17 oct. 2026

v0.27.0

Équipe

[!CAUTION] Homebox now defaults to blocking notifiers to all internal IP addresses, if you have internal services with RFC1918 IPs that Homebox needs access to for webhooks or otherwise, please review our documentation on notifier security configuration: https://homebox.software/en/user-guide/notifiers/#network-security-for-notifiers

What's New

This release includes significant improvements to search, including tokenization for database-based searching, and the ability to use Meilisearch as a backend. See our documentation for configuration: https://homebox.software/en/quick-start/configure/search/

Security Issues Patched

This release fixes 15 security issues:

As usual, we thank all security researchers who reported issues.

What's Changed

flake.lock: Update by @6543 in https://github.com/sysadminsmedia/homebox/pull/1558
chore: more consistent css by @andrewhong04 in https://github.com/sysadminsmedia/homebox/pull/1559
fix: various other issues with v0.26.x by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1564
linting improvements and apply formatting fixes by @harrisony in https://github.com/sysadminsmedia/homebox/pull/1567
Fix update-currencies CI job: restcountries API name field returns string instead of object by @tankerkiller125 with @Copilot in https://github.com/sysadminsmedia/homebox/pull/1570
chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1568
fix: backup memory usage by @lpiepiora in https://github.com/sysadminsmedia/homebox/pull/1582
fix: various bugs by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1596
feat: replace the deprecated countries API with v5 by @ydkmlt84 in https://github.com/sysadminsmedia/homebox/pull/1622
Update currencies.json by @github-actions[bot] in https://github.com/sysadminsmedia/homebox/pull/1638
Fix/currency krone labels by @JacosVerksted in https://github.com/sysadminsmedia/homebox/pull/1640
fix: a few random crash fixes by @harrisony in https://github.com/sysadminsmedia/homebox/pull/1628
Fix item detail photo grid to load thumbnails instead of originals by @WangLeto in https://github.com/sysadminsmedia/homebox/pull/1607
fix: clamp processedChars before slicing in wrapText by @SAY-5 in https://github.com/sysadminsmedia/homebox/pull/1658
fix: preserve asset ID when re-importing items by import ref (#1100) by @TowyTowy in https://github.com/sysadminsmedia/homebox/pull/1610
fix: resolve golangci-lint failures in Go CI by @harrisony in https://github.com/sysadminsmedia/homebox/pull/1629
fix: use standard Cross-Origin header names in SecurityHeaders by @Ajithkumar003-dev in https://github.com/sysadminsmedia/homebox/pull/1682
fix(ci): attest the published manifest list digest instead of a copied source manifest by @Datastream-x86 in https://github.com/sysadminsmedia/homebox/pull/1685
fix broken internal links in contribute docs by @Gorghs in https://github.com/sysadminsmedia/homebox/pull/1689
Fixed bug in Quickstart instructions by @stephenlf in https://github.com/sysadminsmedia/homebox/pull/1687
feat: use full path in location search by @lpiepiora in https://github.com/sysadminsmedia/homebox/pull/1511
fix: infinite preference sync feedback loop and default item page size by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1632
Update currencies.json by @github-actions[bot] in https://github.com/sysadminsmedia/homebox/pull/1695
docs: fix typo extenal -> external by @vaibhav8a in https://github.com/sysadminsmedia/homebox/pull/1705
fix: dates (hopefully) by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1708
fix(devcontainer): bump Go feature to 1.26 to match go.mod by @lonerockz in https://github.com/sysadminsmedia/homebox/pull/1710
fix: make repo docker-compose.yml startable by @lonerockz in https://github.com/sysadminsmedia/homebox/pull/1711
fix(lint): extract repeated notifier URL fixture into a constant by @landscapejohn in https://github.com/sysadminsmedia/homebox/pull/1722
Return barcode results when one provider fails by @justadityaraj in https://github.com/sysadminsmedia/homebox/pull/1727
Fix Traditional Chinese label generator crash by @justadityaraj in https://github.com/sysadminsmedia/homebox/pull/1728
your -> you are / you're by @Some1withgithub in https://github.com/sysadminsmedia/homebox/pull/1724
fix(scanner): guard AR overlay against locations with no children by @costajohnt in https://github.com/sysadminsmedia/homebox/pull/1741
docs: explain how Ensure Asset IDs treats an ID of 0 versus an empty one by @costajohnt in https://github.com/sysadminsmedia/homebox/pull/1743
fix: redirect back to tags list after deleting a tag by @costajohnt in https://github.com/sysadminsmedia/homebox/pull/1744
docs: publish the Entity Types page the user guide already links to by @vaibhav8a in https://github.com/sysadminsmedia/homebox/pull/1748
feat: better search by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1550
fix: child item seperate location by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1696
fix: roll back thumbnail transaction on all errors to prevent DB lockups by @marazmarci in https://github.com/sysadminsmedia/homebox/pull/1761
Update currencies.json by @github-actions[bot] in https://github.com/sysadminsmedia/homebox/pull/1793

New Contributors

@andrewhong04 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1559
@ydkmlt84 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1622
@JacosVerksted made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1640
@WangLeto made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1607
@SAY-5 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1658
@TowyTowy made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1610
@Ajithkumar003-dev made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1682
@Datastream-x86 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1685
@Gorghs made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1689
@stephenlf made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1687
@vaibhav8a made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1705
@lonerockz made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1710
@landscapejohn made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1722
@justadityaraj made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1727
@Some1withgithub made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1724
@costajohnt made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1741
@marazmarci made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1761

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.26.2...v0.27.0

Source GitHub

v0.27.0

What's New

Security Issues Patched

What's Changed

New Contributors

Idées livrées