This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryLogin error handling clarified: server errors are reported as connection issues rather than invalid credentials.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Caps Lock warning on login password field. Adds Caps Lock warning on login password field. Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Feature | Low |
Adds clear message for empty login form submission. Adds clear message for empty login form submission. Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Feature | Low |
Improves login error recovery by highlighting fields and focusing error message. Improves login error recovery by highlighting fields and focusing error message. Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Feature | Low |
Updates login greeting text and background styling; limits username autofocus to pointer devices. Updates login greeting text and background styling; limits username autofocus to pointer devices. Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes password visibility toggle for right‑to‑left languages (Arabic, Persian). Fixes password visibility toggle for right‑to‑left languages (Arabic, Persian). Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Bugfix | Medium |
Eliminates layout shift when single sign‑on is enabled. Eliminates layout shift when single sign‑on is enabled. Source: llm_adapter@2026-07-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes mislabeling server/connection errors as "invalid credentials" during login. Fixes mislabeling server/connection errors as "invalid credentials" during login. Source: llm_adapter@2026-07-13 Confidence: low |
— |
Full changelog
Added
- Caps Lock warning on the login password field. The single most common cause of a false "wrong password" is now surfaced live while you type, and hidden again when the field loses focus.
- Clear message when the login form is submitted empty ("Please enter your username and password") instead of only the fields turning red — announced to screen readers, not conveyed by colour alone.
Fixed
- Login no longer mislabels a server or connection problem as "invalid credentials." A network or server error now shows a distinct message that points self-hosters at their server, so an unreachable server never makes you doubt a correct password. Only a genuine 401 reports wrong credentials.
- Password visibility toggle now works correctly in right-to-left languages (Arabic, Persian) — it sits on the correct side, no longer overlaps typed text, and its tap target meets the 44px comfortable minimum.
- No more layout shift when single sign-on is enabled. The SSO button is resolved before the login screen renders, with a timeout so a slow identity provider never blocks password login.
Changed
- Improved login error recovery. After a failed sign-in both fields are highlighted, focus moves to the error message, and "Forgot password?" is emphasized when password reset is available.
- Warmer login greeting ("Welcome back to your family planner.") and a calmer single-accent background. Username autofocus is now limited to pointer devices, so opening the login screen on a phone no longer pops up the keyboard over the branding.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
- v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
- v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
- v0.66.0 Project renamed from Oikos to Yuvomi.
- v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.
Beta — feedback welcome: [email protected]