This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
ReleasePort's take
Moderate signalWeblate 2026.7.1 mandates the PostgreSQL btree_gist extension for translation‑memory lookups; the upgrade installs it automatically if the database user has sufficient privileges.
Why it matters: If your Weblate deployment runs on PostgreSQL, ensure the btree_gist extension is installed or grant necessary privileges before upgrading to avoid lookup failures.
Summary
AI summaryWeblate now requires PostgreSQL btree_gist extension for translation memory lookups.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Prevents editing of anonymous user and internal bot accounts via generic user management interface. Prevents editing of anonymous user and internal bot accounts via generic user management interface. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Breaking | High |
Requires PostgreSQL btree_gist extension for translation memory lookups; migration installs it automatically if privileges allow. Requires PostgreSQL btree_gist extension for translation memory lookups; migration installs it automatically if privileges allow. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds INTERNAL_BOT_EMAIL_TEMPLATE setting to customize bot e‑mail addresses. Adds INTERNAL_BOT_EMAIL_TEMPLATE setting to customize bot e‑mail addresses. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds filters for current‑user comments and separate source string comment lookups in string search. Adds filters for current‑user comments and separate source string comment lookups in string search. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds automatic watching of projects when "Automatically watch projects on contribution" is enabled for comments and suggestions. Adds automatic watching of projects when "Automatically watch projects on contribution" is enabled for comments and suggestions. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Shows status icon for restricted components in component listings. Shows status icon for restricted components in component listings. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Warns when regular GNU gettext PO files are configured as monolingual PO files in component diagnostics. Warns when regular GNU gettext PO files are configured as monolingual PO files in component diagnostics. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Includes strings previously commented on or suggested in comment notifications for translated strings. Includes strings previously commented on or suggested in comment notifications for translated strings. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Updates OpenAI, Mistral, and Anthropic model lists to reflect currently supported models. Updates OpenAI, Mistral, and Anthropic model lists to reflect currently supported models. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Removes component priority icons from translation listings for cleaner display. Removes component priority icons from translation listings for cleaner display. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Adds Discover Weblate management panel, enables discovery by default on registration, and includes protected projects in listings. Adds Discover Weblate management panel, enables discovery by default on registration, and includes protected projects in listings. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Improves clarity of per‑language workflow settings when customization is disabled. Improves clarity of per‑language workflow settings when customization is disabled. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Matches screenshot searches without an explicit field to screenshot names only and links the search box to full documentation. Matches screenshot searches without an explicit field to screenshot names only and links the search box to full documentation. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Performance | Medium |
Improves speed of translation memory fuzzy lookups on large memories. Improves speed of translation memory fuzzy lookups on large memories. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Performance | Low |
Reuses materialized team membership data for permission checks, improving lookup speed. Reuses materialized team membership data for permission checks, improving lookup speed. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes Fedora Messaging addon reliability issues. Fixes Fedora Messaging addon reliability issues. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes punctuation spacing check from flagging Markdown image markers as French punctuation. Fixes punctuation spacing check from flagging Markdown image markers as French punctuation. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes GitHub App setup to explain workspace requirement instead of permission error. Fixes GitHub App setup to explain workspace requirement instead of permission error. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes LLM suggestion settings to avoid showing null for empty language‑specific instructions. Fixes LLM suggestion settings to avoid showing null for empty language‑specific instructions. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes Azure AI Translator settings to reject malformed region names before connectivity validation. Fixes Azure AI Translator settings to reject malformed region names before connectivity validation. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Low |
Provides more specific reasons for permission‑denied messages when saving translations, editing glossaries, or voting on suggestions. Provides more specific reasons for permission‑denied messages when saving translations, editing glossaries, or voting on suggestions. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Stabilizes filtered translation and zen navigation by reusing a session result list, keeping positions and counts consistent after filtering changes. Stabilizes filtered translation and zen navigation by reusing a session result list, keeping positions and counts consistent after filtering changes. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Isolates anonymous user permission caches between requests to prevent cross‑request contamination. Isolates anonymous user permission caches between requests to prevent cross‑request contamination. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Prevents Things to check panel from using error highlighting for non‑error suggestion states. Prevents Things to check panel from using error highlighting for non‑error suggestion states. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Automatically adds invited projects to the user’s watched projects upon acceptance. Automatically adds invited projects to the user’s watched projects upon acceptance. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Eliminates JSON parsing error when dismissing a failing check in the translation editor. Eliminates JSON parsing error when dismissing a failing check in the translation editor. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Refactor | Low |
Clarifies Hosted Weblate repository access guidance in code‑hosting integrations documentation. Clarifies Hosted Weblate repository access guidance in code‑hosting integrations documentation. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Released on July 10th 2026.
