This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Bug Fixes, 5.4.0, and 2026-07-18 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Arabic localization. Adds Arabic localization. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Feature | Low |
Adds manual logo search box with PNG prioritization. Adds manual logo search box with PNG prioritization. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Feature | Low |
Adds OIDC_REQUIRE_EMAIL_VERIFIED and SSRF_ALLOWLIST environment variables. Adds OIDC_REQUIRE_EMAIL_VERIFIED and SSRF_ALLOWLIST environment variables. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes AI recommendations handling varied provider responses. Fixes AI recommendations handling varied provider responses. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes deletion of orphaned logos to account for themed variants. Fixes deletion of orphaned logos to account for themed variants. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes email notification test rejecting non‑admin users. Fixes email notification test rejecting non‑admin users. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes notification test/send requests hanging on unreachable hosts. Fixes notification test/send requests hanging on unreachable hosts. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes progress bar showing 100 % when next payment is more than one cycle away. Fixes progress bar showing 100 % when next payment is more than one cycle away. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Fixes service worker caching stale logo search results and broken images as logos. Fixes service worker caching stale logo search results and broken images as logos. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Low |
Pins Discord notification action to a specific commit SHA. Pins Discord notification action to a specific commit SHA. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Low |
Ensures stats page uses themed logo variants. Ensures stats page uses themed logo variants. Source: granite4.1:30b@2026-07-18-audit Confidence: low |
— |
Full changelog
5.4.0 (2026-07-18)
Features
- add Arabic localization (aff3ed0)
- add manual logo search box and png prioritization (aff3ed0)
- add OIDC_REQUIRE_EMAIL_VERIFIED environment variable and SSRF_ALLOWLIST environment variable (aff3ed0)
Bug Fixes
- ai recommendations not handling varied provider responses (aff3ed0)
- deleting orphaned logos not taking into account themed variants (aff3ed0)
- email notification test rejecting non-admin users (aff3ed0)
- notification test/send requests hanging on unreachable hosts (aff3ed0)
- pin discord notification action to a commit sha (aff3ed0)
- progress bar showing 100% when next payment is more than one cycle away (aff3ed0)
- service worker caching stale logo search results and broken images as logos (aff3ed0)
- stats page not using themed logo variants (aff3ed0)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Wallos
Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
Beta — feedback welcome: [email protected]