Note
As always, we highly recommend making a backup of your databases and files before upgrading!
Important
This release fixes CVE-2026-40196 which allowed a user removed from their default group to still access it via the API.
Big Changes
- Tag Relationships: Tags can now have parents/children, and icons.
- Fractional/Decimal Quantities: You can now have partial quantities like 1.2, 3.45, etc.
- User Settings Stored in DB: Your user preferences are now stored in the DB, settings persist across devices and browsers.
- OpenTelemetry Support: Homebox now has basic OpenTelemetry tracing, logging and error tracking. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.
- More Barcode Providers: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.
- And plenty of other improvements and bug fixes.
What's Changed
- chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1365
- chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1366
- Update to go 1.26, and other various backend updates by @tankerkiller125 in #1364
- chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1370
- Add OpenTelemetry tracing to backend and frontend with full chain support in #1256
- chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by @dependabot[bot] in #1383
- chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1382
- Improve tag handling by @tankerkiller125 and @tonyaellie in #1327
- chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1385
- Add backend to store user settings in the DB by @tankerkiller125 and @tonyaellie in #958
- Add a page for tags by @tonyaellie in #1392
- feat: fractional/decimal quantity by @tankerkiller125 in #1372
- Fix incorrectly generated Swagger docs for
/labelmaker/asset/{id}route by @adarshp in #1084 - chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1399
- chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1400
- feat(frontend): Make group invitation link work when user is logged in by @mdrkrg in #1412
- fix: apply collection currency changes immediately by @IceeAn in #1409
- feat: add OpenFoodFacts as barcode lookup provider by @palini762 in #1406
- Add Open Facts barcode sources by @RobinMJD in #1426
New Contributors
- @adarshp made their first contribution in #1084
- @mdrkrg made their first contribution in #1412
- @palini762 made their first contribution in #1406
- @RobinMJD made their first contribution in #1426
Full Changelog: v0.24.2...v0.25.0