdcard.img.gz
bd00fbf77ae6734cbe2e203e161d924b9ebc01afb6521899e398f08a6548be7d startwrt-1.0.0-4c42944_spacemit-k1-sysupgrade.img.gz
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StartOS
Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer.
Related context
Related tools
Earlier breaking changes
- vstart-sdk/v2.0.4 'setupMain' callback now accepts any DaemonBuildable rather than requiring a Daemons.
- vstart-sdk/v2.0.4 `Daemons.dynamic` now takes `effects` and returns a `DaemonReconciler` instead of replacing `main`.
- v0.4.0-beta.9 Previous backups incompatible with v0.4.0; create fresh backup after updating.
Beta — feedback welcome: [email protected]