What's Changed

• i18n: Add ja translations for new UI (part 2) by @skkzsh in #4491
• Restock & Price detection - Fix decimal-comma prices ("39,99") being read as 3999 by @jaime-king in #4494
• Update pytest requirement from ~=9.0 to ~=9.1 by @dependabot[bot] in #4504
• feat(jinja2): add unixtime filter to format Unix timestamps in notifications (#3641) by @contentforge-press in #4503
• UI - Language selector should be available on the login page (#4490) by @a-ahmed in #4501
• Update pre-commit requirement from >=4.2.0 to >=4.6.2 by @dependabot[bot] in #4512
• Bump werkzeug from 3.1.6 to 3.1.9 by @dependabot[bot] in #4514
• Update lxml requirement from !=5.2.0,!=5.2.1,<7,>=4.8.0 to !=5.2.0,!=5.2.1,>=6.1.3,<7 by @dependabot[bot] in #4505
• Bump cryptography from 44.0.0 to 50.0.2 by @dependabot[bot] in #4513
• Update python-engineio requirement from <5,>=4.13.1 to >=4.14.0,<5 by @dependabot[bot] in #4516
• Update jsonschema requirement from <5.0.0,>=4.24.0 to >=4.26.0,<5.0.0 by @dependabot[bot] in #4517
• Update greenlet requirement from >=3.0.3 to >=3.5.6 by @dependabot[bot] in #4519
• Bump apprise from 1.13.1 to 2.0.1 by @dependabot[bot] in #4518
• Update selenium requirement from ~=4.49.0 to ~=4.50.0 by @dependabot[bot] in #4520
• Update ruff requirement from >=0.11.2 to >=0.16.10 by @dependabot[bot] in #4521
• Update pyppeteerstealth requirement from >=0.0.4 to >=0.0.5 by @dependabot[bot] in #4522
• Update beautifulsoup4 requirement from <=4.14.3,>=4.0.0 to <=4.15.0,>=4.15.0 by @dependabot[bot] in #4523
• Update orjson requirement from ~=3.11 to ~=3.12 by @dependabot[bot] in #4524
• Update jsonpath-ng requirement from ~=1.8.0 to ~=1.9.1 by @dependabot[bot] in #4527
• Bump elementpath from 5.1.1 to 5.1.4 by @dependabot[bot] in #4526
• Update pydantic requirement from <3.0,>=2.0 to >=2.13.5,<3.0 by @dependabot[bot] in #4528
• ci: keep release metadata out of inline shell and lock down the container publish path by @Totara-thib in #4510
• Update pytest-mock requirement from ~=3.15 to ~=3.16 by @dependabot[bot] in #4532

New Contributors

• @jaime-king made their first contribution in #4494
• @contentforge-press made their first contribution in #4503
• @a-ahmed made their first contribution in #4501
• @Totara-thib made their first contribution in #4510

Full Changelog: 0.60.8...0.60.9

What's Changed

• Adding HTTP browser caching of UI elements by @dgtlmoon in #4450
• UI - Set language on reverse proxy/subdirectory hosting was acting wrong, just redirect it to watchlist so theres no failures. by @dgtlmoon in #4453
• System - Ensure import+API update values are verified types by @dgtlmoon in #4458
• Update chardet requirement from >2.3.0 to >=7.6.0 by @dependabot[bot] in #4455
• i18n: Use msgctxt and correct ja translations for -ed forms by @skkzsh in #4460
• i18n: Add ja translations for new UI by @skkzsh in #4464
• UI: make editing a configured LLM model discoverable by @quinnypig in #4400
• Groups - UI fix for #4451 and tweaks by @dgtlmoon in #4466
• Make LLM summary from UI non blocking by @dgtlmoon in #4467
• LLM UI - When LLM is disabled, hide it from the groups settings also by @dgtlmoon in #4471
• LLM timeout improvements (frontend) by @dgtlmoon in #4470
• Llm UI nonblocking by @dgtlmoon in #4469
• Dont allow accidental change of LLM Key by @dgtlmoon in #4473
• First PWA by @dgtlmoon in #4472
• Update selenium requirement from ~=4.31.0 to ~=4.49.0 by @dependabot[bot] in #4456
• Update flask-wtf requirement from ~=1.2 to ~=1.3 by @dependabot[bot] in #4485
• Update python-socketio requirement from <6,>=5.11.0 to >=5.17.0,<6 by @dependabot[bot] in #4486
• Title extract - Limit search window and improve regex - reduce memory usage by @dgtlmoon in #4487
• i18n: Use lazy_pgettext for condition Match label by @skkzsh in #4480
• i18n: Fix untranslated labels by @skkzsh in #4488

