# Weblate 2026.11

*Não lançado ainda.*

### Novas funcionalidades

* Added [eTranslation automatic suggestions](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-etranslation) with a default language domain and per-component domain mapping.
* User settings can be imported from a [user data export](https://docs.weblate.org/pt-br/latest/contributing/schemas.md#schema-userdata) on the account page.
* Added [string selection](https://docs.weblate.org/pt-br/latest/admin/automation.md#automation-action-weblate-select) for composing Automation actions with reusable result scopes.
* Automatic suggestions support multiple installations of one service at site, workspace, and project scope, with optional slugs, inherited-installation exclusions, and reversible pause controls. See [Sugestões automáticas](https://docs.weblate.org/pt-br/latest/admin/machine.md#machine-translation-setup).

### Melhorias

* Bounded [JSON webhook response bodies and headers](https://docs.weblate.org/pt-br/latest/admin/addons.md#webhook-response-limits) to limit worker memory use and activity-log growth.
* Reorganized [user profile settings](https://docs.weblate.org/pt-br/latest/user/profile.md) into clearer tabs for public profile, security, and developer access.
* [Component creation](https://docs.weblate.org/pt-br/latest/admin/projects.md#adding-components) loads remote branches only for the selected component, avoiding repository queries when opening the page.
* [Automation AI quality evaluation](https://docs.weblate.org/pt-br/latest/admin/automation.md#automation-action-weblate-ai-quality) now uses the effective add-on’s service automatically, with an optional service assertion.
* Require selecting an [authenticator app](https://docs.weblate.org/pt-br/latest/admin/auth.md#fa) at sign-in when multiple apps are registered, so unsuccessful checks affect only the selected app.
* Added recovery of missing Git checkouts or `.git` directories, including local glossaries, through [Reset and reapply translations recovery behavior](https://docs.weblate.org/pt-br/latest/admin/continuous.md#manage-vcs-reset-reapply), with clearer alert diagnostics and repository maintenance links.
* SVG status badges now use a blurred text shadow to match the shields.io style, improving text contrast.

### Security fixes

* Fixed role permission revocation through partial API updates.
* Limited SAML identity-provider request parsing to prevent compressed request resource exhaustion.

### Correções de erros

* Fixed [Sphinx POT extraction](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-sphinx) to respect the component’s gettext line wrapping setting.
* Fixed [legal document](https://docs.weblate.org/pt-br/latest/admin/optionals.md#legal) links to prefer configured external URLs and kept privacy policy confirmation optional when hidden without a URL.

### Compatibilidade

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

### Colaboradores

<!-- DO NOT EDIT! Automatically generated by scripts/prepare-release upon release. -->

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/174?closed=1).

# Weblate 2026.10.1

*Released on October 9th 2026.*

### Novas funcionalidades

* Added opt-in [team synchronization from identity providers](https://docs.weblate.org/pt-br/latest/admin/auth.md#sso-team-sync), including GitLab group mapping and group-based login restrictions.
* Added [`DEFAULT_NOTIFICATIONS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-DEFAULT_NOTIFICATIONS) to configure [Notificações](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications) settings for new users.
* Added [Push on update](https://docs.weblate.org/pt-br/latest/admin/projects.md#component-push-on-update) to push only after committing translations, not after upstream updates.

### Melhorias

* Improved diagnostics for failed [GitHub pull request creation](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-pull-requests).
* Added a [Kotlin SDK quickstart](https://docs.weblate.org/pt-br/latest/devel/kotlin-sdk.md) and an overview of official and third-party [libraries and SDKs](https://docs.weblate.org/pt-br/latest/devel/libraries.md).
* Clarified the labels and consequences of reset actions in [Manutenção do repositório](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance).
* Authentication method names and icons now come from python-social-auth, including current service branding, while existing [authentication settings](https://docs.weblate.org/pt-br/latest/admin/auth.md) overrides remain supported.
* Improved full name initialization from provider names during [social authentication](https://docs.weblate.org/pt-br/latest/admin/auth.md).
* Made unused components and glossary languages warning [diagnostics](https://docs.weblate.org/pt-br/latest/devel/alerts.md#alerts) and enabled dismissal for them and suspected monolingual or bilingual file-format misconfiguration.
* Clarified that contributing to [shared translation memory](https://docs.weblate.org/pt-br/latest/admin/memory.md#shared-tm) publishes strings and their origin outside project access control.

### Security fixes

* Prevented [project backup imports](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) from granting site-wide permissions through restored project teams ([GHSA-pgmx-p3h7-7q8x](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-pgmx-p3h7-7q8x)).
* Prevented [Automation workflow](https://docs.weblate.org/pt-br/latest/admin/automation.md#automation-workflows) configuration from disclosing references to restricted components in change history.
* Marked access-controlled [status widget](https://docs.weblate.org/pt-br/latest/devel/share.md#promotion) responses as private to shared caches.
* Disallowed filesystem paths and the `file` scheme for [version control repository URLs](https://docs.weblate.org/pt-br/latest/vcs.md#vcs-repository-url-troubleshooting).
* Added restrictive cache controls to authenticated HTML responses to prevent previously viewed content from being restored after logout.
* Hardened version control metadata filtering against trailing-dot and trailing-space path aliases.
* Prevented [sitemaps](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-public-sharing) from disclosing restricted component and translation URLs.
* Restricted stale Git lock cleanup to the repository running the failed command and prevented empty file lists from committing unrelated changes.
* Enforced e-mail confirmation code expiry through Python Social Auth using [`AUTH_TOKEN_VALID`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-AUTH_TOKEN_VALID), independently of scheduled cleanup.

### Correções de erros

* Fixed [Filtro de chaves](https://docs.weblate.org/pt-br/latest/admin/projects.md#component-key-filter) for JSON and other formats supporting both monolingual and bilingual use.
* Fixed acting-user attribution and display for administrative account changes in [audit logs](https://docs.weblate.org/pt-br/latest/security/privacy-compliance.md).
* Removed expired OpenID associations and OIDC login nonces during hourly [authentication storage cleanup](https://docs.weblate.org/pt-br/latest/admin/auth.md).
* Fixed [Backups de nível de projeto](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) restoration of translation file language aliases and duplicate team names, and improved validation error formatting.
* Prevented concurrent creation of duplicate project team names and preserved custom teams when enabling features that require conflicting [built-in team names](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-access-control).
* Prevented duplicate initiation of [provider authentication](https://docs.weblate.org/pt-br/latest/admin/auth.md) and improved recovery guidance for authentication failures and token errors.
* Components using the GitHub App now follow renamed or transferred repositories; existing Apps need to subscribe to the `Repository` event, see [App webhook URL](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-app-webhook).

### Compatibilidade

* The `file` scheme is disabled for security reasons and can no longer be included in [`VCS_ALLOW_SCHEMES`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_ALLOW_SCHEMES). Weblate now fails to start until it is removed from the setting and existing components are migrated to supported repository URLs.

### Atualização

Authentication names and provider logos now come from python-social-auth.
Add `social_django.finders.SocialAuthIconFinder` after the standard finders in
`STATICFILES_FINDERS` in `settings.py`, then run
`weblate collectstatic --noinput`. The example configuration and Docker
image already include the finder. Existing authentication name and image
settings remain supported. See [Autenticação](https://docs.weblate.org/pt-br/latest/admin/auth.md) for details.

If you maintain a custom `SOCIAL_AUTH_PIPELINE` in `settings.py`, add
`social_core.pipeline.social_auth.social_names` immediately after
`social_core.pipeline.social_auth.social_details`. Name conversion now runs
in this shared step, and Weblate no longer joins provider first and last names
itself. Existing full names are preserved. The example configuration and Docker
image already include the new step. See [Autenticação](https://docs.weblate.org/pt-br/latest/admin/auth.md) for details.

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

### Colaboradores

Contribuições ao código
: Michal Čihař, Kartik Ohri, Karen Konou, Philipp R, michael-smt

Contribuições de tradução
: Michal Čihař, VfBFan, Eduardo Addad de Oliveira, Basheer Radman, Любомир Василев, Watchman89, Matthaiks, Peter Vančo, Negonkey, Andrei Stepanov, Fjuro, justcontributor, reducedradius, Lee Vincent, Arif Budiman, Florent, Alexis Launay, Alagirisamy Rengaraj, Sup! 0_0, Milo Ivir, Adolfo Jayme Barrientos, Yaron Shahrabani, Kristoffer Grundström, Dick Groskamp, Ldm Public, hoanghuy309, Nicat, Nitin Jangra, Temuri Doghonadze, Horus68, Szafranek13, LaKato, Daniel Nylander, Massimo Pissarello, Aindriú Mac Giolla Eoin, Dan, Eduard Ereza Martínez

Contribuições para a documentação
: Michal Čihař, Kartik Ohri, Philipp R, michael-smt

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/176?closed=1).

# Weblate 2026.10

*Released on October 1st 2026.*

### Novas funcionalidades

* Added [enforced-check inheritance](https://docs.weblate.org/pt-br/latest/admin/projects.md#component-enforced-checks) at workspace, project, category, and component level.
* DeepL automatic suggestions can include a rephrased version of an existing translation via the DeepL Write API (Pro plans and supported languages only). See [Rephrasing existing translations](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-deepl-rephrase).
* Added the [Automation add-on](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-automation-automation) for conditional translation and editing workflows. See [Automation reference and cookbook](https://docs.weblate.org/pt-br/latest/admin/automation.md).
* Source strings and translation keys can now be [edited](https://docs.weblate.org/pt-br/latest/user/translating.md#edit-source) in the editor and REST API while preserving translations and history.
* Added an [AI quality evaluation add-on](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-ai-quality) that records quality checks for existing translations.
* Added language-specific [string flags](https://docs.weblate.org/pt-br/latest/admin/translating.md#additional-flags) to the editor, Tools menu, bulk editing, and REST API.
* Added an inherited [language creation policy](https://docs.weblate.org/pt-br/latest/workflows.md#workflow-language-restrictions) that allows existing project target languages and requires approval for new ones.
* Added a guided [first translation](https://docs.weblate.org/pt-br/latest/user/basic.md#translator-start) and advice for [building a translators community](https://docs.weblate.org/pt-br/latest/devel/community.md).
* Added [custom source languages](https://docs.weblate.org/pt-br/latest/workflows.md#workflow-source-language) to project-language workflows.
* Added configurable per-user and IP/network [API rate limits and exemptions](https://docs.weblate.org/pt-br/latest/api.md#api-rate), including Docker configuration.
* Added [component-mounted add-on APIs](https://docs.weblate.org/pt-br/latest/contributing/addons.md#component-addon-api).
* The [Statistics generator](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-generate-generate) can now produce component-wide locale lists with native language names, text direction, and translation statistics.
* Added a testing version of [Kotlin SDK CDN](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-cdn-kotlin).
* Added [SPDX contributor comments](https://docs.weblate.org/pt-br/latest/formats/gettext.md#gettext-contributor-comments) as a PO file format parameter, replacing the contributor comments add-on.
* Added the `xml_whitespace_handling` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) for [XLIFF 1.1 and 1.2](https://docs.weblate.org/pt-br/latest/formats/xliff.md#xliff) to follow `xml:space`, always preserve, or always normalize whitespace.
* Added the `xliff_placeables` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) for [XLIFF 1.1 and 1.2](https://docs.weblate.org/pt-br/latest/formats/xliff.md#xliff) and [XLIFF 2.0](https://docs.weblate.org/pt-br/latest/formats/xliff2.md) to choose between plain text and placeables handling.
* Added a configurable [`AVATAR_URL_TEMPLATE`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-AVATAR_URL_TEMPLATE) to support alternative avatar providers, such as fetching by username instead of e-mail hash.
* Added selecting individual strings from the [string list](https://docs.weblate.org/pt-br/latest/user/search.md#search-strings) for [Editor em massa](https://docs.weblate.org/pt-br/latest/user/translating.md#bulk-edit).

