The following modules have a new version: - at-spi2-core (2.58.4 => 2.58.5) - decibels (49.0 => 49.6.1) - gdk-pixbuf (2.44.5 => 2.44.6) - glib (2.86.4 => 2.86.5) - gnome-control-center (49.6 => 49.7) - gtk (4.20.3 => 4.20.4) - nautilus (49.5 => 49.6) - orca (49.6 => 49.7) - totem-pl-parser (3.26.6 => 3.26.7) - vala (0.56.18 => 0.56.19) The following modules weren't upgraded in this release: adwaita-fonts, adwaita-icon-theme, baobab, blueprint-compiler, calls, cantarell-fonts, d-spy, dconf, dconf-editor, epiphany, evince, evolution-data-server, folks, foundry, gcab, gcr, gcr-3, gdm, geocode-glib, gexiv2, gi-docgen, gjs, glib-networking, glibmm, glycin, gnome-app-list, gnome-autoar, gnome-backgrounds, gnome-bluetooth, gnome-boxes, gnome-builder, gnome-calculator, gnome-calendar, gnome-characters, gnome-clocks, gnome-color-manager, gnome-connections, gnome-console, gnome-contacts, gnome-desktop, gnome-disk-utility, gnome-font-viewer, gnome-initial-setup, gnome-keyring, gnome-logs, gnome-maps, gnome-menus, gnome-music, gnome-online-accounts, gnome-remote-desktop, gnome-session, gnome-settings-daemon, gnome-shell, gnome-software, gnome-system-monitor, gnome-text-editor, gnome-tour, gnome-user-docs, gnome-user-share, gnome-weather, gobject-introspection, gom, graphene, grilo, grilo-plugins, gsettings-desktop-schemas, gsound, gspell, gssdp, gtk+-3, gtk-doc, gtk-vnc, gtkmm, gtksourceview, gtksourceview-4, gupnp, gupnp-av, gupnp-dlna, gvfs, json-glib, jsonrpc-glib, libadwaita, libcloudproviders, libdex, libgee, libgit2-glib, libgsf, libgtop, libgweather, libgxps, libhandy, libmanette-0.2, libmediaart, libnma, libnotify, libpanel, libpeas, librest, librsvg, libsecret, libshumate, libsigcplusplus, libsoup, libspelling, localsearch, loupe, manuals, mm-common, mobile-broadband-provider-info, msgraph, mutter, pango, pangomm, papers, phodav, pyatspi, pygobject, rygel, showtime, simple-scan, snapshot, startup-notification, sushi, sysprof, tecla, template-glib, tinysparql, vte, xdg-desktop-portal-gnome, xdg-user-dirs-gtk, yelp, yelp-tools, yelp-xsl, zenity ======================================== at-spi2-core ======================================== What's new in at-spi2-core 2.58.5: * Detect unresponsive applications, and do not expose them as children of the desktop. * Attempt to fix a crash when opening a group chat in pidgin that contains new messages. ======================================== decibels ======================================== 49.6 --- * Bugs fixed: - #140 Decibels doesn't set audio stream metadata (pretty name, icon and current playback title) for other PipeWire apps (DaPigGuy) - #147 Volume Meter shows incorrect default value (50%) after starting the application - !169 metainfo: Change component type to "desktop-application" - !171 fix(mpris): SetPosition and OpenUri - !175 metainfo: Use supports for controls * Translation updates: - Basque (Asier Saratsua Garmendia) - Bulgarian (twlvnn kraftwerk) - Catalan (Victor Dargallo) - Chinese (China) (luming zh) - Cornish (Flynn Peck) - Czech (Daniel Rusek) - Danish (Alan Mortensen) - English (United Kingdom) (Bruce Cowan) - Esperanto (Kristjan SCHMIDT) - Finnish (Jiri Grönroos) - French (Lucien) - Galician (Fran Diéguez) - Georgian (Ekaterine Papava) - German (Jürgen Benvenuti) - Greek, Modern (1453-) (Efstathios Iosifidis) - Hebrew (Yaron Shahrabani) - Hungarian (Balázs Úr) - Icelandic (Sveinn í Felli) - Japanese (小山田 純 - Oyamada Jun) - Kazakh (Baurzhan Muftakhidinov) - Korean (Seong-ho Cho) - Lithuanian (Aurimas