Full Changelog: 0.60.7...0.60.8

What's Changed

• Fetch favicon candidates in parallel under one deadline, and fix two ways it could hang by @dgtlmoon in #4435
• Keep history diff title and controls visible while scrolling by @jhedlund in #4412
• General licence cleanups by @dgtlmoon in #4445
• Add watch UI tweaks by @dgtlmoon in #4446
• fix(http): send a single Date header on werkzeug built-in server by @Huang-404-Q in #4372
• UI - Make the 'share watch' optional, reduces visual noise, not really used by non-power users by @dgtlmoon in #4448
• Set Cache-Control: no-store on dynamic responses by default by @DennisGaida in #4319

New Contributors

• @Huang-404-Q made their first contribution in #4372
• @DennisGaida made their first contribution in #4319

Full Changelog: 0.60.6...0.60.7

What's Changed

Browser fetchers - Report the real status code when Chrome aborts a bodiless error response by @dgtlmoon in #4420

feat(ui): show count badges in minimal sidebar by @SammySN-car in #4419

Worker id/available fetcher by @dgtlmoon in #4415

Browser fetchers - Follow re-navigation, and one content-ready deadline (re-targets #4421 + #4422 at master) by @dgtlmoon in #4426

Search modal native submit by @dgtlmoon in #4427

UI - Search modal - keep the search scoped to the tag you were viewing by @dgtlmoon in #4425

UI - Search modal - fix Enter dismissing the form instead of searching by @dgtlmoon in #4428

Dockerfile - actually generate locales, price formatting was silently falling back to C by @dgtlmoon in #4429

Debounce the explicit gc.collect() storm on the watch-check path by @dgtlmoon in #4431

i18n: Update zh_Hant_TW translations by @LaiYueTing in #4430

Favicon on/off - Was not actually applying at fetch time by @dgtlmoon in #4432

Terminate runaway page script before extracting, so a spinning renderer cannot eat the whole fetch by @dgtlmoon in #4433

New Contributors

@SammySN-car made their first contribution in #4419

Full Changelog: 0.60.4...0.60.5

What's Changed

• Add Indonesian (Bahasa Indonesia) translation by @Yoruxyv in #4402
• UI - Left menu folds out ONTOP of content, Improving VisualSelector & BrowserSteps width, Darkmode transitions off. #4380 by @dgtlmoon in #4401
• Fix TestHistoryPathTraversal on macOS, and cover the containment check by @GG5533 in #4390
• API - DELETE for Watch history #4397 by @dgtlmoon in #4403
• Apprise notifications - Updating to 1.13.1 by @dgtlmoon in #4404
• feature: Implemented optional override link by @jhedlund in #4290
• Perf/open link single eval by @dgtlmoon in #4405
• UI - Edit watch - Moving notification error alert to 'error' tab, hiding less used Page Title and Link options under foldout by @dgtlmoon in #4406
• UI - Groups - Fixing button alignment and using better form handling by @dgtlmoon in #4409
• i18n: Update zh_Hant_TW translations by @LaiYueTing in #4264
• UI - Watchlist - bring back Restock & Price column to watchlist overview by @dgtlmoon in #4410

New Contributors

• @Yoruxyv made their first contribution in #4402
• @GG5533 made their first contribution in #4390

