Open Source

A collection of 106 posts

Catalog Updates

Elestio Catalog Updates: 142 New Releases This Week (November 1-7, 2026)

142 stable releases landed across 52 services in the Elestio catalogue between 1 and 7 November. Nine of them fix security issues, one identity provider shipped more CVE fixes in a single patch than most projects do in a year, and two projects went to a new major version. Start

Catalog Updates

Elestio Catalog Updates: 174 New Releases This Week (October 25-31, 2026)

174 stable releases landed across 52 services in the Elestio catalogue between 25 and 31 October. Two of them patched the same bug in two different databases on the same day, and the most interesting security fix of the week was not in the application at all. Start with the

Self-Hosted Weekly

Self-Hosted Weekly: Week 44, 2026. Brotli Hits KEV, HACS Absorbed, Forgejo Patches

A compression library you have never configured, patched in private eight months ago, is now on CISA's actively-exploited list and sitting inside half your stack. Elsewhere, the tools that move your code had a rough week, and Home Assistant is about to absorb the add-on store

Catalog Updates

Elestio Catalog Updates: 166 New Releases This Week (October 18-24, 2026)

One hundred and sixty-six stable releases shipped across 66 services in the Elestio catalog between October 18 and October 24. Many of them were fixes for two incidents: the eMudhra certificate authority keys that turned out to be guessable, and the PHP2Shell flaws in PHP itself. Several of the

Catalog Updates

Elestio Catalog Updates: 143 New Releases This Week (October 11-17, 2026)

One hundred and forty-three stable releases shipped across 48 services in the Elestio catalog between October 11 and October 17. Two of this week's updates can't be rolled back without a backup: Supabase's Storage migrations and InfluxDB 3.12's catalog only

Catalog Updates

Elestio Catalog Updates: 125 New Releases This Week (October 4-10, 2026)

One hundred and twenty-five stable releases shipped across 51 services in the Elestio catalog between October 4 and October 10. A lot of this week's security work fixed the same kind of bug: a permission check that didn't hold. Vault, Portainer, Appwrite and ToolJet all

Catalog Updates

Elestio Catalog Updates: 113 New Releases This Week (September 27 - October 3, 2026)

One hundred and thirteen stable releases shipped across 47 services in the Elestio catalog between September 27 and October 3. Most of the urgent work this week is in identity: Keycloak fixed 14 CVEs in one patch release, and Zitadel closed two account takeover bugs. If a project shipped one

Self-Hosted Weekly

Self-Hosted Weekly: Week 40, 2026. Gitea 28, Keycloak Agent Tokens, Weekly Ubuntu Kernels

Week 40: Gitea 28 routes Git traffic through an egress proxy, Keycloak 26.8 adds delegated tokens for AI agents, Ubuntu goes to weekly kernels.

MariaDB

Elestio Joins the MariaDB Foundation as a Silver Sponsor

Elestio is now a MariaDB Foundation Silver Sponsor. What the Foundation does, why we back it, and how to upgrade off end-of-life MariaDB 10.6.

Catalog Updates

Elestio Catalog Updates: 106 New Releases This Week (September 20-26, 2026)

One hundred and six stable releases shipped across 47 services in the Elestio catalog between September 20 and 26. The headline is security again: GitLab pushed a critical patch for two flaws in its regular expression engine, and WordPress 7.1.2 was being exploited the day it came out.

Self-Hosted Weekly

Self-Hosted Weekly: Week 39, 2026. WordPress Exploited, Portainer CE Frozen, Ubuntu Escape

WordPress shipped two security releases in five days, and attackers were probing the second fix within hours. Ubuntu has a container escape with a public exploit and no kernel patch. Portainer confirmed that its free edition stops at 2.x. Here's what mattered this week. 1. WordPress patches

Catalog Updates

Elestio Catalog Updates: 127 New Releases This Week (September 13-19, 2026)

One hundred and twenty-seven stable releases landed across 57 services in the Elestio catalog between September 13 and 19. Security set the tone: WordPress pushed 11 fixes to ten branches at once, Keycloak closed six CVEs including a privilege escalation, and Redis shipped the same security patch to five

Self-Hosted Weekly

Self-Hosted Weekly: Week 38, 2026. Keycloak 6 CVEs, Nextcloud 35, Postgres 19 Slips