### Melhorias

* Component configuration errors are reported before fetching the repository when repository files are not needed for validation.
* Clarified that site-wide team management can grant access to private projects independently of the team manager’s own project access.
* Improved checks, automatic fixes, glossary matching, and machine translation for [independent alternatives in multivalue formats](https://docs.weblate.org/pt-br/latest/formats.md#format-multivalue).
* Added a thumbnail picker to associate existing [screenshots](https://docs.weblate.org/pt-br/latest/user/translating.md#add-existing-screenshot) with a string from the translation editor.
* [Repository maintenance](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance) now checks permissions on the repository-owning component and explains where missing permissions are required.
* [Automatic translation](https://docs.weblate.org/pt-br/latest/user/translating.md#auto-translation) using other components now prefers translations with matching source text and context.
* Aligned [string search filters](https://docs.weblate.org/pt-br/latest/user/search.md#search-strings) with the status overview’s order and colors, and added an All strings option to clear the query.
* Added monthly instance activity to the [data sent with support integration](https://docs.weblate.org/pt-br/latest/admin/support.md#support-data) for activity monitoring and discovery ranking.
* Improved [repository maintenance](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance) with disabled push controls when push configuration is missing and direct links to component VCS settings.
* The [automatic translation add-on](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-autotranslate-autotranslate) can create approved strings, falling back to translated strings when reviews are disabled for the target language.
* Added independent term alternatives and scoped metadata to [TBX glossaries](https://docs.weblate.org/pt-br/latest/formats/tbx.md#tbx), including metadata-preserving TBX exports.
* Whitespace characters are now rendered consistently in the source string display and the translation editor, and different kinds of whitespace are now distinguishable from each other.
* Added a [font-monospace](https://docs.weblate.org/pt-br/latest/admin/checks.md#custom-checks) flag to display a string in the translation editor using a monospace font, useful for aligning command-line or terminal output.
* History View details and Revert actions are larger, more widely spaced, and show a hover and focus background.
* The units API now links to a unit’s associated screenshots and supports listing, assigning, and removing them via [`GET /api/units/(int:id)/screenshots/`](https://docs.weblate.org/pt-br/latest/api.md#get--api-units-(int-id)-screenshots-).
* Added a [keyboard shortcut](https://docs.weblate.org/pt-br/latest/user/translating.md#keyboard) to approve a translation and save and continue.
* Clarified [translation quality filter](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-commit-policy) explanations and effective per-language review settings, with links to workflow configuration.
* Reworked the [Automatic suggestions](https://docs.weblate.org/pt-br/latest/user/translating.md#machine-translation) tab to use the same layout as suggestions, and it now shows the [translation memory](https://docs.weblate.org/pt-br/latest/admin/memory.md#translation-memory) context of each match.
* The [xgettext](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext) and [Meson](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-meson) extraction add-ons now bundle common XML translation rules and support project-local ITS directories for extracting mixed source formats into a shared POT.
* [Repository maintenance](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance) now links to the latest pull or merge request opened by Weblate.
* The project Files menu now lists translation download formats from [`WEBLATE_EXPORTERS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-WEBLATE_EXPORTERS) instead of a fixed subset.
* [LLM automatic suggestions](https://docs.weblate.org/pt-br/latest/user/translating.md#machine-translation) now show the model and, for custom API endpoints, the host that produced them.
* Automation actions can select strings from the triggering change or a previous action’s affected units. See [Automation reference and cookbook](https://docs.weblate.org/pt-br/latest/admin/automation.md).
* Unified browsing and [searching strings](https://docs.weblate.org/pt-br/latest/user/search.md#search-strings), aligned search filters with the status overview, and added direct editor access to language-specific lists and an All strings filter.
* Improved [translation history](https://docs.weblate.org/pt-br/latest/user/translating.md#translation-history) with faster browsing, date navigation, and clearer actions.
* Improved [screenshot assignment](https://docs.weblate.org/pt-br/latest/user/translating.md#add-existing-screenshot) in the editor with a thumbnail picker, predictable ordering, and removal without reloading.
* The editor now distinguishes whitespace in source and translation strings, supports the [font-monospace](https://docs.weblate.org/pt-br/latest/admin/checks.md#custom-checks) flag, and accepts decimal [font-spacing](https://docs.weblate.org/pt-br/latest/admin/checks.md#custom-checks) values.
* Added a Markdown preview to [comments](https://docs.weblate.org/pt-br/latest/user/translating.md#user-comments), explanations, announcements, and project instructions.
* Added a [keyboard shortcut](https://docs.weblate.org/pt-br/latest/user/translating.md#keyboard) to approve a translation and continue.
* Clarified [translation quality filters](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-commit-policy) and effective per-language review settings.
* Improved [translation memory](https://docs.weblate.org/pt-br/latest/admin/memory.md#translation-memory) lookup performance and added match context to [automatic suggestions](https://docs.weblate.org/pt-br/latest/user/translating.md#machine-translation).
* Reduced aggregation overhead for the [inconsistent translations check](https://docs.weblate.org/pt-br/latest/user/checks.md#check-inconsistent) on large projects.
* Moved related [quality check](https://docs.weblate.org/pt-br/latest/user/checks.md#checks) updates to background tasks to avoid slow saves when many strings share a source or translation.
* [Links Markdown](https://docs.weblate.org/pt-br/latest/user/checks.md#check-md-link) quality check now detects untranslated link titles.
* [Automatic translation](https://docs.weblate.org/pt-br/latest/user/translating.md#auto-translation) across components now prefers matching source text and context. The [automatic translation add-on](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-autotranslate-autotranslate) can create approved strings, or translated strings when reviews are disabled.
* Improved checks, fixes, glossary matching, and machine translation for [multivalue alternatives](https://docs.weblate.org/pt-br/latest/formats.md#format-multivalue).
* [TBX glossaries](https://docs.weblate.org/pt-br/latest/formats/tbx.md#tbx) now support independent term alternatives and scoped metadata, preserved on export.
* The [xgettext](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext) and [Meson](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-meson) add-ons now support bundled XML rules and project-local ITS directories.
* Added [uploaded file language checking](https://docs.weblate.org/pt-br/latest/user/files.md#upload-ignore-language) with an override in the upload form and API.
* Translation file uploads through the API accept form field content without a filename.
* [Repository maintenance](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance) now checks permissions on the repository-owning component, links to VCS settings, and disables unavailable push controls.
* [SSH repository connections](https://docs.weblate.org/pt-br/latest/vcs.md#ssh-repos) now try IPv4 and IPv6 addresses in a staggered sequence and report failed addresses and ports.
* Add-on error [diagnostics](https://docs.weblate.org/pt-br/latest/devel/alerts.md#alerts) now link to the responsible add-on configuration.
* Added monthly instance activity to [support integration data](https://docs.weblate.org/pt-br/latest/admin/support.md#support-data).
* [Suggestions](https://docs.weblate.org/pt-br/latest/user/translating.md#suggestions) can be shown in the [Modo zen](https://docs.weblate.org/pt-br/latest/user/translating.md#zen-mode) and accepted, rejected, or voted on in place.
* Added a separate [repository browser URL](https://docs.weblate.org/pt-br/latest/admin/projects.md#component-repoweb-translations) for translation files.
* Docker startup now reports invalid nginx-related environment values before attempting to start nginx.
* [Squash de commits git](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-git-squash) now supports squashing together per author and language.
* The automatic translation API can run as a background task. See [`POST /api/translations/(string:project)/(string:component)/(string:language)/autotranslate/`](https://docs.weblate.org/pt-br/latest/api.md#post--api-translations-(string-project)-(string-component)-(string-language)-autotranslate-).

### Security fixes

* Prevented repository URLs from injecting executable Mercurial configuration ([GHSA-7rqp-4x64-cwch](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-7rqp-4x64-cwch)).
* Prevented [Arquivos de metadados da App Store](https://docs.weblate.org/pt-br/latest/formats/appstore.md) from following symbolic links outside the component repository ([GHSA-7q8w-w5h2-v3cq](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-7q8w-w5h2-v3cq)).
* Project administrators can no longer see blocked users’ account e-mail addresses without site-wide user management permission.
* Removed repositories created from rejected component ZIP and document uploads.
* Protected translation reverts against cross-site request forgery.
* Prevented client-supplied forwarded IP headers from bypassing anonymous API rate limits.
* Prevented whitespace-only username searches from listing users through [`GET /api/users/`](https://docs.weblate.org/pt-br/latest/api.md#get--api-users-).
* Prevented project access managers from assigning users to site-wide teams associated with the project.
* Invalidated outstanding password reset links after password changes regardless of e-mail address casing.
* Prevented concurrent requests from exceeding configured web action rate limits.
* Limited XLIFF language declarations in uploads and the number and size of translation alternatives to prevent resource exhaustion.
* Enforced language-scoped screenshot permissions and restricted component access in translation consistency and direct automatic translation workflows.
* Prevented [project API tokens](https://docs.weblate.org/pt-br/latest/api.md#api-tokens) from inheriting permissions through automatic team assignments.
* Protected Git and Mercurial metadata consistently in repository paths and downloads, and excluded known foreign VCS metadata when importing component ZIP files.
* Prevented notification subscriptions from exposing inaccessible project and component settings through the REST API and profile settings.
* Rate-limited password-reset requests for unknown e-mail addresses.

