Splits the changelog, which had been filing 1.8 work under the 1.7 heading. Everything from the Security section down to the Plugin Platform entry landed after the v1.7 tag: the TLS scoping (#139), the credential re-encryption, chore icons (#141), the completion celebration (#140) and Home Assistant weather (#57). Those move into a new 1.8 section; the restored 1.7 section is now byte-identical to what v1.7 actually shipped. Adds the 1.8 work that had no entry yet: the @fastify/static CVE upgrade (#136), Spanish and the i18n groundwork (#137/#138), plugin descriptions and previews (#147), user ordering (#134), the calendar Today control (#144), per-device user visibility in chores (#145), the plugin data-changed channel (#148/#149), and the community fixes from @Leesam, @cosmosified, @mrramam and @anupamme. Deployment guide: the .env recipe still told operators to generate an ENCRYPTION_KEY and the note below it still said to add one to the backend service. Neither has been true since credentials moved to the auto-generated key -- the compose file passes it through already, and one is generated on first start. Replaced with what to actually do, which is back up homeglow/data. Versions bumped to 1.8.0 in both package.json files and their lockfiles. Note the About tab reads its version from the git tag at build time, so the tag is what users will see; these keep local runs honest. Deliberately not touched: the LICENSE. A commit in this cycle reads "Change license from APGLv3 to MIT", but it edited a single comment line in the Proxmox community-scripts installer, whose header points at the ProxmoxVE project's licence by convention. HomeGlow itself is still AGPLv3, so the release notes do not claim otherwise. Verified: client 167/167, server 216/216, translation parity check passes, production build clean. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Commits

Commits on Sep 9, 2026

Release 1.8