What's Changed

• feat: Czech translation updated and refined by @svetlemodry in #4203
• fix: extract <title> from pages with large sections (#4217) by @crossi-dev in #4220
• Restock rename original price to last price by @dgtlmoon in #4227
• fix: Tag RSS feed ignores security token when password protection is enabled by @medzin in #4235
• LLM: strip sampling params and retry when the model rejects them by @quinnypig in #4241
• fix: URL validation rejects valid URLs with '|' in the anchor/fragment (#4209) by @AmirF194 in #4243
• fix: .gitignore the real test-log path (changedetectionio/tests/logs) by @AmirF194 in #4247
• Add Russian (ru) translation by @Marfa in #4236
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #4238
• fix: don't error watches when Content-Type is JSON but body isn't parsable (#3827) by @TowyTowy in #4250
• fix: safe-empty restock default so restock notification tokens work for any watch by @ebarkhordar in #4249
• LLM - Raise or remove LLM timeout when local endpoint detected #4225 by @dgtlmoon in #4254
• [i18n] JavaScript UI strings not covered by translations #4233 by @dgtlmoon in #4255
• [feature] Restock LLM fallback: make the 8000 char content limit configurable, change to 15,000 chars by default #4213 by @dgtlmoon in #4257

New Contributors

• @crossi-dev made their first contribution in #4220
• @medzin made their first contribution in #4235
• @quinnypig made their first contribution in #4241
• @AmirF194 made their first contribution in #4243
• @Marfa made their first contribution in #4236
• @TowyTowy made their first contribution in #4250
• @ebarkhordar made their first contribution in #4249

Full Changelog: 0.55.7...0.55.8

Security updates

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

What's Changed

• UI - Preview problem fix for extract_text/ignore_text #4138 by @dgtlmoon in #4169
• UI - LLM - Flag LLM_FEATURES_DISABLED to disable all LLM from the UI/system by @dgtlmoon in #4171
• Notifications - raw_diff token was missing by @dgtlmoon in #4177
• LLM UI - Blueprint/code also disabled when env flag LLM_FEATURES_DISABLED is enabled by @dgtlmoon in #4180
• Llm settings pydantic refactor by @dgtlmoon in #4181
• lint: Bump dennis — adopt --strict mode and drop false-positive workarounds by @skkzsh in #4182

Full Changelog: 0.55.5...0.55.6

What's Changed

i18n: Ruff INT (flake8-gettext) by @skkzsh in #4096

UI - AI/LLM - "Summary" button should set last viewed by @dgtlmoon in #4095

Improve LiteLLM deps #4093 by @dgtlmoon in #4102

i18n: Add dennis .pot/.po lint by @skkzsh in #4097

API - watch.link was accidently a tuple, enforcing string by @dgtlmoon in #4104

API - Add restock config to API /v1/watch/ json output #4099 by @dgtlmoon in #4103

i18n: Enforce dennis lint warnings in CI by @skkzsh in #4105

i18n: Clear pre-existing dennis warnings in messages.pot by @skkzsh in #4112

i18n: Fix broken HTML tags and enforce dennis lint warnings in CI by @skkzsh in #4116

Notifications - extra check for system default by @dgtlmoon in #4122

Notifications - Escape only the diff variables before Jinja2 renders them into the template ( Stop breaking custom HTML for plaintext pages on HTML notifications) #4121 by @dgtlmoon in #4123

Fixing GHSA-vwgh-2hvh-4xm5 — substring match in the shared_diff_access by @dgtlmoon in #4130

Bumping tests by @dgtlmoon in #4131

LLM - Self-hosted OpenAI-compatible endpoint support (vLLM, LM Studio, llama.cpp) — refs #3204 by @tekgnosis-net in #4117

LLM integration - LiteLLM config - UI tweaks by @dgtlmoon in #4134

UI - Make LLM status sticky by @dgtlmoon in #4135

LLM - Fixing summary cache miss-hit by @dgtlmoon in #4136

Text filters - Process subtractive_selectors first by @dgtlmoon in #4142

API - Better support for watch API private/internal vars by @dgtlmoon in #4144

Text filters - Ignore text should run before 'extract text' by @dgtlmoon in #4143

Fix/pr 4110 czech l12n catalog sync by @dgtlmoon in #4145

Docker - INSTALLED_MARKER is kept in /datastore but package installs are not persistent (Dont use custom marker file, rely on pip instead) by @dgtlmoon in #4147

Fix/llm ollama etc tweaks by @dgtlmoon in #4148

UI - LLM - SSRF guard for the LLM api_base setting by @dgtlmoon in #4157

API Security - Watch GET history snapshot - Should return text/plain mimetype so it cant be accidently executed in the browser by @dgtlmoon in #4158

New Contributors

@tekgnosis-net made their first contribution in #4117

Full Changelog: 0.55.3...0.55.4

Big stuff

AI / LLM rulesets - Set your AI change detection rules and text summary rules, use hundreds of existing providers via LiteLLM.

