v2026.10.0 v2.25.0
louislam/dockgeOct 2, 2026 → Oct 2, 20260 days between releases
What's New
Mise secures supply chains; Postiz adds comments and connectors
Breaking Changes
- `--from-git` removed from `mise bootstrap` (use `--adopt`)
- vfox tool plugins using keyless cosign must pin an identity
- Prisma schema changed with new columns and `OAuthSelfHostedAuthorization` table
New Features
- Keyless cosign verification now checks signer identity
- Inline comments on post previews with replies and anonymous commenting
- Self-hosted MCP connector for Postiz Cloud
- Per-cask `appdir` option for Homebrew casks
- New `slsa_signer_identity` and `slsa_signer_issuer` options
Improvements
- Locked SLSA installs work again without registry signer
- Media reads no longer hang a publish
- `mise backends switch` handles stale lock entries correctly
Bug Fixes
- Instagram Reels and TikTok cover image fixes
- Dozens of provider fixes turning 'Unknown Error' into readable messages
- Fixed `mise backends switch` to handle stale lock entries
Upgrade Notes
For Mise, use `--adopt` instead of `--from-git` and run `mise trust` for untrusted projects. For Postiz, apply the new Prisma schema and configure optional environment variables like `RECAPTCHA_SITE_KEY`.
The Two Releases
v2026.10.0: Stricter signer checks for cosign and GitHub attestations, trust for inline options in .tool-versions
Oct 2, 2026· 20 days ago
Tightens supply-chain verification with stricter signer checks for cosign and GitHub attestations. Adds trust requirements for inline options in `.tool-versions` and a per-cask `appdir` option.
Full release notesPreview comments, self-hosted MCP connector, responsive app & 50+ provider fixes
Oct 2, 2026· 20 days ago
This release introduces inline comments on post previews, a self-hosted MCP connector, and a responsive layout pass. It also includes fixes for media reads, Instagram Reels covers, and a large sweep of provider fixes for social media platforms.
Full release notes