[!NOTE] As always, we highly recommend making a backup of your databases and files before upgrading!

[!IMPORTANT] This release fixes CVE-2026-40196 which allowed a user removed from their default group to still access it via the API.

Big Changes

• Tag Relationships: Tags can now have parents/children, and icons.
• Fractional/Decimal Quantities: You can now have partial quantities like 1.2, 3.45, etc.
• User Settings Stored in DB: Your user preferences are now stored in the DB, settings persist across devices and browsers.
• OpenTelemetry Support: Homebox now has basic OpenTelemetry tracing, logging and error tracking. While not full and in-depth yet, it has already proven useful in finding issues and potential performance problems.
• More Barcode Providers: OpenFoodFacts, OpenBeautyFacts, and OpenProductsFact have been added as providers to broaden the support for scanning product barcodes for metadata.
• And plenty of other improvements and bug fixes.

What's Changed

• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1365
• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1366
• Update to go 1.26, and other various backend updates by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1364
• chore(deps): bump flatted from 3.3.3 to 3.4.1 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1370
• Add OpenTelemetry tracing to backend and frontend with full chain support in https://github.com/sysadminsmedia/homebox/pull/1256
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /backend in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1383
• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1382
• Improve tag handling by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1327
• chore(deps): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1385
• Add backend to store user settings in the DB by @tankerkiller125 and @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/958
• Add a page for tags by @tonyaellie in https://github.com/sysadminsmedia/homebox/pull/1392
• feat: fractional/decimal quantity by @tankerkiller125 in https://github.com/sysadminsmedia/homebox/pull/1372
• Fix incorrectly generated Swagger docs for /labelmaker/asset/{id} route by @adarshp in https://github.com/sysadminsmedia/homebox/pull/1084
• chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1399
• chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sysadminsmedia/homebox/pull/1400
• feat(frontend): Make group invitation link work when user is logged in by @mdrkrg in https://github.com/sysadminsmedia/homebox/pull/1412
• fix: apply collection currency changes immediately by @IceeAn in https://github.com/sysadminsmedia/homebox/pull/1409
• feat: add OpenFoodFacts as barcode lookup provider by @palini762 in https://github.com/sysadminsmedia/homebox/pull/1406
• Add Open Facts barcode sources by @RobinMJD in https://github.com/sysadminsmedia/homebox/pull/1426

New Contributors

• @adarshp made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1084
• @mdrkrg made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1412
• @palini762 made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1406
• @RobinMJD made their first contribution in https://github.com/sysadminsmedia/homebox/pull/1426

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.24.2...v0.25.0