Weblate 2026.7

Ende pa u hedhur në qarkullim.

New features

  • Added Safe MDX check to ensure that the target string contains the same JSX expressions as the source string for MDX files files.

  • Added Mistral machinery integration for Mistral LLM automatic suggestions.

Improvements

  • Tastierë pamore for RTL languages now includes Unicode isolate controls for better mixed-direction text editing.

  • Management interface access control is now more fine-grained with dedicated site-wide permissions.

  • Default commit and merge request message templates now use Conventional Commits, and settings forms can restore installation defaults for individual message templates.

  • Documented Legal module customizations and added options to hide legal pages or disable document numbering.

  • Expanded Data residency and EU cloud sovereignty with EU cloud sovereignty guidance.

  • Përditëso kartelën LINGUAS better detects LINGUAS file presence.

  • Përditëso kartelën POT (xgettext) can now leave the xgettext language blank to let xgettext guess it from source file extensions.

  • Add-ons installed at higher scopes are now shown on lower-scope add-on pages, and broad-scope add-ons can list affected components with compatibility details.

  • WEBLATE_ALLOWED_ASSET_SIZE is now available in Docker container.

  • LLM automatic suggestions now use translated examples, language-specific instructions, and richer glossary context for more reliable output.

  • Improved bidirectional text handling for RTL translation display and editor previews.

  • Meta descriptions now better match single-project and self-hosted installations.

  • Zen mode now loads large search results and glossary-heavy projects more efficiently.

  • Translate pages with filtered searches and nearby strings now load more efficiently.

  • Translation form submissions now avoid loading complete search result sets when saving strings.

  • Added Packaging Weblate for distributions guidance for distribution maintainers.

  • Expanded security documentation for release artifacts, supported versions, security updates, release verification, SBOMs, and dependency handling.

  • Clarified security metadata, vulnerability reporting, hosted-service incident response, and self-hosted operator responsibilities.

  • Large component imports now avoid duplicate translation-memory processing.

  • GNU gettext PO (Portable Object) files can now be configured to remove obsolete strings on save.

  • Added analyze_translator_work to estimate realistic daily translator throughput from change history.

  • DeepL now handles DeepL API versions internally, uses v3 for glossary management and language discovery, and no longer supports DeepL API v1.

  • Bulk accepting suggestions now confirms the number of affected suggestions, can approve them for reviewers, and processes the acceptance in the background.

Bug fixes

  • Scoped team assignments can no longer be expanded through the API.

  • TBX glossary files no longer duplicate terms when repeated pending add operations are saved.

  • Gerrit review requests review pushes can again include Gerrit push options in the target branch.

  • Webhook target fallback matching is now stricter and reported in component diagnostics.

  • Creating components linked with weblate:// no longer waits on the shared repository lock during the request.

  • Project and workspace translation license defaults now follow component and project licenses more closely.

  • Component and category API PATCH requests no longer remove the category when the field is omitted.

  • Hardened HTML and AJAX object lookups against private project enumeration.

  • Document and translation-memory uploads now enforce TRANSLATION_UPLOAD_MAX_SIZE, and API document uploads validate file extensions.

  • Gabim sintakse reStructuredText now detects inline roles wrapped in stray backticks.

  • Repository reset and update progress now includes follow-up translation-file reconciliation.

  • Përkthim i automatizuar no longer validates hidden component fields when using machine translation.

  • Strings marked for edit links now include all strings needing editing, checking, or rewriting.

  • Anonymous permission checks no longer fail when loading teams scoped to projects or workspaces.

Compatibility

  • Fedora Messaging topics now include category path segments, making categorized same-named components distinguishable.

Upgrading

Please follow Generic upgrade instructions in order to perform update.

Kontribues

All changes in detail.

Weblate 2026.6.1

Released on June 1st 2026.

Bug fixes

  • Language-wide Lajmërime no longer break language overview pages.

Upgrading

Please follow Generic upgrade instructions in order to perform update.

Kontribues

Code contributions

Michal Čihař

Documentation contributions

Michal Čihař

All changes in detail.

Weblate 2026.6

Released on June 1st 2026.

New features

  • Lajmërime can now also be managed via the API REST e Weblate-it for specific project languages.