Full Changelog: 0.60.3...0.60.4

What's Changed

• fix: report the actual 1-based failed browser-step number (#4200) by @ebarkhordar in #4258
• UI medium refactor by @dgtlmoon in #4183
• Show regex-tagged watches under their group tab by @willyjfarrell in #4267
• Watch history - fix for restock.previous_price returns the first-ever price once a watch has 3+ snapshots by @dgtlmoon in #4268
• Fix LLM token counter race condition by @honma89 in #4276
• fix: Visual Selector renders scraped selectors as text, not markup by @kah-ja in #4282
• fix: sanitize lone unicode surrogates before filtering JSON by @snowyukitty in #4293
• fix: invalidate favicon cache when clearing watch history by @snowyukitty in #4286
• fix: avoid division by zero when logging watch load rate by @snowyukitty in #4289
• UI - Move rendering of each watchlist row out of the watchlist main template so it can be re-used by the realtime update by @dgtlmoon in #4305
• Security: hide the running version from anonymous visitors when a password is set (#2190) by @pongoe in #4306
• Move development tools out of runtime requirements by @Nameless-Monster-Nerd in #4280
• CSRF - Test fix by @dgtlmoon in #4316
• feature: allow a watch or group to append to the inherited AI Change Summary prompt by @snowyukitty in #4294
• RSS - RSS pubDate is wrong on any non-UTC container: local time is relabelled as UTC - #4309 by @dgtlmoon in #4314
• GHSA-56fq-63vj-9992 Improved URL filtering by @dgtlmoon in #4315
• GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field by @dgtlmoon in #4317
• Bump actions/setup-python from 6 to 7 in the all group across 1 directory by @dependabot[bot] in #4291
• GHSA-23mp-8222-96fr - reflected XSS in /diff//download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) [email protected] by @dgtlmoon in #4324
• LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing by @dgtlmoon in #4325
• Add Polish translation by @osaczony30 in #4329
• Add Ukrainian support for the 'In stock'/'Not in stock' status by @iG8R in #4330
• Add watch UI should show which browser(s) are available and set default browser by @dgtlmoon in #4334
• feat: make Playwright CSP bypass configurable by @kquinsland in #4298
• Restock detection - fix inverted condition that skipped the OpenGraph availability fallback by @TowyTowy in #4262
• Add watch UI default browser by @dgtlmoon in #4335
• fix: Browser Steps picker cannot select a nested in a by @thejdubb02 in https://github.com//pull/4336
• deps: update litellm dependency cap by @apeabody in https://github.com//pull/4341
• fix(backup): add utf-8 encoding when writing url list files by @apeabody in https://github.com//pull/4345
• Puppeteer/Playwright CSP bypass - test refactor by @dgtlmoon in https://github.com//pull/4346
• Python 3.10 EOL October/2026 - Dropping support - conflicts with jsonschema and litellm by @dgtlmoon in https://github.com//pull/4347
• fix(llm): support reasoning models (), safe booleans, and timestamp diffs by @apeabody in https://github.com//pull/4340
• fix(llm): handle reasoning blocks that aren't a well-formed pair by @dgtlmoon in https://github.com//pull/4349
• Memory - GC freeze after startup to save CPU cycles and improve memory management by @dgtlmoon in https://github.com//pull/4351
• Scheduler+API Bug - if an invalid timezone was set (through edit of watch or API) it could have crashed the scheduler, Added timezone to the official API docs by @dgtlmoon in https://github.com//pull/4350
• Memory usage - small improvement by tidying up module imports by @dgtlmoon in https://github.com//pull/4352
• UTF-8/Lone Surrogate encoding test improvements related to #4273 by @dgtlmoon in https://github.com//pull/4353
• LLM - Per watch/group settings and UI tidyup by @dgtlmoon in https://github.com//pull/4354
• Update - pyppeteer-ng to 2.0.0rc16 by @dgtlmoon in https://github.com//pull/4357
• fix(llm): support Gemini flash-lite & reasoning models, strip extra_body on 400 retry by @apeabody in https://github.com//pull/4342
• Watch loading - Dont crawl whole datastore on disk, just check each directory for watch.json / tag.json by @dgtlmoon in https://github.com//pull/4358
• Env var - PAGE_WATCH_LIMIT enhancements by @dgtlmoon in https://github.com//pull/4359
• Feature/watch limit by @dgtlmoon in https://github.com//pull/4360
• fix(api): accept an existing tag UUID in the watch tag field, and deprecate it by @dgtlmoon in https://github.com//pull/4361
• fix(conditions): support zero values in condition filtering and json logic conversion by @apeabody in https://github.com//pull/4362

New Contributors

• @willyjfarrell made their first contribution in https://github.com//pull/4267
• @honma89 made their first contribution in https://github.com//pull/4276
• @kah-ja made their first contribution in https://github.com//pull/4282
• @snowyukitty made their first contribution in https://github.com//pull/4293
• @pongoe made their first contribution in https://github.com//pull/4306
• @Nameless-Monster-Nerd made their first contribution in https://github.com//pull/4280
• @osaczony30 made their first contribution in https://github.com//pull/4329
• @iG8R made their first contribution in https://github.com//pull/4330
• @kquinsland made their first contribution in https://github.com//pull/4298
• @thejdubb02 made their first contribution in https://github.com//pull/4336

