Open Source Journal #1
An update shipped last week that can permanently destroy your search index. The warning is one line, buried in the release notes. And it is not even our top story. Issue 1 of the Open Source Journal, a news show about the software you actually host. No tutorials, no opinions, just news, every two weeks. This issue: September 6 to 12, 2026, 71 updates, the 11 that matter. RAGFlow, Authentik, Jellyfin, File Browser, Appwrite, Immich, Matomo, Ollama, Dify, and the AI fight between SourceHut, Codeberg and Debian. Tell us in the comments what we missed. Issue two lands in two weeks. CHAPTERS 0:00 The line nobody read 0:20 Why we built this show 0:45 What got fixed while you were sleeping 2:00 The obituary: File Browser is archived 3:28 What's new: Appwrite, Immich, Matomo, Ollama 5:10 Trap of the fortnight: Dify and Weaviate 5:42 The debate: SourceHut, Codeberg, Debian 6:46 Three things to do today ELESTIO Website: https://elest.io Catalog: https://elest.io/fully-managed-services Blog: https://blog.elest.io X: https://x.com/elest_io LinkedIn: https://www.linkedin.com/company/elestio GitHub: https://github.com/elestio YouTube: https://www.youtube.com/@elestio SOURCES, STORY BY STORY RAGFlow 0.27.2 and CVE-2026-54283 https://github.com/infiniflow/ragflow/releases/tag/v0.27.2 https://github.com/advisories/GHSA-82w8-qh3p-5jfq Authentik, five security fixes on September 9 https://github.com/goauthentik/authentik/releases/tag/version/2026.8.2 https://github.com/goauthentik/authentik/security/advisories/GHSA-cqj8-fxxf-9pg7 https://github.com/goauthentik/authentik/security/advisories/GHSA-qgqp-xh8r-v73r Jellyfin 12.0 https://jellyfin.org/posts/jellyfin-release-12.0/ https://github.com/jellyfin/jellyfin/releases/tag/v12.0 File Browser archived, and the maintainer's own words https://github.com/filebrowser/filebrowser https://hacdias.com/2026/07/28/filebrowser/ FileBrowser Quantum, the active fork https://github.com/gtsteffaniak/filebrowser https://github.com/gtsteffaniak/filebrowser/releases/tag/v2.0.6-beta Appwrite 2.1 and the S3 API https://appwrite.io/blog/post/appwrite-2-1-self-hosted https://appwrite.io/blog/post/announcing-s3-api Immich 3.2.0 https://immich.app/blog/v3.2.0-release Matomo 6.0 beta 1 https://matomo.org/changelog/matomo-6-0-0-beta/ Ollama 0.34.0 https://github.com/ollama/ollama/releases/tag/v0.34.0 Dify 1.17.1 and the Weaviate migration path https://github.com/langgenius/dify/releases/tag/1.17.1 https://docs.dify.ai/en/self-host/deploy/troubleshooting/weaviate-server-migration-path The AI debate: SourceHut, Codeberg, Debian https://sourcehut.org/blog/2026-08-27-tos-changes-and-llms/ https://itsfoss.com/news/codeberg-bans-ai-contributions/ https://www.debian.org/vote/2026/vote_002 This was issue one, so tell us in the comments what we missed, what ran too long, and what you want covered next. We read all of it, and issue two lands in two weeks. #OpenSource #SelfHosted #Homelab #SysAdmin