Release history
project-nomad releases
Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere.
All releases
32 shown
- SSRF vulnerability in map file download with stricter URL validation and private IP blocking (CWE-918)
- Backend error message sanitization to prevent information disclosure (CWE-209)
- AI model download cancellation with consistent progress UI
- Downloads staged to .tmp files and atomically renamed
- ZIM batch embedding pipeline fixes
Full changelog
Version 1.31.1 - April 21, 2026
Features
Bug Fixes
- AI Assistant: In-progress model downloads can now be cancelled properly and the progress UI now matches that of file downloads. Thanks @chriscrosstalk for the contribution!
- AI Assistant: Fixed an issue where the AI Assistant settings page could crash if a model object did not have a details property. Thanks @hestela for the fix!
- AI Assistant: Fixed an issue with non-embeddable files being queued for embedding and flooding logs with errors. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
- AI Assistant: Fixed an issue with ZIM batch embedding using the wrong batch count and causing remaining batches to be skipped. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
- AI Assistant: Fixed an issue with ZIM content extraction only extracting the first-level children of the article body and thus missing a lot of content. Thanks @sbruschke for the bug report and @chriscrosstalk for the fix!
- Disk Collector: Improved reporting for NFS mount stats and display in the UI. Thanks @bgauger and @bravosierra99 for the contribution!
- Downloads: Downloads are now staged to .tmp files and atomically renamed upon completion to prevent issues with incomplete/corrupt files. Thanks @artbird309 for the contribution!
- Downloads: Removed a duplicate error listener and improved stability when handling Range requests for file downloads. Thanks @jakeaturner for the contribution!
- Downloads: Added improved handling for corrupt ZIM file downloads and removed duplicate Ollama download logs. Thanks @aegisman for the contribution!
- Security: Closed a potential SSRF vulnerability in the map file download functionality by implementing stricter URL validation and blocking private IP ranges. Thanks @LuisMIguelFurlanettoSousa for the fix!
- Security: Sanitized error messages from the backend to prevent potential information disclosure. Thanks @LuisMIguelFurlanettoSousa for the fix!
- UI: Fixed an issue with broken pagination for the Content Explorer that could cause some users to see a "No records found" message indefinitely. Thanks @johno10661 for the bug report and @chriscrosstalk for the fix!
- UI: Fixed an issue where all storage devices could report as "NAS Storage" regardless of actual type. Thanks @bgauger for the fix!
Improvements
- AI Assistant: Now uses the currently loaded model for query rewriting and chat title generation for improved performance and consistency. Thanks @hestela for the contribution!
- AI Assistant: When a remote Ollama URL is configured, the Command Center will now attempt to stop NOMAD's local Ollama container to free up resources and avoid confusion. Thanks @chriscrosstalk for the contribution!
- Dependencies: Updated various dependencies to close security vulnerabilities and improve stability
- Docs: Added a "Community Add-Ons" page to the documentation to highlight some of the amazing community contributions that have been made since launch. Thanks @chriscrosstalk for the contribution!
- Privacy: Added the appropriate environment variable to disable telemetry for the Qdrant container. Note that this will only take effect on new installations of if the Qdrant container is force re-installed on existing installations. Thanks @berkdamerc for the find and @chriscrosstalk for the contribution!
📝 All Changes
- ci: ensure tags are force fetched on semantic release (bd20ba8)
- docs: update release notes (5cbe6f5)
- fix(rag): repair ZIM embedding pipeline (sync filter, batch gate, DOM walk) (#745) (216509a)
- fix(ZIM): accumulate across Kiwix pages to prevent empty Content Explorer (#746) (810a70a)
- fix(AI): stop local nomad_ollama container when remote Ollama is configured (#744) (6646b34)
- fix(UI): gate NAS Storage label on network filesystem type (#749) (33727c7)
- fix(qdrant): disable anonymous telemetry by default (#747) (0c76a19)
- docs: add Community Add-Ons page with field manuals + W3Schools packs (#753) (0565564)
- docs: update release notes (b7b3bf0)
- build(deps): bump lodash from 4.17.23 to 4.18.1 in /admin (#643) (7ec3d79)
- build(deps-dev): bump vite from 6.4.1 to 6.4.2 in /admin (#677) (b6bb0f2)
- build(deps): bump @adonisjs/http-server from 7.8.0 to 7.8.1 in /admin (#724) (92b6f3c)
- build(deps): bump protobufjs from 7.5.4 to 7.5.5 in /admin (#737) (6ec0678)
- build(deps): bump protocol-buffers-schema from 3.6.0 to 3.6.1 in /admin (#736) (56dbf95)
- build(deps): bump axios from 1.13.5 to 1.15.0 in /admin (#708) (5f0463b)
- build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /admin (#729) (540c0ab)
- fix(AI): allow cancelling in-progress model downloads and ensure consistent progress UI (#701) (6c33a96)
- fix(security): SSRF validation for map downloads and error sanitization (CWE-918, CWE-209) (#552) (806b2c1)
- fix(Downloads): remove duplicate err listnr and improv Range req stability (2b8c847)
- fix(downloads): stage downloads to .tmp to prevent Kiwix loading partial files (8d026da)
- fix(disk-display): show NAS Storage label in fsSize fallback path (151b454)
- fix(disk-collector): fix storage reporting for NFS mounts (84399b1)
- fix: prevent ZIM corrupt file crash and deduplicate Ollama download logs (#741) (c8cb79a)
- fix(AI): qwen2.5 loading on every chat message (#649) (6510f42)
- fix(AI): add null check to model name (#645) (4d86616)
- Removed Ollama Cloud support, forcing users to migrate to supported remote hosts
- Key validation added to the settings read API endpoint
- URL validation for ZIM downloads improved to prevent SSRF vulnerabilities
- Remote AI models can run on separate hardware via compatible OpenAI hosts
- EPUB files are now embeddable in the Knowledge Base
- Map viewers support custom location markers with persisted database
Fixed benchmark scoring for below-average hardware, ZIM file API deletion method, Docker NVIDIA runtime detection, improved error reporting and default versions for Ollama/CyberChef, increased MySQL retry stability.