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.55.8...0.60.1

What's Changed

• feat: Czech translation updated and refined by @svetlemodry in #4203
• fix: extract <title> from pages with large sections (#4217) by @crossi-dev in #4220
• Restock rename original price to last price by @dgtlmoon in #4227
• fix: Tag RSS feed ignores security token when password protection is enabled by @medzin in #4235
• LLM: strip sampling params and retry when the model rejects them by @quinnypig in #4241
• fix: URL validation rejects valid URLs with '|' in the anchor/fragment (#4209) by @AmirF194 in #4243
• fix: .gitignore the real test-log path (changedetectionio/tests/logs) by @AmirF194 in #4247
• Add Russian (ru) translation by @Marfa in #4236
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #4238
• fix: don't error watches when Content-Type is JSON but body isn't parsable (#3827) by @TowyTowy in #4250
• fix: safe-empty restock default so restock notification tokens work for any watch by @ebarkhordar in #4249
• LLM - Raise or remove LLM timeout when local endpoint detected #4225 by @dgtlmoon in #4254
• [i18n] JavaScript UI strings not covered by translations #4233 by @dgtlmoon in #4255
• [feature] Restock LLM fallback: make the 8000 char content limit configurable, change to 15,000 chars by default #4213 by @dgtlmoon in #4257

New Contributors

• @crossi-dev made their first contribution in #4220
• @medzin made their first contribution in #4235
• @quinnypig made their first contribution in #4241
• @AmirF194 made their first contribution in #4243
• @Marfa made their first contribution in #4236
• @TowyTowy made their first contribution in #4250
• @ebarkhordar made their first contribution in #4249

Full Changelog: 0.55.7...0.55.8

Security updates

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

What's Changed

• UI - Preview problem fix for extract_text/ignore_text #4138 by @dgtlmoon in #4169
• UI - LLM - Flag LLM_FEATURES_DISABLED to disable all LLM from the UI/system by @dgtlmoon in #4171
• Notifications - raw_diff token was missing by @dgtlmoon in #4177
• LLM UI - Blueprint/code also disabled when env flag LLM_FEATURES_DISABLED is enabled by @dgtlmoon in #4180
• Llm settings pydantic refactor by @dgtlmoon in #4181
• lint: Bump dennis — adopt --strict mode and drop false-positive workarounds by @skkzsh in #4182

Full Changelog: 0.55.5...0.55.6

What's Changed

i18n: Ruff INT (flake8-gettext) by @skkzsh in #4096

UI - AI/LLM - "Summary" button should set last viewed by @dgtlmoon in #4095

Improve LiteLLM deps #4093 by @dgtlmoon in #4102

i18n: Add dennis .pot/.po lint by @skkzsh in #4097

API - watch.link was accidently a tuple, enforcing string by @dgtlmoon in #4104

API - Add restock config to API /v1/watch/ json output #4099 by @dgtlmoon in #4103

i18n: Enforce dennis lint warnings in CI by @skkzsh in #4105

i18n: Clear pre-existing dennis warnings in messages.pot by @skkzsh in #4112

i18n: Fix broken HTML tags and enforce dennis lint warnings in CI by @skkzsh in #4116

Notifications - extra check for system default by @dgtlmoon in #4122

Notifications - Escape only the diff variables before Jinja2 renders them into the template ( Stop breaking custom HTML for plaintext pages on HTML notifications) #4121 by @dgtlmoon in #4123

Fixing GHSA-vwgh-2hvh-4xm5 — substring match in the shared_diff_access by @dgtlmoon in #4130

Bumping tests by @dgtlmoon in #4131

LLM - Self-hosted OpenAI-compatible endpoint support (vLLM, LM Studio, llama.cpp) — refs #3204 by @tekgnosis-net in #4117

LLM integration - LiteLLM config - UI tweaks by @dgtlmoon in #4134

UI - Make LLM status sticky by @dgtlmoon in #4135

LLM - Fixing summary cache miss-hit by @dgtlmoon in #4136

Text filters - Process subtractive_selectors first by @dgtlmoon in #4142

API - Better support for watch API private/internal vars by @dgtlmoon in #4144

Text filters - Ignore text should run before 'extract text' by @dgtlmoon in #4143

Fix/pr 4110 czech l12n catalog sync by @dgtlmoon in #4145

Docker - INSTALLED_MARKER is kept in /datastore but package installs are not persistent (Dont use custom marker file, rely on pip instead) by @dgtlmoon in #4147

Fix/llm ollama etc tweaks by @dgtlmoon in #4148

UI - LLM - SSRF guard for the LLM api_base setting by @dgtlmoon in #4157

API Security - Watch GET history snapshot - Should return text/plain mimetype so it cant be accidently executed in the browser by @dgtlmoon in #4158

New Contributors

@tekgnosis-net made their first contribution in #4117

Full Changelog: 0.55.3...0.55.4