Payjoin reaches its first stable release while wallets and Lightning tooling quietly harden

The week split into two clusters. Privacy-focused mobile clients shipped hardening and UX polish across multiple platforms, Blockstream Green Android 5.6 added manual coin selection and stuck swap recovery, Amber 6.5.1 fixed NIP-46 connection re-encryption during key rotation, and Thunderbird for Android 22.0 added an incognito keyboard setting. AI releases stayed noisy at 52 stories, but the signal was OpenAI's Daybreak Red expansion: GPT-5.6-Cyber entered authorized vulnerability research, narrowing the defensive window. The Lightning stack saw lnd 0.21.2-beta fix migration-path issues handling orphaned blinded totals, while Payjoin Dev Kit shipped 1.0.0 stable, supporting both synchronous BIP 78 and asynchronous BIP 77 flows. Bitcoin logged 33 stories, Privacy 34, Self-hosting 13, Nostr 13. Three releases carried "Patch now" severity with no disclosed CVEs, down from last week's active-exploit wave.

#freedomtech#foundation
Payjoin reaches its first stable release while wallets and Lightning tooling quietly harden
## Patch board - **[Blockstream Green Android 5.6.0](https://freedom.tech/posts/2026-08-11-blockstream-green-android-5-6-0/)**. What's new in this release Added - Manual coin selection for Bitcoin and Liquid Bitcoin sends - AMP2 account support backed - Stuck swap recovery actions - Greenlight notification handling in devel... - **[Qwen Code 0.21.8](https://freedom.tech/posts/2026-08-10-qwen-code-0-21-8/)**. Highlights Restored real-time autofix support for pull requests opened from forks review events to credentialed workflows. - **[Expanding Daybreak as the Cyber Defense Window Narrows](https://openai.com/index/expanding-daybreak-as-the-cyber-defense-window-narrows)**. Meet GPT-5.6-Cyber, OpenAI's cybersecurity-specific model available through Daybreak Red for authorized vulnerability research, exploit validation, and security testing. - **[Bitkey App 2026.11.2](https://freedom.tech/posts/2026-08-11-bitkey-app-2026-11-2/)**. Access the Bitkey release notes to view the features included in this release. ## Weekly threads ### Wallet coin control and Lightning recovery hardening Blockstream Green Android 5.6 and Foundation Envoy 2.3.1 both shipped coin-selection and reliability fixes within 72 hours. Green added manual UTXO picking for Bitcoin and Liquid sends plus stuck-swap recovery actions; Envoy 2.3.1 followed with bug fixes and reliability improvements. The pattern suggests wallet teams are converging on operator-visible UTXO management as a baseline feature for non-custodial flows. ### Payjoin graduates, JoinMarket and Cashu continue hardening Payjoin Dev Kit 1.0.0 marked the first stable release supporting BIP 77 async and BIP 78 sync payjoins. The same week JoinMarket-NG 0.36.0 shipped as a pre-release labeled "security hardening and way more," and Cashu TS delivered two releases (5.0.0-rc.6 and 4.8.0) focused on input validation and parsing fixes. Privacy tooling remains in active hardening across three different architectural approaches to collaborative transactions. ### lnd, Lightning Terminal, and ZEUS embed the same beta migration fix lnd 0.21.2-beta fixed a migration path that could fail on historical routes containing orphaned blinded total-amount fields. Lightning Terminal 0.17.1-alpha bundled that exact lnd version, and ZEUS 13.2.0-alpha1 embedded it alongside LDK 24-word seed support. Operators running any of the three should verify that historical payment data migrates cleanly if upgrading from pre-0.21 lnd. ### llama.cpp nightly cadence: nine tagged builds in seven days llama.cpp shipped b10344, b10356, b10359, b10369, b10375, b10419, b10425, b10434, b10437, b10447, and b10448 between August 11 and August 16. Each tag represents a single merged PR, ROCm 7.14 targeting, Kimi-K3 text model support, MiniMax model variants, Nemotron MTP flags, reasoning-effort template support. The pace reflects continuous integration of model-specific patches rather than coordinated feature releases. Operators self-hosting inference should track the model support matrix, not the build numbers. ## Release board ### Privacy - **[Thunderbird for Android 22.0](https://freedom.tech/posts/2026-08-11-thunderbird-for-android-22-0/)**. Incognito Keyboard privacy setting disables Google keyboard from learning words - Thundermail interim screen when adding an account Selected sort option now shows an indicator in the sort menu Messages could scroll horizonta... - **[Vanadium 151.0.7922](https://freedom.tech/posts/2026-08-12-vanadium-151-0-7922/)**. Changes in version 