changedetection.io Release Notes

What's Changed

• Restock - No need to extract the text because it's not used anyway by @dgtlmoon in #3951
• Content fetching -Better detection of other encodings, Replace/upgrade broken UTF-8 , Ensure rest of retrieved content is UTF-8 for the app by @dgtlmoon in #3954
• UI - Price amount is sometimes string or integer by @dgtlmoon in #3950
• CI - Bump the all group with 5 updates by @dependabot[bot] in #3955
• Various memory and CPU improvements by @dgtlmoon in #3960
• Add complete Spanish translation (es) by @adriangc24 in #3961
• Create (POST) tag/group through API do not save processor_config_restock_diff values by @dgtlmoon in #3968
• UI - Fixing Preview "GO" version button by @dgtlmoon in #3969
• API - Invert changes_only flag for include_equal parameter by @dgtlmoon in #3976

New Contributors

• @adriangc24 made their first contribution in #3961

Full Changelog: 0.54.4...0.54.5

What's Changed

• fix(i18n): accept translated confirmation text when clearing snapshot history by @eren-karakus0 in #3940
• Python 3.14 CI test and support by @dgtlmoon in #3941
• Updating API docs with better processor plugin info by @dgtlmoon in #3942
• CVE-2026-29038 - Reflected XSS in RSS Tag Error Response
• CVE-2026-29039 - XPath - Arbitrary File Read via unparsed-text()
• CVE-2026-29065 - fix(backups): patch zip slip advisory, zip bomb, upload size limit, UUID validation, secret.txt leakage, and download edge cases

New Contributors

• @eren-karakus0 made their first contribution in #3940

Full Changelog: 0.54.3...0.54.4

What's Changed

• Fixing change_datetime notification token (and adding test) by @dgtlmoon in #3922
• Notification Token {{diff}} can accept arguments like {{diff_added(lines=5, context=2)}} by @dgtlmoon in #3923
• Processor extensible API for updating by @dgtlmoon in #3902
• Update jsonpath-ng requirement from ~=1.7.0 to ~=1.8.0 by @dependabot[bot] in #3929
• Bump the all group with 2 updates by @dependabot[bot] in #3931
• Unresolvable hostnames should still be added, they are security checked at fetch time by @dgtlmoon in #3933

Full Changelog: 0.54.1...0.54.2

What's Changed

• Pluggy plugin hook for before and after a watch is processed by @dgtlmoon in #3888
• UI - Fixing realtime updates for status updates when checking by @dgtlmoon in #3889
• Fix time schedule off-by-one bug at exact end times for all durations and add comprehensive edge case tests Re #3846 by @dgtlmoon in #3890
• "Error 200 no content" - Some very large SPA pages make HTML to Text fail by dumping 10Mb+ into page header, strip extras. by @dgtlmoon in #3892
• Large html to text error 200 blank by @dgtlmoon in #3893
• Fix: Some SPAs with long content - Stripping tags must also find matching close tag by @dgtlmoon in #3895
• Puppeteer - Adding extra browser cleanup by @dgtlmoon in #3897
• Updates/migration - Re-run tag update, re-save to cleanup changedetection.json, code refactor by @dgtlmoon in #3898
• Full Changelog: 0.53.3...0.53.4