v26.9.7 v3.26.0
siyuan-note/siyuanSep 9, 2026 → Sep 14, 20264 days between releases
What's New
Major security hardening and ingredient substitution features added in v3.26.0
Breaking Changes
- Harden server-initiated HTTP against SSRF and DNS rebinding
- Requires HTTP_ALLOW_LIST configuration for internal network targets
New Features
- Ingredient substitutions for recipes
- Link recipe notes to individual steps
- OIDC avatars
- Bottom sheets UI
Improvements
- Adjust ingredient spacing
- Pluralize substitutions if main ingredient is pluralized
Bug Fixes
- Fix E2A-SML voice discovery issues in Docker
- Fix Colab and Kaggle notebook launchers
Upgrade Notes
Before installing v26.9.7, delete the ./tmp and ./run folders. For v3.26.0, configure HTTP_ALLOW_LIST if you use internal network targets for webhooks or imports to prevent SSRF blocking.
The Two Releases
v26.9.7
Sep 9, 2026· 1 month ago
This release focuses on fixing voice discovery issues in Docker and launching problems for Colab and Kaggle notebooks, along with necessary installation instructions for data folders.
Full release notesv3.26.0
Sep 14, 2026· 1 month ago
A major feature release for Mealie featuring ingredient substitutions, recipe note linking to steps, and significant security hardening regarding server-initiated HTTP requests.
Full release notes