151.0.7922.137.0: update to Chromium 151.0.7922.137 A full list of changes from the previous release (version 151.0.7922.108.0) is available through the Git commit log between the releases. - **[uBlock Origin 1.73](https://freedom.tech/posts/2026-08-13-ublock-origin-1-73/)**. - Add procedural operator content(...), to lookup elements inside template tags - Improve prevent-clipboard-write scriptlet - Improve json-edit scriptlet - Revisit scriptlets' getExtraArgs implementation ---------- Commits to Master Sinc... - **[Signal Android 8.23.2](https://freedom.tech/posts/2026-08-14-signal-android-8-23-2/)**. The media editor has been completely redesigned to better support tablets and foldable devices, and now it looks great on screens of all sizes. - **[Thunderbird for Android Thunderbird Beta 23.0b1](https://freedom.tech/posts/2026-08-10-thunderbird-for-android/)**. Signature field only accepted single-line text in Composition defaults - **[NewPipe Extractor 0.26.5](https://freedom.tech/posts/2026-08-15-newpipe-extractor-0-26-5/)**. This is a hotfix release with just one small, but important - Fix media.ccc.de live streams - 1533 ### Self-hosting - **[authentik 2026.8.0-rc7](https://freedom.tech/posts/2026-08-10-authentik-2026-8-0-rc7/)**. See core: Actors (cherry-pick 24353 to version-2026.8) website/docs: document API scope and domain join required authenti... - **[n8n beta](https://freedom.tech/posts/2026-08-14-n8n/)**. 2.35.3 (2026-08-14) Bug Fixes core: Allow details field in continueErrorOutput mode (e58a680) core: Bound workflow publication outbox record processing with an abort deadline (69140c0) editor: Update ready-to-run demo templates to a curr... - **[N8n 2.35.3](https://freedom.tech/posts/2026-08-14-n8n-2-35-3/)**. 2.35.3 (2026-08-14) Bug Fixes core: Allow details field in continueErrorOutput mode (e58a680) core: Bound workflow publication outbox record processing with an abort deadline (69140c0) editor: Update ready-to-run demo templates to a curr... - **[Gitea 1.27.2](https://freedom.tech/posts/2026-08-13-gitea-1-27-2/)**. SECURITY update collaborator access mode and httpsign ( 38894, 38862) external render resolve pull request target reusable workflows at the base commit markup render Fix(deps)... - **[Nextcloud iOS Version 34.1.3](https://freedom.tech/posts/2026-08-15-nextcloud-ios-version-34-1-3/)**. Remove bottom inset from direct editing viewer remove placeholder file provider action add media repeat and auto-adv... ### AI - **[Ollama 0.32.9](https://freedom.tech/posts/2026-08-11-ollama-0-32-9/)**. NVIDIA Nemotron 3.5 Lightning NVIDIA Nemotron 3.5 Lightning is an open 30B mixture-of-experts (MoE) model with 3B active parameters built for that execution layer of always-on agents. - **[InvokeAI 6.13.8](https://freedom.tech/posts/2026-08-13-invokeai-6-13-8/)**. InvokeAI Version 6.13.8 This is a security patch release Recent versions of InvokeAI through 6.13.7 contain two security holes: 1. - **[vLLM 0.27.1](https://freedom.tech/posts/2026-08-11-vllm-0-27-1/)**. This is a patch release on top of v0.27.0. - **[Hugging Face Transformers Release 5.15.0](https://freedom.tech/posts/2026-08-10-hugging-face-transformers-release-5-15-0/)**. Release v5.15.0 New Model additions Meta Muse Glimmer Muse Glimmer, released today, is Meta's new multimodal model, especially designed for agentic use cases. - **[opencode 1.18.17](https://freedom.tech/posts/2026-08-12-opencode-1-18-17/)**. Core Bugfixes - Made session compaction keep complete recent turns and produce clearer summaries for smaller models. - **[Cline SDK 0.0.75](https://freedom.tech/posts/2026-08-14-cline-sdk-0-0-75/)**. - Added provider-executed web search. - **[langchain== 1.3.15](https://freedom.tech/posts/2026-08-11-langchain-1-3-15/)**. Changes since langchain==1.3.14 release(langchain): 1.3.15 expose trace policy on AgentMiddleware chore(langchain): fix type errors in tests chore: bump h2 from 4.3.0 to 4.4.1 in /libs/langchain v1 preserve h... - **[langchain-core== 1.5.4](https://freedom.tech/posts/2026-08-11-langchain-core-1-5-4/)**. Changes since langchain-core==1.5.3 release(core): 1.5.4 compat with pydantic 2.14 stop StructuredPrompt from mutating caller kwargs preserve flat tool args schema for RootModel runnables close int... ### Nostr - **[Amber 6.5.1](https://freedom.tech/posts/2026-08-14-amber-6-5-1/)**. Changelog Amber 6.5.1 - Re-encrypt NIP-46 connection secrets stored in the per-account database during Keystore key rotation, so toggling "require unlocked device for key access" no longer leaves connections undecryptable - Fix crash in... - **[Lightning.Pub 