  • Team memberships can now be limited to selected languages for per-user translation permissions.

  • Added cost estimates to translation reports.

  • Added optional OpenTelemetry tracing for backend requests and tasks, and Google Cloud Error Reporting for handled server errors.

  • Added Hapësira pune to group related projects, with workspace project listings, workspace-scoped teams and project creation permissions, inherited workspace, project, and category defaults for selected component settings, and billing details when available.

Improvements

Bug fixes

  • Outbound URL validation now rejects additional non-public targets (CVE 2026-50127, GHSA-vmfc-9982-2m45).

  • Project-language Lajmërime no longer appear across the whole project.

  • Hardened POST /api/screenshots/ access checks against private project enumeration.

  • Registration-attempt account activity e-mails now link to password reset to help users finish account setup.

  • Inviting new users links now work for signed-in users whose account owns the invited e-mail address.

  • Searching for strings with content changes without a recorded author now supports changed_by:"", and combined change filters now apply to the same change event.

  • Gitea and Forgejo pull requests no longer reconfigure existing fork remotes to point to the source repository.

  • Project and category language translation sessions now keep strings grouped by component priority and show component switch warnings reliably.

  • Engage page task links now stay centered and show the target translation language.

  • Gettext POT update add-ons now rescan translations after committing updated POT and PO files.

  • Git repositories now update branches correctly when the remote also has a tag with the same name.

  • Conflicting repository setup alerts now allow same-branch direct pushes.

  • Obsolete cleanup schedules are now removed from Celery beat during upgrade.

  • Translation pages for workspace projects no longer crash when workspace fields are deferred.

Upgrading

Please follow Generic upgrade instructions in order to perform update.

  • There is a change in INSTALLED_APPS; weblate.workspaces should be added.

  • The database migrations might take longer on larger instances.

Kontribues

Code contributions

Michal Čihař, Karen Konou, Weblate CI, Basheer Radman, michael-smt, Kristián Kunc, felixfon

Kontribute përkthimi

Michal Čihař, VfBFan, 大王叫我来巡山, Emin Tufan Çetin, Basheer Radman, 為什麼不加空格, Peter Vančo, Christian Wia, Любомир Василев, Matthaiks, Andrei Stepanov, Libre, Besnik Bleta, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Balázs Meskó, Aindriú Mac Giolla Eoin, Adam Havránek, Dick Groskamp, Arif Budiman, Mickaël Binos, Ryo Nakano, hoanghuy309, Pierfrancesco Passerini, Alefsander Ribeiro Nascimento, Massimo Pissarello, justcontributor, 이정희, Cabdi Waaxid Siciid, Yaron Shahrabani, User2068, Kyotaro Iijima, pan93412, jernejp21, libermax, Phileas Fogg, Fjuro, Jim Kats, Fulup Jakez, Priit Jõerüüt, Ldm Public, Andi Chandler, Burak SDN, ojppe

Documentation contributions

Michal Čihař, VfBFan, Basheer Radman, Weblate CI, michael-smt, felixfon

All changes in detail.

Weblate 2026.5

Released on May 15th 2026.

New features

  • Added MDX files support for translating Markdown text while preserving JSX syntax, with Parametra formati kartelash shared with Kartela Markdown for line wrapping, code blocks, front matter, and placeholder handling.

  • Added extended LLM translation context for automatic suggestions, covering string context, explanations, secondary-language translations, plurals, failing checks, and placeholders.

  • Added a digest-only translation activity summary notification, see Njoftime.

  • CSV and XLSX downloads in Shkarkim përkthimesh now export plural strings as separate plural-form rows that can be imported back.

  • Added Gettext PO and POT Parametra formati kartelash to control whether Weblate updates the Language-Team, Last-Translator, X-Generator, and Report-Msgid-Bugs-To headers.

  • Added a backup to run configured backup services synchronously.

  • The translation memory lookup API can now skip fuzzy matching with the exact query parameter.

  • Added CDN kartelash përkthimi to publish translation files to the configured CDN.

Improvements

  • Using DOS line endings can now be configured using the dos_eol Parametra formati kartelash.

  • OpenAI and Alibaba no longer require their vendor Python SDKs.

  • Audited project and component setting changes are now recorded in history.