Aurimas Černius) - Nepali (Pawan Chitrakar) - Occitan (post 1500) (Quentin PAGÈS) - Persian (Danial Behzadi) - Polish (Adam Lewicki) - Portuguese (Hugo Carvalho) - Portuguese (Brazil) (Rafael Fontenelle) - Romanian (Antonio Marin) - Russian (Artur S0) - Serbian (Марко Костић) - Serbian (Latin script) (Милош Поповић) - Slovenian (Martin) - Spanish (Daniel Mustieles) - Swedish (Anders Jonsson) - Thai (Aefgh Threenine) - Turkish (Sabri Ünal) - Uighur (Abduqadir Abliz) - Ukrainian (Yuri Chornoivan) ======================================== gdk-pixbuf ======================================== 2.44.6 === - build: Add a legacy_xpm option to build the old xpm loader - xpm: Rename the old xpm loader to legacy-xpm, and use it for gdk_pixbuf_new_from_xpm_data if it is available. Note that the old loader will only be used for this purpose. xpm files still get loaded with glycin - jpeg: Reject data with an unsupported number of components - Update contribution guidelines - glycin: Fix an issue with looping animations - Do not accidentally query loaders from the host - glycin: Add support for xpm and xbm. Note that xpm+xbm support is new in glycin 2.1 - Translation updates ======================================== glib ======================================== Overview of changes in GLib 2.86.5, 2026-04-02 ============================================== * Fix various minor security vulnerabilities (typically one-byte buffer overreads with rare exploitation conditions) (#3915, #3916, #3917, #3918, #3919) * Bugs fixed: - #3915 (#YWH-PGM9867-190) Buffer Over-read on GLib through glib/gvariant- serialiser.c:1253 via gvs_tuple_is_normal() (Philip Withnall) - #3916 (#YWH-PGM9867-187) OOB Read on GLib through glib/gmarkup.c:g_markup_escape_text() via glib/gmarkup.c:append_escaped_text() (Philip Withnall) - #3917 (#YWH-PGM9867-191) OOB Read on GLib through glib/gdatetime.c:g_date_time_get_ymd via invalid `GDateTime` (Philip Withnall) - #3918 (#YWH-PGM9867-193) Buffer Over-read on GLib's g_regex_replace() through glib/gregex.c:string_append() via g_utf8_next_char() (Philip Withnall) - #3919 (#YWH-PGM9867-194) Buffer Over-read on GLib through glib/gregex.c:g_regex_split_full() via glib/gutf8.c:g_utf8_prev_char() (Philip Withnall) - !5033 Update Hungarian translation - !5108 Update German translation - !5135 Backport various recent security fixes to GVariant, GMarkup, GDateTime and GRegex to glib-2-86 * Translation updates: - German (Christian Kirbach) - Hungarian (Balázs Úr) ======================================== gnome-control-center ======================================== ============ Version 49.7 ============ - Various translation updates Accessibility - Fix keyboard navigation between cursor sizes Display - Correct the type of num_scales counter Privacy - Fix memory leak in camera page - Fix memory leak in location page Users - Chain up dispose in crop area widget ======================================== gtk ======================================== Overview of Changes in 4.20.4, 31-03-2025 ========================================= * Bugs fixed: - #7860 GtkLevelBar doesn't correctly update when value set when unmapped (Ignacy Kuchciński) - #7883 gtk 4.20.3 fails to build on 32-bit architectures (Benjamin Otte) - !9171 Backport 32bit fixes (Benjamin Otte) - !9185 Backport: Windows: fix cairo crash with dcomp disabled (Dan Yeaw) - !9314 macos[backport]: Fix Drag-n-drop for macOS 26 (Arjan Molenaar) - !9329 Backport levelbar fix (Ignacy Kuchciński) - !9358 macos: [backport] Use event