0.0.35](https://freedom.tech/posts/2026-08-10-lightning-pub-0-0-35/)**. Lightning.Pub 0.0.35 API - No protobuf or HTTP/Nostr route changes since v0.0.34. - **[Citrine 3.1.0](https://freedom.tech/posts/2026-08-14-citrine-3-1-0/)**. Citrine 3.1.0 - Added NIP-29 relay-based groups support - Added NIP-86 relay management API and settings screen - Added a tool to rebroadcast stored events to selected relays - Offer to purge stored events when banning a pubkey locally -... - **[Sprout Buzz Desktop 0.5.14](https://freedom.tech/posts/2026-08-15-sprout-buzz-desktop-0-5-14/)**. Desktop and shared changes - None Other repository changes - ci(release): remove desktop smoke gate ( 1b3dbcaaea882eeea90359c1db02e306d2f4f50a ) Compare desktop-v0.5.13...desktop-v0.5.14 - **[Vector 0.4.3](https://freedom.tech/posts/2026-08-15-vector-0-4-3/)**. Vec(tor)ious A quick follow-up patch to resolve Tor Connectivity on Windows, as well as improved Concord v2 cross-client stability. - **[Mostro Mobile 1.3.2](https://freedom.tech/posts/2026-08-13-mostro-mobile-1-3-2/)**. Mostro Mobile v1.3.2 A new version of the Mostro P2P Bitcoin trading app is here! - **[NYM Chat 3.73.520](https://freedom.tech/posts/2026-08-14-nym-chat-3-73-520/)**. Hotfix: missed inline script breaking CSP Hotfix: stale messages showing as new - **[Vector Preview channel](https://freedom.tech/posts/2026-08-13-vector/)**. Update manifest for Vector preview builds. ### Bitcoin - **[Payjoin Dev Kit Release 1.0.0](https://freedom.tech/posts/2026-08-12-payjoin-dev-kit-release-1-0-0/)**. Read the Announcement: The first stable release of the payjoin library supports both synchronous BIP 78 payjoins and asynchronous BIP 77 payjoins. - **[lnd 0.21.2-beta](https://freedom.tech/posts/2026-08-13-lnd-0-21-2-beta/)**. Database Migrations This release introduces no new database migrations, but includes two important fixes to existing migration paths: - The now handles historical routes containing an orphaned blinded total amount, preventing... - **[Cashu TS 5.0.0-rc.6](https://freedom.tech/posts/2026-08-12-cashu-ts-5-0-0-rc-6/)**. Mostly a hardening release: input validation and parsing fixes across auth, crypto, transport and wallet. - **[JoinMarket-NG 0.36.0](https://freedom.tech/posts/2026-08-11-joinmarket-ng-0-36-0/)**. Security hardening and way more! - **[RoboSats 0.8.6-alpha](https://freedom.tech/posts/2026-08-15-robosats-0-8-6-alpha/)**. RoboSats v0.8.6-alpha is now out! - **[ZEUS 13.2.0-alpha1](https://freedom.tech/posts/2026-08-13-zeus-13-2-0-alpha1/)**. V13.2.0 Highlights: - LDK: support for 24-word seed phrases - Embedded LND v0.21.2-beta - Cashu CDK upgrade (Minibits compatibility) - Security hardening - Bug fixes chore(deps): bump js-yaml from 3.14.2 to 3.15.0 in /zeus modules/@light... - **[Cashu TS 4.8.0](https://freedom.tech/posts/2026-08-12-cashu-ts-4-8-0/)**. Mostly hardening fixes, a couple of MINOR BREAKING CHANGES to note: Experimental: SigAll ( 1. - **[Cashu CDK 0.17.5](https://freedom.tech/posts/2026-08-15-cashu-cdk-0-17-5/)**. 0.17.5 Added - cdk-mint-rpc: Add BDK wallet balance, transaction history, and address balance queries to the management RPC and CLI ( thesimplekid ). - **[Lightning Terminal 0.17.1-alpha](https://freedom.tech/posts/2026-08-14-lightning-terminal-0-17-1-alpha/)**. This version of Lightning Terminal (LiT) includes lnd v0.21.2-beta and loop v0.34.0-beta. - **[Ledger Live Mobile 4.16.0](https://freedom.tech/posts/2026-08-14-ledger-live-mobile-4-16-0/)**. 4.16.0 Minor Changes - 20278 3d24a89 Thanks @gre-ledger! - **[Ledger Live Desktop 4.16.0](https://freedom.tech/posts/2026-08-14-ledger-live-desktop-4-16-0/)**. 4.16.0 Minor Changes - 20278 3d24a89 Thanks @gre-ledger! - **[Foundation Envoy 2.3.1](https://freedom.tech/posts/2026-08-11-foundation-envoy-2-3-1/)**. Envoy 2.3.1 is a follow-up release to 2.3.0 focused on important bug fixes and reliability improvements. _8 more Bitcoin releases tracked in the weekly totals._ _8 lower-priority releases omitted from the board but counted below._ ## By the numbers - **Stories tracked:** 148 - **Featured:** 51 - **Releases:** 137 - **Active sources:** 183 - **Security patches:** 4 - **Days covered:** 7 **Top beats this week** - **AI:** 52 - **Privacy:** 34 - **Bitcoin:** 33 - **Nostr:** 13 - **Self-hosting:** 13 - **Unspecified:** 3 --- Read on Freedom.Tech: https://freedom.tech/posts/2026-08-16-weekly-recap/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/ Freedom.Tech is powered by [Foundation](https://foundation.xyz). Catch the weekly discussion on [Freedom Tech Friday](https://www.youtube.com/@ungovernablemisfits) via Ungovernable Misfits.

Want to join the discussion?