This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryFixed CalDAV reminder sync deleting all mirrored reminders on failure and Apple Calendar failing to delete deleted iCloud events.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Critical |
Fixes data loss when CalDAV fetch fails, preventing deletion of all mirrored reminders. Fixes data loss when CalDAV fetch fails, preventing deletion of all mirrored reminders. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | High |
Fixes retention of deleted Apple Calendar events in Yuvomi after iCloud deletion. Fixes retention of deleted Apple Calendar events in Yuvomi after iCloud deletion. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | High |
Prevents data loss by not deleting mirrored CalDAV reminders on fetch failure. Prevents data loss by not deleting mirrored CalDAV reminders on fetch failure. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Fixed
- CalDAV reminders: a single failed fetch could delete every mirrored reminder of an account. The sync mirrors Apple Reminders lists into Tasks or Shopping and prunes rows that vanished remotely, but it treated "the server returned nothing" as "everything was deleted remotely" — including when the fetch had just failed and the sync had already skipped that list. One transient iCloud error was therefore enough to wipe all imported tasks or shopping items of that account, taking their subtasks, assignments and document links with them via CASCADE; a re-import could not restore those, since it creates new rows. An empty result now never deletes anything and logs a warning instead, and a list that could not be fetched suspends deletion for its whole target module. Found while auditing the other sync providers for the issues fixed in #508.
- Apple Calendar (legacy single-account sync via
APPLE_*): events deleted in iCloud stayed in Yuvomi forever — the same defect fixed for multi-account CalDAV in v1.23.1. The inbound sync only ever inserted and updated. It now runs the same deletion pass, with the same guards: only synced Apple events of that calendar are affected, calendars whose fetch failed are never pruned, and a calendar returning no events at all is left alone with a warning.
Full Changelog: https://github.com/ulsklyc/yuvomi/compare/v1.23.1...v1.23.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
- v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
- v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
- v0.66.0 Project renamed from Oikos to Yuvomi.
- v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.
Beta — feedback welcome: [email protected]