  • Gerrit review pushes now use Degë push as the target branch.

  • Weblate now checks whether CACHE_DIR allows executing generated helper files.

  • The Software Bill of Material is now generated during release and published as a versioned release asset instead of being stored in the source repository.

  • The translating page now separates screenshots from string information, collapses rarely used string details, and groups glossary and screenshot actions more consistently.

  • Project access management now paginates users and better explains site-wide automatic team assignments.

  • Added provider-oriented code hosting documentation and Gettext-style Formulë shumësi guidance.

  • The Python wheel no longer ships source translation catalogs, test files, or deployment example files, reducing the installed package size.

  • The engage page now highlights actionable translation task buckets for newcomers.

  • RSS feeds can now use the same filters as the changes browsing page.

  • Përditëso kartelë gtetext (Django) now supports gettext PO files used as templates when they are excluded by the language filter.

  • Reworked Weblate threat model into a contract-style document.

Bug fixes

  • Hardened search previews and Sugjerime të automatizuara suggestion origins against XSS, and stopped exposing database error details in upload failures (CVE 2026-45106 / GHSA-6wxc-8mgq-w26m).

  • Screenshot URL uploads, remote HTML extraction in CDN përkthimesh JavaScript, and URL health-check redirects now reject internal or non-public targets by default.

  • Gerrit review pushes now reject target branches containing push options, track the target branch before invoking git-review, and suggest short branch names when full refs are supplied.

  • Category Lajmërime no longer appear across the whole project, and translation announcement deletion now honors language-scoped permissions.

  • Merge request pushes now refresh stale fork remotes after changing repository hosting.

  • Plural counts parsed from translation file headers are now bounded, and plural formulas are rejected when they can evaluate outside the configured plural form range.

  • Per-project access tokens expiring today now remain valid until the end of the day.

  • Malformed ALTCHA CAPTCHA submissions and repository URLs in webhook payloads no longer cause server errors.

  • Vendmbajtëse now merges overlapping non-nested spans from multiple flags.

  • Kopjeruajtje dhe zhvendosje e Weblate logs no longer include OpenSSH post-quantum key exchange warnings from remote Borg connections.

  • Category repository paths are now handled more safely during cleanup and moves.

  • Locked component pages now show an unsubscribe action after subscribing to unlock notifications.

  • Project level backups imports now restore in the background to avoid web worker memory limits.

Compatibility

  • The dos-eol flag is no longer supported. Use the dos_eol Parametra formati kartelash instead.

  • The registration CAPTCHA now uses the ALTCHA widget v3 protocol with Argon2id proof-of-work.

  • The set_language_team project attribute has been replaced with the po_set_language_team file format parameter at the component level; see Parametra formati kartelash.

  • Weblate now uses calendar versioning for releases, see Release cycle.

  • Weblate now uses stricter dependency version constraints to better control runtime environment.

Upgrading

Please follow Generic upgrade instructions in order to perform update.

Kontribues

Code contributions

Michal Čihař, Karen Konou, AliceVisek, Gersona, Weblate CI

Kontribute përkthimi

이정희, Andrei Stepanov, Milo Ivir, ssantos, 大王叫我来巡山, Kaya Zeren, reducedradius, Peter Vančo, amano, Michal Čihař, Anucha Hlownonkor, Yaron Shahrabani, UDP, Максим Горпиніч, Agnieszka C, VfBFan, Blueberry, ojppe, Francisco Serrador, Aindriú Mac Giolla Eoin, Fjuro, Любомир Василев, Frank Paul Silye, Temuri Doghonadze, Yuri Chornoivan, Sergio Granadoz, Sketch6580, Hyeonjeong Lee, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), justcontributor, Kristijan "Fremen" Velkovski, Pierfrancesco Passerini, Besnik Bleta, Arif Budiman, Andi Chandler, jernejp21, Manuela Silva, Sjur N Moshagen, Abduqadir Abliz, Laitei, Кирилл Ванин, Matthaiks, Nozomu Matsui, Dick Groskamp, MrZwave, hoanghuy309, Jim Spentzos, Adam Havránek, Ricky Tigg, Christian Wia, ButterflyOfFire

Documentation contributions

Michal Čihař, Gersona, Karen Konou, AliceVisek

All changes in detail.