### Correções de erros

* [Project backups](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) now tolerate missing or damaged repositories and preserve available files and translation data during restore.
* Project MO archive downloads now skip incompatible file formats without failing the download.
* Made eligible automatic-translation sources consistent across web, API, and Automation add-on configuration.
* Fixed [`move_language`](https://docs.weblate.org/pt-br/latest/admin/management.md#weblate-admin-move_language) and automatic language alias updates to preserve language-specific settings and permission limits, and detect conflicting translations or settings before moving content.
* Suppressed OpenSSH post-quantum key exchange warnings that obscured errors from [SSH repositories](https://docs.weblate.org/pt-br/latest/vcs.md#ssh-repos).
* Fixed the [BBCode markup check](https://docs.weblate.org/pt-br/latest/user/checks.md#check-bbcode) for parameterized, nested, and multiline tags.
* Avoided commits for [translation state](https://docs.weblate.org/pt-br/latest/workflows.md#states) and metadata changes that the file format cannot store, while preserving [Filtro de qualidade de tradução](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-commit-policy) behavior.
* Fixed commit attribution for needs-editing changes caused by source edits.
* Improved plain-text [notification e-mails](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications) with readable links and tables instead of Markdown.
* Project language archive downloads in the REST API now honor language-scoped download permissions consistently with the web interface.
* Fixed authentication initialization with [Sample configuration to start Granian with ASGI](https://docs.weblate.org/pt-br/latest/admin/install.md#running-granian-asgi) when Sentry instrumentation is enabled.
* Fixed [status widgets](https://docs.weblate.org/pt-br/latest/devel/share.md#promotion) for categories, category-language pages, and workspaces, and corrected statistics for nested [categories](https://docs.weblate.org/pt-br/latest/admin/projects.md#category) and deleted [Etiquetas de texto](https://docs.weblate.org/pt-br/latest/devel/translations.md#labels).
* Fixed MIME nesting and reduced the size of inline branding images in [notification e-mails](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications).
* [Anthropic](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-anthropic) now preserves path prefixes in custom base URLs.
* Fixed false positives in the [consecutive duplicated words check](https://docs.weblate.org/pt-br/latest/user/checks.md#check-duplicate) for South Asian languages and prevented the [punctuation spacing check](https://docs.weblate.org/pt-br/latest/user/checks.md#check-punctuation-spacing) from inserting spaces in URLs.
* Fixed the [maximum size check](https://docs.weblate.org/pt-br/latest/user/checks.md#check-max-size) preview shifting text when `font-spacing` is set.
* Fixed [Docker startup warning checks](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#docker-startup-warnings) when the warning directory is missing or inaccessible.
* Fixed an [upgrade](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) failure when migrating dismissed component alerts from releases before 2026.8.
* Fixed the [search results refresh](https://docs.weblate.org/pt-br/latest/user/search.md#search-results-cache) icon color in themes and on hover.
* Fixed truncated grouped summaries in [notification e-mails](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications); the 100 entries limit now applies only to listings of individual changes.
* Fixed bilingual [glossary terms](https://docs.weblate.org/pt-br/latest/user/glossary.md#glossary-untranslatable) appearing as untranslatable when translating in their source language.
* Fixed [component discovery](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-discovery-discovery) with inherited licenses and other inherited settings.
* Backups containing legacy component formats (e.g `plainxliff`, `csv-utf-8`) are now correctly restored.
* Fixed switching between singular and plural forms when [adding new strings](https://docs.weblate.org/pt-br/latest/devel/integration.md#adding-new-strings).

### Compatibilidade

* An explicit source-wide `read-only` flag now takes precedence over translation flags. Remove it from the source to allow editing.
* Existing [project API tokens](https://docs.weblate.org/pt-br/latest/api.md#api-tokens) lose permissions inherited from non-project teams. Assign required permissions through project-specific teams.
* API throttles now use [`API_RATELIMIT_ANON`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-API_RATELIMIT_ANON) and [`API_RATELIMIT_USER`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-API_RATELIMIT_USER) instead of `REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]`.
* [API authentication](https://docs.weblate.org/pt-br/latest/api.md#api-generic) now rejects unsupported authentication schemes, such as Basic, with HTTP 401, including when a valid browser session is present.
* Notification subscription API responses now expose `project` and `component` as nullable URL strings instead of nested objects.
* The former `plainxliff` and `xliff2-placeables` file formats are migrated to [XLIFF 1.1 and 1.2](https://docs.weblate.org/pt-br/latest/formats/xliff.md#xliff) / [XLIFF 2.0](https://docs.weblate.org/pt-br/latest/formats/xliff2.md) with the `xliff_placeables` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params).
* Norwegian Bokmål now uses `nb` as its built-in language code while preserving `nb_NO` support, see [Definições de idioma](https://docs.weblate.org/pt-br/latest/admin/languages.md#languages).

### Atualização

* Add `weblate.automation` to custom [`INSTALLED_APPS`](https://docs.djangoproject.com/pt-br/stable/ref/settings/#std-setting-INSTALLED_APPS) before migrating. If [`WEBLATE_ADDONS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-WEBLATE_ADDONS) explicitly lists the automation add-on, change its import path to `weblate.automation.addon.AutomationAddon`. The official Docker image includes the new app.
* Existing [contributor comments add-ons](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-authors) migrate to component file format parameters. Remove the obsolete add-on from custom [`WEBLATE_ADDONS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-WEBLATE_ADDONS) and [`DEFAULT_ADDONS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-DEFAULT_ADDONS) settings; new components no longer inherit it.
* Add `weblate.api` and `weblate.kotlin_sdk` to [`INSTALLED_APPS`](https://docs.djangoproject.com/pt-br/stable/ref/settings/#std-setting-INSTALLED_APPS) before migrating. The official Docker image includes both. Installing the Kotlin app does not enable [CDN publication](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-cdn-kotlin) on any component.
* In non-Docker settings, move the `anon_throttle` and `user_throttle` arguments from `get_drf_settings` and any custom `REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]` values to [`API_RATELIMIT_ANON`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-API_RATELIMIT_ANON) and [`API_RATELIMIT_USER`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-API_RATELIMIT_USER). Existing Docker rate-limit variables still work.

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, michael-smt, Mark Davies, Diptajoy Mistry, krisna, Metin Kılagöz, MIHAIL N., Claude Sonnet 5, mmustafasenoglu, i4i, Mustafa Senoglu, anishkun, Anish kunda, Gersona, Magnus Karlsson, JUSHUANGHUI LI, Chimwemwe Siyingwa, krisnaparahita, Dr Alex Mitre, Aditi Tarate, Kartik Ohri, Suleyman Arif Uzun

Contribuições de tradução
: hoanghuy309, Watchman89, Adam Havránek, Fjuro, justcontributor, Szafranek13, Tony Ng, Chloe Wang, VfBFan, Valentin Ljuba, Daniel Nylander, Andrei Stepanov, Michal Čihař, Matthaiks, Arif Budiman, Любомир Василев, Aindriú Mac Giolla Eoin, Yaron Shahrabani, Adolfo Jayme Barrientos, Sup! 0_0, Lee Vincent, Milo Ivir, Dick Groskamp, Eduard Ereza Martínez, Ricky Tigg, Mickaël Binos, reducedradius, Artyom Rybakov, Kyotaro Iijima, Jim Kats, Supaplex, Peter Vančo, Stysusss, Ulrik, Ldm Public, Júlia Rosell Saldaña, Deleted User, eulalio, Zahid Rizky Fakhri, Takeru Mikenu, 이정희, António Oliveira, xXx, தமிழ்நேரம், Kaya Zeren, Bone NI, QuietCedar47, Andi Chandler, Ettore Atalan, Massimo Pissarello, Besnik Bleta, Chimwemwe Siyingwa, Nicat, Sketch6580, Areera

Contribuições para a documentação
: Michal Čihař, Karen Konou, michael-smt, Diptajoy Mistry, Maciej Olko, MIHAIL N., Claude Sonnet 5, mmustafasenoglu, i4i, Mustafa Senoglu, anishkun, Anish kunda, Gersona, Magnus Karlsson, JUSHUANGHUI LI, Chimwemwe Siyingwa, krisnaparahita, krisna, Claude Opus 5.5, spatterlight, Dr Alex Mitre, Aditi Tarate, Kartik Ohri, Suleyman Arif Uzun

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/172?closed=1).

# Weblate 2026.9.1

*Released on September 8th 2026.*

### Novas funcionalidades

* Added per-user [notification diagnostics](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications) for users and administrators, with compact explanations of matching subscriptions for object paths.

### Melhorias

* Added explicit [search result refresh](https://docs.weblate.org/pt-br/latest/user/search.md#search-results-cache) in the translation editors and improved recovery when saved search results expire.
* [Docker development tests](https://docs.weblate.org/pt-br/latest/contributing/start.md#dev-docker) now automatically prepare an isolated test environment without requiring application startup or the Dev Container CLI.
* Added a [development container](https://docs.weblate.org/pt-br/latest/contributing/start.md#devcontainer) for tests and lint, with an optional [application QA profile](https://docs.weblate.org/pt-br/latest/contributing/start.md#dev-docker), isolated storage per Git worktree, dynamically allocated localhost application and mailbox ports, and Chromium diagnostics and mandatory browser test commands.
* Improved [translation statistics](https://docs.weblate.org/pt-br/latest/devel/reporting.md#stats) calculation performance and avoided redundant parent updates when loading check and label details.
* Added posting and displaying scoped [announcements](https://docs.weblate.org/pt-br/latest/admin/announcements.md) on category-language pages.
* Added a dismissible diagnostic for [glossaries](https://docs.weblate.org/pt-br/latest/user/glossary.md#glossary-terminology) with disabled string management when they use a local repository or contain terminology.
* Clarified [incident reporting](https://docs.weblate.org/pt-br/latest/security/incident-reporting.md), reporting deadlines, and security notifications for hosted and self-hosted users.
* The Manage reports permission now consistently grants access to complete [translation reports](https://docs.weblate.org/pt-br/latest/devel/reporting.md) for the selected scope, including private projects and restricted components below it.
* Docker deployments now use a combined [Celery](https://docs.weblate.org/pt-br/latest/admin/install.md#celery) worker by default, reducing memory usage while increasing task throughput. Use [`CELERY_WORKER_MODE`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-CELERY_WORKER_MODE) to select the combined, split, or single worker setup.
* Improved [Billing](https://docs.weblate.org/pt-br/latest/admin/optionals.md#billing) detail page loading performance by batching related project, invoice, and audit log queries.
* Further reduced [Celery](https://docs.weblate.org/pt-br/latest/admin/install.md#celery) worker memory usage by sharing preloaded URL configuration between worker processes and loading bitmap widget rendering dependencies only when needed.
* Docker startup configuration warnings are now available as [deployment checks](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#docker-startup-warnings), including in horizontally scaled deployments.
* Reduced peak memory use and task duration for [notification digests](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications) by processing recipients in bounded batches and limiting each summary to 100 entries.

### Security fixes

* Prevented repeated [authenticator app registration](https://docs.weblate.org/pt-br/latest/admin/auth.md#fa) from creating duplicate devices and allowing reuse of one-time codes. Existing equivalent duplicate devices are merged while preserving consumed codes.
* Borg backup passphrases are now recursively scrubbed from Sentry error reports, including when a custom event scrubber is configured.
* Font overrides are now restricted to fonts uploaded to the same project.
* Engage pages and status widgets no longer disclose Private or Custom projects unless [Public sharing](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-public-sharing) is enabled.
* Prevented excessive CPU consumption while checking malformed Markdown and MDX syntax.

### Correções de erros

* Fixed the approved-only [commit policy](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-commit-policy) blocking commits for languages with reviews disabled by workflow settings.
* Fixed the [uWSGI configuration example](https://docs.weblate.org/pt-br/latest/admin/install.md#uwsgi) to use the virtual environment’s Python when launching helpers for SSH repository operations.
* Fixed language context and links in change history for scoped [announcements](https://docs.weblate.org/pt-br/latest/admin/announcements.md) and other language-specific events.
* Restored [DeepL](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-deepl) API v1 translation support while retaining modern API language discovery and glossary improvements.
* REST API unit updates now enforce the same translation text length limit as the web editor.
* HTML void elements in [MDX files](https://docs.weblate.org/pt-br/latest/formats/mdx.md#mdx) translations are now kept self-closing after sanitization, preventing invalid MDX output.
* The [`autotranslate API endpoint`](https://docs.weblate.org/pt-br/latest/api.md#post--api-translations-(string-project)-(string-component)-(string-language)-autotranslate-) now correctly describes its accepted request body fields (`q`, `mode`, `auto_source`, `component`, `engines`, `threshold`) in the OpenAPI schema instead of incorrectly reflecting the Translation resource.
* Links outside tab navigation now correctly activate their target tabs, fixing upload links for missing translations and new components.
* Error reporting integrations now distinguish informational messages from exceptions and reliably report the explicitly handled exception.
* The default Celery per-child memory limit now accommodates the application’s baseline memory usage, avoiding unnecessary worker recycling.
* Backup services now start only after settings and database backup files are fully updated, while backups to different Borg repositories can run in parallel.

