Oikos

v1.5.0 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 17d Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

docker family family-planner home-automation planner-app privacy-first

+4 more

progressive-web-app pwa self-hosted selfhosted-apps

Affected surfaces

auth rbac

Summary

AI summary

Added one-time import of calendar events from an .ics file or shared feed into editable local events.

Type	Severity	Summary	CVE
Security	Medium	Uses existing SSRF-protected fetch with 10 MB / 15 s limits for import URLs. Uses existing SSRF-protected fetch with 10 MB / 15 s limits for import URLs. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature
Feature	Medium	Adds one-time import of events from .ics file or feed URL into editable local calendar events. Adds one-time import of events from .ics file or feed URL into editable local calendar events. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Preserves recurring, all-day, and timed events during import, reducing recurrence rules to daily/weekly/monthly/yearly subset. Preserves recurring, all-day, and timed events during import, reducing recurrence rules to daily/weekly/monthly/yearly subset. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Skips re-importing already imported events when re-importing the same feed URL. Skips re-importing already imported events when re-importing the same feed URL. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—

Full changelog

Calendar: one-time import of events from an .ics file or a shared calendar feed URL into editable local events, under Settings → Sync → Calendar → "Import calendar". Unlike an ICS subscription (which stays read-only and auto-synced), imported events become your own editable events and are not synced afterwards — the migration path when moving from another calendar. Recurring events are kept as a series (the recurrence rule is reduced to the supported daily/weekly/monthly/yearly subset), all-day and timed events are preserved, and re-importing the same feed skips events that were already imported. The URL path reuses the SSRF-protected fetch (10 MB / 15 s limits) used by subscriptions. (#437)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Oikos

Get notified when new releases ship.

About Oikos

Family planner for small households

v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
v0.66.0 Project renamed from Oikos to Yuvomi.
v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.