squidowl/halloy 2026.5

on GitHub

Added:

• Setting to limit reaction display length (buffer.channel.message.max_reaction_display) and maximum length (buffer.channel.message.max_reaction_chars)
• Emoji and command picker entries are now clickable and insert the selected completion directly into the input.
• Multi-line send support (uses IRCv3 multiline when available; note: incompatible with the current release of soju [v0.10.1], expected to be resolved in a future version)
• Typing indicator support (uses IRCv3 typing)
• Add emoji reactions for supported servers (uses IRCv3 react)
• New "config" option to sidebar.order_channels_by. Uses server.<server_name>.channels to determine order.
• Case insensitive sort of query names in sidebar
• Copied order_channels_by from sidebar to server.<name>, defaults to sidebar.order_channels_by if empty.
• Alias commands (see buffer.commands.aliases)
• Exec command support for generating input from shell command output (see buffer.commands.exec)
• The titlebar now displays the current buffer for each window.
• /plain-me, /format-me, /plain-msg, /format-msg, /plain-notice, and /format-notice commands were added to provide /plain//format functionality to the /me, /msg, and /notice commands

Fixed:

• Improved message length calculation (when known the bytes required to relay a message are included in the calculation, when unknown an estimate is used)
• Prevent interaction leakage behind open modals: clicks, cursor changes, and hover states no longer affect underlying UI while preserving outside-click and Esc to close
• Prevent clicks from passing through completion picker overlays to content behind them (for example nicknames in the buffer).
• Regression that could make the application slow to close
• Apply locale to context menu, copy, and date separator timestamps
• Fixed direct message notifications when excludes are present
• Fixed reloading config for channel sorting.
• Fixed handling of URLs ending with ).
• Auto-format rules are applied to the content of /me, /msg, and /notice commands

Changed:

• Spoilers (/f ||hello world||) now reveal on click instead of hover

Security:

• Fixed file transfer path traversal vulnerability when using DCC
• Config directories and config.toml are now created with owner-only permissions

Thanks:

• Contributions: @KaiKorla, @englut, @mango766, @ncfavier, @classabbyamp
• Bug reports: chmod222, @whitequark, @englut, sebbu, @ascarion, @4e554c4c, @BKVad1m, @mango766, esden
• Feature requests: @gAlleb, @jtbx, @cyrneko, @englut, @ascarion