### Compatibilidade

* Anonymous access to engage pages and status widgets is now disabled by default for Private and Custom projects. Enable [Public sharing](https://docs.weblate.org/pt-br/latest/admin/projects.md#project-public-sharing) to preserve existing shared links after upgrading. Public and Protected projects are unchanged.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* Authenticator app registrations started before this upgrade must be restarted. Sessions referencing a removed duplicate device may require two-factor verification again.
* Docker deployments now default to the combined Celery worker mode. If your deployment relies on separate workers for each queue or configures them using `CELERY_MAIN_OPTIONS`, `CELERY_NOTIFY_OPTIONS`, `CELERY_MEMORY_OPTIONS`, `CELERY_TRANSLATE_OPTIONS`, or `CELERY_BACKUP_OPTIONS`, set `CELERY_WORKER_MODE=split` to preserve the previous behavior.
* The Docker `CELERY_SINGLE_PROCESS` environment variable is deprecated. Use `CELERY_WORKER_MODE=single` instead; the compatibility alias logs a startup warning.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Shweta Singh, michael-smt

Contribuições de tradução
: ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Ldm Public, hoanghuy309, Vaclovas Intas (Vac31.), Matthaiks, Adam Havránek, VfBFan, reducedradius, Bone NI, Yaron Shahrabani, Любомир Василев, Fjuro, Andrei Stepanov, Arif Budiman, Watchman89

Contribuições para a documentação
: Michal Čihař, Shweta Singh, michael-smt

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/173?closed=1).

# Weblate 2026.9

*Released on September 3rd 2026.*

### Novas funcionalidades

* [Repository maintenance actions](https://docs.weblate.org/pt-br/latest/admin/continuous.md#repository-maintenance) now run as background tasks, avoiding request and proxy timeouts. Project-wide maintenance remains available for authorized repositories and lists components skipped because of linked-component permissions. The [`repository API`](https://docs.weblate.org/pt-br/latest/api.md#post--api-projects-(string-project)-repository-) supports the same behavior using `background: true`.
* [Descoberta de componente](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-discovery-discovery) can optionally create components from a monolingual base or new base file when no translation files exist yet.
* Added [Version control parameters](https://docs.weblate.org/pt-br/latest/vcs.md#vcs-params) to configure repository behavior per component, including force pushing, opting out of pull requests, and GitHub pull request automerge.
* Added [Migrating existing components](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-app-migrate) for migrating existing Git and GitHub components to the Weblate GitHub App integration.
* Added a Visible columns in lists preference to choose which statistics columns are shown in project, component, and language lists. See [Preferências](https://docs.weblate.org/pt-br/latest/user/profile.md#profile-preferences).

### Melhorias

* AWS SES can now be used as the outbound e-mail transport in Docker deployments by setting [`WEBLATE_EMAIL_BACKEND`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_EMAIL_BACKEND) to `django_ses.SESBackend`. Region, endpoint, and SES v2 API opt-in are configurable via [`WEBLATE_AWS_SES_REGION_NAME`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_AWS_SES_REGION_NAME), [`WEBLATE_AWS_SES_REGION_ENDPOINT`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_AWS_SES_REGION_ENDPOINT), and [`WEBLATE_USE_SES_V2`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_USE_SES_V2).
* Removing the final Weblate workspace connection for a GitHub account, or removing the workspace holding it, now also uninstalls the [Weblate GitHub App](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-app-register) from GitHub.
* [Atualizar arquivo POT (xgettext)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext) now accepts multiple custom keywords (newline-separated) passed to xgettext via `--keyword`, enabling extraction from different function names.
* [Screenshot images](https://docs.weblate.org/pt-br/latest/admin/translating.md#screenshots) are now cached in browsers to reduce repeated downloads.
* Administrators can now find removed accounts by their former e-mail address in the audit log until [`AUDITLOG_EXPIRY`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-AUDITLOG_EXPIRY). See [Privacy regulations compliance](https://docs.weblate.org/pt-br/latest/security/privacy-compliance.md).
* Deployment diagnostics now detect slow filesystem metadata access in data and cache directories, and validate VCS command versions during configuration health checks instead of every process startup. See [Relatório de desempenho](https://docs.weblate.org/pt-br/latest/admin/admin.md#manage-performance) and [`VCS_BACKENDS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_BACKENDS).
* Clarified the instance-wide impact of roles containing site-wide permissions, including [site-wide user management](https://docs.weblate.org/pt-br/latest/admin/access.md#site-wide-user-management).
* Improved translation file loading performance for metadata-only string changes.
* Reduced [Celery](https://docs.weblate.org/pt-br/latest/admin/install.md#celery) worker startup memory usage by avoiding duplicate Django system checks and loading font rendering only when needed.
* [Billing](https://docs.weblate.org/pt-br/latest/admin/optionals.md#billing) audit logs now identify users who change plans, initiate payments, or merge billings.
* Assigning languages to a team now uses an All languages toggle which disables the language choice when turned on, and a manually chosen set of languages is kept when toggling it. See [Gerenciando controle de acesso por projeto](https://docs.weblate.org/pt-br/latest/admin/access.md#manage-acl).
* Management notices now distinguish support package activation, status refresh, unlinking, and Discover Weblate registration.
* Clarified generic [notification hook](https://docs.weblate.org/pt-br/latest/api.md#hooks) matching and privacy behavior.
* Clarified that Weblate does not populate Git submodules. See [Git submodules](https://docs.weblate.org/pt-br/latest/vcs.md#git-submodules).
* The initial [Buscar e substituir](https://docs.weblate.org/pt-br/latest/user/translating.md#search-replace) action is now labeled Review changes to distinguish it from confirmation.
* The [translation flags](https://docs.weblate.org/pt-br/latest/admin/translating.md#additional-flags) editor now supports reopening flags for editing, arrow-key navigation, and copying with `Ctrl`+`C`. It also keeps commas inside quoted values intact, allowing flags such as `regex:"^.{1,32}$"` to be typed and pasted.
* Repository failure alerts now provide guidance matching repository URL validation errors. See [Troubleshooting repository URLs](https://docs.weblate.org/pt-br/latest/vcs.md#vcs-repository-url-troubleshooting).

### Security fixes

* Component discovery now limits repository paths and file-mask comparisons to prevent excessive resource consumption from specially crafted repositories.
* Rejected [two-factor authentication](https://docs.weblate.org/pt-br/latest/admin/auth.md#fa) attempts now apply [`AUTH_LOCK_ATTEMPTS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-AUTH_LOCK_ATTEMPTS), invalidate pending password sign-ins on lock or password change, and accept six-digit TOTP codes with leading zeroes.
* [Project backup restores](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) now preserve all project, category, and component settings. They also allowlist repository metadata for Git, git-svn, and Mercurial to prevent archives from supplying executable configuration or repository indirection.
* Project administrators can no longer remove [API tokens](https://docs.weblate.org/pt-br/latest/api.md#api-tokens) belonging to other projects.
* User listings and site-wide searches no longer expose project-scoped [API tokens](https://docs.weblate.org/pt-br/latest/api.md#api-tokens) to users without global user viewing or editing permission.
* Project and workspace [translation memory](https://docs.weblate.org/pt-br/latest/admin/memory.md#translation-memory) now respects restricted component access, and restricted components no longer contribute to shared translation memory.
* Webhook target matching no longer falls back to host/path suffix matching. Component repository URLs must match a repository URL from the webhook payload. See [Matching webhook targets](https://docs.weblate.org/pt-br/latest/admin/continuous.md#hooks-target-matching).

### Correções de erros

* LLM-based machine translation services now report invalid provider responses more clearly, custom [OpenAI](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-openai) and [Mistral](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-mistral) models no longer require a model-listing endpoint, and OpenAI automatic selection supports API keys restricted to older GPT models.
* Daily metric collection now uses independent tasks and more efficient database queries to reduce peak memory usage and avoid losing all scopes when one collection fails.
* Database dump failures are now shown in the [backups management interface](https://docs.weblate.org/pt-br/latest/admin/backup.md#automated-backup).
* GitLab merge request forks now disable Git LFS to avoid missing-object push failures. See [Git LFS](https://docs.weblate.org/pt-br/latest/vcs.md#git-lfs).
* Notification e-mails now wrap long strings instead of overflowing, keeping the View button reachable without horizontal scrolling.
* Creating additional components for a repository imported through the [GitHub App](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-repositories) no longer fails without showing any error, and component creation errors which previously could go unreported are now always displayed.

### Compatibilidade

* The `json_sort_keys` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) is now a choice between `none`, `case_sensitive`, and `case_insensitive` instead of a boolean, including when reading or writing it through the component REST API; existing components are migrated automatically. See [`GET /api/components/(string:project)/(string:component)/`](https://docs.weblate.org/pt-br/latest/api.md#get--api-components-(string-project)-(string-component)-).
* The Git with force push version control system has been replaced by the `git_force_push` [version control parameter](https://docs.weblate.org/pt-br/latest/vcs.md#vcs-params); existing components are migrated automatically.
* Component and category removal now preserves automatically generated translation memory by default. See [Memória de tradução](https://docs.weblate.org/pt-br/latest/admin/memory.md#translation-memory) for the optional cleanup behavior.
* Mercurial and Subversion repository hosts can now be trusted using [`VCS_PRIVATE_ALLOWLIST`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_PRIVATE_ALLOWLIST) without restricting Git to the same hosts through [`VCS_ALLOW_HOSTS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_ALLOW_HOSTS).
* The [`project deletion REST API endpoint`](https://docs.weblate.org/pt-br/latest/api.md#delete--api-projects-(string-project)-) now returns `202 Accepted` instead of `204 No Content` and contains a task URL in the response to track asynchronous deletion progress.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* Docker deployments need to configure trusted proxy addresses.
  Set [`WEBLATE_TRUSTED_PROXY_ADDRESSES`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_TRUSTED_PROXY_ADDRESSES) to preserve client IP addresses
  in nginx logs and Weblate when
  `WEBLATE_IP_PROXY_HEADER=HTTP_X_FORWARDED_FOR` is used; otherwise, the
  immediate TCP peer is used.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Gersona, Spyder, mmustafasenoglu, Kartik Ohri, Shweta Singh, Fabian Berg

Contribuições de tradução
: Yuri Chornoivan, Matthaiks, Steve, hoanghuy309, VfBFan, António Oliveira, Andrei Stepanov, Adam Havránek, Dick Groskamp, Aindriú Mac Giolla Eoin, Andi Chandler, Lee Vincent, Michal Čihař, Milo Ivir, Ldm Public, Peter Vančo, Alos (bop2039), Tarás Lavrentiev, Lito Parra, goeran, Любомир Василев, Vik, Bone NI, Pierfrancesco Passerini, CYAXXX, Yaron Shahrabani, Pavel Borecki, حسين نور الإسلام, amano, reducedradius, Fjuro, Frostre_, Sup! 0_0, Ulrik, xiezhihai, Yoshi, Alexander Gabilondo, Eduard Ereza Martínez, Watchman89, Kyotaro Iijima, AlexYang, justcontributor, Background update, Arif Budiman, Harsha Kanaparthi, notlin4, KuroisKitsune, Zahid Rizky Fakhri, Michal Várady, Massimo Pissarello, HThuren, SeyhaLite, David Wagener, Yauhen, Anucha Hlownonkor, michael0820, Artyom Rybakov, Nhật Nhật, 子悦解说, Mahdi B. Jahani, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝)

Contribuições para a documentação
: Michal Čihař, Gersona, Karen Konou, Spyder, mmustafasenoglu, Kartik Ohri, Shweta Singh

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/168?closed=1).

