Binaries in these bundles
Each bundle carries a Node.js, a FerretDB and the MongoDB Database Tools. Which source has a given CPU varies from release to release - nodejs.org builds some architectures, unofficial-builds others, and the wekan/node-patches build the ones neither of them does - and not every source publishes a checksum. This is what went into this release, and which downloads were checked against a published SHA256.
| Bundle | Binary | From | Version | Checked | SHA256 |
|---|---|---|---|---|---|
| amd64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | c4f0050e35efde2f… |
| amd64 | Node.js | nodejs.org | v24.20.0 | verified | 2f2c0da162318f0d… |
| arm64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | c8421f8da8aa8b56… |
| arm64 | Node.js | nodejs.org | v24.20.0 | verified | 5f4ddab610c1ab20… |
| armhf | FerretDB | wekan/FerretDB | v1.64.0 | verified | 4105a3f0e8b00034… |
| armhf | Node.js | wekan/node-patches | v24.20.0 | verified | b8ed7065d44f0afe… |
| armv6 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 5408b2cb537a4a16… |
| armv6 | Node.js | wekan/node-patches | v24.20.0 | verified | d5cefa6f8cc4acb1… |
| armv7 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 4105a3f0e8b00034… |
| armv7 | Node.js | wekan/node-patches | v24.20.0 | verified | c04c81e539347f39… |
| i386 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 071f9cf5dc434099… |
| i386 | Node.js | wekan/node-patches | v24.20.0 | verified | bb44927307460dcf… |
| mac-arm64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | efc207de01f71473… |
| mac-arm64 | Node.js | nodejs.org | v24.20.0 | verified | b7bf7707070b950b… |
| mac-x64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | db2f40a55e67b3b4… |
| mac-x64 | Node.js | nodejs.org | v24.20.0 | verified | 26fc30891004603d… |
| ppc64le | FerretDB | wekan/FerretDB | v1.64.0 | verified | bb3ca07db3dc512f… |
| ppc64le | Node.js | nodejs.org | v24.20.0 | verified | 341307dcee20d883… |
| riscv64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 73c18a88dcf0604c… |
| riscv64 | Node.js | unofficial-builds.nodejs.org | v24.20.0 | verified | a149c5bf85f98ff1… |
| s390x | FerretDB | wekan/FerretDB | v1.64.0 | verified | a082dbe2a6d7dc11… |
| s390x | Node.js | nodejs.org | v24.20.0 | verified | ca381121cb5a8d38… |
| win-arm64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 65d9935475e71787… |
| win-arm64 | Node.js | nodejs.org | v24.20.0 | verified | 31c6799744de8a54… |
| win64 | FerretDB | wekan/FerretDB | v1.64.0 | verified | 3de41a585b997e30… |
| win64 | Node.js | nodejs.org | v24.20.0 | verified | 6cac9ffbca8f6a47… |
A row saying no checksum published is not a failed check - it is a source that publishes nothing to check against. Those are the ones worth fixing at the source.
v11.32 2026-08-30 WeKan ® release
In short: Windows release bundles load PDFKit from their deployed path instead of retaining a Linux build-runner URL, and Snap builds retry transient Store failures while installing LXD. Cross-platform PDF generation and native release assembly now have regression coverage for both failure boundaries, while a CodeQL incomplete-escaping alert is removed.
| Platform | Binary | From | Version | SHA256 |
|---|---|---|---|---|
| amd64 | Node.js | nodejs.org | v24.19.0 | 14b342e71204f811bde6153be8e04b62aef63c236fef92b55f9c83154b409647 |
| amd64 | FerretDB | wekan/FerretDB | v1.53.0 | eae1f0a8f73bfc979738bfff7284d40fd1bc55de2cc56514721fc155c3624f7d |
| arm64 | Node.js | nodejs.org | v24.19.0 | 01443c1e1a29e531ccad5a46fefa6df490d2189c49f7955904aecdbb0fe86fdc |
| arm64 | FerretDB | wekan/FerretDB | v1.53.0 | bdc50caee3ac28495b42d2130b94a042a9dd6d3a38f732cac02b648f36c891da |
| mac-arm64 | Node.js | nodejs.org | v24.19.0 | 3f1cf157479c1480352083105e13faf9d008ede98e7e157746b6df940d197b94 |
| mac-arm64 | FerretDB | wekan/FerretDB | v1.53.0 | cb14ffe93e285903e5a8a9c1821687ddb5b8a979a11c584bf4af534b272c6d3e |
| mac-x64 | Node.js | nodejs.org | v24.19.0 | d35e95230f46f6f0751df497c56622c6735e05d5e1fb1630996a005b9d328fe4 |
| mac-x64 | FerretDB | wekan/FerretDB | v1.53.0 | d97dfa9afa60aa05f25384327de82efe7b71d958ed24c1f66618284294a65cd3 |
This release fixes the following SECURITY ISSUE found by GitHub CodeQL code scanning:
Version tests compare generated text without incomplete escaping. Thanks to xet7.
The website-version test no longer interpolates generated manifest text into a regular expression after escaping only dots, which left backslashes and every other regular-expression metacharacter active. It now compares the expected `pre` block as literal text, removing CodeQL alert 441 and the unnecessary encoding boundary. The positive manifest and negative injected-version cases both pass through the real release helper.and fixes the following build and release bugs:
Windows PDF and Snap release builds stay portable. Thanks to xet7.
The server PDF renderer now asks Meteor's runtime CommonJS resolver for PDFKit, selecting the package entry that derives resource paths from the deployed `__filename`. The Linux-built Windows bundle therefore no longer passes its build runner's `file://` URL to Node's `createRequire`. The native Snap jobs also preinstall LXD with five bounded attempts before the official build action, so a transient Snap Store nonce timeout no longer ends a release before Snapcraft starts. Positive and negative regression tests preserve both paths; the PDF generation suites and production Meteor bundle build pass.Thanks to above GitHub users for their contributions and translators for their translations.