What's Changed

• Use pgettext for diff page From/To labels to prevent context collisions by @skkzsh in #4073
• Fix broken opacity feedback for restock/price fields on tag edit screen by @skkzsh in #4072
• i18n: Wrap untranslated UI strings in include_subtract.html and add ja translations by @skkzsh in #4054
• Re #4080 msgfmt linting by @dgtlmoon in #4081
• Update python-engineio requirement from <5,>=4.9.0 to >=4.13.1,<5 by @dependabot[bot] in #4079
• CI - Translation sync check by @dgtlmoon in #4085
• DeprecationWarning: codecs.open() is deprecated. Use open() instead. by @skkzsh in #4078
• LLM implementation - by @dgtlmoon in #4057
• i18n: Consolidate fragmented gettext calls into entire-sentence msgids by @skkzsh in #4076
• Translations - Playwright macro unused, add extra linting for translations, add TRANSLATORS.md by @dgtlmoon in #4087
• [i18n] "Usage" tab label in AI settings is ambiguous across contexts #4086 by @dgtlmoon in #4088
• Update Korean language by @limeade23 in #4084

New Contributors

• @limeade23 made their first contribution in #4084

Full Changelog: 0.54.10...0.55.1

What's Changed

• Add Japanese translation (ja) by @skkzsh in #4019
• Update Selenium RemoteConnection to use ClientConfig for timeout by @mikaelz in #4027
• Fix SCREENSHOT_MAX_HEIGHT not enforced: cap viewport step_size and clip stitched output to max capture height #3810 by @dgtlmoon in #4030
• Notification - Adding tokens {{diff_changed_from}} and {{diff_changed_to}} #3818 by @dgtlmoon in #4031
• Feature - Groups/tag - Apply a group by specifying a wildcard, ie mysite.com by @dgtlmoon in #4032
• Add Portuguese (Brasil) translation by @mstrey in #4033
• fix: word-level diff ignores include_change_type_prefix by @lawrence3699 in #4037
• Groups - Set custom colour for tag/group/label background by @dgtlmoon in #4040
• Fix/step failure notification crash by @dgtlmoon in #4041
• Test - Word level diff - Re #4037 by @dgtlmoon in #4042
• fix: XLSX import error messages report wrong row number after failed rows by @lawrence3699 in #4036
• Czech l12n by @svetlemodry in #4043
• Add Turkish translation by @hekwert in #4044
• Handle inline favicons - Re #3891 by @dgtlmoon in #4047
• Text filters - New simpler filter "Extract lines containing text" by @dgtlmoon in #4046
• Test improvement - text extract tidyup by @dgtlmoon in #4048
• Update Japanese translations for new strings and fix fragment handling by @skkzsh in #4050
• Fix strings not rendered in user's locale despite having .po entries by @skkzsh in #4051
• Ignore text should override trigger text (It should ignore the trigger text if it appears) by @dgtlmoon in #3450

New Contributors

• @skkzsh made their first contribution in #4019
• @mikaelz made their first contribution in #4027
• @lawrence3699 made their first contribution in #4037
• @hekwert made their first contribution in #4044

Full Changelog: 0.54.8...0.54.9

Security

• XPath json-doc() Arbitrary File Read Bypass ( Similar fix as CVE-2026-29039 )
• CVE-2026-33981 - Environment Variable Disclosure via jq env Builtin in Include Filters

What's Changed

• UI - Text tidyup by @dgtlmoon in #3989
• Realtime - Suppress socket.io errors in logs by @dgtlmoon in #3991
• Restock - Add previous_price to restock values #3987 by @dgtlmoon in #3993
• fix: correct critical errors in Spanish (es) translation by @rasputino in #3994
• last_error should be cleared if page content was the same and there was no error by @dgtlmoon in #3997
• fix: Czech translation strings updated by @svetlemodry in #4008

New Contributors

• @rasputino made their first contribution in #3994
• @svetlemodry made their first contribution in #4008

Full Changelog: 0.54.6...0.54.7

What's Changed

• Restock - No need to extract the text because it's not used anyway by @dgtlmoon in #3951
• Content fetching -Better detection of other encodings, Replace/upgrade broken UTF-8 , Ensure rest of retrieved content is UTF-8 for the app by @dgtlmoon in #3954
• UI - Price amount is sometimes string or integer by @dgtlmoon in #3950
• CI - Bump the all group with 5 updates by @dependabot[bot] in #3955
• Various memory and CPU improvements by @dgtlmoon in #3960
• Add complete Spanish translation (es) by @adriangc24 in #3961
• Create (POST) tag/group through API do not save processor_config_restock_diff values by @dgtlmoon in #3968
• UI - Fixing Preview "GO" version button by @dgtlmoon in #3969
• API - Invert changes_only flag for include_equal parameter by @dgtlmoon in #3976

New Contributors

• @adriangc24 made their first contribution in #3961

Full Changelog: 0.54.4...0.54.5

What's Changed

• fix(i18n): accept translated confirmation text when clearing snapshot history by @eren-karakus0 in #3940
• Python 3.14 CI test and support by @dgtlmoon in #3941
• Updating API docs with better processor plugin info by @dgtlmoon in #3942
• CVE-2026-29038 - Reflected XSS in RSS Tag Error Response
• CVE-2026-29039 - XPath - Arbitrary File Read via unparsed-text()
• CVE-2026-29065 - fix(backups): patch zip slip advisory, zip bomb, upload size limit, UUID validation, secret.txt leakage, and download edge cases

New Contributors

• @eren-karakus0 made their first contribution in #3940

Full Changelog: 0.54.3...0.54.4