# Weblate 2026.8.1

*Released on August 7th 2026.*

### Novas funcionalidades

* Project and component APIs now expose all user-configurable settings, including access control and translation-memory settings. See [API REST do Weblate](https://docs.weblate.org/pt-br/latest/api.md).
* Added the [`metrics`](https://docs.weblate.org/pt-br/latest/admin/management.md#weblate-admin-metrics) command for retrieving server metrics locally in JSON, CSV, or OpenMetrics format.

### Correções de erros

* Task progress now requires authentication and works for aggregate automatic translation operations.
* Docker Celery worker logging no longer emits duplicate records through both Celery and Weblate log handlers.
* Component creation through the REST API now returns the background task URL in the response when creation work is queued.
* Large language model machine translation services no longer fail when the optional persona and style settings are absent from the stored configuration, as happens when the service is installed through the REST API.
* [`import_json`](https://docs.weblate.org/pt-br/latest/admin/management.md#weblate-admin-import_json) now preserves the component source language for newly imported components from JSON exports.
* Repository actions now require permission on every component sharing the affected repository, including linked components in other projects.
* Legal document confirmation now explicitly covers the linked privacy policy. See [Legal module](https://docs.weblate.org/pt-br/latest/admin/optionals.md#legal).
* Add-on change history now retains only explicitly public configuration values and marks changed credential fields as redacted.
* Translator work reports with metrics can now be displayed and downloaded as HTML.
* Repository credentials are now consistently hidden from web and API output.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

### Colaboradores

Contribuições ao código
: Michal Čihař, i4i, Alafi, Kartik Ohri

Contribuições de tradução
: Yuri Chornoivan, hoanghuy309, goeran, peterxy, Ldm Public, António Oliveira, CYAXXX, Aindriú Mac Giolla Eoin, Valeria Sofia Azañero, DocNoc, Libre, MrLeaves, Matt P, Yaron Shahrabani, VfBFan, Lee Vincent, Michal Čihař, Andrei Stepanov, cat, Любомир Василев, Artyom Rybakov, Matthaiks, reducedradius, Peter Vančo, Steve, Anmoll Gupta, justcontributor, Besnik Bleta

Contribuições para a documentação
: Michal Čihař, i4i, Kartik Ohri

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/171?closed=1).

# Weblate 2026.8

*Released on August 3rd 2026.*

### Novas funcionalidades

* Added a Show all columns in lists using horizontal scrolling preference to keep all listing columns visible on narrow screens instead of hiding them.
* [Workspaces](https://docs.weblate.org/pt-br/latest/admin/workspaces.md#workspaces) now provide aggregate translation statistics and historical metrics, a permission-filtered My workspaces list, archive downloads, search and replace, upload guidance, workspace translation memory management, and [removal of empty workspaces](https://docs.weblate.org/pt-br/latest/admin/workspaces.md#workspace-removal) not associated with billing.
* Added [project-level translation metrics](https://docs.weblate.org/pt-br/latest/devel/integration.md#monitoring-translation-progress) in JSON, CSV, and OpenMetrics formats.
* Added opt-in [Sample configuration to start Granian with ASGI](https://docs.weblate.org/pt-br/latest/admin/install.md#running-granian-asgi) deployment support, including [`WEBLATE_ASGI`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_ASGI) for Docker containers and asynchronous machine translation editor, GitHub App connection, and repository refresh requests.
* Added grouped project and workspace Diagnostics views with state, severity, category, and actionable-by-user filters. Component diagnostics now track dismissal ownership, reopen after relevant changes, and notify only project maintainers who can act on warnings and errors.
* Added API endpoints for listing, adding, accepting, rejecting, and voting on translation suggestions.
* [Translation reports](https://docs.weblate.org/pt-br/latest/devel/reporting.md) are now generated in the background, stored for later download, available at workspace scope, and include translator work analysis.
* Added Use keywords exclusively option to [Atualizar arquivo POT (xgettext)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext), allowing projects to disable xgettext default keywords and rely only on a custom keyword.
* Added API support for reading and updating [Perfil do usuário](https://docs.weblate.org/pt-br/latest/user/profile.md#user-profile) preferences. See [Usuários](https://docs.weblate.org/pt-br/latest/api.md#api-users) endpoint.
* Added [Maximum number of lines](https://docs.weblate.org/pt-br/latest/user/checks.md#check-max-lines) and [AsciiDoc markup](https://docs.weblate.org/pt-br/latest/user/checks.md#check-asciidoc-markup) quality checks for limiting the number of translation lines and validating AsciiDoc strings.
* Added [Limiting translation languages](https://docs.weblate.org/pt-br/latest/workflows.md#workflow-language-restrictions), including per-language control for restricting direct translation editing to privileged users.
* Added support for legacy Qt Linguist TS version 1 files. See [.ts de Qt Linguist](https://docs.weblate.org/pt-br/latest/formats/qt.md#qtling).
* Weblate is now available in Lao language.

### Melhorias

* Authenticated web-action rate-limit lockouts are now recorded in the [Activity](https://docs.weblate.org/pt-br/latest/user/profile.md#audit-log) with the affected scope and request path.
* OpenMetrics API responses now include metric metadata and a versioned content type.
* Add-on management now uses separate configuration, logs, and components tabs, while [activity logs](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-activity-logging) distinguish pending, successful, failed, and skipped executions and explain skipped executions.
* Expanded [Eventos de alteração selecionados](https://docs.weblate.org/pt-br/latest/admin/addons.md#change-actions) documentation with detailed event semantics and improved OpenAPI schema accuracy.
* Improved loading performance for multi-language matrix views, dashboard component lists, category histories, and shared component listings.
* Translation memory management now loads origin summaries more efficiently, shows active and pending entry counts, and reports the number of entries processed during import.
* Static assets now use content-hashed filenames, and CAPTCHA JavaScript is loaded only when needed.
* [Amazon Translate](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-aws) machine translation now supports configuring formality, brevity, and profanity masking.
* Improved [Screenshots and visual context](https://docs.weblate.org/pt-br/latest/admin/translating.md#screenshots) OCR reliability and error reporting when downloading recognition data.
* Repository failure alerts now link directly to component version control settings for users who can edit them, keep technical errors in English, and localize actionable diagnoses for each viewer, including GitHub pull request restrictions.
* Celery workers now prefetch fewer tasks by default to reduce memory usage and improve task distribution.
* Improved the recommended [Sample configuration to start Granian](https://docs.weblate.org/pt-br/latest/admin/install.md#running-granian) configuration and Docker container worker resilience for Weblate’s WSGI workload.
* Deployment checks now detect corrupted PostgreSQL relation statistics.
* [Community diagnostics](https://docs.weblate.org/pt-br/latest/devel/alerts.md#alerts) now show source-string screenshot coverage, recommend key translation-instruction topics, and distinguish inbound from outbound repository automation.
* User-provided links, such as those in comments, announcements, and profiles, are now underlined and use a higher contrast color.

### Correções de erros

* [Disabling password authentication](https://docs.weblate.org/pt-br/latest/admin/access.md#site-wide-user-management) from site-wide user management now regenerates the user’s personal API key by default.
* Category, project, and comment statistics now stay consistent after component topology and comment changes, and category metrics are collected correctly.
* Mercurial repository filenames beginning with a dash are now handled safely.
* URLs containing backslashes are now rejected as invalid.
* Protected outbound HTTP and Git connections now bind to validated public addresses; protected Git operations fail closed when clients cannot enforce that binding ([GHSA-45m9-pf98-8jmq](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-45m9-pf98-8jmq)).
* Permanent same-host Git HTTP redirects are now validated and stored as canonical component repository URLs.
* Self-service REST API e-mail changes are now restricted to verified addresses ([GHSA-x84p-6892-473c](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-x84p-6892-473c)).
* REST API authorization now consistently protects internal accounts, restricted components, add-on configuration, component sharing, repository links, and review states.
* [Project backup imports](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) now validate restored data before creating project state, skip repository-linked components the importer cannot access, and no longer load archive-supplied Mercurial configuration or shared-repository indirection ([GHSA-f66g-8pcg-jm8r](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-f66g-8pcg-jm8r), [GHSA-327h-qqgm-qv55](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-327h-qqgm-qv55)).
* Rebuilding project translation memory no longer removes entries imported from files.
* Suggestion submission and rejection now reject excessively long suggestion text and rejection reasons.
* Restricted components are now available on Hosted Weblate when the billing plan permits private projects.
* Machine translation and translation memory AJAX lookups no longer disclose whether inaccessible unit IDs exist.
* [RSS feeds](https://docs.weblate.org/pt-br/latest/api.md#rss) no longer disclose change history from inaccessible projects or restricted components ([GHSA-vvc6-wvqm-w5gc](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vvc6-wvqm-w5gc)).
* Authenticated legacy GitHub App webhooks can again trigger repository updates through the [generic GitHub webhook endpoint](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-notifications).

### Compatibilidade

* django-compressor is no longer used, and the `COMPRESS_*` settings have been removed.
* Legal document styling is now provided through an overridable template instead of Weblate’s global stylesheet. See [Customizing legal documents and styles](https://docs.weblate.org/pt-br/latest/admin/optionals.md#legal-customization).
* When [`VCS_RESTRICT_PRIVATE`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_RESTRICT_PRIVATE) is enabled, Mercurial and Subversion repository hosts must be explicitly included in [`VCS_ALLOW_HOSTS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-VCS_ALLOW_HOSTS); Git over HTTPS and SSH enforces connection address pinning without an allowlist entry.
* Outbound HTTP proxy configuration is limited to the per-protocol environment variables documented in [Proxy HTTP](https://docs.weblate.org/pt-br/latest/admin/install.md#http-proxy).
* Git SSH validates configured `HostName` and `Port` destinations before connecting; administrator SSH configuration remains trusted, and [`SSH_EXTRA_ARGS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-SSH_EXTRA_ARGS) can override connection routing and address pinning.
* Git LFS object transfers are unsupported and disabled for Weblate-managed repositories; LFS-tracked files remain pointer files.
* The project and component `credits` REST API endpoints and their `credits_url` response fields have been replaced by scoped `reports` endpoints and `reports_url`. Credits report generation is now asynchronous; clients need to submit a `credits` report, follow the returned task URL, and fetch the completed report. See [`POST /api/reports/`](https://docs.weblate.org/pt-br/latest/api.md#post--api-reports-).
* The top-level `languages` field on user REST API responses has been removed; use `profile.languages` instead. See [Perfil do usuário](https://docs.weblate.org/pt-br/latest/api.md#api-user-profile).

