Top story for Wednesday, October 14, 2026

Home Assistant closes a route that let a non-administrator open the interface of an administrator-only app. The app proxy checked the session cookie but did not enforce the app’s administrator restriction.

Music Assistant keeps an album on one source instead of independently choosing each track from different releases or services. That avoids switching between an original, a remaster and a compilation during one album, preserving its intended gaps and loudness. If the selected source lacks a track, another copy can still fill the gap.

Matter.js Server adds a Talk control to its camera dashboard, letting someone watching a compatible camera send audio from the browser’s microphone. Opening the live view does not ask for microphone access; talking must be switched on separately.

Music Assistant’s AirPlay tool lets a HomePod pass Siri commands and touches on its top surface back to the server when its AirPlay permission is Everyone on the same network. Those speakers could play music but their skip, pause and play requests were silently ignored.

Home Assistant adds a local connection to Hase iQ wood stoves from the generation controlled by the flamemonitor app. It reads the stove directly without the vendor app or a cloud service.

ESPHome sets version 2027.5.0 as the removal point for five display drivers that have been deprecated since April. The build warnings name both the deadline and the replacement, giving makers a concrete date for updating their display configurations.

Home Assistant stops waiting for the first iCloud calendar and Reminders download during integration setup. Accounts with a large history of completed reminders could otherwise spend minutes or hours starting, or have setup cancelled altogether.