Oikos

v1.3.1 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 17d Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

docker family family-planner home-automation planner-app privacy-first

+4 more

progressive-web-app pwa self-hosted selfhosted-apps

Affected surfaces

auth

Summary

AI summary

Opt‑in flag ICS_SUBSCRIPTION_ALLOW_PRIVATE_NETWORK enables ICS calendar subscriptions from private‑network HTTP URLs.

Type	Severity	Summary	CVE
Feature	Low	Adds opt‑in flag `ICS_SUBSCRIPTION_ALLOW_PRIVATE_NETWORK` enabling HTTP local/private‑network ICS subscriptions. Adds opt‑in flag `ICS_SUBSCRIPTION_ALLOW_PRIVATE_NETWORK` enabling HTTP local/private‑network ICS subscriptions. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

Calendar: an opt-in ICS_SUBSCRIPTION_ALLOW_PRIVATE_NETWORK environment flag lets ICS calendar subscriptions use http:// URLs and local/private-network feeds (e.g. a Sonarr, Radarr, or Home Assistant calendar in the same LAN). It lifts the built-in SSRF protection for ICS subscriptions only, and defaults to off — enable it only in controlled environments.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Oikos

Get notified when new releases ship.

About Oikos

Family planner for small households

v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
v0.66.0 Project renamed from Oikos to Yuvomi.
v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.