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* There are changes in `settings_example.py`, most notably the new `STORAGES` configuration and removal of the `COMPRESS_*` settings; please adjust your settings accordingly.
* Running **weblate compress** is no longer necessary; **weblate collectstatic --noinput** now prepares versioned static assets without clearing the static storage.
* NumPy is now a required dependency; review the updated [hardware requirements](https://docs.weblate.org/pt-br/latest/admin/install.md#hardware) before upgrading.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Nikunj Tyagi, Weblate CI, Shweta Singh, Gersona, Giacomo La Serra, Kartik Ohri, mmustafasenoglu, Mustafa Senoğlu, “Emmanuelle Bonnemay”, Nicolas Lepage, “Guillaume Lagorce”, “Jérémie Jadé”, “Matthias le Coach”, Любомир Василев, Spyder

Contribuições de tradução
: António Oliveira, hoanghuy309, reducedradius, Michal Čihař, Andrei Stepanov, 為什麼不加空格, BoneNI, Любомир Василев, Adam Havránek, Libre, Horus68, Peter Vančo, Aindriú Mac Giolla Eoin, Matthaiks, VfBFan, Ldm Public, Mickaël Binos, Lee Vincent, Dick Groskamp, Rafael Fontenelle, Justin Parrot, Valeria Sofia Azañero, Priit Jõerüüt, Frank Paul Silye, goeran, Abduqadir Abliz, Arif Budiman, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Aniwene Madolomani, Pierfrancesco Passerini, Andi Chandler, Thunderstrike116, Giacomo La Serra, Ulrik, Cyborus, PPNplus, justcontributor, AlexYang, Kyotaro Iijima, Rajkumar Ramadoss, Yuri Chornoivan, DocNoc, Anucha Hlownonkor, Milo Ivir, Alexander Gabilondo, mbutsk, Oğuz Ersen, nautilusx, Yago Raña Gayoso, Blueberry, Yoshihoko, suyeon kim, Azharul Haque, win7guru, Matt P, Miguel A. Bouzada

Contribuições para a documentação
: Michal Čihař, Nikunj Tyagi, Shweta Singh, Gersona, Giacomo La Serra, Weblate CI, Kartik Ohri, Karen Konou, mmustafasenoglu, Mustafa Senoğlu, Robert Wolff

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/167?closed=1).

# Weblate 2026.7.1

*Released on July 10th 2026.*

### Novas funcionalidades

* Added [`INTERNAL_BOT_EMAIL_TEMPLATE`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-INTERNAL_BOT_EMAIL_TEMPLATE) to customize internal bot e-mail addresses.

### Melhorias

* Restricted components now show a status icon in component listings.
* Permission checks now reuse materialized team membership data from lightweight relation lookups.
* Documented that intermediate language files are hidden from language listings and can make target strings read-only.
* Component diagnostics now warn when regular [GNU gettext PO (Objeto Portátil)](https://docs.weblate.org/pt-br/latest/formats/gettext.md#gettext) PO files are configured as monolingual PO files.
* Translation memory fuzzy lookups are now faster on large translation memories.
* Permission denied messages when saving translations, editing glossaries, or voting on suggestions now show more specific reasons.
* Comment notifications for strings you translated now also include strings you previously commented on or suggested translations for.
* Comments and suggestions now auto-watch the project when Automatically watch projects on contribution is enabled.
* Clarified Hosted Weblate repository access guidance in [Code-hosting integrations](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md).
* [Buscando textos](https://docs.weblate.org/pt-br/latest/user/search.md#search-strings) now includes filters for comments by the current user and separate source string comment lookups.
* Code-hosting account pages now consistently use Code-hosting connections and provider-neutral connected account wording.
* [Discover do Weblate](https://docs.weblate.org/pt-br/latest/admin/support.md#discover-weblate) registration can now be started from the management interface without manually copying the activation token.
* [Discover do Weblate](https://docs.weblate.org/pt-br/latest/admin/support.md#discover-weblate) can now be managed from a dedicated management panel, registration starts with discovery enabled, and protected projects are included in the listing.
* Updated the [OpenAI](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-openai), [Mistral](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-mistral), and [Anthropic](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-anthropic) model lists for currently supported models.

### Correções de erros

* Filtered translation and zen navigation now reuse a stable session result list, keeping positions and counts stable after translated strings leave the filter.
* Component priority icons are no longer shown on translation listings.
* [Espaçamento de pontuação](https://docs.weblate.org/pt-br/latest/user/checks.md#check-punctuation-spacing) no longer flags Markdown image markers as French punctuation and now shows which punctuation marks triggered the check.
* [Mensagens do Fedora](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-fedora-messaging-publish) received several reliability fixes.
* The Things to check panel no longer uses error highlighting for suggestions and other non-error translation states.
* Translation workflow customization now makes it clearer when per-language workflow settings are disabled until customization is enabled.
* Anonymous user permission caches are now isolated between requests.
* GitHub App setup now explains that a workspace is required instead of showing a permission error when no workspace exists.
* LLM automatic suggestion settings no longer show `null` for empty language-specific instructions.
* File format feature tables now better match actual format support, including descriptions, context, plural metadata, obsolete string removal, specialized file extensions, and merged variants.
* Accepting a project invitation now automatically adds the project to the user’s watched projects.
* Dismissing a failing check no longer shows a JSON parsing error in the translation editor.
* Screenshot searches without an explicit field now match screenshot names only, and the search box links to the full screenshot search documentation.
* Anonymous and internal bot accounts can no longer be edited through generic user management.
* LLM machine translation suggestions now recover from more malformed structured JSON replies.
* Azure AI Translator settings now reject malformed region names before validating service connectivity.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* Weblate now requires the PostgreSQL `btree_gist` extension for translation memory lookups. The migration installs it automatically when the database user has sufficient privileges. Installations using a non-superuser database user should pre-create it before upgrading; see [Criando um banco de dados no PostgreSQL](https://docs.weblate.org/pt-br/latest/admin/install.md#dbsetup-postgres).

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Weblate CI, Benjamin Alan Jamie, Kartik Ohri

Contribuições de tradução
: Michal Čihař, António Oliveira, 大学没毕业, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), hoanghuy309, Libre, VfBFan, Peter Vančo, Jim Kats, ButterflyOfFire, Kiên Trần Trung, skittles poopy, Ulrik, Horus68, Mickaël Binos, Adam Havránek

Contribuições para a documentação
: Michal Čihař, mayank-dev-15, Benjamin Alan Jamie

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/170?closed=1).

# Weblate 2026.7

*Released on July 1st 2026.*

### Novas funcionalidades

* Added [Safe MDX](https://docs.weblate.org/pt-br/latest/user/checks.md#check-safe-mdx), [Tamanho do texto fonte](https://docs.weblate.org/pt-br/latest/user/checks.md#check-source-max-length), and [Accelerator key](https://docs.weblate.org/pt-br/latest/user/checks.md#check-accelerator) quality checks for [MDX files](https://docs.weblate.org/pt-br/latest/formats/mdx.md#mdx) JSX expressions, source length limits, and accelerator key consistency.
* Added [Mistral](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-mistral) machinery integration for Mistral LLM automatic suggestions.
* Added [Registering the GitHub App from Weblate](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-github-app-register) for connecting GitHub repositories through a Weblate GitHub App.
* [Backups de nível de projeto](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) backups can now be created and downloaded via the [API REST do Weblate](https://docs.weblate.org/pt-br/latest/api.md#api).
* Added file format parameters for translating individual YAML front matter values in [Arquivos de Markdown](https://docs.weblate.org/pt-br/latest/formats/markdown.md#markdown) and [MDX files](https://docs.weblate.org/pt-br/latest/formats/mdx.md#mdx) files and escaping formula-like values in [Arquivos CSV](https://docs.weblate.org/pt-br/latest/formats/csv.md#csv) files.
* Added an option to capitalize the text in status badge widgets.
* Added [workspace translation memory](https://docs.weblate.org/pt-br/latest/admin/memory.md#memory-scopes) with asynchronous scope backfill for existing translation memory entries.
* Added [`analyze_translator_work`](https://docs.weblate.org/pt-br/latest/admin/management.md#weblate-admin-analyze_translator_work) to estimate realistic daily translator throughput from change history.

### Melhorias

* RTL editing and translation display now handle bidirectional text better, including Unicode isolate controls in the [Teclado visual](https://docs.weblate.org/pt-br/latest/user/translating.md#visual-keyboard).
* Management interface access control is now more fine-grained with dedicated site-wide permissions.
* Default commit and merge request message templates now use Conventional Commits, settings forms can restore installation defaults, and pull request messages use a compact language progress matrix.
* Documented [Legal module](https://docs.weblate.org/pt-br/latest/admin/optionals.md#legal) customizations and added options to hide legal pages or disable document numbering.
* Expanded [security documentation](https://docs.weblate.org/pt-br/latest/security/index.md) for data residency, EU cloud sovereignty, release artifacts, supported versions, release verification, SBOMs, dependency handling, vulnerability reporting, hosted-service incident response, and self-hosted operator responsibilities.
* [Atualizar arquivo LINGUAS](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-linguas) better detects `LINGUAS` file presence.
* [Atualizar arquivo POT (xgettext)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext) can now leave the xgettext language blank to let xgettext guess it from source file extensions.
* [Atualizar arquivo POT (xgettext)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-xgettext), [Atualizar arquivo POT (Meson)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-meson), [Atualizar modelo de gettext (Django)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-django), and [Atualizar arquivo POT (Sphinx)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-sphinx) can now keep source locations in generated POT files even when translated PO files omit locations.
* Add-ons installed at higher scopes are now shown on lower-scope add-on pages, and broad-scope add-ons can list affected components with compatibility details.
* [`WEBLATE_ALLOWED_ASSET_SIZE`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_ALLOWED_ASSET_SIZE) is now available in Docker container.
* LLM automatic suggestions now use translated examples, language-specific instructions, richer glossary context, and structured placeholder context for more reliable output.
* Meta descriptions now better match single-project and self-hosted installations.
* Zen mode, filtered searches, nearby strings, translation form submissions, and add-on management pages now load more efficiently on large sites.
* Added [Packaging Weblate for distributions](https://docs.weblate.org/pt-br/latest/admin/install/source.md#distribution-packaging) guidance for distribution maintainers.
* Large component imports now avoid duplicate translation-memory processing.
* [GNU gettext PO (Objeto Portátil)](https://docs.weblate.org/pt-br/latest/formats/gettext.md#gettext) files can now be configured to remove obsolete strings on save, including during repository maintenance.
* [Bulk accepting suggestions](https://docs.weblate.org/pt-br/latest/user/translating.md#suggestions) now confirms the number of affected suggestions, can approve them for reviewers, and processes the acceptance in the background.
* Committing large numbers of pending translations now queues browser requests in the background and avoids duplicate repository commit tasks.
* Change-event notification add-ons can now use presets for translation content events, all events, or selected individual events.
* [Mensagens do Fedora](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-fedora-messaging-publish) now validates secure broker connections and exposes delivery timing and topic prefix settings.
* Component diagnostics now sort entries by severity, color-code severity badges, and show the error count on the Diagnostics tab.
* [Relatório de desempenho](https://docs.weblate.org/pt-br/latest/admin/admin.md#manage-performance) now shows PostgreSQL database disk usage next to server disk usage and warns when the database usage cannot be collected.
* [Relatório de desempenho](https://docs.weblate.org/pt-br/latest/admin/admin.md#manage-performance) now shows PostgreSQL database disk usage next to server disk usage and warns when the database usage cannot be collected or there is not enough free space in the backup destination to store a database dump.
* The [Buscar e substituir](https://docs.weblate.org/pt-br/latest/user/translating.md#search-replace) preview now keeps the search parameters editable so the query can be refined before applying replacements.