data and hit test to determine if we're over window buttons (Arjan Molenaar) - !9562 columnview: Backport fix from !9316 to gtk 4.20 (Sergey Bugaev) * Translation updates: - Bokmål, Norwegian (Kjartan Maraas) - Bulgarian (Alexander Alexandrov Shopov) - German (Christian Kirbach) - Indonesian (Andika Triwidada) - Kazakh (Baurzhan Muftakhidinov) - Romanian (Antonio Marin) - Uzbek (Baxrom Raxmatov) ======================================== nautilus ======================================== Major Changes in 49.6 ===================== * Bugfixes: - Fix file chooser portal choice states (Khalid Abu Shawarib) - Fix read-only/not accessible emblems (Peter Eisenmann) - Assure view item deduplication on slow machines (Ondrej Holy) * Cleanups: - Don't allow editing custom icons for trash or trashed files (Khalid Abu Shawarib) - Use GIcon for launch context (Khalid Abu Shawarib) ======================================== orca ======================================== 49.7 - 11 April 2026 General: * Remove orca-scripts support and sys.path manipulation New and updated translations (THANKS EVERYONE!!!): sr Serbian Милош Поповић ========= ======================================== totem-pl-parser ======================================== 3.26.7: - Fix uninitialized variable error in plparser - Add itunes genre support for podcast RSS feeds - Split podcast tests - Fix deprecation warnings - Fix return value from cancelled plparser calls - Fix TotemPlParserMetadata in plparser bindings - Use gitlab.gnome.org for bug-database in doap - Use apps.gnome.org for homepage in doap - Update podcast test for server changes - Fix guard return type in plparser - Add release CI elements - Remove duplicate dependency in CI - New and updated translations ======================================== vala ======================================== Vala 0.56.19 ============ * Various improvements and bug fixes: - codegen: Minor refactoring of TypeRegisterFunction and its subclasses - codegen: Use G_TYPE_FLAG_NONE when targetting glib >= 2.74 - codegen: Use g_once_init_{enter,leave}_pointer when targetting glib >= 2.80 - codegen: Propagate default_value_on_error from parent struct - codegen: Return default_value_on_error on precondition failures - gdbus: Avoid unused variables in method call and properties getter/setter - gdbus: Allow GLib.VariantDict for a{sv} - gdbus: Do not provide unintended read/write access to properties - parser: Fix statement error recovery [#1590] - vala: Use reference-transfer as needed when transforming conditional-expression [#1648] - girwriter: Don't use instance-parameter inside function elements [#1606] - girwriter: Add the doc:format argument in the .gir file - libvaladoc: Do not error-out on doc:format - libvaladoc: Add compat layer for gvRenderData to cope with API break [#1621] * Bindings: - glib-2.0: allow FileUtils.open_tmp's first argument to be null - posix: add UTIME_{NOW,OMIT} constants for utimensat - gsl: Deprecate gsl_linalg_cholesky_decomp in favour of gsl_linalg_cholesky_decomp1 [#1602] - libxml-2.0: Add more fields to ParserCtxt - gobject-2.0: Set default_value{,_on_error} for GType - glib-2.0: Fix *.add_once () callbacks [#1556] - gobject-2.0: Fix return type - gobject-2.0: Add Type.to_string () - gstreamer-1.0: Fix ownership of Caps.full*() parameters [#1628] - glib-2.0: fix a typo in a parameter name - gtk4: Update to 4.21.6+83716767 - gtk4: Make all Gsk.RenderNode and Gsk.Renderer shadow their parent type - gtk4: Fix CursorGetTextureCallback declaration