Your identity provider shipped six CVEs in one patch, your file server got a major version, and the database everyone expected in September became an October release. Two projects also changed what "open source" means for them, one by licence and one by walking away. Here's

News

Elestio + T Cloud: Managed Open Source on Deutsche Telekom

If you run open source on T Cloud today, you already know how this goes. Postgres, Kafka, Keycloak, whatever the stack looks like, somebody on your team owns the patching, the backups, and the 3 a.m. page when a volume fills up. That work is real, it never stops,

Catalog Updates

Elestio Catalog Updates: 71 New Releases This Week (September 6-12, 2026)

Seventy-one stable releases landed across 47 services in the Elestio catalog between September 6 and 12. It was a heavy security week: Authentik shipped five security patches across three branches on the same day, Jellyfin 12 turned off legacy authentication by default, and Huginn closed an SSRF hole that

Self-Hosted Weekly

Self-Hosted Weekly: Week 37, 2026. Jellyfin 12, Nitter Lives, SourceHut Bans AI

A media server dropped a version number it never needed, two forges drew opposite conclusions about AI, and a project with tens of thousands of stars quietly turned off the lights. Here's what actually mattered in self-hosted land. 1. Jellyfin 12.0 lands, and drops the pointless

Tutorial

Self-Host Continuwuity: A Lightweight Matrix Homeserver

Matrix has a reputation problem. Ask around about self-hosting your own chat server and someone will tell you about the Postgres tuning, the worker processes, the box that quietly ate 4 GB of RAM to serve nine people. That reputation is mostly about Synapse, the reference implementation, and it

Catalog Updates

Elestio Catalog Updates: 99 New Releases This Week (August 30 - September 5, 2026)

Some weeks the catalog is all feature work. Not this one. Four projects patched every supported branch at once, which usually means something landed in the advisory queue that nobody wanted sitting in the open. Everything that moved between August 30 and September 5, patches first. Security Alerts Keycloak 26.

AI

OpenClaw and Hermes: AI Agents Without Self-Hosting an LLM

You deploy OpenClaw, open it up, and it asks which model you want to use. So you go looking for the model. You spin up Ollama next to it, pull a 7B, ask your shiny new agent a question, and wait. And wait. Then you resize the VM, and it

Self-Hosted Weekly

Self-Hosted Weekly: Week 36, 2026. AWS Buys DuckLabs, CRA Deadline, K8s 1.37

Short week, dense news. An acquisition that says a lot about how open-source governance is being structured in 2026, a compliance deadline that lands in seven days, and Kubernetes quietly shipping the feature that makes small clusters cheaper to run. Here is what mattered. 1. AWS bought DuckLabs. DuckDB

AI

Self-Host Neo4j: Knowledge Graph Memory for Your AI Agent

Ask your agent "what breaks if we upgrade the auth service" and watch a pure vector store handle it. It embeds the question and returns the five most similar chunks: the auth README, a paragraph about upgrades, a runbook using the same vocabulary. What you asked for was

Self-Hosted

Paperless-ngx + Tika: Index Office Docs and Emails

You scan a contract, drop it into Paperless-ngx, and thirty seconds later you can search the text inside it. It feels like magic the first time. Then you drop in the .docx version of that same contract and it lands in your archive as a file with a name

AI

Self-Host Microcks: Mock the APIs Your AI Agent Calls

There is a failure mode that shows up over and over once you put an agent in a retry loop, and it goes like this. The loop says "check the order status, and if it fails, retry with backoff." The upstream API returns a 502 once. The agent

Catalog Updates

Elestio Catalog Updates: 117 New Releases This Week (August 23-29, 2026)

One hundred and seventeen stable releases landed across 47 services in the Elestio catalog between August 23 and 29. Six of them are security fixes you should not sit on, and one patches a remote-code-execution path. Here is the week, sorted so you can find your stack fast.

Self-Hosted Weekly

Self-Hosted Weekly: Week 35, 2026. PostgreSQL CVEs, Mojo, Planka SSO

Some weeks the self-hosted world coasts. This was not one of them. The largest security patch PostgreSQL has ever shipped, a Kanban board that locked SSO behind a paywall overnight, and a compiler that went open source three weeks after a $3.9 billion acquisition. Here are the seven