### Correções de erros

* [Expressão regular](https://docs.weblate.org/pt-br/latest/user/checks.md#check-regex) and [Espaços reservados](https://docs.weblate.org/pt-br/latest/user/checks.md#check-placeholders) now enforce regular expression timeouts when evaluating source-string flags ([**CVE 2026-62326**](https://www.cve.org/CVERecord?id=CVE-2026-62326), [GHSA-r52j-4vjp-q949](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-r52j-4vjp-q949)).
* Restricted component changes are no longer exposed through nested project, component, or translation API change endpoints ([**CVE 2026-62249**](https://www.cve.org/CVERecord?id=CVE-2026-62249), [GHSA-92m8-wv36-prmx](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-92m8-wv36-prmx)).
* ZIP downloads, including [Arquivos de metadados da App Store](https://docs.weblate.org/pt-br/latest/formats/appstore.md#appstore) translation bundles, no longer follow child symbolic links outside the downloaded tree ([**CVE 2026-61792**](https://www.cve.org/CVERecord?id=CVE-2026-61792), [GHSA-xwj4-fp82-r2rj](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-xwj4-fp82-r2rj)).
* Teams enforcing two-factor authentication now also withhold site-wide permissions from human members without 2FA configured ([**CVE 2026-61790**](https://www.cve.org/CVERecord?id=CVE-2026-61790), [GHSA-x86c-ff69-cr2m](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-x86c-ff69-cr2m)).
* Globally scoped HTML and AJAX object lookups no longer disclose object existence in private projects ([**CVE 2026-55227**](https://www.cve.org/CVERecord?id=CVE-2026-55227), [GHSA-2p9g-x3cv-5hh4](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-2p9g-x3cv-5hh4)).
* Team API access checks now prevent project managers from reading private-project team data or expanding scoped team assignments outside their allowed projects ([**CVE 2026-55228**](https://www.cve.org/CVERecord?id=CVE-2026-55228), [GHSA-2q2q-jr9g-v9rf](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-2q2q-jr9g-v9rf)).
* Malformed `replacements` flags no longer abort source length checks.
* Empty component lists are no longer exposed to users without component list management permission.
* Glossary handling no longer duplicates TBX terms or shows source-language terms in both translation columns.
* Duplicate string alerts now offer a cleanup action to remove repeated strings from translation files.
* [Gerrit review requests](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md#code-hosting-gerrit) review pushes can again include Gerrit push options in the target branch.
* Webhook target fallback matching is now stricter and reported in component diagnostics.
* Creating components linked with `weblate://` no longer waits on the shared repository lock during the request.
* Project and workspace translation license defaults now follow component and project licenses more closely.
* Component and category API `PATCH` requests no longer remove the category when the field is omitted.
* Document and translation-memory uploads now enforce [`TRANSLATION_UPLOAD_MAX_SIZE`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-TRANSLATION_UPLOAD_MAX_SIZE), and API document uploads validate file extensions.
* [Erro de sintaxe reStructuredText](https://docs.weblate.org/pt-br/latest/user/checks.md#check-rst-syntax) now detects inline roles wrapped in stray backticks.
* [HTML inseguro](https://docs.weblate.org/pt-br/latest/user/checks.md#check-safe-html) now efficiently detects changed placeholder-only HTML attribute values in translations.
* [Tamanho máximo da tradução](https://docs.weblate.org/pt-br/latest/user/checks.md#check-max-size) no longer wraps text configured to fit on one line, checks source strings, and refreshes rendered previews after source edits.
* Bitmap widgets and [Tamanho máximo da tradução](https://docs.weblate.org/pt-br/latest/user/checks.md#check-max-size) previews now use Matplotlib and no longer require Pango, Cairo, librsvg, or GObject Introspection.
* Repository reset and update history now keeps attribution, records remote update failures, and includes follow-up translation-file reconciliation.
* Updating repository URLs now validates compatible Git history without requiring an immediate successful merge.
* [Tradução automática](https://docs.weblate.org/pt-br/latest/user/translating.md#auto-translation) no longer validates hidden component fields when using machine translation.
* Strings marked for edit links now include all strings needing editing, checking, or rewriting.
* Anonymous permission checks no longer fail when loading teams scoped to projects or workspaces.
* API project creation can again use the user’s only eligible workspace when no explicit workspace is supplied.
* Git auto-maintenance is now disabled for Weblate-managed repositories to avoid concurrent detached maintenance jobs.
* Interrupted Git repository operations are now either recovered and recorded or surfaced as a repository alert.
* Watched translations on the dashboard now include category path segments.
* Unsupported upload levels now show an upload placeholder pointing to individual translations.
* Component API responses no longer expose repository export, push branch, or repository browser links to users without repository access.

### Compatibilidade

* [DeepL](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-deepl) now handles DeepL API versions internally, uses v3 for glossary management and language discovery, and no longer supports DeepL API v1.
* [Mensagens do Fedora](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-fedora-messaging-publish) topics now include category path segments, and broker settings are stored as an AMQP URL with existing host and SSL settings migrated automatically.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* There are changes in `settings_example.py`, most notably in `SOCIAL_AUTH_PIPELINE` and `SOCIAL_AUTH_DISCONNECT_PIPELINE`; please adjust your settings accordingly.
* Existing translation-memory entries are moved to scoped storage by a periodic Celery background task. Keep Celery running after the upgrade; translation-memory suggestions can be incomplete until the backfill finishes.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Weblate CI, michael-smt, Samuel Gomes, Dinis Sales, Gersona, Harsha C, Kartik Ohri, Besnik Bleta, fahadhewad

Contribuições de tradução
: Dick Groskamp, Michal Čihař, 為什麼不加空格, VfBFan, Любомир Василев, 이정희, Aindriú Mac Giolla Eoin, Yaron Shahrabani, jiahaisheng, Horus68, Andrei Stepanov, Martin Srebotnjak, Peter Vančo, Hotripak, 大王叫我来巡山, Milo Ivir, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Mickaël Binos, Besnik Bleta, Frank Paul Silye, Matthaiks, abd sak, Hoseok Seo, Fulup Jakez, Gaël TISSERAND (Gtisseran), Azamat Аituganov, Mahirə Həsənova, Pierfrancesco Passerini, Libre, Mohamed Aymane Farhi, Júlia Rosell Saldaña, پرویز قادر, Jim Kats, Miguel A. Bouzada, Manuela Silva, reducedradius, Hanssium, Uh idk, Arif Budiman, Feike Donia, Zahid Rizky Fakhri, Emin Tufan Çetin, ojppe, தமிழ்நேரம், António Oliveira, Rumuz AGO, justcontributor, Flynn, Ștefan Zaharia, Nozomu Matsui, H-Media, Ecron, Weblate CI, Balázs Meskó, Fjuro, goeran, Adam Havránek, Priit Jõerüüt, Astrid Høie Silden, Alan S. Muhammed (Alan Kurdish), hoanghuy309, Yamin Siahmargooei, MeahNunh, Kartik Ohri, Valeria Sofia Azañero, Tuomas Hietala, Rafael Fontenelle, Yuri Chornoivan, AWwue-work, Kristoffer Grundström, ssantos, Andi Chandler, Ldm Public, Alc4Traz45, Szafranek13, hms5232, Victor K, 大学没毕业

Contribuições para a documentação
: Michal Čihař, michael-smt, Karen Konou, Gersona, Weblate CI, Kartik Ohri, Besnik Bleta, fahadhewad, Harsha C

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/166?closed=1).

# Weblate 2026.6.1

*Released on June 1st 2026.*

### Correções de erros

* Language-wide [Novidades](https://docs.weblate.org/pt-br/latest/admin/announcements.md) no longer break language overview pages.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

### Colaboradores

Contribuições ao código
: Michal Čihař

Contribuições para a documentação
: Michal Čihař

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/169?closed=1).

# Weblate 2026.6

*Released on June 1st 2026.*

### Novas funcionalidades

* [Novidades](https://docs.weblate.org/pt-br/latest/admin/announcements.md) can now also be managed via the [API REST do Weblate](https://docs.weblate.org/pt-br/latest/api.md#api) for specific project languages.
* Team memberships can now be limited to selected languages for per-user translation permissions.
* Added [cost estimates](https://docs.weblate.org/pt-br/latest/devel/reporting.md#cost-estimate) to translation reports.
* Added optional [OpenTelemetry tracing](https://docs.weblate.org/pt-br/latest/admin/install.md#collecting-errors) for backend requests and tasks, and [Google Cloud Error Reporting](https://docs.weblate.org/pt-br/latest/admin/install.md#collecting-errors) for handled server errors.
* Added [Workspaces](https://docs.weblate.org/pt-br/latest/admin/workspaces.md) to group related projects, with workspace project listings, workspace-scoped teams and project creation permissions, inherited workspace, project, and category defaults for selected component settings, and billing details when available.

### Melhorias

* Docker containers can now configure [`WEBLATE_SAML_SECURITY_CONFIG`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_SAML_SECURITY_CONFIG) to customize SAML security settings, and adjust [`WEBLATE_FORMATS`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-WEBLATE_FORMATS) using [`WEBLATE_ADD_FORMATS`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_ADD_FORMATS) and [`WEBLATE_REMOVE_FORMATS`](https://docs.weblate.org/pt-br/latest/admin/install/docker.md#envvar-WEBLATE_REMOVE_FORMATS).
* Improved performance of the [Inconsistente](https://docs.weblate.org/pt-br/latest/user/checks.md#check-inconsistent) check on large projects.
* Translation flag fields now use a tag-based editor with autocompletion and grouped suggestions for all known flags.
* [Contributor stats](https://docs.weblate.org/pt-br/latest/devel/reporting.md#stats) now de-duplicate repeated work on the same string by default, with an option to count all changes.
* [Code-hosting integrations](https://docs.weblate.org/pt-br/latest/admin/code-hosting.md) now documents HTTPS access-token URLs and dedicated-user SSH URLs for accessing repositories, and [Tradução contínua](https://docs.weblate.org/pt-br/latest/admin/continuous.md) now explains why squash merging Weblate conflict-resolution pull requests can require a repository reset.
* [Translation component diagnostics](https://docs.weblate.org/pt-br/latest/devel/alerts.md#alerts) now include dismissible component diagnostics for community localization.
* [Screenshots and visual context](https://docs.weblate.org/pt-br/latest/admin/translating.md#screenshots) now support bulk assignment from search or image text recognition results, make finding strings in uploaded images easier to discover, show source string coverage counts, and include advanced listing search.
* [Lista de materiais de software](https://docs.weblate.org/pt-br/latest/security/release-artifacts.md#sbom) release artifacts now include CISA 2025 document-level metadata.

