Change Detection - Package Updates

[Package Updates]

[1.28.4]

• Update changedetection.io to 0.53.6
• Full Changelog
• Pip installs - remove flask patch and pin library versions by @​dgtlmoon in #​3912 #​3910
• Fixing exclude compression (which has some kind of memory leak with flask-socketio)

[Package Updates]

[1.28.5]

• Update changedetection.io to 0.53.7
• Full Changelog
• Upgrading flask-socketio ( #​3910 ) by @​dgtlmoon in #​3918
• Bump referencing from 0.35.1 to 0.37.0 by @​dependabot[bot] in #​3677
• Dont pin referencing library by @​dgtlmoon in #​3919

[Package Updates]

[1.29.1]

• Update changedetection.io to 0.54.2
• Full Changelog
• Fixing change_datetime notification token (and adding test) by @​dgtlmoon in #​3922
• Notification Token {{diff}} can accept arguments like {{diff_added(lines=5, context=2)}} by @​dgtlmoon in #​3923
• Processor extensible API for updating by @​dgtlmoon in #​3902
• Update jsonpath-ng requirement from ~=1.7.0 to ~=1.8.0 by @​dependabot[bot] in #​3929
• Bump the all group with 2 updates by @​dependabot[bot] in #​3931
• Unresolvable hostnames should still be added, they are security checked at fetch time by @​dgtlmoon in #​3933

[Package Updates]

[1.29.2]

• Update changedetection.io to 0.54.3
• Full Changelog
• Update messages.po in French translation by @​RithyNicolasTAN in #​3926
• Adding Ukrainian (uk) translations, rebuilding translations. by @​dgtlmoon in #​3936
• CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc) by @​dgtlmoon in #​3938

[Package Updates]

[1.29.3]

• Update changedetection.io to 0.54.4
• Full Changelog
• fix(i18n): accept translated confirmation text when clearing snapshot history by @​eren-karakus0 in #​3940
• CVE-2026-29038 - Reflected XSS in RSS Tag Error Response
• CVE-2026-29039 - XPath - Arbitrary File Read via unparsed-text()
• CVE-2026-29065 - fix(backups): patch zip slip advisory, zip bomb, upload size limit, UUID validation, secret.txt leakage, and download edge cases

[Package Updates]

[1.29.4]

• Update changedetection.io to 0.54.5
• Full Changelog
• Restock - No need to extract the text because it's not used anyway by @​dgtlmoon in #​3951
• Content fetching -Better detection of other encodings, Replace/upgrade broken UTF-8 , Ensure rest of retrieved content is UTF-8 for the app by @​dgtlmoon in #​3954
• UI - Price amount is sometimes string or integer by @​dgtlmoon in #​3950
• *CI - Bump the all group with 5 updates by @​dependabot[bot] in #​3955
• Various memory and CPU improvements by @​dgtlmoon in #​3960
• Add complete Spanish translation (es) by @​adriangc24 in #​3961
• Create (POST) tag/group through API do not save processor_config_restock_diff values by @​dgtlmoon in #​3968
• UI - Fixing Preview "GO" version button by @​dgtlmoon in #​3969
• API - Invert changes_only flag for include_equal parameter by @​dgtlmoon in #​3976

[Package Updates]

[1.29.6]

• Update changedetection.io to 0.54.7
• Full Changelog
• XPath json-doc() Arbitrary File Read Bypass ( Similar fix as CVE-2026-29039 )
• CVE-2026-33981 - Environment Variable Disclosure via jq env Builtin in Include Filters
• UI - Text tidyup by @​dgtlmoon in #​3989
• Realtime - Suppress socket.io errors in logs by @​dgtlmoon in #​3991
• Restock - Add previous_price to restock values #​3987 by @​dgtlmoon in #​3993
• fix: correct critical errors in Spanish (es) translation by @​rasputino in #​3994
• last_error should be cleared if page content was the same and there was no error by @​dgtlmoon in #​3997
• fix: Czech translation strings updated by @​svetlemodry in #​4008

[Package Updates]

[1.29.7]

• Update changedetection.io to 0.54.8
• Full Changelog
• CVE-2026-35490 - Authentication Bypass via Decorator Ordering
• Extendable theme pluggy implementation by @​dgtlmoon in #​4011

[Package Updates]

[1.29.8]

• Update changedetection.io to 0.54.9
• Full Changelog
• Add Japanese translation (ja) by @​skkzsh in #​4019
• Update Selenium RemoteConnection to use ClientConfig for timeout by @​mikaelz in #​4027
• Fix SCREENSHOT_MAX_HEIGHT not enforced: cap viewport step_size and clip stitched output to max capture height #​3810 by @​dgtlmoon in #​4030
• Notification - Adding tokens {{diff_changed_from}} and {{diff_changed_to}} #​3818 by @​dgtlmoon in #​4031
• Feature - Groups/tag - Apply a group by specifying a wildcard, ie *mysite.com* by @​dgtlmoon in #​4032
• Add Portuguese (Brasil) translation by @​mstrey in #​4033
• fix: word-level diff ignores include_change_type_prefix by @​lawrence3699 in #​4037
• Groups - Set custom colour for tag/group/label background by @​dgtlmoon in #​4040
• Fix/step failure notification crash by @​dgtlmoon in #​4041
• Test - Word level diff - Re #​4037 by @​dgtlmoon in #​4042