All versions since v0.23.1

v0.23.1

Feb 1, 2026

Changes

Fixes attachments not appearing
Fixes QR Codes missing URL portion
Fixes Tag Dropdown not closing
Fixes version link in bottom of page

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.23.0…v0.23.1

v0.24.0

Mar 3, 2026

[!IMPORTANT] This release includes 3 security vulnerability patches. These include issues with CVE scores ranging from 4.6 to 7.4 scores.

7.4 CVE-2026-27981

5.0 CVE-2026-27600

4.6 CVE-2026-26272

Thank you to @G3XAR and @djnnvx for their responsible disclosures of these issues.

What’s Changed

Add Documentation Detailing Websocket Requirement for Reverse Proxies by @KevinFumbles in https://github.com/sysadminsmedia/homebox/pull/1297
Add a tenant get param when generating labels on the item page. by @cdjk in https://github.com/sysadminsmedia/homebox/pull/1303
Migrate to Startlight Documentation by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1304
docs: update links in README.md by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1314
feat: add new field types to template_fields schema by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1315
fix: tenant miss in export download URLs by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1313
fix: hardcoded frontend strings by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1311
chore(deps): bump nanotar from 0.2.0 to 0.2.1 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1317
Update incorrect env variables in quick-start/configure/database by @KillerOfPie in https://github.com/sysadminsmedia/homebox/pull/1320
fix: improve mobile image popup sizing by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1321
feat: add skip-first-labels and location-row toggle to label generator by @max2697 in https://github.com/sysadminsmedia/homebox/pull/1306
chore(deps): bump markdown-it from 14.1.0 to 14.1.1 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1324
implement show/hide items for locations tree by @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1328
chore(deps): bump ajv from 8.17.1 to 8.18.0 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1330
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1331
chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1334
feat: add configurable security options for generic notifiers by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1335
Update currencies.json by @github-actions[bot] in https://github.com/sysadminsmedia/homebox/pull/1329
fix(currencies): update CLP decimals to 0 to comply with ISO 4217 by @sRamosDev in https://github.com/sysadminsmedia/homebox/pull/1342
chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1347

New Contributors

@KevinFumbles made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1297
@cdjk made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1303
@IceeAn made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1314
@KillerOfPie made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1320
@max2697 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1306
@sRamosDev made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1342

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.23.1…v0.24.0

v0.24.1

Mar 7, 2026

What’s Changed

fix: stop the items page crashing when attachments connected
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1355
chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1357

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.24.0…v0.24.1

v0.24.2

Mar 9, 2026

Actually fixes the item page crash (multiple validated reports and tests)

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.24.1…v0.24.2

v0.25.0 Latest

Apr 13, 2026

[!NOTE] As always, we highly recommend making a backup of your databases and files before upgrading!

[!IMPORTANT] This release fixes CVE-2026-40196 which allowed a user removed from their default group to still access it via the API.

Big Changes

Tag Relationships: Tags can now have parents/children, and icons.
Fractional/Decimal Quantities: You can now have partial quantities like 1.2, 3.45, etc.
User Settings Stored in DB: Your user preferences are now stored in the DB, settings persist across devices and browsers.
OpenTelemetry Support: Homebox now has basic OpenTelemetry tracing, logging and error tracking. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.
More Barcode Providers: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.
And plenty of other improvements and bug fixes.

What’s Changed

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1365
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1366
Update to go 1.26, and other various backend updates by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1364
chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1370
Add OpenTelemetry tracing to backend and frontend with full chain support in https://github.com/sysadminsmedia/homebox/pull/1256
chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1383
chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1382
Improve tag handling by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1327
chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1385
Add backend to store user settings in the DB by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/958
Add a page for tags by @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1392
feat: fractional/decimal quantity by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1372
Fix incorrectly generated Swagger docs for /labelmaker/asset/{id} route by @adarshp in https://github.com/sysadminsmedia/homebox/pull/1084
chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1399
chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1400
feat(frontend): Make group invitation link work when user is logged in by @mdrkrg in https://github.com/sysadminsmedia/homebox/pull/1412
fix: apply collection currency changes immediately by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1409
feat: add OpenFoodFacts as barcode lookup provider by @palini762 in https://github.com/sysadminsmedia/homebox/pull/1406
Add Open Facts barcode sources by @RobinMJD in https://github.com/sysadminsmedia/homebox/pull/1426

New Contributors

@adarshp made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1084
@mdrkrg made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1412
@palini762 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1406
@RobinMJD made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1426

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.24.2…v0.25.0