### Correções de erros

* Outbound URL validation now rejects additional non-public targets ([**CVE 2026-50127**](https://www.cve.org/CVERecord?id=CVE-2026-50127), [GHSA-vmfc-9982-2m45](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vmfc-9982-2m45)).
* Project-language [Novidades](https://docs.weblate.org/pt-br/latest/admin/announcements.md) no longer appear across the whole project.
* Hardened [`POST /api/screenshots/`](https://docs.weblate.org/pt-br/latest/api.md#post--api-screenshots-) access checks against private project enumeration.
* Registration-attempt account activity e-mails now link to password reset to help users finish account setup.
* [Convidando novos usuários](https://docs.weblate.org/pt-br/latest/admin/access.md#invite-user) links now work for signed-in users whose account owns the invited e-mail address.
* Searching for strings with content changes without a recorded author now supports `changed_by:""`, and combined change filters now apply to the same change event.
* Gitea and Forgejo pull requests no longer reconfigure existing fork remotes to point to the source repository.
* Project and category language translation sessions now keep strings grouped by component priority and show component switch warnings reliably.
* Engage page task links now stay centered and show the target translation language.
* Gettext POT update add-ons now rescan translations after committing updated POT and PO files.
* Git repositories now update branches correctly when the remote also has a tag with the same name.
* Conflicting repository setup alerts now allow same-branch direct pushes.
* Obsolete cleanup schedules are now removed from Celery beat during upgrade.
* Translation pages for workspace projects no longer crash when workspace fields are deferred.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* There is a change in [`INSTALLED_APPS`](https://docs.djangoproject.com/pt-br/stable/ref/settings/#std-setting-INSTALLED_APPS); `weblate.workspaces` should be added.
* The database migrations might take longer on larger instances.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, Weblate CI, Basheer Radman, michael-smt, Kristián Kunc, felixfon

Contribuições de tradução
: Michal Čihař, VfBFan, 大王叫我来巡山, Emin Tufan Çetin, Basheer Radman, 為什麼不加空格, Peter Vančo, Christian Wia, Любомир Василев, Matthaiks, Andrei Stepanov, Libre, Besnik Bleta, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Balázs Meskó, Aindriú Mac Giolla Eoin, Adam Havránek, Dick Groskamp, Arif Budiman, Mickaël Binos, Ryo Nakano, hoanghuy309, Pierfrancesco Passerini, Alefsander Ribeiro Nascimento, Massimo Pissarello, justcontributor, 이정희, Cabdi Waaxid Siciid, Yaron Shahrabani, User2068, Kyotaro Iijima, pan93412, jernejp21, libermax, Phileas Fogg, Fjuro, Jim Kats, Fulup Jakez, Priit Jõerüüt, Ldm Public, Andi Chandler, Burak SDN, ojppe

Contribuições para a documentação
: Michal Čihař, VfBFan, Basheer Radman, Weblate CI, michael-smt, felixfon

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/165?closed=1).

# Weblate 2026.5

*Released on May 15th 2026.*

### Novas funcionalidades

* Added [MDX files](https://docs.weblate.org/pt-br/latest/formats/mdx.md#mdx) support for translating Markdown text while preserving JSX syntax, with [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) shared with [Arquivos de Markdown](https://docs.weblate.org/pt-br/latest/formats/markdown.md#markdown) for line wrapping, code blocks, front matter, and placeholder handling.
* Added extended [LLM translation context](https://docs.weblate.org/pt-br/latest/admin/machine.md#llm-translation-context) for automatic suggestions, covering string context, explanations, secondary-language translations, plurals, failing checks, and placeholders.
* Added a digest-only translation activity summary notification, see [Notificações](https://docs.weblate.org/pt-br/latest/user/profile.md#notifications).
* [CSV](https://docs.weblate.org/pt-br/latest/formats/csv.md#csv) and [XLSX](https://docs.weblate.org/pt-br/latest/formats/excel.md#xlsx) downloads in [Baixando traduções](https://docs.weblate.org/pt-br/latest/user/files.md#download) now export plural strings as separate plural-form rows that can be imported back.
* Added Gettext PO and POT [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) to control whether Weblate updates the `Language-Team`, `Last-Translator`, `X-Generator`, and `Report-Msgid-Bugs-To` headers.
* Added a [backup](https://docs.weblate.org/pt-br/latest/admin/management.md#backup-management-command) to run configured backup services synchronously.
* The translation memory lookup API can now skip fuzzy matching with the `exact` query parameter.
* Added [CDN de arquivos de tradução](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-cdn-files) to publish translation files to the configured CDN.

### Melhorias

* Using DOS line endings can now be configured using the `dos_eol` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params).
* [OpenAI](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-openai) and [Alibaba](https://docs.weblate.org/pt-br/latest/admin/machine.md#mt-alibaba) no longer require their vendor Python SDKs.
* Audited project and component setting changes are now recorded in history.
* Gerrit review pushes now use [Ramo do push](https://docs.weblate.org/pt-br/latest/admin/projects.md#component-push-branch) as the target branch.
* Weblate now checks whether [`CACHE_DIR`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-CACHE_DIR) allows executing generated helper files.
* The [Lista de materiais de software](https://docs.weblate.org/pt-br/latest/security/release-artifacts.md#sbom) is now generated during release and published as a versioned release asset instead of being stored in the source repository.
* The translating page now separates screenshots from string information, collapses rarely used string details, and groups glossary and screenshot actions more consistently.
* Project access management now paginates users and better explains site-wide automatic team assignments.
* Added provider-oriented code-hosting documentation and Gettext-style [Fórmula de plural](https://docs.weblate.org/pt-br/latest/admin/languages.md#plural-formula) guidance.
* The Python wheel no longer ships source translation catalogs, test files, or deployment example files, reducing the installed package size.
* The engage page now highlights actionable translation task buckets for newcomers.
* [RSS feeds](https://docs.weblate.org/pt-br/latest/api.md#rss) can now use the same filters as the changes browsing page.
* [Atualizar modelo de gettext (Django)](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-gettext-django) now supports gettext PO files used as templates when they are excluded by the language filter.
* Reworked [Weblate threat model](https://docs.weblate.org/pt-br/latest/security/threat-model.md) into a contract-style document.

### Correções de erros

* Hardened search previews and [Sugestões automáticas](https://docs.weblate.org/pt-br/latest/user/translating.md#machine-translation) suggestion origins against XSS, and stopped exposing database error details in upload failures ([**CVE 2026-45106**](https://www.cve.org/CVERecord?id=CVE-2026-45106) / [GHSA-6wxc-8mgq-w26m](https://github.com/WeblateOrg/weblate/security/advisories/GHSA-6wxc-8mgq-w26m)).
* Screenshot URL uploads, remote HTML extraction in [CDN de localização do JavaScript](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-cdn-cdnjs), and URL health-check redirects now reject internal or non-public targets by default.
* Gerrit review pushes now reject target branches containing push options, track the target branch before invoking `git-review`, and suggest short branch names when full refs are supplied.
* Category [Novidades](https://docs.weblate.org/pt-br/latest/admin/announcements.md) no longer appear across the whole project, and translation announcement deletion now honors language-scoped permissions.
* Merge request pushes now refresh stale fork remotes after changing repository hosting.
* Plural counts parsed from translation file headers are now bounded, and plural formulas are rejected when they can evaluate outside the configured plural form range.
* [Tokens de acesso por projeto](https://docs.weblate.org/pt-br/latest/admin/access.md#project-api) expiring today now remain valid until the end of the day.
* Malformed ALTCHA CAPTCHA submissions and repository URLs in webhook payloads no longer cause server errors.
* [Espaços reservados](https://docs.weblate.org/pt-br/latest/user/checks.md#check-placeholders) now merges overlapping non-nested spans from multiple flags.
* [Fazendo backup e movendo o Weblate](https://docs.weblate.org/pt-br/latest/admin/backup.md#backup) logs no longer include OpenSSH post-quantum key exchange warnings from remote Borg connections.
* Category repository paths are now handled more safely during cleanup and moves.
* Locked component pages now show an unsubscribe action after subscribing to unlock notifications.
* [Backups de nível de projeto](https://docs.weblate.org/pt-br/latest/admin/backup.md#projectbackup) imports now restore in the background to avoid web worker memory limits.

### Compatibilidade

* The `dos-eol` flag is no longer supported. Use the `dos_eol` [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params) instead.
* The registration CAPTCHA now uses the ALTCHA widget v3 protocol with Argon2id proof-of-work.
* The `set_language_team` project attribute has been replaced with the `po_set_language_team` file format parameter at the component level; see [Parâmetros de formato de arquivo](https://docs.weblate.org/pt-br/latest/formats.md#file-format-params).
* Weblate now uses calendar versioning for releases, see [Release cycle](https://docs.weblate.org/pt-br/latest/security/releases.md#release-cycle).
* Weblate now uses stricter dependency version constraints to better control runtime environment.

### Atualização

Siga as [Instruções genéricas de atualização](https://docs.weblate.org/pt-br/latest/admin/upgrade.md#generic-upgrade-instructions) para realizar a atualização.

* The `ALTCHA_MAX_NUMBER` setting has been replaced by [`ALTCHA_COST`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-ALTCHA_COST), [`ALTCHA_MEMORY_COST`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-ALTCHA_MEMORY_COST), and [`ALTCHA_PARALLELISM`](https://docs.weblate.org/pt-br/latest/admin/config.md#std-setting-ALTCHA_PARALLELISM); please adjust your settings accordingly.
* The upgrading policy was changed, and upgrades are only supported from the current or previous calendar year.
* The `COMMENT_CLEANUP_DAYS` and `SUGGESTION_CLEANUP_DAYS` settings are migrated once to site-wide [Remoção de comentário obsoleto](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-removal-comments) and [Remoção de sugestão obsoleta](https://docs.weblate.org/pt-br/latest/admin/addons.md#addon-weblate-removal-suggestions) add-ons; configure those add-ons instead.

### Colaboradores

Contribuições ao código
: Michal Čihař, Karen Konou, AliceVisek, Gersona, Weblate CI

Contribuições de tradução
: 이정희, Andrei Stepanov, Milo Ivir, ssantos, 大王叫我来巡山, Kaya Zeren, reducedradius, Peter Vančo, amano, Michal Čihař, Anucha Hlownonkor, Yaron Shahrabani, UDP, Максим Горпиніч, Agnieszka C, VfBFan, Blueberry, ojppe, Francisco Serrador, Aindriú Mac Giolla Eoin, Fjuro, Любомир Василев, Frank Paul Silye, Temuri Doghonadze, Yuri Chornoivan, Sergio Granadoz, Sketch6580, Hyeonjeong Lee, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), justcontributor, Kristijan "Fremen" Velkovski, Pierfrancesco Passerini, Besnik Bleta, Arif Budiman, Andi Chandler, jernejp21, Manuela Silva, Sjur N Moshagen, Abduqadir Abliz, Laitei, Кирилл Ванин, Matthaiks, Nozomu Matsui, Dick Groskamp, MrZwave, hoanghuy309, Jim Spentzos, Adam Havránek, Ricky Tigg, Christian Wia, ButterflyOfFire

Contribuições para a documentação
: Michal Čihař, Gersona, Karen Konou, AliceVisek

[All changes in detail](https://github.com/WeblateOrg/weblate/milestone/162?closed=1).