New features
- Added
INTERNAL_BOT_EMAIL_TEMPLATEto customize internal bot e-mail addresses.
Improvements
-
Restricted components now show a status icon in component listings.
-
Permission checks now reuse materialized team membership data from lightweight relation lookups.
-
Documented that intermediate language files are hidden from language listings and can make target strings read-only.
-
Component diagnostics now warn when regular GNU gettext PO (Portable Object) PO files are configured as monolingual PO files.
-
Translation memory fuzzy lookups are now faster on large translation memories.
-
Permission denied messages when saving translations, editing glossaries, or voting on suggestions now show more specific reasons.
-
Comment notifications for strings you translated now also include strings you previously commented on or suggested translations for.
-
Comments and suggestions now auto-watch the project when Automatically watch projects on contribution is enabled.
-
Clarified Hosted Weblate repository access guidance in Code-hosting integrations.
-
Searching for strings now includes filters for comments by the current user and separate source string comment lookups.
-
Code-hosting account pages now consistently use Code-hosting connections and provider-neutral connected account wording.
-
Discover Weblate registration can now be started from the management interface without manually copying the activation token.
-
Discover Weblate can now be managed from a dedicated management panel, registration starts with discovery enabled, and protected projects are included in the listing.
-
Updated the OpenAI, Mistral, and Anthropic model lists for currently supported models.
Bug fixes
-
Filtered translation and zen navigation now reuse a stable session result list, keeping positions and counts stable after translated strings leave the filter.
-
Component priority icons are no longer shown on translation listings.
-
Punctuation spacing no longer flags Markdown image markers as French punctuation and now shows which punctuation marks triggered the check.
-
Fedora Messaging received several reliability fixes.
-
The Things to check panel no longer uses error highlighting for suggestions and other non-error translation states.
-
Translation workflow customization now makes it clearer when per-language workflow settings are disabled until customization is enabled.
-
Anonymous user permission caches are now isolated between requests.
-
GitHub App setup now explains that a workspace is required instead of showing a permission error when no workspace exists.
-
LLM automatic suggestion settings no longer show
nullfor empty language-specific instructions. -
File format feature tables now better match actual format support, including descriptions, context, plural metadata, obsolete string removal, specialized file extensions, and merged variants.
-
Accepting a project invitation now automatically adds the project to the user’s watched projects.
-
Dismissing a failing check no longer shows a JSON parsing error in the translation editor.
-
Screenshot searches without an explicit field now match screenshot names only, and the search box links to the full screenshot search documentation.
-
Anonymous and internal bot accounts can no longer be edited through generic user management.
-
LLM machine translation suggestions now recover from more malformed structured JSON replies.
-
Azure AI Translator settings now reject malformed region names before validating service connectivity.
Upgrading
Please follow Generic upgrade instructions in order to perform update.
- Weblate now requires the PostgreSQL
btree_gistextension for translation memory lookups. The migration installs it automatically when the database user has sufficient privileges. Installations using a non-superuser database user should pre-create it before upgrading; see Creating a database in PostgreSQL.
Contributors
Code contributions
Michal Čihař, Karen Konou, Weblate CI, Benjamin Alan Jamie, Kartik Ohri
Translations contributions
Michal Čihař, António Oliveira, 大学没毕业, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), hoanghuy309, Libre, VfBFan, Peter Vančo, Jim Kats, ButterflyOfFire, Kiên Trần Trung, skittles poopy, Ulrik, Horus68, Mickaël Binos, Adam Havránek
Documentation contributions
Michal Čihař, mayank-dev-15, Benjamin Alan Jamie
Breaking Changes
- Weblate requires the PostgreSQL `btree_gist` extension; installations must pre-create it before upgrade if using a non‑superuser database user.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Earlier breaking changes
- vweblate-2026.6 'weblate.workspaces' must be added to INSTALLED_APPS during upgrade.
- vweblate-2026.5 Weblate uses calendar versioning for releases
- vweblate-2026.5 ALTCHA widget v3 protocol Argon2id proof-of-work
- vweblate-2026.5 dos-eol flag deprecated use dos_eol parameter instead
- vweblate-2026.5 set_language_team replaced with po_set_language_team file parameter
Beta — feedback welcome: [email protected]