github sysadminsmedia/homebox v0.25.0

9 hours ago

Note

As always, we highly recommend making a backup of your databases and files before upgrading!

Important

This release fixes CVE-2026-40196 which allowed a user removed from their default group to still access it via the API.

Big Changes

  • Tag Relationships: Tags can now have parents/children, and icons.
  • Fractional/Decimal Quantities: You can now have partial quantities like 1.2, 3.45, etc.
  • User Settings Stored in DB: Your user preferences are now stored in the DB, settings persist across devices and browsers.
  • OpenTelemetry Support: Homebox now has basic OpenTelemetry tracing, logging and error tracking. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.
  • More Barcode Providers: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.
  • And plenty of other improvements and bug fixes.

What's Changed

  • chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1365
  • chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1366
  • Update to go 1.26, and other various backend updates by @tankerkiller125 in #1364
  • chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1370
  • Add OpenTelemetry tracing to backend and frontend with full chain support in #1256
  • chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by @dependabot[bot] in #1383
  • chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1382
  • Improve tag handling by @tankerkiller125 and @tonyaellie in #1327
  • chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1385
  • Add backend to store user settings in the DB by @tankerkiller125 and @tonyaellie in #958
  • Add a page for tags by @tonyaellie in #1392
  • feat: fractional/decimal quantity by @tankerkiller125 in #1372
  • Fix incorrectly generated Swagger docs for /labelmaker/asset/{id} route by @adarshp in #1084
  • chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1399
  • chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1400
  • feat(frontend): Make group invitation link work when user is logged in by @mdrkrg in #1412
  • fix: apply collection currency changes immediately by @IceeAn in #1409
  • feat: add OpenFoodFacts as barcode lookup provider by @palini762 in #1406
  • Add Open Facts barcode sources by @RobinMJD in #1426

New Contributors

Full Changelog: v0.24.2...v0.25.0

Don't miss a new homebox release

NewReleases is sending notifications on new releases.