Updated Full Wikipedia URL reference to point to current Kiwix mirror.
- Dark mode (Night Ops)
- Debug Info modal
- Self-contained Docker image
- Benchmark HMAC signing secret rotation
- Path traversal protection
- SSRF mitigation
- GPU troubleshooting guidance
- Last-used model memory
- View active embedding jobs
- Remove documents from knowledge base
- Early Access Channel
- Ollama model pagination
- Response streaming for faster feedback
- Reasoning stream display for thinking models
Fixed AI Assistant error handling for missing Ollama models, improved GPU detection logic, gracefully redirect legacy documentation links, disabled chat suggestions by default.
Fixed stale cache issues when checking for system updates and improved user guidance during update process.
- Dynamic manifest support
- Version checking for resources
- Query rewriting for KB
- ZIM content embedding
- Model download progress display
- Fuzzy search for models
- Global error reporting with notifications
- Auto-add NOMAD docs to KB
- Friendly resource names display
- Removed Open WebUI support
- Native AI chat interface
- Wikipedia Selector
- Ollama GPU support (NVIDIA/AMD)
- Expanded curated categories
- Improved tier modal UX
- Maps auto-download base assets
- Benchmark requirements for sharing
- Docker container URL resolution utility and networking improvements
- Persistent tier selection for curated collections
- System benchmark feature with NOMAD Score
- Queue management with single command support
- Settings nomenclature updates with tiered content collections
Full changelog
1.17.0 (2026-01-23)
Bug Fixes
- benchmark: Add settings nav link, fix submission bug, improve UX (6efd049)
- Benchmark: cleanup types for SSOT (438d683)
- Benchmark: icon definitions (525eecb)
- Benchmark: remove unused seeder definition (8092fb5)
- Benchmark: use node:crypto IFO uuid package (a42b6b8)
- docs: Remove broken service links that pointed to invalid routes (6c650a0)
- EasySetup: select valid primary disk for storage projection bar (42a18c8)
- Maps: static path resolution (f49b9ab)
- Notifications: improve styling (8ae47e0)
- UI: remove splash screen (4ef954c)
Features
- Tiered collection categories UI with Education & Reference and Survival & Preparedness tiers
- Easy Setup wizard Step 1 redesigned with user-friendly category display
- Windows Docker Desktop support for local development
Full changelog
1.15.0 (2026-01-19)
Bug Fixes
- Notification auto-dismiss not working due to stale closure (6f0c829)
- Use jsDelivr CDN for categories JSON to avoid CORS issues (8e6e44e)
Features
- Add Education & Reference category with 3 tiers (05441bd)
- Add storage projection bar to easy setup wizard (7bf3f25)
- Add Survival & Preparedness category with 3 tiers (b007f5e)
- Add tiered collection categories UI (3cb5dce)
- Add Windows Docker Desktop support for local development (d86c78d)
- Redesign Easy Setup wizard Step 1 with user-friendly categories (#65) (59b45a7)
- Auto-fetch latest curated collections
- Improved Docker container state management
Full changelog
- Admin container pull_policy has been changed to 'always', which may affect deployments that relied on cached images.
- Easy setup wizard (WIP)
- Self-updates (WIP)
- Improved app cards with custom icon support
Removes disk info file during uninstallation via scripts to prevent leftover configuration data.
Fixed a bug in the admin interface that caused issues with disk info mount and stability.
Fixed various admin issues including favicons, base map assets download URL, container healthcheck, duplicate install request handling, memory usage indicators, service install status management, and Zim download API client method. Updated install processes to ensure disk info file mounting, latest image pulls, update script executability, and modern docker compose usage.