This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summaryFixed medication form saving error, paperless connection test failure behind reverse proxies, and CardDAV sync returning zero contacts.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes paperless connection test returning 406 Not Acceptable behind reverse proxies. Fixes paperless connection test returning 406 Not Acceptable behind reverse proxies. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Fixes CardDAV sync reporting 0 contacts synced with certain servers. Fixes CardDAV sync reporting 0 contacts synced with certain servers. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Fixes medication form saving error caused by duplicate id. Fixes medication form saving error caused by duplicate id. Source: llm_adapter@2026-07-19 Confidence: low |
— |
| Bugfix | Low |
Prevents medication form submission error from duplicate IDs. Prevents medication form submission error from duplicate IDs. Source: granite4.1:30b@2026-07-19-audit Confidence: low |
— |
Full changelog
Fixed
- Adding a medication failed with a generic "An unexpected error occurred" toast and never saved, even with a fully valid form. The medication form's
<form>element and its "Form" input shared the same id, so reading the field value threw before the request was ever sent (no server-side log). The input now has a unique id and the value reader is null-safe. (#528) - Paperless connection test returned "406 Not Acceptable" behind reverse proxies such as Traefik. The test hit the API root
/api/, which redirects to the Swagger HTML view and rejects the JSONAcceptheader. It now tests the real JSON endpoint/api/documents/?page_size=1, which avoids the redirect and also verifies the token and document access. (#527) - CardDAV sync reported "0 contacts synced" with servers such as mailbox.org. The default address-book query filters on
FN, which some servers answer with an empty result even when the address book is full. When the filtered query returns nothing, sync now enumerates the contact URLs via a filter-free PROPFIND and fetches them by multiget. (#529)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
- v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
- v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
- v0.66.0 Project renamed from Oikos to Yuvomi.
- v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.
Beta — feedback welcome: [email protected]