[!NOTE] As always, we highly recommend making a backup of your databases and files before upgrading!

[!IMPORTANT] This release fixes CVE-2026-40196 which allowed a user removed from their default group to still access it via the API.

Big Changes

• Tag Relationships: Tags can now have parents/children, and icons.

• Fractional/Decimal Quantities: You can now have partial quantities like 1.2, 3.45, etc.

• User Settings Stored in DB: Your user preferences are now stored in the DB, settings persist across devices and browsers.

• OpenTelemetry Support: Homebox now has basic OpenTelemetry tracing, logging and error tracking. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.

• More Barcode Providers: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.

• And plenty of other improvements and bug fixes.

What's Changed

• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1365

• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1366

• Update to go 1.26, and other various backend updates by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1364

• chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1370

• Add OpenTelemetry tracing to backend and frontend with full chain support in https://github.com/sysadminsmedia/homebox/pull/1256

• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1383

• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1382

• Improve tag handling by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1327

• chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1385

• Add backend to store user settings in the DB by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/958

• Add a page for tags by @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1392

• feat: fractional/decimal quantity by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1372

• Fix incorrectly generated Swagger docs for /labelmaker/asset/{id} route by @adarshp in https://github.com/sysadminsmedia/homebox/pull/1084

• chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1399

• chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1400

• feat(frontend): Make group invitation link work when user is logged in by @mdrkrg in https://github.com/sysadminsmedia/homebox/pull/1412

• fix: apply collection currency changes immediately by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1409

• feat: add OpenFoodFacts as barcode lookup provider by @palini762 in https://github.com/sysadminsmedia/homebox/pull/1406

• Add Open Facts barcode sources by @RobinMJD in https://github.com/sysadminsmedia/homebox/pull/1426

New Contributors

• @adarshp made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1084

• @mdrkrg made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1412

• @palini762 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1406

• @RobinMJD made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1426

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.24.2...v0.25.0

Source GitHub